last executing test programs:

1m50.485110457s ago: executing program 32 (id=65):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000000)={[{@dioread_nolock}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x59b, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7)
sendfile(r1, r1, 0x0, 0xfffe80)

20.509117388s ago: executing program 33 (id=3404):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)

17.8692511s ago: executing program 0 (id=3532):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32)

17.869102879s ago: executing program 34 (id=3532):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32)

12.368336346s ago: executing program 7 (id=3732):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1018ed8, &(0x7f00000005c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@nodelalloc}, {@usrquota}, {@nolazytime}, {@noblock_validity}, {@block_validity}, {@barrier}]}, 0x6, 0x647, &(0x7f0000002740)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

12.209184888s ago: executing program 7 (id=3737):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

12.13818066s ago: executing program 7 (id=3739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x8000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x6132})
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)

12.077939471s ago: executing program 7 (id=3744):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

11.776919215s ago: executing program 7 (id=3749):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0)

11.42986046s ago: executing program 7 (id=3757):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x46}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

11.404047801s ago: executing program 35 (id=3757):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x46}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

10.83848784s ago: executing program 4 (id=3786):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x200, 0x4)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4)
sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000180)=@can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14)

10.789164921s ago: executing program 4 (id=3797):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000004e00)=ANY=[@ANYBLOB="bbbbbbbbbbbb1921aaaaaaaa86dd60f4adf700082cfffe800000000000000000000000000027ff02000000000000000000000000000181099078"], 0x0)

10.743419661s ago: executing program 4 (id=3790):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x578410e9)
close_range(r0, 0xffffffffffffffff, 0x0)

10.587836734s ago: executing program 4 (id=3794):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

10.325679208s ago: executing program 4 (id=3802):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
socket(0x400000000010, 0x3, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)
r2 = dup(r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.032772502s ago: executing program 4 (id=3806):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

10.032100732s ago: executing program 36 (id=3806):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

9.093960037s ago: executing program 9 (id=3843):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)

9.009317259s ago: executing program 9 (id=3845):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x641, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESDEC])

9.009071319s ago: executing program 9 (id=3846):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0)

8.97938383s ago: executing program 9 (id=3848):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x519, &(0x7f0000000340)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x32)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x19, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d0000000000000ff4eb4b78c66ee677df701905b9aafab4fffffbff00", "cba3d6250000e1a311ef97e4368d1e14ef0106007e813590edfdff00000000020000000000000000000000000400000000000000000000000000009c9c9e2700", "d300e6d6ae9ef30bea2a0040000000000000000000f27c0000e8ff00", [0x0, 0x8]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)

8.768244913s ago: executing program 9 (id=3852):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r1 = dup(r0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0x2f6d}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1}, 0x0)

8.26685489s ago: executing program 9 (id=3863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
statfs(0x0, 0x0)

8.26642023s ago: executing program 37 (id=3863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
statfs(0x0, 0x0)

4.023728067s ago: executing program 2 (id=4040):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
request_key(&(0x7f0000002740)='logon\x00', &(0x7f0000002780)={'syz', 0x0}, &(0x7f0000005b40)='2\xaa\xeaI\xe9\x04\xee\\\x13\xc6\xf4t\xe0\xad#\xe0\xbb\xf2o\xdc\xc6miYcH\x0e\x9btR\xd3\xcaGl\x95\xc8M\xaa\xec\x82\xc7 \a\x89\x84\xff\xbec\xe7\xa2\x1aK\xc8\xaf\xbc\xd0\xeb\xd9\xeb\x9d_\xd4jy\xf0%\x94\x14\xef4\x98pav\xc5\x93y\x1e4z)\'\xe5\"\x17!POZ\xfc\xc1\x92Ki1C\xb9\xdcgO\x9e\xaa\x1e\x88\xcf\x9d$I\xd1\xcd\x05\x16`\xc5T)\xf6J$4T\x13\xf0\xcf\x1e\x88$\'M\xea\x88', 0xfffffffffffffffb)

3.750436981s ago: executing program 2 (id=4043):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b04feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

3.728345742s ago: executing program 2 (id=4045):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xec, 0x0, &(0x7f0000000800)="6ebca58c08000008beca252388f7", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.509940885s ago: executing program 2 (id=4052):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@test_dummy_encryption}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

3.21636896s ago: executing program 2 (id=4056):
r0 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)

3.031329983s ago: executing program 2 (id=4058):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40)

3.030950613s ago: executing program 38 (id=4058):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40)

2.637473559s ago: executing program 8 (id=4066):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.802777802s ago: executing program 3 (id=4076):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x248a})

1.666436054s ago: executing program 3 (id=4077):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.602774185s ago: executing program 3 (id=4078):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0)

1.588810115s ago: executing program 8 (id=4080):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

1.569304675s ago: executing program 3 (id=4082):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@test_dummy_encryption}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1.368668029s ago: executing program 3 (id=4085):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1.141135312s ago: executing program 3 (id=4091):
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
getpgrp(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
timer_gettime(r0, &(0x7f0000000100))

1.140959792s ago: executing program 39 (id=4091):
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
getpgrp(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
timer_gettime(r0, &(0x7f0000000100))

1.097816223s ago: executing program 5 (id=4094):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x0, 0x7c9}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x6, 0x9, 0x2}]}}}}}}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x6)

711.247389ms ago: executing program 1 (id=4102):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4048050)

668.899459ms ago: executing program 1 (id=4103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081)

668.527209ms ago: executing program 1 (id=4104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0)

603.187461ms ago: executing program 8 (id=4105):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

602.757821ms ago: executing program 1 (id=4106):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

546.471932ms ago: executing program 1 (id=4107):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

527.254362ms ago: executing program 8 (id=4108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000140)="5c000000010006", 0x7)

510.385592ms ago: executing program 1 (id=4109):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x3a)
recvmmsg(r1, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

492.393743ms ago: executing program 8 (id=4110):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0)

480.419732ms ago: executing program 0 (id=4092):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x196, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x55, 0x45833af92e4b39ff, 0x0)

460.230063ms ago: executing program 8 (id=4111):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4)
sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/115, 0x73}, 0x8}], 0x1, 0x13021, 0x0)

396.895104ms ago: executing program 6 (id=4112):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_GET_PROG_INFO(0x4, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0xfffffffffffffbff, 0x1)

378.171744ms ago: executing program 0 (id=4113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]})
futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0)

343.522755ms ago: executing program 0 (id=4114):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0)

325.480465ms ago: executing program 6 (id=4115):
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x26, &(0x7f0000000440)={0x14, 0x8000, 0x7})
r2 = gettid()
tkill(r2, 0x7)
rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8)

300.275965ms ago: executing program 6 (id=4116):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0x0, 0x0, {{0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

299.746905ms ago: executing program 0 (id=4117):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30800c1, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

200.461587ms ago: executing program 6 (id=4118):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r1, 0x0, 0x400000000000000, 0x2)

177.731747ms ago: executing program 5 (id=4119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x6, 0xa77, 0xfffffff8, {0x5, 0x1, 0x6, 0xfe, 0x1, 0x5a478a5e}, {0x8, 0x2, 0x7, 0x6, 0x0, 0x4}, 0x2, 0x3, 0x2}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)

155.210818ms ago: executing program 6 (id=4120):
r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x0)
write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

126.253128ms ago: executing program 6 (id=4121):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000340), 0x5, 0x585, &(0x7f0000000380)="$eJzs3U1oHOUbAPBnZrP/fqX/VFBQ6aGoUKF0k/RDq6f2KhYKPQheNGy2oWSTDdlEm5BDei9iD6LSS73poUfFgwfx4tGrF8WzUGxQaCroyuxHEpPdummbpM3+fjDJvPPO7vO+M/u8uzPMMAH0rCPZnzTiuYi4kEQMrKnri2blkcZ6y0sLxXtLC8UkarWLvyWRRMTdpYVia/2k+f9ARCxGxLMR8V0+4li6MW51bn58pFwuTTfLgzMTU4PVufnjlydGxkpjpcmTr752+syp08Mnhte+7F5tbSm/ub5e+/n6B9d+eOPm9S9uHV4sfjSSxNnob9at7cej1Ngm+Ti7bvmprQi2g5KdbgAPJNfM8yyVnomByDWzvp3awLY2DdhitT0RNaBHJQ+T/3tbwwjw5Gn9DsiOf1vTdv7+uH2ucQCSxV1uTo2avsa5idhbPzbZ/3vyryOT7Hjz0HY2lF1p8WpEDPX1bfz8J83P34MbehQNZEt9e66xozbu/3Rl/Ik2409/69zpQ2qNf8sbxr/V+LkO49+FLmP89fYvn3aMfzXi+bbxk5X4SZv4aUS822X8G299faZTXe2ziKPRPn5Lcv/zw4OXLpdLQ42/bWN8c/Tw6xF/rvvGW+3//g7xG+ds99a/Ztpt/6ku+//V91++sNihLov/8ov33//ttv++iPiwy/hP3f38zU4naG9fTe5k22Sz+z9bdrPL+K+cPfJTl6sCAAAAAAAAAACbkNavZUvSwsp8mhYKjXt4n479ablSnTl2qTI7Odq45u1Q5NPWlVYDjXKSlYeb1+O2yifWlU/mmgFz++rlQrFSHt3hvgMAAAAAAAAAAAAAAAAAAMDj4sC6+///yNXv/1//uGpgt+r8yG9gt5P/0LvW5H+HxwQCu5Xvf+hZNfkPvUv+Q++S/9C75D/0LvkPvUv+Q++S/wAAAAAAAAAAAAAAAAAAAAAAAAAAsCUunD+fTbV7SwvFrDzaNzc7Xnnv+GipOl6YmC0WipXpqcJYpTJWLhWKlYn/er+kUpkaisnZK4MzperMYHVu/p2Jyuxk67GipfyW9wgAAAAAAAAAAAAAAAAAAACePP31KUkLEZHW59O0UIg4GBGHIp9culwuDUXE/yPix1x+T1Ye3ulGAwAAAAAAAAAAAAAAAAAAwC5TnZsfHymXS9M9MtO3mZUjYvHRNiN7x02/Kt/cV4/LNjTTCzM7PDABAAAAAAAAAAAAAAAAAEAPWr3pt9tX/L21DQIAAAAAAAAAAAAAAAAAAICelP6aREQ2HR14qX997f+S5Vz9f0S8f+Pix1dGZmamh7Pld1aWz3zSXH5iJ9oPdKuVp608BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFZV5+bHR8rl0vQWzrSLe+vg9vcVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDP+CQAA//+wrtg6")
lchown(&(0x7f0000010000)='./file0\x00', 0x0, 0xee00)

114.879808ms ago: executing program 5 (id=4122):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0)

69.248019ms ago: executing program 5 (id=4123):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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")
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0x0)

27.91335ms ago: executing program 5 (id=4124):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000000)={'wlan0\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r2}, 0x40)
syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0)

11.97725ms ago: executing program 5 (id=4125):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

0s ago: executing program 0 (id=4126):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

 version = 48b305e6
[   85.038805][ T6129] loop4: detected capacity change from 0 to 128
[   85.073766][ T6138] loop3: detected capacity change from 0 to 512
[   85.131175][ T6129] FAT-fs (loop4): bogus number of FAT sectors
[   85.137119][ T6129] FAT-fs (loop4): Can't find a valid FAT filesystem
[   85.146298][ T6138] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[   85.162872][ T6138] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   86.013973][ T6161] loop1: detected capacity change from 0 to 512
[   86.095974][ T6161] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.194674][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'.
[   86.242446][ T6163] loop0: detected capacity change from 0 to 40427
[   86.319410][ T6163] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   86.340119][ T6163] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   86.357928][ T6163] F2FS-fs (loop0): invalid crc value
[   86.378932][   T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   86.388008][ T6163] F2FS-fs (loop0): Found nat_bits in checkpoint
[   86.433706][ T6163] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   86.440724][ T6163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   86.543010][  T313] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   86.557224][  T313] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   86.634698][ T6180] loop4: detected capacity change from 0 to 40427
[   86.649573][ T6180] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[   86.657605][ T6180] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   86.672436][ T6180] F2FS-fs (loop4): fault_injection options not supported
[   86.679702][ T6180] F2FS-fs (loop4): fault_type options not supported
[   86.705668][ T6180] F2FS-fs (loop4): invalid crc value
[   86.732276][ T6180] F2FS-fs (loop4): Found nat_bits in checkpoint
[   86.778646][   T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.802692][   T26] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   86.813297][   T26] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[   86.823480][ T6180] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   86.830495][ T6180] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   86.831457][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.852305][   T26] usb 2-1: config 0 descriptor??
[   86.857897][ T6214] incfs: Options parsing error. -22
[   86.863318][ T6214] incfs: mount failed -22
[   86.915353][ T6221] loop0: detected capacity change from 0 to 1024
[   87.010930][ T6221] EXT4-fs (loop0): Test dummy encryption mode enabled
[   87.022775][ T6221] EXT4-fs (loop0): Test dummy encryption mode enabled
[   87.047964][ T6221] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   87.097579][ T6223] loop3: detected capacity change from 0 to 40427
[   87.107932][   T30] kauditd_printk_skb: 521 callbacks suppressed
[   87.107946][   T30] audit: type=1400 audit(1744661197.686:10158): avc:  denied  { create } for  pid=6230 comm="syz.1.2684" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   87.114970][ T6223] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   87.180483][ T6230] syz.1.2684 (6230) used greatest stack depth: 19440 bytes left
[   87.198171][   T30] audit: type=1400 audit(1744661197.736:10159): avc:  denied  { read write open } for  pid=6230 comm="syz.1.2684" path="/513/file0/core" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   87.198625][ T6223] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   87.259725][ T6223] F2FS-fs (loop3): invalid crc value
[   87.291811][ T6223] F2FS-fs (loop3): Found nat_bits in checkpoint
[   87.333251][   T30] audit: type=1400 audit(1744661197.906:10160): avc:  denied  { wake_alarm } for  pid=6238 comm="syz.5.2724" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   87.375795][   T30] audit: type=1326 audit(1744661197.926:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[   87.412612][ T6239] loop5: detected capacity change from 0 to 8192
[   87.418964][   T30] audit: type=1326 audit(1744661197.926:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[   87.452726][ T6223] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   87.462490][ T6223] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   87.464394][   T30] audit: type=1326 audit(1744661197.926:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[   87.511768][ T6221] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   87.511786][ T6244] fs-verity: sha256 using implementation "sha256-avx2"
[   87.526412][   T30] audit: type=1326 audit(1744661197.926:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[   87.553082][   T30] audit: type=1326 audit(1744661197.926:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[   87.578068][   T30] audit: type=1326 audit(1744661197.926:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[   87.613048][  T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   87.623769][  T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   87.653677][   T30] audit: type=1326 audit(1744661197.926:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6240 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[   87.824037][ T6250] loop0: detected capacity change from 0 to 40427
[   87.899068][ T6250] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(15) root(3)
[   87.906802][ T6250] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   87.915871][ T6250] F2FS-fs (loop0): invalid crc value
[   87.922374][ T6250] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391)
[   87.947063][ T6250] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[   87.953602][ T6250] F2FS-fs (loop0): Start checkpoint disabled!
[   87.960722][ T6250] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   87.967657][ T6250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   88.280640][ T6269] loop0: detected capacity change from 0 to 40427
[   88.309181][ T6269] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[   88.316006][ T6269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   88.324091][ T6269] F2FS-fs (loop0): fault_injection options not supported
[   88.331089][ T6269] F2FS-fs (loop0): fault_type options not supported
[   88.338503][ T6269] F2FS-fs (loop0): invalid crc value
[   88.345313][ T6269] F2FS-fs (loop0): Found nat_bits in checkpoint
[   88.377960][ T6269] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   88.384928][ T6269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   88.882495][ T6278] incfs: Options parsing error. -22
[   88.887567][ T6278] incfs: mount failed -22
[   88.969873][ T6289] netlink: 'syz.3.2731': attribute type 280 has an invalid length.
[   88.980419][ T6292] xt_hashlimit: size too large, truncated to 1048576
[   89.029552][  T300] usb 2-1: USB disconnect, device number 3
[   89.309114][ T6283] loop5: detected capacity change from 0 to 40427
[   89.343139][ T6283] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   89.363841][ T6283] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   89.376168][ T6322] netlink: 'syz.1.2747': attribute type 280 has an invalid length.
[   89.389064][ T6325] loop3: detected capacity change from 0 to 512
[   89.405017][ T6283] F2FS-fs (loop5): invalid crc value
[   89.440381][ T6325] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.451714][ T6283] F2FS-fs (loop5): Found nat_bits in checkpoint
[   89.519118][ T6283] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   89.526077][ T6283] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   89.586856][  T320] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   89.606677][ T6349] loop4: detected capacity change from 0 to 1024
[   89.614258][  T320] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   89.639669][ T6349] EXT4-fs (loop4): Ignoring removed orlov option
[   89.680179][ T6349] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none.
[   89.707111][ T6358] incfs: Options parsing error. -22
[   89.712571][ T6358] incfs: mount failed -22
[   89.728629][   T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   89.744400][ T6360] loop0: detected capacity change from 0 to 512
[   89.790271][ T6362] netlink: 'syz.4.2764': attribute type 280 has an invalid length.
[   89.815669][ T6366] loop4: detected capacity change from 0 to 1024
[   89.817142][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[   89.838561][ T6360] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.852056][ T6368] loop5: detected capacity change from 0 to 4096
[   89.881264][ T6368] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback.
[   89.902951][ T6366] EXT4-fs (loop4): Test dummy encryption mode enabled
[   89.911308][ T6366] EXT4-fs (loop4): Test dummy encryption mode enabled
[   89.931831][ T6366] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   90.101432][   T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.111591][   T20] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   90.121221][   T20] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[   90.130382][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.148927][   T20] usb 4-1: config 0 descriptor??
[   90.353710][ T6382] loop4: detected capacity change from 0 to 40427
[   90.448931][ T6382] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   90.456550][ T6382] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   90.465921][ T6382] F2FS-fs (loop4): invalid crc value
[   90.472635][ T6382] F2FS-fs (loop4): Found nat_bits in checkpoint
[   90.505111][ T6382] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   90.512090][ T6382] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   90.545787][   T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   90.554952][   T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   90.681077][ T6396] loop1: detected capacity change from 0 to 2048
[   90.705111][ T6398] loop4: detected capacity change from 0 to 128
[   90.813679][ T6396] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   90.880865][ T6402] loop4: detected capacity change from 0 to 8192
[   90.917164][ T6396] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2775: bg 0: block 234: padding at end of block bitmap is not set
[   90.931750][ T6396] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1450 with error 28
[   90.944421][ T6396] EXT4-fs (loop1): This should not happen!! Data will be lost
[   90.944421][ T6396] 
[   90.972190][ T6396] EXT4-fs (loop1): Total free blocks count 0
[   90.983398][ T6396] EXT4-fs (loop1): Free/Dirty block details
[   90.989514][ T6396] EXT4-fs (loop1): free_blocks=0
[   90.994350][ T6396] EXT4-fs (loop1): dirty_blocks=1456
[   91.014717][ T6396] EXT4-fs (loop1): Block reservation details
[   91.037158][ T6396] EXT4-fs (loop1): i_reserved_data_blocks=91
[   91.193633][ T6412] loop1: detected capacity change from 0 to 1024
[   91.232778][ T6412] EXT4-fs (loop1): Test dummy encryption mode enabled
[   91.241819][ T6412] EXT4-fs (loop1): Test dummy encryption mode enabled
[   91.264200][ T6412] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   91.707427][ T6422] loop0: detected capacity change from 0 to 1024
[   91.756925][ T6420] loop4: detected capacity change from 0 to 4096
[   91.773877][ T6422] EXT4-fs (loop0): Ignoring removed orlov option
[   91.795656][ T6420] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback.
[   91.827924][ T6422] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none.
[   92.238598][ T6345] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   92.321937][ T6435] loop0: detected capacity change from 0 to 131072
[   92.394452][  T300] usb 4-1: USB disconnect, device number 2
[   92.420247][ T6443] loop5: detected capacity change from 0 to 1024
[   92.428388][ T6435] F2FS-fs (loop0): Found nat_bits in checkpoint
[   92.439534][ T6443] EXT4-fs (loop5): Test dummy encryption mode enabled
[   92.471176][ T6443] EXT4-fs (loop5): Test dummy encryption mode enabled
[   92.480662][ T6443] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,stripe=0x0000000000000009,data=ordered,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   92.502582][ T6447] loop3: detected capacity change from 0 to 8192
[   92.507446][ T6345] usb 2-1: Using ep0 maxpacket: 16
[   92.528400][ T6435] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[   92.648794][ T6345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.663719][ T6345] usb 2-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 24
[   92.688231][ T6345] usb 2-1: config 0 interface 0 has no altsetting 0
[   92.695109][ T6345] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[   92.704140][ T6345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.714487][ T6345] usb 2-1: config 0 descriptor??
[   92.829296][   T30] kauditd_printk_skb: 61 callbacks suppressed
[   92.829314][   T30] audit: type=1400 audit(1744661203.406:10229): avc:  denied  { name_bind } for  pid=6458 comm="syz.3.2796" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   92.889392][   T30] audit: type=1400 audit(1744661203.436:10230): avc:  denied  { node_bind } for  pid=6458 comm="syz.3.2796" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   92.939305][   T30] audit: type=1400 audit(1744661203.436:10231): avc:  denied  { create } for  pid=6458 comm="syz.3.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   92.966304][ T6461] loop3: detected capacity change from 0 to 4096
[   92.972679][   T30] audit: type=1400 audit(1744661203.436:10232): avc:  denied  { write } for  pid=6458 comm="syz.3.2796" path="socket:[35522]" dev="sockfs" ino=35522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   92.997298][   T30] audit: type=1400 audit(1744661203.436:10233): avc:  denied  { nlmsg_read } for  pid=6458 comm="syz.3.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   93.031355][   T30] audit: type=1400 audit(1744661203.596:10234): avc:  denied  { read } for  pid=6462 comm="syz.0.2791" name="file0" dev="incremental-fs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   93.054695][   T30] audit: type=1400 audit(1744661203.596:10235): avc:  denied  { open } for  pid=6462 comm="syz.0.2791" path="/593/file0/file0" dev="incremental-fs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   93.079084][   T30] audit: type=1400 audit(1744661203.606:10236): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   93.131552][ T6461] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback.
[   93.165774][ T6469] loop0: detected capacity change from 0 to 512
[   93.185479][   T30] audit: type=1326 audit(1744661203.756:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6472 comm="syz.5.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000
[   93.208927][   T30] audit: type=1326 audit(1744661203.756:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6472 comm="syz.5.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000
[   93.253149][ T6469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   93.264970][ T6477] loop3: detected capacity change from 0 to 128
[   93.299842][ T6480] tipc: Started in network mode
[   93.304824][ T6480] tipc: Node identity ac14140f, cluster identity 4711
[   93.318800][ T6345] usb 2-1: string descriptor 0 read error: -71
[   93.328193][ T6480] tipc: New replicast peer: 255.0.0.255
[   93.334868][ T6345] usb 2-1: USB disconnect, device number 4
[   93.340818][ T6480] tipc: Enabled bearer <udp:s>, priority 10
[   93.380968][ T6485] loop4: detected capacity change from 0 to 2048
[   93.439997][ T6485] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   93.520623][ T6485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2807: bg 0: block 234: padding at end of block bitmap is not set
[   93.535189][ T6485] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   93.547745][  T557] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   93.555356][ T6485] EXT4-fs (loop4): This should not happen!! Data will be lost
[   93.555356][ T6485] 
[   93.565316][ T6485] EXT4-fs (loop4): Total free blocks count 0
[   93.571471][ T6485] EXT4-fs (loop4): Free/Dirty block details
[   93.577281][ T6485] EXT4-fs (loop4): free_blocks=0
[   93.582751][ T6485] EXT4-fs (loop4): dirty_blocks=2592
[   93.587967][ T6485] EXT4-fs (loop4): Block reservation details
[   93.594001][ T6485] EXT4-fs (loop4): i_reserved_data_blocks=162
[   93.674159][   T10] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 538 with error 28
[   93.689639][   T10] EXT4-fs (loop4): This should not happen!! Data will be lost
[   93.689639][   T10] 
[   93.777760][ T6482] loop5: detected capacity change from 0 to 131072
[   93.828598][ T6482] F2FS-fs (loop5): Found nat_bits in checkpoint
[   93.864266][ T6482] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b
[   93.948667][  T557] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.958739][  T557] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   93.967505][  T557] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[   93.976521][  T557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.999332][  T557] usb 1-1: config 0 descriptor??
[   94.260867][ T6500] syz.0.2801 (6500) used greatest stack depth: 19056 bytes left
[   94.338636][  T557] tipc: Node number set to 2886997007
[   94.669663][ T6512] loop1: detected capacity change from 0 to 4096
[   94.750023][ T6512] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback.
[   94.872899][ T6534] netem: incorrect gi model size
[   94.877738][ T6534] netem: change failed
[   96.169089][   T26] usb 1-1: USB disconnect, device number 2
[   96.211293][ T6568] netem: incorrect gi model size
[   96.216084][ T6568] netem: change failed
[   96.278079][ T6575] loop0: detected capacity change from 0 to 4096
[   96.330393][ T6590] loop5: detected capacity change from 0 to 512
[   96.347892][ T6575] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback.
[   96.396741][ T6590] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   96.448583][    T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   96.476828][ T6609] loop3: detected capacity change from 0 to 128
[   96.489662][ T6607] netem: incorrect gi model size
[   96.494509][ T6607] netem: change failed
[   96.533396][ T6609] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   96.544016][ T6609] ext4 filesystem being mounted at /490/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.556661][ T6609] syz.3.2857 (pid 6609) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   96.610516][ T6620] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.621328][ T6620] F2FS-fs (loop1): Unable to read 1th superblock
[   96.627828][ T6620] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.639755][ T6620] F2FS-fs (loop1): Unable to read 2th superblock
[   96.688741][   T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   96.698575][    T6] usb 5-1: Using ep0 maxpacket: 16
[   96.828620][    T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.838965][    T6] usb 5-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 24
[   96.852762][    T6] usb 5-1: config 0 interface 0 has no altsetting 0
[   96.859239][    T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[   96.868286][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.880407][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2874'.
[   96.882557][    T6] usb 5-1: config 0 descriptor??
[   97.048631][   T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.059392][   T26] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   97.068993][   T26] usb 6-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[   97.071421][ T6671] loop3: detected capacity change from 0 to 2048
[   97.078139][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.093456][   T26] usb 6-1: config 0 descriptor??
[   97.163328][ T6671] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   97.173814][ T6671] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.186511][ T6671] fs-verity: sha512 using implementation "sha512-avx2"
[   97.340438][ T6701] loop3: detected capacity change from 0 to 256
[   97.379558][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'.
[   97.388592][    T6] usb 5-1: string descriptor 0 read error: -71
[   97.391032][ T6701] FAT-fs (loop3): Directory bread(block 64) failed
[   97.395759][    T6] usb 5-1: USB disconnect, device number 2
[   97.409435][ T6701] FAT-fs (loop3): Directory bread(block 65) failed
[   97.412508][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'.
[   97.415890][ T6701] FAT-fs (loop3): Directory bread(block 66) failed
[   97.440132][ T6701] FAT-fs (loop3): Directory bread(block 67) failed
[   97.446569][ T6701] FAT-fs (loop3): Directory bread(block 68) failed
[   97.457268][ T6701] FAT-fs (loop3): Directory bread(block 69) failed
[   97.464070][ T6701] FAT-fs (loop3): Directory bread(block 70) failed
[   97.471737][ T6701] FAT-fs (loop3): Directory bread(block 71) failed
[   97.478128][ T6701] FAT-fs (loop3): Directory bread(block 72) failed
[   97.484512][ T6701] FAT-fs (loop3): Directory bread(block 73) failed
[   97.519297][   T10] attempt to access beyond end of device
[   97.519297][   T10] loop3: rw=1, want=1768, limit=256
[   97.530578][   T10] attempt to access beyond end of device
[   97.530578][   T10] loop3: rw=1, want=1928, limit=256
[   97.542177][   T10] attempt to access beyond end of device
[   97.542177][   T10] loop3: rw=1, want=3340, limit=256
[   97.738652][  T300] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.968060][   T30] kauditd_printk_skb: 119 callbacks suppressed
[   97.968098][   T30] audit: type=1326 audit(1744661208.536:10358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.004502][   T30] audit: type=1326 audit(1744661208.536:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.028947][   T30] audit: type=1326 audit(1744661208.576:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.053644][   T30] audit: type=1326 audit(1744661208.576:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.092963][   T30] audit: type=1326 audit(1744661208.576:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.116983][   T30] audit: type=1326 audit(1744661208.576:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.154539][   T30] audit: type=1326 audit(1744661208.576:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.193758][   T30] audit: type=1326 audit(1744661208.576:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.219911][   T30] audit: type=1326 audit(1744661208.576:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.228187][ T6736] SELinux: failed to load policy
[   98.245207][   T30] audit: type=1326 audit(1744661208.576:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7ffc0000
[   98.278732][  T300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.290478][ T6742] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.290673][  T300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.302413][ T6742] F2FS-fs (loop9): Unable to read 1th superblock
[   98.311438][  T300] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   98.317094][ T6742] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.326161][  T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.344730][ T6742] F2FS-fs (loop9): Unable to read 2th superblock
[   98.346116][  T300] usb 1-1: config 0 descriptor??
[   98.528607][  T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   98.788611][  T312] usb 4-1: Using ep0 maxpacket: 16
[   98.938822][  T312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.948829][  T312] usb 4-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 24
[   98.961643][  T312] usb 4-1: config 0 interface 0 has no altsetting 0
[   98.968014][  T312] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[   98.976906][  T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.985237][  T312] usb 4-1: config 0 descriptor??
[   99.058663][  T300] usb 1-1: string descriptor 0 read error: -22
[   99.269986][  T300] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input4
[   99.282726][  T300] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5
[   99.295222][  T300] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[   99.337797][  T300] usb 6-1: USB disconnect, device number 2
[   99.488676][  T312] usb 4-1: string descriptor 0 read error: -71
[   99.499304][  T312] usb 4-1: USB disconnect, device number 3
[   99.517930][ T6757] usb 1-1: USB disconnect, device number 3
[   99.677587][ T6796] serio: Serial port ptm0
[   99.738200][ T6805] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   99.978063][ T6833] serio: Serial port ptm0
[  100.135737][ T6858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6858 comm=syz.0.2969
[  100.189122][ T6858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6858 comm=syz.0.2969
[  101.379496][ T6899] input: syz1 as /devices/virtual/input/input6
[  101.496974][ T6913] loop3: detected capacity change from 0 to 1024
[  101.554280][ T6913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  101.610169][ T6932] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004
[  101.919197][ T6971] incfs: Error accessing: ./file0.
[  101.924196][ T6971] incfs: mount failed -20
[  101.971856][ T6977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6977 comm=syz.3.3026
[  102.019266][ T6977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6977 comm=syz.3.3026
[  102.046855][ T6985] loop1: detected capacity change from 0 to 1024
[  102.105848][ T6945] loop5: detected capacity change from 0 to 40427
[  102.146421][ T6985] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  102.182649][ T6945] F2FS-fs (loop5): fault_type options not supported
[  102.201329][ T6945] F2FS-fs (loop5): invalid crc value
[  102.217857][ T6945] F2FS-fs (loop5): Found nat_bits in checkpoint
[  102.269377][ T7009] incfs: Error accessing: ./file0.
[  102.287848][ T7009] incfs: mount failed -20
[  102.333157][ T7014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7014 comm=syz.1.3043
[  102.349977][ T6945] F2FS-fs (loop5): Start checkpoint disabled!
[  102.350863][ T7014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7014 comm=syz.1.3043
[  102.356961][ T6945] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  102.477069][ T7030] loop4: detected capacity change from 0 to 1024
[  102.562179][ T7030] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  102.686031][ T7048] incfs: Error accessing: ./file0.
[  102.713498][ T7048] incfs: mount failed -20
[  102.730401][ T7056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7056 comm=syz.4.3059
[  102.744924][ T7056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7056 comm=syz.4.3059
[  102.882389][ T7078] loop0: detected capacity change from 0 to 1024
[  102.979459][ T7078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  103.048806][ T7072] loop1: detected capacity change from 0 to 40427
[  103.060999][ T7072] F2FS-fs (loop1): fault_type options not supported
[  103.099409][ T7072] F2FS-fs (loop1): invalid crc value
[  103.108297][ T7072] F2FS-fs (loop1): Found nat_bits in checkpoint
[  103.194322][ T7072] F2FS-fs (loop1): Start checkpoint disabled!
[  103.211925][ T7103] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004
[  103.232946][ T7072] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  103.280904][   T30] kauditd_printk_skb: 227 callbacks suppressed
[  103.280923][   T30] audit: type=1326 audit(1744661213.856:10595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.350371][   T30] audit: type=1326 audit(1744661213.896:10596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.392789][   T30] audit: type=1326 audit(1744661213.896:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.420257][   T30] audit: type=1326 audit(1744661213.896:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.445542][   T30] audit: type=1326 audit(1744661213.896:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.469761][   T30] audit: type=1326 audit(1744661213.896:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.493428][   T30] audit: type=1326 audit(1744661213.896:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.517088][   T30] audit: type=1326 audit(1744661213.896:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.541014][   T30] audit: type=1326 audit(1744661213.896:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.564620][   T30] audit: type=1326 audit(1744661213.896:10604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.0.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5d9894a169 code=0x7ffc0000
[  103.635380][ T7124] loop5: detected capacity change from 0 to 1024
[  103.715271][ T7124] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  103.751922][ T7140] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004
[  103.950927][ T7144] loop4: detected capacity change from 0 to 40427
[  104.029175][ T7144] F2FS-fs (loop4): fault_type options not supported
[  104.039614][ T7144] F2FS-fs (loop4): invalid crc value
[  104.045983][ T7144] F2FS-fs (loop4): Found nat_bits in checkpoint
[  104.077604][ T7144] F2FS-fs (loop4): Start checkpoint disabled!
[  104.084658][ T7144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  104.245367][ T7173] loop3: detected capacity change from 0 to 1024
[  104.352986][ T7173] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  104.740455][ T7228] loop1: detected capacity change from 0 to 256
[  104.809648][ T7228] FAT-fs (loop1): Directory bread(block 64) failed
[  104.816040][ T7228] FAT-fs (loop1): Directory bread(block 65) failed
[  104.825623][ T7228] FAT-fs (loop1): Directory bread(block 66) failed
[  104.832139][ T7228] FAT-fs (loop1): Directory bread(block 67) failed
[  104.838653][ T7228] FAT-fs (loop1): Directory bread(block 68) failed
[  104.845072][ T7228] FAT-fs (loop1): Directory bread(block 69) failed
[  104.852339][ T7228] FAT-fs (loop1): Directory bread(block 70) failed
[  104.864288][ T7228] FAT-fs (loop1): Directory bread(block 71) failed
[  104.876981][ T7228] FAT-fs (loop1): Directory bread(block 72) failed
[  104.888870][ T7240] loop4: detected capacity change from 0 to 256
[  104.899095][ T7228] FAT-fs (loop1): Directory bread(block 73) failed
[  104.899442][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'.
[  104.915369][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3142'.
[  104.936870][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'.
[  104.945967][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3142'.
[  105.090488][ T7263] loop1: detected capacity change from 0 to 256
[  105.122377][ T7266] netlink: 'syz.5.3153': attribute type 4 has an invalid length.
[  105.148457][ T7263] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  105.170132][ T7263] incfs: Can't find or create .index dir in ./file0
[  105.176834][ T7263] incfs: mount failed -28
[  105.275545][ T7286] loop1: detected capacity change from 0 to 512
[  105.301227][ T7293] loop4: detected capacity change from 0 to 512
[  105.320020][ T7293] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  105.332265][ T7293] EXT4-fs (loop4): 1 truncate cleaned up
[  105.337942][ T7293] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  105.350419][ T7297] incfs: Error accessing: ./file0.
[  105.355399][ T7297] incfs: mount failed -20
[  105.399588][ T7286] EXT4-fs (loop1): 1 orphan inode deleted
[  105.406256][ T7286] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  105.417472][ T7286] ext4 filesystem being mounted at /607/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.436630][ T7286] netlink: 'syz.1.3169': attribute type 7 has an invalid length.
[  105.444795][ T7286] netlink: 'syz.1.3169': attribute type 5 has an invalid length.
[  105.453986][ T7286] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3169'.
[  106.998510][    C0] sched: RT throttling activated
[  108.219668][ T7365] overlayfs: failed to resolve './file1': -2
[  108.306940][ T7369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7369 comm=syz.0.3197
[  108.338691][ T7369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7369 comm=syz.0.3197
[  108.386606][   T30] kauditd_printk_skb: 328 callbacks suppressed
[  108.386622][   T30] audit: type=1400 audit(1744661218.956:10933): avc:  denied  { read } for  pid=7374 comm="syz.3.3200" dev="nsfs" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  108.446313][   T30] audit: type=1400 audit(1744661218.986:10934): avc:  denied  { open } for  pid=7374 comm="syz.3.3200" path="net:[4026532639]" dev="nsfs" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  108.470041][   T30] audit: type=1400 audit(1744661218.986:10935): avc:  denied  { create } for  pid=7374 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  108.499166][   T30] audit: type=1400 audit(1744661218.986:10936): avc:  denied  { connect } for  pid=7374 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  108.520037][ T7361] loop4: detected capacity change from 0 to 40427
[  108.526868][   T30] audit: type=1400 audit(1744661218.986:10937): avc:  denied  { write } for  pid=7374 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  108.556840][   T30] audit: type=1326 audit(1744661219.126:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b0ed3169 code=0x7ffc0000
[  108.605265][ T7361] F2FS-fs (loop4): fault_injection options not supported
[  108.613068][   T30] audit: type=1326 audit(1744661219.126:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f28b0ed3169 code=0x7ffc0000
[  108.637098][   T30] audit: type=1326 audit(1744661219.126:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b0ed3169 code=0x7ffc0000
[  108.660631][   T30] audit: type=1400 audit(1744661219.166:10941): avc:  denied  { read } for  pid=7389 comm="syz.3.3206" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  108.690310][ T7361] F2FS-fs (loop4): invalid crc value
[  108.691815][   T30] audit: type=1400 audit(1744661219.166:10942): avc:  denied  { open } for  pid=7389 comm="syz.3.3206" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  108.725407][ T7361] F2FS-fs (loop4): Found nat_bits in checkpoint
[  108.768960][ T7405] sch_fq: defrate 0 ignored.
[  108.830923][ T7361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  108.910721][   T45] attempt to access beyond end of device
[  108.910721][   T45] loop4: rw=2049, want=45104, limit=40427
[  109.159884][ T7439] netlink: 'syz.3.3226': attribute type 4 has an invalid length.
[  109.435053][ T7469] loop4: detected capacity change from 0 to 256
[  109.531373][ T7469] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  109.588431][ T7480] loop5: detected capacity change from 0 to 128
[  109.594995][ T7469] incfs: Can't find or create .index dir in ./file0
[  109.605053][ T7469] incfs: mount failed -28
[  109.669148][ T7485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7485 comm=syz.1.3246
[  109.698627][ T7485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7485 comm=syz.1.3246
[  109.720874][ T7480] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  109.736495][ T7480] ext4 filesystem being mounted at /632/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  109.844128][ T7498] loop1: detected capacity change from 0 to 512
[  109.857513][ T7413] loop0: detected capacity change from 0 to 131072
[  109.891183][ T7489] overlayfs: failed to resolve './file1': -2
[  109.898262][ T7413] F2FS-fs (loop0): invalid crc value
[  109.925625][ T7498] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.945985][ T7413] F2FS-fs (loop0): Found nat_bits in checkpoint
[  109.967677][ T7498] EXT4-fs (loop1): 1 truncate cleaned up
[  109.983556][ T7498] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  110.034386][ T7413] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  110.050094][ T7518] loop5: detected capacity change from 0 to 256
[  110.078925][ T7498] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  110.087562][ T7521] loop3: detected capacity change from 0 to 256
[  110.093682][ T7498] EXT4-fs (loop1): Remounting filesystem read-only
[  110.142517][ T7518] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  110.155356][ T7521] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.177775][ T7518] incfs: Can't find or create .index dir in ./file0
[  110.184740][ T7521] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  110.193463][ T7518] incfs: mount failed -28
[  110.206358][ T7521] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  110.394106][ T7544] loop5: detected capacity change from 0 to 128
[  110.400862][ T7545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7545 comm=syz.3.3272
[  110.413971][ T7545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7545 comm=syz.3.3272
[  110.438587][    T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.473768][ T7544] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  110.482824][ T7552] loop0: detected capacity change from 0 to 512
[  110.490996][ T7544] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.491103][ T7550] x_tables: duplicate underflow at hook 4
[  110.502571][ T7544] ext2 filesystem being mounted at /638/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.535627][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3275: inode #1: comm syz.0.3275: iget: illegal inode #
[  110.548838][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3275: error while reading EA inode 1 err=-117
[  110.562808][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3275: inode #1: comm syz.0.3275: iget: illegal inode #
[  110.577749][ T7552] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3275: error while reading EA inode 1 err=-117
[  110.590876][ T7552] EXT4-fs (loop0): 1 orphan inode deleted
[  110.596483][ T7552] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none.
[  110.640883][ T7560] loop5: detected capacity change from 0 to 512
[  110.659048][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3279'.
[  110.670484][ T7567] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22
[  110.679701][ T7567] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  110.699576][    T6] usb 2-1: Using ep0 maxpacket: 32
[  110.733920][ T7560] EXT4-fs (loop5): 1 orphan inode deleted
[  110.748743][ T7560] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  110.766643][ T7560] ext4 filesystem being mounted at /639/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.223092][ T7577] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3285'.
[  112.038698][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.998616][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.008213][    T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  113.020980][    T6] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  113.029841][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.039603][    T6] usb 2-1: config 0 descriptor??
[  114.019813][    T6] usb 2-1: can't set config #0, error -71
[  114.025838][    T6] usb 2-1: USB disconnect, device number 5
[  114.083946][   T30] kauditd_printk_skb: 104 callbacks suppressed
[  114.083962][   T30] audit: type=1400 audit(1744661224.656:11047): avc:  denied  { setopt } for  pid=7586 comm="syz.0.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  114.171811][   T30] audit: type=1400 audit(1744661224.746:11048): avc:  denied  { setopt } for  pid=7589 comm="syz.4.3290" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  114.202020][ T7596] loop5: detected capacity change from 0 to 512
[  114.217885][   T30] audit: type=1326 audit(1744661224.776:11049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000
[  114.242066][   T30] audit: type=1326 audit(1744661224.776:11050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000
[  114.281567][   T30] audit: type=1326 audit(1744661224.776:11051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba63c9d169 code=0x7ffc0000
[  114.330589][   T30] audit: type=1326 audit(1744661224.776:11052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba63c9d1a3 code=0x7ffc0000
[  114.354027][   T30] audit: type=1326 audit(1744661224.776:11053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba63c9bc1f code=0x7ffc0000
[  114.354092][ T7596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  114.377688][   T30] audit: type=1326 audit(1744661224.776:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fba63c9d1f7 code=0x7ffc0000
[  114.411928][   T30] audit: type=1326 audit(1744661224.776:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba63c9bad0 code=0x7ffc0000
[  114.434011][ T7596] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.435955][   T30] audit: type=1326 audit(1744661224.776:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.5.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba63c9cd6b code=0x7ffc0000
[  114.518330][ T7618] loop0: detected capacity change from 0 to 512
[  114.531844][ T7620] loop1: detected capacity change from 0 to 512
[  114.571336][ T7618] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  114.582494][ T7618] ext4 filesystem being mounted at /680/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.624659][ T7626] loop5: detected capacity change from 0 to 256
[  114.630892][ T7620] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,mb_optimize_scan=0x0000000000000001,grpjquota=,journal_ioprio=0x0000000000000007,dioread_lock,,errors=continue. Quota mode: writeback.
[  114.650831][ T7620] ext4 filesystem being mounted at /637/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.852784][ T7655] loop5: detected capacity change from 0 to 512
[  114.865063][ T7655] EXT4-fs (loop5): 1 truncate cleaned up
[  114.870673][ T7655] EXT4-fs (loop5): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback.
[  115.136159][ T7690] loop1: detected capacity change from 0 to 512
[  115.190898][ T7690] EXT4-fs (loop1): 1 truncate cleaned up
[  115.197697][ T7690] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback.
[  115.343210][ T7700] loop5: detected capacity change from 0 to 40427
[  115.393982][ T7721] syz.1.3352[7721] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.394060][ T7721] syz.1.3352[7721] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.424408][ T7700] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  115.460937][ T7700] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  115.487975][ T7700] F2FS-fs (loop5): invalid crc value
[  115.495494][ T7735] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22
[  115.504796][ T7735] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  115.523622][ T7700] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  115.608277][ T7700] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  115.617244][ T7746] loop1: detected capacity change from 0 to 2048
[  115.623547][ T7700] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  115.627182][ T7749] loop3: detected capacity change from 0 to 256
[  115.667678][ T7700] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3345'.
[  115.709649][ T7746] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none.
[  115.725361][ T7749] FAT-fs (loop3): bogus number of FAT sectors
[  115.735776][ T7749] FAT-fs (loop3): Can't find a valid FAT filesystem
[  115.818250][ T7766] incfs: Options parsing error. -22
[  115.829973][ T7766] incfs: mount failed -22
[  116.045710][ T7786] loop1: detected capacity change from 0 to 256
[  116.121851][ T7791] loop3: detected capacity change from 0 to 512
[  116.138601][ T7786] exFAT-fs (loop1): bogus data start sector
[  116.144338][ T7786] exFAT-fs (loop1): failed to read boot sector
[  116.157534][ T7786] exFAT-fs (loop1): failed to recognize exfat type
[  116.188979][ T7791] EXT4-fs (loop3): 1 truncate cleaned up
[  116.194913][ T7791] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback.
[  116.259019][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3381'.
[  116.394974][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'.
[  116.452611][ T7824] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  116.490512][ T7831] loop3: detected capacity change from 0 to 512
[  116.529973][ T7831] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback.
[  116.549021][ T7831] ext4 filesystem being mounted at /606/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.560128][ T7842] loop1: detected capacity change from 0 to 16
[  116.574435][ T7842] erofs: (device loop1): mounted with root inode @ nid 36.
[  116.584595][ T7831] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #4: block 16: comm syz.3.3392: lblock 0 mapped to illegal pblock 16 (length 1)
[  116.600346][ T7831] EXT4-fs (loop3): Remounting filesystem read-only
[  116.613429][  T292] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  116.615727][ T7842] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[  116.636796][  T292] EXT4-fs (loop3): Remounting filesystem read-only
[  116.650443][ T7842] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[  116.662323][ T6455] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  116.673459][ T7842] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[  116.682662][ T6455] EXT4-fs (loop3): Remounting filesystem read-only
[  116.689508][ T7842] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[  116.704100][ T6455] EXT4-fs error (device loop3): ext4_quota_off:6477: inode #3: comm syz.3.2793: mark_inode_dirty error
[  116.716819][ T6455] EXT4-fs (loop3): Remounting filesystem read-only
[  116.723756][ T6455] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  116.733383][ T6455] EXT4-fs (loop3): Remounting filesystem read-only
[  116.740219][ T6455] EXT4-fs error (device loop3): ext4_quota_off:6477: inode #4: comm syz.3.2793: mark_inode_dirty error
[  116.760578][ T6455] EXT4-fs (loop3): Remounting filesystem read-only
[  116.802856][ T6455] bridge0: port 1(syz_tun) entered disabled state
[  116.814977][ T6455] device syz_tun left promiscuous mode
[  116.820555][ T6455] bridge0: port 1(syz_tun) entered disabled state
[  117.029905][ T7864] loop5: detected capacity change from 0 to 128
[  117.039718][ T7871] Invalid ELF header len 1
[  117.092962][ T7879] syz.4.3414[7879] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.093071][ T7879] syz.4.3414[7879] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.141254][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.175084][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.185692][ T7860] device bridge_slave_0 entered promiscuous mode
[  117.192751][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.200178][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.207498][ T7860] device bridge_slave_1 entered promiscuous mode
[  117.336469][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.343385][ T7860] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.350472][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.357232][ T7860] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.387004][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.397474][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.420231][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.463793][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  117.475329][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.482318][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.493118][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  117.501526][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.508434][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.516969][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  117.525620][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  117.569859][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.600828][ T7860] device veth0_vlan entered promiscuous mode
[  117.620613][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.637219][ T7936] cgroup: noprefix used incorrectly
[  117.639024][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.652585][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.665212][ T7938] netlink: 'syz.0.3443': attribute type 6 has an invalid length.
[  117.673475][ T7940] x_tables: duplicate underflow at hook 4
[  117.691916][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.701974][ T7860] device veth1_macvtap entered promiscuous mode
[  117.739342][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.749570][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.920837][  T457] device veth0_vlan left promiscuous mode
[  118.079808][ T7978] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22
[  118.092215][ T7978] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  118.234528][ T7995] loop6: detected capacity change from 0 to 1024
[  118.262119][ T7995] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  118.275915][ T7995] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  118.334753][ T7995] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,user_xattr,inlinecrypt,i_version,dioread_nolock,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000000,nolazytime,nomblk_io_submit,,errors=continue. Quota mode: none.
[  118.414167][ T7995] SELinux: ebitmap: truncated map
[  118.430389][ T7995] SELinux: failed to load policy
[  118.457708][ T8018] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3476'.
[  118.481708][ T8022] netlink: 'syz.1.3479': attribute type 3 has an invalid length.
[  118.541101][ T8032] netlink: 'syz.1.3485': attribute type 3 has an invalid length.
[  118.556493][ T8034] incfs: Error accessing: ./file0.
[  118.571024][ T8034] incfs: mount failed -20
[  118.834706][ T8076] 9pnet: Could not find request transport: f
[  118.918674][ T8085] syz.0.3509 uses obsolete (PF_INET,SOCK_PACKET)
[  119.104413][ T8110] loop0: detected capacity change from 0 to 512
[  119.149869][ T8110] EXT4-fs (loop0): Test dummy encryption mode enabled
[  119.156717][ T8110] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  119.173555][ T8110] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.3521: bad orphan inode 131083
[  119.194329][ T8110] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  119.232417][ T8110] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  119.264279][ T8124] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  119.278800][   T30] kauditd_printk_skb: 301 callbacks suppressed
[  119.278814][   T30] audit: type=1400 audit(1744661229.856:11357): avc:  denied  { mounton } for  pid=8109 comm="syz.0.3521" path="/735/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  119.308717][ T8110] overlayfs: upper fs needs to support d_type.
[  119.316216][ T8110] overlayfs: failed to set xattr on upper
[  119.330647][  T291] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /735/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  119.351356][   T30] audit: type=1400 audit(1744661229.886:11358): avc:  denied  { remove_name } for  pid=8109 comm="syz.0.3521" name="#f" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  119.379767][   T30] audit: type=1400 audit(1744661229.886:11359): avc:  denied  { unlink } for  pid=8109 comm="syz.0.3521" name="#f" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  119.402065][   T30] audit: type=1400 audit(1744661229.886:11360): avc:  denied  { unlink } for  pid=8109 comm="syz.0.3521" name="#10" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  119.434794][ T4794] bridge0: port 3(syz_tun) entered disabled state
[  119.457844][ T4794] device syz_tun left promiscuous mode
[  119.464749][ T4794] bridge0: port 3(syz_tun) entered disabled state
[  119.561271][ T8128] loop5: detected capacity change from 0 to 40427
[  119.629465][ T8128] F2FS-fs (loop5): Found nat_bits in checkpoint
[  119.689429][ T8128] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  119.707178][   T30] audit: type=1400 audit(1744661230.276:11361): avc:  denied  { rename } for  pid=8127 comm="syz.5.3529" name="bus" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  119.742698][  T501] attempt to access beyond end of device
[  119.742698][  T501] loop5: rw=2049, want=45112, limit=40427
[  119.765866][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.772972][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.780480][ T8138] device bridge_slave_0 entered promiscuous mode
[  119.787759][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.794685][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.802096][ T8138] device bridge_slave_1 entered promiscuous mode
[  119.865155][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.872053][ T8138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.879162][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.885918][ T8138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.900653][  T457] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.913478][  T457] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.969588][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.978486][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.002824][ T8161] device bridge0 entered promiscuous mode
[  120.010211][  T313] device bridge_slave_1 left promiscuous mode
[  120.016250][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.024773][  T313] device bridge_slave_0 left promiscuous mode
[  120.030985][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.039443][  T313] device veth1_macvtap left promiscuous mode
[  120.045365][  T313] device veth0_vlan left promiscuous mode
[  120.073776][ T8164] loop5: detected capacity change from 0 to 128
[  120.142438][ T8164] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  120.152957][ T8164] ext4 filesystem being mounted at /692/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  120.237732][ T8167] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8167 comm=syz.5.3545
[  120.270445][   T30] audit: type=1326 audit(1744661230.846:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[  120.296823][   T30] audit: type=1326 audit(1744661230.846:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[  120.321795][   T30] audit: type=1326 audit(1744661230.846:11364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[  120.348920][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.348919][   T30] audit: type=1326 audit(1744661230.846:11365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[  120.348948][   T30] audit: type=1326 audit(1744661230.846:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.4.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d68e0169 code=0x7ffc0000
[  120.359408][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.403390][ T8173] loop4: detected capacity change from 0 to 2048
[  120.411831][  T457] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.424422][  T457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.431699][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.440119][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.448176][  T457] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.455081][  T457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.462277][ T8173] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  120.462506][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3543'.
[  120.478410][ T8161] device syz_tun left promiscuous mode
[  120.483988][ T8161] bridge0: port 3(syz_tun) entered disabled state
[  120.491320][ T8161] device bridge_slave_1 left promiscuous mode
[  120.497306][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.500608][ T8173] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none.
[  120.529883][ T8161] device bridge_slave_0 left promiscuous mode
[  120.535963][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.543176][ T6770] Bluetooth: hci0: command 0x1003 tx timeout
[  120.549131][ T1768] Bluetooth: hci0: sending frame failed (-49)
[  120.557251][ T8161] device bridge0 left promiscuous mode
[  120.599109][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  120.607480][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.624901][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  120.634233][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.656912][ T8138] device veth0_vlan entered promiscuous mode
[  120.693781][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.706177][ T8183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8183 comm=syz.5.3551
[  120.707672][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.727409][ T8183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8183 comm=syz.5.3551
[  120.731243][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  120.749431][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.775915][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.783689][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  120.791835][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  120.802695][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  120.814198][ T8138] device veth1_macvtap entered promiscuous mode
[  120.827001][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  120.834869][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  120.851390][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  120.877005][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  120.890532][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  120.958215][ T8200] loop7: detected capacity change from 0 to 512
[  121.026067][ T8200] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.3559: casefold flag without casefold feature
[  121.066425][ T8200] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3559: couldn't read orphan inode 15 (err -117)
[  121.090727][ T8200] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  121.334889][ T8226] sch_fq: defrate 0 ignored.
[  121.393048][ T8231] Illegal XDP return value 4294967274, expect packet loss!
[  121.488049][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3580'.
[  121.873274][ T8312] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3610'.
[  122.000811][ T8325] loop7: detected capacity change from 0 to 512
[  122.049368][ T8325] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.3615: casefold flag without casefold feature
[  122.069606][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3619'.
[  122.078776][ T8325] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3615: couldn't read orphan inode 15 (err -117)
[  122.091147][ T8325] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  122.209510][ T8350] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.221103][ T8350] F2FS-fs (loop11): Unable to read 1th superblock
[  122.227545][ T8350] blk_update_request: I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.238840][ T8350] F2FS-fs (loop11): Unable to read 2th superblock
[  122.325166][ T8363] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[  122.519221][ T8385] loop4: detected capacity change from 0 to 1024
[  122.589663][ T8385] EXT4-fs (loop4): Ignoring removed orlov option
[  122.595859][ T8385] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  122.619122][ T6770] Bluetooth: hci0: command 0x1001 tx timeout
[  122.625027][ T1768] Bluetooth: hci0: sending frame failed (-49)
[  122.652434][ T8385] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nolazytime,quota,nomblk_io_submit,. Quota mode: writeback.
[  122.690342][ T8399] overlayfs: failed to clone lowerpath
[  123.020750][ T8428] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22
[  123.041978][ T8428] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  123.414940][ T8479] cgroup: Name too long
[  123.448552][   T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  123.506586][ T8496] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  123.715185][ T8525] kvm: pic: non byte write
[  123.818788][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.837412][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.847914][   T20] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  123.859324][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.904825][   T20] usb 5-1: config 0 descriptor??
[  124.196424][ T8574] fuse: Bad value for 'fd'
[  124.331623][   T30] kauditd_printk_skb: 160 callbacks suppressed
[  124.331640][   T30] audit: type=1400 audit(1744661234.906:11527): avc:  denied  { mounton } for  pid=8577 comm="syz.1.3727" path="/756/file0" dev="tmpfs" ino=3974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  124.382601][   T30] audit: type=1326 audit(1744661234.956:11528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67fa84169 code=0x7fc00000
[  124.409698][   T20] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0
[  124.416849][   T20] dragonrise 0003:0079:0006.0002: item fetching failed at offset 6/7
[  124.425068][   T20] dragonrise 0003:0079:0006.0002: parse failed
[  124.431105][   T20] dragonrise: probe of 0003:0079:0006.0002 failed with error -22
[  124.432349][   T30] audit: type=1400 audit(1744661235.006:11529): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  124.460475][   T30] audit: type=1400 audit(1744661235.006:11530): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.483019][   T30] audit: type=1400 audit(1744661235.006:11531): avc:  denied  { append } for  pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.505265][   T30] audit: type=1400 audit(1744661235.006:11532): avc:  denied  { open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.527553][   T30] audit: type=1400 audit(1744661235.006:11533): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.611841][    T6] usb 5-1: USB disconnect, device number 3
[  124.698684][  T312] Bluetooth: hci0: command 0x1009 tx timeout
[  124.831269][ T8582] netlink: 'syz.5.3728': attribute type 16 has an invalid length.
[  124.839180][ T8582] netlink: 'syz.5.3728': attribute type 17 has an invalid length.
[  124.862619][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  124.871055][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  124.880017][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  124.888166][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  124.896866][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.904989][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.913147][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.921328][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.948547][   T30] audit: type=1400 audit(1744661235.516:11534): avc:  denied  { create } for  pid=8583 comm="syz.5.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  124.975158][   T30] audit: type=1400 audit(1744661235.546:11535): avc:  denied  { unmount } for  pid=8138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  125.003179][ T8588] loop5: detected capacity change from 0 to 256
[  125.023514][ T8590] loop7: detected capacity change from 0 to 1024
[  125.033230][ T8588] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  125.051028][   T30] audit: type=1400 audit(1744661235.626:11536): avc:  denied  { mounton } for  pid=8587 comm="syz.5.3731" path="/749/file0/file0" dev="loop5" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  125.095875][ T8590] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #11: comm syz.7.3732: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  125.115746][ T8590] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3732: couldn't read orphan inode 11 (err -117)
[  125.130043][ T8594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3733'.
[  125.132939][ T8590] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback.
[  125.191716][ T8590] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.3732: Invalid block bitmap block 0 in block_group 0
[  125.205853][ T8590] EXT4-fs error (device loop7): ext4_acquire_dquot:6188: comm syz.7.3732: Failed to acquire dquot type 0
[  125.377439][ T8619] loop7: detected capacity change from 0 to 512
[  125.480339][ T8619] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback.
[  125.498373][ T8619] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.572435][ T8619] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #4: block 16: comm syz.7.3744: lblock 0 mapped to illegal pblock 16 (length 1)
[  125.609622][ T8619] EXT4-fs (loop7): Remounting filesystem read-only
[  125.674290][ T8138] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  125.698563][ T8138] EXT4-fs (loop7): Remounting filesystem read-only
[  125.722545][ T8138] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  125.744000][ T8636] syz.1.3752[8636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  125.744116][ T8636] syz.1.3752[8636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  125.756562][ T8138] EXT4-fs (loop7): Remounting filesystem read-only
[  125.794514][ T8138] EXT4-fs error (device loop7): ext4_quota_off:6477: inode #3: comm syz-executor: mark_inode_dirty error
[  125.806324][ T8138] EXT4-fs (loop7): Remounting filesystem read-only
[  125.813200][ T8138] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  125.823951][ T8138] EXT4-fs (loop7): Remounting filesystem read-only
[  125.837542][ T8138] EXT4-fs error (device loop7): ext4_quota_off:6477: inode #4: comm syz-executor: mark_inode_dirty error
[  125.854270][ T8639] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96
[  125.857467][ T8138] EXT4-fs (loop7): Remounting filesystem read-only
[  126.056615][ T8653] cgroup: noprefix used incorrectly
[  126.249976][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'.
[  126.260089][ T8673] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  126.312264][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.319355][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.330122][ T8661] device bridge_slave_0 entered promiscuous mode
[  126.339608][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.346532][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.354582][ T8661] device bridge_slave_1 entered promiscuous mode
[  126.521934][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'.
[  126.530834][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3783'.
[  126.551153][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'.
[  126.560478][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3783'.
[  126.597344][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  126.608391][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  126.619520][ T8709] x_tables: duplicate underflow at hook 4
[  126.632056][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  126.650172][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  126.664261][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.671143][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.701163][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.732884][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.741467][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.748341][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.761853][ T8723] loop5: detected capacity change from 0 to 256
[  126.769358][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.786251][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  126.797848][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  126.819116][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  126.832995][ T8661] device veth0_vlan entered promiscuous mode
[  126.839924][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  126.848372][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  126.860597][ T8723] FAT-fs (loop5): bogus number of FAT sectors
[  126.866885][ T8723] FAT-fs (loop5): Can't find a valid FAT filesystem
[  126.875013][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  126.879248][ T8734] loop4: detected capacity change from 0 to 512
[  126.896187][ T8661] device veth1_macvtap entered promiscuous mode
[  126.904506][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  126.920525][ T8734] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf,. Quota mode: writeback.
[  126.933967][ T8734] ext4 filesystem being mounted at /825/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.938761][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  126.995493][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.007025][ T8734] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #4: block 16: comm syz.4.3794: lblock 0 mapped to illegal pblock 16 (length 1)
[  127.029989][ T8250] device bridge_slave_1 left promiscuous mode
[  127.035960][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.071120][ T8250] device bridge_slave_0 left promiscuous mode
[  127.081477][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.089474][ T8734] EXT4-fs (loop4): Remounting filesystem read-only
[  127.109546][ T8250] device veth1_macvtap left promiscuous mode
[  127.116437][  T290] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  127.120333][ T8250] device veth0_vlan left promiscuous mode
[  127.136296][  T290] EXT4-fs (loop4): Remounting filesystem read-only
[  127.172445][ T4761] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  127.186331][ T4761] EXT4-fs (loop4): Remounting filesystem read-only
[  127.207931][ T4761] EXT4-fs error (device loop4): ext4_quota_off:6477: inode #3: comm syz.4.2057: mark_inode_dirty error
[  127.219457][ T4761] EXT4-fs (loop4): Remounting filesystem read-only
[  127.226109][ T4761] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  127.235904][ T4761] EXT4-fs (loop4): Remounting filesystem read-only
[  127.242527][ T4761] EXT4-fs error (device loop4): ext4_quota_off:6477: inode #4: comm syz.4.2057: mark_inode_dirty error
[  127.254012][ T4761] EXT4-fs (loop4): Remounting filesystem read-only
[  127.449786][ T8761] loop5: detected capacity change from 0 to 512
[  127.496906][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.503919][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.515635][ T8762] device bridge_slave_0 entered promiscuous mode
[  127.522933][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.529848][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.532425][ T8761] EXT4-fs (loop5): 1 orphan inode deleted
[  127.537310][ T8762] device bridge_slave_1 entered promiscuous mode
[  127.548396][ T8761] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  127.559566][ T8761] ext4 filesystem being mounted at /774/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.587826][ T8761] netlink: 'syz.5.3810': attribute type 7 has an invalid length.
[  127.596283][ T8761] netlink: 'syz.5.3810': attribute type 5 has an invalid length.
[  127.604145][ T8761] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3810'.
[  127.669679][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.676583][ T8762] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.683692][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.690559][ T8762] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.710532][ T8250] tipc: Disabling bearer <udp:s>
[  127.720589][ T8250] tipc: Left network mode
[  127.740825][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.748324][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.756056][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.769727][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.777785][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.784664][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.796957][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.805531][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.812404][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.830678][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.851316][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.882845][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.896408][ T8762] device veth0_vlan entered promiscuous mode
[  127.902969][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.911522][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.920385][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.933059][ T8788] x_tables: duplicate underflow at hook 4
[  127.944362][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.960545][ T8762] device veth1_macvtap entered promiscuous mode
[  127.973329][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.995798][ T8794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8794 comm=syz.1.3823
[  128.014909][ T8794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8794 comm=syz.1.3823
[  128.015154][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.213747][ T8821] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3835'.
[  128.223405][ T8821] netlink: 277 bytes leftover after parsing attributes in process `syz.9.3835'.
[  128.280058][ T8250] device bridge_slave_1 left promiscuous mode
[  128.287374][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.305788][ T8250] device bridge_slave_0 left promiscuous mode
[  128.308628][ T8829] loop8: detected capacity change from 0 to 2048
[  128.318459][ T8836] incfs: ino conflict with backing FS 2
[  128.324144][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.340064][ T8250] device veth1_macvtap left promiscuous mode
[  128.383721][ T8829] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,discard,noblock_validity,,errors=continue. Quota mode: none.
[  128.494257][ T8854] loop9: detected capacity change from 0 to 512
[  128.533475][ T8854] EXT4-fs (loop9): 1 orphan inode deleted
[  128.539400][ T8854] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.550855][ T8854] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.583178][ T8860] loop8: detected capacity change from 0 to 2048
[  128.609159][ T8854] loop_set_status: loop9 () has still dirty pages (nrpages=3)
[  128.627939][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.649345][ T8860] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  128.650441][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.676217][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.685477][ T8860] EXT4-fs (loop8): Ignoring removed nobh option
[  128.688445][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.715278][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.736256][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.748084][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.770715][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.790677][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.791235][ T8860] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,nobh,bsddf,. Quota mode: none.
[  128.802653][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.853714][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.873510][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.885280][ T8762] EXT4-fs error (device loop9): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /8/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.909495][ T8762] EXT4-fs error (device loop9): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  128.931216][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.949103][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.961061][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.974765][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.986849][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.999198][ T8762] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  129.123165][ T8886] loop6: detected capacity change from 0 to 1024
[  129.193370][ T8886] EXT4-fs (loop6): Ignoring removed nobh option
[  129.223127][ T8886] EXT4-fs (loop6): Ignoring removed bh option
[  129.248206][ T8886] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  129.324182][ T8886] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  129.351048][   T30] kauditd_printk_skb: 171 callbacks suppressed
[  129.351063][   T30] audit: type=1400 audit(1744661239.926:11704): avc:  denied  { bind } for  pid=8905 comm="syz.8.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  129.383921][   T10] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  129.406317][   T30] audit: type=1400 audit(1744661239.936:11705): avc:  denied  { map } for  pid=8884 comm="syz.6.3861" path="/10/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  129.429531][   T30] audit: type=1400 audit(1744661239.936:11706): avc:  denied  { execute } for  pid=8884 comm="syz.6.3861" path="/10/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  129.470986][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.478194][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.485599][ T8896] device bridge_slave_0 entered promiscuous mode
[  129.499317][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.506474][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.514267][ T8896] device bridge_slave_1 entered promiscuous mode
[  129.554543][ T8920] sch_fq: defrate 0 ignored.
[  129.581085][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3881'.
[  129.684747][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3886'.
[  129.707436][   T30] audit: type=1400 audit(1744661240.276:11707): avc:  denied  { mount } for  pid=8942 comm="syz.5.3888" name="/" dev="configfs" ino=13270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  129.762313][   T30] audit: type=1400 audit(1744661240.306:11708): avc:  denied  { search } for  pid=8942 comm="syz.5.3888" name="/" dev="configfs" ino=13270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  129.785025][   T30] audit: type=1400 audit(1744661240.306:11709): avc:  denied  { read } for  pid=8942 comm="syz.5.3888" name="/" dev="configfs" ino=13270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  129.807665][   T30] audit: type=1400 audit(1744661240.306:11710): avc:  denied  { open } for  pid=8942 comm="syz.5.3888" path="/" dev="configfs" ino=13270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  129.854978][ T8955] netlink: 'syz.1.3892': attribute type 1 has an invalid length.
[  129.864079][ T8955] netlink: 'syz.1.3892': attribute type 2 has an invalid length.
[  129.874467][ T8949] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3890'.
[  129.890358][ T8955] netlink: 'syz.1.3892': attribute type 1 has an invalid length.
[  129.899148][ T8955] netlink: 'syz.1.3892': attribute type 2 has an invalid length.
[  129.916738][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  129.943857][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  129.954675][   T30] audit: type=1400 audit(1744661240.526:11711): avc:  denied  { read } for  pid=8956 comm="syz.5.3893" name="ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.990652][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  129.998629][   T30] audit: type=1400 audit(1744661240.526:11712): avc:  denied  { open } for  pid=8956 comm="syz.5.3893" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.999141][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  130.029315][   T30] audit: type=1400 audit(1744661240.526:11713): avc:  denied  { map } for  pid=8956 comm="syz.5.3893" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.061760][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.068679][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.087744][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.096191][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.105578][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.112488][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.122948][ T8973] overlayfs: failed to clone upperpath
[  130.129823][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.137756][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  130.153097][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  130.171550][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.196542][ T8896] device veth0_vlan entered promiscuous mode
[  130.205916][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.215308][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.227844][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  130.245703][ T8896] device veth1_macvtap entered promiscuous mode
[  130.255656][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  130.287896][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.296793][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.521739][ T9022] loop2: detected capacity change from 0 to 512
[  130.531231][ T8250] device bridge_slave_1 left promiscuous mode
[  130.537221][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.554220][ T8250] device bridge_slave_0 left promiscuous mode
[  130.563575][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.571963][ T9022] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.3921: corrupted in-inode xattr
[  130.584792][ T8250] device veth1_macvtap left promiscuous mode
[  130.590932][ T8250] device veth0_vlan left promiscuous mode
[  130.596888][ T9022] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3921: couldn't read orphan inode 15 (err -117)
[  130.609473][ T9022] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,dioread_lock,noquota,,errors=continue. Quota mode: writeback.
[  130.731246][ T9041] syz.2.3924[9041] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.731395][ T9041] syz.2.3924[9041] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.818324][ T9052] incfs: Error accessing: ./file0.
[  130.844669][ T9049] loop2: detected capacity change from 0 to 128
[  130.856873][ T9052] incfs: mount failed -20
[  131.045116][ T9067] loop8: detected capacity change from 0 to 512
[  131.123771][ T9067] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  131.124538][ T9056] loop6: detected capacity change from 0 to 40427
[  131.148251][ T9067] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.150259][ T9056] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  131.171979][ T9056] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  131.207613][ T9056] F2FS-fs (loop6): invalid crc value
[  131.228203][ T9056] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  131.251760][ T9095] loop2: detected capacity change from 0 to 512
[  131.261628][ T9056] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  131.268589][ T9056] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  131.327900][ T9107] binder: 9106:9107 ioctl c018620c 200000000040 returned -22
[  131.360857][ T9112] loop8: detected capacity change from 0 to 1024
[  131.371215][ T9095] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,mb_optimize_scan=0x0000000000000001,grpjquota=,journal_ioprio=0x0000000000000007,dioread_lock,,errors=continue. Quota mode: writeback.
[  131.393887][ T9095] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.395951][ T9112] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5
[  131.395951][ T9112] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  131.395951][ T9112] 
[  131.457421][ T9112] EXT4-fs (loop8): mounted filesystem without journal. Opts: nolazytime,jqfmt=vfsv1,barrier=0x0000000000080000,max_batch_time=0x0000000000000008,block_validity,resuid=0x0000000000000000,nouser_xattr,noauto_da_alloc,nolazytime,,errors=continue. Quota mode: none.
[  132.107799][ T9229] loop8: detected capacity change from 0 to 256
[  132.183104][ T9227] loop2: detected capacity change from 0 to 8192
[  132.191280][ T9229] exFAT-fs (loop8): bogus data start sector
[  132.197009][ T9229] exFAT-fs (loop8): failed to read boot sector
[  132.213653][ T9229] exFAT-fs (loop8): failed to recognize exfat type
[  132.428993][ T9288] tmpfs: Unknown parameter 'mp'
[  132.713148][ T9345] device bridge0 entered promiscuous mode
[  132.719172][ T9345] __nla_validate_parse: 3 callbacks suppressed
[  132.719189][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4022'.
[  132.734417][ T9345] device bridge_slave_1 left promiscuous mode
[  132.740754][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.753568][ T9345] device bridge_slave_0 left promiscuous mode
[  132.759822][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.770414][ T9345] device bridge0 left promiscuous mode
[  132.836531][ T9341] loop2: detected capacity change from 0 to 40427
[  132.921158][ T9341] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  132.928916][ T9341] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  132.938356][ T9341] F2FS-fs (loop2): invalid crc value
[  132.945369][ T9341] F2FS-fs (loop2): Found nat_bits in checkpoint
[  132.991915][ T9341] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  132.998882][ T9341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  133.269653][ T9378] loop2: detected capacity change from 0 to 256
[  133.288105][ T9380] loop8: detected capacity change from 0 to 256
[  133.301778][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'.
[  133.310695][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4033'.
[  133.322546][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'.
[  133.331661][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4033'.
[  133.359039][ T9380] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.369888][ T9380] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  133.380822][ T9380] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  133.491771][ T9388] device veth1_macvtap left promiscuous mode
[  133.507771][ T9388] device macsec0 entered promiscuous mode
[  133.764035][ T9392] loop8: detected capacity change from 0 to 40427
[  133.799006][ T9392] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  133.806653][ T9392] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  133.816238][ T9392] F2FS-fs (loop8): invalid crc value
[  133.845722][ T9392] F2FS-fs (loop8): Found nat_bits in checkpoint
[  133.899173][ T9392] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  133.906172][ T9392] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  133.942904][ T9420] loop2: detected capacity change from 0 to 512
[  133.957957][ T9422] loop6: detected capacity change from 0 to 128
[  133.965492][ T9392] attempt to access beyond end of device
[  133.965492][ T9392] loop8: rw=2049, want=45104, limit=40427
[  133.978773][ T9392] attempt to access beyond end of device
[  133.978773][ T9392] loop8: rw=2049, want=40968, limit=40427
[  133.998668][ T9422] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.009323][ T9422] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  134.042022][ T9420] EXT4-fs (loop2): Test dummy encryption mode enabled
[  134.065888][ T9420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  134.080163][ T9420] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.4052: bad orphan inode 131083
[  134.090648][ T9420] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  134.118629][   T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  134.154076][ T9429] device bridge0 entered promiscuous mode
[  134.160387][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4054'.
[  134.169437][ T9429] device bridge_slave_1 left promiscuous mode
[  134.175450][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.183191][ T9429] device bridge_slave_0 left promiscuous mode
[  134.189333][ T9429] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.200637][ T9420] overlayfs: upper fs needs to support d_type.
[  134.208369][ T9420] overlayfs: failed to set xattr on upper
[  134.214966][ T9429] device bridge0 left promiscuous mode
[  134.226554][ T8896] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /33/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  134.290761][ T9433] netlink: 'syz.6.4057': attribute type 16 has an invalid length.
[  134.298484][ T9433] netlink: 'syz.6.4057': attribute type 17 has an invalid length.
[  134.328579][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  134.343347][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  134.381520][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  134.394615][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  134.403811][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.412912][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  134.421799][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  134.430568][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  134.498661][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.526689][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.546549][   T26] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  134.558191][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.572515][   T26] usb 6-1: config 0 descriptor??
[  134.609474][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.616339][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.625499][ T9436] loop8: detected capacity change from 0 to 40427
[  134.639877][ T9439] device bridge_slave_0 entered promiscuous mode
[  134.646102][ T9436] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  134.651821][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.660680][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.667746][ T9436] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  134.668151][ T9439] device bridge_slave_1 entered promiscuous mode
[  134.684214][ T9436] F2FS-fs (loop8): invalid crc value
[  134.699606][ T9436] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  134.734665][ T9436] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  134.741835][ T9436] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  134.784904][ T9436] netlink: 136 bytes leftover after parsing attributes in process `syz.8.4059'.
[  134.831290][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.838180][ T9439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.845333][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.852202][ T9439] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.892731][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  134.913263][   T30] kauditd_printk_skb: 410 callbacks suppressed
[  134.913279][   T30] audit: type=1400 audit(1744661245.486:12124): avc:  denied  { ioctl } for  pid=9459 comm="syz.6.4068" path="socket:[46838]" dev="sockfs" ino=46838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  134.916827][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.976154][ T9462] loop6: detected capacity change from 0 to 1024
[  134.985742][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.010051][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  135.016192][ T9462] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.4069: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  135.028968][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.037613][ T9462] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.4069: couldn't read orphan inode 11 (err -117)
[  135.055997][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.062895][ T9287] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.070580][ T9462] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback.
[  135.099479][   T26] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0
[  135.108344][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  135.117928][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.119711][ T9462] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.4069: Invalid block bitmap block 0 in block_group 0
[  135.126139][   T26] dragonrise 0003:0079:0006.0003: item fetching failed at offset 6/7
[  135.147634][ T9462] Quota error (device loop6): write_blk: dquota write failed
[  135.149176][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.154947][ T9462] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  135.161727][ T9287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.162494][   T26] dragonrise 0003:0079:0006.0003: parse failed
[  135.171693][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.178819][ T9462] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.4069: Failed to acquire dquot type 0
[  135.184915][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.192924][   T26] dragonrise: probe of 0003:0079:0006.0003 failed with error -22
[  135.203717][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.234348][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.247551][ T9289] device bridge_slave_1 left promiscuous mode
[  135.253638][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.261679][ T9289] device bridge_slave_0 left promiscuous mode
[  135.269066][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.287222][ T9289] device veth1_macvtap left promiscuous mode
[  135.296247][ T9289] device veth0_vlan left promiscuous mode
[  135.327405][ T6757] usb 6-1: USB disconnect, device number 3
[  135.370754][ T9478] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4074'.
[  135.420757][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  135.429055][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  135.440976][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  135.448910][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  135.456877][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  135.464566][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  135.473121][ T9439] device veth0_vlan entered promiscuous mode
[  135.484313][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  135.492520][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  135.502147][ T9439] device veth1_macvtap entered promiscuous mode
[  135.512544][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  135.520113][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  135.528306][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  135.537849][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.546382][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.648788][   T30] audit: type=1326 audit(1744661246.226:12125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000
[  135.673146][  T312] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  135.680856][   T30] audit: type=1326 audit(1744661246.226:12126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000
[  135.704514][   T30] audit: type=1326 audit(1744661246.226:12127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000
[  135.728030][   T30] audit: type=1326 audit(1744661246.226:12128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000
[  135.752752][   T30] audit: type=1326 audit(1744661246.226:12129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000
[  135.776578][   T30] audit: type=1326 audit(1744661246.226:12130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000
[  135.800468][   T30] audit: type=1326 audit(1744661246.226:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8987e5169 code=0x7ffc0000
[  135.882495][ T9496] loop3: detected capacity change from 0 to 512
[  135.915436][ T9496] EXT4-fs (loop3): Test dummy encryption mode enabled
[  135.926525][ T9496] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  135.937500][ T9496] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.4082: bad orphan inode 131083
[  135.949556][ T9496] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  136.048084][ T9496] overlayfs: upper fs needs to support d_type.
[  136.057698][ T9496] overlayfs: failed to set xattr on upper
[  136.073758][ T9439] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /5/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  136.112917][  T312] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.124647][  T312] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.209045][  T312] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  136.218046][  T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  136.235721][  T312] usb 7-1: SerialNumber: syz
[  136.421148][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.430469][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.438032][ T9523] device bridge_slave_0 entered promiscuous mode
[  136.450894][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.460168][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.469307][ T9523] device bridge_slave_1 entered promiscuous mode
[  136.530567][  T312] usb 7-1: 0:2 : does not exist
[  136.537113][  T312] usb 7-1: USB disconnect, device number 2
[  136.567034][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.573924][ T9523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.581160][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.587973][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.619473][ T9535] device veth1_macvtap left promiscuous mode
[  136.625430][ T9535] device macsec0 entered promiscuous mode
[  136.643277][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  136.656014][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.667660][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.686124][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.694282][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.701164][ T9164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.708723][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.717426][ T9164] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.724443][ T9164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.749083][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.765627][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  136.792329][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  136.794370][ T9523] device veth0_vlan entered promiscuous mode
[  136.825595][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.836806][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.845738][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.853369][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  136.866779][ T9547] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  136.888125][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.901335][ T9523] device veth1_macvtap entered promiscuous mode
[  136.921892][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  136.941248][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  137.054219][ T9289] device bridge_slave_1 left promiscuous mode
[  137.074466][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.089213][ T9289] device bridge_slave_0 left promiscuous mode
[  137.102924][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.122564][ T9289] device veth1_macvtap left promiscuous mode
[  137.135774][ T9289] device veth0_vlan left promiscuous mode
[  137.159874][ T9573] loop0: detected capacity change from 0 to 256
[  137.337471][ T9584] loop6: detected capacity change from 0 to 1024
[  137.431642][ T9584] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.450670][    C1] ==================================================================
[  137.458576][    C1] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa0/0x6f0
[  137.460264][ T9584] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  137.466386][    C1] Read of size 8 at addr ffff88810a749c00 by task kworker/1:3/312
[  137.484183][    C1] 
[  137.486350][    C1] CPU: 1 PID: 312 Comm: kworker/1:3 Not tainted 5.15.178-syzkaller-00492-gb4b92d737f96 #0
[  137.496068][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  137.505970][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  137.512124][    C1] Call Trace:
[  137.515250][    C1]  <IRQ>
[  137.517955][    C1]  dump_stack_lvl+0x151/0x1c0
[  137.522450][    C1]  ? io_uring_drop_tctx_refs+0x190/0x190
[  137.527921][    C1]  ? panic+0x760/0x760
[  137.531826][    C1]  print_address_description+0x87/0x3b0
[  137.537207][    C1]  kasan_report+0x179/0x1c0
[  137.541543][    C1]  ? dev_map_generic_redirect+0xa0/0x6f0
[  137.547013][    C1]  ? dev_map_generic_redirect+0xa0/0x6f0
[  137.552479][    C1]  __asan_report_load8_noabort+0x14/0x20
[  137.557951][    C1]  dev_map_generic_redirect+0xa0/0x6f0
[  137.563253][    C1]  ? ____kasan_slab_free+0x131/0x160
[  137.568363][    C1]  ? bq_enqueue+0x3e0/0x3e0
[  137.572704][    C1]  ? bpf_prog_run_generic_xdp+0x965/0x1070
[  137.578345][    C1]  xdp_do_generic_redirect+0x42e/0xb40
[  137.583642][    C1]  do_xdp_generic+0x50b/0x7c0
[  137.588161][    C1]  ? slab_free_freelist_hook+0xbd/0x190
[  137.593535][    C1]  ? kmem_cache_free+0x115/0x330
[  137.598321][    C1]  ? file_free_rcu+0x9f/0xb0
[  137.602768][    C1]  ? generic_xdp_tx+0x490/0x490
[  137.607425][    C1]  ? __sanitizer_cov_trace_pc+0x8/0x60
[  137.612810][    C1]  ? migrate_disable+0xd9/0x190
[  137.617508][    C1]  __netif_receive_skb_core+0x1706/0x3640
[  137.623051][    C1]  ? set_rps_cpu+0x5e0/0x5e0
[  137.627475][    C1]  ? bpf_trace_run2+0x210/0x210
[  137.632171][    C1]  ? file_free_rcu+0x9f/0xb0
[  137.636588][    C1]  ? ____kasan_slab_free+0x131/0x160
[  137.641709][    C1]  ? file_free_rcu+0x9f/0xb0
[  137.646153][    C1]  ? __bpf_trace_kmem_cache_free+0x99/0xc0
[  137.651780][    C1]  __netif_receive_skb+0x11c/0x530
[  137.656726][    C1]  ? deliver_ptype_list_skb+0x3b0/0x3b0
[  137.662106][    C1]  ? __kasan_check_write+0x14/0x20
[  137.667052][    C1]  ? _raw_spin_lock+0xa4/0x1b0
[  137.671649][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[  137.676859][    C1]  process_backlog+0x31c/0x650
[  137.681471][    C1]  __napi_poll+0xc4/0x5a0
[  137.685630][    C1]  net_rx_action+0x47d/0xc50
[  137.690055][    C1]  ? net_tx_action+0x550/0x550
[  137.694649][    C1]  ? __sched_clock_gtod_offset+0xd0/0x100
[  137.700211][    C1]  handle_softirqs+0x25e/0x5c0
[  137.704810][    C1]  __do_softirq+0xb/0xd
[  137.708811][    C1]  do_softirq+0xf6/0x150
[  137.712878][    C1]  </IRQ>
[  137.715655][    C1]  <TASK>
[  137.718428][    C1]  ? __local_bh_enable_ip+0x80/0x80
[  137.723468][    C1]  ? _raw_spin_unlock_irqrestore+0x5c/0x80
[  137.729111][    C1]  __local_bh_enable_ip+0x75/0x80
[  137.733966][    C1]  _raw_read_unlock_bh+0x29/0x30
[  137.738740][    C1]  wg_socket_send_skb_to_peer+0x178/0x1d0
[  137.744297][    C1]  wg_packet_tx_worker+0x1e6/0x530
[  137.749244][    C1]  process_one_work+0x6bb/0xc10
[  137.753932][    C1]  worker_thread+0xad5/0x12a0
[  137.758443][    C1]  ? _raw_spin_lock+0x1b0/0x1b0
[  137.763131][    C1]  kthread+0x421/0x510
[  137.767052][    C1]  ? worker_clr_flags+0x180/0x180
[  137.771896][    C1]  ? kthread_blkcg+0xd0/0xd0
[  137.776410][    C1]  ret_from_fork+0x1f/0x30
[  137.780663][    C1]  </TASK>
[  137.783528][    C1] 
[  137.785694][    C1] Allocated by task 9523:
[  137.789861][    C1]  ____kasan_kmalloc+0xdb/0x110
[  137.794548][    C1]  __kasan_kmalloc+0x9/0x10
[  137.798892][    C1]  __kmalloc+0x13f/0x2c0
[  137.802966][    C1]  ext4_find_extent+0x375/0xe30
[  137.807824][    C1]  ext4_ext_map_blocks+0x269/0x7450
[  137.812849][    C1]  ext4_map_blocks+0xa60/0x1c70
[  137.817536][    C1]  ext4_getblk+0x19f/0x700
[  137.821789][    C1]  ext4_bread+0x2f/0x180
[  137.825866][    C1]  ext4_append+0x31f/0x5b0
[  137.830127][    C1]  ext4_init_new_dir+0x33a/0xa20
[  137.834891][    C1]  ext4_mkdir+0x4f2/0xce0
[  137.839055][    C1]  vfs_mkdir+0x3f6/0x610
[  137.843139][    C1]  do_mkdirat+0x1eb/0x450
[  137.847302][    C1]  __x64_sys_mkdirat+0x89/0xa0
[  137.851906][    C1]  x64_sys_call+0x6c6/0x9a0
[  137.856239][    C1]  do_syscall_64+0x3b/0xb0
[  137.860494][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  137.866221][    C1] 
[  137.868392][    C1] Freed by task 9523:
[  137.872211][    C1]  kasan_set_track+0x4b/0x70
[  137.876639][    C1]  kasan_set_free_info+0x23/0x40
[  137.881413][    C1]  ____kasan_slab_free+0x126/0x160
[  137.886588][    C1]  __kasan_slab_free+0x11/0x20
[  137.891184][    C1]  slab_free_freelist_hook+0xbd/0x190
[  137.896400][    C1]  kfree+0xcc/0x270
[  137.900036][    C1]  ext4_ext_map_blocks+0x2834/0x7450
[  137.905160][    C1]  ext4_map_blocks+0xa60/0x1c70
[  137.909848][    C1]  ext4_getblk+0x19f/0x700
[  137.914095][    C1]  ext4_bread+0x2f/0x180
[  137.918176][    C1]  ext4_append+0x31f/0x5b0
[  137.922427][    C1]  ext4_init_new_dir+0x33a/0xa20
[  137.927206][    C1]  ext4_mkdir+0x4f2/0xce0
[  137.931376][    C1]  vfs_mkdir+0x3f6/0x610
[  137.935448][    C1]  do_mkdirat+0x1eb/0x450
[  137.939868][    C1]  __x64_sys_mkdirat+0x89/0xa0
[  137.944465][    C1]  x64_sys_call+0x6c6/0x9a0
[  137.948811][    C1]  do_syscall_64+0x3b/0xb0
[  137.953058][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  137.958788][    C1] 
[  137.960957][    C1] The buggy address belongs to the object at ffff88810a749c00
[  137.960957][    C1]  which belongs to the cache kmalloc-96 of size 96
[  137.974669][    C1] The buggy address is located 0 bytes inside of
[  137.974669][    C1]  96-byte region [ffff88810a749c00, ffff88810a749c60)
[  137.987511][    C1] The buggy address belongs to the page:
[  137.992984][    C1] page:ffffea000429d240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a749
[  138.003048][    C1] flags: 0x4000000000000200(slab|zone=1)
[  138.008523][    C1] raw: 4000000000000200 ffffea0004476940 0000000d0000000d ffff888100042900
[  138.016945][    C1] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[  138.025353][    C1] page dumped because: kasan: bad access detected
[  138.031614][    C1] page_owner tracks the page as allocated
[  138.037159][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2168099305, free_ts 0
[  138.051650][    C1]  post_alloc_hook+0x1a3/0x1b0
[  138.056252][    C1]  prep_new_page+0x1b/0x110
[  138.060590][    C1]  get_page_from_freelist+0x3550/0x35d0
[  138.065980][    C1]  __alloc_pages+0x27e/0x8f0
[  138.070401][    C1]  new_slab+0x9a/0x4e0
[  138.074301][    C1]  ___slab_alloc+0x39e/0x830
[  138.078732][    C1]  __slab_alloc+0x4a/0x90
[  138.082902][    C1]  kmem_cache_alloc_trace+0x147/0x270
[  138.088102][    C1]  blk_alloc_flush_queue+0x7f/0x260
[  138.093311][    C1]  blk_mq_realloc_hw_ctxs+0xc0a/0x1790
[  138.098614][    C1]  blk_mq_init_allocated_queue+0x449/0x16f0
[  138.104335][    C1]  blk_mq_init_queue+0x6b/0xd0
[  138.108938][    C1]  scsi_alloc_sdev+0x674/0xa10
[  138.113549][    C1]  scsi_probe_and_add_lun+0x199/0x4320
[  138.118836][    C1]  __scsi_scan_target+0x1ed/0xe30
[  138.123691][    C1]  scsi_scan_host_selected+0x334/0x5f0
[  138.129001][    C1] page_owner free stack trace missing
[  138.134198][    C1] 
[  138.136360][    C1] Memory state around the buggy address:
[  138.141834][    C1]  ffff88810a749b00: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[  138.149729][    C1]  ffff88810a749b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  138.157627][    C1] >ffff88810a749c00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  138.165523][    C1]                    ^
[  138.169431][    C1]  ffff88810a749c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  138.177331][    C1]  ffff88810a749d00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[  138.185227][    C1] ==================================================================
[  138.193125][    C1] Disabling lock debugging due to kernel taint
[  138.199203][    C1] BUG: kernel NULL pointer dereference, address: 0000000000000000
[  138.206755][    C1] #PF: supervisor instruction fetch in kernel mode
[  138.213098][    C1] #PF: error_code(0x0010) - not-present page
[  138.218908][    C1] PGD 126348067 P4D 126348067 PUD 0 
[  138.224026][    C1] Oops: 0010 [#1] PREEMPT SMP KASAN
[  138.229058][    C1] CPU: 1 PID: 312 Comm: kworker/1:3 Tainted: G    B             5.15.178-syzkaller-00492-gb4b92d737f96 #0
[  138.240172][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  138.250064][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  138.255969][    C1] RIP: 0010:0x0
[  138.259268][    C1] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[  138.266813][    C1] RSP: 0018:ffffc900001d0580 EFLAGS: 00010246
[  138.272724][    C1] RAX: ffffffff83f51017 RBX: ffffc900001d0780 RCX: ffff88810d0f0000
[  138.280525][    C1] RDX: 0000000000000100 RSI: ffff88810c846f50 RDI: ffffc900001d0780
[  138.288333][    C1] RBP: ffffc900001d05a0 R08: ffffffff83e8ffc7 R09: ffffc900001d0780
[  138.296143][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900001d0788
[  138.303995][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810c846f50
[  138.311768][    C1] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  138.320534][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.326957][    C1] CR2: ffffffffffffffd6 CR3: 000000013887f000 CR4: 00000000003506a0
[  138.334770][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  138.342577][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  138.350388][    C1] Call Trace:
[  138.353517][    C1]  <IRQ>
[  138.356207][    C1]  ? __die_body+0x62/0xb0
[  138.360374][    C1]  ? __die+0x7e/0x90
[  138.364108][    C1]  ? page_fault_oops+0x7f9/0xa90
[  138.368882][    C1]  ? kernelmode_fixup_or_oops+0xd0/0xd0
[  138.374260][    C1]  ? __handle_irq_event_percpu+0x6c5/0x730
[  138.379901][    C1]  ? __kasan_check_write+0x14/0x20
[  138.384845][    C1]  ? _raw_spin_lock+0xa4/0x1b0
[  138.389454][    C1]  ? is_errata93+0xc7/0x240
[  138.393790][    C1]  ? exc_page_fault+0x510/0x7f0
[  138.398479][    C1]  ? asm_exc_page_fault+0x27/0x30
[  138.403336][    C1]  ? bpf_prog_run_generic_xdp+0x477/0x1070
[  138.408976][    C1]  ? bpf_dispatcher_xdp_func+0x17/0x30
[  138.414274][    C1]  bpf_dispatcher_xdp_func+0x20/0x30
[  138.419388][    C1]  bpf_prog_run_generic_xdp+0x4f3/0x1070
[  138.424862][    C1]  dev_map_generic_redirect+0x2f7/0x6f0
[  138.430242][    C1]  ? bq_enqueue+0x3e0/0x3e0
[  138.434583][    C1]  xdp_do_generic_redirect+0x42e/0xb40
[  138.439878][    C1]  do_xdp_generic+0x50b/0x7c0
[  138.444386][    C1]  ? slab_free_freelist_hook+0xbd/0x190
[  138.449765][    C1]  ? kmem_cache_free+0x115/0x330
[  138.454539][    C1]  ? file_free_rcu+0x9f/0xb0
[  138.458967][    C1]  ? generic_xdp_tx+0x490/0x490
[  138.463651][    C1]  ? __sanitizer_cov_trace_pc+0x8/0x60
[  138.468949][    C1]  ? migrate_disable+0xd9/0x190
[  138.473634][    C1]  __netif_receive_skb_core+0x1706/0x3640
[  138.479195][    C1]  ? set_rps_cpu+0x5e0/0x5e0
[  138.483671][    C1]  ? bpf_trace_run2+0x210/0x210
[  138.488314][    C1]  ? file_free_rcu+0x9f/0xb0
[  138.492729][    C1]  ? ____kasan_slab_free+0x131/0x160
[  138.497855][    C1]  ? file_free_rcu+0x9f/0xb0
[  138.502275][    C1]  ? __bpf_trace_kmem_cache_free+0x99/0xc0
[  138.507920][    C1]  __netif_receive_skb+0x11c/0x530
[  138.512868][    C1]  ? deliver_ptype_list_skb+0x3b0/0x3b0
[  138.518245][    C1]  ? __kasan_check_write+0x14/0x20
[  138.523194][    C1]  ? _raw_spin_lock+0xa4/0x1b0
[  138.527792][    C1]  ? _raw_spin_trylock_bh+0x190/0x190
[  138.533007][    C1]  process_backlog+0x31c/0x650
[  138.537601][    C1]  __napi_poll+0xc4/0x5a0
[  138.541768][    C1]  net_rx_action+0x47d/0xc50
[  138.546299][    C1]  ? net_tx_action+0x550/0x550
[  138.550897][    C1]  ? __sched_clock_gtod_offset+0xd0/0x100
[  138.556452][    C1]  handle_softirqs+0x25e/0x5c0
[  138.561052][    C1]  __do_softirq+0xb/0xd
[  138.565042][    C1]  do_softirq+0xf6/0x150
[  138.569122][    C1]  </IRQ>
[  138.571900][    C1]  <TASK>
[  138.574680][    C1]  ? __local_bh_enable_ip+0x80/0x80
[  138.579710][    C1]  ? _raw_spin_unlock_irqrestore+0x5c/0x80
[  138.585357][    C1]  __local_bh_enable_ip+0x75/0x80
[  138.590214][    C1]  _raw_read_unlock_bh+0x29/0x30
[  138.594987][    C1]  wg_socket_send_skb_to_peer+0x178/0x1d0
[  138.600541][    C1]  wg_packet_tx_worker+0x1e6/0x530
[  138.605492][    C1]  process_one_work+0x6bb/0xc10
[  138.610178][    C1]  worker_thread+0xad5/0x12a0
[  138.614692][    C1]  ? _raw_spin_lock+0x1b0/0x1b0
[  138.619377][    C1]  kthread+0x421/0x510
[  138.623282][    C1]  ? worker_clr_flags+0x180/0x180
[  138.628141][    C1]  ? kthread_blkcg+0xd0/0xd0
[  138.632565][    C1]  ret_from_fork+0x1f/0x30
[  138.637089][    C1]  </TASK>
[  138.639961][    C1] Modules linked in:
[  138.643702][    C1] CR2: 0000000000000000
[  138.647691][    C1] ---[ end trace edd06a9676636a0c ]---
[  138.652981][    C1] RIP: 0010:0x0
[  138.656276][    C1] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6.
[  138.663827][    C1] RSP: 0018:ffffc900001d0580 EFLAGS: 00010246
[  138.669730][    C1] RAX: ffffffff83f51017 RBX: ffffc900001d0780 RCX: ffff88810d0f0000
[  138.677539][    C1] RDX: 0000000000000100 RSI: ffff88810c846f50 RDI: ffffc900001d0780
[  138.685356][    C1] RBP: ffffc900001d05a0 R08: ffffffff83e8ffc7 R09: ffffc900001d0780
[  138.693162][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900001d0788
[  138.700976][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810c846f50
[  138.708779][    C1] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  138.717545][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.723965][    C1] CR2: ffffffffffffffd6 CR3: 000000013887f000 CR4: 00000000003506a0
[  138.731787][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  138.739593][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  138.747418][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  138.754692][    C1] Kernel Offset: disabled
[  138.758830][    C1] Rebooting in 86400 seconds..