last executing test programs:

16.160398254s ago: executing program 1 (id=115):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000400000001000000080009000d09", 0x22)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffffff95"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x2)

15.341595623s ago: executing program 1 (id=118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0x4, {0x4, 0x0, "54e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

12.949057436s ago: executing program 1 (id=127):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002100)=""/177, 0xb1}, {0x0}], 0x2, &(0x7f0000002440)=""/188, 0xbc}, 0x10040)
readv(0xffffffffffffffff, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x2, 0x2, 0x5)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0xf2)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000600000085100000ffffffffb7080000000000007b75c44b6df259f6734f7e8af8ff00000000", @ANYRES32], 0x0, 0x2, 0xa1, &(0x7f00000006c0)=""/161, 0x41100, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x5}, 0x90)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})

12.06183692s ago: executing program 1 (id=131):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
getegid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx  \x00'}, 0x20)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4850}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x10000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x5, 0x9, 0xc00}, 0x48)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0xff1f6000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8}, 0x48)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)

10.121616454s ago: executing program 1 (id=139):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)={[{@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xee9}}, {@fat=@errors_remount}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'uni_x\x9a\xfdte=1'}}]}, 0x6, 0x2d0, &(0x7f00000003c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', <r7=>0x0, 0x4, 0x53, 0x3, 0x6, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0x1000006, 0x800000}})
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0838db000a00040000000800090006000000080000000000000014000100ff02000000000000000000000000000114000200ff1f00080009000500000014000600ffffffffff030000fffffeff80000000d735dc95e5017b70499c0dd7eb7fbb3beaacf9d96b05cdc2c2324ec12fcccfcec362e98834fd719104b4177570daddc2eac2ea69e608bd3c501bf541bb003700a0b521e3b2df9ff8d9bbb68c8cfc0f7e43e0d3075cf3962ff597177957a907f879a39a12011d675f6aceedafdbc23b7977d14aaba116882d3647f318a52131baeb8498832d06c10b1d6446010fbf6d5f8b3906c0d54702a906f788889e1ccbacf1b88ec8e6d1afcffd6f4f4a1125ad43909b58d390c9f758a98b3cd7d41cef9c4b72abb4cd0a70ee3ed6"], 0x74}}, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8001)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a1906", 0x1f, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r0, 0x100000)

9.993903115s ago: executing program 2 (id=141):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000"], 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10021, 0x9, 0x1, 0xffffffffffffffff, 0x7}, 0x48)
sched_getattr(r1, &(0x7f0000002340)={0x38}, 0xfffffffffffffd4c, 0x0)
r4 = syz_open_procfs(r1, &(0x7f0000000000)='projid_map\x00')
read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0x8)
mkdir(&(0x7f0000000000)='./file0\x00', 0x60)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffffff, 0x2000, 0xdb, 0xe00}, 0x48)

9.185361604s ago: executing program 0 (id=144):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x0, 0x8c0f}}, 0x50)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x200, 0x54)

9.175946835s ago: executing program 1 (id=140):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002100)=""/177, 0xb1}, {0x0}], 0x2, &(0x7f0000002440)=""/188, 0xbc}, 0x10040)
readv(0xffffffffffffffff, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x2, 0x2, 0x5)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0xf2)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000600000085100000ffffffffb7080000000000007b75c44b6df259f6734f7e8af8ff00000000", @ANYRES32], 0x0, 0x2, 0xa1, &(0x7f00000006c0)=""/161, 0x41100, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x5}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})

8.695502565s ago: executing program 0 (id=145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

8.189332248s ago: executing program 0 (id=148):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
eventfd(0x0)

8.188826698s ago: executing program 3 (id=149):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000"], 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10021, 0x9, 0x1, 0xffffffffffffffff, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000002300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_getattr(r1, &(0x7f0000002340)={0x38}, 0xfffffffffffffd4c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf)
r5 = syz_open_procfs(r1, &(0x7f0000000000)='projid_map\x00')
read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x60)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffffff, 0x2000, 0xdb, 0xe00}, 0x48)

6.875018789s ago: executing program 0 (id=151):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = syz_open_procfs$namespace(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x9, 0x2bc, &(0x7f0000000880)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRES16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030e000000fe060000000000000400090078000000e9255bb992464e73a02159d3720df19f7a1dfec3000000000300060000000000020000000000000000000000000000000200010000000000000000fd00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0)

6.874274139s ago: executing program 2 (id=152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f0000000400), 0x8)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@bloom_filter={0x1e, 0x1, 0x100000, 0x5, 0x20, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0xa}, 0x48)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
fadvise64(r6, 0x9, 0x9, 0x2)

6.873690969s ago: executing program 4 (id=153):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0) (async)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x100018, 0x0, 0x0, 0xffffffff}}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) (async)
setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000021c0), 0x24, 0x0)

6.064904847s ago: executing program 0 (id=154):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_setup(0x7, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00')
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x12)
gettid()
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500))
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x16, 0x0, 0x4}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020a0000052406000005240000000d240f0100000000000000000009058202000200000009050302"], 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)

6.064406497s ago: executing program 2 (id=155):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
getegid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx  \x00'}, 0x20)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4850}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x10000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x5, 0x9, 0xc00}, 0x48)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0xff1f6000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8}, 0x48)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000041, 0x0, 0x0, 0x0, &(0x7f0000000040))
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

5.158435614s ago: executing program 2 (id=156):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
pipe2$9p(0x0, 0x80)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
r5 = syz_open_pts(r4, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "44cc0babaecf95ce"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001913a9090000000000000095000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)

5.157842784s ago: executing program 3 (id=157):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@acl}, {@resuid}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@user_xattr}, {@nouid32}, {@noload}]}, 0xfe, 0x45a, &(0x7f0000001900)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4b4", &(0x7f0000000380), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000052a1900fc01"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r8, 0x1}, 0x1c}}, 0x0)

5.157500344s ago: executing program 4 (id=158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

4.151561149s ago: executing program 2 (id=159):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3a10f46, &(0x7f0000000640)={[{@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@mblk_io_submit}, {@acl}, {@resuid}, {@i_version}, {@noauto_da_alloc}, {@nombcache}]}, 0xff, 0x451, &(0x7f00000021c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_remount}]}, 0xfe, 0x492, &(0x7f0000000f00)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x6a, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x44}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000007000047fc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0100e1ff0007"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})

4.150935949s ago: executing program 3 (id=160):
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38)
read$FUSE(r3, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000480)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
utime(&(0x7f0000000300)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

4.150375009s ago: executing program 4 (id=161):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000300)={'gre0\x00', <r1=>0x0, 0x10, 0x0, 0x101, 0x6, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x68, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x22}, {[@ssrr={0x89, 0xf, 0x8d, [@multicast2, @private=0xa010100, @empty]}, @generic={0x83, 0x9, "bebf755e1f951f"}, @end, @ssrr={0x89, 0x23, 0xee, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @broadcast, @local, @multicast1, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x35}]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r2=>0x0, 0x2f, 0x5, 0x3, 0x6, 0x20, @private1, @mcast1, 0x0, 0x10, 0x0, 0x2}})
r3 = geteuid()
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@delpolicy={0x13c, 0x14, 0x0, 0x70bd29, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e20, 0x9, 0x4e20, 0x40, 0x2, 0x80, 0xc0, 0x5e, r1, 0xffffffffffffffff}, 0x6e6bb5, 0x1}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e20, 0x9, 0x4e21, 0x3, 0xa, 0x20, 0xa0, 0x2b, r2, r3}, {@in=@loopback, 0x4d2, 0x3c}, @in6=@mcast1, {0xaef, 0xfffffffffffffffd, 0xc3, 0x5, 0x9, 0x1ff, 0x2, 0x4}, {0x9, 0x19, 0x52c2, 0x100000000}, {0x9, 0x40, 0x8}, 0x70bd2d, 0x3507, 0x2, 0x4, 0x6, 0xa}}, @proto={0x5, 0x19, 0x6c}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4844}, 0x28004115)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}, @ldst={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x7c)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000208d0495850000000000010902240001000000000904000005030000000921000000012205000905810300000000002d26ea1c32101c57a62b042bb3948e07808a5f93066f751159104ac7ee9515f84fcdd378ef6643463b05a1dc3a3fcd12c06a7709b98a7294368d44c4d5a3a8bc2350ceef77aba24414b19a6aec1db9e3514fc87e110918d06855119debce9932fc493cec9922c2df4dcf806be5978015500a4e07"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2dc}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fddbdf2508000000", @ANYRES32=r10, @ANYBLOB="0c0099000900000063000010"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
syz_usb_control_io(r5, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac675bd612d8ab87"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r11 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r11, 0xc0404807, &(0x7f0000000000)={0x0, "1cf250d2528722061e2daedcbbf930dedf4904d8f9e64f62c3d0e156e87ed3dbfac38f0c1faada797532454dd344c00c8a007369f5d86fe64007aa38577e4db7"})
epoll_create1(0x0)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r12, &(0x7f0000000080), 0x8)
syz_usb_control_io$hid(r5, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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")
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)

2.990917167s ago: executing program 3 (id=162):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@acl}, {@resuid}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@user_xattr}, {@nouid32}, {@noload}]}, 0xfe, 0x45a, &(0x7f0000001900)="$eJzs281vG0UbAPBn107bt+3bhFI+WloIFETER9KkBXrgAgKJA0hIcCjHkKRVqdugJki0iiAgVI6oEnfEEYm/gBMnBJyQuMIdVaogQmrhgtHau0ns2GnSOHWIfz9pkxnveGee7Mx6vJMNoGcNZj+SiL0R8UtE9NezjQUG679uLsxN/LUwN5FEtfrG70mt3I2FuYmiaPG+PXlmKI1IP0nyShrNXLp8brxSmbqY50dmz787MnPp8tNnz4+fmTozdWHs5MkTx0efe3bsmY7EmbXpxqEPpg8ffOWtq69NnLr69g9fZ+2990h9//I4OmUwC/yPak3zvsc6XVmX/VNdijMpd7s1rFUpIrLT1Vcb//1RiqWT1x8vf9zVxgGbKrtm72y/e74KbGNJdLsFQHcUH/TZ999iu0NTjy3h+gv1L0BZ3Dfzrb6nHGlepm8T6x+MiFPzf3+RbdF0H6La4r4BAMBGfZvNf55aOf+rrY0sK7cvXxsaiIi7ImJ/RNwdEQci4p687H0Rcf86629eGlo5/0yv3WZoa5LN/57P17Ya53/F7C8GSnnu/7X4+5LTZytTx/K/yVD07czyo60OXhzipZ8/a1f/8vlftmX1F3PB/CDXyk036CbHZ8c7NSm9/lHEoXKr+JPFlYCsLxyMiEPrO/S+InH2ia8Otyt06/hX0YF1puqXEY/Xz/98NMVfSFZfnxzZFZWpYyNFr1jpx5+uvN6u/g3F3wHZ+d/d2P+bSvT/mSxfr51p2r2Gfnjl10/bfqcs32b/35G8WVuz3pG/9v747OzF0Ygdyau1fMPrY0vvLfJF+Sz+oaOtx//+/D1Z/A9ERNaJj0TEgxHxUH7uHo6IRyLi6Crxf//io++027cVzv9ky+vfYv8faDz/60+Uzn33Tbv613b9O1FLDeWv1K5/t9C+ObvyEi17MwAAAGxLaUTsjSQdXkyn6fBw/f/lD8TutDI9M/vk6en3LkzWnxEYiL60uNPVv+x+6Ggynx+xnh/L7xUX+4/n940/L/2vlh+emK5Mdjl26HV72oz/zG+lbrcO2HSe14Le1Tz+0y61A7jzfP5D7zL+oXcZ/9C7Wo3/D5vy1gJge/L5D73L+IfeZfxD7zL+oSdt5Ln+zUqUV3l6/z+Q2BURW6AZm52IdEs0Q6JFotyB0d3lCxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/BsAAP//Y5/wTg==")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4b4", &(0x7f0000000380), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000052a1900fc01"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0)
r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000280)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4e23, 0xf}, @esp_ip4_spec={@broadcast, @local, 0x9, 0x1}, 0xe064, 0x7ff, 0x1, 0x80, 0xffffffffffffffff}}})

1.786140489s ago: executing program 0 (id=163):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000"], 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10021, 0x9, 0x1, 0xffffffffffffffff, 0x7}, 0x48)
sched_getattr(r1, &(0x7f0000002340)={0x38}, 0xfffffffffffffd4c, 0x0)
r4 = syz_open_procfs(r1, &(0x7f0000000000)='projid_map\x00')
read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0x8)
mkdir(&(0x7f0000000000)='./file0\x00', 0x60)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffffff, 0x2000, 0xdb, 0xe00}, 0x48)

1.785581029s ago: executing program 3 (id=164):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = syz_open_procfs$namespace(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x9, 0x2bc, &(0x7f0000000880)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRES16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030e000000fe060000000000000400090078000000e9255bb992464e73a02159d3720df19f7a1dfec3000000000300060000000000020000000000000000000000000000000200010000000000000000fd00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0)

1.784883969s ago: executing program 4 (id=165):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002100)=""/177, 0xb1}, {0x0}], 0x2, &(0x7f0000002440)=""/188, 0xbc}, 0x10040)
readv(0xffffffffffffffff, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x2, 0x2, 0x5)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0xf2)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000600000085100000ffffffffb7080000000000007b75c44b6df259f6734f7e8af8ff00000000", @ANYRES32], 0x0, 0x2, 0xa1, &(0x7f00000006c0)=""/161, 0x41100, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x5}, 0x90)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})

463.763241ms ago: executing program 2 (id=166):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="000027000000f2"], 0x0, 0x0, 0x0, 0x0}, 0x0)

462.739201ms ago: executing program 3 (id=167):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000"], 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10021, 0x9, 0x1, 0xffffffffffffffff, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000002300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_getattr(r1, &(0x7f0000002340)={0x38}, 0xfffffffffffffd4c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf)
r5 = syz_open_procfs(r1, &(0x7f0000000000)='projid_map\x00')
read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x60)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffffff, 0x2000, 0xdb, 0xe00}, 0x48)

461.343121ms ago: executing program 4 (id=168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000030000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000400"], 0x0, 0x56}, 0x20)

0s ago: executing program 4 (id=169):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='fdinfo/3\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x27, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})

kernel console output (not intermixed with test programs):

 blocking state
[   21.230697][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.237795][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.244984][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   21.252284][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.276427][  T284] device veth0_vlan entered promiscuous mode
[   21.284471][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.292868][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.300961][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.308081][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.315423][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.323574][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.330503][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.337686][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.345685][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.352995][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.360560][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.368458][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.375230][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.382406][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.390459][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.397272][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.404457][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.412140][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.419956][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.427636][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.435620][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.442547][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.456367][  T285] device veth0_vlan entered promiscuous mode
[   21.476655][  T282] device veth0_vlan entered promiscuous mode
[   21.483648][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.493107][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.502108][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.509983][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.517604][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   21.525513][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.533257][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   21.541291][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.548977][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   21.556734][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.564543][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   21.572111][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.579346][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.587417][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.595510][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   21.603733][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.611953][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.618851][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.626049][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   21.634267][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.642321][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.649147][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.656260][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.663952][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.671858][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.679243][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.686537][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.693749][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.707160][  T285] device veth1_macvtap entered promiscuous mode
[   21.721698][  T283] device veth0_vlan entered promiscuous mode
[   21.734333][  T284] device veth1_macvtap entered promiscuous mode
[   21.740833][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.748800][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.757538][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.766019][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.774059][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.782157][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.789636][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   21.797379][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.805180][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   21.813184][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.820974][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.829068][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.837156][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.845096][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.852958][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.860421][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.871640][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.880030][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.888080][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.896520][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.906561][  T282] device veth1_macvtap entered promiscuous mode
[   21.917935][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.926311][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.934471][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.942300][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.950434][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.964500][  T283] device veth1_macvtap entered promiscuous mode
[   21.972250][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.980575][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.988575][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.996806][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.005009][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.012817][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.021193][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.035438][  T286] device veth0_vlan entered promiscuous mode
[   22.050651][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   22.058420][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.066934][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.075107][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.083273][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.091649][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.100187][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.107395][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.117020][  T285] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   22.139853][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.147910][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.166789][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.175317][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.186381][  T286] device veth1_macvtap entered promiscuous mode
[   22.207484][  T313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   22.229123][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   22.237112][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.255692][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.312694][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.628808][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.638871][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.647576][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.003822][  T326] erofs: (device loop1): mounted with root inode @ nid 36.
[   23.075370][  T333] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   23.089802][  T333] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff)
[   23.154370][  T333] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   23.168011][  T333] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.4: mark_inode_dirty error
[   23.179779][  T333] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   23.188059][  T333] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.4: mark_inode_dirty error
[   23.306125][  T349] syz.1.9[349] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   23.306176][  T349] syz.1.9[349] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   23.318995][   T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   23.477457][  T364] ======================================================
[   23.477457][  T364] WARNING: the mand mount option is being deprecated and
[   23.477457][  T364]          will be removed in v5.15!
[   23.477457][  T364] ======================================================
[   23.519456][  T364] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   23.527662][  T364] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.14: invalid block
[   23.538663][  T364] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.14: couldn't read orphan inode 11 (err -117)
[   23.550499][  T364] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,noinit_itable,max_dir_size_kb=0x0000000000000009,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,i_version,noauto_da_alloc,nombcache,,errors=continue
[   23.640290][   T20] usb 5-1: Using ep0 maxpacket: 32
[   23.790157][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   23.804282][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   23.814141][   T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   23.827014][   T24] kauditd_printk_skb: 179 callbacks suppressed
[   23.827047][   T24] audit: type=1326 audit(1724708266.940:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f126287ce27 code=0x7ffc0000
[   23.859315][   T24] audit: type=1326 audit(1724708266.940:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12628217e9 code=0x7ffc0000
[   23.898028][   T24] audit: type=1326 audit(1724708266.940:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1262885e79 code=0x7ffc0000
[   23.912103][   T20] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[   23.921609][  T286] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   23.930801][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   23.959544][  T286] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   23.962873][   T20] usb 5-1: config 0 descriptor??
[   23.985233][   T24] audit: type=1326 audit(1724708266.980:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f126287ce27 code=0x7ffc0000
[   23.994751][  T286] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   24.009419][   T24] audit: type=1326 audit(1724708266.980:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12628217e9 code=0x7ffc0000
[   24.055952][   T24] audit: type=1326 audit(1724708266.980:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1262885e79 code=0x7ffc0000
[   24.159806][   T24] audit: type=1326 audit(1724708267.010:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f126287ce27 code=0x7ffc0000
[   24.183550][   T24] audit: type=1326 audit(1724708267.010:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12628217e9 code=0x7ffc0000
[   24.200293][  T286] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   24.226536][   T24] audit: type=1326 audit(1724708267.010:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1262885e79 code=0x7ffc0000
[   24.247958][  T286] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   24.270058][  T286] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   24.292120][   T24] audit: type=1400 audit(1724708267.010:264): avc:  denied  { read } for  pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   24.361625][  T375] EXT4-fs (loop1): bad s_want_extra_isize: 11962
[   24.598968][  T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.621016][   T20] itetech 0003:048D:8595.0001: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0
[   24.959010][  T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   24.969830][  T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   24.980175][  T307] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   24.989182][  T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.003406][  T307] usb 3-1: config 0 descriptor??
[   25.033037][  T378] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.5: casefold flag without casefold feature
[   25.045461][  T378] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.5: missing EA_INODE flag
[   25.057010][  T378] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5: error while reading EA inode 2 err=-117
[   25.069198][  T378] EXT4-fs (loop4): 1 orphan inode deleted
[   25.074788][  T378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   25.100278][   T20] usb 5-1: USB disconnect, device number 2
[   25.177138][  T383] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.184315][  T383] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.191680][  T383] device bridge_slave_0 entered promiscuous mode
[   25.206922][  T383] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.214122][  T383] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.222408][  T383] device bridge_slave_1 entered promiscuous mode
[   25.278063][  T383] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.284986][  T383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.292287][  T383] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.299075][  T383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.323568][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.331811][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.339248][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.349521][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.357612][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.364478][  T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.376079][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.384859][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.391740][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.408384][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.418591][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.443560][  T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.463597][  T383] device veth0_vlan entered promiscuous mode
[   25.470446][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.478506][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.486475][  T307] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   25.493583][  T307] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   25.501461][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.509286][  T307] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[   25.526054][  T383] device veth1_macvtap entered promiscuous mode
[   25.533473][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.547014][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.558866][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.602103][    T7] device bridge_slave_1 left promiscuous mode
[   25.611416][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.619808][    T7] device bridge_slave_0 left promiscuous mode
[   25.625972][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.634504][    T7] device veth1_macvtap left promiscuous mode
[   25.640582][    T7] device veth0_vlan left promiscuous mode
[   25.711544][  T405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'.
[   25.899181][  T416] usb 3-1: USB disconnect, device number 2
[   25.958958][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   26.198992][   T25] usb 5-1: Using ep0 maxpacket: 16
[   26.319053][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.329800][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.339616][   T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   26.348466][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.357473][   T25] usb 5-1: config 0 descriptor??
[   26.452959][  T427] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks
[   26.460632][  T427] EXT4-fs warning (device sda1): ext4_resize_fs:1982: can't shrink FS - resize aborted
[   26.550592][  T424] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   26.563738][  T424] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.28: casefold flag without casefold feature
[   26.576734][  T424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.28: missing EA_INODE flag
[   26.589415][  T424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.28: error while reading EA inode 12 err=-117
[   26.601802][  T424] EXT4-fs (loop2): 1 orphan inode deleted
[   26.607652][  T424] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,
[   27.043753][   T25] cp2112 0003:10C4:EA90.0003: unexpected long global item
[   27.064579][   T25] cp2112 0003:10C4:EA90.0003: parse failed
[   27.081206][  T433] erofs: (device loop0): mounted with root inode @ nid 36.
[   27.162277][   T25] cp2112: probe of 0003:10C4:EA90.0003 failed with error -22
[   27.241278][  T432] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value
[   27.254521][   T25] usb 5-1: USB disconnect, device number 3
[   27.338977][  T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   28.479110][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   28.489978][  T473] erofs: (device loop4): mounted with root inode @ nid 36.
[   28.498214][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   28.508021][  T312] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[   28.519748][  T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.528162][  T312] usb 4-1: config 0 descriptor??
[   28.530407][  T470] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   28.541988][  T470] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff)
[   28.570051][  T470] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   28.578283][  T470] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.41: mark_inode_dirty error
[   28.592563][  T470] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   28.602174][  T470] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.41: mark_inode_dirty error
[   28.668284][  T483] overlayfs: failed to resolve './file0': -2
[   29.160277][  T492] kernel profiling enabled (shift: 0)
[   29.189490][   T24] kauditd_printk_skb: 62 callbacks suppressed
[   29.189500][   T24] audit: type=1400 audit(1724708272.270:327): avc:  denied  { connect } for  pid=490 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   29.217516][   T24] audit: type=1400 audit(1724708272.270:328): avc:  denied  { ioctl } for  pid=490 comm="syz.2.44" path="socket:[15127]" dev="sockfs" ino=15127 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   29.260477][  T494] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   29.269434][  T494] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff)
[   29.290132][  T494] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   29.298392][  T494] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.45: mark_inode_dirty error
[   29.309909][  T494] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   29.318123][  T494] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.45: mark_inode_dirty error
[   29.808996][    T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   30.028985][  T288] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   30.099368][    T5] usb 5-1: device descriptor read/64, error -71
[   30.112858][  T285] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   30.134071][  T285] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   30.155080][  T285] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   30.176420][  T285] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   30.197060][  T285] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   30.217551][  T285] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   30.458998][  T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.469703][  T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.479470][  T288] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[   30.488294][  T288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.498970][  T305] Bluetooth: hci0: command 0x1003 tx timeout
[   30.504827][    T5] usb 5-1: device descriptor read/64, error -71
[   30.509127][  T288] usb 2-1: config 0 descriptor??
[   30.511207][  T477] Bluetooth: hci0: sending frame failed (-49)
[   30.789050][    T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   30.849035][  T312] usbhid 4-1:0.0: can't add hid device: -71
[   30.854841][  T312] usbhid: probe of 4-1:0.0 failed with error -71
[   30.878780][  T312] usb 4-1: USB disconnect, device number 2
[   31.017602][   T24] audit: type=1400 audit(1724708274.120:329): avc:  denied  { read } for  pid=503 comm="syz.3.48" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   31.109037][   T24] audit: type=1400 audit(1724708274.120:330): avc:  denied  { open } for  pid=503 comm="syz.3.48" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   31.132439][   T24] audit: type=1400 audit(1724708274.130:331): avc:  denied  { watch watch_reads } for  pid=503 comm="syz.3.48" path="/3" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   31.169002][    T5] usb 5-1: device descriptor read/64, error -71
[   31.192633][  T501] EXT4-fs (loop1): Unrecognized mount option "subj_role=" or missing value
[   31.225128][  T510] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.232205][  T510] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.239821][  T510] device bridge_slave_0 entered promiscuous mode
[   31.247893][  T510] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.254799][  T510] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.262329][  T510] device bridge_slave_1 entered promiscuous mode
[   31.309828][  T510] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.316710][  T510] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.323809][  T510] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.330591][  T510] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.349209][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   31.356542][  T307] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.363881][  T307] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.395225][  T510] device veth0_vlan entered promiscuous mode
[   31.407289][  T510] device veth1_macvtap entered promiscuous mode
[   31.455240][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.463589][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.472136][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.480224][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.488310][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.495742][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.503148][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.511234][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   31.519185][  T307] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.526005][  T307] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.533205][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   31.541231][  T307] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.548049][  T307] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.555236][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   31.558980][    T5] usb 5-1: device descriptor read/64, error -71
[   31.563041][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   31.638902][   T24] audit: type=1400 audit(1724708274.750:332): avc:  denied  { write } for  pid=526 comm="syz.2.53" name="/" dev="incremental-fs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   31.681289][   T24] audit: type=1400 audit(1724708274.760:333): avc:  denied  { add_name } for  pid=526 comm="syz.2.53" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   31.701722][    T5] usb usb5-port1: attempt power cycle
[   31.707108][   T24] audit: type=1400 audit(1724708274.760:334): avc:  denied  { associate } for  pid=526 comm="syz.2.53" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   31.803679][   T24] audit: type=1400 audit(1724708274.910:335): avc:  denied  { unmount } for  pid=510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   31.849418][    T9] device bridge_slave_1 left promiscuous mode
[   31.855487][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.862707][    T9] device bridge_slave_0 left promiscuous mode
[   31.868692][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.878884][    T9] device veth1_macvtap left promiscuous mode
[   31.885044][    T9] device veth0_vlan left promiscuous mode
[   31.946207][   T24] audit: type=1400 audit(1724708275.060:336): avc:  denied  { write } for  pid=529 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.578959][   T15] Bluetooth: hci0: command 0x1001 tx timeout
[   32.584912][  T477] Bluetooth: hci0: sending frame failed (-49)
[   32.865546][  T545] EXT4-fs (loop2): bad s_want_extra_isize: 11962
[   32.952565][  T288] usbhid 2-1:0.0: can't add hid device: -71
[   32.958666][  T288] usbhid: probe of 2-1:0.0 failed with error -71
[   33.145771][  T556] netlink: 165 bytes leftover after parsing attributes in process `syz.2.57'.
[   33.193338][  T288] usb 2-1: USB disconnect, device number 2
[   33.219984][  T551] erofs: Unknown parameter 'ÿÿÿÿ'
[   33.396558][  T551] kvm: pic: non byte write
[   33.468791][  T561] FAULT_INJECTION: forcing a failure.
[   33.468791][  T561] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   33.481880][  T561] CPU: 0 PID: 561 Comm: syz.4.61 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0
[   33.491375][  T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   33.501298][  T561] Call Trace:
[   33.504392][  T561]  dump_stack_lvl+0x1e2/0x24b
[   33.508998][  T561]  ? bfq_pos_tree_add_move+0x43b/0x43b
[   33.514264][  T561]  ? restore_sigcontext+0x638/0x710
[   33.519296][  T561]  dump_stack+0x15/0x17
[   33.523288][  T561]  should_fail+0x3c6/0x510
[   33.527543][  T561]  should_fail_usercopy+0x1a/0x20
[   33.532489][  T561]  _copy_from_user+0x20/0xd0
[   33.537016][  T561]  restore_altstack+0x9a/0x400
[   33.541618][  T561]  ? __ia32_sys_sigaltstack+0x70/0x70
[   33.546834][  T561]  __do_sys_rt_sigreturn+0x160/0x1e0
[   33.551944][  T561]  ? x32_copy_siginfo_to_user+0x270/0x270
[   33.557500][  T561]  ? debug_smp_processor_id+0x17/0x20
[   33.562757][  T561]  do_syscall_64+0x34/0x70
[   33.566949][  T561]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   33.572760][  T561] RIP: 0033:0x7f86a1cb2e79
[   33.577014][  T561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.596466][  T561] RSP: 002b:00007f86a0930038 EFLAGS: 00000246
[   33.602460][  T561] RAX: fffffffffffffffc RBX: 00007f86a1e4ef80 RCX: 00007f86a1cb2e79
[   33.610349][  T561] RDX: 0000000000000000 RSI: 000000004004550c RDI: 0000000000000003
[   33.618162][  T561] RBP: 00007f86a0930090 R08: 0000000000000000 R09: 0000000000000000
[   33.625972][  T561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.633783][  T561] R13: 0000000000000000 R14: 00007f86a1e4ef80 R15: 00007ffebe6debe8
[   33.982489][  T563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   33.991512][  T563] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff)
[   34.213856][  T573] erofs: (device loop1): mounted with root inode @ nid 36.
[   34.222168][  T563] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27
[   34.249155][  T563] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.62: mark_inode_dirty error
[   34.260449][  T563] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27
[   34.268636][  T563] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.62: mark_inode_dirty error
[   34.432896][  T588] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36
[   34.442477][  T588] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36
[   34.569519][   T24] kauditd_printk_skb: 5 callbacks suppressed
[   34.569546][   T24] audit: type=1400 audit(1724708277.530:342): avc:  denied  { create } for  pid=572 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   34.614910][   T24] audit: type=1400 audit(1724708277.540:343): avc:  denied  { map } for  pid=572 comm="syz.1.65" path="socket:[15845]" dev="sockfs" ino=15845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   34.656065][  T583] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[   34.713050][  T305] Bluetooth: hci0: command 0x1009 tx timeout
[   34.719048][   T24] audit: type=1400 audit(1724708277.540:344): avc:  denied  { read } for  pid=572 comm="syz.1.65" path="socket:[15845]" dev="sockfs" ino=15845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   34.778375][  T282] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   34.803175][  T282] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   34.839375][  T282] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   34.861039][  T282] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   34.887718][  T282] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   34.909638][  T282] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   34.981718][   T24] audit: type=1400 audit(1724708278.050:345): avc:  denied  { write open } for  pid=582 comm="syz.2.66" path="/7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   35.039223][   T24] audit: type=1400 audit(1724708278.160:346): avc:  denied  { setattr } for  pid=590 comm="syz.3.68" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.095844][   T24] audit: type=1400 audit(1724708278.200:347): avc:  denied  { audit_write } for  pid=596 comm="syz.1.69" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   35.164306][   T24] audit: type=1107 audit(1724708278.200:348): pid=596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   35.200440][  T601] EXT4-fs (loop3): 1 orphan inode deleted
[   35.205992][  T601] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,acl,resuid=0x0000000000000000,jqfmt=vfsv0,data_err=ignore,user_xattr,nouid32,noload,,errors=continue
[   35.323560][  T605] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   35.333343][  T605] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff)
[   35.345371][  T605] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   35.353595][  T605] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.72: mark_inode_dirty error
[   35.365298][   T24] audit: type=1400 audit(1724708278.490:349): avc:  denied  { ioctl } for  pid=600 comm="syz.3.70" path="/8/file0/bus" dev="loop3" ino=11 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   35.365437][  T605] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   35.413195][  T605] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.72: mark_inode_dirty error
[   36.110258][  T510] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   36.131080][   T24] audit: type=1326 audit(1724708279.250:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=618 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2943dde79 code=0x7ffc0000
[   36.149254][  T510] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   36.181699][   T24] audit: type=1326 audit(1724708279.300:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=618 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe2943dde79 code=0x7ffc0000
[   36.208097][  T510] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   36.233058][  T616] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   36.249439][  T616] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff)
[   36.266553][  T510] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   36.290458][  T616] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   36.302874][  T616] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.73: mark_inode_dirty error
[   36.315104][  T510] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   36.339512][  T616] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   36.350865][  T616] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.73: mark_inode_dirty error
[   36.361978][  T510] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   36.487339][  T627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   36.496324][  T627] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff)
[   36.777135][  T627] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[   36.789218][  T627] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.77: mark_inode_dirty error
[   36.801439][  T627] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[   36.809773][  T627] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.77: mark_inode_dirty error
[   36.940889][  T383] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   37.082009][  T383] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   37.103474][  T383] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   37.126969][  T383] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   37.152905][  T383] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   37.174347][  T383] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   37.231646][  T283] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /22/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   37.259872][  T283] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /22/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   37.301447][  T283] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /22/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   37.345160][  T283] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /22/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   37.389161][  T283] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /22/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   37.430980][  T283] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /22/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   37.476375][  T637] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.499125][  T637] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.506429][  T637] device bridge_slave_0 entered promiscuous mode
[   37.541206][  T637] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.548055][  T637] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.579491][  T637] device bridge_slave_1 entered promiscuous mode
[   37.724848][  T637] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.731711][  T637] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.738788][  T637] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.745626][  T637] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.822309][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.830132][   T25] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.859630][   T25] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.879444][  T400] device bridge_slave_1 left promiscuous mode
[   37.885474][  T400] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.939340][  T400] device bridge_slave_0 left promiscuous mode
[   37.945330][  T400] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.959885][  T400] device veth1_macvtap left promiscuous mode
[   37.965905][  T400] device veth0_vlan left promiscuous mode
[   38.122458][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.149761][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.156594][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.179041][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.187102][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.194169][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.229022][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.236961][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.267013][  T637] device veth0_vlan entered promiscuous mode
[   38.290463][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   38.298558][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.307110][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   38.329664][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.342457][  T637] device veth1_macvtap entered promiscuous mode
[   38.349385][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.356618][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.364525][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   38.372765][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   38.381642][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   38.398041][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   38.406836][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   38.429629][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   38.437712][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   38.644766][  T645] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.668953][  T645] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.676149][  T645] device bridge_slave_0 entered promiscuous mode
[   38.709737][  T645] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.716574][  T645] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.740890][  T645] device bridge_slave_1 entered promiscuous mode
[   38.778987][   T15] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   38.842536][  T645] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.849395][  T645] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.856470][  T645] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.863288][  T645] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.932075][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.939978][  T543] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.959817][  T543] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.994189][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.003384][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.010248][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.028989][   T15] usb 5-1: Using ep0 maxpacket: 32
[   39.034368][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.049154][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.055981][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.079060][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.086862][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.109249][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.149029][   T15] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   39.162318][   T15] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   39.178950][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.205091][  T645] device veth0_vlan entered promiscuous mode
[   39.229154][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   39.236848][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   39.249537][   T15] hub 5-1:4.0: bad descriptor, ignoring hub
[   39.255291][   T15] hub: probe of 5-1:4.0 failed with error -5
[   39.267254][  T645] device veth1_macvtap entered promiscuous mode
[   39.269166][   T15] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[   39.285537][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   39.293522][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   39.309574][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   39.317558][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.337857][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   39.386530][  T650] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.394193][  T650] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.401880][  T650] device bridge_slave_0 entered promiscuous mode
[   39.416538][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.425569][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.434630][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.442890][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.452641][  T650] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.460012][  T650] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.467312][  T650] device bridge_slave_1 entered promiscuous mode
[   39.561875][  T650] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.568723][  T650] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.575849][  T650] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.582712][  T650] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.629232][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.636709][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.644596][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.679474][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.697593][  T543] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.704466][  T543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.729050][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.737313][  T543] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.744242][  T543] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.757527][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.765485][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.796951][  T650] device veth0_vlan entered promiscuous mode
[   39.810189][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.818570][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   39.827696][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   39.835175][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   39.844248][    T9] device bridge_slave_1 left promiscuous mode
[   39.850266][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.857578][    T9] device bridge_slave_0 left promiscuous mode
[   39.864665][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.872739][    T9] device veth1_macvtap left promiscuous mode
[   39.878569][    T9] device veth0_vlan left promiscuous mode
[   39.910863][  T656] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   39.918495][  T656] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   39.927811][  T656] F2FS-fs (loop0): invalid crc value
[   39.934429][  T656] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   39.947569][  T659] FAT-fs (loop4): Unrecognized mount option "shordname=mixed" or missing value
[   39.970928][  T650] device veth1_macvtap entered promiscuous mode
[   39.981789][  T656] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   39.982259][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.989870][  T656] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   40.004944][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.015286][  T658] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.022394][  T658] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.029684][  T658] device bridge_slave_0 entered promiscuous mode
[   40.037502][  T658] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.044594][  T658] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.052732][  T658] device bridge_slave_1 entered promiscuous mode
[   40.062510][  T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   40.125051][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   40.125088][   T24] audit: type=1400 audit(1724708283.240:354): avc:  denied  { read write } for  pid=643 comm="syz.4.81" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   40.154662][   T24] audit: type=1400 audit(1724708283.240:355): avc:  denied  { open } for  pid=643 comm="syz.4.81" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   40.357970][   T24] audit: type=1400 audit(1724708283.350:356): avc:  denied  { write } for  pid=655 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   40.383240][   T24] audit: type=1400 audit(1724708283.420:357): avc:  denied  { mounton } for  pid=655 comm="syz.0.82" path="/0/bus/file0" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   40.469024][   T24] audit: type=1400 audit(1724708283.580:358): avc:  denied  { unmount } for  pid=645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   40.521435][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.528708][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.547707][  T671] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.554884][  T671] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.562497][  T671] device bridge_slave_0 entered promiscuous mode
[   40.795150][  T658] device veth0_vlan entered promiscuous mode
[   40.805257][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.813957][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.821899][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.829318][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.836513][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.844683][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.853121][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.859985][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.862877][  T682] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   40.867208][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.881264][  T682] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.88: invalid block
[   40.882067][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.893008][  T682] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.88: couldn't read orphan inode 11 (err -117)
[   40.900609][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.918701][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.926147][  T682] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,noinit_itable,max_dir_size_kb=0x0000000000000009,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,i_version,noauto_da_alloc,nombcache,,errors=continue
[   40.949081][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.956944][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.964867][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.972483][  T671] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.979922][  T671] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.987294][  T671] device bridge_slave_1 entered promiscuous mode
[   41.041138][  T671] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.048019][  T671] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.055208][  T671] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.062029][  T671] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.087525][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   41.095107][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.102399][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.113194][  T658] device veth1_macvtap entered promiscuous mode
[   41.120237][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.135105][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   41.343877][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.350773][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.374398][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   41.384285][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.391152][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.419668][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   41.427490][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   41.435985][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   41.440312][  T688] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   41.444536][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   41.452878][  T688] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[   41.460418][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.478407][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.486434][  T688] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   41.486907][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.494669][  T688] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.89: mark_inode_dirty error
[   41.502931][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.513608][  T688] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   41.531792][  T688] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.89: mark_inode_dirty error
[   41.531809][  T671] device veth0_vlan entered promiscuous mode
[   41.549511][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.557535][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.565943][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.573733][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.581689][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.588884][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.603896][  T671] device veth1_macvtap entered promiscuous mode
[   41.611292][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.619499][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.627345][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.652359][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.661028][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.669272][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.677224][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.706006][   T24] audit: type=1326 audit(1724708284.820:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf497ce79 code=0x7ffc0000
[   41.747159][   T24] audit: type=1326 audit(1724708284.820:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf497ce79 code=0x7ffc0000
[   41.758996][  T699] erofs: (device loop1): mounted with root inode @ nid 36.
[   41.787374][   T24] audit: type=1326 audit(1724708284.820:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7febf497ce79 code=0x7ffc0000
[   41.810348][  T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   41.818956][   T24] audit: type=1326 audit(1724708284.820:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf497ce79 code=0x7ffc0000
[   41.842422][   T24] audit: type=1326 audit(1724708284.820:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf497ce79 code=0x7ffc0000
[   42.017889][  T704] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36
[   42.027578][  T704] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36
[   42.229133][  T307] usb 3-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config
[   42.246434][  T307] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   42.249344][  T702] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   42.256856][  T307] usb 3-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00
[   42.272030][  T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.272136][  T702] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   42.287043][  T307] usb 3-1: config 0 descriptor??
[   42.289511][  T702] F2FS-fs (loop3): invalid crc value
[   42.300435][  T702] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   42.322617][  T702] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   42.331902][  T702] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   42.340241][    T9] device bridge_slave_1 left promiscuous mode
[   42.350661][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.358532][    T9] device bridge_slave_0 left promiscuous mode
[   42.369129][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.377074][    T9] device bridge_slave_1 left promiscuous mode
[   42.383312][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.390850][    T9] device bridge_slave_0 left promiscuous mode
[   42.396905][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.405108][    T9] device bridge_slave_1 left promiscuous mode
[   42.411493][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.419837][    T9] device bridge_slave_0 left promiscuous mode
[   42.426068][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.434215][    T9] device veth1_macvtap left promiscuous mode
[   42.440204][    T9] device veth0_vlan left promiscuous mode
[   42.445785][    T9] device veth1_macvtap left promiscuous mode
[   42.451751][    T9] device veth0_vlan left promiscuous mode
[   42.457530][    T9] device veth1_macvtap left promiscuous mode
[   42.463560][    T9] device veth0_vlan left promiscuous mode
[   42.902587][  T716] udc-core: couldn't find an available UDC or it's busy
[   42.910027][  T716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   42.917738][  T718] xt_hashlimit: overflow, try lower: 0/0
[   43.249664][  T725] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   43.268713][  T725] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff)
[   43.331097][  T729] erofs: (device loop3): mounted with root inode @ nid 36.
[   43.340590][  T725] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[   43.348896][  T725] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.95: mark_inode_dirty error
[   43.360770][  T725] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[   43.369322][  T725] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.95: mark_inode_dirty error
[   43.800405][   T53] usb 5-1: USB disconnect, device number 7
[   43.898469][  T671] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   43.919486][  T671] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   43.948185][  T671] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   43.977696][  T671] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   43.998653][  T671] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   44.002065][  T737] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   44.029566][  T671] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   44.064388][  T737] device pim6reg1 entered promiscuous mode
[   44.400927][  T543] usb 3-1: USB disconnect, device number 3
[   44.429659][  T746] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   44.446177][  T746] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.99: invalid block
[   44.457286][  T746] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.99: couldn't read orphan inode 11 (err -117)
[   44.469124][  T746] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,noinit_itable,max_dir_size_kb=0x0000000000000009,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,i_version,noauto_da_alloc,nombcache,,errors=continue
[   44.623532][  T751] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869)
[   44.639733][  T751] EXT4-fs (loop2): invalid journal inode
[   44.815768][  T758] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   44.855688][  T758] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   44.867840][  T758] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.102: invalid indirect mapped block 2683928664 (level 1)
[   44.905783][  T758] EXT4-fs (loop0): Remounting filesystem read-only
[   44.924175][  T758] EXT4-fs (loop0): 1 truncate cleaned up
[   44.940307][  T758] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=."
[   45.028985][   T15] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   45.202737][  T758] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 13: comm syz.0.102: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   45.245221][  T758] EXT4-fs (loop0): Remounting filesystem read-only
[   45.337240][  T645] EXT4-fs error (device loop0): htree_dirblock_to_tree:1091: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   45.409067][   T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.430434][   T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.439903][  T645] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2204: inode #15: comm syz-executor: corrupted in-inode xattr
[   45.458767][   T15] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[   45.459954][  T645] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2204: inode #15: comm syz-executor: corrupted in-inode xattr
[   45.485171][   T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.512825][   T15] usb 3-1: config 0 descriptor??
[   45.684751][  T764] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.692183][  T764] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.699874][  T764] device bridge_slave_0 entered promiscuous mode
[   45.708364][  T764] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.715355][  T764] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.722590][  T764] device bridge_slave_1 entered promiscuous mode
[   45.779671][  T769] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.786548][  T769] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.793937][  T769] device bridge_slave_0 entered promiscuous mode
[   45.803535][  T769] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.810517][  T769] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.817866][  T769] device bridge_slave_1 entered promiscuous mode
[   45.845178][  T764] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.852147][  T764] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.859218][  T764] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.865990][  T764] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.894867][  T769] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.901837][  T769] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.908937][  T769] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.915770][  T769] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.931033][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   45.938631][  T543] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.946282][  T543] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.953713][  T543] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.961098][  T543] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.976719][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   45.984965][  T543] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.991899][  T543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.999309][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.007197][  T543] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.013984][  T543] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.026394][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   46.037544][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   46.052112][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.059134][   T15] usbhid 3-1:0.0: can't add hid device: -71
[   46.065107][   T15] usbhid: probe of 3-1:0.0 failed with error -71
[   46.073332][   T15] usb 3-1: USB disconnect, device number 4
[   46.080002][  T400] device bridge_slave_1 left promiscuous mode
[   46.085918][  T400] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.093344][  T400] device bridge_slave_0 left promiscuous mode
[   46.099784][  T400] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.107209][  T400] device veth1_macvtap left promiscuous mode
[   46.113097][  T400] device veth0_vlan left promiscuous mode
[   46.186027][  T764] device veth0_vlan entered promiscuous mode
[   46.193440][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   46.201289][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   46.208490][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   46.216415][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.224618][  T418] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.231481][  T418] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.238760][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.247122][  T418] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.253970][  T418] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.261230][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   46.269107][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   46.276808][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   46.289428][  T769] device veth0_vlan entered promiscuous mode
[   46.298769][  T769] device veth1_macvtap entered promiscuous mode
[   46.307250][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   46.315606][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   46.323702][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   46.331207][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   46.338384][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.350975][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.361669][  T764] device veth1_macvtap entered promiscuous mode
[   46.370128][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.378183][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.392988][  T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.403144][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.475721][  T779] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[   46.543388][   T24] kauditd_printk_skb: 7 callbacks suppressed
[   46.543399][   T24] audit: type=1326 audit(1724708289.660:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.0.107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc392190e79 code=0x0
[   46.573446][  T775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'.
[   46.584789][  T783] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   46.593984][  T783] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff)
[   46.606328][  T783] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   46.614956][  T783] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.108: mark_inode_dirty error
[   46.626828][  T783] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   46.635520][  T783] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.108: mark_inode_dirty error
[   46.879030][   T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   46.979232][  T417] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   47.069380][  T400] device bridge_slave_1 left promiscuous mode
[   47.075366][  T400] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.082692][  T400] device bridge_slave_0 left promiscuous mode
[   47.089118][  T400] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.096614][  T400] device veth1_macvtap left promiscuous mode
[   47.102508][  T400] device veth0_vlan left promiscuous mode
[   47.248999][  T417] usb 1-1: Using ep0 maxpacket: 32
[   47.279086][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.291026][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.301760][   T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   47.314528][   T20] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[   47.323344][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.332103][   T20] usb 2-1: config 0 descriptor??
[   47.366498][  T650] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   47.387369][  T650] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   47.410577][  T650] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   47.433258][  T650] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   47.455267][  T650] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   47.477483][  T650] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   47.569096][  T417] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43
[   47.578450][  T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.586307][  T417] usb 1-1: Product: syz
[   47.590384][  T417] usb 1-1: Manufacturer: syz
[   47.594775][  T417] usb 1-1: SerialNumber: syz
[   47.603155][  T417] usb 1-1: config 0 descriptor??
[   47.639563][  T417] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG
[   47.819140][  T418] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   47.841020][   T15] usb 1-1: USB disconnect, device number 2
[   48.209066][  T418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.218999][   T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   48.219878][  T418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.236747][  T418] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[   48.245908][  T418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.254348][  T418] usb 4-1: config 0 descriptor??
[   48.303817][  T796] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.310871][  T796] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.317931][  T796] device bridge_slave_0 entered promiscuous mode
[   48.324752][  T796] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.331616][  T796] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.338685][  T796] device bridge_slave_1 entered promiscuous mode
[   48.371703][  T796] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.378553][  T796] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.385875][  T796] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.392716][  T796] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.408696][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.416387][  T543] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.424205][  T543] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.434366][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.442474][  T417] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.449410][  T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.467458][  T796] device veth0_vlan entered promiscuous mode
[   48.474422][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.482958][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.490822][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.498509][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.506754][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.515016][  T417] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.521958][  T417] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.529152][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   48.536913][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.552235][  T796] device veth1_macvtap entered promiscuous mode
[   48.558789][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.566891][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.574857][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   48.587496][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   48.595604][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   48.603892][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   48.612451][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.619111][   T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.632109][   T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.641811][   T15] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   48.650651][   T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.669375][   T15] usb 1-1: config 0 descriptor??
[   48.750557][  T804] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.757438][  T804] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.764722][  T804] device bridge_slave_0 entered promiscuous mode
[   48.772026][  T804] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.773346][  T418] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0
[   48.778858][  T804] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.779595][  T804] device bridge_slave_1 entered promiscuous mode
[   48.798886][  T418] hid-led 0003:1D34:000A.0004: unbalanced delimiter at end of report description
[   48.810933][  T418] hid-led: probe of 0003:1D34:000A.0004 failed with error -22
[   49.049962][  T400] device bridge_slave_1 left promiscuous mode
[   49.056045][  T400] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.063205][  T543] usb 4-1: USB disconnect, device number 3
[   49.069134][  T400] device bridge_slave_0 left promiscuous mode
[   49.075127][  T400] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.082814][  T400] device veth1_macvtap left promiscuous mode
[   49.088666][  T400] device veth0_vlan left promiscuous mode
[   49.162942][  T804] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.169976][  T804] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.177045][  T804] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.183868][  T804] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.201395][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.209318][  T417] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.216401][  T417] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.227507][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.235817][  T417] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.242674][  T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.251076][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.259332][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.266164][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.278192][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.286212][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.300870][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.311938][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.320296][  T804] device veth0_vlan entered promiscuous mode
[   49.326429][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.333901][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.345834][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.355317][  T804] device veth1_macvtap entered promiscuous mode
[   49.365737][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.376021][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.430910][  T781] SELinux: (dev overlay, type overlay) getxattr errno 4
[   49.467035][   T24] audit: type=1400 audit(1724708292.580:372): avc:  denied  { bind } for  pid=813 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   49.486337][   T24] audit: type=1400 audit(1724708292.580:373): avc:  denied  { name_bind } for  pid=813 comm="syz.1.115" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   49.510144][   T24] audit: type=1400 audit(1724708292.580:374): avc:  denied  { node_bind } for  pid=813 comm="syz.1.115" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   49.534912][   T20] usbhid 2-1:0.0: can't add hid device: -71
[   49.598686][   T20] usbhid: probe of 2-1:0.0 failed with error -71
[   49.606676][  T818] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   49.624012][  T818] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.117: casefold flag without casefold feature
[   49.637254][  T818] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.117: missing EA_INODE flag
[   49.651897][   T24] audit: type=1400 audit(1724708292.770:375): avc:  denied  { unlink } for  pid=813 comm="syz.1.115" name="#17" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   49.658573][   T20] usb 2-1: USB disconnect, device number 3
[   49.678654][  T543] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   49.689458][  T818] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.117: error while reading EA inode 12 err=-117
[   49.705192][  T818] EXT4-fs (loop3): 1 orphan inode deleted
[   49.711157][  T818] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,
[   50.040175][   T24] audit: type=1400 audit(1724708293.070:376): avc:  denied  { write } for  pid=815 comm="syz.2.116" name="001" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   50.070720][   T15] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input4
[   50.273360][   T15] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input5
[   50.288126][   T15] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[   50.473067][  T400] device bridge_slave_1 left promiscuous mode
[   50.479469][  T400] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.487036][  T400] device bridge_slave_0 left promiscuous mode
[   50.493184][  T400] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.501377][  T400] device veth1_macvtap left promiscuous mode
[   50.508032][  T400] device veth0_vlan left promiscuous mode
[   50.514008][  T543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.524798][  T543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.534580][  T543] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   50.543759][  T543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.557478][  T543] usb 5-1: config 0 descriptor??
[   50.629193][  T305] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   50.740969][  T836] overlayfs: failed to get index nlink (file1/bus, err=-61)
[   50.759347][  T396] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   51.099207][  T543] hid (null): bogus close delimiter
[   51.119070][  T396] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   51.129103][  T396] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   51.179032][  T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.189889][  T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.199425][  T305] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   51.208478][  T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.209066][  T396] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   51.217266][  T305] usb 2-1: config 0 descriptor??
[   51.226458][  T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   51.237973][  T396] usb 3-1: SerialNumber: syz
[   51.298829][   T24] audit: type=1400 audit(1724708294.410:377): avc:  denied  { read write } for  pid=838 comm="syz.0.122" name="uinput" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   51.305503][  T417] usb 1-1: USB disconnect, device number 3
[   51.327855][   T24] audit: type=1400 audit(1724708294.410:378): avc:  denied  { open } for  pid=838 comm="syz.0.122" path="/dev/uinput" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   51.354037][   T24] audit: type=1400 audit(1724708294.440:379): avc:  denied  { ioctl } for  pid=838 comm="syz.0.122" path="/dev/uinput" dev="devtmpfs" ino=165 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   51.437057][   T24] audit: type=1400 audit(1724708294.550:380): avc:  denied  { ioctl } for  pid=842 comm="syz.3.123" path="socket:[18975]" dev="sockfs" ino=18975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.592802][  T849] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   51.606361][  T849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   51.623784][  T849] EXT4-fs (loop3): 1 orphan inode deleted
[   51.629389][  T849] EXT4-fs (loop3): 1 truncate cleaned up
[   51.634930][  T849] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,nobarrier,init_itable,errors=remount-ro,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,auto_da_alloc,
[   51.668608][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   51.668619][   T24] audit: type=1400 audit(1724708294.780:383): avc:  denied  { setopt } for  pid=842 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   51.719873][  T305] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[   51.739487][  T848] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   51.751479][  T848] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   51.761153][  T848] F2FS-fs (loop2): invalid crc value
[   51.767778][  T848] F2FS-fs (loop2): Found nat_bits in checkpoint
[   51.779601][  T543] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71
[   51.788978][  T543] uclogic 0003:256C:006D.0006: failed probing parameters: -71
[   51.796425][  T543] uclogic: probe of 0003:256C:006D.0006 failed with error -71
[   51.806372][  T543] usb 5-1: USB disconnect, device number 8
[   51.819625][  T848] F2FS-fs (loop2): Start checkpoint disabled!
[   51.826287][  T848] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   51.833506][  T848] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   51.851121][  T830] F2FS-fs (loop2): Skipping Checkpoint. Checkpoints currently disabled.
[   51.930598][  T857] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   51.940350][  T857] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff)
[   51.957408][  T857] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   51.960004][  T396] usb 3-1: 0:2 : does not exist
[   51.965959][  T857] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.124: mark_inode_dirty error
[   51.981488][  T857] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   51.989692][  T857] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.124: mark_inode_dirty error
[   52.159071][  T305] hid-led: probe of 0003:0FC5:B080.0007 failed with error -32
[   52.167280][  T400] attempt to access beyond end of device
[   52.167280][  T400] loop0: rw=1, want=1041, limit=128
[   52.205678][   T25] usb 2-1: USB disconnect, device number 4
[   52.246909][  T863] EXT4-fs (loop0): bad s_want_extra_isize: 11962
[   52.268985][  T417] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   52.629285][  T417] usb 4-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config
[   52.641982][  T871] netlink: 165 bytes leftover after parsing attributes in process `syz.0.125'.
[   52.657314][  T417] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   52.673400][  T417] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00
[   52.692490][  T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.708866][  T417] usb 4-1: config 0 descriptor??
[   52.791407][  T873] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   52.808467][  T873] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff)
[   52.845339][  T873] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[   52.863640][  T873] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.127: mark_inode_dirty error
[   52.881405][  T873] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[   52.895063][  T873] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.127: mark_inode_dirty error
[   53.489478][  T883] xt_hashlimit: overflow, try lower: 0/0
[   53.546674][  T400] attempt to access beyond end of device
[   53.546674][  T400] loop2: rw=2049, want=40992, limit=40427
[   53.562092][  T396] usb 3-1: USB disconnect, device number 5
[   53.603938][  T769] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   53.624736][  T769] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   53.645821][  T769] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   53.667420][  T769] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   53.687834][  T769] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   53.708727][  T769] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   53.763964][   T24] audit: type=1400 audit(1724708296.880:384): avc:  denied  { nlmsg_write } for  pid=884 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   53.779810][  T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   54.033152][  T890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   54.059582][   T24] audit: type=1400 audit(1724708297.180:385): avc:  denied  { mounton } for  pid=892 comm="syz.0.132" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   54.083037][  T890] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   54.096053][  T890] EXT4-fs (loop2): 1 truncate cleaned up
[   54.102064][  T890] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue
[   54.124024][   T24] audit: type=1400 audit(1724708297.240:386): avc:  denied  { bind } for  pid=889 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   54.133398][  T890] incfs: Can't find or create .index dir in ./file0
[   54.143127][   T24] audit: type=1400 audit(1724708297.240:387): avc:  denied  { unlink } for  pid=889 comm="syz.2.130" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   54.168996][  T890] incfs: mount failed -14
[   54.178614][   T24] audit: type=1400 audit(1724708297.290:388): avc:  denied  { setattr } for  pid=892 comm="syz.0.132" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   54.226591][  T893] fuse: Bad value for 'rootmode'
[   54.232920][   T24] audit: type=1400 audit(1724708297.340:389): avc:  denied  { mounton } for  pid=892 comm="syz.0.132" path="/5/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   54.235287][  T796] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   54.320104][   T24] audit: type=1400 audit(1724708297.440:390): avc:  denied  { rmdir } for  pid=796 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   54.343873][  T796] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   54.375161][  T796] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   54.396810][  T796] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   54.417044][  T796] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   54.417525][  T901] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   54.448493][  T796] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   54.468079][  T901] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   54.499793][  T796] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   54.545412][  T796] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   54.583721][  T796] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /3/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   54.615940][  T902] FAT-fs (loop4): Directory bread(block 64) failed
[   54.625159][  T902] FAT-fs (loop4): Directory bread(block 65) failed
[   54.637997][  T902] FAT-fs (loop4): Directory bread(block 66) failed
[   54.650941][  T902] FAT-fs (loop4): Directory bread(block 67) failed
[   54.661860][  T796] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   54.683475][  T902] FAT-fs (loop4): Directory bread(block 68) failed
[   54.697541][  T902] FAT-fs (loop4): Directory bread(block 69) failed
[   54.711671][  T902] FAT-fs (loop4): Directory bread(block 70) failed
[   54.727562][  T902] FAT-fs (loop4): Directory bread(block 71) failed
[   54.751600][  T902] FAT-fs (loop4): Directory bread(block 72) failed
[   54.771901][  T902] FAT-fs (loop4): Directory bread(block 73) failed
[   54.996489][  T308] usb 4-1: USB disconnect, device number 4
[   55.110579][  T910] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.117590][  T910] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.118963][   T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   55.132061][  T910] device bridge_slave_0 entered promiscuous mode
[   55.148437][  T910] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.164965][  T910] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.173960][  T910] device bridge_slave_1 entered promiscuous mode
[   55.210902][  T910] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.217778][  T910] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.224867][  T910] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.231653][  T910] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.268403][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.279683][  T417] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.288645][  T417] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.334763][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.343312][  T396] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   55.353590][  T735] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.360466][  T735] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.375208][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.384086][  T735] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.390946][  T735] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.407894][  T910] device veth0_vlan entered promiscuous mode
[   55.415202][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.423464][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.431637][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.438782][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.445960][   T25] usb 5-1: Using ep0 maxpacket: 16
[   55.451278][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.459127][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.472739][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.481664][  T910] device veth1_macvtap entered promiscuous mode
[   55.490939][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.513015][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.587780][  T921] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.594992][  T921] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.599015][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.602480][  T921] device bridge_slave_0 entered promiscuous mode
[   55.620471][  T921] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.627468][  T921] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.634974][  T921] device bridge_slave_1 entered promiscuous mode
[   55.641204][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.691156][  T921] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.698033][  T921] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.705129][  T921] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.711989][  T921] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.730818][  T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.738259][  T735] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.745805][  T735] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.750852][  T926] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   55.759264][  T396] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   55.761863][  T926] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[   55.771919][  T396] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   55.789908][   T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   55.798750][   T25] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[   55.803145][  T926] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   55.807242][   T25] usb 5-1: Product: syz
[   55.815587][  T926] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.141: mark_inode_dirty error
[   55.819047][   T25] usb 5-1: Manufacturer: syz
[   55.830477][  T926] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27
[   55.834933][   T25] usb 5-1: config 0 descriptor??
[   55.847521][  T926] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.141: mark_inode_dirty error
[   55.863030][  T392] device bridge_slave_1 left promiscuous mode
[   55.869156][  T392] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.876354][  T392] device bridge_slave_0 left promiscuous mode
[   55.879260][  T396] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   55.882882][  T392] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.892179][  T396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   55.905839][  T396] usb 1-1: SerialNumber: syz
[   55.910441][  T392] device veth1_macvtap left promiscuous mode
[   55.916261][  T392] device veth0_vlan left promiscuous mode
[   55.987369][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.995695][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.003975][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.010846][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.022807][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.031064][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.039327][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.046207][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.062103][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.070303][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.077955][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.086081][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.099712][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.128974][  T417] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   56.172367][  T396] usb 1-1: 0:2 : does not exist
[   56.268341][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.278189][  T921] device veth0_vlan entered promiscuous mode
[   56.284529][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.292187][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.300798][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.308088][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.309816][   T25] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0xd
[   56.321364][  T921] device veth1_macvtap entered promiscuous mode
[   56.323056][   T25] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0
[   56.329397][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.347559][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.355863][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.366994][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.375527][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.388275][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.396587][  T543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.446409][  T396] usb 1-1: USB disconnect, device number 4
[   56.450154][  T938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.143'.
[   56.461796][   T24] audit: type=1400 audit(1724708299.580:391): avc:  denied  { create } for  pid=937 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   56.499206][  T417] usb 3-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config
[   56.512781][  T417] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   56.522653][  T940] syz.0.144[940] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.522711][  T940] syz.0.144[940] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.523024][  T417] usb 3-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00
[   56.555180][  T417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.569039][  T417] usb 3-1: config 0 descriptor??
[   56.659455][  T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   56.730808][  T902] device syzkaller0 entered promiscuous mode
[   56.749013][   T25] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device
[   56.756959][   T25] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse
[   56.764304][   T25] kovaplus: probe of 0003:1E7D:2D50.0008 failed with error -71
[   56.774648][   T25] usb 5-1: USB disconnect, device number 9
[   56.922229][  T946] xt_hashlimit: overflow, try lower: 0/0
[   56.979821][  T392] device bridge_slave_1 left promiscuous mode
[   56.985850][  T392] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.993327][  T392] device bridge_slave_0 left promiscuous mode
[   56.999488][  T392] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.006996][  T392] device veth1_macvtap left promiscuous mode
[   57.013130][  T392] device veth0_vlan left promiscuous mode
[   57.550561][  T958] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   57.559502][  T958] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff)
[   57.575160][  T958] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   57.583561][  T958] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.149: mark_inode_dirty error
[   57.594919][  T958] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   57.603338][  T958] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.149: mark_inode_dirty error
[   58.039513][  T970] erofs: (device loop4): mounted with root inode @ nid 36.
[   58.109489][  T392] device bridge_slave_1 left promiscuous mode
[   58.115545][  T392] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.122915][  T392] device bridge_slave_0 left promiscuous mode
[   58.129074][  T392] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.136546][  T392] device veth1_macvtap left promiscuous mode
[   58.142686][  T392] device veth0_vlan left promiscuous mode
[   58.169049][  T543] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   58.529040][  T543] usb 4-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config
[   58.539426][  T543] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   58.548199][  T543] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00
[   58.557240][  T543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.565548][  T543] usb 4-1: config 0 descriptor??
[   58.687613][  T543] usb 3-1: USB disconnect, device number 6
[   58.945614][  T986] xt_hashlimit: overflow, try lower: 0/0
[   59.831265][  T989] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   59.838820][  T989] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   59.849709][  T989] F2FS-fs (loop0): invalid crc value
[   59.906289][  T994] erofs: (device loop2): mounted with root inode @ nid 36.
[   59.990603][  T989] F2FS-fs (loop0): Found nat_bits in checkpoint
[   60.013142][  T989] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   60.020111][  T989] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   60.084547][   T24] audit: type=1400 audit(1724708303.200:392): avc:  denied  { wake_alarm } for  pid=988 comm="syz.0.154" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   60.408973][  T543] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   60.489006][  T417] usb 4-1: USB disconnect, device number 5
[   60.595602][ T1009] EXT4-fs (loop3): 1 orphan inode deleted
[   60.603511][ T1009] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,acl,resuid=0x0000000000000000,jqfmt=vfsv0,data_err=ignore,user_xattr,nouid32,noload,,errors=continue
[   60.799207][  T543] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1088, setting to 1024
[   60.810510][  T543] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[   60.820846][  T543] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   60.909103][  T543] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   60.918278][  T543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   60.926269][  T543] usb 1-1: SerialNumber: syz
[   60.949146][ T1002] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   61.530312][ T1024] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   61.540353][ T1024] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.159: invalid block
[   61.551313][ T1024] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.159: couldn't read orphan inode 11 (err -117)
[   61.563391][ T1024] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,noinit_itable,max_dir_size_kb=0x0000000000000009,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,i_version,noauto_da_alloc,nombcache,,errors=continue
[   62.049044][  T417] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   62.289141][  T417] usb 5-1: Using ep0 maxpacket: 32
[   62.409187][  T417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.420020][  T417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.429716][  T417] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   62.442365][  T417] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[   62.451727][  T417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.460047][  T417] usb 5-1: config 0 descriptor??
[   62.698646][  T543] cdc_ether: probe of 1-1:1.0 failed with error -71
[   62.706739][    T9] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   62.708434][  T543] usb 1-1: USB disconnect, device number 5
[   62.715592][    T9] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   62.735771][ T1034] EXT4-fs (loop3): 1 orphan inode deleted
[   62.744449][ T1034] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,acl,resuid=0x0000000000000000,jqfmt=vfsv0,data_err=ignore,user_xattr,nouid32,noload,,errors=continue
[   62.940252][  T417] itetech 0003:048D:8595.0009: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0
[   63.141917][  T417] usb 5-1: USB disconnect, device number 10
[   63.990387][ T1045] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   63.999222][ T1045] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff)
[   64.106684][ T1045] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27
[   64.119165][ T1045] EXT4-fs error (device loop0): ext4_dirty_inode:6079: inode #2: comm syz.0.163: mark_inode_dirty error
[   64.130617][ T1045] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27
[   64.138903][ T1045] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz.0.163: mark_inode_dirty error
[   64.140790][ T1044] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   64.159775][ T1044] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff)
[   64.189145][ T1044] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27
[   64.197409][ T1044] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.165: mark_inode_dirty error
[   64.208967][ T1044] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27
[   64.217237][ T1044] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.165: mark_inode_dirty error
[   64.463068][  T417] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   64.746005][  T804] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   64.767019][  T804] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   64.788011][  T804] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   64.809134][  T804] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   64.829479][  T804] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   64.849670][  T417] usb 1-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config
[   64.849842][  T804] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   64.859995][  T417] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   64.889712][  T417] usb 1-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00
[   64.898708][  T417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.909878][  T417] usb 1-1: config 0 descriptor??
[   65.229707][ T1063] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   65.238513][ T1063] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff)
[   65.255918][ T1063] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   65.264410][ T1063] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.167: mark_inode_dirty error
[   65.275902][ T1063] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[   65.284162][ T1067] xt_hashlimit: overflow, try lower: 0/0
[   65.291724][ T1063] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.167: mark_inode_dirty error
[   65.468955][  T543] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   65.579013][  T417] usb 4-1: new high-speed USB device number 6 using dummy_hcd
SYZFAIL: mkdir(syz-tmp) failed
 (errno 28: No space left on device)
loop exited with status 67
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: repeatedly failed to execute the program
proc=1 req=140 state=1 status=67 (errno 9: Bad file descriptor)
[   65.713636][  T543] usb 3-1: Using ep0 maxpacket: 16
[   65.835554][  T396] usb 1-1: USB disconnect, device number 6
[   65.879093][  T543] usb 3-1: device descriptor read/all, error -71
[   66.099625][    T9] device bridge_slave_1 left promiscuous mode
[   66.105587][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.112835][    T9] device bridge_slave_0 left promiscuous mode
[   66.118775][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.126379][    T9] device veth1_macvtap left promiscuous mode
[   66.132239][    T9] device veth0_vlan left promiscuous mode
[   66.269008][  T417] usb 4-1: device not accepting address 6, error -71
[   67.499585][    T9] device bridge_slave_1 left promiscuous mode
[   67.505499][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.512745][    T9] device bridge_slave_0 left promiscuous mode
[   67.518646][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.526558][    T9] device bridge_slave_1 left promiscuous mode
[   67.532525][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.539853][    T9] device bridge_slave_0 left promiscuous mode
[   67.545759][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.553267][    T9] device bridge_slave_1 left promiscuous mode
[   67.559336][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.566517][    T9] device bridge_slave_0 left promiscuous mode
[   67.572651][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.580315][    T9] device veth1_macvtap left promiscuous mode
[   67.586111][    T9] device veth0_vlan left promiscuous mode
[   67.591965][    T9] device veth1_macvtap left promiscuous mode
[   67.597761][    T9] device veth0_vlan left promiscuous mode
[   67.603721][    T9] device veth1_macvtap left promiscuous mode
[   67.609553][    T9] device veth0_vlan left promiscuous mode