last executing test programs:

27m26.16212111s ago: executing program 1 (id=2539):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe800000000000000000002f415ab5bbfe8000000000000000000000000000aa084d2c35a70002210000000004000000"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0xffff, &(0x7f0000000080))
io_setup(0x8, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071105d00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffb, 0x200, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x0, 0x7, 0xe, 0x4623f, 0xffffffff, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x6, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x9, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x100007, 0x0, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)

27m25.056076121s ago: executing program 1 (id=2548):
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
getsockname$packet(r0, 0x0, &(0x7f0000000100))
socket$inet6(0xa, 0x400000000001, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006c0001", @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
request_key(0x0, &(0x7f0000000480)={'syz', 0x3}, 0x0, 0xfffffffffffffffc)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0")
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)

27m23.734814895s ago: executing program 1 (id=2555):
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0xe)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0xcb, 0x5, 0x4, 0x4, @rand_addr=' \x01\x00', @loopback, 0x40, 0x10, 0x6, 0x9}})

27m22.990975178s ago: executing program 1 (id=2558):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000402000000006100302e"], 0x0, 0x58}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x4010, r5, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = accept$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c)
fcntl$dupfd(r9, 0x406, r6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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")
syz_clone(0x2200100, 0x0, 0x0, 0x0, 0x0, 0x0)

27m21.390580858s ago: executing program 1 (id=2561):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x1f, 0x800, 0x11428, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0xff, {0x0, 0x0, 0x0, {0x5, 0x10000000, 0x0, 0x6, 0x7ff, 0xfffffffffffffffd, 0x0, 0x3966, 0x3, 0x8000, 0x4, r2, r3, 0xc3d, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/224, 0xe0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r7=>0x0})
socket(0xa, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@deltclass={0x158, 0x29, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3, 0x5}, {0xffe0, 0x1}, {0xfff3, 0xfff2}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xfffffffe, 0x9, 0xd787}}, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x9, 0x7fff}}, @TCA_HFSC_USC={0x10, 0x3, {0x10, 0x4c, 0xfffffffd}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x3, 0x2}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x1, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xffff0000, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0xffff, 0xe, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0xf}}, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0xffff29df, 0xffffff08}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0xf2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfa}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7f}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3ff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80000001}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x97}]}}, @tclass_kind_options=@c_cbs={0x8}]}, 0x158}}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000000c00)=ANY=[], 0x1, 0x555e, &(0x7f0000005f80)="$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")
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rxrpc_peer\x00', r8}, 0x18)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r9 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="19f97061dae6e0fa8d660a5cac7ed0b0b9b0d1850a4a0d66aac451643e76259276595ddf417d8586a19a4334301b", @ANYRESHEX=r9, @ANYBLOB=',\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)

27m21.119202243s ago: executing program 1 (id=2563):
openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0x8, @void}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x8, 0x16a9}, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_sb_remount\x00')

27m20.063217822s ago: executing program 32 (id=2563):
openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0x8, @void}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x8, 0x16a9}, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_sb_remount\x00')

24m39.075603761s ago: executing program 4 (id=3129):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x28011, r0, 0x4000)
ftruncate(r0, 0x81ff)

24m34.18363683s ago: executing program 4 (id=3139):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000000)={[{@nouser_xattr}]}, 0xff, 0x27e, &(0x7f00000007c0)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=")
symlink(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
creat(&(0x7f0000000100)='./file0\x00', 0xac)

24m29.581632575s ago: executing program 4 (id=3145):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x0, @empty, 0x8}, 0x1c)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000bc0)=""/249)

24m28.503407394s ago: executing program 4 (id=3147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x480000}, 0x94)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0)

24m27.263658897s ago: executing program 4 (id=3156):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000300)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}])
io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)

24m25.789689973s ago: executing program 4 (id=3161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0015000000002362103ab197b81fb900e6000086", @ANYRES16, @ANYRES32, @ANYBLOB="0000000000002000000000000000930bfe00"/28, @ANYRESHEX=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x2, 0x503, &(0x7f0000000500)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$FICLONE(r3, 0x40049409, r4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00009c6000/0x3000)=nil, 0x3000, 0x2000006, 0x98011, r9, 0xa4bb9000)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0})

24m10.433695444s ago: executing program 33 (id=3161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0015000000002362103ab197b81fb900e6000086", @ANYRES16, @ANYRES32, @ANYBLOB="0000000000002000000000000000930bfe00"/28, @ANYRESHEX=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x2, 0x503, &(0x7f0000000500)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$FICLONE(r3, 0x40049409, r4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00009c6000/0x3000)=nil, 0x3000, 0x2000006, 0x98011, r9, 0xa4bb9000)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0})

23.898914198s ago: executing program 5 (id=7283):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000006610000000280012800e00010069703667726574617000000014000280080004000b000000060011004e210000"], 0x48}}, 0x4040)

20.501895175s ago: executing program 5 (id=7283):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000006610000000280012800e00010069703667726574617000000014000280080004000b000000060011004e210000"], 0x48}}, 0x4040)

14.064935303s ago: executing program 5 (id=7283):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000006610000000280012800e00010069703667726574617000000014000280080004000b000000060011004e210000"], 0x48}}, 0x4040)

10.12394059s ago: executing program 5 (id=7283):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000006610000000280012800e00010069703667726574617000000014000280080004000b000000060011004e210000"], 0x48}}, 0x4040)

7.13662571s ago: executing program 3 (id=7484):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0)

6.989648353s ago: executing program 6 (id=7486):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x1000840, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=mixed,uni_xlate=1,nonumtail=0,iocharset=cp1250,uni_xlate=0,rodir,rodir,codepage=862,shortname=win95,iocharset=macgail=0,shortname=mixed,iocharset=maccroatian,\x00'/181], 0x3, 0x356, &(0x7f00000005c0)="$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")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0)
recvmsg(r2, &(0x7f0000003640)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
connect$inet6(r5, &(0x7f0000000b00)={0xa, 0x4e24, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
r8 = syz_io_uring_setup(0x76e8, &(0x7f00000003c0)={0x0, 0xd864, 0x2404, 0x0, 0x363}, &(0x7f0000000200), &(0x7f00000004c0))
r9 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8})
close(r9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150f, &(0x7f0000000780)="$eJzs3AnYTlX3MPC19t6Hhwx3knmvvQ53MmySJEOSDEmSJMmckCRJEpIpUxKSkDnJHJIpJPM8ZUqSvJIkCQlJ9nept9f7fvW/6r16/5/v/3/W77rOde917bP22fus57nPuc8zfN1hcOW6VSrUZmb4S/CXl+4AkAIA/QAgMwBEAFAiS4ksl/rTaez+1w4i/rMemHalZyCuJKl/6ib1T92k/qmb1D91k/qnblL/1E3qn7pJ/YVIzbZNz3m1bKl3++vP/1N+eZHn//8DyfU/dZP6/29zOt2/s7fU/3+TiyGEfy9D6p+6Sf1TN6l/6ib1T92k/qmb1F+I1OxKP3+W7a9t9RtOyfBX8q/0158QQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiNThXLjMAMCv7Ss9LyGEEEIIIYQQQvznhLRXegZCCCGEEEIIIYT474egQIOBCNJAWkiBdJAeroIMkBEyQWZIwNWQBa6BrHAtZIPskANyQi7IDXnAAoEDhhjyQj5IwnWQH66HAlAQCkFh8FAEisINUAxuhOJwE5SAm6Ek3AKloDSUgbJwK5SD26A83A4V4A6oCJWgMlSBO6Eq3AXV4G6oDvdADbgXasJ9UAvuh9rwANSBB6EuPAT1oD40gIbQCBpDk3/KT/nT+c9BF3geukI36A49oCe8AL2gN/SBvtAPXoT+8BIMgJdhIAyCwfAKDIFXYSi8BsNgOIyA12EkjILRMAbGwjgYD2/ABHgTJsJbMAkmwxSYCtNgOsyAt2EmzILZ8A7MgXdhLsyD+bAAFsJ7sAgWwxJ4H5bCB7AMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA0+hO2wA3bCLtgNH8Ee+Bj2wiewDz6F/fDZv5l/9l/zL4YQEFChQoMG02AaTMEUTI/pMQNmwEyYCROYwCyYBbNiVsyG2TAH5sBcmAvzYB4kJGRkzIt5MYlJzI/5sQAWwEJYCD16LIpFsRjeiMWxOJbAElgSS2IpLI2AZbEslkOA8lgeK2AFrIgVsTJWxjvxTrwLq2E1rI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT1sgA2wETbCJtgEm2JTbIbNsIUBbIktsRW2wtbYGttgG2yLbbEdtsP22B47YAfsiJ2wEz6Hz+Hz+Dx2w4qqB/bEntgLe2Ef7It98UXsjy/hS/gyDsRBOBhfwVfwVRyKZ3AYDscROALLqVE4Gscgq3E4HsfjBJyAE3EiTsLJOBmn4jScjjNwBs7EWTgL38E5+C6+i/NwHi7AhbgQF+FiXIJLcCmexWW4HFfgSlyFq3EVrsV1uBY34EbcgJtxM27Frfghfog7cAfuwl34EX6EH+PH+Al+ggNxP+7HA3gAD+JBPISH8DAexiN4BI/iUTyGx/A4HscTeBJP4Uk8jafxDJ7Fc3gOz+N5vIAX8CJevPTNry4xyqg0Ko1KUSkqvUqvMqgMKpPKpBIqobKoLCqryqqyqWwqh8qhcqlcKo/Ko0iRYhWrvCqvSqqkyq/yqwKqgCqkCimvvCqqiqpiqpgqroqrEupmVVLdokqp0qq5L6vKqnKqhS+vblcVVAVVUVVSlVUVVUVVVVVVNVVNVVfVVQ1VQ9VU96laqgf2wQfUpcrUVYOwnhqMDVRD1Ug1Vq/iw6qpGorNVHPVQj2qhuMwbKWa+tbqCdVGjca26ik1Bp9W7dU47KCeVR1VJ9VZPae6qGa+q+qmJmEP1VNNxV6qt+qj+qqZWEldqlhl9bIaqAapweoVtQBfVUPVa2qYGq5GqNfVSDVKjVZj1Fg1To1Xb6gJ6k01Ub2lJqnJaoqaqqap6WqGelvNVLPUbPWOmqPeVXPVPDVfLVAL1XtqkVqslqj31VL1gVqmlqsVaqVapVarNWqtWqfWqw1qo9qkNqstaqvapj5U29UOtVPtUruV+vVNW+1Tn6r96jN1QP1NHVSfq0PqC3VYfamOqK/UUfW1Oqa+UcfVt+qEOqlOqe/UafW9OqPOqnPqB3Ve/aguqJ/URRUU9AAArbXRkU6j0+oUnU6n11fpDDqjzqQz64S+WmfR1+is+lqdTWfXOXROnUvn1nm01aSdZh3rvDqfTurrdH59vS6gC+pCurD2uoguqm/QxfSNuri+SZfQN+uS+hZdSpfWZXRZfasup2/T5fXtuoK+Q1fUlXRlXUXfqavqu3Q1fbeuru/RNfS9uqa+T9fS9+va+gFdRz+o6+qHdD1dXzfQDXUj3Vg30Q/rpvoR3Uw31y30o7qlfky30o/r1voJ3UY/qdvqp3Q7/bRur5/RHfSzuqPupDvrn/RFHXRX3U131z10T/2C7qV76z66r+6nX9T99Ut6gH5ZD9SD9GD9ih6iX9VD9Wt6mB6uR+jX9Ug9So/WY/RYPU6P12/oCfpNPVG/pSfpyXqKnqqn6em6z99Hmv0n8t/8nfwBPx99q96mP9Tb9Q69U+/Su/VHeo/eo/fqvXqf3qf36/36gD6gD+qD+pA+pA/rw/qIPqKP6qP6mD6mj+vj+oQ+qX/Q3+nT+nt9Rp/VZ/UP+rw+ry/8/RyAQaOMNsZEJo1Ja1JMOpPeXGUymIwmk8lsEuZqk8VcY7Kaa002k93kMDlNLpPb5DHWkHGGTWzymnwmaa4z+c31poApaAqZwsabIqaoueEv5//R/JqYJqapaWqamWamhWlhWpqWppVpZVqb1qaNaWPamramnWln2pv2poPpYDqajqaz6Wy6mC4mAEB30930NC+YXqa36WP6mn7mRdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJLzBKz1Cw1y8xys9ysNCvNarParDVrzXqz3mw0G81ms9ksM7/+guZOs9PsNrvNHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL932RSpSkYlMlCZKE6VEKVH6KH2UIcoQZYoyRYkoEWWJskRZo2ujbFH2KEeUM8oV5Y7yRDaiyEUcxVHeKF+UjK6L8kfXRwWiglGhqHDkoyJR0eiGqFh0Y1Q8uikqEd0clYxuiUpFpaMyUdno1qhcdFtUPro9qhDdEVWMKkWVoyrRnVHV6K6oWnR3VD26J6oR3RvVjO6LakX3R7WjB6I60YNR3eihqF5UP2oQNYwaRY2jJv/R8UM4k/0R39V2s91tD9vTvmB72d62j+1r+9kXbX/7kh1gX7YD7SA72L5ih9hX7VD7mh1mh9sR9nU70o6yo+0YO9aOs+PtG3aCfdNOtG/ZSXaynWKn2ml2up1h37Yz7Sw7275j59h37Vw7z863C+xC+55dZBfbJfZ9u9R+YJfZ5XaFXWlX2dV2jV1r19n1doPdaDfZzXaL3Wq32Q/tdrvD7rS77G77kd1jP7Z77Sd2n/3U7ref2QP2b/ag/dwesl/Yw/ZLe8R+ZY/ar+0x+409br+1J+xJe8p+Z0/b7+0Ze9aesz/Y8/ZHe8H+ZC/acOnm/tLlnQwZSkNpKIVSKD2lpwyUgTJRJkpQgrJQFspKWSkbZaMclINyUS7KQ3noEiamvJSXkpSk/JSfClABKkSFyJOnolSUilExKk7FqQSVoJJUkkpRKSpDly5tt9JtdBvdTrfTHXQHVaJKVIWqUFWqStWoGlWn6lSDalBNqkm1qBbVptpUh+pQXapL9ageNaAG1IgaURNqQk2pKTWjZtSCWlBLakmtqBW1ptbUhtpQW2pL7agdtaf21IE6UEfqSJ2pM3WhLtSVulJ36k49qSf1ol7Uh/pQP+pH/ak/DaABNJAG0mAaTENoCA2loTSMhtMIep1G0igaTWNoLI2j8TSeJtAEmkgTaRJNoik0habRNJpBM2gmzaTZNJvm0ByaS3NpPs2nhbSQFtEiWkJLaCktpWW0jFbQClpFq2gNraF1tI420AbaRJtoC22htLCNttN22kk7aTftpj20h/bSXtpH+2g/7acDdIAO0kE6RIfoMB2mI3SEjtJROkbH6DgdpxN0Ak/RKTpNp+kMnaFzdI7O0490gX6iixQoxaVz6d1VLoPL6DK5zC7FpesGAP+Ic7icLpfL7fI467K57P8Sk3OugCvoCrnCzrsirqi74TdxKVfalXFl3a2unLvNlf9NXNXd5aq5u111d4+r4u78l7iGu9fVdA+5Wq6+q+0aujqusavrHnL1XH3XwDV0jVxj19I95lq5x11r94Rr4578TbzILXbr3Hq3wW10e90n7pz7wR11X7vz7kfX1XVz/dyLrr97yQ1wL7uBbtBv4hHudTfSjXKj3Rg31o37TTzFTXXT3HQ3w73tZrpZv4kXuvfcHLfEzXXz3Hy34Of40pyWuPfdUveBW+aWuxVupVvlVrs1bu0/5rrSbXZb3Fa3x33strsdbqfb5Xa7j36OL61jn/vU7XefuSPuK3fQfe4OuWPusPvy5/jS+o65b9xx96074U66U+47d9p97864sz+v/9Lav3M/uYsuOGBkxZoNR5yG03IKp+P0fBVn4IyciTNzgq/mLHwNZ+VrORtn5xyck3Nxbs7DlokdM8ecl/NxMl9Gzs/XcwEuyIW4MHsuwkX5Bi7GN3JxvolL8M1ckm/hUlyay3BZvpXL8W1cnm/nCnwHV+RKXJmr8J1cle/ianw3V+d7uAbfyzX5Pq7F93NtfoDr8INclx/ielyfG3BDbsSNuQk/zE35EW7GzbkFP8ot+TFuxY9za36C2/CT3Jaf4nb8NLfnZ7gDP8sduRN35ue4Cz/PXbkbd+ce3JNf4F7cm/twX+7HL3J/fokH8Ms8kAfxYH6Fh/CrPJRf42E8nEfw6zySR/FoHsNjeRyP5zd4Ar/JE/ktnsSTeQpP5Wk8nWfw2zyTZ/Fsfofn8Ls8l+fxfF7AC/k9XsSLeQm/z0v5A17Gy3kFr+RVvJrX8Fpex+t5A2/kTbyZt/BW3sYf8nbewTt5F+/mj3gPf8x7+RPex5/yfv6MD/Df+CB/zof4Cz7MX/IR/oqP8td8jL/h4/wtn+CTfIq/49P8PZ/hs3yOf+Dz/CNf4J/4IgeGGGMV69jEUZwmThunxOni9PFVcYY4Y5wpzhwn4qvjLPE1cdb42jhbnD3OEeeMc8W54zyxjSl2McdxnDfOFyfj6+L88fVxgbhgXCguHPu4SFw0viEuFt8YF49vikvEN8cl41viUnHpuExcNr41LhffFpePb48rxHfEFeNKceW4SnxnXDW+K64W3x1Xj++Ji8f3xjXj++Ja8f1x7fiBuE78YFw3fiiuF9ePG8QN40Zx47hJ/HDcNH4kbhY3j1vEj8Yt48fiVvHjcev4ibhN/OQf9nePe8Q94xfiF+IQ7tbzkwuSC5PvJRclFyeXJN9PLk1+kFyWXJ5ckVyZXJVcnVyTXJtcl1yf3JDcmNyU3JzcktyaDKFKWvDoldfe+Min8Wl9ik/n0/urfAaf0WfymX3CX+2z+Gt8Vn+tz+az+xw+p8/lc/s83nryzrOPfV6fzyf9dT6/v94X8AV9IV/Ye1/EF/WNfRPfxDf1j/hmvrlv4R/1j/rH/GP+cf+4f8K38U/6tv4p384/7dv7Z/wz/lnf0Xfynf1zvot/3nf13Xx339339D19L9/L9/F9fD/fz/f3/f0AP8AP9AP9YD/YD/FD/FA/1A/zw/wIP8KP9CP9aD/aj/Vj/Xg/3k/wE/xEP9FP8pP8FD/FT/PT/Aw/w8/0M/1sP9vP8XP8XD/Xz/fz/UK/0C/yi/wSv8Qv9Uv9Mr/Mr/Ar/Cq/yq/xa/w6v85v8Bv8Jr/Jb/Fb/Da/zW/32/1Ov9Pv9rv9Hr/H71V7/T6/z+/3+/0Bf8Af9Af9If+FP+y/9Ef8V/6o/9of89/44/5bf8Kf9Kf8d/60/96f8Wf9Of+DP+9/9Bf8T/6iD3584o3EhMSbiYmJtxKTEpMTUxJTE9MS0xMzEm8nZiZmJWYn3knMSbybmJuYl5ifWJBYmHgvsSixOLEk8X5iaeKDxLLE8sSKxMrEqsTqRAi50wBAyBeS4bqQP1wfCoSCoVAoHHwoEoqGG0KxcGMoHm4KJcLNoWS4JZQKpUOZUD80CA1Do9A4NAkPh6bhkdAsNA8twqOhZXgstAqPh9bhidAmPBnahqdCu/B0aB+eCR3Cs6Fj6BQ6h+dCl/B86Bq6he6hR+gZXgi9Qu/QJ/QN/cKLoX94KQwIL4eBYVAYHF4JQ8KrYWh4LQwLw8OI8HoYGUaF0WFMGBvGhfHhjTAhvBkmhrfCpDA5TAlTw7QwPcwIb4eZYVaYHd4Jc8K7YW6YF+aHBWFheC8sCovDkvB+WBo+CMvC8rAirAyrwuqwJqwN68L6sCFsDJvC5rAlbA3bwodhe9gRdoZdYXf4KOwJH4e94ZOwL3wa9ofPwoHwt3AwfB4OhS/C4fBlOBK+CkfD1+FY+CYcD9+GE+FkOBW+C6fD9+FMOBvOhR/C+fBjuBB+Chflb9aEEEIIIf4U/Qf9Pf6LnF9/EtUTADLuyHn4/+7flO2Xdu+0uVomAOCJbh0e+HWrWLF79+5/33eZhijfPABIXM6/dBv9a7wcWsBj0BqaQ7F/9Kf807F6q07n+Q/GT94MkP6fclLU5fbl8W/83fX3VqPm/P74+OsuUXIeQIF8l3PSweX48vjF/4vxszf9g/mn+3w8QLN/yskAl+PL4xeFR+BJaP0vewohhBBCCCGEEL/orcq0gz/x+TyXuZyTFi7Hv/f5XAghhBBCCCGEEP9/ebpT58cfbt26ebv/eQ1zRY6OAD8/G0lEv5zAP84KmX/Z88qfMWlI4083ruS7khBCCCGEEOK/w+Wb/t/2DbkSExJCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIVKh/xf/TuyXI+GVXqoQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxxfyfAAAA//+wXi8u")
getpid()
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

6.722191767s ago: executing program 5 (id=7283):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000006610000000280012800e00010069703667726574617000000014000280080004000b000000060011004e210000"], 0x48}}, 0x4040)

4.968440247s ago: executing program 2 (id=7488):
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18)
write$selinux_create(r0, &(0x7f0000000340)=@objname={'system_u:object_r:var_auth_t:s0', 0x20, 'unconfined', 0x20, 0x9, 0x20, './file0\x00'}, 0x48)

4.968012027s ago: executing program 3 (id=7489):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr")

4.967531907s ago: executing program 6 (id=7490):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2}])
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pwrite64(r5, &(0x7f0000000280)="dc5a7fe730162df7515db08cc7e280f2cb1b27c4f8478beee3a59f74f87ad1584f2b23f81a954f305c2c383ef350f5cbc4bd31159b95a837126ac1bf39d88a377193dc69c3060bfa21770b23fc1f59919cb0830b7d050c525186362536259c76a86da9baa1675099046ee90893d3bcd1fa89c6e5c599783754ccfd106c85efe3fff695c4820326462d6e797070325d1e95aa7b1f7c5dbf0680a34f50f4131d82d244684f0e628e08635220f24b47e4eccf6083fe56f9ab0ddb05549f0b8bc683f18d3ea02fd048e864ead90245325400e656c5f60b4644197a35fa615c96f162ac1d", 0xe2, 0x3)

4.945699597s ago: executing program 2 (id=7491):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)

4.867461549s ago: executing program 2 (id=7492):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00'}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000e8ad58c359005f8d6b4b4eddb686f6d93a000085100000060000", @ANYBLOB], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, 0x0, 0x0)

3.891480925s ago: executing program 2 (id=7493):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB="000080c55d000000efffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000009000000be0000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a7007b5208a63f7d4200000000000000000000000000000000000000002000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000000c0), 0x0}, 0x20)
r4 = socket(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095", @ANYRES32=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='afs_protocol_error\x00', r1}, 0x18)
r5 = socket(0x10, 0x5, 0x0)
write(r5, &(0x7f00000002c0)="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", 0xfc)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000400)='netlink_extack\x00', r9}, 0x18)
r10 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090007001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
ptrace(0x10, r8)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)

3.646801319s ago: executing program 0 (id=7494):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file1\x00', 0x0, 0x10}, 0x18)

3.622369279s ago: executing program 3 (id=7495):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1)
sendfile(0xffffffffffffffff, r6, 0x0, 0x3ffff)
statfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000300)=""/251)

3.615113169s ago: executing program 0 (id=7496):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

3.495903182s ago: executing program 0 (id=7497):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
poll(0x0, 0x0, 0x5)
unlink(&(0x7f0000000280)='./file0/file0\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

3.439476602s ago: executing program 2 (id=7498):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_clone3(&(0x7f0000000840)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}, 0x58)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x23, 0x0}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r7, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80045510, &(0x7f0000000000))

3.204378476s ago: executing program 6 (id=7499):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000e8ad58c359005f8d6b4b4eddb686f6d93a000085100000060000", @ANYBLOB], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, 0x0, 0x0)

2.603407756s ago: executing program 3 (id=7500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0)

2.595780557s ago: executing program 0 (id=7501):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00'}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000e8ad58c359005f8d6b4b4eddb686f6d93a000085100000060000", @ANYBLOB], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, 0x0, 0x0)

2.073634415s ago: executing program 6 (id=7502):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0)

2.047316346s ago: executing program 6 (id=7503):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0)

1.934997728s ago: executing program 5 (id=7283):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000006610000000280012800e00010069703667726574617000000014000280080004000b000000060011004e210000"], 0x48}}, 0x4040)

59.032849ms ago: executing program 0 (id=7504):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='kmem_cache_free\x00'}, 0x18)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
pwritev2(r0, &(0x7f0000003640), 0x0, 0xa74a, 0x102, 0x0)

57.265309ms ago: executing program 2 (id=7505):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
gettid()
lchown(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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")
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)

54.195159ms ago: executing program 3 (id=7506):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file1\x00', 0x0, 0x10}, 0x18)

53.825819ms ago: executing program 6 (id=7507):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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")

34.86382ms ago: executing program 3 (id=7508):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
nanosleep(&(0x7f0000000300), &(0x7f0000000380))

0s ago: executing program 0 (id=7509):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2}])
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pwrite64(r5, &(0x7f0000000280)="dc5a7fe730162df7515db08cc7e280f2cb1b27c4f8478beee3a59f74f87ad1584f2b23f81a954f305c2c383ef350f5cbc4bd31159b95a837126ac1bf39d88a377193dc69c3060bfa21770b23fc1f59919cb0830b7d050c525186362536259c76a86da9baa1675099046ee90893d3bcd1fa89c6e5c599783754ccfd106c85efe3fff695c4820326462d6e797070325d1e95aa7b1f7c5dbf0680a34f50f4131d82d244684f0e628e08635220f24b47e4eccf6083fe56f9ab0ddb05549f0b8bc683f18d3ea02fd048e864ead90245325400e656c5f60b4644197a35fa615c96f162ac1d", 0xe2, 0x3)

kernel console output (not intermixed with test programs):

03e syscall=202 compat=0 ip=0x7f98375269a9 code=0x0
[ 2193.873219][T26944] attempt to access beyond end of device
[ 2193.873219][T26944] loop6: rw=2049, want=53264, limit=40427
[ 2193.908358][T21265] attempt to access beyond end of device
[ 2193.908358][T21265] loop5: rw=2049, want=45104, limit=40427
[ 2193.950749][T23476] attempt to access beyond end of device
[ 2193.950749][T23476] loop6: rw=2049, want=45120, limit=40427
[ 2194.648678][T26983] fuse: Bad value for 'fd'
[ 2194.671234][T26983] hub 6-0:1.0: USB hub found
[ 2194.676248][T26983] hub 6-0:1.0: 1 port detected
[ 2194.951820][T26986] fuse: Bad value for 'user_id'
[ 2194.965036][T26986] hub 6-0:1.0: USB hub found
[ 2194.970142][T26986] hub 6-0:1.0: 1 port detected
[ 2195.731931][T26995] overlayfs: missing 'lowerdir'
[ 2195.785739][T26997] loop5: detected capacity change from 0 to 512
[ 2195.832964][T26997] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2195.850781][T26997] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2195.926052][T26997] overlayfs: failed to resolve './bus': -2
[ 2195.938484][T27008] loop2: detected capacity change from 0 to 512
[ 2196.023839][T27008] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2196.042149][T27008] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2196.058928][T27012] loop5: detected capacity change from 0 to 512
[ 2196.095685][T27012] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2196.110950][   T26] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 2196.112739][T27008] overlayfs: failed to resolve './bus': -2
[ 2196.126370][T27012] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2196.270712][   T30] audit: type=1400 audit(1753749968.160:10746): avc:  denied  { read append } for  pid=27018 comm="syz.5.7267" name="file0" dev="tmpfs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2196.297754][   T30] audit: type=1400 audit(1753749968.190:10747): avc:  denied  { open } for  pid=27018 comm="syz.5.7267" path="/298/file0" dev="tmpfs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2196.350978][   T26] usb 4-1: Using ep0 maxpacket: 16
[ 2196.549061][   T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2196.825721][T27030] loop5: detected capacity change from 0 to 256
[ 2196.884285][T27029] fuse: Bad value for 'user_id'
[ 2197.004273][T27029] hub 6-0:1.0: USB hub found
[ 2197.010609][T27029] hub 6-0:1.0: 1 port detected
[ 2199.725072][T27032] fuse: Bad value for 'group_id'
[ 2199.731422][T27032] hub 6-0:1.0: USB hub found
[ 2199.736225][   T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2199.746056][   T26] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2199.746218][T27032] hub 6-0:1.0: 1 port detected
[ 2199.858162][T27030] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 2199.964935][T27023] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[ 2199.975992][T27023] FAT-fs (loop11): unable to read boot sector
[ 2200.044248][   T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 2200.053435][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2200.170442][   T26] usb 4-1: config 0 descriptor??
[ 2200.207178][   T26] usb 4-1: can't set config #0, error -71
[ 2200.228672][   T26] usb 4-1: USB disconnect, device number 31
[ 2200.554581][T27045] loop6: detected capacity change from 0 to 1024
[ 2200.672299][T27045] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.7275: Invalid block bitmap block 0 in block_group 0
[ 2200.690000][T27036] loop3: detected capacity change from 0 to 40427
[ 2200.709355][T27045] Quota error (device loop6): write_blk: dquota write failed
[ 2200.721786][T27045] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[ 2200.732324][T27045] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.7275: Failed to acquire dquot type 0
[ 2200.744772][T27036] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2200.758974][T27045] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.7275: Freeing blocks not in datazone - block = 0, count = 4096
[ 2200.788006][T27045] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.7275: Invalid inode bitmap blk 0 in block_group 0
[ 2200.801176][T14958] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9)
[ 2200.813029][T14958] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:3: Failed to release dquot type 0
[ 2200.829508][T27036] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[ 2200.836178][T27045] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem
[ 2200.860823][T27045] EXT4-fs (loop6): 1 orphan inode deleted
[ 2200.861118][T27036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2200.874460][T27045] EXT4-fs (loop6): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[ 2201.068592][T22919] attempt to access beyond end of device
[ 2201.068592][T22919] loop3: rw=2049, want=45104, limit=40427
[ 2201.157590][T27058] FAULT_INJECTION: forcing a failure.
[ 2201.157590][T27058] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2201.175022][T27058] CPU: 1 PID: 27058 Comm: syz.5.7279 Tainted: G        W         5.15.189-syzkaller-00079-ga71626bd56a5 #0
[ 2201.186523][T27058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2201.196585][T27058] Call Trace:
[ 2201.199864][T27058]  <TASK>
[ 2201.202795][T27058]  __dump_stack+0x21/0x30
[ 2201.207126][T27058]  dump_stack_lvl+0xee/0x150
[ 2201.211714][T27058]  ? show_regs_print_info+0x20/0x20
[ 2201.216906][T27058]  ? avc_denied+0x1b0/0x1b0
[ 2201.221400][T27058]  dump_stack+0x15/0x20
[ 2201.225551][T27058]  should_fail+0x3c1/0x510
[ 2201.229964][T27058]  should_fail_usercopy+0x1a/0x20
[ 2201.234983][T27058]  _copy_to_user+0x20/0x90
[ 2201.239400][T27058]  __cgroup_bpf_query+0x2f9/0x6d0
[ 2201.244421][T27058]  ? __cgroup_bpf_detach+0x860/0x860
[ 2201.249698][T27058]  ? mutex_lock+0x95/0x1a0
[ 2201.254114][T27058]  ? kernfs_node_from_dentry+0x8b/0xc0
[ 2201.259564][T27058]  ? __kasan_check_write+0x14/0x20
[ 2201.264668][T27058]  ? fput_many+0x15a/0x1a0
[ 2201.269081][T27058]  cgroup_bpf_query+0x31/0x50
[ 2201.273751][T27058]  cgroup_bpf_prog_query+0x65/0x1d0
[ 2201.278939][T27058]  ? bpf_prog_query+0x12e/0x230
[ 2201.283783][T27058]  bpf_prog_query+0x1e0/0x230
[ 2201.288453][T27058]  __sys_bpf+0x335/0x730
[ 2201.292689][T27058]  ? bpf_link_show_fdinfo+0x310/0x310
[ 2201.298060][T27058]  ? debug_smp_processor_id+0x17/0x20
[ 2201.303429][T27058]  __x64_sys_bpf+0x7c/0x90
[ 2201.307835][T27058]  x64_sys_call+0x4b9/0x9a0
[ 2201.312360][T27058]  do_syscall_64+0x4c/0xa0
[ 2201.316766][T27058]  ? clear_bhb_loop+0x50/0xa0
[ 2201.321438][T27058]  ? clear_bhb_loop+0x50/0xa0
[ 2201.326108][T27058]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 2201.331991][T27058] RIP: 0033:0x7f5e6ebad9a9
[ 2201.336405][T27058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2201.356002][T27058] RSP: 002b:00007f5e6d216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2201.364413][T27058] RAX: ffffffffffffffda RBX: 00007f5e6edd4fa0 RCX: 00007f5e6ebad9a9
[ 2201.372381][T27058] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000010
[ 2201.380349][T27058] RBP: 00007f5e6d216090 R08: 0000000000000000 R09: 0000000000000000
[ 2201.388324][T27058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2201.396288][T27058] R13: 0000000000000000 R14: 00007f5e6edd4fa0 R15: 00007ffd741d4c38
[ 2201.404265][T27058]  </TASK>
[ 2201.469173][T27061] loop2: detected capacity change from 0 to 1024
[ 2201.533066][T27065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7278'.
[ 2201.551958][T27065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7278'.
[ 2201.564362][T27061] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 2201.570266][   T30] audit: type=1400 audit(1753749973.460:10748): avc:  denied  { connect } for  pid=27064 comm="syz.3.7278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2201.596280][T27061] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[ 2201.637369][T27061] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.7280: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 2201.661794][T27061] EXT4-fs (loop2): no journal found
[ 2201.667036][T27061] EXT4-fs (loop2): can't get journal size
[ 2201.682959][T27070] overlayfs: missing 'lowerdir'
[ 2201.696335][T27061] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[ 2201.812082][T27073] loop3: detected capacity change from 0 to 256
[ 2201.826860][T27067] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2201.834093][T27067] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2201.841437][T27073] exfat: Unknown parameter '00000000000000000004�'
[ 2201.849071][T27067] device bridge_slave_0 entered promiscuous mode
[ 2201.855900][T27067] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2201.863098][T27067] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2201.870546][T27067] device bridge_slave_1 entered promiscuous mode
[ 2201.882008][T27073] netlink: 324 bytes leftover after parsing attributes in process `syz.3.7285'.
[ 2201.923018][T27073] loop3: detected capacity change from 0 to 8192
[ 2201.986708][T27067] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2201.993929][T27067] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2202.001238][T27067] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2202.008250][T27067] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2202.070934][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2202.078618][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2202.088641][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2203.251479][   T30] audit: type=1326 audit(1753749974.070:10749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27078 comm="syz.0.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5ab19a9 code=0x7ffc0000
[ 2203.304901][   T30] audit: type=1326 audit(1753749974.070:10750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27078 comm="syz.0.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5ab19a9 code=0x7ffc0000
[ 2203.361681][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2203.374430][   T30] audit: type=1326 audit(1753749974.230:10751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27078 comm="syz.0.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80b5ab19a9 code=0x7ffc0000
[ 2203.401464][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2203.425918][   T30] audit: type=1326 audit(1753749974.240:10752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27078 comm="syz.0.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5ab19a9 code=0x7ffc0000
[ 2203.449733][   T30] audit: type=1326 audit(1753749974.240:10753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27078 comm="syz.0.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5ab19a9 code=0x7ffc0000
[ 2203.475317][   T30] audit: type=1326 audit(1753749974.390:10754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27078 comm="syz.0.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f80b5ab19a9 code=0x7ffc0000
[ 2203.511611][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2203.520406][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2203.538796][T27067] device veth0_vlan entered promiscuous mode
[ 2203.546313][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2203.557306][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2203.585178][T27101] fuse: Bad value for 'group_id'
[ 2203.715035][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2203.823479][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2204.791327][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2204.830005][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2204.872735][T27067] device veth1_macvtap entered promiscuous mode
[ 2204.884147][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2205.005091][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2205.013630][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2205.025371][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2205.033851][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2205.176308][T15580] device bridge_slave_1 left promiscuous mode
[ 2205.192396][T27118] loop3: detected capacity change from 0 to 512
[ 2205.241103][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2205.264916][T15580] device bridge_slave_0 left promiscuous mode
[ 2205.273596][T27118] EXT4-fs (loop3): Ignoring removed oldalloc option
[ 2205.288271][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2205.296262][T27118] EXT4-fs (loop3): Ignoring removed bh option
[ 2205.303867][T15580] device veth1_macvtap left promiscuous mode
[ 2205.310345][T15580] device veth0_vlan left promiscuous mode
[ 2205.316535][T27118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002]
[ 2205.328036][T27118] System zones: 1-12
[ 2205.343206][T27118] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.7297: corrupted in-inode xattr
[ 2205.361739][T27118] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.7297: couldn't read orphan inode 15 (err -117)
[ 2205.389389][T27118] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,lazytime,oldalloc,lazytime,bh,,errors=continue. Quota mode: none.
[ 2205.515161][T27132] FAULT_INJECTION: forcing a failure.
[ 2205.515161][T27132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2205.534639][T27133] loop6: detected capacity change from 0 to 512
[ 2205.541698][T27132] CPU: 1 PID: 27132 Comm: syz.0.7298 Tainted: G        W         5.15.189-syzkaller-00079-ga71626bd56a5 #0
[ 2205.553100][T27132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2205.563172][T27132] Call Trace:
[ 2205.566462][T27132]  <TASK>
[ 2205.569397][T27132]  __dump_stack+0x21/0x30
[ 2205.573733][T27132]  dump_stack_lvl+0xee/0x150
[ 2205.578324][T27132]  ? show_regs_print_info+0x20/0x20
[ 2205.583521][T27132]  ? __kernel_text_address+0xa0/0x100
[ 2205.588902][T27132]  dump_stack+0x15/0x20
[ 2205.593063][T27132]  should_fail+0x3c1/0x510
[ 2205.597491][T27132]  should_fail_usercopy+0x1a/0x20
[ 2205.602517][T27132]  _copy_from_user+0x20/0xd0
[ 2205.607114][T27132]  __copy_msghdr_from_user+0xaf/0x5e0
[ 2205.612493][T27132]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[ 2205.617775][T27132]  ? kasan_set_track+0x5b/0x70
[ 2205.622536][T27132]  ? kasan_set_track+0x4a/0x70
[ 2205.627324][T27132]  ? kasan_set_free_info+0x23/0x40
[ 2205.632423][T27132]  ? ____kasan_slab_free+0x125/0x160
[ 2205.637696][T27132]  ? __kasan_slab_free+0x11/0x20
[ 2205.642628][T27132]  ? kmem_cache_free+0x100/0x320
[ 2205.647573][T27132]  ___sys_sendmsg+0x156/0x260
[ 2205.652358][T27132]  ? _kstrtoull+0x3c0/0x4d0
[ 2205.656863][T27132]  ? __sys_sendmsg+0x250/0x250
[ 2205.661644][T27132]  ? __fdget+0x1a1/0x230
[ 2205.665884][T27132]  __sys_sendmmsg+0x278/0x480
[ 2205.670560][T27132]  ? __ia32_sys_sendmsg+0x2a0/0x2a0
[ 2205.675758][T27132]  ? __ia32_sys_read+0x90/0x90
[ 2205.680515][T27132]  __x64_sys_sendmmsg+0xa0/0xb0
[ 2205.685360][T27132]  x64_sys_call+0x6c6/0x9a0
[ 2205.689854][T27132]  do_syscall_64+0x4c/0xa0
[ 2205.694259][T27132]  ? clear_bhb_loop+0x50/0xa0
[ 2205.698932][T27132]  ? clear_bhb_loop+0x50/0xa0
[ 2205.703604][T27132]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 2205.709489][T27132] RIP: 0033:0x7f80b5ab19a9
[ 2205.713897][T27132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2205.733755][T27132] RSP: 002b:00007f80b40f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2205.742165][T27132] RAX: ffffffffffffffda RBX: 00007f80b5cd9080 RCX: 00007f80b5ab19a9
[ 2205.750131][T27132] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000009
[ 2205.758095][T27132] RBP: 00007f80b40f9090 R08: 0000000000000000 R09: 0000000000000000
[ 2205.766058][T27132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2205.774029][T27132] R13: 0000000000000000 R14: 00007f80b5cd9080 R15: 00007ffef4b35ec8
[ 2205.781998][T27132]  </TASK>
[ 2205.787279][T27133] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[ 2205.811158][T27133] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal
[ 2205.836595][T27131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2205.843766][T27131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2205.851673][T27131] device bridge_slave_0 entered promiscuous mode
[ 2205.859466][T27131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2205.866939][T27131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2205.874669][T27131] device bridge_slave_1 entered promiscuous mode
[ 2205.974620][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2205.982890][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2205.995172][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2206.003633][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2206.030493][T17920] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2206.037604][T17920] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2206.047812][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2206.057162][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2206.066152][T17920] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2206.073251][T17920] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2206.089900][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2206.115484][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2206.123972][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2206.140404][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2206.155174][T27131] device veth0_vlan entered promiscuous mode
[ 2206.216929][T27151] fuse: Bad value for 'group_id'
[ 2206.541324][T27151] hub 6-0:1.0: USB hub found
[ 2206.781137][T27151] hub 6-0:1.0: 1 port detected
[ 2207.279420][T27153] fuse: Bad value for 'group_id'
[ 2207.285575][T27153] hub 6-0:1.0: USB hub found
[ 2207.290378][T27153] hub 6-0:1.0: 1 port detected
[ 2207.506721][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2207.516994][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2207.567136][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2207.641109][T27131] device veth1_macvtap entered promiscuous mode
[ 2207.680457][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2207.689269][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2207.770311][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 2207.770328][   T30] audit: type=1326 audit(1753749979.660:10757): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27156 comm="syz.3.7304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52809b19a9 code=0x0
[ 2207.801217][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2207.816763][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2208.052252][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2208.060706][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2208.069341][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2208.179174][T27168] loop2: detected capacity change from 0 to 512
[ 2208.212110][T27168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 2208.244740][T27168] EXT4-fs (loop2): 1 truncate cleaned up
[ 2208.250604][T27168] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback.
[ 2208.322558][T27176] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2208.329642][T27176] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2208.337883][T27176] device bridge_slave_0 entered promiscuous mode
[ 2208.348094][T27176] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2208.355572][T27176] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2208.366038][T27185] loop6: detected capacity change from 0 to 256
[ 2208.376177][T27176] device bridge_slave_1 entered promiscuous mode
[ 2208.475424][T27176] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2208.482512][T27176] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2208.489882][T27176] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2208.496899][T27176] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2208.548249][T27176] device veth0_vlan entered promiscuous mode
[ 2208.566075][T27176] device veth1_macvtap entered promiscuous mode
[ 2208.623749][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2208.637998][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2208.640445][T27198] loop3: detected capacity change from 0 to 512
[ 2208.646779][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2208.662246][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2208.670584][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2208.679234][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2208.687383][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2208.696227][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2208.705080][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2208.708058][T27198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2208.713433][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2208.724322][T27198] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2208.731739][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2208.749501][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2208.759173][T15580] device bridge_slave_1 left promiscuous mode
[ 2208.764706][T27198] overlayfs: failed to resolve './bus': -2
[ 2208.765664][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2208.778625][T15580] device bridge_slave_0 left promiscuous mode
[ 2208.788030][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2208.797147][T15580] device veth1_macvtap left promiscuous mode
[ 2208.803244][T15580] device veth0_vlan left promiscuous mode
[ 2209.539633][T27217] fuse: Bad value for 'group_id'
[ 2209.550185][T27217] hub 6-0:1.0: USB hub found
[ 2209.555237][T27217] hub 6-0:1.0: 1 port detected
[ 2209.740594][T27215] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2209.748075][T27215] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2209.758227][T27215] device bridge_slave_0 entered promiscuous mode
[ 2209.768824][T27215] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2209.776932][T27215] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2209.786749][T27215] device bridge_slave_1 entered promiscuous mode
[ 2210.069585][T27210] loop6: detected capacity change from 0 to 40427
[ 2210.295345][T27223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7320'.
[ 2210.315391][T27210] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 2210.363821][T27227] loop3: detected capacity change from 0 to 1024
[ 2210.426718][T27210] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[ 2210.441597][T27210] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 2210.471797][T27227] EXT4-fs (loop3): Ignoring removed nobh option
[ 2210.478093][T27227] EXT4-fs (loop3): Ignoring removed bh option
[ 2210.500953][T27227] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 2210.554474][T27227] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[ 2210.573782][T15580] device bridge_slave_1 left promiscuous mode
[ 2210.586898][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2210.595028][T23476] attempt to access beyond end of device
[ 2210.595028][T23476] loop6: rw=2049, want=45104, limit=40427
[ 2210.595294][T15580] device bridge_slave_0 left promiscuous mode
[ 2210.612692][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2210.621289][T15580] device bridge_slave_1 left promiscuous mode
[ 2210.627521][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2210.635391][T15580] device bridge_slave_0 left promiscuous mode
[ 2210.641802][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2210.649730][T15580] device veth1_macvtap left promiscuous mode
[ 2210.657268][T15580] device veth0_vlan left promiscuous mode
[ 2210.663273][T15580] device veth1_macvtap left promiscuous mode
[ 2210.669389][T15580] device veth0_vlan left promiscuous mode
[ 2210.700999][ T3899] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 2210.783819][T27243] loop6: detected capacity change from 0 to 512
[ 2210.833867][T27243] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2210.845047][T27243] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2210.927199][T27246] fuse: Bad value for 'group_id'
[ 2211.114664][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2211.122254][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2211.129815][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2211.138449][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2211.146859][T14958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2211.153913][T14958] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2211.163443][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2211.171929][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2211.180122][T14958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2211.187196][T14958] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2211.194963][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2211.348866][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2211.353144][T27249] loop3: detected capacity change from 0 to 1024
[ 2211.357112][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2211.373973][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2211.382053][ T3899] usb 1-1: Using ep0 maxpacket: 16
[ 2211.387577][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2211.400536][T27215] device veth0_vlan entered promiscuous mode
[ 2211.410716][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2211.419930][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2211.428498][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2211.437335][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2211.449337][T27215] device veth1_macvtap entered promiscuous mode
[ 2211.479481][T27249] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 2211.490940][T27249] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[ 2211.516514][T27249] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.7325: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 2211.528979][ T3899] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2211.545580][ T3899] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2211.545679][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2211.555485][ T3899] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2211.555528][ T3899] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 2211.555553][ T3899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2211.562150][ T3899] usb 1-1: config 0 descriptor??
[ 2211.591669][T27249] EXT4-fs (loop3): no journal found
[ 2211.615587][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2211.625450][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2211.635803][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2211.661720][T27257] loop6: detected capacity change from 0 to 512
[ 2211.680948][T27249] EXT4-fs (loop3): can't get journal size
[ 2211.729558][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2211.739786][T27257] EXT4-fs (loop6): Ignoring removed nobh option
[ 2211.812753][T27257] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[ 2211.822655][T27257] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.7324: attempt to clear invalid blocks 1 len 1
[ 2211.837031][T27257] EXT4-fs (loop6): Remounting filesystem read-only
[ 2211.843862][T27257] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2211.858904][T27257] EXT4-fs (loop6): Remounting filesystem read-only
[ 2211.865726][T27257] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.7324: invalid indirect mapped block 1819239214 (level 0)
[ 2211.880517][T27257] EXT4-fs (loop6): Remounting filesystem read-only
[ 2211.887172][T27257] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.7324: invalid indirect mapped block 1819239214 (level 1)
[ 2211.902112][T27257] EXT4-fs (loop6): Remounting filesystem read-only
[ 2211.909448][T27257] EXT4-fs (loop6): 1 truncate cleaned up
[ 2211.915169][T27257] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback.
[ 2212.007645][T27257] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.7324: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 2212.029100][T27257] EXT4-fs (loop6): Remounting filesystem read-only
[ 2212.056943][T27249] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[ 2212.213436][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2212.600931][ T3899] usb 1-1: can't set config #0, error -71
[ 2212.612646][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2212.620579][ T3899] usb 1-1: USB disconnect, device number 30
[ 2212.622250][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2212.655251][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2212.985910][T27272] loop6: detected capacity change from 0 to 512
[ 2213.033850][T27272] EXT4-fs (loop6): Ignoring removed nobh option
[ 2213.054610][T27272] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[ 2213.063191][T27272] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.7328: attempt to clear invalid blocks 1 len 1
[ 2213.076628][T27272] EXT4-fs (loop6): Remounting filesystem read-only
[ 2213.083262][T27272] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2213.098036][T27272] EXT4-fs (loop6): Remounting filesystem read-only
[ 2213.104824][T27272] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.7328: invalid indirect mapped block 1819239214 (level 0)
[ 2213.118945][T11971] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 2213.127256][T27272] EXT4-fs (loop6): Remounting filesystem read-only
[ 2213.133917][T27272] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.7328: invalid indirect mapped block 1819239214 (level 1)
[ 2213.148283][T27272] EXT4-fs (loop6): Remounting filesystem read-only
[ 2213.156220][T27272] EXT4-fs (loop6): 1 truncate cleaned up
[ 2213.161976][T27272] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback.
[ 2213.184594][T27272] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.7328: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 2213.206057][T27272] EXT4-fs (loop6): Remounting filesystem read-only
[ 2213.461330][T27277] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2213.468452][T27277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2213.475972][T11971] usb 3-1: Using ep0 maxpacket: 16
[ 2213.476434][T27277] device bridge_slave_0 entered promiscuous mode
[ 2213.488178][T27277] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2213.495263][T27277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2213.502851][T27277] device bridge_slave_1 entered promiscuous mode
[ 2213.545667][T27277] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2213.552763][T27277] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2213.560027][T27277] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2213.567069][T27277] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2213.587902][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2213.596143][T14958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2213.603747][T14958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2213.624740][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2213.632944][T14958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2213.639954][T14958] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2213.647448][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2213.655998][T14958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2213.663080][T14958] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2213.671131][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2213.679301][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2213.688237][T27290] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2213.696991][T11971] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2213.707268][T11971] usb 3-1: config 0 has no interface number 0
[ 2213.724625][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2213.735162][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2213.743263][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2213.750595][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2213.770114][   T30] audit: type=1326 audit(1753749985.660:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27291 comm="syz.6.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee57b389a9 code=0x7ffc0000
[ 2213.773082][T27292] loop6: detected capacity change from 0 to 512
[ 2213.794029][   T30] audit: type=1326 audit(1753749985.660:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27291 comm="syz.6.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fee57b389a9 code=0x7ffc0000
[ 2213.821398][T27292] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 2213.824136][   T30] audit: type=1326 audit(1753749985.660:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27291 comm="syz.6.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee57b389e3 code=0x7ffc0000
[ 2213.830937][T27292] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.7333: bg 0: block 248: padding at end of block bitmap is not set
[ 2213.854010][   T30] audit: type=1326 audit(1753749985.670:10761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27291 comm="syz.6.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee57b3745f code=0x7ffc0000
[ 2213.868716][T27292] Quota error (device loop6): write_blk: dquota write failed
[ 2213.893171][   T30] audit: type=1326 audit(1753749985.670:10762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27291 comm="syz.6.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fee57b38a37 code=0x7ffc0000
[ 2213.899338][T27292] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[ 2213.925867][   T30] audit: type=1326 audit(1753749985.670:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27291 comm="syz.6.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee57b37310 code=0x7ffc0000
[ 2213.933088][T27292] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.7333: Failed to acquire dquot type 1
[ 2213.967244][   T30] audit: type=1326 audit(1753749985.670:10764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27291 comm="syz.6.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee57b385ab code=0x7ffc0000
[ 2213.967274][   T30] audit: type=1326 audit(1753749985.700:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27291 comm="syz.6.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fee57b3760a code=0x7ffc0000
[ 2213.994202][T27277] device veth0_vlan entered promiscuous mode
[ 2214.020467][T11971] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[ 2214.029945][T11971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2214.034907][T27292] EXT4-fs (loop6): 1 truncate cleaned up
[ 2214.044514][T11971] usb 3-1: Product: syz
[ 2214.048726][T11971] usb 3-1: Manufacturer: syz
[ 2214.053937][T11971] usb 3-1: SerialNumber: syz
[ 2214.061967][T11971] usb 3-1: config 0 descriptor??
[ 2214.067594][T27292] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2214.088740][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2214.100119][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2214.117265][T27277] device veth1_macvtap entered promiscuous mode
[ 2214.124444][T11971] snd-usb-audio: probe of 3-1:0.1 failed with error -2
[ 2214.127547][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2214.139445][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2214.148212][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2214.157290][T15580] device bridge_slave_1 left promiscuous mode
[ 2214.163570][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2214.227101][T27301] fuse: Bad value for 'group_id'
[ 2214.236576][T27301] hub 6-0:1.0: USB hub found
[ 2214.242015][T27301] hub 6-0:1.0: 1 port detected
[ 2214.457182][T27269] UDC core: couldn't find an available UDC or it's busy: -16
[ 2214.501418][T27269] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2215.045185][T15580] device bridge_slave_0 left promiscuous mode
[ 2215.051801][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2215.060052][T15580] device veth1_macvtap left promiscuous mode
[ 2215.071625][   T60] usb 3-1: USB disconnect, device number 29
[ 2215.078924][T15580] device veth0_vlan left promiscuous mode
[ 2215.224478][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2215.233339][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2215.320425][T27314] FAULT_INJECTION: forcing a failure.
[ 2215.320425][T27314] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2215.343821][T27314] CPU: 0 PID: 27314 Comm: syz.6.7340 Tainted: G        W         5.15.189-syzkaller-00079-ga71626bd56a5 #0
[ 2215.355235][T27314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2215.365314][T27314] Call Trace:
[ 2215.368609][T27314]  <TASK>
[ 2215.371554][T27314]  __dump_stack+0x21/0x30
[ 2215.375920][T27314]  dump_stack_lvl+0xee/0x150
[ 2215.380524][T27314]  ? show_regs_print_info+0x20/0x20
[ 2215.385747][T27314]  ? __kernel_text_address+0xa0/0x100
[ 2215.391144][T27314]  dump_stack+0x15/0x20
[ 2215.395308][T27314]  should_fail+0x3c1/0x510
[ 2215.399704][T27314]  should_fail_usercopy+0x1a/0x20
[ 2215.404716][T27314]  _copy_from_user+0x20/0xd0
[ 2215.409287][T27314]  __copy_msghdr_from_user+0xaf/0x5e0
[ 2215.414645][T27314]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[ 2215.419932][T27314]  ? kasan_set_track+0x5b/0x70
[ 2215.424675][T27314]  ? kasan_set_track+0x4a/0x70
[ 2215.429420][T27314]  ? kasan_set_free_info+0x23/0x40
[ 2215.434615][T27314]  ? ____kasan_slab_free+0x125/0x160
[ 2215.439974][T27314]  ? __kasan_slab_free+0x11/0x20
[ 2215.444896][T27314]  ___sys_sendmsg+0x156/0x260
[ 2215.449556][T27314]  ? _kstrtoull+0x3c0/0x4d0
[ 2215.454046][T27314]  ? __sys_sendmsg+0x250/0x250
[ 2215.458822][T27314]  ? __fdget+0x1a1/0x230
[ 2215.463070][T27314]  __sys_sendmmsg+0x278/0x480
[ 2215.467750][T27314]  ? __ia32_sys_sendmsg+0x2a0/0x2a0
[ 2215.472947][T27314]  ? __ia32_sys_read+0x90/0x90
[ 2215.477724][T27314]  __x64_sys_sendmmsg+0xa0/0xb0
[ 2215.482569][T27314]  x64_sys_call+0x6c6/0x9a0
[ 2215.487062][T27314]  do_syscall_64+0x4c/0xa0
[ 2215.491474][T27314]  ? clear_bhb_loop+0x50/0xa0
[ 2215.496149][T27314]  ? clear_bhb_loop+0x50/0xa0
[ 2215.500938][T27314]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 2215.507006][T27314] RIP: 0033:0x7fee57b389a9
[ 2215.511432][T27314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2215.531033][T27314] RSP: 002b:00007fee561a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2215.539442][T27314] RAX: ffffffffffffffda RBX: 00007fee57d5ffa0 RCX: 00007fee57b389a9
[ 2215.547407][T27314] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000003
[ 2215.555374][T27314] RBP: 00007fee561a1090 R08: 0000000000000000 R09: 0000000000000000
[ 2215.563339][T27314] R10: 0000000004040004 R11: 0000000000000246 R12: 0000000000000001
[ 2215.571309][T27314] R13: 0000000000000000 R14: 00007fee57d5ffa0 R15: 00007ffe0981bbb8
[ 2215.579290][T27314]  </TASK>
[ 2215.582465][   T60] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 2215.740940][T11971] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 2215.820893][   T60] usb 3-1: Using ep0 maxpacket: 16
[ 2215.940925][   T60] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2215.956691][   T60] usb 3-1: config 0 has no interface number 0
[ 2215.981082][T11971] usb 4-1: Using ep0 maxpacket: 16
[ 2216.065094][T27321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2216.072504][T27321] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2216.080113][T27321] device bridge_slave_0 entered promiscuous mode
[ 2216.087655][T27321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2216.095112][T27321] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2216.102857][T27321] device bridge_slave_1 entered promiscuous mode
[ 2216.120973][T11971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2216.137756][T11971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2216.158959][T11971] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2216.175965][T11971] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 2216.194380][T11971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2216.215663][T11971] usb 4-1: config 0 descriptor??
[ 2216.238442][T27321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2216.245490][T27321] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2216.252759][T27321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2216.259769][T27321] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2216.278898][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2216.286264][   T60] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[ 2216.295439][T22138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2216.295770][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2216.310662][   T60] usb 3-1: Product: syz
[ 2216.314992][   T60] usb 3-1: Manufacturer: syz
[ 2216.315146][T22138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2216.320147][   T60] usb 3-1: SerialNumber: syz
[ 2216.336337][   T60] usb 3-1: config 0 descriptor??
[ 2216.342298][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2216.350722][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2216.358927][T22138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2216.365974][T22138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2216.375049][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2216.383463][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2216.391708][T22138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2216.392116][   T60] snd-usb-audio: probe of 3-1:0.1 failed with error -2
[ 2216.398757][T22138] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2216.418763][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2216.426875][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2216.435855][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2216.444054][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2216.456961][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2216.465529][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2216.475011][T15580] device bridge_slave_1 left promiscuous mode
[ 2216.481291][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2216.488631][T15580] device bridge_slave_0 left promiscuous mode
[ 2216.494938][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2216.502606][T15580] device veth1_macvtap left promiscuous mode
[ 2216.508735][T15580] device veth0_vlan left promiscuous mode
[ 2216.587551][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2216.595763][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2216.604216][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2216.611851][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2216.620279][T27321] device veth0_vlan entered promiscuous mode
[ 2216.630500][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2216.638700][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2216.642404][T27310] UDC core: couldn't find an available UDC or it's busy: -16
[ 2216.649260][T27321] device veth1_macvtap entered promiscuous mode
[ 2216.654599][T27310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2216.664797][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2216.675633][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2216.684137][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2216.695245][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2216.703555][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2216.780950][T11971] usbhid 4-1:0.0: can't add hid device: -71
[ 2216.786977][T11971] usbhid: probe of 4-1:0.0 failed with error -71
[ 2216.834512][T11971] usb 4-1: USB disconnect, device number 32
[ 2217.173713][T11971] usb 3-1: USB disconnect, device number 30
[ 2217.381471][T15580] device bridge_slave_1 left promiscuous mode
[ 2217.387591][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2217.395077][T15580] device bridge_slave_0 left promiscuous mode
[ 2217.401237][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2217.408887][T15580] device veth1_macvtap left promiscuous mode
[ 2217.415027][T15580] device veth0_vlan left promiscuous mode
[ 2217.509293][T27340] loop2: detected capacity change from 0 to 512
[ 2217.516073][T27337] loop3: detected capacity change from 0 to 1024
[ 2217.565928][T27337] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 2217.586556][T27337] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[ 2217.598535][T27337] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.7345: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 2217.619864][T27340] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2217.632972][T27340] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2217.649344][T27337] EXT4-fs (loop3): no journal found
[ 2217.655637][T27337] EXT4-fs (loop3): can't get journal size
[ 2217.668679][T27346] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2217.671588][T27337] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[ 2217.683679][T27346] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2217.731889][T27346] device bridge_slave_0 entered promiscuous mode
[ 2217.739780][T27346] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2217.747004][T27346] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2217.754682][T27346] device bridge_slave_1 entered promiscuous mode
[ 2217.988905][T27346] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2217.996043][T27346] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2218.003394][T27346] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2218.010446][T27346] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2218.061998][T27348] loop6: detected capacity change from 0 to 40427
[ 2218.103034][T27348] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 2218.177682][T27348] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 2218.301879][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2218.315108][T27348] F2FS-fs (loop6): invalid crc value
[ 2218.363389][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2218.442082][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2218.483855][T27348] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 2218.496739][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2218.589253][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2218.620212][T27348] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 2218.649489][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2218.658730][T27348] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 2218.821833][T15580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2218.828927][T15580] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2218.866809][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2218.890703][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2218.909496][T23476] attempt to access beyond end of device
[ 2218.909496][T23476] loop6: rw=2049, want=40968, limit=40427
[ 2218.921368][T15580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2218.928414][T15580] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2218.941137][T18322] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2218.961424][T18322] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2218.994316][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2219.007032][T27377] loop2: detected capacity change from 0 to 1024
[ 2219.023272][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2219.031713][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2219.041258][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2219.055581][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2219.065408][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2219.095267][T27377] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 2219.125713][T27377] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[ 2219.171186][T27377] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.7354: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 2219.177752][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2219.197504][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2219.207845][T27346] device veth0_vlan entered promiscuous mode
[ 2219.219099][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2219.227269][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2219.234843][T27377] EXT4-fs (loop2): no journal found
[ 2219.242150][T27346] device veth1_macvtap entered promiscuous mode
[ 2219.266685][T27377] EXT4-fs (loop2): can't get journal size
[ 2219.306760][T27382] fuse: Bad value for 'group_id'
[ 2219.330462][T27382] hub 6-0:1.0: USB hub found
[ 2219.335753][T27382] hub 6-0:1.0: 1 port detected
[ 2219.411556][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2219.470463][T27377] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[ 2219.505701][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2219.628174][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2219.669341][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2219.788438][T27388] block device autoloading is deprecated and will be removed.
[ 2219.798672][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2219.831170][   T26] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 2219.871701][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2220.336714][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2220.610898][   T26] usb 1-1: Using ep0 maxpacket: 16
[ 2220.710917][T21783] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 2220.730935][   T26] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2220.741861][   T26] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2220.751634][   T26] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2220.758336][   T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 2220.767451][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2220.775871][   T26] usb 1-1: config 0 descriptor??
[ 2221.090905][T21783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2221.100997][T21783] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2221.110037][T21783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2221.118982][T21783] usb 4-1: config 0 descriptor??
[ 2221.310951][   T26] usbhid 1-1:0.0: can't add hid device: -71
[ 2221.316919][   T26] usbhid: probe of 1-1:0.0 failed with error -71
[ 2221.325662][   T26] usb 1-1: USB disconnect, device number 31
[ 2221.380718][T27399] loop2: detected capacity change from 0 to 512
[ 2221.432525][T27399] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2221.450057][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 2221.450073][   T30] audit: type=1400 audit(1753749993.340:10783): avc:  denied  { create } for  pid=27406 comm="syz.6.7360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 2221.456527][T27399] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2221.504359][  T346] device bridge_slave_1 left promiscuous mode
[ 2221.510541][  T346] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2221.521054][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7361'.
[ 2221.530175][  T346] device bridge_slave_0 left promiscuous mode
[ 2221.540149][  T346] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2221.553931][  T346] device veth1_macvtap left promiscuous mode
[ 2221.560299][  T346] device veth0_vlan left promiscuous mode
[ 2221.632561][T21783] wacom 0003:056A:0331.000B: item fetching failed at offset 8/11
[ 2221.640624][T21783] wacom 0003:056A:0331.000B: parse failed
[ 2221.647175][T21783] wacom: probe of 0003:056A:0331.000B failed with error -22
[ 2221.666324][T27394] device veth1_macvtap left promiscuous mode
[ 2221.683967][T27404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2221.691224][T27404] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2221.698857][T27404] device bridge_slave_0 entered promiscuous mode
[ 2221.706347][T27404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2221.714011][T27404] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2221.721812][T27404] device bridge_slave_1 entered promiscuous mode
[ 2221.847780][T27429] loop2: detected capacity change from 0 to 512
[ 2221.865225][T27404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2221.872317][T27404] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2221.879623][T27404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2221.886665][T27404] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2221.912486][T27429] EXT4-fs (loop2): Ignoring removed nobh option
[ 2221.940522][T27429] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[ 2221.949126][T27429] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.7363: attempt to clear invalid blocks 1 len 1
[ 2221.962703][T27429] EXT4-fs (loop2): Remounting filesystem read-only
[ 2221.969302][T27429] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2221.986261][T27429] EXT4-fs (loop2): Remounting filesystem read-only
[ 2221.992845][T27429] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.7363: invalid indirect mapped block 1819239214 (level 0)
[ 2222.006971][T27429] EXT4-fs (loop2): Remounting filesystem read-only
[ 2222.013696][T27429] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.7363: invalid indirect mapped block 1819239214 (level 1)
[ 2222.028162][T27429] EXT4-fs (loop2): Remounting filesystem read-only
[ 2222.034941][T27429] EXT4-fs (loop2): 1 truncate cleaned up
[ 2222.040630][T27429] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback.
[ 2222.062935][T27429] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.7363: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 2222.082919][T27429] EXT4-fs (loop2): Remounting filesystem read-only
[ 2222.102900][  T801] usb 4-1: USB disconnect, device number 33
[ 2222.245177][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2222.258412][T14958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2222.289496][T14958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2222.337940][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2222.376166][T14958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2222.383333][T14958] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2222.411383][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2222.431272][T14958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2222.438363][T14958] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2222.487895][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2222.500539][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2222.528982][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2222.551933][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2222.560378][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2222.570442][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2222.579648][T27404] device veth0_vlan entered promiscuous mode
[ 2222.587318][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2222.594861][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2222.609858][T27404] device veth1_macvtap entered promiscuous mode
[ 2222.644090][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2222.645291][T27435] loop2: detected capacity change from 0 to 512
[ 2222.652632][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2222.667032][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2222.684364][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2222.796229][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2222.805813][T27435] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2222.818382][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2222.826815][T27435] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2222.837978][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2223.468816][T15580] device bridge_slave_1 left promiscuous mode
[ 2223.475040][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2223.483551][T15580] device bridge_slave_0 left promiscuous mode
[ 2223.489743][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2223.497479][T15580] device veth1_macvtap left promiscuous mode
[ 2223.503605][T15580] device veth0_vlan left promiscuous mode
[ 2223.962582][   T30] audit: type=1326 audit(1753749995.860:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.016086][   T30] audit: type=1326 audit(1753749995.880:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.068567][   T30] audit: type=1326 audit(1753749995.890:10786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.119981][   T30] audit: type=1326 audit(1753749995.890:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.151693][   T30] audit: type=1326 audit(1753749995.890:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.184991][   T30] audit: type=1326 audit(1753749995.890:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.230879][T27461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2224.242299][   T30] audit: type=1326 audit(1753749995.890:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.270038][T27461] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2224.285596][T27461] device bridge_slave_0 entered promiscuous mode
[ 2224.302364][T27461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2224.314612][   T30] audit: type=1326 audit(1753749995.890:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.338896][T27469] loop2: detected capacity change from 0 to 40427
[ 2224.340340][T27461] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2224.345545][   T30] audit: type=1326 audit(1753749995.890:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.3.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52809b19a9 code=0x7ffc0000
[ 2224.367103][T27461] device bridge_slave_1 entered promiscuous mode
[ 2224.403849][T27459] loop3: detected capacity change from 0 to 40427
[ 2224.432847][T27461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2224.439916][T27461] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2224.447186][T27461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2224.454217][T27461] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2224.463939][T27469] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 2224.473862][T27469] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 2224.497472][T27459] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2224.506656][T27469] F2FS-fs (loop2): invalid crc value
[ 2224.513239][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2224.523131][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2224.536346][T27459] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[ 2224.538430][T27469] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2224.549548][T14958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2224.550048][T27459] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2224.582020][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2224.590428][T14958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2224.597506][T14958] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2224.598307][T22919] attempt to access beyond end of device
[ 2224.598307][T22919] loop3: rw=2049, want=45104, limit=40427
[ 2224.613491][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2224.622286][T27469] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 2224.624479][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2224.631051][T27469] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2224.645096][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2224.664162][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2224.681898][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2224.692921][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2224.702332][  T346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2224.707188][T27461] device veth0_vlan entered promiscuous mode
[ 2224.717828][  T346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2224.717834][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2224.718102][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2224.743738][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2224.757023][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2224.772336][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2224.815232][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2224.832503][T27461] device veth1_macvtap entered promiscuous mode
[ 2224.861054][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2224.873752][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2224.891436][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2224.910124][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2224.930136][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2224.990292][T27492] netlink: 'syz.2.7378': attribute type 1 has an invalid length.
[ 2225.108030][T27494] loop3: detected capacity change from 0 to 512
[ 2225.223873][T27494] EXT4-fs (loop3): Ignoring removed nobh option
[ 2225.337470][T27494] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[ 2225.347548][T27494] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.7377: attempt to clear invalid blocks 1 len 1
[ 2225.361498][T27494] EXT4-fs (loop3): Remounting filesystem read-only
[ 2225.368323][T27494] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2225.383596][T27494] EXT4-fs (loop3): Remounting filesystem read-only
[ 2225.390354][T27494] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7377: invalid indirect mapped block 1819239214 (level 0)
[ 2225.405366][T27494] EXT4-fs (loop3): Remounting filesystem read-only
[ 2225.411971][T27494] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7377: invalid indirect mapped block 1819239214 (level 1)
[ 2225.427418][T27494] EXT4-fs (loop3): Remounting filesystem read-only
[ 2225.435148][T27494] EXT4-fs (loop3): 1 truncate cleaned up
[ 2225.440860][T27494] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback.
[ 2225.481425][T27494] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.7377: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 2225.502839][T27494] EXT4-fs (loop3): Remounting filesystem read-only
[ 2226.781674][T15580] device bridge_slave_1 left promiscuous mode
[ 2226.787792][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2226.795234][T15580] device bridge_slave_0 left promiscuous mode
[ 2226.801479][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2226.809076][T15580] device veth1_macvtap left promiscuous mode
[ 2226.815100][T15580] device veth0_vlan left promiscuous mode
[ 2226.998057][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 2226.998073][   T30] audit: type=1400 audit(1753749998.890:10804): avc:  denied  { sys_admin } for  pid=27511 comm="syz.3.7385" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 2227.027588][   T30] audit: type=1400 audit(1753749998.920:10805): avc:  denied  { checkpoint_restore } for  pid=27511 comm="syz.3.7385" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2227.412948][T27508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2227.422045][T27508] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2227.430585][T27508] device bridge_slave_0 entered promiscuous mode
[ 2227.453997][T27508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2227.468352][T27508] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2227.484498][T27508] device bridge_slave_1 entered promiscuous mode
[ 2228.372822][T27510] loop2: detected capacity change from 0 to 40427
[ 2230.166969][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2230.516006][T27544] fuse: Bad value for 'group_id'
[ 2230.639515][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2230.874534][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2231.425731][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2231.522297][T27556] loop3: detected capacity change from 0 to 512
[ 2232.153812][T27556] EXT4-fs (loop3): Ignoring removed nobh option
[ 2232.227125][T15580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2232.234249][T15580] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2232.296699][T27556] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[ 2232.306487][T27556] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.7394: attempt to clear invalid blocks 1 len 1
[ 2232.320088][T27556] EXT4-fs (loop3): Remounting filesystem read-only
[ 2232.326727][T27556] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2232.341655][T27556] EXT4-fs (loop3): Remounting filesystem read-only
[ 2232.342042][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2232.348221][T27556] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7394: invalid indirect mapped block 1819239214 (level 0)
[ 2232.370444][T27556] EXT4-fs (loop3): Remounting filesystem read-only
[ 2232.377092][T27556] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7394: invalid indirect mapped block 1819239214 (level 1)
[ 2232.391899][T27556] EXT4-fs (loop3): Remounting filesystem read-only
[ 2232.399119][T27556] EXT4-fs (loop3): 1 truncate cleaned up
[ 2232.404816][T27556] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback.
[ 2232.455385][T27556] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.7394: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 2232.476607][T27556] EXT4-fs (loop3): Remounting filesystem read-only
[ 2232.517754][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2232.681699][T15580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2232.688804][T15580] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2232.797977][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2232.806594][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2232.809616][T27564] loop6: detected capacity change from 0 to 1024
[ 2232.814940][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2232.836275][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2232.845927][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2232.855999][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2232.877604][T27508] device veth0_vlan entered promiscuous mode
[ 2232.913215][T27569] fuse: Bad value for 'group_id'
[ 2232.935668][T27569] hub 6-0:1.0: USB hub found
[ 2232.940786][T27569] hub 6-0:1.0: 1 port detected
[ 2233.133247][T27564] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 2234.051393][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2234.068814][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2234.079056][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2234.083420][T27579] loop3: detected capacity change from 0 to 1024
[ 2234.090373][T27508] device veth1_macvtap entered promiscuous mode
[ 2234.103545][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2234.113434][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2234.122801][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2234.133796][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2234.155148][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2234.242209][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2234.347781][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2234.356366][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2234.364736][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2234.412195][T27579] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 2234.430439][T27579] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[ 2234.449422][T27579] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.7402: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 2234.468013][T27579] EXT4-fs (loop3): no journal found
[ 2234.473858][T27583] netlink: 324 bytes leftover after parsing attributes in process `syz.0.7403'.
[ 2234.484736][T27579] EXT4-fs (loop3): can't get journal size
[ 2234.530295][T27579] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[ 2235.131398][T15580] device bridge_slave_1 left promiscuous mode
[ 2235.137496][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2235.145139][T15580] device bridge_slave_0 left promiscuous mode
[ 2235.151284][T15580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2235.158843][T15580] device veth1_macvtap left promiscuous mode
[ 2235.164878][T15580] device veth0_vlan left promiscuous mode
[ 2235.629603][T27594] loop2: detected capacity change from 0 to 512
[ 2235.838307][T27602] fuse: Bad value for 'group_id'
[ 2235.861227][T27602] hub 6-0:1.0: USB hub found
[ 2235.866233][T27602] hub 6-0:1.0: 1 port detected
[ 2235.977970][   T30] audit: type=1326 audit(1753750007.870:10806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2236.200960][  T801] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 2236.214497][   T30] audit: type=1326 audit(1753750007.930:10807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2236.301401][T27599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2236.384469][T27599] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2236.410930][T25161] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 2236.437683][T27599] device bridge_slave_0 entered promiscuous mode
[ 2236.796063][  T801] usb 4-1: Using ep0 maxpacket: 16
[ 2236.802265][   T30] audit: type=1326 audit(1753750007.980:10808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2236.827187][T27599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2236.834444][T27599] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2236.842332][T27599] device bridge_slave_1 entered promiscuous mode
[ 2236.862410][   T30] audit: type=1326 audit(1753750007.990:10809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2236.920917][  T801] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 2236.922487][   T30] audit: type=1326 audit(1753750008.000:10810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2236.949064][  T801] usb 4-1: config 0 has no interface number 0
[ 2236.952756][   T30] audit: type=1326 audit(1753750008.010:10811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2236.982534][   T30] audit: type=1326 audit(1753750008.020:10812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2237.006160][   T30] audit: type=1326 audit(1753750008.020:10813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2237.040153][   T30] audit: type=1326 audit(1753750008.020:10814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2237.078204][   T30] audit: type=1326 audit(1753750008.030:10815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27593 comm="syz.2.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98375269a9 code=0x7ffc0000
[ 2237.136251][T27599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2237.143363][T27599] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2237.150683][T27599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2237.157761][T27599] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2237.181351][T25161] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 2237.181396][  T801] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[ 2237.200135][  T801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2237.218218][  T801] usb 4-1: Product: syz
[ 2237.272845][T18322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2237.301117][T18322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2237.317798][  T801] usb 4-1: Manufacturer: syz
[ 2237.338731][  T801] usb 4-1: SerialNumber: syz
[ 2237.378553][T25161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2237.402095][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2237.409585][  T801] usb 4-1: config 0 descriptor??
[ 2237.415156][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2237.426341][T25161] usb 3-1: config 0 descriptor??
[ 2237.432356][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2237.442954][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2237.451931][T18322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2237.458996][T18322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2237.466976][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2237.476021][  T801] snd-usb-audio: probe of 4-1:0.1 failed with error -2
[ 2237.484995][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2237.496141][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2237.503218][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2237.531094][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2237.539969][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2237.548445][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2237.556695][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2237.567203][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2237.575695][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2237.587085][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2237.595225][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2237.603183][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2237.610640][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2237.619188][T27599] device veth0_vlan entered promiscuous mode
[ 2237.628658][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2237.636854][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2237.646121][T27599] device veth1_macvtap entered promiscuous mode
[ 2237.654826][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2237.662747][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2237.671238][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2237.689265][T27601] UDC core: couldn't find an available UDC or it's busy: -16
[ 2237.695805][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2237.697665][T27601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2237.705322][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2237.921177][T27594] UDC core: couldn't find an available UDC or it's busy: -16
[ 2237.928630][T27594] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2238.010942][T25161] usb 3-1: Cannot read MAC address
[ 2238.016119][T25161] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[ 2238.026691][T25161] usb 3-1: USB disconnect, device number 31
[ 2238.222819][  T801] usb 4-1: USB disconnect, device number 34
[ 2238.234609][T22138] device bridge_slave_1 left promiscuous mode
[ 2238.240794][T22138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2238.248409][T22138] device bridge_slave_0 left promiscuous mode
[ 2238.254700][T22138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2238.262828][T22138] device veth1_macvtap left promiscuous mode
[ 2238.268843][T22138] device veth0_vlan left promiscuous mode
[ 2239.017631][T27629] loop3: detected capacity change from 0 to 1024
[ 2239.020519][T27626] loop2: detected capacity change from 0 to 1024
[ 2239.138443][T27626] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.7413: Invalid block bitmap block 0 in block_group 0
[ 2239.152779][T27626] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.7413: Failed to acquire dquot type 0
[ 2239.164543][T27626] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.7413: Freeing blocks not in datazone - block = 0, count = 4096
[ 2239.178100][T27629] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 2239.188774][T27626] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.7413: Invalid inode bitmap blk 0 in block_group 0
[ 2239.202340][T18322] EXT4-fs error (device loop2): ext4_release_dquot:6234: comm kworker/u4:13: Failed to release dquot type 0
[ 2239.205314][T27626] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[ 2239.227470][T27629] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[ 2239.227731][T27626] EXT4-fs (loop2): 1 orphan inode deleted
[ 2239.237556][T27629] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.7414: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 2239.243217][T27626] EXT4-fs (loop2): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[ 2239.262110][T27629] EXT4-fs (loop3): no journal found
[ 2239.282199][T27633] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2239.288864][T27629] EXT4-fs (loop3): can't get journal size
[ 2239.296237][T27629] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[ 2239.324969][T27633] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2239.332791][T27633] device bridge_slave_0 entered promiscuous mode
[ 2239.339969][T27633] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2239.354915][T27633] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2239.356166][T27640] loop6: detected capacity change from 0 to 256
[ 2239.362916][T27633] device bridge_slave_1 entered promiscuous mode
[ 2239.381513][T27640] exfat: Unknown parameter '00000000000000000004�'
[ 2239.450011][T27640] netlink: 324 bytes leftover after parsing attributes in process `syz.6.7416'.
[ 2239.501637][T27640] loop6: detected capacity change from 0 to 8192
[ 2239.506993][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2239.544244][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2239.755026][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2239.821142][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2239.829430][T22138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2239.836513][T22138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2239.844283][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2239.855878][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2239.894890][T22138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2239.902021][T22138] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2239.936422][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2239.976640][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2239.985579][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2240.006948][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2240.015541][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2240.023706][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2240.032420][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2240.041776][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2240.049740][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2240.057751][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2240.065323][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2240.072906][T27633] device veth0_vlan entered promiscuous mode
[ 2240.086393][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2240.095066][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2240.104958][T27633] device veth1_macvtap entered promiscuous mode
[ 2240.115323][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2240.123682][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2240.132136][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2240.148452][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2240.156972][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2240.290899][T27664] loop6: detected capacity change from 0 to 40427
[ 2240.365920][T27664] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 2240.390104][T27664] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[ 2240.397054][T27664] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 2240.430472][T23476] attempt to access beyond end of device
[ 2240.430472][T23476] loop6: rw=2049, want=45104, limit=40427
[ 2240.721494][T22138] device bridge_slave_1 left promiscuous mode
[ 2240.727725][T22138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2240.735707][T22138] device bridge_slave_0 left promiscuous mode
[ 2240.741817][T22138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2240.749430][T22138] device veth1_macvtap left promiscuous mode
[ 2240.755437][T22138] device veth0_vlan left promiscuous mode
[ 2241.574280][   T30] kauditd_printk_skb: 26 callbacks suppressed
[ 2241.574297][   T30] audit: type=1400 audit(1753750013.470:10839): avc:  denied  { mounton } for  pid=27673 comm="syz.6.7427" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2241.604285][T27675] fuse: Invalid rootmode
[ 2241.629074][T27682] loop2: detected capacity change from 0 to 512
[ 2241.876983][T27682] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2241.899013][T27687] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2241.906500][T27682] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2241.917344][T27687] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2242.015875][T27699] fuse: Bad value for 'group_id'
[ 2242.040646][T27699] hub 6-0:1.0: USB hub found
[ 2242.045795][T27699] hub 6-0:1.0: 1 port detected
[ 2242.209743][T27687] device bridge_slave_0 entered promiscuous mode
[ 2242.307716][T27687] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2242.386844][T27689] loop6: detected capacity change from 0 to 40427
[ 2242.395358][T27687] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2242.873495][T27689] F2FS-fs (loop6): Unrecognized mount option "01777777777777777777777" or missing value
[ 2242.893995][T27687] device bridge_slave_1 entered promiscuous mode
[ 2243.070415][T27689] loop6: detected capacity change from 0 to 512
[ 2243.210392][T27689] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[ 2243.223885][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2243.231777][T27689] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2243.236451][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2243.254957][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2243.263860][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2243.271449][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2243.279843][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2243.288426][T22138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2243.295602][T22138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2243.304531][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2243.313313][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2243.321566][T22138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2243.328582][T22138] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2243.336002][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2243.346580][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2243.357494][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2243.366259][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2243.378135][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2243.385668][T11971] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[ 2243.396665][T27687] device veth0_vlan entered promiscuous mode
[ 2243.426211][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2243.460901][T27687] device veth1_macvtap entered promiscuous mode
[ 2243.485403][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2243.507008][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2245.189992][T11971] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2245.231412][T11971] usb 3-1: not running at top speed; connect to a high speed hub
[ 2245.305688][  T346] device bridge_slave_1 left promiscuous mode
[ 2245.311830][T11971] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[ 2245.311901][  T346] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2245.319892][T11971] usb 3-1: config 0 has no interface number 0
[ 2245.319920][T11971] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[ 2245.344045][T11971] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2245.344210][  T346] device bridge_slave_0 left promiscuous mode
[ 2245.353883][T11971] usb 3-1: config 0 interface 88 has no altsetting 0
[ 2245.360266][  T346] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2245.374372][  T346] device veth1_macvtap left promiscuous mode
[ 2245.380344][  T346] device veth0_vlan left promiscuous mode
[ 2245.610922][T11971] usb 3-1: string descriptor 0 read error: -22
[ 2245.617124][T11971] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 2245.626157][T11971] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[ 2245.634723][T11971] usb 3-1: config 0 descriptor??
[ 2245.671680][T11971] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input190
[ 2245.699983][T26223] udevd[26223]: Error opening device "/dev/input/event3": Input/output error
[ 2245.708902][T26223] udevd[26223]: Unable to EVIOCGABS device "/dev/input/event3"
[ 2245.716500][T26223] udevd[26223]: Unable to EVIOCGABS device "/dev/input/event3"
[ 2245.887940][T27714] serio: Serial port ptm0
[ 2245.945562][T27731] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2246.505235][T27740] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2246.512513][T27740] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2246.520327][T27740] device bridge_slave_0 entered promiscuous mode
[ 2246.527798][T27740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2246.914445][T27740] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2247.044371][T27740] device bridge_slave_1 entered promiscuous mode
[ 2247.752594][   T60] usb 3-1: USB disconnect, device number 32
[ 2247.804519][T27752] loop6: detected capacity change from 0 to 4096
[ 2247.863779][T27752] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2247.909848][T27766] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 2248.103039][T27780] loop6: detected capacity change from 0 to 512
[ 2248.111101][T11971] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 2248.342600][T27780] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2248.354029][T27780] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2248.701437][T11971] usb 4-1: Using ep0 maxpacket: 16
[ 2249.051695][T11971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 2249.059733][T11971] usb 4-1: config 0 has no interface number 0
[ 2249.101114][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2249.109009][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2249.139045][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2249.159228][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2249.187431][T15580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2249.194548][T15580] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2249.232344][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2249.281779][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2249.290043][T15580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2249.297211][T15580] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2249.305188][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2249.330946][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2249.339186][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2249.347455][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2249.356555][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2249.382296][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2249.432173][T27794] tipc: Failed to remove unknown binding: 66,1,1/0:3111455795/3111455797
[ 2249.441447][T11971] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[ 2249.450062][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2249.458825][T11971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2249.459166][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2249.467596][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2249.474908][T27794] tipc: Failed to remove unknown binding: 66,1,1/0:3111455795/3111455797
[ 2249.483972][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2249.498741][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2249.501753][T11971] usb 4-1: Product: syz
[ 2249.511142][T27740] device veth0_vlan entered promiscuous mode
[ 2249.521039][T11971] usb 4-1: Manufacturer: syz
[ 2249.595674][   T30] audit: type=1400 audit(1753750021.480:10840): avc:  denied  { ioctl } for  pid=27795 comm="syz.0.7455" path="socket:[106348]" dev="sockfs" ino=106348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2249.711840][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2249.808398][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2249.809618][T11971] usb 4-1: SerialNumber: syz
[ 2249.832465][T27740] device veth1_macvtap entered promiscuous mode
[ 2249.837791][T11971] usb 4-1: config 0 descriptor??
[ 2249.847034][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2249.855655][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2249.864895][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2249.881874][T11971] snd-usb-audio: probe of 4-1:0.1 failed with error -2
[ 2249.893136][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2249.925663][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2249.932121][T27807] loop2: detected capacity change from 0 to 512
[ 2250.016020][T27809] fuse: Bad value for 'group_id'
[ 2250.026794][T27809] hub 6-0:1.0: USB hub found
[ 2250.031798][T27809] hub 6-0:1.0: 1 port detected
[ 2250.488356][T27807] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2250.528314][T27807] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2251.458900][T25161] usb 4-1: USB disconnect, device number 35
[ 2251.541650][T18322] device bridge_slave_1 left promiscuous mode
[ 2251.547824][T18322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2251.556211][T18322] device bridge_slave_0 left promiscuous mode
[ 2251.562427][T18322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2251.570289][T18322] device veth1_macvtap left promiscuous mode
[ 2251.576313][T18322] device veth0_vlan left promiscuous mode
[ 2252.370650][T27834] loop2: detected capacity change from 0 to 512
[ 2252.418648][T27835] loop6: detected capacity change from 0 to 512
[ 2252.465239][T27835] EXT4-fs (loop6): Ignoring removed nobh option
[ 2252.581903][T27834] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2252.594341][T27832] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2252.604084][T27835] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[ 2252.612640][T27835] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.7465: attempt to clear invalid blocks 1 len 1
[ 2252.626085][T27835] EXT4-fs (loop6): Remounting filesystem read-only
[ 2252.632681][T27835] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2252.647304][T27835] EXT4-fs (loop6): Remounting filesystem read-only
[ 2252.654013][T27835] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.7465: invalid indirect mapped block 1819239214 (level 0)
[ 2252.668383][T27835] EXT4-fs (loop6): Remounting filesystem read-only
[ 2252.674989][T27835] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.7465: invalid indirect mapped block 1819239214 (level 1)
[ 2252.690921][T27835] EXT4-fs (loop6): Remounting filesystem read-only
[ 2252.697689][T27835] EXT4-fs (loop6): 1 truncate cleaned up
[ 2252.703388][T27835] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback.
[ 2252.725498][T27835] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.7465: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 2252.752377][T27835] EXT4-fs (loop6): Remounting filesystem read-only
[ 2252.761912][T27823] loop3: detected capacity change from 0 to 40427
[ 2252.776539][T27834] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2252.795118][T27823] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2252.804352][T27832] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2252.827392][T27832] device bridge_slave_0 entered promiscuous mode
[ 2252.834101][T27823] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2252.871740][T27832] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2252.886289][T27823] F2FS-fs (loop3): invalid crc value
[ 2252.902035][T27832] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2252.920362][T27832] device bridge_slave_1 entered promiscuous mode
[ 2252.928103][T27823] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2253.060666][T27823] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2253.083080][T27823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2253.154973][T27853] loop2: detected capacity change from 0 to 512
[ 2253.240244][T27853] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 2253.251755][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2253.259368][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2253.273142][T22138] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2253.277106][T27853] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2253.301248][T22138] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2253.311700][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2253.314425][T27865] FAULT_INJECTION: forcing a failure.
[ 2253.314425][T27865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2253.320057][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2253.345592][T15580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2253.352682][T15580] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2253.360757][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2253.369282][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2253.377845][T15580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2253.383200][T27865] CPU: 1 PID: 27865 Comm: syz.0.7473 Tainted: G        W         5.15.189-syzkaller-00079-ga71626bd56a5 #0
[ 2253.384911][T15580] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2253.396236][T27865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2253.396248][T27865] Call Trace:
[ 2253.396254][T27865]  <TASK>
[ 2253.396261][T27865]  __dump_stack+0x21/0x30
[ 2253.403726][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2253.413475][T27865]  dump_stack_lvl+0xee/0x150
[ 2253.413497][T27865]  ? show_regs_print_info+0x20/0x20
[ 2253.417039][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2253.419689][T27865]  ? __kernel_text_address+0xa0/0x100
[ 2253.424659][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2253.431710][T27865]  dump_stack+0x15/0x20
[ 2253.431731][T27865]  should_fail+0x3c1/0x510
[ 2253.431749][T27865]  should_fail_usercopy+0x1a/0x20
[ 2253.431766][T27865]  _copy_from_user+0x20/0xd0
[ 2253.431787][T27865]  __copy_msghdr_from_user+0xaf/0x5e0
[ 2253.431808][T27865]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[ 2253.431827][T27865]  ? kasan_set_track+0x5b/0x70
[ 2253.431843][T27865]  ? kasan_set_track+0x4a/0x70
[ 2253.431858][T27865]  ? kasan_set_free_info+0x23/0x40
[ 2253.471060][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2253.475615][T27865]  ? ____kasan_slab_free+0x125/0x160
[ 2253.501083][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2253.505450][T27865]  ? __kasan_slab_free+0x11/0x20
[ 2253.531290][T27865]  ? kmem_cache_free+0x100/0x320
[ 2253.536242][T27865]  ___sys_sendmsg+0x156/0x260
[ 2253.540932][T27865]  ? _kstrtoull+0x3c0/0x4d0
[ 2253.545437][T27865]  ? __sys_sendmsg+0x250/0x250
[ 2253.550208][T27865]  ? __fdget+0x1a1/0x230
[ 2253.554466][T27865]  __sys_sendmmsg+0x278/0x480
[ 2253.559145][T27865]  ? __ia32_sys_sendmsg+0x2a0/0x2a0
[ 2253.564352][T27865]  ? __ia32_sys_read+0x90/0x90
[ 2253.569114][T27865]  __x64_sys_sendmmsg+0xa0/0xb0
[ 2253.573963][T27865]  x64_sys_call+0x6c6/0x9a0
[ 2253.578459][T27865]  do_syscall_64+0x4c/0xa0
[ 2253.582872][T27865]  ? clear_bhb_loop+0x50/0xa0
[ 2253.587546][T27865]  ? clear_bhb_loop+0x50/0xa0
[ 2253.592227][T27865]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 2253.598128][T27865] RIP: 0033:0x7f80b5ab19a9
[ 2253.602542][T27865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2253.622239][T27865] RSP: 002b:00007f80b411a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2253.630661][T27865] RAX: ffffffffffffffda RBX: 00007f80b5cd8fa0 RCX: 00007f80b5ab19a9
[ 2253.638627][T27865] RDX: 0000000000000001 RSI: 0000200000002d40 RDI: 0000000000000003
[ 2253.646590][T27865] RBP: 00007f80b411a090 R08: 0000000000000000 R09: 0000000000000000
[ 2253.654551][T27865] R10: 0000000004040004 R11: 0000000000000246 R12: 0000000000000001
[ 2253.662517][T27865] R13: 0000000000000000 R14: 00007f80b5cd8fa0 R15: 00007ffef4b35ec8
[ 2253.670595][T27865]  </TASK>
[ 2253.674915][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2253.683546][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2253.692365][T27832] device veth0_vlan entered promiscuous mode
[ 2253.708056][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2253.718042][T27832] device veth1_macvtap entered promiscuous mode
[ 2253.734938][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2253.747801][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2253.874166][T27871] fuse: Bad value for 'group_id'
[ 2253.885959][T27871] hub 6-0:1.0: USB hub found
[ 2253.891058][T27871] hub 6-0:1.0: 1 port detected
[ 2254.193734][T27863] loop6: detected capacity change from 0 to 40427
[ 2254.324330][T27863] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 2254.447633][T27863] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 2254.663197][T18322] device bridge_slave_1 left promiscuous mode
[ 2254.669645][T18322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2254.677571][T18322] device bridge_slave_0 left promiscuous mode
[ 2254.683898][T18322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2254.696331][T18322] device veth1_macvtap left promiscuous mode
[ 2254.702409][T18322] device veth0_vlan left promiscuous mode
[ 2254.796205][T27863] F2FS-fs (loop6): invalid crc value
[ 2254.802974][T27863] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 2254.846858][T27863] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 2254.856779][T27863] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 2254.872652][T27877] loop3: detected capacity change from 0 to 1024
[ 2254.897885][T15580] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2254.907097][T15580] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2254.921992][T27877] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.7472: Invalid block bitmap block 0 in block_group 0
[ 2254.940740][T27877] Quota error (device loop3): write_blk: dquota write failed
[ 2254.953036][T27877] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 2254.969458][T27877] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.7472: Failed to acquire dquot type 0
[ 2254.980945][T27877] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.7472: Freeing blocks not in datazone - block = 0, count = 4096
[ 2254.994703][T27877] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.7472: Invalid inode bitmap blk 0 in block_group 0
[ 2255.001309][  T346] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9)
[ 2255.018374][T27877] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[ 2255.027319][T27877] EXT4-fs (loop3): 1 orphan inode deleted
[ 2255.030954][  T346] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:4: Failed to release dquot type 0
[ 2255.033261][T27877] EXT4-fs (loop3): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[ 2256.353774][T27895] loop6: detected capacity change from 0 to 512
[ 2256.377574][T27888] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2256.384936][T27888] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2256.393200][T27888] device bridge_slave_0 entered promiscuous mode
[ 2256.400443][T27888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2256.409461][T27895] EXT4-fs (loop6): Ignoring removed oldalloc option
[ 2256.416019][T27888] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2256.421319][T27895] EXT4-fs (loop6): Ignoring removed bh option
[ 2256.434468][T27888] device bridge_slave_1 entered promiscuous mode
[ 2256.441348][T27895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002]
[ 2256.449425][T27895] System zones: 1-12
[ 2256.461912][T27901] loop3: detected capacity change from 0 to 512
[ 2256.469199][T27895] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2228: inode #15: comm syz.6.7480: corrupted in-inode xattr
[ 2256.482372][T27895] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.7480: couldn't read orphan inode 15 (err -117)
[ 2256.495075][T27895] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,lazytime,oldalloc,lazytime,bh,,errors=continue. Quota mode: none.
[ 2256.596736][T27901] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 2256.622619][T27888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2256.629682][T27888] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2256.637111][T27888] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2256.644153][T27888] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2256.662478][T27901] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.7478: inode #0: comm syz.3.7478: iget: illegal inode #
[ 2256.706040][T27901] EXT4-fs (loop3): Remounting filesystem read-only
[ 2256.727627][T27901] EXT4-fs (loop3): get orphan inode failed
[ 2256.747920][T27901] EXT4-fs (loop3): mount failed
[ 2256.767472][T18322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2256.775889][T18322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2256.788716][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2256.802578][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2256.819695][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2256.835123][T18322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2256.842218][T18322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2256.880564][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2256.896220][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2256.903337][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2256.944250][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2256.961765][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2257.072633][T27888] device veth0_vlan entered promiscuous mode
[ 2257.090202][T27888] device veth1_macvtap entered promiscuous mode
[ 2257.105844][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2257.127934][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2257.137202][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2257.145296][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2257.153388][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2257.174449][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2257.209668][T27923] loop6: detected capacity change from 0 to 256
[ 2257.223363][T22138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2257.268733][T27923] FAT-fs (loop6): Directory bread(block 64) failed
[ 2257.278967][T27923] FAT-fs (loop6): Directory bread(block 65) failed
[ 2257.290934][T26076] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 2257.296988][T27923] FAT-fs (loop6): Directory bread(block 66) failed
[ 2257.309888][T27923] FAT-fs (loop6): Directory bread(block 67) failed
[ 2257.337471][T27923] FAT-fs (loop6): Directory bread(block 68) failed
[ 2257.360774][T27923] FAT-fs (loop6): Directory bread(block 69) failed
[ 2257.376431][T27923] FAT-fs (loop6): Directory bread(block 70) failed
[ 2257.383473][T27923] FAT-fs (loop6): Directory bread(block 71) failed
[ 2257.390152][T27923] FAT-fs (loop6): Directory bread(block 72) failed
[ 2257.396950][T27923] FAT-fs (loop6): Directory bread(block 73) failed
[ 2257.503549][   T30] audit: type=1400 audit(1753750029.400:10841): avc:  denied  { write } for  pid=27921 comm="syz.6.7486" path="socket:[107475]" dev="sockfs" ino=107475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2257.550872][T26076] usb 1-1: Using ep0 maxpacket: 16
[ 2257.670948][T26076] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2257.687342][T26076] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2257.707470][T26076] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2257.721813][T26076] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 2257.741046][T26076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2257.762391][T26076] usb 1-1: config 0 descriptor??
[ 2258.251556][T18322] device bridge_slave_1 left promiscuous mode
[ 2258.257656][T18322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2258.265213][T18322] device bridge_slave_0 left promiscuous mode
[ 2258.271450][T18322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2258.279082][T18322] device veth1_macvtap left promiscuous mode
[ 2258.285124][T18322] device veth0_vlan left promiscuous mode
[ 2258.320904][T26076] usbhid 1-1:0.0: can't add hid device: -71
[ 2258.326861][T26076] usbhid: probe of 1-1:0.0 failed with error -71
[ 2258.335568][T26076] usb 1-1: USB disconnect, device number 32
[ 2259.245614][T27935] loop3: detected capacity change from 0 to 1024
[ 2259.423876][T27948] fuse: Bad value for 'group_id'
[ 2259.431590][T27948] hub 6-0:1.0: USB hub found
[ 2259.436385][T27948] hub 6-0:1.0: 1 port detected
[ 2259.469209][T27940] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2259.894684][T27940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2259.952538][T27935] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.7489: Invalid block bitmap block 0 in block_group 0
[ 2259.957080][T27940] device bridge_slave_0 entered promiscuous mode
[ 2260.001422][T27940] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2260.077828][T27940] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2260.085544][T27940] device bridge_slave_1 entered promiscuous mode
[ 2260.101100][T27935] Quota error (device loop3): write_blk: dquota write failed
[ 2260.110655][T27935] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 2260.201172][T27935] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.7489: Failed to acquire dquot type 0
[ 2260.239474][T27935] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.7489: Freeing blocks not in datazone - block = 0, count = 4096
[ 2260.265715][T27935] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.7489: Invalid inode bitmap blk 0 in block_group 0
[ 2260.284718][T15580] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9)
[ 2260.316255][T27935] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[ 2260.337852][T15580] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:10: Failed to release dquot type 0
[ 2260.373250][T27935] EXT4-fs (loop3): 1 orphan inode deleted
[ 2260.400239][T27935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[ 2260.483351][T27956] netlink: 'syz.2.7493': attribute type 15 has an invalid length.
[ 2260.572592][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2260.580468][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2260.611258][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2260.648962][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2260.659426][T18322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2260.666513][T18322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2260.775419][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2260.792160][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2260.810718][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2260.817823][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2260.878870][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2260.887409][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2260.896300][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2260.904587][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2261.438992][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2261.453741][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2261.462249][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2261.527008][T11971] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 2261.537726][T27940] device veth0_vlan entered promiscuous mode
[ 2261.545323][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2261.553728][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2261.562225][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2261.569788][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2261.585980][T17544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2261.595354][T17544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2261.650380][T27940] device veth1_macvtap entered promiscuous mode
[ 2261.662348][T17544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2261.670078][T17544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2261.678650][T17544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2261.689227][T17544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2261.697695][T17544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2262.090958][T11971] usb 3-1: Using ep0 maxpacket: 16
[ 2262.211285][T11971] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2262.233691][T11971] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2262.254887][T11971] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2262.265141][T11971] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 2262.275752][T11971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2262.294579][T11971] usb 3-1: config 0 descriptor??
[ 2262.830902][T11971] usbhid 3-1:0.0: can't add hid device: -71
[ 2262.836964][T11971] usbhid: probe of 3-1:0.0 failed with error -71
[ 2262.855012][T11971] usb 3-1: USB disconnect, device number 33
[ 2262.951494][T22138] device bridge_slave_1 left promiscuous mode
[ 2262.967834][T22138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2262.975825][T22138] device bridge_slave_0 left promiscuous mode
[ 2262.990992][T22138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2262.999287][T22138] device veth1_macvtap left promiscuous mode
[ 2263.018488][T22138] device veth0_vlan left promiscuous mode
[ 2264.097508][T28006] loop6: detected capacity change from 0 to 1024
[ 2264.211125][T28014] loop2: detected capacity change from 0 to 512
[ 2264.362337][T28006] ==================================================================
[ 2264.370453][T28006] BUG: KASAN: use-after-free in __ext4_iget+0x2b8/0x3d80
[ 2264.377502][T28006] Read of size 8 at addr ffff8881098d6608 by task syz.6.7507/28006
[ 2264.385401][T28006] 
[ 2264.387733][T28006] CPU: 0 PID: 28006 Comm: syz.6.7507 Tainted: G        W         5.15.189-syzkaller-00079-ga71626bd56a5 #0
[ 2264.399112][T28006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2264.409179][T28006] Call Trace:
[ 2264.412563][T28006]  <TASK>
[ 2264.415506][T28006]  __dump_stack+0x21/0x30
[ 2264.419949][T28006]  dump_stack_lvl+0xee/0x150
[ 2264.424559][T28006]  ? show_regs_print_info+0x20/0x20
[ 2264.429872][T28006]  ? load_image+0x3a0/0x3a0
[ 2264.434396][T28006]  ? _raw_spin_lock+0x8e/0xe0
[ 2264.439084][T28006]  print_address_description+0x7f/0x2c0
[ 2264.444638][T28006]  ? __ext4_iget+0x2b8/0x3d80
[ 2264.449330][T28006]  kasan_report+0xf1/0x140
[ 2264.453765][T28006]  ? __ext4_iget+0x2b8/0x3d80
[ 2264.458451][T28006]  __asan_report_load8_noabort+0x14/0x20
[ 2264.464101][T28006]  __ext4_iget+0x2b8/0x3d80
[ 2264.468620][T28006]  ? ext4_init_orphan_info+0x155/0xf00
[ 2264.474086][T28006]  ? __kasan_check_write+0x14/0x20
[ 2264.479206][T28006]  ? _raw_write_lock+0x8e/0xe0
[ 2264.483978][T28006]  ? _raw_write_trylock+0x140/0x140
[ 2264.489185][T28006]  ? ext4_get_projid+0x140/0x140
[ 2264.494135][T28006]  ? _raw_write_unlock+0x2b/0x60
[ 2264.499082][T28006]  ? ext4_orphan_file_block_trigger+0x400/0x400
[ 2264.505331][T28006]  ext4_enable_quotas+0x33b/0x6d0
[ 2264.510369][T28006]  ext4_fill_super+0x8761/0x9030
[ 2264.515331][T28006]  ? ext4_mount+0x40/0x40
[ 2264.519675][T28006]  ? set_blocksize+0x1fc/0x380
[ 2264.524454][T28006]  ? sb_set_blocksize+0xaa/0xf0
[ 2264.529315][T28006]  ? ext4_mount+0x40/0x40
[ 2264.533654][T28006]  mount_bdev+0x2ae/0x3e0
[ 2264.537995][T28006]  ? ext4_mount+0x40/0x40
[ 2264.542340][T28006]  ext4_mount+0x34/0x40
[ 2264.546506][T28006]  legacy_get_tree+0xed/0x190
[ 2264.551196][T28006]  ? ext4_errno_to_code+0x160/0x160
[ 2264.556412][T28006]  vfs_get_tree+0x89/0x260
[ 2264.560838][T28006]  do_new_mount+0x25a/0xa20
[ 2264.565360][T28006]  path_mount+0x675/0x1020
[ 2264.569789][T28006]  ? user_path_at_empty+0x161/0x1c0
[ 2264.575004][T28006]  __se_sys_mount+0x318/0x380
[ 2264.579694][T28006]  ? __x64_sys_mount+0xd0/0xd0
[ 2264.584473][T28006]  __x64_sys_mount+0xbf/0xd0
[ 2264.589073][T28006]  x64_sys_call+0x6bf/0x9a0
[ 2264.593583][T28006]  do_syscall_64+0x4c/0xa0
[ 2264.598012][T28006]  ? clear_bhb_loop+0x50/0xa0
[ 2264.602828][T28006]  ? clear_bhb_loop+0x50/0xa0
[ 2264.607538][T28006]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 2264.613452][T28006] RIP: 0033:0x7fee57b3a14a
[ 2264.617939][T28006] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2264.637561][T28006] RSP: 002b:00007fee561a0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2264.645996][T28006] RAX: ffffffffffffffda RBX: 00007fee561a0ef0 RCX: 00007fee57b3a14a
[ 2264.653980][T28006] RDX: 0000200000000140 RSI: 0000200000000480 RDI: 00007fee561a0eb0
[ 2264.662094][T28006] RBP: 0000200000000140 R08: 00007fee561a0ef0 R09: 0000000000000004
[ 2264.670132][T28006] R10: 0000000000000004 R11: 0000000000000246 R12: 0000200000000480
[ 2264.678118][T28006] R13: 00007fee561a0eb0 R14: 00000000000005fd R15: 00002000000002c0
[ 2264.686109][T28006]  </TASK>
[ 2264.689132][T28006] 
[ 2264.691465][T28006] Allocated by task 26768:
[ 2264.695882][T28006]  __kasan_slab_alloc+0xbd/0xf0
[ 2264.700741][T28006]  slab_post_alloc_hook+0x4f/0x2b0
[ 2264.705862][T28006]  kmem_cache_alloc+0xf7/0x260
[ 2264.710635][T28006]  f2fs_alloc_inode+0x26/0x330
[ 2264.715411][T28006]  iget_locked+0x16c/0x7e0
[ 2264.719839][T28006]  f2fs_iget+0x55/0x5130
[ 2264.724085][T28006]  f2fs_fill_super+0x46a7/0x6d10
[ 2264.729035][T28006]  mount_bdev+0x2ae/0x3e0
[ 2264.733398][T28006]  f2fs_mount+0x34/0x40
[ 2264.737578][T28006]  legacy_get_tree+0xed/0x190
[ 2264.742267][T28006]  vfs_get_tree+0x89/0x260
[ 2264.746697][T28006]  do_new_mount+0x25a/0xa20
[ 2264.751206][T28006]  path_mount+0x675/0x1020
[ 2264.755629][T28006]  __se_sys_mount+0x318/0x380
[ 2264.760309][T28006]  __x64_sys_mount+0xbf/0xd0
[ 2264.764914][T28006]  x64_sys_call+0x6bf/0x9a0
[ 2264.769426][T28006]  do_syscall_64+0x4c/0xa0
[ 2264.773852][T28006]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 2264.779752][T28006] 
[ 2264.782078][T28006] Last potentially related work creation:
[ 2264.787801][T28006]  kasan_save_stack+0x3a/0x60
[ 2264.792488][T28006]  __kasan_record_aux_stack+0xd2/0x100
[ 2264.797969][T28006]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 2264.803788][T28006]  call_rcu+0x105/0xfe0
[ 2264.807960][T28006]  evict+0x7da/0x870
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2264.811881][T28006]  evict_inodes+0x5de/0x650
[ 2264.816397][T28006]  generic_shutdown_super+0x96/0x330
[ 2264.819337][   T30] audit: type=1400 audit(1753750036.710:10842): avc:  denied  { write } for  pid=273 comm="syz-executor" path="pipe:[1394]" dev="pipefs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 2264.821688][T28006]  kill_block_super+0x7f/0xf0
[ 2264.821714][T28006]  kill_f2fs_super+0x2e7/0x390
[ 2264.821731][T28006]  deactivate_locked_super+0xa0/0x100
[ 2264.821750][T28006]  deactivate_super+0xaf/0xe0
[ 2264.864296][T28006]  cleanup_mnt+0x446/0x500
[ 2264.868733][T28006]  __cleanup_mnt+0x19/0x20
[ 2264.873164][T28006]  task_work_run+0x127/0x190
[ 2264.877772][T28006]  exit_to_user_mode_loop+0xd0/0xe0
[ 2264.882987][T28006]  exit_to_user_mode_prepare+0x5a/0xa0
[ 2264.888464][T28006]  syscall_exit_to_user_mode+0x1a/0x30
[ 2264.893945][T28006]  do_syscall_64+0x58/0xa0
[ 2264.898376][T28006]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 2264.904283][T28006] 
[ 2264.906619][T28006] Second to last potentially related work creation:
[ 2264.913211][T28006]  kasan_save_stack+0x3a/0x60
[ 2264.917908][T28006]  __kasan_record_aux_stack+0xd2/0x100
[ 2264.923384][T28006]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 2264.929209][T28006]  call_rcu+0x105/0xfe0
[ 2264.933380][T28006]  evict+0x7da/0x870
[ 2264.937439][T28006]  evict_inodes+0x5de/0x650
[ 2264.941954][T28006]  generic_shutdown_super+0x96/0x330
[ 2264.947255][T28006]  kill_block_super+0x7f/0xf0
[ 2264.951959][T28006]  kill_f2fs_super+0x2e7/0x390
[ 2264.956740][T28006]  deactivate_locked_super+0xa0/0x100
[ 2264.962127][T28006]  deactivate_super+0xaf/0xe0
[ 2264.966812][T28006]  cleanup_mnt+0x446/0x500
[ 2264.971226][T28006]  __cleanup_mnt+0x19/0x20
[ 2264.975638][T28006]  task_work_run+0x127/0x190
[ 2264.980224][T28006]  exit_to_user_mode_loop+0xd0/0xe0
[ 2264.985417][T28006]  exit_to_user_mode_prepare+0x5a/0xa0
[ 2264.990868][T28006]  syscall_exit_to_user_mode+0x1a/0x30
[ 2264.996323][T28006]  do_syscall_64+0x58/0xa0
[ 2265.000730][T28006]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 2265.006614][T28006] 
[ 2265.008928][T28006] The buggy address belongs to the object at ffff8881098d6100
[ 2265.008928][T28006]  which belongs to the cache f2fs_inode_cache of size 1424
[ 2265.023491][T28006] The buggy address is located 1288 bytes inside of
[ 2265.023491][T28006]  1424-byte region [ffff8881098d6100, ffff8881098d6690)
[ 2265.036932][T28006] The buggy address belongs to the page:
[ 2265.042564][T28006] page:ffffea0004263400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881098d0000 pfn:0x1098d0
[ 2265.054112][T28006] head:ffffea0004263400 order:3 compound_mapcount:0 compound_pincount:0
[ 2265.062448][T28006] flags: 0x4000000000010200(slab|head|zone=1)
[ 2265.068522][T28006] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881003e9980
[ 2265.077103][T28006] raw: ffff8881098d0000 0000000080150006 00000001ffffffff 0000000000000000
[ 2265.085678][T28006] page dumped because: kasan: bad access detected
[ 2265.092081][T28006] page_owner tracks the page as allocated
[ 2265.097782][T28006] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 344, ts 31166992286, free_ts 0
[ 2265.118262][T28006]  post_alloc_hook+0x192/0x1b0
[ 2265.123031][T28006]  prep_new_page+0x1c/0x110
[ 2265.127523][T28006]  get_page_from_freelist+0x2cc5/0x2d50
[ 2265.133062][T28006]  __alloc_pages+0x18f/0x440
[ 2265.137646][T28006]  new_slab+0xa1/0x4d0
[ 2265.141708][T28006]  ___slab_alloc+0x381/0x810
[ 2265.146291][T28006]  __slab_alloc+0x49/0x90
[ 2265.150614][T28006]  kmem_cache_alloc+0x138/0x260
[ 2265.155459][T28006]  f2fs_alloc_inode+0x26/0x330
[ 2265.160223][T28006]  iget_locked+0x16c/0x7e0
[ 2265.164694][T28006]  f2fs_iget+0x55/0x5130
[ 2265.168926][T28006]  f2fs_fill_super+0x3a20/0x6d10
[ 2265.173853][T28006]  mount_bdev+0x2ae/0x3e0
[ 2265.178182][T28006]  f2fs_mount+0x34/0x40
[ 2265.182337][T28006]  legacy_get_tree+0xed/0x190
[ 2265.187010][T28006]  vfs_get_tree+0x89/0x260
[ 2265.191419][T28006] page_owner free stack trace missing
[ 2265.196775][T28006] 
[ 2265.199087][T28006] Memory state around the buggy address:
[ 2265.204702][T28006]  ffff8881098d6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2265.212758][T28006]  ffff8881098d6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2265.220811][T28006] >ffff8881098d6600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2265.228882][T28006]                       ^
[ 2265.233200][T28006]  ffff8881098d6680: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2265.241338][T28006]  ffff8881098d6700: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2265.249392][T28006] ==================================================================
[ 2265.257438][T28006] Disabling lock debugging due to kernel taint
[ 2265.268466][T28014] EXT4-fs: failed to create workqueue
[ 2265.273920][T28014] EXT4-fs (loop2): mount failed
[ 2265.281944][   T30] audit: type=1400 audit(1753750037.180:10843): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 2265.314592][   T30] audit: type=1400 audit(1753750037.210:10844): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2265.337005][T28006] EXT4-fs warning (device loop6): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[ 2265.369180][   T30] audit: type=1400 audit(1753750037.210:10845): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2265.391529][   T30] audit: type=1400 audit(1753750037.210:10846): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2265.412898][   T30] audit: type=1400 audit(1753750037.210:10847): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2265.434322][   T30] audit: type=1400 audit(1753750037.210:10848): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2265.457584][   T30] audit: type=1400 audit(1753750037.210:10849): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2265.481187][T28006] EXT4-fs (loop6): mount failed
[ 2268.021424][T22138] device bridge_slave_1 left promiscuous mode
[ 2268.027520][T22138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2268.034916][T22138] device bridge_slave_0 left promiscuous mode
[ 2268.041089][T22138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2268.048739][T22138] device bridge_slave_1 left promiscuous mode
[ 2268.054908][T22138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2268.062239][T22138] device bridge_slave_0 left promiscuous mode
[ 2268.068323][T22138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2268.076263][T22138] device veth1_macvtap left promiscuous mode
[ 2268.082254][T22138] device veth0_vlan left promiscuous mode
[ 2268.088219][T22138] device veth1_macvtap left promiscuous mode
[ 2268.094254][T22138] device veth0_vlan left promiscuous mode