last executing test programs:

33.398812363s ago: executing program 4 (id=4618):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_btf_id_by_name$bpf_lsm(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xc, "9f"}, @global=@item_012={0x2, 0x1, 0x0, "16c2"}]}}, 0x0}, 0x0)

30.210794997s ago: executing program 4 (id=4623):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8041, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") (fail_nth: 2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x200000)
syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '(#\a', 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @generic={0x2, 0x4, "67ca"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000880)={0x3, {{0x2, 0x4e22, @local}}}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

29.088040421s ago: executing program 2 (id=4625):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000037a1edda985723e000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
gettid()
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000740)="7bd6911424de28ee347a76024707154e9e2dcfdf29ac9564349d856bc9234917211eb0d757c0ae2a4b9538880189383fdaae0bdc88dcb8dab4fab15eecb611b5c6997c17627a5ab3821f314d9c1c392dbca94a1cf0e0dbf9a01f9fb3a58b717c4191a90564585a64bd8ee7c8ddf745f6748a244ee58c35d59b63357b05b2e6251fcb89c260bc4519298ab70f2331735a30c0cd56975739"}, 0x20)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x809, &(0x7f0000003980)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYBLOB="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", @ANYRES8], 0xff, 0x20f, &(0x7f0000000440)="$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")
openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xb}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000002180), 0x4)
sendto$inet(r3, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
recvmsg(r3, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120)
lstat(&(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80))
getpid()
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa}, [@lifetime_val={0x24}, @replay_val={0x10}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x16c}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

28.001525891s ago: executing program 4 (id=4626):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@acl}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
pipe(0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x8402, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3814744, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@acl}, {@test_dummy_encryption}, {@resgid}, {@jqfmt_vfsv0}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x46f, &(0x7f0000000b00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000060000000000000000604"], &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x1, 0x0, 0x0, @void, @value}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000d976843b9700"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x37, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000440)="8efc97fd1668f325618c6b04d410bbb30678e39c8154fcb8f999fc5910e7108bc223fd416a6811646e9c5d8d31baedca395f74c95fba48a99feef5eda2891593df466393491055a18e083152e7a2d642d6b8283da6319ac94625bbb4a16b6cea7fe4006674abcf03e0886ae68fa4cdc41068065a20a6218c46", 0x79, 0x7b9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001c33b00496a578df3b51f800002f2c7cc4149c33f0e752f8b45ca87e000ce0c290", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

27.90226759s ago: executing program 2 (id=4627):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
fcntl$dupfd(r4, 0x0, r4)

26.672386163s ago: executing program 2 (id=4628):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000000014000e"], 0x104}}, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x100, 0x4)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000001040)=0x8000, 0x4)
getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x30)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$netlink(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x6, &(0x7f00000000c0)=[{0x9, 0x4, 0x4, 0x3}, {0x0, 0x3, 0x80, 0xe}, {0x0, 0x1, 0x10, 0xac}, {0x9a, 0x4, 0x6, 0x7}, {0x8, 0x7, 0x5, 0x8}, {0x2, 0x7, 0x0, 0x9}]})

25.50397147s ago: executing program 4 (id=4630):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f7, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[], 0x48)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@private=0xa010100, @rand_addr=0x64010100}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x4000, 0x0, 0x2ffffffff}, 0xc)

25.463039724s ago: executing program 2 (id=4631):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b2b3cd71954933ac174ed761fb83cab66e41aed61f1db59281428aec786ee17fc17ea65ed107d9bc76bbadbfd0b156fe10d59671c3ebc056f3cc5c524faa4b46338e6c82c915d176790524beee56080a89048be84d6c4071a5b1fcecb495fad165051b883837e4251e77a6572a296dc6ae2cab2b7c385c40dce6f2231c9926daf28caed2a4c5697eaf2a9ad14350c98f246c15294110aed0455775b0c631ccb1ad"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x242, 0x2e0)
sendfile(r4, r4, 0x0, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1f00000001010a0000000000000000000d400000ae638aec3d011ad30695453f784baff8436aa74ac9d75f7fe6fac6d332ffac1c74d94c0900c862d08190c979da5d5f3c7e52bdcdb4e10433367b3a34ce7aeb38672a2d", @ANYRES32, @ANYBLOB="0400001000000000000000000000150000000000", @ANYRESHEX=r1, @ANYRES32=r3], 0x50)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r8, r7, 0x0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013700000000009500000200000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet_udplite(0x2, 0x2, 0x88)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001000000d75f0f8f801b94cd1b866db41edcd7fd34383fbb1f8e33c73e74cb058ebd971385572c297cfeb0680934990b850995d643b523cc95662f89853e1d11375b0c5ddc94c78dc428c09087e66da67d4848e9afa56f06a7"], 0x24}}, 0x0)
r11 = syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x1e400, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000130000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030342c64656661756c745f7065726d697373696f6e732c64656661756c745f7065f7ff697373696f6e732c626c6b73697a653d3078303030303030303030303030313830302c666f776e65723c2ef5b0ce770ea491e844a1bf7ca98ea00b74776127905f04ff110df14e50b21ceb0d2ce745b0850747246d011ffb4ce28ce5b96d6d9e8aea23a207c4928ca60bb62192ab0c4bce08c7c1ced449699634b737893d21640d8b2856834b551e2a2168f4390ec8945f", @ANYRES16=r9, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f0000000600)="2e84911e3f3be45a4a200b49757786b68c0463528596b31f6eea2ced0d86ea21ccf582ece10bbd14c416eab54c5ddf970749973469078b4052be27259fa162234a43e0f6d4420637eaf5de6d3a741098e7bcf98c7f1d566db3f604d9685c4f8bc9134bfc36a6d471e06c1152ca9a")
move_mount(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r11, &(0x7f0000000400)='./file0\x00', 0x107)

24.554333168s ago: executing program 2 (id=4632):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b2b3cd71954933ac174ed761fb83cab66e41aed61f1db59281428aec786ee17fc17ea65ed107d9bc76bbadbfd0b156fe10d59671c3ebc056f3cc5c524faa4b46338e6c82c915d176790524beee56080a89048be84d6c4071a5b1fcecb495fad165051b883837e4251e77a6572a296dc6ae2cab2b7c385c40dce6f2231c9926daf28caed2a4c5697eaf2a9ad14350c98f246c15294110aed0455775b0c631ccb1ad"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x242, 0x2e0)
sendfile(r4, r4, 0x0, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1f00000001010a0000000000000000000d400000ae638aec3d011ad30695453f784baff8436aa74ac9d75f7fe6fac6d332ffac1c74d94c0900c862d08190c979da5d5f3c7e52bdcdb4e10433367b3a34ce7aeb38672a2d", @ANYRES32, @ANYBLOB="0400001000000000000000000000150000000000", @ANYRESHEX=r1, @ANYRES32=r3], 0x50)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r8, r7, 0x0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013700000000009500000200000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet_udplite(0x2, 0x2, 0x88)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001000000d75f0f8f801b94cd1b866db41edcd7fd34383fbb1f8e33c73e74cb058ebd971385572c297cfeb0680934990b850995d643b523cc95662f89853e1d11375b0c5ddc94c78dc428c09087e66da67d4848e9afa56f06a7"], 0x24}}, 0x0)
r11 = syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x1e400, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000130000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030342c64656661756c745f7065726d697373696f6e732c64656661756c745f7065f7ff697373696f6e732c626c6b73697a653d3078303030303030303030303030313830302c666f776e65723c2ef5b0ce770ea491e844a1bf7ca98ea00b74776127905f04ff110df14e50b21ceb0d2ce745b0850747246d011ffb4ce28ce5b96d6d9e8aea23a207c4928ca60bb62192ab0c4bce08c7c1ced449699634b737893d21640d8b2856834b551e2a2168f4390ec8945f", @ANYRES16=r9, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f0000000600)="2e84911e3f3be45a4a200b49757786b68c0463528596b31f6eea2ced0d86ea21ccf582ece10bbd14c416eab54c5ddf970749973469078b4052be27259fa162234a43e0f6d4420637eaf5de6d3a741098e7bcf98c7f1d566db3f604d9685c4f8bc9134bfc36a6d471e06c1152ca9a")
move_mount(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r11, &(0x7f0000000400)='./file0\x00', 0x107)

22.004355123s ago: executing program 2 (id=4635):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
gettid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x10)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r5, 0x8943, 0x0)
preadv(r4, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1, 0x0, 0xc)

22.002723013s ago: executing program 4 (id=4637):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
gettid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x10)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
preadv(r4, 0x0, 0x0, 0x0, 0xc)

20.386244042s ago: executing program 3 (id=4638):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
fcntl$dupfd(r4, 0x0, r4)

15.961559329s ago: executing program 3 (id=4639):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
r2 = syz_open_procfs(r1, &(0x7f0000000880)='net/wireless\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x40086610, &(0x7f0000000180)={@id={0x2, 0x0, @b}})
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096070c0000000a90010bcc55727383000000000b09007a150b5d8c3dda0000000000"], 0x0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[])
r8 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x90, 0xa5, [{{0x9, 0x4, 0x0, 0x8, 0x5, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x77, 0x4, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x6, 0x6, 0x9f}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x111, 0x2, 0x4, 0x6, 0x10, 0x9}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41c}}]})
syz_usb_control_io$printer(r8, &(0x7f0000000580)={0x14, &(0x7f00000003c0)={0x0, 0x5, 0xf5, {0xf5, 0x10, "c11dac4404ae86faaebec4b37caec1b1af13bd8d08145fc63b3f0c43899f28641657cfc3d8e42a5db26b70a7aa4f473b5b9d04f3eef2185aa765ebfdeef129aed0957427b557581e1d23df8a82907fa6bc5ec489affc6ef6d3a4cd4bffce9d41835ab81036aadfcb1c0bad3be088872bc020cdb2caa3cb035d1e73bbb888c8515ae7430e1339b9ba31dc0763bc6adb4d1518467d6eacf869045d9be77bff807a4e1b3fa0a064bbe802eaa8b0d051444b534f418e1c79784119640670d79be3fd04aad0a994bc4d17ad9c95eb6d71e2065b5ef1d6b243d08fe2e7978387e891b9cd31432ee5e2c183de22e00ca2895e2f69bf8c"}}, &(0x7f00000004c0)={0x0, 0x3, 0x94, @string={0x94, 0x3, "16696c91d113edd8883bee1e0c75615e374ea7e87e444c4a9236a1449c104c1ef1ab30b6d6476f7e315a0fa12d44394874194bc538ff9e93e38642dc9a1571050a97353ab3fa8668d9258e9596b3580d523fde8297bac16868f5e51320d7620fad7d00d14cb39cab1f0a8de2e099e3b5478dd1abe3e818ee9d34a36a380cacb8d6c1c2338be4163e65725b99022f2fa8f51f"}}}, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x20, 0x3, 0x91, "c091624e9fc70c5a6c167162ce5d8e73f592d0a1145739a5be763f7892e92ecb2d9e1fada4746cb7c4078b4b12a792a35dfaa15673dc3a189470c6708b434c2052da83399d548859474513124d95bcde70f3d7a27149981ddeb3f4bfb2eee2f67a4becb3a22dba26debc307878e4e68188364f9cdf63e568f444a9f292a258b570fd831b297145aff37eb3cd8faad48d86"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0xac, {0xaa, "e2f5328a066561df816b0029215e0d1eb44c7554b8510a109246188b55c42268cc43afb240898385153ae9c2a6d211cd71317d800e654bbedc9896f6405f1ef553d15b4b0b4c2e456df77b4f63695f2447686d83d32071dc6a65498b1b8ad60de11d3f475e3fa5c23441d392c28b158ee84b14f3ce46846a1ff5c56dd1c530334040929f3f56db945eceacea575d063a78697fa834d0348c8576d22f171504b11718b2291fc537225ba3"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0xbf}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x5}})
connect$unix(r7, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

14.417065282s ago: executing program 1 (id=4642):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$netlink(0x10, 0x3, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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")
capset(&(0x7f0000000000)={0x19980330}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r4, &(0x7f0000002cc0), 0x1a3, 0xf00)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10)

9.66854024s ago: executing program 0 (id=4647):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x1, 0xd037, 0x5, 0x81, 0xfffffd4a]}, @timestamp_prespec={0x44, 0x34, 0x63, 0x3, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x657}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3d}}, {@dev={0xac, 0x14, 0x14, 0x42}}, {@multicast2, 0xa}, {@rand_addr, 0x2}]}, @timestamp={0x44, 0x1c, 0x76, 0x0, 0x5, [0x0, 0x81, 0x8, 0x4, 0x80, 0x6]}, @noop, @lsrr={0x83, 0xb, 0xa7, [@private, @empty]}]}}}}}) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 32)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
vmsplice(r4, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) (async, rerun: 32)
eventfd(0x0) (async, rerun: 32)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) (async, rerun: 64)
r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x3)
r8 = dup(r7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r10 = dup(r9)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r11, 0x4188aea7, 0x0) (async)
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000000c0)="9a88c82900660f3a0ace003e0f1174190f07b816008ec02e660f78c21400baf80c66b8e5b22b8266efbafc0cecf20f1acd360f08660f3880b00c00", 0x3b}], 0x1, 0x8, 0x0, 0x0)
getdents64(r8, &(0x7f0000000180)=""/21, 0x15) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000100)={0x1, 0xd000})

9.613021205s ago: executing program 0 (id=4648):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="150000"], 0x15)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9ab}, {0x2, 0x6, 0x0, 0x8}, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0xa, @in=@multicast1, 0x0, 0x1}}, 0xe8)

8.941464047s ago: executing program 1 (id=4649):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="6e6f61636c2c6e6f757365725f78617474722c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d272c616c6c6f635f6d6f64653d64656661756c742c6e6f696e6c696e655f78617474722c00e04cbd9a4f63af8c98e7f638dba07a40d32059fb6ddd2f4cc595bf28c283364e3ebb4d506eb7ea924d3bc4a944eb7ff5cd986dd3b7cb533e7d1a244d820bfa6d3ed0080f7bc8bfba8ae0b56c48ad64dcbcc449e149ea6d309082c9759d87451a2e1bbb8b7b013e3d5fad19da476837e286c64e240600000000000000b00d3188d38d15f988d55c7cdd5f4d76947e0e70ad90dac3ac2df4a232ccd9aed86b51c33c98784699aa72bbef855492eb3cd24b7fe8f2f215c60c01a07e4918a0"], 0x1, 0x550f, &(0x7f00000001c0)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8400ae8e, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)

7.951031028s ago: executing program 3 (id=4650):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b2b3cd71954933ac174ed761fb83cab66e41aed61f1db59281428aec786ee17fc17ea65ed107d9bc76bbadbfd0b156fe10d59671c3ebc056f3cc5c524faa4b46338e6c82c915d176790524beee56080a89048be84d6c4071a5b1fcecb495fad165051b883837e4251e77a6572a296dc6ae2cab2b7c385c40dce6f2231c9926daf28caed2a4c5697eaf2a9ad14350c98f246c15294110aed0455775b0c631ccb1ad"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x242, 0x2e0)
sendfile(r4, r4, 0x0, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1f00000001010a0000000000000000000d400000ae638aec3d011ad30695453f784baff8436aa74ac9d75f7fe6fac6d332ffac1c74d94c0900c862d08190c979da5d5f3c7e52bdcdb4e10433367b3a34ce7aeb38672a2d", @ANYRES32, @ANYBLOB="0400001000000000000000000000150000000000", @ANYRESHEX=r1, @ANYRES32=r3], 0x50)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r8, r7, 0x0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013700000000009500000200000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet_udplite(0x2, 0x2, 0x88)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001000000d75f0f8f801b94cd1b866db41edcd7fd34383fbb1f8e33c73e74cb058ebd971385572c297cfeb0680934990b850995d643b523cc95662f89853e1d11375b0c5ddc94c78dc428c09087e66da67d4848e9afa56f06a7"], 0x24}}, 0x0)
r11 = syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x1e400, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000130000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030342c64656661756c745f7065726d697373696f6e732c64656661756c745f7065f7ff697373696f6e732c626c6b73697a653d3078303030303030303030303030313830302c666f776e65723c2ef5b0ce770ea491e844a1bf7ca98ea00b74776127905f04ff110df14e50b21ceb0d2ce745b0850747246d011ffb4ce28ce5b96d6d9e8aea23a207c4928ca60bb62192ab0c4bce08c7c1ced449699634b737893d21640d8b2856834b551e2a2168f4390ec8945f", @ANYRES16=r9, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f0000000600)="2e84911e3f3be45a4a200b49757786b68c0463528596b31f6eea2ced0d86ea21ccf582ece10bbd14c416eab54c5ddf970749973469078b4052be27259fa162234a43e0f6d4420637eaf5de6d3a741098e7bcf98c7f1d566db3f604d9685c4f8bc9134bfc36a6d471e06c1152ca9a")
move_mount(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r11, &(0x7f0000000400)='./file0\x00', 0x107)

7.767670865s ago: executing program 1 (id=4651):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000000014000e"], 0x104}}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000001040)=0x8000, 0x4)

6.248666035s ago: executing program 3 (id=4652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
wait4(0x0, &(0x7f0000000500), 0x8, &(0x7f0000000580))

6.240153146s ago: executing program 1 (id=4653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$netlink(0x10, 0x3, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_control_io$hid(r3, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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")
capset(&(0x7f0000000000)={0x19980330}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002502000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe5d6405000000000075040000000d00000701000000000000b70400001000e5206a0700fe00000000850000007d000000b70000000a00000095000000000000006458c2c62fc206000000f909a63796c113a80c19aab9d60700ffffffff483be3f0d3253730e78000000062c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766aeb39439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c013700e69274f8e9c31975e551558055dc2dc29edc33b375fa325dcf3e91e20f63d7030dbe7ff7f51fe89c3d17cf45a1616ad237682057034dfdc81f5a53cd640212c88e8b687a2446049577c75b76b775c1e301caf2465ed4b2ad56b848d046c52bfc3737127120ab17d82a294d174f240a3cdc725cfe6e839a1f80f59486578e45b008d39ab618f660e3c53ed4409aa92ae4fecd913060ca74ed8a303e22de12087a217d8d7be0ae1117cc791313b1318497dd5ebeef0d7e1795a6ff20f699870ebb137cffa79465da52ab2b3430ba0ba59152496a1ea5dd1e4dee46f6d3688603b5f25a588a31da4e481884074e211dd09a8b8039d0834507656ed7d55"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r5, &(0x7f0000002cc0), 0x1a3, 0xf00)
pselect6(0x44, 0x0, 0x0, &(0x7f0000002840)={0xff, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x989680}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10)

6.220049847s ago: executing program 0 (id=4654):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000004f8f600040000000000000200004000000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c4000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xf9a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r2, 0x0, r6, 0x0, 0x8000f28, 0x0)
splice(r5, 0x0, r0, 0x0, 0x7f, 0xe)
write$binfmt_misc(r6, 0x0, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r1, 0x0, 0x0)
syz_emit_ethernet(0x63, &(0x7f0000000580)={@local, @remote, @val, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x100, 0x0, 0x1}], @generic="8a10a99fb267301d8428dfad83d9fd722571f1d35c0280c899561a35330ec9cdc841aaa2e7eca6c5277b759b375602fc04262a5364708c06c13d27686fb5ebbc3db399832c"}}}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r9}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

6.161736323s ago: executing program 3 (id=4655):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xa, 0xfffffff7, 0x7, 0x384, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x4, @void, @value, @void, @value}, 0x48)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
syz_open_procfs(r0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x101800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
unshare(0x42000000)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @remote}})

3.998698392s ago: executing program 0 (id=4656):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7)

3.213712224s ago: executing program 0 (id=4657):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)={0x14, 0x1a, 0x229, 0x70bd2d, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_misc(r6, &(0x7f0000001b40), 0x3a7)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3, &(0x7f0000007c80), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2030, &(0x7f0000000240)=[{0xac, 0x3}, {0x6f64, 0x0, 0x52, 0x401}]})

2.834148139s ago: executing program 1 (id=4658):
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000500000005"], 0x104}}, 0x0)

1.867029278s ago: executing program 1 (id=4659):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x8004, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'bridge_slave_0\x00', @random="c61f10929cd8"})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000002000000018018c00786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000850000002d00000095000000000000008e4d5a7e6f2c1cd8148132eab166a53e8f4a3a8474a19a3d890de4efa050cea2553990ff4eca0e507b3cf6b359b33995175d3208dcddd5319ecbc6f1001353522f77cbc414d71cca3d2479e475afc803a17084a2762c6e42c051529bc978a080ec528d0fa33b461f9200"/193], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket$tipc(0x1e, 0x1, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
sched_setscheduler(r0, 0x5, &(0x7f0000000400)=0x8001)
r7 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="e8efe8ddbcef9dbece21e35795f5"}, {&(0x7f00000005c0)="b36e9ae97e9b441b841a82222722cc51f3c0e0b9ee58efbf7e6cfbfde722c8df4eff3803407b006541949a7a44eea628da1a91aedcd134b64f506eb3fc9f022a9f484f4355f6a632c87fecd681656fc1ac5b42f37059f9f46da96827eb473961fa88fc5adafbe8583ec7e476c7b276ce9484dcabe42fa593c1a2a7bb1680f682fb4328980e09db8c91164467a2792530b9a0bc58926b36"}], 0x0, 0x0, 0x38}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000000000000900"/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0xfffffffffffffcaa, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$eJzsmb9rFEEUx78zu7d7BhEstLA5i4ARzN7unkoai9iKICSilodZQ3STk8sWSUAw2Nj4B/iPKFxlYWcjFlYWKggWXmmj4Mj82Lu5W2917zgs8j7F8J03M2/evNm8gRwIgjiyfP70/eOzqyvrFwAcxyJ8Y//qDOdwa/6H507NyNc7Jx71xv0xAEIM++5f9vcAvFp1gMfarRA/hD2+aHyugystuQmO80bfAkOQxyokWiZguGPM9y3dOWZEmrC7nXTj3laahLKJZBPLpgWIkfj7hwwbAOpmC2bFt7t/8KCdAl0t0iQXNZHvUxiqKsryp+Jb5bhipUDe1+2nTw5lPzD20MpfBI7I6BYY1oxegY8gCBqmm0TW+c+4Q/+Ovjbr/P96kvpsiagqTi6XzskPMe8wfom5ePamuoL5CBlH9VW8UVzlVfPjTREzG7fIP+iB5XS/96a46st/Te9sQhUuAIWhdwtpet22vL1mxKkRP2ft/Fgi/wInfhK6fjAXOGfVJ9d6FZrZ9sPm7v7B8tZ2ezPZTHbiuHU5vBiGl+Kmqs26Lal/dVWfFiz/tQlzPeZhr51l3WgPyLrRoB/r1qq4ay8639Qaruofx9JPIfLnRR3b//Me6v3z9TqmekvOxOAJgiAIgiAIgiAIgiAIgiBKaLwvWPAS5n+VLP9NrIgb31CzfwcAAP//+HdjKA==")

1.3827ms ago: executing program 0 (id=4660):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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")
r0 = socket$inet(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x4700, 0x40, &(0x7f0000000840))
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)

873.24µs ago: executing program 4 (id=4645):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
fstat(r2, &(0x7f0000000300))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1ffffffff)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000440))
close(r5)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)

0s ago: executing program 3 (id=4661):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x0, 0x4008053, r2, 0x80000000)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r8, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x4, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4006], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
readv(r8, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/65, 0x41}], 0x1)
write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)

kernel console output (not intermixed with test programs):

ONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2583.258911][T22303] device veth1_macvtap entered promiscuous mode
[ 2583.275671][T22322] loop1: detected capacity change from 0 to 512
[ 2583.305338][T22322] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 2583.331690][T22322] EXT4-fs (loop1): 1 truncate cleaned up
[ 2583.337178][T22322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 2583.347866][    T8] device bridge_slave_1 left promiscuous mode
[ 2583.353931][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2583.368510][    T8] device bridge_slave_0 left promiscuous mode
[ 2583.374432][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2583.419660][    T8] device dummy0 left promiscuous mode
[ 2583.508270][    T8] device veth1_macvtap left promiscuous mode
[ 2583.514174][    T8] device veth0_vlan left promiscuous mode
[ 2583.689686][T22329] futex_wake_op: syz.1.4445 tries to shift op by 32; fix this program
[ 2584.298666][T22249] EXT4-fs error (device loop1): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 2586.041877][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2586.049560][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2586.058634][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2586.081458][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2586.110314][T22249] EXT4-fs (loop1): unmounting filesystem.
[ 2587.047483][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2587.328579][T22332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2587.335434][T22332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2587.368599][T22332] device bridge_slave_0 entered promiscuous mode
[ 2587.375438][T22332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2587.399567][T22332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2587.406866][T22332] device bridge_slave_1 entered promiscuous mode
[ 2587.535537][T22332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2587.542416][T22332] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2587.549524][T22332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2587.556281][T22332] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2587.666966][T22332] device veth0_vlan entered promiscuous mode
[ 2587.691814][T22332] device veth1_macvtap entered promiscuous mode
[ 2587.787259][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2587.794879][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2587.803016][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2587.812029][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2587.820636][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2587.828976][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2587.836770][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2587.844606][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2587.853116][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2587.860948][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2587.878186][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2587.885566][T20049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2589.065893][T22319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2589.087039][T22319] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2589.114205][T22319] device bridge_slave_0 entered promiscuous mode
[ 2589.137497][T22319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2589.144600][T22319] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2589.152090][T22319] device bridge_slave_1 entered promiscuous mode
[ 2589.588164][T15632] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 2590.098240][T15632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2590.110045][T15632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2590.120081][T15632] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[ 2590.129073][T15632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2590.198523][T15632] usb 3-1: config 0 descriptor??
[ 2590.669072][T15632] elo 0003:04E7:0030.0017: item fetching failed at offset 2/5
[ 2590.681204][T15632] elo 0003:04E7:0030.0017: parse failed
[ 2590.701078][T15632] elo: probe of 0003:04E7:0030.0017 failed with error -22
[ 2590.872988][T15632] usb 3-1: USB disconnect, device number 32
[ 2591.821342][T22364] loop2: detected capacity change from 0 to 40427
[ 2591.849531][T22364] F2FS-fs (loop2): invalid crc value
[ 2591.873478][T22364] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2591.958257][T22364] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2592.138233][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4452'.
[ 2592.678810][T22319] device veth0_vlan entered promiscuous mode
[ 2592.695259][   T28] audit: type=1400 audit(1727624044.600:653): avc:  denied  { ioctl } for  pid=22371 comm="syz.0.4455" path="socket:[168623]" dev="sockfs" ino=168623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 2592.751095][T22319] device veth1_macvtap entered promiscuous mode
[ 2592.773632][T22374] loop2: detected capacity change from 0 to 512
[ 2592.807137][T22374] EXT4-fs: Mount option(s) incompatible with ext2
[ 2593.084401][T22385] loop3: detected capacity change from 0 to 512
[ 2593.105283][T22385] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 2593.134521][T22385] EXT4-fs (loop3): 1 truncate cleaned up
[ 2593.223544][T22385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 2594.108047][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2594.116825][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2594.129040][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2594.145064][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2594.388442][T22395] futex_wake_op: syz.3.4456 tries to shift op by 32; fix this program
[ 2594.537359][T22393] loop2: detected capacity change from 0 to 512
[ 2594.546907][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2594.555154][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2594.563675][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2594.570918][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2594.578242][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2594.586215][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2594.593472][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2594.601045][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2594.609174][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2594.617108][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2594.623952][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2594.661873][T22319] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 2594.684256][T22393] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 2594.700988][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2594.719394][T22393] EXT4-fs (loop2): 1 truncate cleaned up
[ 2594.724851][T22393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 2594.733951][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2594.753827][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2594.760694][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2594.887196][T22375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4455'.
[ 2595.057585][T22399] futex_wake_op: syz.2.4457 tries to shift op by 32; fix this program
[ 2595.240348][   T28] audit: type=1400 audit(1727624047.150:654): avc:  denied  { nlmsg_write } for  pid=22401 comm="syz.0.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[ 2596.074148][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2596.125379][T22303] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 2596.258749][T22340] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2596.278149][T22340] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2596.288937][T22340] device bridge_slave_0 entered promiscuous mode
[ 2596.301877][T22340] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2596.318355][T22340] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2596.331638][T22340] device bridge_slave_1 entered promiscuous mode
[ 2596.459652][T22340] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2596.466536][T22340] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2596.473634][T22340] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2596.480408][T22340] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2596.592898][T22340] device veth0_vlan entered promiscuous mode
[ 2596.620907][T22340] device veth1_macvtap entered promiscuous mode
[ 2597.048650][ T5606] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 2597.085477][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2597.108595][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2597.121308][T22319] EXT4-fs (loop3): unmounting filesystem.
[ 2597.141377][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2597.169889][T22303] EXT4-fs (loop2): unmounting filesystem.
[ 2597.181054][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2597.201118][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2597.229581][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2597.251560][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2597.278554][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2597.300885][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2597.326802][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2597.348471][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2597.371541][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2597.466316][T22343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2597.494391][T22343] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2597.509354][T22343] device bridge_slave_0 entered promiscuous mode
[ 2597.539330][T22343] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2597.555025][T22343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2597.578666][T22343] device bridge_slave_1 entered promiscuous mode
[ 2597.844599][T22343] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2597.851488][T22343] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2597.858588][T22343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2597.865344][T22343] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2598.009281][T15632] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2598.016678][T15632] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2598.042099][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2598.088457][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2598.125482][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2598.148479][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2598.155355][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2598.191298][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2598.221391][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2598.228267][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2598.313560][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2598.339189][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2598.367301][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2598.397553][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2598.458214][T13910] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 2598.467057][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2598.476498][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2598.500054][T22343] device veth0_vlan entered promiscuous mode
[ 2598.546414][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2598.558451][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2598.587488][    T8] device bridge_slave_1 left promiscuous mode
[ 2598.596971][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2598.611345][    T8] device bridge_slave_0 left promiscuous mode
[ 2598.621243][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2598.639506][    T8] device bridge_slave_1 left promiscuous mode
[ 2598.651217][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2598.668531][    T8] device bridge_slave_0 left promiscuous mode
[ 2598.678332][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2598.696572][    T8] device bridge_slave_1 left promiscuous mode
[ 2598.711224][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2598.721575][    T8] device bridge_slave_0 left promiscuous mode
[ 2598.727619][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2598.751420][    T8] device bridge_slave_1 left promiscuous mode
[ 2598.767492][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2598.777895][    T8] device bridge_slave_0 left promiscuous mode
[ 2598.791234][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2598.809282][    T8] device bridge_slave_1 left promiscuous mode
[ 2598.818424][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2598.835917][    T8] device bridge_slave_0 left promiscuous mode
[ 2598.845658][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2598.858502][T13910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2598.880212][    T8] device veth1_macvtap left promiscuous mode
[ 2598.886302][T13910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2598.898215][    T8] device veth0_vlan left promiscuous mode
[ 2598.908192][T13910] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2598.918488][    T8] device veth1_macvtap left promiscuous mode
[ 2598.931255][    T8] device veth0_vlan left promiscuous mode
[ 2598.938867][T13910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2598.951072][    T8] device dummy0 left promiscuous mode
[ 2598.964786][T13910] usb 5-1: config 0 descriptor??
[ 2598.970839][    T8] device veth1_macvtap left promiscuous mode
[ 2598.983831][    T8] device veth0_vlan left promiscuous mode
[ 2598.995880][    T8] device veth1_macvtap left promiscuous mode
[ 2599.007886][    T8] device veth0_vlan left promiscuous mode
[ 2599.019930][    T8] device veth1_macvtap left promiscuous mode
[ 2599.033952][    T8] device veth0_vlan left promiscuous mode
[ 2599.539100][T22427] loop4: detected capacity change from 0 to 1024
[ 2599.572986][T22427] /dev/loop4: Can't open blockdev
[ 2599.727104][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2599.737648][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2599.776733][T22343] device veth1_macvtap entered promiscuous mode
[ 2599.798623][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2599.810843][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2599.838691][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2599.894652][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2599.907856][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2599.934408][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2599.960762][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2600.068952][T22425] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2600.095486][T22425] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2600.128637][T22425] device bridge_slave_0 entered promiscuous mode
[ 2600.162497][T22424] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2600.183748][T22424] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2600.206464][T22424] device bridge_slave_0 entered promiscuous mode
[ 2600.227412][T22425] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2600.238156][T22425] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2600.248741][T13910] usbhid 5-1:0.0: can't add hid device: -71
[ 2600.254759][T13910] usbhid: probe of 5-1:0.0 failed with error -71
[ 2600.274643][T22425] device bridge_slave_1 entered promiscuous mode
[ 2600.286328][T13910] usb 5-1: USB disconnect, device number 45
[ 2600.304642][T22424] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2600.313957][T22424] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2600.341039][T22424] device bridge_slave_1 entered promiscuous mode
[ 2600.596936][T22425] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2600.603835][T22425] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2600.610909][T22425] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2600.617679][T22425] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2600.692515][T22424] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2600.699573][T22424] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2600.706659][T22424] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2600.713447][T22424] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2600.758057][T22438] loop4: detected capacity change from 0 to 512
[ 2600.784445][T22438] /dev/loop4: Can't open blockdev
[ 2600.818584][T13910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2600.829991][T13910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2600.839478][T22435] loop1: detected capacity change from 0 to 40427
[ 2600.852243][T13910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2600.875784][T22438] loop4: detected capacity change from 0 to 512
[ 2600.890696][T22435] F2FS-fs (loop1): invalid crc value
[ 2600.911426][T22438] /dev/loop4: Can't open blockdev
[ 2600.917402][T13910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2600.931628][T22435] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2601.039535][ T5606] usb 1-1: Using ep0 maxpacket: 16
[ 2601.058838][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2601.069199][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2601.083515][T22435] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 2601.089829][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2601.113886][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2601.121915][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2601.130321][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2601.147583][T19250] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2601.154465][T19250] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2601.246569][T22444] futex_wake_op: syz.4.4465 tries to shift op by 32; fix this program
[ 2601.894833][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2601.927662][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2601.962502][T22447] loop4: detected capacity change from 0 to 512
[ 2602.050047][T19250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2602.057015][T19250] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2602.071035][T22447] /dev/loop4: Can't open blockdev
[ 2602.086189][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2602.978554][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2602.986535][T19250] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2602.993401][T19250] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2603.018709][T22447] loop4: detected capacity change from 0 to 512
[ 2603.038685][T22447] /dev/loop4: Can't open blockdev
[ 2603.048881][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2603.057156][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2603.065485][T19250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2603.072353][T19250] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2603.182348][T22448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4450'.
[ 2603.293243][T22452] futex_wake_op: syz.4.4466 tries to shift op by 32; fix this program
[ 2603.969222][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2603.977122][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2603.999307][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2604.007163][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2604.016336][T22343] syz-executor: attempt to access beyond end of device
[ 2604.016336][T22343] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 2604.068440][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2604.102713][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2604.128686][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2604.148481][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2604.167353][T22425] device veth0_vlan entered promiscuous mode
[ 2604.208274][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2604.216882][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2604.246759][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2604.279454][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2604.297215][T22424] device veth0_vlan entered promiscuous mode
[ 2604.322902][T22457] loop1: detected capacity change from 0 to 512
[ 2604.336605][T22425] device veth1_macvtap entered promiscuous mode
[ 2604.357655][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2604.373946][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2604.381631][T22457] EXT4-fs: Mount option(s) incompatible with ext2
[ 2604.398456][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2604.416791][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2604.435202][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2604.448453][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2604.466473][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2604.486526][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2604.494678][T15632] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 2604.508453][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2604.541571][T22424] device veth1_macvtap entered promiscuous mode
[ 2604.553705][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2604.568440][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2604.579677][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2604.597921][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2604.618086][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2604.626368][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2604.644735][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2604.654799][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2604.674961][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2604.713396][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2604.808807][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2604.827185][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2604.835500][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2605.058179][ T5606] usb 1-1: unable to read config index 0 descriptor/all
[ 2605.065732][ T5606] usb 1-1: can't read configurations, error -71
[ 2605.348957][T15632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2605.416543][T15632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2605.440600][T15632] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2605.769284][T15632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2605.778055][T15632] usb 5-1: config 0 descriptor??
[ 2605.943637][T22475] loop2: detected capacity change from 0 to 1024
[ 2605.982192][T22475] EXT4-fs: Ignoring removed orlov option
[ 2606.002274][T22475] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 2606.089777][T22475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 2606.212535][   T28] audit: type=1400 audit(1727624058.050:655): avc:  denied  { connect } for  pid=22474 comm="syz.2.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2606.486673][  T313] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 2606.521083][   T28] audit: type=1400 audit(1727624058.430:656): avc:  denied  { append } for  pid=22474 comm="syz.2.4471" path="/1/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 2606.636332][T22484] loop4: detected capacity change from 0 to 1024
[ 2606.670360][T22484] /dev/loop4: Can't open blockdev
[ 2606.849991][T22353] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2606.875055][T22425] EXT4-fs (loop2): unmounting filesystem.
[ 2607.034375][T22476] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2607.060867][T22476] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2607.093318][T22476] device bridge_slave_0 entered promiscuous mode
[ 2607.124714][T22476] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2607.153479][T22476] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2607.178954][T22476] device bridge_slave_1 entered promiscuous mode
[ 2607.353834][    T8] device bridge_slave_1 left promiscuous mode
[ 2607.360356][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2607.377845][    T8] device bridge_slave_0 left promiscuous mode
[ 2607.404886][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2607.486382][T15632] usbhid 5-1:0.0: can't add hid device: -71
[ 2607.492246][T15632] usbhid: probe of 5-1:0.0 failed with error -71
[ 2607.508617][    T8] device veth1_macvtap left promiscuous mode
[ 2607.520667][T15632] usb 5-1: USB disconnect, device number 46
[ 2607.528803][    T8] device veth0_vlan left promiscuous mode
[ 2607.868199][  T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2607.885142][  T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2607.905031][  T313] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2607.923284][  T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2607.998874][  T313] usb 4-1: config 0 descriptor??
[ 2609.064832][   T28] audit: type=1400 audit(1727624060.970:657): avc:  denied  { append } for  pid=22494 comm="syz.3.4477" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2609.138238][  T313] usbhid 4-1:0.0: can't add hid device: -71
[ 2610.496257][  T313] usbhid: probe of 4-1:0.0 failed with error -71
[ 2610.525938][  T313] usb 4-1: USB disconnect, device number 16
[ 2610.555427][   T28] audit: type=1400 audit(1727624062.460:658): avc:  denied  { ioctl } for  pid=22494 comm="+}[@" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 2610.595823][T22504] input: syz1 as /devices/virtual/input/input40
[ 2611.032667][T22508] fuse: Unknown parameter 'use00000000000000000000'
[ 2629.118138][   T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P20434 } 2129 jiffies s: 173437 root: 0x0/T
[ 2629.129824][   T16] rcu: blocking rcu_node structures (internal RCU debug):
[ 2641.518861][T22506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4477'.
[ 2641.701813][T22527] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2641.718147][T22527] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2641.725411][T22527] device bridge_slave_0 entered promiscuous mode
[ 2641.748950][T22527] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2641.755804][T22527] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2641.778605][T22527] device bridge_slave_1 entered promiscuous mode
[ 2641.901915][T22527] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2641.908798][T22527] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2641.915875][T22527] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2641.922720][T22527] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2642.026047][T22527] device veth0_vlan entered promiscuous mode
[ 2642.051632][T22527] device veth1_macvtap entered promiscuous mode
[ 2643.000002][T22555] loop4: detected capacity change from 0 to 512
[ 2643.031876][T22555] /dev/loop4: Can't open blockdev
[ 2643.042202][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2643.050186][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2643.058348][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2643.076976][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2643.085882][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2643.139317][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2643.147142][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2643.154984][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2643.163187][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2643.170987][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2643.178291][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2643.185552][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2643.528080][T22560] loop4: detected capacity change from 0 to 512
[ 2643.555590][T22560] /dev/loop4: Can't open blockdev
[ 2643.570221][T22524] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2643.577061][T22524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2643.618662][T22524] device bridge_slave_0 entered promiscuous mode
[ 2643.625510][T22524] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2643.658165][T22524] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2643.665471][T22524] device bridge_slave_1 entered promiscuous mode
[ 2643.687388][T22560] loop4: detected capacity change from 0 to 512
[ 2643.708076][T22560] /dev/loop4: Can't open blockdev
[ 2644.404037][T22567] loop4: detected capacity change from 0 to 512
[ 2644.431363][T22567] /dev/loop4: Can't open blockdev
[ 2645.052392][T22337] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2645.066261][T22567] loop4: detected capacity change from 0 to 512
[ 2645.072435][T22337] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2645.082049][T22567] /dev/loop4: Can't open blockdev
[ 2645.087675][T22337] Buffer I/O error on dev loop4, logical block 0, async page read
[ 2646.166160][T22524] device veth0_vlan entered promiscuous mode
[ 2646.179696][T22524] device veth1_macvtap entered promiscuous mode
[ 2646.330235][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2646.337530][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2648.048511][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2648.056660][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2648.083422][T19250] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2648.090331][T19250] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2648.127171][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2648.135585][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2648.143588][T19250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2648.150421][T19250] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2648.158056][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2648.171934][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2648.188475][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2648.206543][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2648.298465][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2648.316843][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2648.326895][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2648.410474][T22590] loop3: detected capacity change from 0 to 16
[ 2648.416928][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2648.431653][T22590] erofs: Unknown parameter '����0xffffffffffffffff0177777777777777777777718446744073709551615�����������������K��D����\�l3����<��5���ԉr$B�kaF�3v0�̡A�2ͳ�v~*���44��I��P��g"���6��'
[ 2648.927112][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2648.935262][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2648.943265][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2648.950748][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2648.958922][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2648.967024][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2648.985354][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2649.003834][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2649.018466][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2649.029692][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2649.043433][   T28] audit: type=1400 audit(1727624100.950:659): avc:  denied  { name_bind } for  pid=22592 comm="syz.4.4489" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 2649.151708][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2649.168453][T19250] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2649.175311][T19250] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2649.249286][T22596] incfs: Error accessing: ./file0.
[ 2649.254380][T22596] incfs: mount failed -20
[ 2649.917371][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2649.925685][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2649.933726][T19250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2649.940589][T19250] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2650.042525][T22601] loop4: detected capacity change from 0 to 512
[ 2650.077891][T22601] /dev/loop4: Can't open blockdev
[ 2650.083938][T22520] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2650.098336][T22520] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2650.115768][T22520] device bridge_slave_0 entered promiscuous mode
[ 2650.126131][T22520] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2650.145561][T22520] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2650.166617][T22601] loop4: detected capacity change from 0 to 512
[ 2650.178781][T22520] device bridge_slave_1 entered promiscuous mode
[ 2650.196747][T22601] /dev/loop4: Can't open blockdev
[ 2650.720892][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2650.744129][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2650.766915][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2650.783504][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2650.814766][T22517] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2650.828162][T22517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2650.843664][T22517] device bridge_slave_0 entered promiscuous mode
[ 2650.862388][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2650.872371][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2650.952559][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2650.978471][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2651.017088][T22517] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2651.024989][T22517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2651.042466][T22517] device bridge_slave_1 entered promiscuous mode
[ 2651.137475][T22476] device veth0_vlan entered promiscuous mode
[ 2651.168175][T19250] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 2651.178088][T22476] device veth1_macvtap entered promiscuous mode
[ 2651.270628][T22613] device dummy0 entered promiscuous mode
[ 2651.351276][T22615] fuse: Bad value for 'fd'
[ 2651.568235][T19250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2651.594007][T19250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2651.603783][   T39] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 2651.628203][T19250] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2651.657188][T19250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2651.691584][T19250] usb 4-1: config 0 descriptor??
[ 2651.998481][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2652.018132][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2652.045048][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2652.058429][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2652.068183][   T39] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2652.087545][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2652.095763][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2652.114087][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2652.126355][   T39] usb 1-1: config 0 descriptor??
[ 2652.136794][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2652.155051][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2652.173711][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2652.192031][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2652.225240][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2652.259413][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2652.283860][T22618] loop3: detected capacity change from 0 to 1024
[ 2652.298559][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2652.356626][T22618] JBD2: no valid journal superblock found
[ 2652.366552][T22618] EXT4-fs (loop3): error loading journal
[ 2652.628208][T20434] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 2652.858220][T19250] usbhid 4-1:0.0: can't add hid device: -71
[ 2652.864251][T19250] usbhid: probe of 4-1:0.0 failed with error -71
[ 2652.872595][    T8] device bridge_slave_1 left promiscuous mode
[ 2652.880458][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2652.904827][T19250] usb 4-1: USB disconnect, device number 17
[ 2652.912820][    T8] device bridge_slave_0 left promiscuous mode
[ 2652.935058][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2652.961851][    T8] device bridge_slave_1 left promiscuous mode
[ 2652.981489][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2653.007568][    T8] device bridge_slave_0 left promiscuous mode
[ 2653.026244][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2653.048739][T20434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2653.062729][    T8] device bridge_slave_1 left promiscuous mode
[ 2653.076447][T20434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2653.092341][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2653.115609][T20434] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2653.125342][    T8] device bridge_slave_0 left promiscuous mode
[ 2653.144390][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2653.156186][T20434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2653.177333][    T8] device bridge_slave_1 left promiscuous mode
[ 2653.202771][T20434] usb 5-1: config 0 descriptor??
[ 2653.217748][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2653.233257][    T8] device bridge_slave_0 left promiscuous mode
[ 2653.248218][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2653.265799][    T8] device bridge_slave_1 left promiscuous mode
[ 2653.275520][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2653.296143][    T8] device bridge_slave_0 left promiscuous mode
[ 2653.302310][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2653.318225][   T39] usbhid 1-1:0.0: can't add hid device: -71
[ 2653.325980][   T39] usbhid: probe of 1-1:0.0 failed with error -71
[ 2653.354477][   T39] usb 1-1: USB disconnect, device number 34
[ 2653.364826][    T8] device veth1_macvtap left promiscuous mode
[ 2653.394859][    T8] device veth0_vlan left promiscuous mode
[ 2653.405212][    T8] device veth1_macvtap left promiscuous mode
[ 2653.428476][    T8] device veth0_vlan left promiscuous mode
[ 2653.447375][    T8] device veth1_macvtap left promiscuous mode
[ 2653.467234][    T8] device veth0_vlan left promiscuous mode
[ 2653.485891][    T8] device veth1_macvtap left promiscuous mode
[ 2653.501915][    T8] device veth0_vlan left promiscuous mode
[ 2653.522318][    T8] device veth1_macvtap left promiscuous mode
[ 2653.537055][    T8] device veth0_vlan left promiscuous mode
[ 2654.252388][T22624] loop3: detected capacity change from 0 to 40427
[ 2654.273202][T22624] F2FS-fs (loop3): invalid crc value
[ 2654.390310][T22624] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2654.501896][T22624] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2655.041188][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2655.049607][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2655.061778][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2655.071239][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2655.080394][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2655.087674][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2656.060071][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2656.068870][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2656.076973][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2656.083864][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2657.039463][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2657.047668][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2657.056577][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2657.063432][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2657.086378][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2657.250454][T22637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4495'.
[ 2657.455443][T22644] loop4: detected capacity change from 0 to 1024
[ 2657.479666][T20434] usbhid 5-1:0.0: can't add hid device: -71
[ 2657.501542][T20434] usbhid: probe of 5-1:0.0 failed with error -71
[ 2657.508389][T22644] EXT4-fs: Ignoring removed nobh option
[ 2657.513762][T22644] EXT4-fs: Ignoring removed orlov option
[ 2657.528189][T13910] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 2657.545853][T20434] usb 5-1: USB disconnect, device number 47
[ 2657.566030][T22644] /dev/loop4: Can't open blockdev
[ 2657.737770][   T28] audit: type=1400 audit(1727624109.560:660): avc:  denied  { write } for  pid=22643 comm="syz.4.4499" name="xfrm_stat" dev="proc" ino=4026533469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 2659.038178][   T28] audit: type=1400 audit(1727624109.560:661): avc:  denied  { execute } for  pid=22643 comm="syz.4.4499" path="/10/bus" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2659.059669][T22517] device veth0_vlan entered promiscuous mode
[ 2659.067424][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2659.075823][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2659.085335][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2659.093095][T22651] loop4: detected capacity change from 0 to 128
[ 2659.106503][T22651] ext4: Unknown parameter 'dont_hash'
[ 2659.229352][T13910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2659.248136][T13910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2659.327962][   T28] audit: type=1400 audit(1727624110.910:662): avc:  denied  { create } for  pid=22645 comm="syz.3.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2659.347300][T13910] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2659.367452][T13910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2659.375569][   T28] audit: type=1400 audit(1727624110.910:663): avc:  denied  { setopt } for  pid=22645 comm="syz.3.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2659.380301][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2659.426744][T13910] usb 1-1: config 0 descriptor??
[ 2659.447861][   T28] audit: type=1400 audit(1727624110.910:664): avc:  denied  { getopt } for  pid=22645 comm="syz.3.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2659.470865][   T28] audit: type=1400 audit(1727624111.170:665): avc:  denied  { bind } for  pid=22650 comm="syz.4.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2659.518443][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2659.526032][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2659.536273][   T28] audit: type=1400 audit(1727624111.320:666): avc:  denied  { read } for  pid=22650 comm="syz.4.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2661.265733][T22517] device veth1_macvtap entered promiscuous mode
[ 2662.006892][T13910] usbhid 1-1:0.0: can't add hid device: -71
[ 2662.019245][T13910] usbhid: probe of 1-1:0.0 failed with error -71
[ 2662.036055][T13910] usb 1-1: USB disconnect, device number 35
[ 2662.175674][T22678] loop2: detected capacity change from 0 to 512
[ 2662.206509][T22678] EXT4-fs: Mount option(s) incompatible with ext2
[ 2662.578426][   T28] audit: type=1400 audit(1727624114.190:667): avc:  denied  { create } for  pid=22675 comm="syz.3.4506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2662.613813][   T28] audit: type=1400 audit(1727624114.190:668): avc:  denied  { write } for  pid=22675 comm="syz.3.4506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2662.977080][T22683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4507'.
[ 2664.042452][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2664.049871][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2664.057164][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2664.065449][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2664.073563][T20434] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2664.080412][T20434] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2664.087623][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2664.119697][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2664.128002][T20434] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2664.134952][T20434] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2664.142292][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2664.150224][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2664.157954][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2664.259606][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2664.275003][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2664.291939][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2665.192442][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2665.200233][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2665.208496][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2665.216942][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2665.225212][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2665.233784][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2665.352327][T22520] device veth0_vlan entered promiscuous mode
[ 2665.782067][T22704] FAULT_INJECTION: forcing a failure.
[ 2665.782067][T22704] name failslab, interval 1, probability 0, space 0, times 0
[ 2665.794541][T22704] CPU: 1 PID: 22704 Comm: syz.2.4510 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0
[ 2665.804121][T22704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2665.814018][T22704] Call Trace:
[ 2665.817141][T22704]  <TASK>
[ 2665.819917][T22704]  dump_stack_lvl+0x151/0x1b7
[ 2665.824431][T22704]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2665.829728][T22704]  dump_stack+0x15/0x1c
[ 2665.833722][T22704]  should_fail_ex+0x3d0/0x520
[ 2665.838232][T22704]  ? kvmalloc_node+0x221/0x640
[ 2665.842832][T22704]  __should_failslab+0xaf/0xf0
[ 2665.847518][T22704]  should_failslab+0x9/0x20
[ 2665.851858][T22704]  __kmem_cache_alloc_node+0x3d/0x250
[ 2665.857075][T22704]  ? kvmalloc_node+0x221/0x640
[ 2665.861665][T22704]  __kmalloc_node+0xa3/0x1e0
[ 2665.866094][T22704]  kvmalloc_node+0x221/0x640
[ 2665.870521][T22704]  ? selinux_inode_init_security+0x70b/0xad0
[ 2665.876332][T22704]  ? vm_mmap+0xb0/0xb0
[ 2665.880243][T22704]  simple_xattr_alloc+0x43/0xa0
[ 2665.884926][T22704]  shmem_initxattrs+0x8d/0x200
[ 2665.889531][T22704]  security_inode_init_security+0x252/0x390
[ 2665.895254][T22704]  ? shmem_tmpfile+0x120/0x120
[ 2665.899855][T22704]  ? security_dentry_create_files_as+0xc0/0xc0
[ 2665.905841][T22704]  ? simple_acl_create+0x29e/0x2c0
[ 2665.910794][T22704]  shmem_mknod+0xb8/0x1d0
[ 2665.914954][T22704]  ? selinux_inode_mkdir+0x22/0x30
[ 2665.919921][T22704]  shmem_mkdir+0x2c/0x60
[ 2665.923985][T22704]  vfs_mkdir+0x398/0x570
[ 2665.928072][T22704]  do_mkdirat+0x1eb/0x450
[ 2665.932401][T22704]  ? vfs_mkdir+0x570/0x570
[ 2665.936667][T22704]  ? getname_flags+0x1fd/0x520
[ 2665.941252][T22704]  __x64_sys_mkdirat+0x89/0xa0
[ 2665.945852][T22704]  x64_sys_call+0x6c6/0x9a0
[ 2665.950191][T22704]  do_syscall_64+0x3b/0xb0
[ 2665.954441][T22704]  ? clear_bhb_loop+0x55/0xb0
[ 2665.958955][T22704]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2665.964685][T22704] RIP: 0033:0x7f0c6277c897
[ 2665.968940][T22704] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2665.988639][T22704] RSP: 002b:00007f0c63583e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2665.996884][T22704] RAX: ffffffffffffffda RBX: 00007f0c63583ef0 RCX: 00007f0c6277c897
[ 2666.004695][T22704] RDX: 00000000000001ff RSI: 0000000020000000 RDI: 00000000ffffff9c
[ 2666.012515][T22704] RBP: 0000000020000040 R08: 0000000000000000 R09: 0000000000000000
[ 2666.020318][T22704] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000020000000
[ 2666.028130][T22704] R13: 00007f0c63583eb0 R14: 0000000000000000 R15: 0000000020008380
[ 2666.035947][T22704]  </TASK>
[ 2666.055788][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2666.066081][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2666.208457][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2666.216150][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2666.314371][T22520] device veth1_macvtap entered promiscuous mode
[ 2666.344075][T22708] loop3: detected capacity change from 0 to 512
[ 2666.623106][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2666.658516][T22718] loop1: detected capacity change from 0 to 512
[ 2666.699410][T22718] EXT4-fs: Mount option(s) incompatible with ext2
[ 2666.718968][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2666.726214][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2666.908508][T22720] loop3: detected capacity change from 0 to 40427
[ 2666.928823][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2666.994583][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2667.037758][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2667.081597][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2667.120192][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2667.150429][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2667.253258][T22725] fuse: Unknown parameter 'fd0x000000000000000d'
[ 2667.528300][T22337] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2669.711626][T22740] FAULT_INJECTION: forcing a failure.
[ 2669.711626][T22740] name failslab, interval 1, probability 0, space 0, times 0
[ 2669.751180][T22740] CPU: 0 PID: 22740 Comm: syz.0.4518 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0
[ 2669.760818][T22740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2669.770797][T22740] Call Trace:
[ 2669.773920][T22740]  <TASK>
[ 2669.776697][T22740]  dump_stack_lvl+0x151/0x1b7
[ 2669.781212][T22740]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2669.786504][T22740]  ? rtnetlink_rcv_msg+0x9fc/0xca0
[ 2669.791459][T22740]  dump_stack+0x15/0x1c
[ 2669.795445][T22740]  should_fail_ex+0x3d0/0x520
[ 2669.799959][T22740]  ? __alloc_skb+0xcc/0x2d0
[ 2669.804305][T22740]  __should_failslab+0xaf/0xf0
[ 2669.808901][T22740]  should_failslab+0x9/0x20
[ 2669.813237][T22740]  kmem_cache_alloc_node+0x3e/0x2d0
[ 2669.818274][T22740]  __alloc_skb+0xcc/0x2d0
[ 2669.822437][T22740]  netlink_ack+0x392/0x12a0
[ 2669.826782][T22740]  ? avc_has_perm+0x16f/0x260
[ 2669.831294][T22740]  ? netlink_dump+0xd20/0xd20
[ 2669.835803][T22740]  ? avc_has_perm_noaudit+0x430/0x430
[ 2669.841010][T22740]  netlink_rcv_skb+0x24a/0x410
[ 2669.845609][T22740]  ? rtnetlink_bind+0x80/0x80
[ 2669.850124][T22740]  ? netlink_ack+0x12a0/0x12a0
[ 2669.854728][T22740]  ? __netlink_lookup+0x37b/0x3a0
[ 2669.859592][T22740]  rtnetlink_rcv+0x1c/0x20
[ 2669.863835][T22740]  netlink_unicast+0x906/0xab0
[ 2669.868438][T22740]  ? netlink_detachskb+0x90/0x90
[ 2669.873213][T22740]  ? security_netlink_send+0x7b/0xa0
[ 2669.878423][T22740]  netlink_sendmsg+0xa15/0xd30
[ 2669.883019][T22740]  ? netlink_getsockopt+0x540/0x540
[ 2669.888061][T22740]  ? security_socket_sendmsg+0x82/0xb0
[ 2669.893352][T22740]  ? netlink_getsockopt+0x540/0x540
[ 2669.898381][T22740]  ____sys_sendmsg+0x5d3/0x9a0
[ 2669.903068][T22740]  ? __sys_sendmsg_sock+0x40/0x40
[ 2669.907930][T22740]  __sys_sendmsg+0x2a9/0x390
[ 2669.912352][T22740]  ? ____sys_sendmsg+0x9a0/0x9a0
[ 2669.917128][T22740]  ? __kasan_check_write+0x14/0x20
[ 2669.922072][T22740]  ? mutex_unlock+0xb2/0x260
[ 2669.926501][T22740]  ? __kasan_check_write+0x14/0x20
[ 2669.931452][T22740]  ? __ia32_sys_read+0x90/0x90
[ 2669.936047][T22740]  ? debug_smp_processor_id+0x17/0x20
[ 2669.941253][T22740]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 2669.947157][T22740]  __x64_sys_sendmsg+0x7f/0x90
[ 2669.951845][T22740]  x64_sys_call+0x16a/0x9a0
[ 2669.956183][T22740]  do_syscall_64+0x3b/0xb0
[ 2669.960435][T22740]  ? clear_bhb_loop+0x55/0xb0
[ 2669.964947][T22740]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2669.970675][T22740] RIP: 0033:0x7fd51b17dff9
[ 2669.974929][T22740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2669.994458][T22740] RSP: 002b:00007fd51bf1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2670.002701][T22740] RAX: ffffffffffffffda RBX: 00007fd51b335f80 RCX: 00007fd51b17dff9
[ 2670.010511][T22740] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[ 2670.018328][T22740] RBP: 00007fd51bf1e090 R08: 0000000000000000 R09: 0000000000000000
[ 2670.026140][T22740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2670.034035][T22740] R13: 0000000000000000 R14: 00007fd51b335f80 R15: 00007fffa5dcb228
[ 2670.041854][T22740]  </TASK>
[ 2670.318343][  T292] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 2670.425767][T22746] loop3: detected capacity change from 0 to 512
[ 2670.473048][T22746] EXT4-fs: Mount option(s) incompatible with ext2
[ 2670.682091][T22748] loop4: detected capacity change from 0 to 512
[ 2670.713085][T22748] /dev/loop4: Can't open blockdev
[ 2670.748266][  T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2670.762283][   T28] audit: type=1400 audit(1727624122.670:669): avc:  granted  { setsecparam } for  pid=22747 comm="syz.4.4521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 2670.874827][  T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2674.168208][  T292] usb 2-1: string descriptor 0 read error: -71
[ 2674.174214][  T292] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 2675.070813][  T292] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[ 2675.079375][  T292] usb 2-1: config 0 descriptor??
[ 2676.058199][  T292] usb 2-1: can't set config #0, error -71
[ 2676.064224][  T292] usb 2-1: USB disconnect, device number 34
[ 2680.078209][   T28] audit: type=1400 audit(1727624131.960:670): avc:  denied  { mount } for  pid=22791 comm="syz.2.4531" name="/" dev="ramfs" ino=173198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 2680.807504][   T28] audit: type=1400 audit(1727624131.960:671): avc:  denied  { mounton } for  pid=22791 comm="syz.2.4531" path="/5/file0" dev="ramfs" ino=173198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 2681.412524][T22825] loop4: detected capacity change from 0 to 16
[ 2681.426728][T22825] erofs: Unknown parameter '����0xffffffffffffffff0177777777777777777777718446744073709551615�����������������K��D����\�l3����<��5���ԉr$B�kaF�3v0�̡A�2ͳ�v~*���44��I��P��g"���6��'
[ 2681.460986][T22820] loop3: detected capacity change from 0 to 16
[ 2681.476114][T22820] erofs: (device loop3): mounted with root inode @ nid 36.
[ 2681.476344][T22822] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1310 sclass=netlink_xfrm_socket pid=22822 comm=syz.2.4531
[ 2681.502868][T22820] syz.3.4532: attempt to access beyond end of device
[ 2681.502868][T22820] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[ 2681.535461][T22826] loop2: detected capacity change from 0 to 256
[ 2681.568249][   T28] audit: type=1400 audit(1727624133.460:672): avc:  denied  { mount } for  pid=22791 comm="syz.2.4531" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 2681.788045][   T28] audit: type=1400 audit(1727624133.690:673): avc:  denied  { unmount } for  pid=22517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 2681.868633][   T28] audit: type=1400 audit(1727624133.720:674): avc:  denied  { unmount } for  pid=22517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 2681.899115][T22834] loop2: detected capacity change from 0 to 256
[ 2681.918826][T22834] exfat: Deprecated parameter 'utf8'
[ 2681.929614][T22834] exfat: Deprecated parameter 'namecase'
[ 2681.941269][T22834] exfat: Deprecated parameter 'namecase'
[ 2681.952911][T22834] exfat: Deprecated parameter 'utf8'
[ 2681.967753][T22834] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d)
[ 2681.998191][T19250] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 2682.364311][T22835] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[ 2682.373724][T22835] SELinux: failed to load policy
[ 2682.392749][   T28] audit: type=1400 audit(1727624134.270:675): avc:  denied  { load_policy } for  pid=22833 comm="syz.2.4541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 2682.538220][T22840] FAULT_INJECTION: forcing a failure.
[ 2682.538220][T22840] name failslab, interval 1, probability 0, space 0, times 0
[ 2682.550672][T22840] CPU: 1 PID: 22840 Comm: syz.0.4542 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0
[ 2682.560271][T22840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2682.570165][T22840] Call Trace:
[ 2682.573292][T22840]  <TASK>
[ 2682.576067][T22840]  dump_stack_lvl+0x151/0x1b7
[ 2682.580581][T22840]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2682.585876][T22840]  dump_stack+0x15/0x1c
[ 2682.589864][T22840]  should_fail_ex+0x3d0/0x520
[ 2682.594381][T22840]  ? security_file_alloc+0x29/0x120
[ 2682.599413][T22840]  __should_failslab+0xaf/0xf0
[ 2682.604014][T22840]  should_failslab+0x9/0x20
[ 2682.608352][T22840]  kmem_cache_alloc+0x3b/0x2c0
[ 2682.612955][T22840]  ? __alloc_file+0x29/0x2a0
[ 2682.617382][T22840]  security_file_alloc+0x29/0x120
[ 2682.622240][T22840]  __alloc_file+0xb2/0x2a0
[ 2682.626494][T22840]  alloc_empty_file+0x95/0x180
[ 2682.631091][T22840]  alloc_file+0x5a/0x5e0
[ 2682.635175][T22840]  alloc_file_pseudo+0x259/0x2f0
[ 2682.639947][T22840]  ? alloc_empty_file_noaccount+0x80/0x80
[ 2682.645501][T22840]  ? _raw_spin_unlock+0x4c/0x70
[ 2682.650188][T22840]  sock_alloc_file+0xbb/0x260
[ 2682.654709][T22840]  __sys_socket+0x1ca/0x3a0
[ 2682.659043][T22840]  ? __sys_socket_file+0x1d0/0x1d0
[ 2682.663985][T22840]  ? debug_smp_processor_id+0x17/0x20
[ 2682.669196][T22840]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 2682.675095][T22840]  __x64_sys_socket+0x7a/0x90
[ 2682.679694][T22840]  x64_sys_call+0x147/0x9a0
[ 2682.684032][T22840]  do_syscall_64+0x3b/0xb0
[ 2682.688294][T22840]  ? clear_bhb_loop+0x55/0xb0
[ 2682.692808][T22840]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2682.698536][T22840] RIP: 0033:0x7fd51b17dff9
[ 2682.702781][T22840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2682.722223][T22840] RSP: 002b:00007fd51befd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 2682.730560][T22840] RAX: ffffffffffffffda RBX: 00007fd51b336058 RCX: 00007fd51b17dff9
[ 2682.738366][T22840] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 2682.746176][T22840] RBP: 00007fd51befd090 R08: 0000000000000000 R09: 0000000000000000
[ 2682.754080][T22840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2682.761884][T22840] R13: 0000000000000000 R14: 00007fd51b336058 R15: 00007fffa5dcb228
[ 2682.769703][T22840]  </TASK>
[ 2685.296193][T19250] usb 2-1: unable to read config index 0 descriptor/all
[ 2685.314422][T19250] usb 2-1: can't read configurations, error -71
[ 2686.163319][T22857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4545'.
[ 2686.229182][   T28] audit: type=1400 audit(1727624137.240:676): avc:  denied  { unmount } for  pid=22517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 2687.341545][   T28] audit: type=1400 audit(1727624139.250:677): avc:  denied  { create } for  pid=22873 comm="syz.0.4551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 2688.281209][T22886] loop2: detected capacity change from 0 to 256
[ 2688.563989][T22888] device ip6tnl1 entered promiscuous mode
[ 2688.788216][  T313] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 2689.258012][T22892] loop2: detected capacity change from 0 to 512
[ 2689.283063][T22892] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 2689.309512][T22892] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.4555: invalid block
[ 2689.338157][T22892] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4555: couldn't read orphan inode 11 (err -117)
[ 2689.370232][T22892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 2689.971964][T22517] EXT4-fs (loop2): unmounting filesystem.
[ 2690.408156][T13910] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 2690.708141][T13910] usb 3-1: device descriptor read/64, error -71
[ 2691.046607][  T313] usb 1-1: config 19 has an invalid descriptor of length 41, skipping remainder of the config
[ 2691.056765][  T313] usb 1-1: config 19 has 0 interfaces, different from the descriptor's value: 20
[ 2691.065800][  T313] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[ 2691.074701][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2691.146201][T13910] usb 3-1: device descriptor read/64, error -71
[ 2691.448195][  T313] usb 1-1: can't set config #19, error -71
[ 2691.454964][  T313] usb 1-1: USB disconnect, device number 36
[ 2691.922490][   T39] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 2692.078309][T13910] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 2692.268143][   T39] usb 2-1: Using ep0 maxpacket: 16
[ 2692.326729][T22914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4559'.
[ 2692.388211][T13910] usb 3-1: device descriptor read/64, error -71
[ 2692.408192][   T39] usb 2-1: config 0 has no interfaces?
[ 2692.413497][   T39] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2692.439618][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2692.488516][   T39] usb 2-1: config 0 descriptor??
[ 2692.790314][   T28] audit: type=1400 audit(1727624144.700:678): avc:  denied  { getopt } for  pid=22903 comm="syz.1.4557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2692.809871][T13910] usb 3-1: device descriptor read/64, error -71
[ 2692.928261][T13910] usb usb3-port1: attempt power cycle
[ 2693.078428][T19250] usb 2-1: USB disconnect, device number 37
[ 2694.222462][T13910] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 2694.428324][T13910] usb 3-1: device descriptor read/8, error -71
[ 2694.471522][T22921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2694.493422][T22921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2694.515857][T22921] device bridge_slave_0 entered promiscuous mode
[ 2694.538198][T19250] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 2694.547000][T22921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2694.568203][T22921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2694.589532][T22921] device bridge_slave_1 entered promiscuous mode
[ 2694.758275][T13910] usb 3-1: device descriptor read/8, error -71
[ 2694.788918][T22921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2694.795795][T22921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2694.802906][T22921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2694.809675][T22921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2694.934560][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2694.946476][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2694.953642][T19250] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2694.973262][T19250] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2694.988217][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2695.023083][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2695.031014][T13910] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 2695.047460][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2695.054345][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2695.075077][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2695.083065][T19250] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2695.094560][T19250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2695.103464][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2695.110325][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2695.117722][T19250] usb 1-1: SerialNumber: syz
[ 2695.228236][T13910] usb 3-1: device descriptor read/8, error -71
[ 2695.373769][    T8] device bridge_slave_1 left promiscuous mode
[ 2695.387250][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2695.417858][    T8] device bridge_slave_0 left promiscuous mode
[ 2695.813964][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2695.825215][    T8] device veth1_macvtap left promiscuous mode
[ 2695.837316][    T8] device veth0_vlan left promiscuous mode
[ 2695.928288][T13910] usb 3-1: device descriptor read/8, error -71
[ 2696.012792][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2696.024166][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2696.040280][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2696.048617][T13910] usb usb3-port1: unable to enumerate USB device
[ 2696.079295][T22921] device veth0_vlan entered promiscuous mode
[ 2696.095286][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2696.106290][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2696.140200][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2696.154643][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2696.171315][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2696.189143][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2696.207857][T22921] device veth1_macvtap entered promiscuous mode
[ 2696.234502][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2696.249270][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2696.265620][  T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2696.341210][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2696.356542][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2696.418935][T19250] usb 1-1: 0:2 : does not exist
[ 2696.423758][T19250] usb 1-1: unit 5: unexpected type 0x09
[ 2696.480926][T19250] usb 1-1: USB disconnect, device number 37
[ 2696.491652][T22938] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2696.528333][T22938] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2696.548967][T22938] device bridge_slave_0 entered promiscuous mode
[ 2696.577696][T22938] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2696.595781][T22938] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2696.613591][T22938] device bridge_slave_1 entered promiscuous mode
[ 2696.824203][T22938] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2696.831082][T22938] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2696.838199][T22938] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2696.844949][T22938] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2696.971909][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2696.989591][T13910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2697.006860][T13910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2697.035261][T22942] loop3: detected capacity change from 0 to 40427
[ 2697.058209][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2697.066679][T15632] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2697.073530][T15632] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2697.229031][T22942] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2697.236703][T22942] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2697.268965][T22942] F2FS-fs (loop3): invalid crc value
[ 2697.305193][T22942] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2697.383841][T22942] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2697.400875][T22942] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2697.578140][  T313] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 2697.948199][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2697.968131][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2697.987830][  T313] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2698.007974][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2698.049004][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2698.056461][  T313] usb 2-1: config 0 descriptor??
[ 2698.057090][T15632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2698.068480][T15632] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2698.075769][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2698.083743][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2698.113010][T22938] device veth0_vlan entered promiscuous mode
[ 2698.125549][T22938] device veth1_macvtap entered promiscuous mode
[ 2698.227777][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2698.247828][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2698.260718][T22960] loop4: detected capacity change from 0 to 512
[ 2698.275715][   T28] audit: type=1400 audit(1727624150.180:679): avc:  denied  { mounton } for  pid=22941 comm="syz.3.4560" path="/0/file1/file0" dev="loop3" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 2698.318642][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2698.327510][T22960] /dev/loop4: Can't open blockdev
[ 2698.340044][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2698.356084][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2698.456399][   T28] audit: type=1400 audit(1727624150.360:680): avc:  denied  { rmdir } for  pid=22921 comm="syz-executor" name=".index" dev="loop3" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 2698.879606][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2698.914595][T22965] loop1: detected capacity change from 0 to 1024
[ 2698.933451][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2698.940947][   T28] audit: type=1400 audit(1727624150.770:681): avc:  denied  { remove_name } for  pid=22921 comm="syz-executor" name="file0" dev="loop3" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2698.979044][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2699.019334][T22965] JBD2: no valid journal superblock found
[ 2699.025230][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2699.033453][T22965] EXT4-fs (loop1): error loading journal
[ 2699.043623][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2699.065384][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2699.096221][T22963] FAULT_INJECTION: forcing a failure.
[ 2699.096221][T22963] name failslab, interval 1, probability 0, space 0, times 0
[ 2699.108683][T22963] CPU: 1 PID: 22963 Comm: syz.4.4564 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0
[ 2699.118354][T22963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2699.128342][T22963] Call Trace:
[ 2699.131586][T22963]  <TASK>
[ 2699.134374][T22963]  dump_stack_lvl+0x151/0x1b7
[ 2699.138876][T22963]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2699.144180][T22963]  ? rtnetlink_rcv_msg+0x9fc/0xca0
[ 2699.149123][T22963]  dump_stack+0x15/0x1c
[ 2699.153109][T22963]  should_fail_ex+0x3d0/0x520
[ 2699.157628][T22963]  ? __alloc_skb+0xcc/0x2d0
[ 2699.161962][T22963]  __should_failslab+0xaf/0xf0
[ 2699.166577][T22963]  should_failslab+0x9/0x20
[ 2699.170903][T22963]  kmem_cache_alloc_node+0x3e/0x2d0
[ 2699.175938][T22963]  __alloc_skb+0xcc/0x2d0
[ 2699.180103][T22963]  netlink_ack+0x392/0x12a0
[ 2699.184448][T22963]  ? avc_has_perm+0x16f/0x260
[ 2699.188955][T22963]  ? netlink_dump+0xd20/0xd20
[ 2699.193471][T22963]  ? avc_has_perm_noaudit+0x430/0x430
[ 2699.198679][T22963]  netlink_rcv_skb+0x24a/0x410
[ 2699.203368][T22963]  ? rtnetlink_bind+0x80/0x80
[ 2699.207877][T22963]  ? netlink_ack+0x12a0/0x12a0
[ 2699.212486][T22963]  ? __netlink_lookup+0x37b/0x3a0
[ 2699.217339][T22963]  rtnetlink_rcv+0x1c/0x20
[ 2699.221594][T22963]  netlink_unicast+0x906/0xab0
[ 2699.226199][T22963]  ? netlink_detachskb+0x90/0x90
[ 2699.230963][T22963]  ? security_netlink_send+0x7b/0xa0
[ 2699.236083][T22963]  netlink_sendmsg+0xa15/0xd30
[ 2699.240687][T22963]  ? netlink_getsockopt+0x540/0x540
[ 2699.245718][T22963]  ? security_socket_sendmsg+0x82/0xb0
[ 2699.251012][T22963]  ? netlink_getsockopt+0x540/0x540
[ 2699.256046][T22963]  ____sys_sendmsg+0x5d3/0x9a0
[ 2699.260646][T22963]  ? __sys_sendmsg_sock+0x40/0x40
[ 2699.265509][T22963]  __sys_sendmsg+0x2a9/0x390
[ 2699.269933][T22963]  ? ____sys_sendmsg+0x9a0/0x9a0
[ 2699.274718][T22963]  ? __kasan_check_write+0x14/0x20
[ 2699.279655][T22963]  ? fpregs_restore_userregs+0x130/0x290
[ 2699.285121][T22963]  __x64_sys_sendmsg+0x7f/0x90
[ 2699.289724][T22963]  x64_sys_call+0x16a/0x9a0
[ 2699.294059][T22963]  do_syscall_64+0x3b/0xb0
[ 2699.298313][T22963]  ? clear_bhb_loop+0x55/0xb0
[ 2699.302823][T22963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2699.308554][T22963] RIP: 0033:0x7fc4e7b7dff9
[ 2699.312807][T22963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2699.332334][T22963] RSP: 002b:00007fc4e8a1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2699.340579][T22963] RAX: ffffffffffffffda RBX: 00007fc4e7d36130 RCX: 00007fc4e7b7dff9
[ 2699.348389][T22963] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005
[ 2699.356200][T22963] RBP: 00007fc4e8a1b090 R08: 0000000000000000 R09: 0000000000000000
[ 2699.364019][T22963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2699.371827][T22963] R13: 0000000000000000 R14: 00007fc4e7d36130 R15: 00007ffdbddf9b98
[ 2699.379644][T22963]  </TASK>
[ 2699.469143][    T8] device bridge_slave_1 left promiscuous mode
[ 2699.475103][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2699.502892][    T8] device bridge_slave_0 left promiscuous mode
[ 2699.518594][T22968] loop4: detected capacity change from 0 to 4096
[ 2699.525950][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2699.548519][T22968] /dev/loop4: Can't open blockdev
[ 2699.556869][    T8] device veth1_macvtap left promiscuous mode
[ 2699.567054][    T8] device veth0_vlan left promiscuous mode
[ 2699.760377][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2699.779881][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2699.813205][T22969] loop4: detected capacity change from 0 to 1024
[ 2699.819697][T22969] /dev/loop4: Can't open blockdev
[ 2700.319321][T22972] loop1: detected capacity change from 0 to 512
[ 2700.345669][T22972] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 2700.368523][T22972] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 2700.428611][T22972] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 2700.436418][T22972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002]
[ 2700.456755][T22972] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80)
[ 2700.487561][T22973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2700.494491][T22972] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[ 2700.508127][T22973] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2700.518751][T22972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 2700.537541][T22973] device bridge_slave_0 entered promiscuous mode
[ 2700.558451][T22973] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2700.565309][T22973] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2700.578763][T22520] EXT4-fs (loop1): unmounting filesystem.
[ 2700.595127][T22973] device bridge_slave_1 entered promiscuous mode
[ 2700.727736][T22973] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2700.734616][T22973] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2700.741727][T22973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2700.748494][T22973] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2700.789335][T15632] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2700.798824][T15632] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2700.842188][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2700.849914][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2700.868286][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2700.886713][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2700.906668][T15632] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2700.913535][T15632] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2700.938251][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2700.956684][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2700.964913][T15632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2700.971771][T15632] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2700.998366][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2701.016379][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2701.026438][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2701.039186][T22774] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2701.059003][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2701.120523][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2701.132947][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2702.038310][  T313] usbhid 2-1:0.0: can't add hid device: -71
[ 2702.044084][  T313] usbhid: probe of 2-1:0.0 failed with error -71
[ 2702.084105][  T313] usb 2-1: USB disconnect, device number 38
[ 2702.516030][T22973] device veth0_vlan entered promiscuous mode
[ 2702.526388][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2702.538544][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2702.577395][T22973] device veth1_macvtap entered promiscuous mode
[ 2702.712333][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2702.953974][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2703.278091][T22984] loop4: detected capacity change from 0 to 40427
[ 2703.318177][  T313] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2703.575073][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2703.583463][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2703.591470][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2703.699571][   T43] device bridge_slave_1 left promiscuous mode
[ 2703.738857][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2703.766011][   T43] device bridge_slave_0 left promiscuous mode
[ 2703.775237][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2704.148248][  T292] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 2704.242893][   T43] device veth1_macvtap left promiscuous mode
[ 2704.263160][   T43] device veth0_vlan left promiscuous mode
[ 2704.348189][  T313] usb 2-1: device descriptor read/all, error -71
[ 2704.412024][   T28] audit: type=1400 audit(1727624156.320:682): avc:  denied  { write } for  pid=23004 comm="syz.1.4576" path="socket:[174447]" dev="sockfs" ino=174447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 2704.446631][   T28] audit: type=1400 audit(1727624156.340:683): avc:  denied  { nlmsg_read } for  pid=23004 comm="syz.1.4576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 2704.578573][  T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2704.610137][  T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2704.659871][  T292] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00
[ 2704.678187][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2704.692781][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2704.732949][  T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2704.748779][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2704.784321][  T292] usb 1-1: config 0 descriptor??
[ 2704.799879][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2704.875600][T23010] loop2: detected capacity change from 0 to 512
[ 2704.929485][T23010] EXT4-fs: Mount option(s) incompatible with ext2
[ 2705.208238][T20434] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 2707.354586][   T28] audit: type=1400 audit(1727624159.260:684): avc:  denied  { getopt } for  pid=22990 comm="syz.0.4574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2709.148224][T20434] usb 5-1: device descriptor read/all, error -71
[ 2709.154463][  T292] usbhid 1-1:0.0: can't add hid device: -71
[ 2710.265287][T23028] loop1: detected capacity change from 0 to 40427
[ 2710.916307][   T28] audit: type=1400 audit(1727624161.620:685): avc:  denied  { nlmsg_write } for  pid=23021 comm="syz.1.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 2710.937064][T23028] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 2710.937095][T23028] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2710.938871][T23028] F2FS-fs (loop1): invalid crc value
[ 2710.986984][  T292] usbhid: probe of 1-1:0.0 failed with error -71
[ 2711.143059][  T292] usb 1-1: USB disconnect, device number 38
[ 2713.038394][T23028] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[ 2717.226097][   T28] audit: type=1400 audit(1727624167.190:686): avc:  denied  { bind } for  pid=23055 comm="syz.2.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2717.245764][   T28] audit: type=1400 audit(1727624167.360:687): avc:  denied  { setopt } for  pid=23055 comm="syz.2.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2717.295966][   T28] audit: type=1400 audit(1727624167.380:688): avc:  denied  { write } for  pid=23055 comm="syz.2.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2717.316158][   T28] audit: type=1400 audit(1727624168.050:689): avc:  denied  { connect } for  pid=23058 comm="syz.0.4589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2717.424075][   T28] audit: type=1400 audit(1727624168.050:690): avc:  denied  { write } for  pid=23058 comm="syz.0.4589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2717.682087][T23085] FAULT_INJECTION: forcing a failure.
[ 2717.682087][T23085] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2717.695055][T23085] CPU: 1 PID: 23085 Comm: syz.4.4592 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0
[ 2717.704657][T23085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2717.714550][T23085] Call Trace:
[ 2717.717675][T23085]  <TASK>
[ 2717.720472][T23085]  dump_stack_lvl+0x151/0x1b7
[ 2717.724965][T23085]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2717.730260][T23085]  ? __kasan_check_write+0x14/0x20
[ 2717.735207][T23085]  ? kstrtouint_from_user+0x124/0x180
[ 2717.740416][T23085]  dump_stack+0x15/0x1c
[ 2717.744410][T23085]  should_fail_ex+0x3d0/0x520
[ 2717.748920][T23085]  should_fail+0xb/0x10
[ 2717.752915][T23085]  should_fail_usercopy+0x1a/0x20
[ 2717.757772][T23085]  _copy_from_user+0x1e/0xc0
[ 2717.762204][T23085]  iovec_from_user+0xc7/0x320
[ 2717.766716][T23085]  ? selinux_file_permission+0x2bb/0x560
[ 2717.772272][T23085]  __import_iovec+0x70/0x430
[ 2717.776694][T23085]  ? __fget_files+0x2cb/0x330
[ 2717.781208][T23085]  import_iovec+0xe5/0x120
[ 2717.785462][T23085]  do_readv+0x237/0x460
[ 2717.789453][T23085]  ? generic_file_rw_checks+0x270/0x270
[ 2717.794834][T23085]  ? fput+0x15b/0x1b0
[ 2717.798650][T23085]  ? ksys_write+0x260/0x2c0
[ 2717.802996][T23085]  ? debug_smp_processor_id+0x17/0x20
[ 2717.808199][T23085]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 2717.814101][T23085]  __x64_sys_readv+0x7d/0x90
[ 2717.818527][T23085]  x64_sys_call+0xad/0x9a0
[ 2717.822778][T23085]  do_syscall_64+0x3b/0xb0
[ 2717.827029][T23085]  ? clear_bhb_loop+0x55/0xb0
[ 2717.831544][T23085]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2717.837273][T23085] RIP: 0033:0x7fc4e7b7dff9
[ 2717.841528][T23085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2717.861054][T23085] RSP: 002b:00007fc4e8a1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 2717.869298][T23085] RAX: ffffffffffffffda RBX: 00007fc4e7d36130 RCX: 00007fc4e7b7dff9
[ 2717.877108][T23085] RDX: 0000000000000001 RSI: 00000000200018c0 RDI: 0000000000000008
[ 2717.884925][T23085] RBP: 00007fc4e8a1b090 R08: 0000000000000000 R09: 0000000000000000
[ 2717.892733][T23085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2717.900543][T23085] R13: 0000000000000000 R14: 00007fc4e7d36130 R15: 00007ffdbddf9b98
[ 2717.908363][T23085]  </TASK>
[ 2718.351341][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.372400][T23089] loop1: detected capacity change from 0 to 16
[ 2718.382577][   T28] audit: type=1400 audit(1727624169.480:691): avc:  denied  { read write } for  pid=23074 comm="syz.2.4590" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 2718.418458][T23089] erofs: Unknown parameter '����0xffffffffffffffff0177777777777777777777718446744073709551615�����������������K��D����\�l3����<��5���ԉr$B�kaF�3v0�̡A�2ͳ�v~*���44��I��P��g"���6��'
[ 2718.451140][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.466557][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.479932][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.504277][   T28] audit: type=1400 audit(1727624169.480:692): avc:  denied  { open } for  pid=23074 comm="syz.2.4590" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 2718.544279][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.565500][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.574073][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.684686][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.692038][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.703452][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.710729][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2718.717986][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.079022][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.086425][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.094200][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.107646][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.114945][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.287981][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.295808][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.303023][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.310244][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.317409][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.324661][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.335992][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.349701][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.387508][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.413415][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.450078][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.474515][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.501389][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.534948][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.562612][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.582739][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.602801][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.643262][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.673518][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.703763][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.734024][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.764267][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.794494][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.823146][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.850656][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2720.938189][T13910] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 2721.579727][T23115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4597'.
[ 2721.730746][T23117] loop3: detected capacity change from 0 to 512
[ 2721.758090][T23117] EXT4-fs: Mount option(s) incompatible with ext2
[ 2721.826160][T13910] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 2725.194988][T23127] loop2: detected capacity change from 0 to 512
[ 2725.202405][T23125] loop4: detected capacity change from 0 to 2048
[ 2725.235521][T23125] /dev/loop4: Can't open blockdev
[ 2725.263940][T23127] EXT4-fs: Mount option(s) incompatible with ext2
[ 2725.781813][T23125] loop4: detected capacity change from 0 to 40427
[ 2726.111781][T23131] loop1: detected capacity change from 0 to 16
[ 2727.048487][T23131] erofs: Unknown parameter '����0xffffffffffffffff0177777777777777777777718446744073709551615�����������������K��D����\�l3����<��5���ԉr$B�kaF�3v0�̡A�2ͳ�v~*���44��I��P��g"���6��'
[ 2727.084497][   T28] audit: type=1400 audit(1727624178.990:693): avc:  denied  { append } for  pid=23135 comm="syz.4.4607" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 2727.410125][T22773] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2728.941244][T23163] tipc: Started in network mode
[ 2728.946344][T23163] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[ 2728.957538][T23163] tipc: Enabled bearer <udp:s>, priority 10
[ 2729.400329][T23173] loop4: detected capacity change from 0 to 1024
[ 2729.406777][T23173] EXT4-fs: Ignoring removed orlov option
[ 2729.412332][T23173] /dev/loop4: Can't open blockdev
[ 2730.907299][T22774] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2730.981914][T20434] tipc: Node number set to 4269801642
[ 2731.519427][   T28] audit: type=1400 audit(1727624183.400:694): avc:  denied  { write } for  pid=23174 comm="syz.1.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2731.958144][T20434] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 2732.058172][T13910] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 2732.378167][T13910] usb 1-1: device descriptor read/64, error -71
[ 2732.384448][T20434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2732.400568][T20434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2732.420367][T20434] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2732.438980][T20434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2732.459023][T20434] usb 4-1: config 0 descriptor??
[ 2732.858159][T13910] usb 1-1: device descriptor read/64, error -71
[ 2733.006291][T23195] loop3: detected capacity change from 0 to 1024
[ 2733.040496][T23195] JBD2: no valid journal superblock found
[ 2733.052824][T23195] EXT4-fs (loop3): error loading journal
[ 2733.148199][T13910] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 2733.368171][T20434] usbhid 4-1:0.0: can't add hid device: -71
[ 2733.374037][T20434] usbhid: probe of 4-1:0.0 failed with error -71
[ 2733.391468][T20434] usb 4-1: USB disconnect, device number 18
[ 2733.458184][T13910] usb 1-1: device descriptor read/64, error -71
[ 2733.948229][T13910] usb 1-1: device descriptor read/64, error -71
[ 2733.989135][ T5606] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 2733.989196][  T533] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 2734.101139][T13910] usb usb1-port1: attempt power cycle
[ 2734.238260][  T533] usb 5-1: Using ep0 maxpacket: 8
[ 2734.359180][  T533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2734.392011][  T533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2734.395890][T23203] loop2: detected capacity change from 0 to 512
[ 2734.424180][  T533] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 2734.433902][T23203] EXT4-fs: Mount option(s) incompatible with ext2
[ 2734.440859][  T533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2734.467551][  T533] usb 5-1: config 0 descriptor??
[ 2734.578864][T13910] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 2734.864913][T23205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4624'.
[ 2734.876665][T23207] FAULT_INJECTION: forcing a failure.
[ 2734.876665][T23207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2735.738836][T23211] loop3: detected capacity change from 0 to 2048
[ 2735.752577][T23207] CPU: 1 PID: 23207 Comm: syz.4.4623 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0
[ 2735.762217][T23207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2735.772199][T23207] Call Trace:
[ 2735.775324][T23207]  <TASK>
[ 2735.778100][T23207]  dump_stack_lvl+0x151/0x1b7
[ 2735.782628][T23207]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2735.787910][T23207]  dump_stack+0x15/0x1c
[ 2735.791900][T23207]  should_fail_ex+0x3d0/0x520
[ 2735.796414][T23207]  should_fail+0xb/0x10
[ 2735.800403][T23207]  should_fail_usercopy+0x1a/0x20
[ 2735.805274][T23207]  _copy_from_user+0x1e/0xc0
[ 2735.809690][T23207]  __se_sys_memfd_create+0x131/0x3e0
[ 2735.814811][T23207]  __x64_sys_memfd_create+0x5b/0x70
[ 2735.819845][T23207]  x64_sys_call+0x871/0x9a0
[ 2735.824195][T23207]  do_syscall_64+0x3b/0xb0
[ 2735.828443][T23207]  ? clear_bhb_loop+0x55/0xb0
[ 2735.832960][T23207]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2735.838682][T23207] RIP: 0033:0x7fc4e7b7dff9
[ 2735.842934][T23207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2735.862475][T23207] RSP: 002b:00007fc4e8a5ce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[ 2735.870715][T23207] RAX: ffffffffffffffda RBX: 00000000000004d2 RCX: 00007fc4e7b7dff9
[ 2735.878527][T23207] RDX: 00007fc4e8a5cef0 RSI: 0000000000000000 RDI: 00007fc4e7bf0b02
[ 2735.886337][T23207] RBP: 00000000200002c0 R08: 00007fc4e8a5cbb7 R09: 00007fc4e8a5ce40
[ 2735.894150][T23207] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000140
[ 2735.901961][T23207] R13: 00007fc4e8a5cef0 R14: 00007fc4e8a5ceb0 R15: 00000000200007c0
[ 2735.909781][T23207]  </TASK>
[ 2736.029324][T23214] loop2: detected capacity change from 0 to 16
[ 2736.039005][T23214] erofs: Unknown parameter '����0xffffffffffffffff0177777777777777777777718446744073709551615�����������������K��D����\�l3����<��5���ԉr$B�kaF�3v0�̡A�2ͳ�v~*���44��I��P��g"���6��'
[ 2736.048666][T23211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 2736.078208][  T533] usbhid 5-1:0.0: can't add hid device: -71
[ 2736.083981][  T533] usbhid: probe of 5-1:0.0 failed with error -71
[ 2736.768384][T23218] syz.4.4623[23218] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2736.768458][T23218] syz.4.4623[23218] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2736.885569][T23205] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 2736.938348][T13910] usb 1-1: device descriptor read/8, error -71
[ 2737.029634][T23223] loop4: detected capacity change from 0 to 1024
[ 2737.039448][  T533] usb 5-1: USB disconnect, device number 50
[ 2737.046611][T23205] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[ 2737.058780][T23205] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 2737.058780][T23205] 
[ 2737.068173][T23205] EXT4-fs (loop3): Total free blocks count 0
[ 2737.073953][T23205] EXT4-fs (loop3): Free/Dirty block details
[ 2737.076724][T23223] EXT4-fs: Ignoring removed orlov option
[ 2737.079725][T23205] EXT4-fs (loop3): free_blocks=2415919104
[ 2737.079743][T23205] EXT4-fs (loop3): dirty_blocks=16
[ 2737.079754][T23205] EXT4-fs (loop3): Block reservation details
[ 2737.104509][T23223] /dev/loop4: Can't open blockdev
[ 2737.160378][   T28] audit: type=1400 audit(1727624189.070:695): avc:  denied  { ioctl } for  pid=23204 comm="syz.3.4624" path="/14/file0/file1" dev="loop3" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2737.195258][T23205] EXT4-fs (loop3): i_reserved_data_blocks=1
[ 2737.305545][   T28] audit: type=1400 audit(1727624189.210:696): avc:  denied  { bind } for  pid=23204 comm="syz.3.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2737.329645][T23223] loop4: detected capacity change from 0 to 512
[ 2737.342524][T23223] EXT4-fs: Ignoring removed oldalloc option
[ 2738.261850][T23223] /dev/loop4: Can't open blockdev
[ 2738.349451][   T28] audit: type=1400 audit(1727624190.260:697): avc:  denied  { create } for  pid=23221 comm="syz.4.4626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 2738.373547][T13910] usb 1-1: device descriptor read/8, error -71
[ 2738.598643][    T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 2738.678168][T13910] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 2738.838201][T13910] usb 1-1: device descriptor read/8, error -71
[ 2739.088161][T13910] usb 1-1: device descriptor read/8, error -71
[ 2739.212565][T13910] usb usb1-port1: unable to enumerate USB device
[ 2740.079069][   T28] audit: type=1400 audit(1727624191.990:698): avc:  denied  { bind } for  pid=23236 comm="syz.4.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 2740.210571][T23244] loop3: detected capacity change from 0 to 40427
[ 2740.218883][T23244] F2FS-fs (loop3): invalid crc value
[ 2740.270354][T23244] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2740.313206][T23244] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2740.364984][   T28] audit: type=1400 audit(1727624192.270:699): avc:  denied  { ioctl } for  pid=23243 comm="syz.3.4629" path="/15/file2/file1" dev="loop3" ino=10 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 2742.158343][T22921] syz-executor: attempt to access beyond end of device
[ 2742.158343][T22921] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 2743.187874][T23272] loop3: detected capacity change from 0 to 512
[ 2743.209956][T23272] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[ 2743.260145][T23266] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2743.270958][T23272] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.4636: iget: bad i_size value: -67835469387268086
[ 2743.288603][T23266] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2743.300051][T23272] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4636: couldn't read orphan inode 15 (err -117)
[ 2743.315446][T23266] device bridge_slave_0 entered promiscuous mode
[ 2743.329603][T23267] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2743.337549][T23267] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2743.345881][T23272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 2743.361046][T23267] device bridge_slave_0 entered promiscuous mode
[ 2743.369475][T23272] ext2 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff)
[ 2743.628199][T23266] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2743.636166][T23266] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2743.650909][T23266] device bridge_slave_1 entered promiscuous mode
[ 2744.528178][   T28] audit: type=1400 audit(1727624196.410:700): avc:  denied  { write } for  pid=23271 comm="syz.3.4636" name="/" dev="incremental-fs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2744.589528][   T28] audit: type=1400 audit(1727624196.410:701): avc:  denied  { remove_name } for  pid=23271 comm="syz.3.4636" name="file0" dev="incremental-fs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2744.658527][T22921] EXT4-fs (loop3): unmounting filesystem.
[ 2744.691405][   T28] audit: type=1400 audit(1727624196.410:702): avc:  denied  { unlink } for  pid=23271 comm="syz.3.4636" name="file0" dev="incremental-fs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2744.745723][T23266] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2744.752627][T23266] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2744.759725][T23266] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2744.766629][T23266] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2744.884281][T23266] device veth0_vlan entered promiscuous mode
[ 2744.912098][T23266] device veth1_macvtap entered promiscuous mode
[ 2745.655919][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2745.674762][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2745.693188][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2745.711386][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2747.973038][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2747.995819][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2748.003869][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2748.011819][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2748.020200][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2748.027957][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2748.038493][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2748.068602][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2748.076778][T23267] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2748.089772][T23267] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2748.107204][T23267] device bridge_slave_1 entered promiscuous mode
[ 2749.394590][T23267] device veth0_vlan entered promiscuous mode
[ 2749.400598][T10720] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 2749.429785][T23267] device veth1_macvtap entered promiscuous mode
[ 2749.652875][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2749.670908][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2749.699876][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2749.708351][T10720] usb 4-1: Using ep0 maxpacket: 16
[ 2749.725309][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2749.742792][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2749.760378][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2749.777408][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2749.792920][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2749.807843][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2749.825222][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2749.833991][T10720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2749.850166][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2749.857887][T10720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2749.872107][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2749.880992][T10720] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2749.897609][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2749.908707][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2749.915573][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2749.923936][T10720] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2749.933173][T10720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2749.943353][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2749.998711][T10720] usb 4-1: config 0 descriptor??
[ 2750.031027][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2750.075611][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2750.082512][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2750.839044][T19605] device bridge_slave_1 left promiscuous mode
[ 2750.846617][T19605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2750.877344][T19605] device bridge_slave_0 left promiscuous mode
[ 2750.902579][T19605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2750.909820][T13910] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2750.943367][T19605] device dummy0 left promiscuous mode
[ 2750.965277][T19605] device veth1_macvtap left promiscuous mode
[ 2750.990208][T19605] device veth0_vlan left promiscuous mode
[ 2751.227909][T23313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2751.249646][T23313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2751.318727][T13910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2751.340217][T13910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2751.370000][T13910] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 2751.398154][T13910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2751.426403][T13910] usb 2-1: config 0 descriptor??
[ 2752.942314][T23320] loop1: detected capacity change from 0 to 1024
[ 2753.069126][T10720] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[ 2753.076234][T10720] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[ 2753.083306][  T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2753.083574][T23320] JBD2: no valid journal superblock found
[ 2753.198551][T23320] EXT4-fs (loop1): error loading journal
[ 2754.789340][   T28] audit: type=1400 audit(1727624206.700:703): avc:  denied  { remount } for  pid=23323 comm="syz.0.4646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 2755.039042][T10720] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[ 2755.046444][T10720] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[ 2755.053551][T10720] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[ 2755.060953][T10720] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[ 2755.067947][T10720] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[ 2755.075001][T10720] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[ 2755.084254][T10720] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0019/input/input52
[ 2755.314159][T23326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2755.338397][T23326] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2755.345707][T23326] device bridge_slave_0 entered promiscuous mode
[ 2755.384188][T23325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2755.406837][T23325] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2755.431188][T23325] device bridge_slave_0 entered promiscuous mode
[ 2755.437839][T23326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2755.448163][T23326] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2755.455444][T23326] device bridge_slave_1 entered promiscuous mode
[ 2755.474692][T23325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2755.482720][T23325] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2755.503330][T23325] device bridge_slave_1 entered promiscuous mode
[ 2755.620360][T19605] device bridge_slave_1 left promiscuous mode
[ 2755.626898][T19605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2755.647008][T19605] device bridge_slave_0 left promiscuous mode
[ 2755.656735][T19605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2755.677827][T19605] device veth1_macvtap left promiscuous mode
[ 2755.687129][T19605] device veth0_vlan left promiscuous mode
[ 2755.738207][  T292] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 2755.888877][T23326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2755.895779][T23326] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2755.902889][T23326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2755.909640][T23326] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2755.951966][T23325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2755.959030][T23325] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2755.966101][T23325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2755.972907][T23325] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2756.038629][  T292] usb 1-1: Using ep0 maxpacket: 8
[ 2756.056972][T10720] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[ 2756.076831][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2756.120112][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2756.151644][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2756.159795][T13910] usbhid 2-1:0.0: can't add hid device: -71
[ 2756.165537][T13910] usbhid: probe of 2-1:0.0 failed with error -71
[ 2756.178233][  T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2756.210410][T13910] usb 2-1: USB disconnect, device number 41
[ 2756.217398][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2756.225601][  T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2756.266268][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2756.274619][  T292] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[ 2756.294029][T20434] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2756.303707][  T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2756.337149][  T292] usb 1-1: config 0 descriptor??
[ 2756.601710][T23344] loop1: detected capacity change from 0 to 40427
[ 2756.628646][T23344] F2FS-fs (loop1): invalid crc value
[ 2756.649130][T23344] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2756.728310][T23344] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 2756.883148][T23344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4649'.
[ 2757.042062][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2757.050373][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2757.058598][T19250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2757.065550][T19250] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2757.103201][T20434] usb 4-1: USB disconnect, device number 19
[ 2757.127551][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2757.152168][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2757.250669][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2757.275307][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2757.567762][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2757.598504][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2757.622998][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2757.648561][T19250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2757.712755][T23325] device veth0_vlan entered promiscuous mode
[ 2757.824068][T23325] device veth1_macvtap entered promiscuous mode
[ 2757.834777][T23326] device veth0_vlan entered promiscuous mode
[ 2757.847790][T23326] device veth1_macvtap entered promiscuous mode
[ 2758.807417][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2758.846789][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2758.868229][  T292] usbhid 1-1:0.0: can't add hid device: -71
[ 2758.874354][  T292] usbhid: probe of 1-1:0.0 failed with error -71
[ 2760.039417][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2760.047635][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2760.079459][  T292] usb 1-1: USB disconnect, device number 43
[ 2761.043868][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2761.053760][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2761.061955][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2761.070113][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2761.070816][T23377] FAULT_INJECTION: forcing a failure.
[ 2761.070816][T23377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2761.078057][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2761.110965][T23377] CPU: 0 PID: 23377 Comm: syz.0.4656 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0
[ 2761.120591][T23377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2761.130484][T23377] Call Trace:
[ 2761.133608][T23377]  <TASK>
[ 2761.136387][T23377]  dump_stack_lvl+0x151/0x1b7
[ 2761.140901][T23377]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2761.146193][T23377]  ? bpf_test_run+0x912/0xa40
[ 2761.150706][T23377]  dump_stack+0x15/0x1c
[ 2761.154696][T23377]  should_fail_ex+0x3d0/0x520
[ 2761.159214][T23377]  should_fail+0xb/0x10
[ 2761.163204][T23377]  should_fail_usercopy+0x1a/0x20
[ 2761.168063][T23377]  _copy_to_user+0x1e/0x90
[ 2761.172316][T23377]  bpf_test_finish+0x22c/0x950
[ 2761.176920][T23377]  ? convert_skb_to___skb+0x4f0/0x4f0
[ 2761.182125][T23377]  ? convert_skb_to___skb+0x2da/0x4f0
[ 2761.187332][T23377]  bpf_prog_test_run_skb+0xcfd/0x13a0
[ 2761.192546][T23377]  ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0
[ 2761.198267][T23377]  ? __kasan_check_write+0x14/0x20
[ 2761.203213][T23377]  ? fput+0x15b/0x1b0
[ 2761.207036][T23377]  ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0
[ 2761.212762][T23377]  bpf_prog_test_run+0x3b0/0x630
[ 2761.217535][T23377]  ? bpf_prog_query+0x260/0x260
[ 2761.222222][T23377]  ? selinux_bpf+0xd2/0x100
[ 2761.226565][T23377]  ? security_bpf+0x82/0xb0
[ 2761.230901][T23377]  __sys_bpf+0x59f/0x7f0
[ 2761.234986][T23377]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[ 2761.240193][T23377]  ? __ia32_sys_read+0x90/0x90
[ 2761.244790][T23377]  ? debug_smp_processor_id+0x17/0x20
[ 2761.249995][T23377]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 2761.255906][T23377]  __x64_sys_bpf+0x7c/0x90
[ 2761.260151][T23377]  x64_sys_call+0x87f/0x9a0
[ 2761.264491][T23377]  do_syscall_64+0x3b/0xb0
[ 2761.268748][T23377]  ? clear_bhb_loop+0x55/0xb0
[ 2761.273265][T23377]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2761.278989][T23377] RIP: 0033:0x7f9ae397dff9
[ 2761.283237][T23377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2761.302679][T23377] RSP: 002b:00007f9ae483e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2761.310922][T23377] RAX: ffffffffffffffda RBX: 00007f9ae3b35f80 RCX: 00007f9ae397dff9
[ 2761.318734][T23377] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a
[ 2761.326550][T23377] RBP: 00007f9ae483e090 R08: 0000000000000000 R09: 0000000000000000
[ 2761.334361][T23377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2761.342164][T23377] R13: 0000000000000000 R14: 00007f9ae3b35f80 R15: 00007fffe097a6b8
[ 2761.349987][T23377]  </TASK>
[ 2761.875952][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2761.899008][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2761.906913][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2761.915292][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2762.304650][T23387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4658'.
[ 2762.450263][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2762.457744][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2762.465827][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2762.473957][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2762.482240][T15632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2762.492775][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2762.500212][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2762.507436][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2762.514717][T20434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2762.549844][T19605] tipc: Disabling bearer <udp:s>
[ 2762.554748][T19605] tipc: Left network mode
[ 2763.182845][T19605] device bridge_slave_1 left promiscuous mode
[ 2763.195680][T19605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2763.208540][T19605] device bridge_slave_0 left promiscuous mode
[ 2763.214488][T19605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2763.239091][T19605] device bridge_slave_1 left promiscuous mode
[ 2763.245021][T19605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2763.268512][T19605] device bridge_slave_0 left promiscuous mode
[ 2763.274445][T19605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2763.292994][T19605] device veth1_macvtap left promiscuous mode
[ 2763.308277][T19605] device veth0_vlan left promiscuous mode
[ 2763.318507][T19605] device veth1_macvtap left promiscuous mode
[ 2763.328295][T19605] device veth0_vlan left promiscuous mode
[ 2763.447045][T23394] loop1: detected capacity change from 0 to 16
[ 2763.519121][T23394] erofs: (device loop1): mounted with root inode @ nid 36.
[ 2765.042477][T20434] ==================================================================
[ 2765.050373][T20434] BUG: KASAN: use-after-free in __dev_get_by_index+0x3d/0x110
[ 2765.057744][T20434] Read of size 8 at addr ffff8881008bea68 by task kworker/1:7/20434
[ 2765.065557][T20434] 
[ 2765.067724][T20434] CPU: 1 PID: 20434 Comm: kworker/1:7 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0
[ 2765.077465][T20434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2765.087341][T20434] Workqueue: events cleanup_bearer
[ 2765.092284][T20434] Call Trace:
[ 2765.095410][T20434]  <TASK>
[ 2765.098189][T20434]  dump_stack_lvl+0x151/0x1b7
[ 2765.102704][T20434]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2765.107998][T20434]  ? _printk+0xd1/0x111
[ 2765.112072][T20434]  ? __virt_addr_valid+0x242/0x2f0
[ 2765.117020][T20434]  print_report+0x158/0x4e0
[ 2765.121362][T20434]  ? __virt_addr_valid+0x242/0x2f0
[ 2765.126309][T20434]  ? kasan_complete_mode_report_info+0x90/0x1b0
[ 2765.132384][T20434]  ? __dev_get_by_index+0x3d/0x110
[ 2765.137329][T20434]  kasan_report+0x13c/0x170
[ 2765.141669][T20434]  ? __dev_get_by_index+0x3d/0x110
[ 2765.146618][T20434]  __asan_report_load8_noabort+0x14/0x20
[ 2765.152083][T20434]  __dev_get_by_index+0x3d/0x110
[ 2765.156858][T20434]  __ipv6_sock_mc_close+0x1a0/0x3b0
[ 2765.161894][T20434]  ipv6_sock_mc_close+0xe0/0x140
[ 2765.166664][T20434]  inet6_release+0x47/0x70
[ 2765.170923][T20434]  sock_release+0x7e/0x140
[ 2765.175172][T20434]  udp_tunnel_sock_release+0x76/0x80
[ 2765.180293][T20434]  cleanup_bearer+0x2b1/0x300
[ 2765.184806][T20434]  process_one_work+0x73d/0xcb0
[ 2765.189494][T20434]  worker_thread+0xa60/0x1260
[ 2765.194016][T20434]  kthread+0x26d/0x300
[ 2765.197909][T20434]  ? worker_clr_flags+0x1a0/0x1a0
[ 2765.202772][T20434]  ? kthread_blkcg+0xd0/0xd0
[ 2765.207199][T20434]  ret_from_fork+0x1f/0x30
[ 2765.211453][T20434]  </TASK>
[ 2765.214312][T20434] 
[ 2765.216484][T20434] Allocated by task 22938:
[ 2765.220737][T20434]  kasan_set_track+0x4b/0x70
[ 2765.225163][T20434]  kasan_save_alloc_info+0x1f/0x30
[ 2765.230110][T20434]  __kasan_slab_alloc+0x6c/0x80
[ 2765.234794][T20434]  slab_post_alloc_hook+0x53/0x2c0
[ 2765.239743][T20434]  kmem_cache_alloc+0x175/0x2c0
[ 2765.244429][T20434]  copy_net_ns+0x144/0x5b0
[ 2765.248684][T20434]  create_new_namespaces+0x416/0x670
[ 2765.253802][T20434]  unshare_nsproxy_namespaces+0x126/0x180
[ 2765.259360][T20434]  ksys_unshare+0x542/0xa00
[ 2765.263697][T20434]  __x64_sys_unshare+0x38/0x40
[ 2765.268296][T20434]  x64_sys_call+0x728/0x9a0
[ 2765.272636][T20434]  do_syscall_64+0x3b/0xb0
[ 2765.276888][T20434]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2765.282620][T20434] 
[ 2765.284788][T20434] Freed by task 19605:
[ 2765.288693][T20434]  kasan_set_track+0x4b/0x70
[ 2765.293119][T20434]  kasan_save_free_info+0x2b/0x40
[ 2765.297980][T20434]  ____kasan_slab_free+0x131/0x180
[ 2765.302935][T20434]  __kasan_slab_free+0x11/0x20
[ 2765.307540][T20434]  kmem_cache_free+0x291/0x510
[ 2765.312128][T20434]  cleanup_net+0xb4c/0xbf0
[ 2765.316379][T20434]  process_one_work+0x73d/0xcb0
[ 2765.321065][T20434]  worker_thread+0xa60/0x1260
[ 2765.325579][T20434]  kthread+0x26d/0x300
[ 2765.329486][T20434]  ret_from_fork+0x1f/0x30
[ 2765.333737][T20434] 
[ 2765.335907][T20434] The buggy address belongs to the object at ffff8881008be900
[ 2765.335907][T20434]  which belongs to the cache net_namespace of size 4224
[ 2765.350151][T20434] The buggy address is located 360 bytes inside of
[ 2765.350151][T20434]  4224-byte region [ffff8881008be900, ffff8881008bf980)
[ 2765.363333][T20434] 
[ 2765.365594][T20434] The buggy address belongs to the physical page:
[ 2765.371858][T20434] page:ffffea0004022e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1008b8
[ 2765.381907][T20434] head:ffffea0004022e00 order:3 compound_mapcount:0 compound_pincount:0
[ 2765.390065][T20434] flags: 0x4000000000010200(slab|head|zone=1)
[ 2765.395975][T20434] raw: 4000000000010200 ffffea0004b3c600 dead000000000002 ffff8881002b2000
[ 2765.404396][T20434] raw: 0000000000000000 0000000080070007 00000001ffffffff 0000000000000000
[ 2765.412808][T20434] page dumped because: kasan: bad access detected
[ 2765.419063][T20434] page_owner tracks the page as allocated
[ 2765.424607][T20434] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8302, tgid 8302 (syz-executor), ts 614111604347, free_ts 613853175633
[ 2765.447351][T20434]  post_alloc_hook+0x213/0x220
[ 2765.451955][T20434]  prep_new_page+0x1b/0x110
[ 2765.456284][T20434]  get_page_from_freelist+0x27ea/0x2870
[ 2765.461667][T20434]  __alloc_pages+0x3a1/0x780
[ 2765.466100][T20434]  alloc_slab_page+0x6c/0xf0
[ 2765.470521][T20434]  new_slab+0x90/0x3e0
[ 2765.474424][T20434]  ___slab_alloc+0x6f9/0xb80
[ 2765.478852][T20434]  __slab_alloc+0x5d/0xa0
[ 2765.483018][T20434]  kmem_cache_alloc+0x1b9/0x2c0
[ 2765.487704][T20434]  copy_net_ns+0x144/0x5b0
[ 2765.491958][T20434]  create_new_namespaces+0x416/0x670
[ 2765.497078][T20434]  unshare_nsproxy_namespaces+0x126/0x180
[ 2765.502638][T20434]  ksys_unshare+0x542/0xa00
[ 2765.506972][T20434]  __x64_sys_unshare+0x38/0x40
[ 2765.511574][T20434]  x64_sys_call+0x728/0x9a0
[ 2765.515912][T20434]  do_syscall_64+0x3b/0xb0
[ 2765.520167][T20434] page last free stack trace:
[ 2765.524677][T20434]  free_unref_page_prepare+0x83d/0x850
[ 2765.529973][T20434]  free_unref_page+0xb2/0x5c0
[ 2765.534485][T20434]  __free_pages+0x61/0xf0
[ 2765.538651][T20434]  __free_slab+0xce/0x1a0
[ 2765.542825][T20434]  __unfreeze_partials+0x165/0x1a0
[ 2765.547765][T20434]  put_cpu_partial+0xa9/0x100
[ 2765.552277][T20434]  __slab_free+0x1c8/0x280
[ 2765.556531][T20434]  ___cache_free+0xc6/0xd0
[ 2765.560783][T20434]  qlist_free_all+0xc5/0x140
[ 2765.565232][T20434]  kasan_quarantine_reduce+0x15a/0x180
[ 2765.570503][T20434]  __kasan_slab_alloc+0x24/0x80
[ 2765.575188][T20434]  slab_post_alloc_hook+0x53/0x2c0
[ 2765.580140][T20434]  kmem_cache_alloc_node+0x18a/0x2d0
[ 2765.585258][T20434]  __alloc_skb+0xcc/0x2d0
[ 2765.589426][T20434]  inet_netconf_notify_devconf+0x173/0x230
[ 2765.595065][T20434]  inetdev_event+0x823/0x1110
[ 2765.599579][T20434] 
[ 2765.602281][T20434] Memory state around the buggy address:
[ 2765.607742][T20434]  ffff8881008be900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2765.615638][T20434]  ffff8881008be980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2765.623537][T20434] >ffff8881008bea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2765.631440][T20434]                                                           ^
[ 2765.638725][T20434]  ffff8881008bea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2765.646622][T20434]  ffff8881008beb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2765.654519][T20434] ==================================================================
[ 2765.711410][T23399] loop4: detected capacity change from 0 to 512
[ 2765.738159][T20434] Disabling lock debugging due to kernel taint
[ 2765.836518][T23399] /dev/loop4: Can't open blockdev
[ 2765.843168][T23391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2766.095666][   T28] audit: type=1400 audit(1727624217.910:704): avc:  denied  { bind } for  pid=23396 comm="syz.0.4660" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2766.125206][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2766.151447][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2766.175084][   T28] audit: type=1400 audit(1727624217.910:705): avc:  denied  { name_bind } for  pid=23396 comm="syz.0.4660" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 2766.190787][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2766.343637][   T28] audit: type=1400 audit(1727624217.910:706): avc:  denied  { node_bind } for  pid=23396 comm="syz.0.4660" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 2766.448445][   T28] audit: type=1400 audit(1727624218.290:707): avc:  denied  { map } for  pid=23400 comm="syz.3.4661" path="socket:[176940]" dev="sockfs" ino=176940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2766.561972][   T28] audit: type=1400 audit(1727624218.290:708): avc:  denied  { read } for  pid=23400 comm="syz.3.4661" path="socket:[176940]" dev="sockfs" ino=176940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2767.408200][  T292] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 2767.698155][  T292] usb 4-1: Using ep0 maxpacket: 8
[ 2767.828182][  T292] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2767.844426][  T292] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 2767.864365][  T292] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 2767.882985][  T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2768.038887][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2768.051278][T23414] tun0: tun_chr_ioctl cmd 1074025675
[ 2768.064100][T23414] tun0: persist enabled
[ 2768.072492][T23415] tun0: tun_chr_ioctl cmd 1074025675
[ 2768.083114][T23415] tun0: persist enabled
[ 2768.558206][  T292] usb 4-1: string descriptor 0 read error: -71
[ 2768.565659][  T292] hub 4-1:32.0: USB hub found
[ 2768.628165][  T292] hub 4-1:32.0: config failed, can't read hub descriptor (err -22)
[ 2768.678576][  T292] usb 4-1: USB disconnect, device number 20