last executing test programs:

2m40.109548143s ago: executing program 32 (id=11):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000038ba9a7e7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

1m58.233770358s ago: executing program 33 (id=1114):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4871b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)

1m43.944481043s ago: executing program 34 (id=1687):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

1m39.904931583s ago: executing program 35 (id=1802):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100))

1m38.523558949s ago: executing program 36 (id=1842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1m20.947027395s ago: executing program 37 (id=2688):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904"], 0x0)

1m1.159042015s ago: executing program 0 (id=3532):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1m1.134738985s ago: executing program 0 (id=3533):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="620af8ff0c030021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb9245418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000007000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c403973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000db7f348bc87784870ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab7170000000044b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}})
ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'})

1m1.106398494s ago: executing program 0 (id=3535):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4d8, &(0x7f0000000b80)="$eJzs3d9rW9cdAPDvle3ETpzY2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYOwX29Oe9jLYcymU/AmlEGjfSyktoU3Shz60VZF81TiubMuNZSXW5wPH99eRvt8joSOfey66AXSscxExHhFdEXExIgbS/Zm0xPpGqdZ78vjeVLUkUanc+iiJJN1Xf64kXR5PH9YbEb/9dcQfkq/HLa2uzU8WCvnldDtXXljKlVbXLs0tTM7mZ/OL46MjV8eujV0ZG963tl7/5ft///N/f3X9jZ/ceXfiwwt/rKbVnx7b3I5mrDdZb6PpPbXXoq47Ipb3Euwl1pW2p6fdiQAA0JTq//jfiogfRMTTf7U7GwAAAKAVKj/vj8+SiAoAAABwaGVq18AmmWx6LUB/ZDLZ7MY1vN+JY5lCsVT+8UxxZXF641rZwejJzMwV8sPptcKD0ZNUt0dq68+2L2/ZHo2IUxHx14G+2nZ2qliYbvfJDwAAAOgQx7eM/z8Z2Bj/AwAAAIfMYLsTAAAAAFrum43/k+59TwQAAABomW3H/4b4AAAAcBj85saNaqnU7389fXt1Zb54+9J0vjSfXViZyk4Vl5eys8XibO03+xZ2e75Csbj001hcuZsr50vlXGl1bWKhuLJYnqjd13si7z7RAAAAcPBOff/BO0lErP+sr1aqjqTHmhirj7c2O6CVMnurnrQqD+DgdbU7AaBtXOALnct8PLDLwP5vW7b3eNoAAAB4GQx994Xm/80HwivMQB46l/l/6Fzm/6Fzmf+HDnd09yq92x14c59zAQAAWqa/VpJMNp0L7I9MJpuNOFG7LUBPMjNXyA9HxMmIeHug52h1e6TdSQMAAAAAAAAAAAAAAAAAAAAAAADAK6ZSSaICAAAAHGoRmQ+S9Eb+QwPn+7eeHziSfDpQW0bEnX/f6o2I8vJIdf/HX+0v//PWP+5OlsvLl9txBgMAAADYqj5Ory3dyA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAffbk8b2pejnIuI9+ERGDjeJ3R29t2fvaQEQce5pE96bHJRHRtQ/x1+9HxOlG8ZNqWjGYZrE1fiYi+toc//g+xIdO9qDa/4w3+vxl4lxt2fjz152WF/Xo3Hb9X6be/9X6uUb934kmY5x5+P/ctvHvR5zpbtz/1OMnL9j//v53a2vbHav8J2Ko4fdP8lysXHlhKVdaXbs0tzA5m5/NL46OjlwduzZ2ZWw4NzNXyKd/G8b4y/de/2Kn9h/bJv7gLu0/32T7P3949/G3d4h/4YeN3//TO8SvvvY/Sr8HqseH6uvrG+ubnf3fW2d3av/0Nu3f7f2/0GT7L97803tNVgUADkBpdW1+slDIL1s5vCt9EfESpGFlLytd+/M8N9MP+o6VT6aVNh9qY6cEAAC0xLNhQLszAQAAAAAAAAAAAAAAAAAAgM7V8h8zO/r8Lwv0tq+pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+jIAAP//I5XLlA==")
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)

1m1.051529165s ago: executing program 0 (id=3538):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

1m0.982548064s ago: executing program 0 (id=3543):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000)

1m0.949560384s ago: executing program 0 (id=3546):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x1002002, 0x0)
r1 = dup(r0)
open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})

54.892385949s ago: executing program 38 (id=3769):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x3b00, 0x0, 0xfffffffffffffdfd)

52.059638342s ago: executing program 1 (id=3860):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
close(r0)

52.046755202s ago: executing program 1 (id=3862):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

52.017493532s ago: executing program 1 (id=3864):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10)
bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x4000000)

52.017328612s ago: executing program 1 (id=3865):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1010e, &(0x7f0000000600)={[{@errors_remount}, {@data_journal}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@resuid}, {@block_validity}]}, 0x1, 0x450, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)

51.939635792s ago: executing program 1 (id=3867):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))

51.724034051s ago: executing program 1 (id=3877):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

51.720601591s ago: executing program 39 (id=3877):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

45.948158816s ago: executing program 40 (id=3546):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x1002002, 0x0)
r1 = dup(r0)
open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})

19.88105808s ago: executing program 7 (id=5156):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r0, &(0x7f0000001900)=""/4079, 0xfef, 0x66)

19.88082302s ago: executing program 7 (id=5157):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000fc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x2d, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

19.86342815s ago: executing program 7 (id=5158):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe000bb00, @dev={0xac, 0x14, 0x14, 0x24}, @dev}, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

19.85135168s ago: executing program 7 (id=5159):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0\x00')

19.83695508s ago: executing program 7 (id=5160):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x6bf80, 0x108)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009})

19.73206633s ago: executing program 7 (id=5161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

19.71997353s ago: executing program 41 (id=5161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

15.403274649s ago: executing program 3 (id=5358):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r0, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000891}, 0x40000c0)

15.383422729s ago: executing program 3 (id=5359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10)
signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x2]}, 0x8)

15.359530839s ago: executing program 3 (id=5360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

15.359150649s ago: executing program 3 (id=5361):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x1d, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "0347c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a12ffffffffffffffe000000000e8f20000000200", "b90000cd1a0900000000000000000002000000000200", [0x1]})

15.258083889s ago: executing program 3 (id=5362):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00087ab50db40000280012800b0001006d61"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

15.156096509s ago: executing program 3 (id=5363):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))

15.143498588s ago: executing program 42 (id=5363):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))

5.841018065s ago: executing program 6 (id=5793):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x6, @random="cea0300a1672"}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x4800)

5.796907955s ago: executing program 6 (id=5796):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[], 0x0, 0x2c2, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x440000a0)
ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000100))

5.621092184s ago: executing program 6 (id=5801):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@age_extent_cache}, {@nolazytime}, {@alloc_mode_def}, {@six_active_logs}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@background_gc_off}, {@nobarrier}, {@compress_cache}, {@lfs_mode}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
write$UHID_INPUT(r0, &(0x7f0000005600)={0x8, {"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", 0x1000}}, 0x1006)
write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xff}}, 0x18)

5.319722863s ago: executing program 6 (id=5811):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=cp850,namecase=1,errors=remount-ro,errors=continue,fmask=00000000000000000000005,iocharset=koi8-ru,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000006000000003,namecase=1,dmask=00000000000000000001777,allow_utime=00000000000000020000000,\x00'], 0x21, 0x1524, &(0x7f0000002280)="$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")
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x63)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x41}, {0x800}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0})

5.161821253s ago: executing program 6 (id=5812):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="5dec3ab986c764adc0737e7718ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.071529403s ago: executing program 6 (id=5816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
statx(r0, 0x0, 0x100, 0x10, 0x0)

5.070746853s ago: executing program 43 (id=5816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
statx(r0, 0x0, 0x100, 0x10, 0x0)

3.098462488s ago: executing program 8 (id=5875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
futimesat(0xffffffffffffffff, 0x0, 0x0)

3.097965608s ago: executing program 8 (id=5876):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0xfef4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4020, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x44}}, 0x20040840)

3.054115658s ago: executing program 8 (id=5878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
process_mrelease(0xffffffffffffffff, 0x0)

3.024553048s ago: executing program 8 (id=5880):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x3c}}, 0x0)

3.001175117s ago: executing program 8 (id=5883):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000040))

947.308892ms ago: executing program 8 (id=5968):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "a733b9f8"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x9, "6fe695cd"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000240)={0x3, 0xffffffff, 0x100, 0x5, 0x1, 0x800})

750.016832ms ago: executing program 9 (id=5980):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x1}, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x2000000000000024)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000480))

738.145102ms ago: executing program 9 (id=5981):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40)

703.067662ms ago: executing program 9 (id=5982):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
flistxattr(r1, 0x0, 0x0)

654.959372ms ago: executing program 9 (id=5984):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000203d207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
utime(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT, @ANYRESOCT=r0], 0xd, 0x2b9, &(0x7f0000000900)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x2000)

619.759142ms ago: executing program 9 (id=5985):
syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0xa0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003})
write$cgroup_int(r0, &(0x7f0000000000)=0x8, 0x12)

512.565651ms ago: executing program 5 (id=5993):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x8)

454.146311ms ago: executing program 2 (id=5994):
listen(0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
fdatasync(0xffffffffffffffff)

415.514931ms ago: executing program 5 (id=5995):
syz_mount_image$ext4(&(0x7f0000001800)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000540)={[{@norecovery}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@nobh}, {@data_err_ignore}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001f0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
sendfile(r1, r1, 0x0, 0x80000000)

344.012801ms ago: executing program 4 (id=5997):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

343.833791ms ago: executing program 5 (id=5998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x20, r2, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80)

342.351441ms ago: executing program 4 (id=5999):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='tlb_flush\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

340.471021ms ago: executing program 5 (id=6000):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x775, &(0x7f0000001cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4606000006ffffffffffffffff03003e0000000000f60200000000000040000000000000009a010000000000000000000000003800030000008100000000000070fcffffff9a060000000000004cdc0000000000000800000000000000f7ffffffffffffff0700000000000000001000000000000051e574040400000007000000000000000a000000000000000400000000000000feffffffffffff7f38040000000000000400000000000000030000006f001e2c3700"], 0xe8)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

328.490431ms ago: executing program 2 (id=6001):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x1001)
sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

295.277461ms ago: executing program 2 (id=6002):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
ustat(0x5, &(0x7f0000000100))

262.225601ms ago: executing program 5 (id=6003):
io_setup(0x11a, &(0x7f00000000c0))
io_setup(0x81, &(0x7f0000000100))
io_setup(0x5, &(0x7f0000000240))
io_setup(0x5, &(0x7f0000000740))
io_setup(0xf6, &(0x7f00000008c0))

261.727161ms ago: executing program 2 (id=6004):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000780)='\x00', 0x1, 0x4001, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000074c0)=[{{&(0x7f0000003780)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0x6ec9}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f00000039c0)=""/202, 0xca}, {&(0x7f0000000680)=""/195, 0xc3}], 0x2}, 0x80}, {{0x0, 0x0, 0x0}, 0x1000}], 0x3, 0x140, 0x0)

196.017481ms ago: executing program 2 (id=6005):
io_uring_setup(0xc90, &(0x7f0000000080))
r0 = io_uring_setup(0x4166, &(0x7f0000000200)={0x0, 0x1c3c, 0x0, 0x3, 0x65})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x1f, 0x0, 0x0)

194.48192ms ago: executing program 2 (id=6006):
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)
mlockall(0x3)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0)

160.00847ms ago: executing program 4 (id=6007):
execve(0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0)

159.50451ms ago: executing program 5 (id=6008):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0)

141.89392ms ago: executing program 4 (id=6009):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xe8300, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
unshare(0x2040600)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0xfffffffd, 0x3})

63.68713ms ago: executing program 4 (id=6010):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

55.13568ms ago: executing program 9 (id=6011):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
fadvise64(0xffffffffffffffff, 0x7, 0xe, 0x3)

0s ago: executing program 4 (id=6012):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

lave_1) entered blocking state
[  128.043955][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.059437][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.067268][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.081730][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  128.092483][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  128.100642][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  128.107982][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  128.116028][ T8829] device veth0_vlan entered promiscuous mode
[  128.125919][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  128.134972][ T8829] device veth1_macvtap entered promiscuous mode
[  128.145630][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  128.155053][  T315] device bridge_slave_1 left promiscuous mode
[  128.161155][  T315] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.168316][  T315] device bridge_slave_0 left promiscuous mode
[  128.174315][  T315] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.251023][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.280261][ T8877] loop1: detected capacity change from 0 to 1024
[  128.286872][ T8877] EXT4-fs: Ignoring removed orlov option
[  128.295277][ T8877] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.310295][ T8877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  128.338957][ T8829] EXT4-fs (loop1): unmounting filesystem.
[  128.389594][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3795'.
[  128.477885][ T8907] loop1: detected capacity change from 0 to 512
[  128.484596][ T8907] EXT4-fs: Ignoring removed mblk_io_submit option
[  128.492324][ T8907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  128.509548][ T8829] EXT4-fs (loop1): unmounting filesystem.
[  128.599387][ T8915] loop1: detected capacity change from 0 to 16
[  128.612754][ T8915] erofs: (device loop1): mounted with root inode @ nid 36.
[  128.662330][ T8923] loop1: detected capacity change from 0 to 128
[  128.669170][ T8923] EXT4-fs: Ignoring removed nobh option
[  128.676640][ T8923] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  128.685629][ T8923] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  128.709628][ T8829] EXT4-fs (loop1): unmounting filesystem.
[  129.396033][ T8930] loop1: detected capacity change from 0 to 131072
[  129.406469][ T8930] F2FS-fs (loop1): invalid crc value
[  129.443583][ T8930] F2FS-fs (loop1): Found nat_bits in checkpoint
[  129.513835][ T8930] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  130.485094][ T9033] loop1: detected capacity change from 0 to 512
[  130.497132][ T9033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  130.510414][ T9033] EXT4-fs (loop1): 1 orphan inode deleted
[  130.515971][ T9033] EXT4-fs (loop1): 1 truncate cleaned up
[  130.521962][ T9033] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  130.546845][ T8829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  130.571308][ T8829] EXT4-fs (loop1): Remounting filesystem read-only
[  130.582389][ T8829] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 17
[  130.611880][ T8829] EXT4-fs (loop1): Remounting filesystem read-only
[  130.622242][ T8829] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 17
[  130.640728][ T8829] EXT4-fs (loop1): Remounting filesystem read-only
[  130.670794][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3875'.
[  130.712195][ T8829] EXT4-fs (loop1): unmounting filesystem.
[  130.882052][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.888989][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.896266][ T9053] device bridge_slave_0 entered promiscuous mode
[  130.903171][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.910076][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.917384][ T9053] device bridge_slave_1 entered promiscuous mode
[  130.985386][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.992323][ T9053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.999364][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.006138][ T9053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.036364][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  131.045167][  T357] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.052939][  T357] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.071499][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.080103][  T357] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.086968][  T357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.095597][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  131.104834][  T357] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.111837][  T357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.130059][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  131.138142][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.155021][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.163991][ T9074] xt_hashlimit: size too large, truncated to 1048576
[  131.173044][ T9053] device veth0_vlan entered promiscuous mode
[  131.188900][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  131.203447][ T9053] device veth1_macvtap entered promiscuous mode
[  131.215693][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.224423][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  131.232412][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.248167][  T315] device bridge_slave_1 left promiscuous mode
[  131.254591][  T315] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.262089][  T315] device bridge_slave_0 left promiscuous mode
[  131.268041][  T315] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.276284][  T315] device veth1_macvtap left promiscuous mode
[  131.282625][  T315] device veth0_vlan left promiscuous mode
[  131.401314][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.409749][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.471347][ T9091] netlink: 'syz.9.3894': attribute type 4 has an invalid length.
[  131.479033][ T9091] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.3894'.
[  131.508166][ T9097] input: syz0 as /devices/virtual/input/input22
[  131.730867][ T9125] overlayfs: failed to clone upperpath
[  131.962757][ T9149] xt_bpf: check failed: parse error
[  132.059402][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3926'.
[  132.201205][  T357] Bluetooth: hci0: Frame reassembly failed (-84)
[  132.828452][ T9198] overlayfs: missing 'lowerdir'
[  132.858057][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3956'.
[  132.866942][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3956'.
[  132.875853][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3956'.
[  132.884605][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3956'.
[  132.993348][   T28] kauditd_printk_skb: 48 callbacks suppressed
[  132.993364][   T28] audit: type=1326 audit(1736817165.837:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.022605][   T28] audit: type=1326 audit(1736817165.837:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.046128][   T28] audit: type=1326 audit(1736817165.837:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.069616][   T28] audit: type=1326 audit(1736817165.837:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.093113][   T28] audit: type=1326 audit(1736817165.837:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.116454][   T28] audit: type=1326 audit(1736817165.837:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.140415][   T28] audit: type=1326 audit(1736817165.837:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.164511][   T28] audit: type=1326 audit(1736817165.837:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.188143][   T28] audit: type=1326 audit(1736817165.837:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.211479][   T28] audit: type=1326 audit(1736817165.937:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd424b85d29 code=0x7ffc0000
[  133.477003][ T9251] overlayfs: failed to clone upperpath
[  133.482865][ T9251] overlayfs: failed to clone upperpath
[  134.268445][ T2269] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  134.289267][ T9280] overlayfs: failed to clone lowerpath
[  134.671057][ T9306] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  134.698596][ T9306] FAT-fs (loop19): unable to read boot sector
[  134.889731][ T9319] incfs: Options parsing error. -22
[  134.894808][ T9319] incfs: mount failed -22
[  136.621536][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.628468][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.635520][ T9410] device bridge_slave_0 entered promiscuous mode
[  136.642154][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.649024][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.656116][ T9410] device bridge_slave_1 entered promiscuous mode
[  136.696630][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.703486][ T9410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.710555][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.717356][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.735635][  T357] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.742792][  T357] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.750148][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  136.757409][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  136.765967][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.774007][  T357] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.781419][  T357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.790087][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.798208][  T357] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.805191][  T357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.816808][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.825955][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  136.839591][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.851056][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.859140][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.866350][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  136.874351][ T9410] device veth0_vlan entered promiscuous mode
[  136.884736][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.893725][ T9410] device veth1_macvtap entered promiscuous mode
[  136.902972][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  136.912937][  T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  137.425662][ T9505] loop3: detected capacity change from 0 to 256
[  137.451435][ T9507] overlayfs: failed to clone lowerpath
[  137.593428][ T9422] loop4: detected capacity change from 0 to 131072
[  137.612632][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4085'.
[  137.625309][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4085'.
[  137.647295][ T9422] F2FS-fs (loop4): Found nat_bits in checkpoint
[  137.723707][ T9422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  137.799702][ T9559] loop3: detected capacity change from 0 to 2048
[  137.863579][ T9559] Alternate GPT is invalid, using primary GPT.
[  137.874514][ T9559]  loop3: p2 p3 p7
[  138.106288][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  138.106304][   T28] audit: type=1400 audit(1736817170.947:981): avc:  denied  { read write } for  pid=9575 comm="syz.4.4099" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  138.156120][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4106'.
[  138.163515][   T28] audit: type=1400 audit(1736817170.947:982): avc:  denied  { open } for  pid=9575 comm="syz.4.4099" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  138.178000][ T9584] 9pnet_fd: Insufficient options for proto=fd
[  138.363233][   T28] audit: type=1400 audit(1736817171.207:983): avc:  denied  { read } for  pid=9596 comm="syz.3.4113" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  138.406848][   T28] audit: type=1400 audit(1736817171.207:984): avc:  denied  { open } for  pid=9596 comm="syz.3.4113" path="/34/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  138.436232][ T9601] loop3: detected capacity change from 0 to 2048
[  138.450496][   T28] audit: type=1400 audit(1736817171.207:985): avc:  denied  { ioctl } for  pid=9596 comm="syz.3.4113" path="/34/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  138.513150][ T9601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  138.599967][   T28] audit: type=1400 audit(1736817171.447:986): avc:  denied  { mounton } for  pid=9600 comm="syz.3.4116" path="/36/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  138.626668][ T9601] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  138.647665][ T9601] overlayfs: failed to set xattr on upper
[  138.672804][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  138.884962][ T9617] netlink: 'syz.9.4122': attribute type 4 has an invalid length.
[  138.958441][   T19] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  138.998460][   T28] audit: type=1400 audit(1736817171.837:987): avc:  denied  { create } for  pid=9625 comm="syz.7.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  139.046450][   T28] audit: type=1400 audit(1736817171.837:988): avc:  denied  { setopt } for  pid=9625 comm="syz.7.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  139.073565][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4132'.
[  139.082433][   T28] audit: type=1400 audit(1736817171.837:989): avc:  denied  { bind } for  pid=9625 comm="syz.7.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  139.129683][   T28] audit: type=1400 audit(1736817171.977:990): avc:  denied  { unmount } for  pid=9410 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  139.158463][   T19] usb 4-1: Using ep0 maxpacket: 32
[  139.164558][   T19] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  139.180049][   T19] usb 4-1: config 0 has no interface number 0
[  139.192917][   T19] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  139.216195][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.224860][   T19] usb 4-1: Product: syz
[  139.238323][   T19] usb 4-1: Manufacturer: syz
[  139.242726][   T19] usb 4-1: SerialNumber: syz
[  139.249135][   T19] usb 4-1: config 0 descriptor??
[  139.263359][   T19] smsc95xx v2.0.0
[  139.381058][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4148'.
[  139.392174][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4148'.
[  139.434316][ T9672] loop4: detected capacity change from 0 to 128
[  139.440883][ T9672] ext4: Unknown parameter 'fsuuid'
[  139.571247][ T9694] device syz_tun entered promiscuous mode
[  139.615848][ T9698] loop4: detected capacity change from 0 to 2048
[  139.647243][ T9698] Alternate GPT is invalid, using primary GPT.
[  139.653365][ T9698]  loop4: p2 p3 p7
[  139.661771][   T19] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  139.678946][   T19] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  139.882149][ T9701] loop4: detected capacity change from 0 to 40427
[  139.888957][ T9701] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  139.895273][ T9701] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  139.905683][ T9701] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  139.928821][ T9701] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  139.935894][ T9701] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  139.959565][ T9449] kworker/u4:9: attempt to access beyond end of device
[  139.959565][ T9449] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  139.973701][ T9701] VFS:Filesystem freeze failed
[  140.082291][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'.
[  140.089126][   T19] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  140.101993][   T19] smsc95xx: probe of 4-1:0.67 failed with error -71
[  140.109156][   T19] usb 4-1: USB disconnect, device number 13
[  140.151015][ T9739] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4177'.
[  140.230689][ T9743] netlink: 'syz.9.4179': attribute type 1 has an invalid length.
[  140.306366][ T9757] loop4: detected capacity change from 0 to 256
[  140.315126][ T9757] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  140.483539][ T9777] syz.7.4195[9777] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.483618][ T9777] syz.7.4195[9777] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.617177][ T8023] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  140.624447][ T9793] loop3: detected capacity change from 0 to 2048
[  140.704328][ T9806] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4210'.
[  140.754307][ T9813] loop3: detected capacity change from 0 to 256
[  140.777067][ T9813] FAT-fs (loop3): Directory bread(block 64) failed
[  140.783515][ T9813] FAT-fs (loop3): Directory bread(block 65) failed
[  140.790067][ T9813] FAT-fs (loop3): Directory bread(block 66) failed
[  140.796575][ T9813] FAT-fs (loop3): Directory bread(block 67) failed
[  140.802985][ T9813] FAT-fs (loop3): Directory bread(block 68) failed
[  140.809377][ T9813] FAT-fs (loop3): Directory bread(block 69) failed
[  140.815863][ T9813] FAT-fs (loop3): Directory bread(block 70) failed
[  140.822277][ T9813] FAT-fs (loop3): Directory bread(block 71) failed
[  140.825599][ T8023] usb 5-1: Using ep0 maxpacket: 8
[  140.828680][ T9813] FAT-fs (loop3): Directory bread(block 72) failed
[  140.838761][ T8023] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  140.839888][ T9813] FAT-fs (loop3): Directory bread(block 73) failed
[  140.851162][ T8023] usb 5-1: config 0 has no interface number 0
[  140.877704][ T8023] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  140.890013][ T8023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.903018][ T8023] usb 5-1: Product: syz
[  140.914900][ T8023] usb 5-1: Manufacturer: syz
[  140.922154][ T8023] usb 5-1: SerialNumber: syz
[  140.927565][ T8023] usb 5-1: config 0 descriptor??
[  140.944025][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4224'.
[  140.973882][ T9840] loop3: detected capacity change from 0 to 1024
[  140.985076][ T9840] EXT4-fs: Ignoring removed nobh option
[  140.990947][ T9840] EXT4-fs: Ignoring removed bh option
[  140.999230][ T9840] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  141.014676][ T9449] tipc: Subscription rejected, illegal request
[  141.022640][ T9840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  141.036258][ T9840] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.4225: Allocating blocks 481-513 which overlap fs metadata
[  141.053227][ T9840] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.4225: Allocating blocks 497-513 which overlap fs metadata
[  141.072250][ T9449] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm kworker/u4:9: Allocating blocks 497-513 which overlap fs metadata
[  141.086762][ T9449] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 1 with max blocks 3 with error 117
[  141.098896][ T9449] EXT4-fs (loop3): This should not happen!! Data will be lost
[  141.098896][ T9449] 
[  141.109570][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  141.142382][ T8023] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  141.149830][ T8023] usb 5-1: No valid video chain found.
[  141.153126][ T9858] loop3: detected capacity change from 0 to 512
[  141.156565][ T8023] usb 5-1: USB disconnect, device number 17
[  141.190674][ T9858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  141.211289][ T9858] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  141.282494][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  141.348674][ T9885] device syz_tun entered promiscuous mode
[  142.138319][ T9939] loop4: detected capacity change from 0 to 512
[  142.151304][ T9942] loop3: detected capacity change from 0 to 1024
[  142.155515][ T9939] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.4268: casefold flag without casefold feature
[  142.170350][ T9939] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4268: couldn't read orphan inode 15 (err -117)
[  142.177142][ T9942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  142.182581][ T9939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  142.210831][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  142.217317][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  142.345812][T10003] overlayfs: failed to clone upperpath
[  142.390817][T10010] netlink: 'syz.7.4282': attribute type 11 has an invalid length.
[  142.421993][T10014] 9pnet_fd: Insufficient options for proto=fd
[  142.594652][T10030] device macsec0 entered promiscuous mode
[  142.676896][T10043] netlink: 'syz.9.4294': attribute type 4 has an invalid length.
[  142.685243][T10043] __nla_validate_parse: 1 callbacks suppressed
[  142.685264][T10043] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.4294'.
[  143.020503][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4312'.
[  143.039547][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4312'.
[  143.217097][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.226011][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.234936][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.243780][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.252660][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.261507][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.270367][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.279207][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.288083][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.296922][T10097] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  143.472359][T10118] loop4: detected capacity change from 0 to 512
[  143.475873][T10123] syz.7.4331[10123] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.478529][T10123] syz.7.4331[10123] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.491235][T10118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  143.522897][T10118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  143.532886][T10118] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.573073][T10140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4338'.
[  143.638037][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  143.638055][   T28] audit: type=1400 audit(1736817176.521:1016): avc:  denied  { setopt } for  pid=10148 comm="syz.9.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  143.673679][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  143.725973][T10164] overlayfs: failed to clone upperpath
[  143.838292][  T975] kernel write not supported for file /129/attr/exec (pid: 975 comm: kworker/1:4)
[  143.847846][T10173] input: syz0 as /devices/virtual/input/input23
[  144.150917][   T19] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  144.198127][   T28] audit: type=1326 audit(1736817177.075:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.221631][   T28] audit: type=1326 audit(1736817177.075:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.245428][   T28] audit: type=1326 audit(1736817177.075:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.269017][   T28] audit: type=1326 audit(1736817177.075:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.292458][   T28] audit: type=1326 audit(1736817177.075:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.315914][   T28] audit: type=1326 audit(1736817177.075:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.339385][   T28] audit: type=1326 audit(1736817177.075:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.369077][   T19] usb 5-1: Using ep0 maxpacket: 32
[  144.374134][   T28] audit: type=1326 audit(1736817177.075:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.398486][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.410411][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.420224][   T19] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00
[  144.429227][   T28] audit: type=1326 audit(1736817177.075:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.9.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  144.460382][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.468810][   T19] usb 5-1: config 0 descriptor??
[  144.809143][T10259] loop3: detected capacity change from 0 to 256
[  144.832531][T10259] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  144.877087][   T19] appleir 0003:05AC:8240.0026: item fetching failed at offset 0/3
[  144.888483][   T19] appleir 0003:05AC:8240.0026: parse failed
[  144.902102][   T19] appleir: probe of 0003:05AC:8240.0026 failed with error -22
[  144.936503][T10280] loop3: detected capacity change from 0 to 256
[  144.966056][T10280] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.079608][   T19] usb 5-1: USB disconnect, device number 18
[  145.098670][T10287] loop3: detected capacity change from 0 to 8192
[  145.106072][T10287] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.336978][T10312] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4418'.
[  145.372899][T10312] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4418'.
[  145.462436][T10295] loop3: detected capacity change from 0 to 40427
[  145.481362][T10295] F2FS-fs (loop3): fault_injection options not supported
[  145.493055][T10295] F2FS-fs (loop3): invalid crc value
[  145.499127][T10295] F2FS-fs (loop3): Found nat_bits in checkpoint
[  145.538991][T10295] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  145.557914][T10295] F2FS-fs (loop3): access invalid blkaddr:2816
[  145.561993][T10330] 9pnet_fd: Insufficient options for proto=fd
[  145.564018][T10295] CPU: 1 PID: 10295 Comm: syz.3.4410 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0
[  145.579536][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  145.589427][T10295] Call Trace:
[  145.592557][T10295]  <TASK>
[  145.595323][T10295]  dump_stack_lvl+0x151/0x1b7
[  145.599840][T10295]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  145.605136][T10295]  ? f2fs_get_next_page_offset+0x770/0x770
[  145.610775][T10295]  dump_stack+0x15/0x18
[  145.614766][T10295]  __f2fs_is_valid_blkaddr+0xda6/0x1450
[  145.620169][T10295]  f2fs_is_valid_blkaddr+0x25/0x30
[  145.625096][T10295]  f2fs_map_blocks+0xd16/0x4340
[  145.629789][T10295]  ? f2fs_map_lock+0x260/0x260
[  145.634381][T10295]  ? xa_load+0x1a1/0x210
[  145.638469][T10295]  ? xas_find_conflict+0x8c0/0x8c0
[  145.643408][T10295]  f2fs_mpage_readpages+0xc65/0x20f0
[  145.648533][T10295]  ? dquot_release_reservation_block+0xa0/0xa0
[  145.649572][T10334] loop4: detected capacity change from 0 to 512
[  145.654515][T10295]  ? __this_cpu_preempt_check+0x13/0x20
[  145.654547][T10295]  ? memcg_rstat_updated+0x57/0x120
[  145.654571][T10295]  f2fs_readahead+0xfd/0x250
[  145.675446][T10295]  ? blk_start_plug+0x9c/0x130
[  145.680034][T10295]  read_pages+0x1be/0xd40
[  145.684195][T10295]  ? workingset_activation+0x430/0x430
[  145.689496][T10295]  ? folio_add_lru+0x280/0x3f0
[  145.694176][T10295]  ? page_cache_ra_unbounded+0x800/0x800
[  145.699670][T10295]  ? filemap_add_folio+0x18f/0x200
[  145.704591][T10295]  ? __filemap_add_folio+0xdb0/0xdb0
[  145.709721][T10295]  page_cache_ra_unbounded+0x61f/0x800
[  145.715007][T10295]  ? readahead_gfp_mask+0x190/0x190
[  145.720039][T10295]  ? save_fpregs_to_fpstate+0x18f/0x220
[  145.725420][T10295]  page_cache_ra_order+0x987/0xc40
[  145.730366][T10295]  ? compat_start_thread+0x20/0x20
[  145.735315][T10295]  ? do_page_cache_ra+0x110/0x110
[  145.740174][T10295]  ? finish_task_switch+0x167/0x7b0
[  145.745206][T10295]  ondemand_readahead+0x91a/0xee0
[  145.750073][T10295]  ? page_cache_sync_ra+0x450/0x450
[  145.755099][T10295]  ? __futex_queue+0x1c1/0x3c0
[  145.759702][T10295]  ? blk_cgroup_congested+0x132/0x150
[  145.764912][T10295]  page_cache_sync_ra+0x3d6/0x450
[  145.769769][T10295]  f2fs_readdir+0x599/0xc10
[  145.774113][T10295]  ? f2fs_fill_dentries+0xd00/0xd00
[  145.779150][T10295]  ? security_file_permission+0x86/0xb0
[  145.784522][T10295]  iterate_dir+0x265/0x600
[  145.788777][T10295]  ? f2fs_fill_dentries+0xd00/0xd00
[  145.793815][T10295]  __se_sys_getdents64+0x1c1/0x460
[  145.798768][T10295]  ? __x64_sys_getdents64+0x90/0x90
[  145.803794][T10295]  ? filldir+0x670/0x670
[  145.807873][T10295]  ? fpregs_restore_userregs+0x130/0x290
[  145.813509][T10295]  __x64_sys_getdents64+0x7b/0x90
[  145.818360][T10295]  x64_sys_call+0x5ae/0x9a0
[  145.822967][T10295]  do_syscall_64+0x3b/0xb0
[  145.827207][T10295]  ? clear_bhb_loop+0x55/0xb0
[  145.831734][T10295]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.837449][T10295] RIP: 0033:0x7fe7e6d85d29
[  145.841703][T10295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.861143][T10295] RSP: 002b:00007fe7e7c95038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  145.869393][T10295] RAX: ffffffffffffffda RBX: 00007fe7e6f75fa0 RCX: 00007fe7e6d85d29
[  145.877199][T10295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  145.885020][T10295] RBP: 00007fe7e6e01b08 R08: 0000000000000000 R09: 0000000000000000
[  145.892824][T10295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.900633][T10295] R13: 0000000000000000 R14: 00007fe7e6f75fa0 R15: 00007ffd6f32e0d8
[  145.908449][T10295]  </TASK>
[  145.912420][T10295] F2FS-fs (loop3): access invalid blkaddr:2816
[  145.918404][T10295] CPU: 0 PID: 10295 Comm: syz.3.4410 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0
[  145.928124][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  145.938020][T10295] Call Trace:
[  145.941144][T10295]  <TASK>
[  145.943919][T10295]  dump_stack_lvl+0x151/0x1b7
[  145.948433][T10295]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  145.953725][T10295]  ? f2fs_get_next_page_offset+0x770/0x770
[  145.959366][T10295]  dump_stack+0x15/0x18
[  145.963356][T10295]  __f2fs_is_valid_blkaddr+0xda6/0x1450
[  145.968736][T10295]  f2fs_is_valid_blkaddr+0x25/0x30
[  145.973686][T10295]  f2fs_map_blocks+0xd16/0x4340
[  145.978382][T10295]  ? f2fs_map_lock+0x260/0x260
[  145.982971][T10295]  ? xa_load+0x1a1/0x210
[  145.987051][T10295]  ? xas_find_conflict+0x8c0/0x8c0
[  145.992014][T10295]  ? folio_unlock+0x5c/0x70
[  145.996335][T10295]  f2fs_mpage_readpages+0xc65/0x20f0
[  146.001463][T10295]  ? dquot_release_reservation_block+0xa0/0xa0
[  146.007447][T10295]  ? __this_cpu_preempt_check+0x13/0x20
[  146.013101][T10295]  ? memcg_rstat_updated+0x57/0x120
[  146.018128][T10295]  f2fs_readahead+0xfd/0x250
[  146.022591][T10295]  ? blk_start_plug+0x9c/0x130
[  146.027155][T10295]  read_pages+0x1be/0xd40
[  146.031316][T10295]  ? workingset_activation+0x430/0x430
[  146.036610][T10295]  ? folio_add_lru+0x280/0x3f0
[  146.041213][T10295]  ? page_cache_ra_unbounded+0x800/0x800
[  146.046673][T10295]  ? filemap_add_folio+0x18f/0x200
[  146.051624][T10295]  ? __filemap_add_folio+0xdb0/0xdb0
[  146.056744][T10295]  page_cache_ra_unbounded+0x61f/0x800
[  146.062041][T10295]  ? readahead_gfp_mask+0x190/0x190
[  146.067075][T10295]  ? save_fpregs_to_fpstate+0x18f/0x220
[  146.072456][T10295]  page_cache_ra_order+0x987/0xc40
[  146.077400][T10295]  ? compat_start_thread+0x20/0x20
[  146.082347][T10295]  ? do_page_cache_ra+0x110/0x110
[  146.087206][T10295]  ? finish_task_switch+0x167/0x7b0
[  146.092240][T10295]  ondemand_readahead+0x91a/0xee0
[  146.097105][T10295]  ? page_cache_sync_ra+0x450/0x450
[  146.102136][T10295]  ? __futex_queue+0x1c1/0x3c0
[  146.106735][T10295]  ? blk_cgroup_congested+0x132/0x150
[  146.111943][T10295]  page_cache_sync_ra+0x3d6/0x450
[  146.116806][T10295]  f2fs_readdir+0x599/0xc10
[  146.121146][T10295]  ? f2fs_fill_dentries+0xd00/0xd00
[  146.126182][T10295]  ? security_file_permission+0x86/0xb0
[  146.131559][T10295]  iterate_dir+0x265/0x600
[  146.135813][T10295]  ? f2fs_fill_dentries+0xd00/0xd00
[  146.140848][T10295]  __se_sys_getdents64+0x1c1/0x460
[  146.145793][T10295]  ? __x64_sys_getdents64+0x90/0x90
[  146.150824][T10295]  ? filldir+0x670/0x670
[  146.154908][T10295]  ? fpregs_restore_userregs+0x130/0x290
[  146.160374][T10295]  __x64_sys_getdents64+0x7b/0x90
[  146.165235][T10295]  x64_sys_call+0x5ae/0x9a0
[  146.169572][T10295]  do_syscall_64+0x3b/0xb0
[  146.173826][T10295]  ? clear_bhb_loop+0x55/0xb0
[  146.178338][T10295]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.184067][T10295] RIP: 0033:0x7fe7e6d85d29
[  146.188319][T10295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.207762][T10295] RSP: 002b:00007fe7e7c95038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  146.216006][T10295] RAX: ffffffffffffffda RBX: 00007fe7e6f75fa0 RCX: 00007fe7e6d85d29
[  146.223818][T10295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  146.231627][T10295] RBP: 00007fe7e6e01b08 R08: 0000000000000000 R09: 0000000000000000
[  146.239437][T10295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.247249][T10295] R13: 0000000000000000 R14: 00007fe7e6f75fa0 R15: 00007ffd6f32e0d8
[  146.255067][T10295]  </TASK>
[  146.259529][T10295] syz.3.4410: attempt to access beyond end of device
[  146.259529][T10295] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  146.278036][T10295] F2FS-fs (loop3): Should run fsck to repair first.
[  146.290575][T10334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  146.299777][T10334] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.300967][ T9053] syz-executor: attempt to access beyond end of device
[  146.300967][ T9053] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  146.380611][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  146.554171][T10379] SELinux:  Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped).
[  146.769022][T10387] loop4: detected capacity change from 0 to 40427
[  146.775986][T10387] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  146.784292][ T8020] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  146.792652][T10387] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  146.807328][T10387] F2FS-fs (loop4): invalid crc value
[  146.820988][T10387] F2FS-fs (loop4): Found nat_bits in checkpoint
[  146.892318][T10387] F2FS-fs (loop4): Start checkpoint disabled!
[  146.918714][T10387] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  146.925790][T10387] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  146.939973][T10387] syz.4.4451: attempt to access beyond end of device
[  146.939973][T10387] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  146.980449][ T8020] usb 4-1: Using ep0 maxpacket: 8
[  146.986415][ T8020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.997589][T10054] kworker/u4:77: attempt to access beyond end of device
[  146.997589][T10054] loop4: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  147.007430][ T8020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.040480][ T8020] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  147.054629][ T8020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.065712][ T8020] usb 4-1: config 0 descriptor??
[  147.220911][T10409] tmpfs: Bad value for 'nr_inodes'
[  147.302391][T10421] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4465'.
[  147.311298][T10421] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4465'.
[  147.429937][T10446] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  147.492757][ T8020] saitek 0003:06A3:0CCD.0027: unknown main item tag 0x0
[  147.499575][ T8020] saitek 0003:06A3:0CCD.0027: unknown main item tag 0x0
[  147.516701][ T8020] saitek 0003:06A3:0CCD.0027: unknown main item tag 0x0
[  147.529520][ T8020] saitek 0003:06A3:0CCD.0027: unbalanced collection at end of report description
[  147.531698][T10457] 9pnet_fd: Insufficient options for proto=fd
[  147.545127][ T8020] saitek 0003:06A3:0CCD.0027: parse failed
[  147.551302][ T8020] saitek: probe of 0003:06A3:0CCD.0027 failed with error -22
[  147.589690][T10463] loop4: detected capacity change from 0 to 1024
[  147.597620][T10463] EXT4-fs: Ignoring removed orlov option
[  147.614019][T10463] EXT4-fs (loop4): Test dummy encryption mode enabled
[  147.629858][T10463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  147.658039][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  147.694302][ T8023] usb 4-1: USB disconnect, device number 14
[  147.725654][T10490] loop4: detected capacity change from 0 to 256
[  147.737024][T10490] FAT-fs (loop4): Directory bread(block 64) failed
[  147.744121][T10490] FAT-fs (loop4): Directory bread(block 65) failed
[  147.750910][T10490] FAT-fs (loop4): Directory bread(block 66) failed
[  147.757636][T10490] FAT-fs (loop4): Directory bread(block 67) failed
[  147.764249][T10490] FAT-fs (loop4): Directory bread(block 68) failed
[  147.770974][T10490] FAT-fs (loop4): Directory bread(block 69) failed
[  147.777340][T10490] FAT-fs (loop4): Directory bread(block 70) failed
[  147.783776][T10490] FAT-fs (loop4): Directory bread(block 71) failed
[  147.790134][T10490] FAT-fs (loop4): Directory bread(block 72) failed
[  147.796623][T10490] FAT-fs (loop4): Directory bread(block 73) failed
[  147.836385][T10496] netlink: 'syz.9.4500': attribute type 8 has an invalid length.
[  147.844169][T10054] kworker/u4:77: attempt to access beyond end of device
[  147.844169][T10054] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256
[  147.939314][T10508] loop4: detected capacity change from 0 to 256
[  147.948060][T10508] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  147.987875][T10514] loop4: detected capacity change from 0 to 512
[  148.002041][T10514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  148.010930][T10514] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.024810][T10514] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  148.044421][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  148.078956][T10524] loop4: detected capacity change from 0 to 256
[  148.085502][T10524] exfat: Deprecated parameter 'utf8'
[  148.093270][T10524] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3bf816f3, utbl_chksum : 0xe619d30d)
[  148.170227][T10544] loop4: detected capacity change from 0 to 512
[  148.189340][T10544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  148.198176][T10544] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.217888][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  148.234838][T10556] tipc: Started in network mode
[  148.239592][T10556] tipc: Node identity ac14142f, cluster identity 4711
[  148.246296][T10556] tipc: New replicast peer: 0.0.0.0
[  148.256056][T10556] tipc: Enabled bearer <udp:syz2>, priority 10
[  148.268282][T10556] tipc: New replicast peer: 100.1.1.1
[  148.351879][T10574] device wg2 left promiscuous mode
[  148.562932][T10595] loop3: detected capacity change from 0 to 40427
[  148.571330][T10595] F2FS-fs (loop3): Found nat_bits in checkpoint
[  148.594423][T10595] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  148.633578][T10595] syz.3.4546: attempt to access beyond end of device
[  148.633578][T10595] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  148.645516][T10608] loop4: detected capacity change from 0 to 2048
[  148.657455][T10608] EXT4-fs: Ignoring removed mblk_io_submit option
[  148.669539][ T9053] syz-executor: attempt to access beyond end of device
[  148.669539][ T9053] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  148.699792][T10608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  148.874198][T10608] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4559: bg 0: block 234: padding at end of block bitmap is not set
[  148.888603][T10608] EXT4-fs (loop4): Remounting filesystem read-only
[  148.916572][ T9985] Bluetooth: hci0: Frame reassembly failed (-84)
[  149.024903][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  149.036824][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  149.036836][   T28] audit: type=1400 audit(1736817181.989:1042): avc:  denied  { map } for  pid=10649 comm="syz.4.4568" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  149.361693][   T28] audit: type=1400 audit(1736817182.319:1043): avc:  denied  { mount } for  pid=10677 comm="syz.5.4581" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  149.370537][ T8023] tipc: Node number set to 2886997039
[  149.972385][T10717] device vlan3 entered promiscuous mode
[  150.095715][T10733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10733 comm=syz.4.4601
[  150.148896][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4613'.
[  150.157952][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4613'.
[  150.239880][T10756] overlayfs: missing 'lowerdir'
[  150.342349][   T28] audit: type=1400 audit(1736817183.299:1044): avc:  denied  { read } for  pid=10784 comm="syz.5.4631" path="socket:[51084]" dev="sockfs" ino=51084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  150.404603][T10793] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  150.436772][T10799] loop4: detected capacity change from 0 to 512
[  150.452951][T10799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  150.462107][T10799] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.475753][   T28] audit: type=1400 audit(1736817183.429:1045): avc:  denied  { mounton } for  pid=10798 comm="syz.4.4638" path="/107/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  150.503474][   T28] audit: type=1400 audit(1736817183.459:1046): avc:  denied  { unmount } for  pid=9410 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  150.524327][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  150.865432][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4651'.
[  150.874198][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4651'.
[  150.940485][ T2269] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  150.940555][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[  150.982679][ T9495] Bluetooth: hci0: Frame reassembly failed (-84)
[  151.409368][T10881] loop4: detected capacity change from 0 to 1024
[  151.422795][T10881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  151.431197][T10881] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.446283][T10881] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4673: bg 0: block 393: padding at end of block bitmap is not set
[  151.465651][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  151.601672][T10900] input: syz1 as /devices/virtual/input/input24
[  151.662406][T10915] futex_wake_op: syz.4.4688 tries to shift op by -1; fix this program
[  152.041427][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4715'.
[  152.071146][T10978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=210 sclass=netlink_route_socket pid=10978 comm=syz.9.4717
[  152.215117][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4723'.
[  152.259686][T10996] incfs: Error accessing: ./file0.
[  152.265517][T10996] incfs: mount failed -20
[  152.527051][T11020] tmpfs: Unknown parameter 'in'
[  152.579842][T11026] loop4: detected capacity change from 0 to 2048
[  152.609932][T11026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  152.626206][T11026] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.641376][   T28] audit: type=1400 audit(1736817186.602:1047): avc:  denied  { setattr } for  pid=11025 comm="syz.4.4739" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  152.673191][T11026] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4739: bg 0: block 440: padding at end of block bitmap is not set
[  152.714913][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  152.851524][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4748'.
[  152.899271][T11055] loop4: detected capacity change from 0 to 256
[  152.922184][T11055] FAT-fs (loop4): Directory bread(block 64) failed
[  152.928901][T11055] FAT-fs (loop4): Directory bread(block 65) failed
[  152.935804][T11055] FAT-fs (loop4): Directory bread(block 66) failed
[  152.942700][T11055] FAT-fs (loop4): Directory bread(block 67) failed
[  152.949191][T11055] FAT-fs (loop4): Directory bread(block 68) failed
[  152.965269][T11055] FAT-fs (loop4): Directory bread(block 69) failed
[  152.972155][T11055] FAT-fs (loop4): Directory bread(block 70) failed
[  152.978764][T11055] FAT-fs (loop4): Directory bread(block 71) failed
[  152.985359][T11055] FAT-fs (loop4): Directory bread(block 72) failed
[  152.991902][T11055] FAT-fs (loop4): Directory bread(block 73) failed
[  153.020526][ T2267] Bluetooth: hci0: command 0x1003 tx timeout
[  153.026373][T10847] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  153.293774][T11074] loop4: detected capacity change from 0 to 40427
[  153.302222][T11074] F2FS-fs (loop4): invalid crc value
[  153.311259][T11074] F2FS-fs (loop4): Found nat_bits in checkpoint
[  153.350459][T11074] F2FS-fs (loop4): Start checkpoint disabled!
[  153.355958][T11070] loop3: detected capacity change from 0 to 40427
[  153.357130][T11074] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  153.363574][T11070] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  153.395456][T11070] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  153.410382][   T28] audit: type=1400 audit(1736817187.362:1048): avc:  denied  { link } for  pid=11073 comm="syz.4.4760" name="file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  153.418514][T11070] F2FS-fs (loop3): Found nat_bits in checkpoint
[  153.455614][  T759] kworker/u4:6: attempt to access beyond end of device
[  153.455614][  T759] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  153.517023][   T28] audit: type=1400 audit(1736817187.472:1049): avc:  denied  { ioctl } for  pid=11108 comm="syz.5.4776" path="socket:[53486]" dev="sockfs" ino=53486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  153.548907][T11070] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  153.562848][T11070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  153.753999][   T28] audit: type=1400 audit(1736817187.712:1050): avc:  denied  { remount } for  pid=11069 comm="syz.3.4759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  153.755035][T11070] F2FS-fs (loop3): Start checkpoint disabled!
[  153.839493][   T28] audit: type=1326 audit(1736817187.792:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.3.4786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7e6d85d29 code=0x0
[  154.128301][   T28] audit: type=1400 audit(1736817188.082:1052): avc:  denied  { create } for  pid=11145 comm="syz.7.4791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  154.148794][   T28] audit: type=1400 audit(1736817188.082:1053): avc:  denied  { sys_admin } for  pid=11145 comm="syz.7.4791" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  154.412493][T11172] netlink: 'syz.9.4803': attribute type 12 has an invalid length.
[  154.420195][T11172] netlink: 'syz.9.4803': attribute type 29 has an invalid length.
[  154.428300][T11172] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4803'.
[  154.437348][T11172] netlink: 'syz.9.4803': attribute type 1 has an invalid length.
[  154.839239][T11215] syz.5.4822[11215] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.839331][T11215] syz.5.4822[11215] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.050376][T11227] loop3: detected capacity change from 0 to 512
[  155.069695][T11227] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4829: casefold flag without casefold feature
[  155.082427][T11227] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4829: couldn't read orphan inode 15 (err -117)
[  155.094320][T11227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  155.109485][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  155.181985][   T28] audit: type=1400 audit(1736817189.142:1054): avc:  denied  { setopt } for  pid=11244 comm="syz.3.4835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  155.202102][   T28] audit: type=1400 audit(1736817189.142:1055): avc:  denied  { shutdown } for  pid=11244 comm="syz.3.4835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  155.303400][T11251] loop3: detected capacity change from 0 to 512
[  155.315960][T11251] EXT4-fs: Ignoring removed oldalloc option
[  155.326230][T11251] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  155.347267][T11251] EXT4-fs (loop3): 1 truncate cleaned up
[  155.356692][T11251] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  155.410482][T11251] support for the xor transformation has been removed.
[  155.425867][ T9053] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  155.451122][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  155.477985][T11271] loop3: detected capacity change from 0 to 1024
[  155.501615][T11271] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  155.518880][T11277] loop4: detected capacity change from 0 to 256
[  155.525554][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  155.525701][T11277] exfat: Deprecated parameter 'namecase'
[  155.557255][T11277] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  156.230494][  T975] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  156.411517][  T975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.426990][  T975] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.441784][   T28] audit: type=1400 audit(1736817190.402:1056): avc:  denied  { read } for  pid=11354 comm="syz.3.4883" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  156.446371][  T975] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  156.490520][   T28] audit: type=1400 audit(1736817190.422:1057): avc:  denied  { open } for  pid=11354 comm="syz.3.4883" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  156.496459][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  156.542889][   T28] audit: type=1400 audit(1736817190.432:1058): avc:  denied  { ioctl } for  pid=11354 comm="syz.3.4883" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  156.566294][  T975] usb 5-1: SerialNumber: syz
[  156.681460][T11357] loop3: detected capacity change from 0 to 40427
[  156.688374][T11357] F2FS-fs (loop3): Image doesn't support compression
[  156.695774][T11357] F2FS-fs (loop3): invalid crc value
[  156.702635][T11357] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  156.734703][T11357] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  156.746889][   T28] audit: type=1400 audit(1736817190.702:1059): avc:  denied  { map } for  pid=11356 comm="syz.3.4884" path="/109/bus/cpuacct.usage_percpu_sys" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  156.776966][ T9053] syz-executor: attempt to access beyond end of device
[  156.776966][ T9053] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  156.793083][  T975] usb 5-1: 0:2 : does not exist
[  156.805172][  T975] usb 5-1: USB disconnect, device number 19
[  156.874613][T11367] input: syz0 as /devices/virtual/input/input25
[  157.111765][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4894'.
[  157.567206][T11413] loop4: detected capacity change from 0 to 256
[  157.577461][T11413] exfat: Deprecated parameter 'utf8'
[  157.582974][T11413] exfat: Deprecated parameter 'utf8'
[  157.588864][T11413] exfat: Deprecated parameter 'utf8'
[  157.597234][T11413] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  157.647469][   T28] audit: type=1400 audit(1736817191.602:1060): avc:  denied  { shutdown } for  pid=11420 comm="syz.7.4913" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  157.751091][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4922'.
[  157.829893][   T28] audit: type=1400 audit(1736817191.782:1061): avc:  denied  { write } for  pid=11447 comm="syz.4.4927" path="socket:[53876]" dev="sockfs" ino=53876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  157.868397][T11452] loop4: detected capacity change from 0 to 1024
[  157.877186][T11452] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[  157.896524][T11452] EXT4-fs (loop4): invalid journal inode
[  157.902319][T11452] EXT4-fs (loop4): can't get journal size
[  157.927706][T11452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  157.955782][T11452] EXT4-fs (loop4): shut down requested (2)
[  157.999014][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  158.080497][T11463] loop3: detected capacity change from 0 to 40427
[  158.087328][T11463] F2FS-fs (loop3): fault_injection options not supported
[  158.094911][T11463] F2FS-fs (loop3): invalid crc value
[  158.101861][T11463] F2FS-fs (loop3): Found nat_bits in checkpoint
[  158.131806][T11463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  158.169575][T11463] netlink: 'syz.3.4933': attribute type 1 has an invalid length.
[  158.177524][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4933'.
[  158.372559][T11517] loop3: detected capacity change from 0 to 1024
[  158.379382][T11517] EXT4-fs (loop3): Test dummy encryption mode enabled
[  158.389381][T11517] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  158.408562][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  158.413579][T11521] device bridge0 entered promiscuous mode
[  158.420177][T11520] device bridge0 left promiscuous mode
[  158.438138][T11525] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  158.473543][T11535] loop4: detected capacity change from 0 to 1024
[  158.480533][T11535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  158.490703][T11535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  158.517302][T11542] netlink: 'syz.3.4966': attribute type 9 has an invalid length.
[  158.525092][T11542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4966'.
[  158.530605][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  158.880504][   T19] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  159.071495][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.089847][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.101763][   T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  159.115285][   T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  159.124334][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.141154][   T19] usb 5-1: config 0 descriptor??
[  159.148011][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4984'.
[  159.157040][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4984'.
[  159.403446][T11589] input: syz1 as /devices/virtual/input/input26
[  159.550225][   T19] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving
[  159.567880][   T19] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  159.627250][T11614] loop3: detected capacity change from 0 to 512
[  159.635214][T11614] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.5000: corrupted in-inode xattr
[  159.647369][T11614] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.5000: couldn't read orphan inode 15 (err -117)
[  159.659302][T11614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  159.670156][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  159.670172][   T28] audit: type=1400 audit(1736817193.622:1068): avc:  denied  { watch } for  pid=11613 comm="syz.3.5000" path="/136/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.670906][T11614] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  159.709839][   T28] audit: type=1400 audit(1736817193.662:1069): avc:  denied  { bind } for  pid=11619 comm="syz.7.5002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  159.730554][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  159.758340][   T28] audit: type=1400 audit(1736817193.712:1070): avc:  denied  { read write } for  pid=11629 comm="syz.3.5003" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  159.781679][   T28] audit: type=1400 audit(1736817193.712:1071): avc:  denied  { open } for  pid=11629 comm="syz.3.5003" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  159.811067][   T60] usb 5-1: USB disconnect, device number 20
[  159.825512][   T28] audit: type=1400 audit(1736817193.782:1072): avc:  denied  { unmount } for  pid=9053 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  159.838424][T11637] loop3: detected capacity change from 0 to 128
[  159.984348][   T28] audit: type=1326 audit(1736817193.942:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  160.007787][   T28] audit: type=1326 audit(1736817193.942:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  160.031377][   T28] audit: type=1326 audit(1736817193.942:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  160.055024][   T28] audit: type=1326 audit(1736817193.942:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  160.085523][   T28] audit: type=1326 audit(1736817193.942:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.9.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  160.250696][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5033'.
[  160.433810][T11694] loop4: detected capacity change from 0 to 40427
[  160.440762][T11694] F2FS-fs (loop4): fault_injection options not supported
[  160.448212][T11694] F2FS-fs (loop4): invalid crc value
[  160.454407][T11694] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.488224][T11694] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  160.526523][T11701] f2fs_ckpt-7:4: attempt to access beyond end of device
[  160.526523][T11701] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  160.594415][T11724] loop3: detected capacity change from 0 to 512
[  160.612483][T11724] EXT4-fs: Ignoring removed i_version option
[  160.630795][T11724] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  160.669137][T11724] EXT4-fs (loop3): 1 truncate cleaned up
[  160.680500][T11724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  160.687980][T11732] loop4: detected capacity change from 0 to 512
[  160.704628][T11732] EXT4-fs: Ignoring removed mblk_io_submit option
[  160.713875][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  160.734800][T11732] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.5052: invalid block
[  160.746816][T11732] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5052: invalid indirect mapped block 10 (level 1)
[  160.768495][T11732] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5052: invalid indirect mapped block 8 (level 1)
[  160.783344][T11732] EXT4-fs (loop4): 1 truncate cleaned up
[  160.788871][T11732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  160.818423][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  160.882670][T11758] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5063'.
[  160.889001][T11759] loop4: detected capacity change from 0 to 2048
[  160.910053][T11759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  160.920978][T11763] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5065'.
[  160.938287][T11765] loop3: detected capacity change from 0 to 256
[  160.944719][T11765] exfat: Deprecated parameter 'utf8'
[  160.945230][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  160.949893][T11765] exfat: Deprecated parameter 'namecase'
[  160.963054][T11765] exfat: Deprecated parameter 'namecase'
[  160.968645][T11765] exfat: Deprecated parameter 'utf8'
[  160.975837][T11765] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  161.035894][T11785] 9pnet_fd: Insufficient options for proto=fd
[  161.161306][T11794] loop3: detected capacity change from 0 to 40427
[  161.168466][T11794] F2FS-fs (loop3): invalid crc value
[  161.174977][T11794] F2FS-fs (loop3): Found nat_bits in checkpoint
[  161.197977][T11794] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  161.216703][ T9053] syz-executor: attempt to access beyond end of device
[  161.216703][ T9053] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  161.360172][T11806] loop3: detected capacity change from 0 to 512
[  161.367530][T11806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  161.375382][T11806] System zones: 1-12
[  161.379748][T11806] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5083: bg 0: block 328: padding at end of block bitmap is not set
[  161.394419][T11806] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  161.403206][T11806] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5083: invalid indirect mapped block 65280 (level 0)
[  161.417335][T11806] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.5083: attempt to clear invalid blocks 33619980 len 1
[  161.430870][T11806] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5083: invalid indirect mapped block 1819239214 (level 0)
[  161.444848][T11806] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5083: invalid indirect mapped block 1819239214 (level 1)
[  161.458990][T11806] EXT4-fs (loop3): 1 orphan inode deleted
[  161.464615][T11806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  161.515106][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  161.595036][T11830] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5093'.
[  161.940520][   T60] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  162.141687][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.160277][T11875] loop4: detected capacity change from 0 to 40427
[  162.171660][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.174843][T11875] F2FS-fs (loop4): Image doesn't support compression
[  162.189847][T11875] F2FS-fs (loop4): Image doesn't support compression
[  162.189919][   T60] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  162.214984][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.218637][T11875] F2FS-fs (loop4): fault_type options not supported
[  162.230962][   T60] usb 4-1: config 0 descriptor??
[  162.242328][T11875] F2FS-fs (loop4): invalid crc value
[  162.261933][T11875] F2FS-fs (loop4): Found nat_bits in checkpoint
[  162.278413][T11926] SELinux:  Context : is not valid (left unmapped).
[  162.310793][T11875] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  162.609899][T11970] netem: change failed
[  162.649421][   T60] hid-generic 0003:6161:4D15.0029: hidraw0: USB HID v0.00 Device [HID 6161:4d15] on usb-dummy_hcd.3-1/input0
[  162.700439][   T19] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  162.708301][ T9963] tipc: Left network mode
[  162.897420][   T19] usb 5-1: config 0 has no interfaces?
[  162.920503][   T19] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  162.937861][T11979] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.944892][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.952989][T11979] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.963954][   T19] usb 5-1: Product: syz
[  162.968432][T11979] device bridge_slave_0 entered promiscuous mode
[  162.976828][   T19] usb 5-1: Manufacturer: syz
[  162.986450][T11979] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.993389][   T19] usb 5-1: SerialNumber: syz
[  163.003557][   T19] usb 5-1: config 0 descriptor??
[  163.010745][T11979] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.022393][T11979] device bridge_slave_1 entered promiscuous mode
[  163.043090][T11997] 9pnet_fd: Insufficient options for proto=fd
[  163.138654][T11979] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.145540][T11979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.152667][T11979] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.159506][T11979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.204255][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  163.212188][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.219371][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.228298][    T6] usb 5-1: USB disconnect, device number 21
[  163.236455][ T9963] device bridge_slave_1 left promiscuous mode
[  163.242500][ T9963] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.250999][ T9963] device bridge_slave_0 left promiscuous mode
[  163.258575][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.472936][T12038] bridge0: port 3(gretap0) entered blocking state
[  163.483296][T12038] bridge0: port 3(gretap0) entered disabled state
[  163.490420][T12054] bridge0: port 3(gretap0) entered disabled state
[  163.498298][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.508201][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.515107][ T9495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.533577][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.541669][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.548543][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.555867][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.563724][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.581769][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.592673][T11979] device veth0_vlan entered promiscuous mode
[  163.601145][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.614570][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  163.622796][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.630180][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.640890][T11979] device veth1_macvtap entered promiscuous mode
[  163.656051][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  163.664586][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  163.771295][T12083] incfs: Options parsing error. -22
[  163.776592][T12083] incfs: mount failed -22
[  163.832628][T12088] loop4: detected capacity change from 0 to 8192
[  163.954418][T12097] loop4: detected capacity change from 0 to 2048
[  164.006675][T12097] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  164.032224][T12091] loop8: detected capacity change from 0 to 40427
[  164.045199][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  164.048992][T12091] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  164.058721][T12091] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  164.082025][T12091] F2FS-fs (loop8): invalid crc value
[  164.108041][T12091] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  164.163790][T12117] 9pnet_fd: Insufficient options for proto=fd
[  164.170420][T12091] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  164.177471][T12091] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  164.228074][T12126] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5226'.
[  164.331073][T12134] netlink: '+}[@': attribute type 3 has an invalid length.
[  164.475581][T12170] loop8: detected capacity change from 0 to 1024
[  164.476039][T12172] 9pnet_fd: Insufficient options for proto=fd
[  164.482600][T12170] EXT4-fs (loop8): Test dummy encryption mode enabled
[  164.510551][T12170] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  164.545219][T12181] TCP: TCP_TX_DELAY enabled
[  164.564561][T11979] EXT4-fs (loop8): unmounting filesystem.
[  164.677067][T12174] loop4: detected capacity change from 0 to 40427
[  164.680790][ T8020] usb 4-1: USB disconnect, device number 15
[  164.696749][T12174] F2FS-fs (loop4): Found nat_bits in checkpoint
[  164.753660][T12174] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  164.786946][ T9410] syz-executor: attempt to access beyond end of device
[  164.786946][ T9410] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  164.850661][T12237] 9pnet_fd: p9_fd_create_tcp (12237): problem connecting socket to 127.0.0.1
[  164.960308][T12250] netlink: 'syz.8.5280': attribute type 3 has an invalid length.
[  164.967956][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5280'.
[  165.031880][T12244] loop3: detected capacity change from 0 to 40427
[  165.039223][T12244] F2FS-fs (loop3): invalid crc value
[  165.045630][T12244] F2FS-fs (loop3): Found nat_bits in checkpoint
[  165.069203][T12244] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  165.128499][T12262] loop3: detected capacity change from 0 to 128
[  165.138425][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  165.138442][   T28] audit: type=1400 audit(1736819777.092:1120): avc:  denied  { remount } for  pid=12261 comm="syz.3.5285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  165.234096][   T28] audit: type=1326 audit(1736819777.182:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12269 comm="syz.5.5289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ee6b85d29 code=0x0
[  165.317584][T12280] loop3: detected capacity change from 0 to 2048
[  165.331362][T12280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  165.339727][T12280] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.353369][T12280] fs-verity: sha256 using implementation "sha256-avx2"
[  165.365510][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  165.378061][T12286] loop3: detected capacity change from 0 to 256
[  165.396443][T12288] device veth1_macvtap left promiscuous mode
[  165.402440][T12288] device macsec0 entered promiscuous mode
[  165.502603][T12295] loop3: detected capacity change from 0 to 2048
[  165.511405][T12295] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  165.523807][T12295] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  165.538469][T12295] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 30 with max blocks 3 with error 28
[  165.550776][T12295] EXT4-fs (loop3): This should not happen!! Data will be lost
[  165.550776][T12295] 
[  165.560409][T12295] EXT4-fs (loop3): Total free blocks count 0
[  165.566289][T12295] EXT4-fs (loop3): Free/Dirty block details
[  165.572245][T12295] EXT4-fs (loop3): free_blocks=2415919104
[  165.577894][T12295] EXT4-fs (loop3): dirty_blocks=48
[  165.583178][T12295] EXT4-fs (loop3): Block reservation details
[  165.589245][T12295] EXT4-fs (loop3): i_reserved_data_blocks=3
[  165.597180][T12293] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 30 with error 28
[  165.598400][   T28] audit: type=1400 audit(1736819777.553:1122): avc:  denied  { relabelfrom } for  pid=12300 comm="syz.8.5300" name="NETLINK" dev="sockfs" ino=56231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  165.633713][   T28] audit: type=1400 audit(1736819777.563:1123): avc:  denied  { relabelto } for  pid=12300 comm="syz.8.5300" name="NETLINK" dev="sockfs" ino=56231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  165.683348][T12305] loop3: detected capacity change from 0 to 256
[  165.689687][T12305] exfat: Deprecated parameter 'utf8'
[  165.698558][T12305] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  165.754536][T12320] loop3: detected capacity change from 0 to 4096
[  165.774681][T12320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  165.819617][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  165.892295][   T28] audit: type=1400 audit(1736819777.843:1124): avc:  denied  { mount } for  pid=12338 comm="syz.3.5319" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  165.914836][   T28] audit: type=1400 audit(1736819777.843:1125): avc:  denied  { unmount } for  pid=9053 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  165.999900][ T8023] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  166.019469][   T28] audit: type=1400 audit(1736819777.963:1126): avc:  denied  { read write } for  pid=12343 comm="syz.8.5321" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  166.046182][   T28] audit: type=1400 audit(1736819777.993:1127): avc:  denied  { open } for  pid=12343 comm="syz.8.5321" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  166.069488][   T28] audit: type=1400 audit(1736819777.993:1128): avc:  denied  { ioctl } for  pid=12343 comm="syz.8.5321" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  166.189913][ T8023] usb 5-1: Using ep0 maxpacket: 16
[  166.195957][ T8023] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  166.215197][ T8023] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.239867][ T8023] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  166.270473][ T8023] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  166.290303][ T8023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.308360][ T8023] usb 5-1: Product: syz
[  166.312431][ T8023] usb 5-1: Manufacturer: syz
[  166.316781][ T8023] usb 5-1: SerialNumber: syz
[  166.321367][T12348] loop8: detected capacity change from 0 to 40427
[  166.340602][T12348] F2FS-fs (loop8): invalid crc value
[  166.366704][T12348] F2FS-fs (loop8): Found nat_bits in checkpoint
[  166.429922][T12348] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  166.473091][T12348] syz.8.5323: attempt to access beyond end of device
[  166.473091][T12348] loop8: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  166.507256][T11979] syz-executor: attempt to access beyond end of device
[  166.507256][T11979] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.588720][   T28] audit: type=1400 audit(1736819778.533:1129): avc:  denied  { write } for  pid=12384 comm="syz.5.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  166.665126][T12392] loop3: detected capacity change from 0 to 512
[  166.672620][T12392] EXT4-fs: Ignoring removed i_version option
[  166.678906][T12392] EXT4-fs error (device loop3): ext4_get_journal_inode:5721: comm syz.3.5343: inode #196608: comm syz.3.5343: iget: illegal inode #
[  166.681529][T12394] devpts: called with bogus options
[  166.700396][T12392] EXT4-fs (loop3): Remounting filesystem read-only
[  166.712211][T12392] EXT4-fs (loop3): no journal found
[  166.717319][T12392] EXT4-fs (loop3): can't get journal size
[  166.733455][T12392] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  166.743016][ T8023] usb 5-1: 0:2 : does not exist
[  166.752867][T12392] EXT4-fs (loop3): failed to initialize system zone (-22)
[  166.773664][T12392] EXT4-fs (loop3): mount failed
[  166.826645][T12409] loop3: detected capacity change from 0 to 512
[  166.833572][T12409] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  166.842532][T12409] EXT4-fs (loop3): invalid journal inode
[  166.848208][T12409] EXT4-fs (loop3): can't get journal size
[  166.855088][T12409] EXT4-fs (loop3): 1 truncate cleaned up
[  166.861472][T12409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  166.881776][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  166.910965][T12419] loop3: detected capacity change from 0 to 16
[  166.917635][T12419] erofs: (device loop3): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  166.928630][T12419] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[  166.939513][T12419] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[  166.950173][T12419] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 58320
[  167.000930][T12425] loop3: detected capacity change from 0 to 512
[  167.011354][T12425] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.5357: Failed to acquire dquot type 0
[  167.022852][T12425] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.5357: Failed to acquire dquot type 0
[  167.034990][T12425] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.5357: Failed to acquire dquot type 0
[  167.046534][T12425] EXT4-fs (loop3): 1 orphan inode deleted
[  167.052129][T12425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  167.060870][T12425] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.071400][   T60] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  167.080357][ T9053] EXT4-fs (loop3): unmounting filesystem.
[  167.129019][T12435] loop3: detected capacity change from 0 to 512
[  167.136250][T12435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  167.147649][T12435] EXT4-fs (loop3): 1 truncate cleaned up
[  167.204737][ T9053] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  167.259727][   T60] usb 9-1: Using ep0 maxpacket: 16
[  167.265717][   T60] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  167.274056][   T60] usb 9-1: config 0 has no interface number 0
[  167.280423][   T60] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.292049][   T60] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.301753][   T60] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  167.310570][   T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.319236][   T60] usb 9-1: config 0 descriptor??
[  167.354059][ T8023] usb 5-1: USB disconnect, device number 22
[  167.430473][T12439] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.437327][T12439] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.444760][T12439] device bridge_slave_0 entered promiscuous mode
[  167.453564][T12439] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.460471][T12439] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.467863][T12439] device bridge_slave_1 entered promiscuous mode
[  167.490221][T12446] fuse: Bad value for 'user_id'
[  167.536967][T12439] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.543841][T12439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.550929][T12439] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.557824][T12439] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.584173][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  167.592295][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.599458][ T9963] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.614607][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  167.631462][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.638501][ T9963] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.646453][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.659479][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.666542][ T9963] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.683826][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.691833][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.702961][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  167.716954][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  167.726222][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  167.733939][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  167.744057][T12439] device veth0_vlan entered promiscuous mode
[  167.754539][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  167.763615][T12439] device veth1_macvtap entered promiscuous mode
[  167.773324][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.782426][ T9495] device bridge_slave_1 left promiscuous mode
[  167.788381][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.795911][ T9495] device bridge_slave_0 left promiscuous mode
[  167.802061][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.809952][ T9495] device veth0_vlan left promiscuous mode
[  167.868312][ T9963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.908327][T12472] loop6: detected capacity change from 0 to 128
[  167.917398][T12472] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.928951][   T60] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.002A/input/input27
[  167.942462][   T60] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.002A/input/input28
[  167.954854][   T60] uclogic 0003:28BD:0071.002A: input,hiddev96,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1
[  168.132988][    T6] usb 9-1: USB disconnect, device number 2
[  168.601454][T12506] device ip6erspan0 entered promiscuous mode
[  168.745763][T12518] loop4: detected capacity change from 0 to 128
[  169.022446][T12547] loop6: detected capacity change from 0 to 128
[  169.066098][T12553] loop4: detected capacity change from 0 to 1024
[  169.094797][T12553] EXT4-fs mount: 4 callbacks suppressed
[  169.094819][T12553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  169.126607][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  169.170458][T12571] loop4: detected capacity change from 0 to 128
[  169.273869][T12555] loop6: detected capacity change from 0 to 40427
[  169.281026][T12555] F2FS-fs (loop6): Image doesn't support compression
[  169.288886][T12584] overlayfs: failed to clone lowerpath
[  169.292164][T12555] F2FS-fs (loop6): Image doesn't support compression
[  169.300781][T12555] F2FS-fs (loop6): fault_type options not supported
[  169.310618][T12555] F2FS-fs (loop6): invalid crc value
[  169.330228][T12555] F2FS-fs (loop6): Found nat_bits in checkpoint
[  169.375939][T12555] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  169.432191][T12610] f2fs_ckpt-7:6: attempt to access beyond end of device
[  169.432191][T12610] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  169.587233][T12625] loop8: detected capacity change from 0 to 128
[  169.594073][T12625] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  169.603264][T12625] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  169.612388][T12625] ext2 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  169.652436][T11979] EXT4-fs (loop8): unmounting filesystem.
[  169.690564][T12640] loop8: detected capacity change from 0 to 128
[  169.921510][T12663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12663 comm=syz.8.5462
[  170.039705][T12676] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  170.066709][T12682] loop4: detected capacity change from 0 to 512
[  170.080787][T12682] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  170.095649][T12682] EXT4-fs (loop4): mount failed
[  170.176192][T12697] netlink: 'syz.4.5476': attribute type 4 has an invalid length.
[  170.191739][T12697] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5476'.
[  170.221062][T12704] loop4: detected capacity change from 0 to 16
[  170.221537][T12704] erofs: (device loop4): mounted with root inode @ nid 36.
[  170.273410][T12719] loop8: detected capacity change from 0 to 128
[  170.281186][T12719] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  170.289735][T12719] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.301338][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  170.301354][   T28] audit: type=1400 audit(1736819782.253:1134): avc:  denied  { create } for  pid=12718 comm="syz.8.5488" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  170.350009][T11979] EXT4-fs (loop8): unmounting filesystem.
[  170.368783][   T28] audit: type=1400 audit(1736819782.253:1135): avc:  denied  { read } for  pid=12718 comm="syz.8.5488" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  170.417243][   T28] audit: type=1400 audit(1736819782.253:1136): avc:  denied  { rename } for  pid=12718 comm="syz.8.5488" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  170.461757][T12730] incfs: Options parsing error. -22
[  170.466829][T12730] incfs: mount failed -22
[  170.729112][   T60] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  170.788094][T12759] syz.5.5505[12759] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.788145][T12759] syz.5.5505[12759] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.881884][   T28] audit: type=1400 audit(1736819782.833:1137): avc:  denied  { mounton } for  pid=12773 comm="syz.5.5512" path="/1220/file0" dev="tmpfs" ino=6414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  170.916369][   T60] usb 7-1: Using ep0 maxpacket: 16
[  170.924644][   T60] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[  170.933845][   T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  170.942132][   T60] usb 7-1: Product: syz
[  170.946206][   T60] usb 7-1: Manufacturer: syz
[  170.950645][   T60] usb 7-1: SerialNumber: syz
[  170.955613][   T60] r8152-cfgselector 7-1: config 0 descriptor??
[  171.160234][   T28] audit: type=1326 audit(1736819783.114:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.9.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  171.183794][   T28] audit: type=1326 audit(1736819783.114:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.9.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  171.207124][   T28] audit: type=1326 audit(1736819783.114:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.9.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  171.230405][   T28] audit: type=1326 audit(1736819783.114:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.9.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  171.253741][   T28] audit: type=1326 audit(1736819783.114:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.9.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  171.277442][   T28] audit: type=1326 audit(1736819783.114:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.9.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5b09f85d29 code=0x7ffc0000
[  171.363413][   T60] r8152-cfgselector 7-1: Unknown version 0x0000
[  171.370777][   T60] r8152-cfgselector 7-1: bad CDC descriptors
[  171.380933][   T60] r8152-cfgselector 7-1: Unknown version 0x0000
[  171.393021][   T60] r8152-cfgselector 7-1: USB disconnect, device number 9
[  171.523817][T12813] loop4: detected capacity change from 0 to 512
[  171.530514][T12813] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.541739][T12813] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  171.550330][T12813] EXT4-fs (loop4): 1 truncate cleaned up
[  171.555830][T12813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  171.574924][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  171.724137][T12827] netlink: 'syz.8.5536': attribute type 3 has an invalid length.
[  171.883843][T12848] loop6: detected capacity change from 0 to 512
[  171.907064][T12848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  171.907078][T12855] loop8: detected capacity change from 0 to 128
[  171.927430][T12855] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  171.936202][T12848] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.946668][T12855] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.960804][T12855] fscrypt (loop8, inode 12): Mutually exclusive encryption flags (0x1b)
[  171.980823][T12848] overlayfs: './file1' not a directory
[  172.007552][T11979] EXT4-fs (loop8): unmounting filesystem.
[  172.018614][T12439] EXT4-fs (loop6): unmounting filesystem.
[  172.043300][T12868] syz.6.5553[12868] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.043373][T12868] syz.6.5553[12868] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.067197][T12870] loop8: detected capacity change from 0 to 256
[  172.085598][T12868] SELinux:  policydb version 0 does not match my version range 15-33
[  172.095910][T12868] SELinux: failed to load policy
[  172.112709][T12870] exfat: Deprecated parameter 'namecase'
[  172.129383][T12870] exFAT-fs (loop8): Invalid boot checksum (boot checksum : 0x110001d0, checksum : 0x1119abd0)
[  172.148268][T12870] exFAT-fs (loop8): invalid boot region
[  172.158931][T12870] exFAT-fs (loop8): failed to recognize exfat type
[  172.178737][T12883] netlink: 'syz.6.5561': attribute type 1 has an invalid length.
[  172.214113][T12893] device vlan3 entered promiscuous mode
[  172.315779][T12916] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5573'.
[  172.384759][T12927] syz.4.5582[12927] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.384838][T12927] syz.4.5582[12927] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.478832][    T6] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  172.560099][T12938] loop4: detected capacity change from 0 to 1024
[  172.566492][T12938] EXT4-fs: Ignoring removed i_version option
[  172.572416][T12938] EXT4-fs: Ignoring removed i_version option
[  172.590480][T12938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  172.599454][T12938] EXT4-fs (loop4): unmounting filesystem.
[  172.678788][    T6] usb 7-1: Using ep0 maxpacket: 16
[  172.684440][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5589'.
[  172.699200][    T6] usb 7-1: config 33 has an invalid descriptor of length 255, skipping remainder of the config
[  172.718718][    T6] usb 7-1: config 33 interface 0 has no altsetting 0
[  172.722240][T12953] loop4: detected capacity change from 0 to 512
[  172.725925][    T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  172.747176][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  172.755048][    T6] usb 7-1: SerialNumber: syz
[  172.755947][T12953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  172.768603][    T6] cdc_acm 7-1:33.0: Control and data interfaces are not separated!
[  172.776506][    T6] cdc_acm 7-1:33.0: This needs exactly 3 endpoints
[  172.778555][T12953] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.783032][    T6] cdc_acm: probe of 7-1:33.0 failed with error -22
[  172.828333][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5595'.
[  172.837236][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5595'.
[  172.838413][ T9410] EXT4-fs (loop4): unmounting filesystem.
[  172.858926][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5597'.
[  172.975433][    T6] usb 7-1: USB disconnect, device number 10
[  173.268675][   T60] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  173.458588][   T60] usb 5-1: Using ep0 maxpacket: 16
[  173.464612][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.485137][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.510365][   T60] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  173.526835][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.545695][   T60] usb 5-1: config 0 descriptor??
[  173.745977][T13062] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  173.953486][   T60] appleir 0003:05AC:8241.002B: unknown main item tag 0x0
[  173.960439][   T60] appleir 0003:05AC:8241.002B: unknown main item tag 0x0
[  173.967292][   T60] appleir 0003:05AC:8241.002B: unknown main item tag 0x0
[  173.974159][   T60] appleir 0003:05AC:8241.002B: unknown main item tag 0x0
[  173.981296][   T60] appleir 0003:05AC:8241.002B: unknown main item tag 0x0
[  173.988389][   T60] appleir 0003:05AC:8241.002B: No inputs registered, leaving
[  174.001161][   T60] appleir 0003:05AC:8241.002B: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  174.168502][    T6] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  174.229479][  T975] usb 5-1: USB disconnect, device number 23
[  174.359562][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.370495][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.380100][    T6] usb 7-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  174.390312][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.399003][    T6] usb 7-1: config 0 descriptor??
[  174.405740][T13120] overlayfs: failed to clone upperpath
[  174.659853][T13148] device vlan2 entered promiscuous mode
[  174.709148][T13151] overlayfs: missing 'lowerdir'
[  174.774800][T13164] loop8: detected capacity change from 0 to 2048
[  174.805518][T13164] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  174.814974][    T6] logitech-hidpp-device 0003:046D:C086.002C: unknown main item tag 0x4
[  174.823552][    T6] logitech-hidpp-device 0003:046D:C086.002C: item fetching failed at offset 2/5
[  174.833882][    T6] logitech-hidpp-device 0003:046D:C086.002C: hidpp_probe:parse failed
[  174.842190][    T6] logitech-hidpp-device: probe of 0003:046D:C086.002C failed with error -22
[  174.848745][T11979] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  174.889195][T11979] EXT4-fs (loop8): unmounting filesystem.
[  175.015360][ T8023] usb 7-1: USB disconnect, device number 11
[  175.086928][T13216] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5711'.
[  175.110142][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5713'.
[  175.293942][T13252] xt_bpf: check failed: parse error
[  175.304966][T13241] loop4: detected capacity change from 0 to 40427
[  175.312602][T13241] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  175.320220][T13241] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  175.334578][T13241] F2FS-fs (loop4): invalid crc value
[  175.339788][T13259] loop8: detected capacity change from 0 to 512
[  175.348075][T13259] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.5731: bad orphan inode 11
[  175.358758][T13259] ext4_test_bit(bit=10, block=4) = 1
[  175.364278][T13259] is_bad_inode(inode)=0
[  175.368525][T13259] NEXT_ORPHAN(inode)=2080374784
[  175.373472][T13241] F2FS-fs (loop4): Found nat_bits in checkpoint
[  175.373516][T13259] max_ino=32
[  175.382839][T13259] i_nlink=0
[  175.386034][T13259] EXT4-fs (loop8): 1 truncate cleaned up
[  175.393197][T13259] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  175.416918][T11979] EXT4-fs (loop8): unmounting filesystem.
[  175.458736][T13241] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  175.468247][T13241] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  175.888806][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5768'.
[  175.905600][T13324] loop8: detected capacity change from 0 to 40427
[  175.912730][T13324] F2FS-fs (loop8): fault_type options not supported
[  175.919985][T13324] F2FS-fs (loop8): invalid crc value
[  175.926241][T13324] F2FS-fs (loop8): Found nat_bits in checkpoint
[  175.963896][T13324] F2FS-fs (loop8): Start checkpoint disabled!
[  175.971130][T13324] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  175.978800][ T8023] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  176.044681][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5772'.
[  176.134950][    T8] kworker/u4:0: attempt to access beyond end of device
[  176.134950][    T8] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  176.158227][ T8023] usb 5-1: Using ep0 maxpacket: 16
[  176.166010][ T8023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.176820][ T8023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.186723][ T8023] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  176.195765][ T8023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.204090][ T8023] usb 5-1: config 0 descriptor??
[  176.357415][T13384] hub 9-0:1.0: USB hub found
[  176.362052][T13384] hub 9-0:1.0: 1 port detected
[  176.612795][ T8023] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.002D/input/input30
[  176.646762][T13401] netlink: 'syz.6.5793': attribute type 1 has an invalid length.
[  176.655309][T13401] netlink: 'syz.6.5793': attribute type 2 has an invalid length.
[  176.664227][T13401] netlink: 'syz.6.5793': attribute type 1 has an invalid length.
[  176.671927][T13401] netlink: 'syz.6.5793': attribute type 2 has an invalid length.
[  176.689537][ T8023] appleir 0003:05AC:8241.002D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  176.691796][T13405] loop6: detected capacity change from 0 to 256
[  176.712900][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  176.712916][   T28] audit: type=1400 audit(1736819788.665:1162): avc:  denied  { setcurrent } for  pid=13402 comm="syz.8.5794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  176.743240][   T28] audit: type=1401 audit(1736819788.665:1163): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  176.834825][ T8023] usb 5-1: USB disconnect, device number 24
[  176.857933][  T759] Bluetooth: hci0: Frame reassembly failed (-84)
[  177.014699][T13418] loop6: detected capacity change from 0 to 40427
[  177.021762][T13418] F2FS-fs (loop6): fault_injection options not supported
[  177.028753][T13418] F2FS-fs (loop6): Image doesn't support compression
[  177.035322][T13418] F2FS-fs (loop6): Image doesn't support compression
[  177.042480][T13418] F2FS-fs (loop6): invalid crc value
[  177.049257][T13418] F2FS-fs (loop6): Found nat_bits in checkpoint
[  177.087751][T13418] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  177.125506][T13418] syz.6.5801: attempt to access beyond end of device
[  177.125506][T13418] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  177.139948][T13418] syz.6.5801: attempt to access beyond end of device
[  177.139948][T13418] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  177.162276][T12439] syz-executor: attempt to access beyond end of device
[  177.162276][T12439] loop6: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  177.259918][T13444] loop6: detected capacity change from 0 to 256
[  177.266126][T13444] exfat: Deprecated parameter 'namecase'
[  177.271838][T13444] exfat: Deprecated parameter 'namecase'
[  177.279216][T13444] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  177.294076][   T28] audit: type=1400 audit(1736819789.245:1164): avc:  denied  { setattr } for  pid=13443 comm="syz.6.5811" name="00000000000000000000000000000041" dev="loop6" ino=1048781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  177.320674][   T28] audit: type=1400 audit(1736819789.275:1165): avc:  denied  { unlink } for  pid=12439 comm="syz-executor" name="file0" dev="loop6" ino=1048786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  177.424781][T13450] kvm: MWAIT instruction emulated as NOP!
[  177.516489][T13457] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.520653][T13467] loop4: detected capacity change from 0 to 256
[  177.531739][T13467] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  177.536202][T13457] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.541935][T13467] FAT-fs (loop4): Filesystem has been set read-only
[  177.550371][T13457] device bridge_slave_0 entered promiscuous mode
[  177.564006][T13457] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.571043][T13457] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.577981][T13467] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  177.578389][T13457] device bridge_slave_1 entered promiscuous mode
[  177.670270][T13457] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.677130][T13457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.684256][T13457] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.691018][T13457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.725735][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.737114][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.742685][   T28] audit: type=1400 audit(1736819789.695:1166): avc:  denied  { nlmsg_write } for  pid=13489 comm="syz.9.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  177.767375][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.781772][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.791268][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.798133][ T9495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.810048][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.818220][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.825068][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.843516][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.851506][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.868618][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.881633][T13457] device veth0_vlan entered promiscuous mode
[  177.888248][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  177.888459][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  177.906685][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  177.907872][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  177.916720][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  177.928018][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  177.928423][   T28] audit: type=1326 audit(1736819789.885:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.5.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee6b85d29 code=0x7ffc0000
[  177.935590][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  177.967862][   T28] audit: type=1326 audit(1736819789.885:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.5.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee6b85d29 code=0x7ffc0000
[  177.970183][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  177.992084][   T28] audit: type=1326 audit(1736819789.925:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.5.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ee6b85d29 code=0x7ffc0000
[  178.021741][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.022983][T13457] device veth1_macvtap entered promiscuous mode
[  178.028944][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.035900][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.042241][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.056793][   T28] audit: type=1326 audit(1736819789.925:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.5.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee6b85d29 code=0x7ffc0000
[  178.057190][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.080777][   T28] audit: type=1326 audit(1736819789.925:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.5.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee6b85d29 code=0x7ffc0000
[  178.088181][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.118416][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.119748][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  178.125565][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.125588][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.134424][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  178.140702][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140725][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140744][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140762][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140781][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140800][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140819][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140839][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140858][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140877][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140897][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140916][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140936][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140954][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140973][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.140992][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.141011][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.141030][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.141049][  T975] hid-generic 0000:0000:0003.002E: unknown main item tag 0x0
[  178.141985][  T975] hid-generic 0000:0000:0003.002E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  178.396800][T13524] loop2: detected capacity change from 0 to 256
[  178.405241][T13524] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  178.417976][  T759] device bridge_slave_1 left promiscuous mode
[  178.423930][  T759] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.431587][  T759] device bridge_slave_0 left promiscuous mode
[  178.437618][  T759] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.445785][  T759] device veth1_macvtap left promiscuous mode
[  178.447766][ T8023] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  178.453053][  T759] device veth0_vlan left promiscuous mode
[  178.619783][T13543] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  178.633976][T13543] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  178.649356][ T8023] usb 5-1: config 0 has no interfaces?
[  178.654675][ T8023] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  178.663706][ T8023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.675237][ T8023] usb 5-1: config 0 descriptor??
[  178.855117][T13549] syz.5.5860[13549] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  178.855196][T13549] syz.5.5860[13549] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  178.867208][ T2267] Bluetooth: hci0: command 0x1003 tx timeout
[  178.884237][T10847] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  178.896494][ T8023] usb 5-1: USB disconnect, device number 25
[  178.943554][T13557] loop8: detected capacity change from 0 to 1024
[  178.950266][T13557] EXT4-fs: Ignoring removed oldalloc option
[  178.956047][T13557] EXT4-fs: Ignoring removed bh option
[  178.969330][T13557] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  178.988156][T11979] EXT4-fs (loop8): unmounting filesystem.
[  179.275610][T13579] netlink: 'syz.9.5872': attribute type 1 has an invalid length.
[  179.284455][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5872'.
[  179.420977][T13590] loop4: detected capacity change from 0 to 512
[  179.492394][  T759] Bluetooth: hci0: Frame reassembly failed (-84)
[  179.656703][T13627] loop2: detected capacity change from 0 to 8192
[  179.664264][T13627] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  180.167514][ T8023] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  180.358440][ T8023] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.377391][ T8023] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.397763][ T8023] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  180.406835][ T8023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  180.427363][ T8023] usb 3-1: SerialNumber: syz
[  180.639139][ T8023] usb 3-1: 0:2 : does not exist
[  180.645894][ T8023] usb 3-1: USB disconnect, device number 8
[  180.678503][T13700] loop4: detected capacity change from 0 to 128
[  181.392413][T13780] loop4: detected capacity change from 0 to 40427
[  181.399537][T13780] F2FS-fs (loop4): fault_type options not supported
[  181.406683][T13780] F2FS-fs (loop4): invalid crc value
[  181.413051][T13780] F2FS-fs (loop4): Found nat_bits in checkpoint
[  181.413778][T13783] loop2: detected capacity change from 0 to 40427
[  181.426340][T13783] F2FS-fs (loop2): fault_injection options not supported
[  181.433339][T13783] F2FS-fs (loop2): Image doesn't support compression
[  181.439930][T13783] F2FS-fs (loop2): Image doesn't support compression
[  181.447115][T13783] F2FS-fs (loop2): invalid crc value
[  181.449620][T13780] F2FS-fs (loop4): Start checkpoint disabled!
[  181.453486][T13783] F2FS-fs (loop2): Found nat_bits in checkpoint
[  181.460276][T13780] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  181.494884][T13783] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  181.502279][ T2269] Bluetooth: hci0: command 0x1003 tx timeout
[  181.507259][T10847] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  181.514057][T13604] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  181.556695][T13783] syz.2.5967: attempt to access beyond end of device
[  181.556695][T13783] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  181.595934][T13783] syz.2.5967: attempt to access beyond end of device
[  181.595934][T13783] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  181.645899][T13457] syz-executor: attempt to access beyond end of device
[  181.645899][T13457] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  181.660462][ T9495] kworker/u4:27: attempt to access beyond end of device
[  181.660462][ T9495] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  181.695753][T13806] 9pnet_fd: Insufficient options for proto=fd
[  181.807224][ T8023] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  181.946791][T13836] loop2: detected capacity change from 0 to 1024
[  181.954234][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5992'.
[  181.974686][T13836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  181.988437][ T8023] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.999333][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  181.999354][   T28] audit: type=1400 audit(2000000000.290:1188): avc:  denied  { rename } for  pid=13835 comm="syz.2.5990" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  182.004767][T13457] EXT4-fs (loop2): unmounting filesystem.
[  182.005799][ T8023] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.044182][ T8023] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  182.057202][ T8023] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  182.066769][ T8023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.087355][ T8023] usb 9-1: config 0 descriptor??
[  182.106056][T13850] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5997'.
[  182.447390][T13884] xt_hashlimit: size too large, truncated to 1048576
[  182.495653][ T8023] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving
[  182.509612][ T8023] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  182.537082][    C1] ==================================================================
[  182.544973][    C1] BUG: KASAN: use-after-free in enqueue_timer+0xa6/0x480
[  182.551827][    C1] Write of size 8 at addr ffff8881110e0a00 by task syz-executor/4663
[  182.559727][    C1] 
[  182.561908][    C1] CPU: 1 PID: 4663 Comm: syz-executor Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0
[  182.571885][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  182.581796][    C1] Call Trace:
[  182.584991][    C1]  <IRQ>
[  182.587691][    C1]  dump_stack_lvl+0x151/0x1b7
[  182.592200][    C1]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  182.597486][    C1]  ? _printk+0xd1/0x111
[  182.601489][    C1]  ? __virt_addr_valid+0x242/0x2f0
[  182.606434][    C1]  print_report+0x158/0x4e0
[  182.610769][    C1]  ? __virt_addr_valid+0x242/0x2f0
[  182.615715][    C1]  ? kasan_complete_mode_report_info+0x90/0x1b0
[  182.621791][    C1]  ? enqueue_timer+0xa6/0x480
[  182.626313][    C1]  kasan_report+0x13c/0x170
[  182.630646][    C1]  ? enqueue_timer+0xa6/0x480
[  182.635155][    C1]  __asan_report_store8_noabort+0x17/0x20
[  182.640727][    C1]  enqueue_timer+0xa6/0x480
[  182.645045][    C1]  __mod_timer+0x8d3/0xcf0
[  182.649297][    C1]  ? mod_timer_pending+0x30/0x30
[  182.654068][    C1]  ? __kasan_check_write+0x14/0x20
[  182.659015][    C1]  ? _raw_spin_lock_bh+0xa4/0x1b0
[  182.663876][    C1]  ? _raw_spin_lock_irq+0x1b0/0x1b0
[  182.669008][    C1]  ? trigger_load_balance+0x220/0x1050
[  182.674291][    C1]  mod_timer+0x1f/0x30
[  182.678198][    C1]  tipc_disc_timeout+0x681/0x8b0
[  182.682973][    C1]  ? tipc_disc_init_msg+0x640/0x640
[  182.688004][    C1]  ? _find_next_bit+0x88/0x130
[  182.692603][    C1]  ? __next_timer_interrupt+0x1eb/0x250
[  182.697984][    C1]  ? tipc_disc_init_msg+0x640/0x640
[  182.703021][    C1]  call_timer_fn+0x3b/0x2d0
[  182.707367][    C1]  ? tipc_disc_init_msg+0x640/0x640
[  182.712394][    C1]  __run_timers+0x72a/0xa10
[  182.716734][    C1]  ? calc_index+0x270/0x270
[  182.721097][    C1]  ? sched_clock+0x9/0x10
[  182.725237][    C1]  ? sched_clock_cpu+0x71/0x2b0
[  182.729925][    C1]  run_timer_softirq+0x69/0xf0
[  182.734526][    C1]  handle_softirqs+0x1db/0x650
[  182.739125][    C1]  ? irqtime_account_irq+0xdc/0x260
[  182.744161][    C1]  __irq_exit_rcu+0x52/0xf0
[  182.748500][    C1]  irq_exit_rcu+0x9/0x10
[  182.752589][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  182.758046][    C1]  </IRQ>
[  182.760838][    C1]  <TASK>
[  182.763626][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  182.769421][    C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70
[  182.775058][    C1] Code: 3c 08 00 74 0c 48 c7 c7 20 f5 0d 87 e8 c1 0a 9b fc 48 83 3d 59 05 ec 01 00 74 29 48 89 df e8 f3 0e 00 00 90 fb bf 01 00 00 00 <e8> 23 ae 2d fc 65 8b 05 e4 7d e0 7a 85 c0 74 03 5b 5d c3 e8 b4 97
[  182.794507][    C1] RSP: 0018:ffffc900009bf6e8 EFLAGS: 00000246
[  182.800455][    C1] RAX: 0000000000000001 RBX: ffff888125357340 RCX: dffffc0000000000
[  182.808212][    C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  182.816020][    C1] RBP: ffffc900009bf6f0 R08: ffffffff8518aee0 R09: ffffed1021ecf5c8
[  182.823836][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11024a6ae67
[  182.831646][    C1] R13: ffff888125357338 R14: ffffea0004de2d40 R15: dffffc0000000000
[  182.839462][    C1]  ? xas_init_marks+0x250/0x2d0
[  182.844147][    C1]  ? _raw_spin_unlock_irq+0x41/0x70
[  182.849280][    C1]  filemap_remove_folio+0x10c/0x4f0
[  182.854305][    C1]  ? filemap_free_folio+0x190/0x190
[  182.859340][    C1]  ? __kasan_check_write+0x14/0x20
[  182.864428][    C1]  ? truncate_cleanup_folio+0x25c/0x2b0
[  182.869763][    C1]  truncate_inode_folio+0x5d/0x70
[  182.874620][    C1]  shmem_undo_range+0x49d/0x1660
[  182.879391][    C1]  ? shmem_truncate_range+0xc0/0xc0
[  182.884426][    C1]  ? kasan_save_stack+0x4d/0x60
[  182.889108][    C1]  ? kasan_save_stack+0x3b/0x60
[  182.893794][    C1]  ? __kasan_record_aux_stack+0xb4/0xc0
[  182.899176][    C1]  ? kasan_record_aux_stack_noalloc+0xb/0x10
[  182.904991][    C1]  ? call_rcu+0xdc/0x10f0
[  182.909156][    C1]  ? dentry_free+0xbf/0x160
[  182.913498][    C1]  ? __dentry_kill+0x505/0x650
[  182.918101][    C1]  ? __kasan_check_write+0x14/0x20
[  182.923058][    C1]  ? _raw_spin_lock+0xa4/0x1b0
[  182.927647][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[  182.932863][    C1]  shmem_evict_inode+0x25f/0xa30
[  182.937630][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  182.942317][    C1]  ? inode_wait_for_writeback+0x21f/0x280
[  182.948657][    C1]  ? shmem_free_in_core_inode+0xc0/0xc0
[  182.954034][    C1]  ? bit_waitqueue+0x30/0x30
[  182.958457][    C1]  ? shmem_free_in_core_inode+0xc0/0xc0
[  182.963836][    C1]  evict+0x529/0x930
[  182.967567][    C1]  ? proc_nr_inodes+0x320/0x320
[  182.972342][    C1]  ? lockref_put_return+0x2c0/0x2c0
[  182.977402][    C1]  ? __kasan_check_write+0x14/0x20
[  182.982333][    C1]  ? _atomic_dec_and_lock+0xfc/0x140
[  182.987445][    C1]  iput+0x616/0x690
[  182.991091][    C1]  do_unlinkat+0x4e1/0x920
[  182.995348][    C1]  ? getname_flags+0xba/0x520
[  182.999855][    C1]  ? fsnotify_link_count+0x100/0x100
[  183.004975][    C1]  ? strncpy_from_user+0x169/0x2b0
[  183.009925][    C1]  ? getname_flags+0x1fd/0x520
[  183.014529][    C1]  __x64_sys_unlink+0x49/0x50
[  183.019038][    C1]  x64_sys_call+0x289/0x9a0
[  183.023376][    C1]  do_syscall_64+0x3b/0xb0
[  183.027812][    C1]  ? clear_bhb_loop+0x55/0xb0
[  183.032315][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.038043][    C1] RIP: 0033:0x7f5b09f852d7
[  183.042321][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.061740][    C1] RSP: 002b:00007ffd7bab76e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  183.070000][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b09f852d7
[  183.077800][    C1] RDX: 00007ffd7bab7710 RSI: 00007ffd7bab77a0 RDI: 00007ffd7bab77a0
[  183.086329][    C1] RBP: 00007ffd7bab77a0 R08: 0000000000000000 R09: 0000000000000000
[  183.094132][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd7bab8820
[  183.101949][    C1] R13: 00007f5b0a0018f4 R14: 00007ffd7bab8860 R15: 0000000000000399
[  183.109757][    C1]  </TASK>
[  183.112619][    C1] 
[  183.114785][    C1] Allocated by task 13604:
[  183.119041][    C1]  kasan_set_track+0x4b/0x70
[  183.123466][    C1]  kasan_save_alloc_info+0x1f/0x30
[  183.128412][    C1]  __kasan_kmalloc+0x9c/0xb0
[  183.132850][    C1]  __kmalloc+0xb4/0x1e0
[  183.136919][    C1]  hci_alloc_dev_priv+0x27/0x1c00
[  183.141787][    C1]  hci_uart_tty_ioctl+0x401/0xa70
[  183.146638][    C1]  tty_ioctl+0x903/0xc50
[  183.150719][    C1]  __se_sys_ioctl+0x114/0x190
[  183.155230][    C1]  __x64_sys_ioctl+0x7b/0x90
[  183.159659][    C1]  x64_sys_call+0x98/0x9a0
[  183.163910][    C1]  do_syscall_64+0x3b/0xb0
[  183.168165][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.173893][    C1] 
[  183.176060][    C1] Freed by task 13604:
[  183.179973][    C1]  kasan_set_track+0x4b/0x70
[  183.184395][    C1]  kasan_save_free_info+0x2b/0x40
[  183.189254][    C1]  ____kasan_slab_free+0x131/0x180
[  183.194200][    C1]  __kasan_slab_free+0x11/0x20
[  183.198806][    C1]  __kmem_cache_free+0x21d/0x410
[  183.203574][    C1]  kfree+0x7a/0xf0
[  183.207131][    C1]  hci_release_dev+0x14d3/0x1640
[  183.211905][    C1]  bt_host_release+0x83/0xa0
[  183.216332][    C1]  device_release+0x95/0x1c0
[  183.220759][    C1]  kobject_put+0x178/0x260
[  183.225012][    C1]  put_device+0x1f/0x30
[  183.229004][    C1]  hci_dev_cmd+0x2be/0x9b0
[  183.233258][    C1]  hci_sock_ioctl+0x415/0x7f0
[  183.237772][    C1]  sock_do_ioctl+0x152/0x450
[  183.242199][    C1]  sock_ioctl+0x455/0x740
[  183.246363][    C1]  __se_sys_ioctl+0x114/0x190
[  183.250875][    C1]  __x64_sys_ioctl+0x7b/0x90
[  183.255305][    C1]  x64_sys_call+0x98/0x9a0
[  183.259564][    C1]  do_syscall_64+0x3b/0xb0
[  183.263817][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.269537][    C1] 
[  183.271706][    C1] Last potentially related work creation:
[  183.277266][    C1]  kasan_save_stack+0x3b/0x60
[  183.281782][    C1]  __kasan_record_aux_stack+0xb4/0xc0
[  183.286984][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  183.292625][    C1]  insert_work+0x56/0x310
[  183.296790][    C1]  __queue_work+0x9b6/0xd70
[  183.301129][    C1]  queue_work_on+0x105/0x170
[  183.305554][    C1]  __hci_cmd_sync_sk+0xc2a/0xf70
[  183.310329][    C1]  hci_cmd_sync_status+0x52/0x130
[  183.315187][    C1]  hci_dev_cmd+0x771/0x9b0
[  183.319440][    C1]  hci_sock_ioctl+0x415/0x7f0
[  183.323954][    C1]  sock_do_ioctl+0x152/0x450
[  183.328389][    C1]  sock_ioctl+0x455/0x740
[  183.332546][    C1]  __se_sys_ioctl+0x114/0x190
[  183.337059][    C1]  __x64_sys_ioctl+0x7b/0x90
[  183.341488][    C1]  x64_sys_call+0x98/0x9a0
[  183.345739][    C1]  do_syscall_64+0x3b/0xb0
[  183.349990][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.355722][    C1] 
[  183.357890][    C1] Second to last potentially related work creation:
[  183.364335][    C1]  kasan_save_stack+0x3b/0x60
[  183.368825][    C1]  __kasan_record_aux_stack+0xb4/0xc0
[  183.374034][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  183.379675][    C1]  insert_work+0x56/0x310
[  183.383927][    C1]  __queue_work+0x9b6/0xd70
[  183.388283][    C1]  queue_work_on+0x105/0x170
[  183.392692][    C1]  hci_cmd_timeout+0x199/0x200
[  183.397308][    C1]  process_one_work+0x73d/0xcb0
[  183.401985][    C1]  worker_thread+0xa60/0x1260
[  183.406494][    C1]  kthread+0x26d/0x300
[  183.410401][    C1]  ret_from_fork+0x1f/0x30
[  183.414652][    C1] 
[  183.416821][    C1] The buggy address belongs to the object at ffff8881110e0000
[  183.416821][    C1]  which belongs to the cache kmalloc-8k of size 8192
[  183.430711][    C1] The buggy address is located 2560 bytes inside of
[  183.430711][    C1]  8192-byte region [ffff8881110e0000, ffff8881110e2000)
[  183.443989][    C1] 
[  183.446159][    C1] The buggy address belongs to the physical page:
[  183.452409][    C1] page:ffffea0004443800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1110e0
[  183.462475][    C1] head:ffffea0004443800 order:3 compound_mapcount:0 compound_pincount:0
[  183.470636][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[  183.476547][    C1] raw: 4000000000010200 ffffea0004a0e200 dead000000000004 ffff888100043500
[  183.484964][    C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  183.493375][    C1] page dumped because: kasan: bad access detected
[  183.499634][    C1] page_owner tracks the page as allocated
[  183.505184][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3091, tgid 3090 (syz.0.1143), ts 65148237429, free_ts 65109334030
[  183.527577][    C1]  post_alloc_hook+0x213/0x220
[  183.532167][    C1]  prep_new_page+0x1b/0x110
[  183.536507][    C1]  get_page_from_freelist+0x2f41/0x2fc0
[  183.541888][    C1]  __alloc_pages+0x234/0x610
[  183.546403][    C1]  alloc_slab_page+0x6c/0xf0
[  183.550827][    C1]  new_slab+0x90/0x3e0
[  183.554732][    C1]  ___slab_alloc+0x6f9/0xb80
[  183.559161][    C1]  __slab_alloc+0x5d/0xa0
[  183.563327][    C1]  __kmem_cache_alloc_node+0x207/0x2a0
[  183.568637][    C1]  __kmalloc+0xa3/0x1e0
[  183.572708][    C1]  mb_cache_create+0x171/0x620
[  183.577303][    C1]  ext4_xattr_create_cache+0x13/0x20
[  183.582421][    C1]  ext4_fill_super+0x61c9/0x8460
[  183.587202][    C1]  get_tree_bdev+0x440/0x680
[  183.591710][    C1]  ext4_get_tree+0x1c/0x20
[  183.595963][    C1]  vfs_get_tree+0x88/0x290
[  183.600213][    C1] page last free stack trace:
[  183.604728][    C1]  free_unref_page_prepare+0x83d/0x850
[  183.610020][    C1]  free_unref_page+0xb2/0x5c0
[  183.614531][    C1]  __free_pages+0x61/0xf0
[  183.618705][    C1]  free_large_kmalloc+0xa9/0xe0
[  183.623481][    C1]  kfree+0x93/0xf0
[  183.627034][    C1]  kvfree+0x35/0x40
[  183.630678][    C1]  wg_destruct+0x2c0/0x300
[  183.634929][    C1]  netdev_run_todo+0xb43/0xd00
[  183.639537][    C1]  rtnl_unlock+0xe/0x10
[  183.643527][    C1]  default_device_exit_batch+0x97a/0xa00
[  183.649001][    C1]  cleanup_net+0x6c9/0xbf0
[  183.653245][    C1]  process_one_work+0x73d/0xcb0
[  183.657930][    C1]  worker_thread+0xa60/0x1260
[  183.662442][    C1]  kthread+0x26d/0x300
[  183.666347][    C1]  ret_from_fork+0x1f/0x30
[  183.670604][    C1] 
[  183.672770][    C1] Memory state around the buggy address:
[  183.678241][    C1]  ffff8881110e0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.686138][    C1]  ffff8881110e0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.694041][    C1] >ffff8881110e0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.701933][    C1]                    ^
[  183.705839][    C1]  ffff8881110e0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.713739][    C1]  ffff8881110e0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.721636][    C1] ==================================================================
[  183.729536][    C1] Disabling lock debugging due to kernel taint
[  183.735819][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  183.747345][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  183.755587][    C1] CPU: 1 PID: 4663 Comm: syz-executor Tainted: G    B              6.1.118-syzkaller-00015-g770852bf7d99 #0
[  183.766878][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  183.776769][    C1] RIP: 0010:__queue_work+0x4f1/0xd70
[  183.781884][    C1] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 d3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 a0 df 71 00 49 8b 3e e8 98 cc d6
[  183.801332][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[  183.807232][    C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888117b18000
[  183.815041][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  183.823025][    C1] RBP: ffffc900001b0d00 R08: ffffffff814b186b R09: 0000000000000007
[  183.830834][    C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881110e09c8
[  183.838646][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881110e09e0
[  183.846450][    C1] FS:  00005555885a5500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  183.855216][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.861764][    C1] CR2: 0000001b2ff1dff8 CR3: 0000000129016000 CR4: 00000000003506a0
[  183.869579][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  183.877477][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  183.885283][    C1] Call Trace:
[  183.888410][    C1]  <IRQ>
[  183.891101][    C1]  ? __die_body+0x62/0xb0
[  183.895265][    C1]  ? die_addr+0x9f/0xd0
[  183.899257][    C1]  ? exc_general_protection+0x317/0x4c0
[  183.904644][    C1]  ? asm_exc_general_protection+0x27/0x30
[  183.910196][    C1]  ? __queue_work+0x28b/0xd70
[  183.914707][    C1]  ? __queue_work+0x4f1/0xd70
[  183.919308][    C1]  ? __queue_work+0x29c/0xd70
[  183.923821][    C1]  delayed_work_timer_fn+0x61/0x80
[  183.928767][    C1]  ? queue_work_node+0x1d0/0x1d0
[  183.933545][    C1]  call_timer_fn+0x3b/0x2d0
[  183.937879][    C1]  ? queue_work_node+0x1d0/0x1d0
[  183.942656][    C1]  __run_timers+0x756/0xa10
[  183.946999][    C1]  ? calc_index+0x270/0x270
[  183.951334][    C1]  ? sched_clock+0x9/0x10
[  183.955512][    C1]  ? sched_clock_cpu+0x71/0x2b0
[  183.960189][    C1]  run_timer_softirq+0x69/0xf0
[  183.964790][    C1]  handle_softirqs+0x1db/0x650
[  183.969387][    C1]  ? irqtime_account_irq+0xdc/0x260
[  183.974419][    C1]  __irq_exit_rcu+0x52/0xf0
[  183.978760][    C1]  irq_exit_rcu+0x9/0x10
[  183.982837][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  183.988305][    C1]  </IRQ>
[  183.991081][    C1]  <TASK>
[  183.993861][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  183.999676][    C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70
[  184.005319][    C1] Code: 3c 08 00 74 0c 48 c7 c7 20 f5 0d 87 e8 c1 0a 9b fc 48 83 3d 59 05 ec 01 00 74 29 48 89 df e8 f3 0e 00 00 90 fb bf 01 00 00 00 <e8> 23 ae 2d fc 65 8b 05 e4 7d e0 7a 85 c0 74 03 5b 5d c3 e8 b4 97
[  184.024759][    C1] RSP: 0018:ffffc900009bf6e8 EFLAGS: 00000246
[  184.030660][    C1] RAX: 0000000000000001 RBX: ffff888125357340 RCX: dffffc0000000000
[  184.038480][    C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  184.046281][    C1] RBP: ffffc900009bf6f0 R08: ffffffff8518aee0 R09: ffffed1021ecf5c8
[  184.054095][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11024a6ae67
[  184.061904][    C1] R13: ffff888125357338 R14: ffffea0004de2d40 R15: dffffc0000000000
[  184.069986][    C1]  ? xas_init_marks+0x250/0x2d0
[  184.074675][    C1]  ? _raw_spin_unlock_irq+0x41/0x70
[  184.079705][    C1]  filemap_remove_folio+0x10c/0x4f0
[  184.084742][    C1]  ? filemap_free_folio+0x190/0x190
[  184.089774][    C1]  ? __kasan_check_write+0x14/0x20
[  184.094721][    C1]  ? truncate_cleanup_folio+0x25c/0x2b0
[  184.100100][    C1]  truncate_inode_folio+0x5d/0x70
[  184.104963][    C1]  shmem_undo_range+0x49d/0x1660
[  184.109740][    C1]  ? shmem_truncate_range+0xc0/0xc0
[  184.114775][    C1]  ? kasan_save_stack+0x4d/0x60
[  184.119454][    C1]  ? kasan_save_stack+0x3b/0x60
[  184.124144][    C1]  ? __kasan_record_aux_stack+0xb4/0xc0
[  184.129522][    C1]  ? kasan_record_aux_stack_noalloc+0xb/0x10
[  184.135339][    C1]  ? call_rcu+0xdc/0x10f0
[  184.139504][    C1]  ? dentry_free+0xbf/0x160
[  184.143844][    C1]  ? __dentry_kill+0x505/0x650
[  184.148450][    C1]  ? __kasan_check_write+0x14/0x20
[  184.153393][    C1]  ? _raw_spin_lock+0xa4/0x1b0
[  184.157995][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[  184.163200][    C1]  shmem_evict_inode+0x25f/0xa30
[  184.167979][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  184.172659][    C1]  ? inode_wait_for_writeback+0x21f/0x280
[  184.178217][    C1]  ? shmem_free_in_core_inode+0xc0/0xc0
[  184.183593][    C1]  ? bit_waitqueue+0x30/0x30
[  184.188022][    C1]  ? shmem_free_in_core_inode+0xc0/0xc0
[  184.193410][    C1]  evict+0x529/0x930
[  184.197135][    C1]  ? proc_nr_inodes+0x320/0x320
[  184.201826][    C1]  ? lockref_put_return+0x2c0/0x2c0
[  184.206859][    C1]  ? __kasan_check_write+0x14/0x20
[  184.211802][    C1]  ? _atomic_dec_and_lock+0xfc/0x140
[  184.216922][    C1]  iput+0x616/0x690
[  184.220680][    C1]  do_unlinkat+0x4e1/0x920
[  184.224913][    C1]  ? getname_flags+0xba/0x520
[  184.229429][    C1]  ? fsnotify_link_count+0x100/0x100
[  184.234550][    C1]  ? strncpy_from_user+0x169/0x2b0
[  184.239498][    C1]  ? getname_flags+0x1fd/0x520
[  184.244095][    C1]  __x64_sys_unlink+0x49/0x50
[  184.248609][    C1]  x64_sys_call+0x289/0x9a0
[  184.252948][    C1]  do_syscall_64+0x3b/0xb0
[  184.257202][    C1]  ? clear_bhb_loop+0x55/0xb0
[  184.261714][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  184.267444][    C1] RIP: 0033:0x7f5b09f852d7
[  184.271695][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.291149][    C1] RSP: 002b:00007ffd7bab76e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  184.299381][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b09f852d7
[  184.307724][    C1] RDX: 00007ffd7bab7710 RSI: 00007ffd7bab77a0 RDI: 00007ffd7bab77a0
[  184.315531][    C1] RBP: 00007ffd7bab77a0 R08: 0000000000000000 R09: 0000000000000000
[  184.323683][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd7bab8820
[  184.331502][    C1] R13: 00007f5b0a0018f4 R14: 00007ffd7bab8860 R15: 0000000000000399
[  184.339311][    C1]  </TASK>
[  184.342170][    C1] Modules linked in:
[  184.345907][    C1] ---[ end trace 0000000000000000 ]---
[  184.351199][    C1] RIP: 0010:__queue_work+0x4f1/0xd70
[  184.356317][    C1] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 d3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 a0 df 71 00 49 8b 3e e8 98 cc d6
[  184.375759][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[  184.381660][    C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888117b18000
[  184.389471][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  184.397282][    C1] RBP: ffffc900001b0d00 R08: ffffffff814b186b R09: 0000000000000007
[  184.405095][    C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881110e09c8
[  184.412907][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881110e09e0
[  184.420715][    C1] FS:  00005555885a5500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  184.429486][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.435905][    C1] CR2: 0000001b2ff1dff8 CR3: 0000000129016000 CR4: 00000000003506a0
[  184.443719][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  184.451527][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  184.459339][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  184.466602][    C1] Kernel Offset: disabled
[  184.470724][    C1] Rebooting in 86400 seconds..