last executing test programs:

18.763018053s ago: executing program 1 (id=99):
r0 = socket(0x2, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x81}}}}}}, 0x0)

18.762801353s ago: executing program 1 (id=102):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x1054, &(0x7f0000000000)={0x0, 0x10000000, 0x1, 0x1, 0x21e})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080), 0x0)

18.741967775s ago: executing program 1 (id=104):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000005b40)='./sys\x00', 0x0, &(0x7f0000005b80)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x4c3}}, {@data_journal}, {@i_version}]}, 0x1, 0x27a6, &(0x7f0000005c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000011b80)='./bus\x00', 0x40942, 0x1c3)
r0 = open(&(0x7f0000011bc0)='./bus\x00', 0x185102, 0x0)
ftruncate(r0, 0x2007ffb)
sendfile(r0, r0, 0x0, 0x1000000201005)
write$P9_RWRITE(r0, &(0x7f0000000280)={0xb, 0x77, 0x1, 0x8}, 0xb)

17.71935705s ago: executing program 1 (id=130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000b0601020000000000000000000000000900020073797a310000000005000100060000002c0007801800018014000240fe8000000000000000000000000010bb060004400e1f0000050007"], 0x54}}, 0x0)

17.362750517s ago: executing program 0 (id=133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x3e, 0x301, 0x2, 0x0, {0x3, 0x1}, [@nested={0x4, 0x1d}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

17.347608368s ago: executing program 0 (id=135):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000004f80)=@broute={'broute\x00', 0x20, 0x5, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000003dc0], 0x0, 0x0, &(0x7f0000003dc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x0, 0x21, 0x88fb, 'bridge_slave_1\x00', 'wg1\x00', 'hsr0\x00', 'hsr0\x00', @broadcast, [0xff, 0x0, 0x7f, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x45}, [0x0, 0xff, 0x101, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x578}}}}]}, {0x0, '\x00', 0x3}]}, 0x1a8)

17.32658911s ago: executing program 1 (id=136):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000500)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x4, 0xfd90, &(0x7f00000008c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x366, 0x10, &(0x7f0000000a00), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000b40), &(0x7f0000000bc0)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000002a00)=""/4096, 0x8ec0}], 0x1}, 0x12)
sendmsg$inet(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003ac0)='>', 0x22fe0}], 0x1}, 0x0)

17.274593245s ago: executing program 0 (id=138):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x840)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

17.186734695s ago: executing program 1 (id=141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='7', 0x1)
recvmmsg$unix(r0, 0x0, 0x0, 0x2001, &(0x7f0000000280))
ptrace(0x10, 0x1)

14.277884723s ago: executing program 0 (id=160):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000001040)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000001080)=0x40, 0x4)
connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="bc", 0x1}], 0x1}}], 0x1, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210000, &(0x7f0000000780)={[{@noquota}, {@noquota}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@noquota}, {@nojournal_checksum}, {@errors_continue}, {@barrier}, {@usrjquota}, {}, {@abort}]}, 0x5, 0x5a4, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHbTn+/bFEp5+yJS6MFK7aZJ/FHBQz2KFgvquYZkG0o23ZLdlCYWbA/24kWKIGJBvOvdg4fiRW/+FQUtFCmhgl5WZjObbJJNskk3Tdr9fGCS55lndp/5zszz8Mw+u0wAPet4+icXcSwivkgiDrWU5SMrPL6w3fyjG2PpkkS9/sGfSSTZuub2Sfb/QJb5X0T8/FnEqdzqequzc5Oj5XJpOssP1qauDlZn505fnhqdKE2UrgyPjJx9bWT4zTde71qsL1/46+v3771z9vMT81/98ODwnSTOxcGsrDWOTdmzLHezNXO8Xs+OSSHOrXjZ0JYq272Snd4BtqQva+eFiDhWOFRotnrg+fdpRNSBHpVssv3v0V/Ac6I5Dmje22/5PvgZ9fDthRug1fHnFz4bib2Ne6P988myO6P0fnegC/Wndfz4x9076RJP8jkEwCbdvBURZ/L51f1fkvV/W3emg21W1qH/g6fnXjr+eaXd+Ce3OP6JNuOfA23a7lZs3P5zD7pQzZrS8d9bbce/i5NWA31Z7j+NMV8huXS5XEr7tv9GxMko7Enz683nnJ2/X1+rrHX8ly5p/c2xYLYfD/LL55hifLQ2+iQxt3p4K+L/bce/yeL5T9qc//R4fNRhHUdLd19cq2zj+LdX/buIl9qe/6UZrWT9+cnBxvUw2LwqVnt8++hva9XfPv5fftqGUNtKz//+FfH3N0oW4x9IWudrq5uv49u9/5TWKluIP61hc9d/f/JhI92frbs+WqtND0X0J++tXj+89Npmvrl9Gv/JE+v3f+2u/30R8XGH8d8+8v0L68e/c9d/Gv/4+tf/ivO/+cT9dz/5Zq36O+v/Xm2kTmZrOun/Ot3BJzl2AAAAAAAAsNvkIuJgJLli7M3SuVyxuPD9jiOxP1euVGunLlVmroxH47eyA1HINWe6D7V8H2Io+z5sMz+8Ij8SEYcj4su+fY18caxSHt/p4AEAAAAAAAAAAAAAAAAAAGCXOLD4+/9Y9vv/1O99O713wLbLLzz/G+hBGz7yvxtPegJ2pQ3bP/Dc0v6hd2n/0Lu0f+hJjSk+7R96l/YPvUv7h96l/QMAAAAAAAAAAAAAAAAAAAAAAAAAAEBXXTh/Pl3q849ujKX58WuzM5OVa6fHS9XJ4tTMWHGsMn21OFGpTJRLxbHK1EbvV65Urg4Nx8z1wVqpWhuszs5dnKrMXKldvDw1OlG6WPKccQAAAAAAAAAAAAAAAAAAAFitOjs3OVoul6a7kCiUy6VcRHSycUSXKn3mEn83Eo/rC7byPul5u5nv7DhvTyKJpTX5XXFUtzfx6+7Yjaea2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/BsAAP//2sc0sQ==")
mkdir(&(0x7f0000000dc0)='./bus\x00', 0x0)
mount$incfs(&(0x7f0000000e00)='.\x00', &(0x7f0000000e40)='./bus\x00', &(0x7f0000000e80), 0xc002, 0x0)
chdir(&(0x7f0000000ec0)='./bus\x00')
open(&(0x7f0000000f00)='./file2\x00', 0x1ad941, 0x176)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000400)=@x86={0x33, 0xc, 0x0, 0x0, 0x7, 0x5, 0x6, 0x3, 0x6, 0x80, 0xa5, 0x17, 0x0, 0x9, 0x2, 0x3, 0x1, 0x24, 0x40, '\x00', 0x2, 0x2})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000540)={{0x0, 0xeeee0000, 0x4, 0xf, 0x8, 0xe5, 0x6, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x2, 0x200000, 0xb, 0xff, 0xb, 0x1, 0x0, 0x0, 0x7, 0x7}, {0xe000, 0x5000, 0xc, 0xff, 0x2, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x10, 0x8c, 0xfc}, {0xeeee8000, 0x4000, 0x9, 0xff, 0x44, 0x7, 0x0, 0xcd, 0x0, 0x2, 0x0, 0x8}, {0x1000, 0x0, 0x8, 0x0, 0x8, 0x6, 0x42, 0x0, 0xff, 0x1, 0x5}, {0x6000, 0x8000000, 0x3, 0xfe, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x6}, {0x100000, 0x1, 0x0, 0x0, 0x4, 0x1, 0x0, 0x8, 0x26}, {0x1, 0xa}, {0x1ff8}, 0xddf8ffdb, 0x0, 0xb000, 0x78, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x1, 0x3c]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8d0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)

13.323453031s ago: executing program 0 (id=162):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000180)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000007d40)='./file1\x00', 0x42, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x385080, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0)

13.206701543s ago: executing program 0 (id=165):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000400000001fb, 0x121301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000100)={0xfffffffc, &(0x7f0000000080)='$'})

13.205563513s ago: executing program 32 (id=165):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000400000001fb, 0x121301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000100)={0xfffffffc, &(0x7f0000000080)='$'})

7.653528043s ago: executing program 2 (id=215):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000180)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000007d40)='./file1\x00', 0x42, 0x0)
openat(r2, &(0x7f0000000000)='./file1\x00', 0x385080, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, 0x0)

7.034733817s ago: executing program 2 (id=217):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000003c0002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x2004c801}, 0x0)

6.515545031s ago: executing program 2 (id=230):
syz_usb_connect(0x3, 0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, 0x0, 0x12000, 0x0, 0xc000, 0x0, 0x0})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000003c0)={{r1}, "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"})
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000013c0), 0x72a, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001440)}}], 0x1, 0x400c000)
ppoll(&(0x7f0000000000)=[{r1, 0x4031}], 0x1, 0x0, 0x0, 0xfffffffffffffd44)

6.514510881s ago: executing program 3 (id=221):
io_uring_setup(0x638b, &(0x7f0000000200)={0x0, 0x73e4, 0x1, 0x1, 0x38c})
close(0x3)
syz_create_resource$futex(&(0x7f0000000080)=0x1)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000840)={0x0, &(0x7f0000000640)=[@uexit={0x0, 0x18, 0x5}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @code={0xa, 0x58, {"420f01c2263e6536f3430f1efc66baf80cb854afc581ef66bafc0cb8d5070000efc443f97c2700f20f2219c4a1fc50f0470f07400f009630050000c4a1d975cb6766430f388126"}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x37, 0x3, 0x3, 0x3}}, @nested_vmresume={0x130, 0x18}, @code={0xa, 0x65, {"0fc758f06466400f3a2080000000008966baf80cb810d11d82ef66bafc0cb88000c0feef2e430f68421c66bad104edc744240051000000c744240236000000ff2c249c670f0666f30faeeac4826d45a700000000"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c03, 0x3, 0x1, 0x8001}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x57, 0x2, 0x4a, 0x2}}], 0x1dd})
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000880))
r1 = syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000a80)='./mnt\x00', 0x0, &(0x7f0000000ac0), 0x0, 0x23d3, &(0x7f0000000b00)="$eJzs3c9rHGUYB/Dv7AapaWgWTaGHFmIRFIs59Cb2kBw9eFEEQTyobcEmWDB6qBejFG/aQz2Igj/wL4gHEVEMXsTiVUQseujFiwomh+JlZXYnOo0TIkmz0yafD0xm3nd25n2eyc7L+y4DE2D/KpIcSM4m+bSbrFXVnWrJUrUUw/re5dVzSb//+B/FoGpY/vdUpYNV4dRU8vXxZH7sv80uXnhl/pmFhTMv7nJ6B2rbx95afvfK67OnLj735I+nP/p+sShmM1HtK/MYX+2mHup4dXy5PpRkKsmRJNe7ycnG1uZuKE1n+p9rUjdWJG/ehNxuJfc2/I+bHD5z6ct6eWKX4mFrz96x8HbbMQAAo1eO8e9Kcnww/l9LpxoBz5zoPLqWH65sdlyv+OqTUcYJAAAAbF//VtHd5/kDAADALuoMnsEsOjPVswAT6XRmZobP8F6dHO8snF986cTZ8y+/cLqd+TkAAACwfRPJz599MP/qwQ3z/18nh/N/AAAA4PZXzv+Pfvj+e+X22mTb0QAAAAC7oZz///nG79/G/B8AAAD2LPN/AAAA2PvW5/8rDz/0TrL+2uteudmrXuXd9OrqJk2f693MWAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAr/ckt9gMAAAC3vVH9zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN7Qu7x6bn0ZVZsXvhtVS5v7ba5Mvin/bg4M1sO/46tFxmrHFYNP7MwXfyXTufhIvW6U179ty5+3HUG7njrWdgTtOnxf2xG065vn244gWXotycpsQ/9XVD3f9t29oVxsKPc/Lvu/X67W60bd/w3yz1xj/kvTqfX/3Rv6//FqT7k+lGQqyZEk17vJyf/b+E9l/tfqp91X/f/TR9uOoF2XHms7gmSlHP/MNo1/Ohl8/TcZ/4xVy048eGf5/V+9v17Xzv3fabz/hx1Wc/7ltXlghxfgnmvleZ5Yrtftp/sfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Zr/+XWYAwACOo9frLeqVUtIrbyZKSq9SNxgkw4mY/Owmk0jUOcNlMBlklEUhcpmUASdH3XaDLouySSSDoojuQs8f8fQsn89f8F2/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUmBmtXT3z/N236g4AAAAgT/z/ifmL26s7AAAAgDzx/1s+vD1T3QEAAADkif/vHu30qjsAAACAPPH/5yftr9UdAAAAQJ74/50Hx1urOwAAAIA88f9LO162qzsAAACAPPH/525teFrdAQAAAOSJ/7+ya+PP6g4AAAAgT/z/4tVXu6s7AAAAgDzx/8fObr5Q3QEAAADkif+ffd9/Ut0BAAAA5In/X3/p2ffqDgAAACBP/P+B15uWqjsAAACAPPH/nx796VZ3AAAAAHni/18snBpUdwAAAAB54v97j1vT6g4AAAAgT/z/r9nJnuoOAAAAIE/8/40vJy9XdwAAAAB54v/Hrb/96g4AAAAgT/z/8Mf0d3UHAAAAkCf+//a+443qDgAAACBP/H9n3Yq56g4AAAAgT/z/tvsPR9UdAAAAQJ74/8bcg2vVHQAAAECe+P/Tg2XN6g4AAAAgT/z/wuE7a6o7AAAAgDzx/3s/r3xT3QEAAADkif8/0lx1vboDAAAAyBP/Pz+9d6i6AwAAAMgT/3/35v7l1R0AAABAnvj/f4sfh9UdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf3bggAQAAABA0P/X7QgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeCgAA//+K/Dv5")
mknodat(r1, &(0x7f0000002f00)='fc_a\x00', 0x8180, 0x0)
r2 = openat(r1, &(0x7f0000002f40)='fc_a\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000002f80)='fast_commit_d', 0xd, 0x0)
fsync(r2)
linkat(r1, &(0x7f0000002fc0)='fc_a\x00', r1, &(0x7f0000003000)='fc_b\x00', 0x0)
fallocate(r2, 0x0, 0x1000, 0x2000)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000003040)={0xa, {0x1, 0x7, 0xff}}, 0xffffffcb)
unlinkat(r1, &(0x7f0000003080)='fc_b\x00', 0x0)
fsync(r2)
syz_create_resource$futex(&(0x7f0000000280))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80080001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040050)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x4b, &(0x7f00000005c0), &(0x7f0000000600)={0x9}, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0341, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0003052cbd70000200"/20, @ANYRES32=0x0, @ANYBLOB="1111020031880000"], 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)

6.258742817s ago: executing program 3 (id=226):
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xa7, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, &(0x7f0000000400)={0x4a, 0x0, 0x0, 0x0, 0x47, [{0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x455}}, {0x3a, &(0x7f00000001c0)=@string={0x0, 0x3, "a1f80ba9008f6972da537c45be02e99bc117279d3d7d0e1fdda13237ede7e980a9f4bce5978a8c46f711bef786b6642ca48d0991434a28796f8110b15ded19ec834fcd62892372b3938aefaeea73f230dd03c5bc5c497538e8b08d8954bdc6bcd972688ba99e8aafddec14759b4ec49653f4ca334eda50e70eba91bb5f83967ba3d665f62b6ec3c5c3e8fb1d6b524f"}}, {0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, {0x0, &(0x7f0000000340)=@string={0x0, 0x3, "a7059299a0289ee9818019a9128e6a2c99cd6118cb28dc14abf3dd679ac57385f5ad8ff88d60a01c9eca08d0b3e5c058cf71522e09e94a234bfd74d7eb4a3f84612431a85c3a"}}, {0x0, &(0x7f00000003c0)=@string={0x0, 0x3, "7098f87fe133ae11d710acf8ae80460a8707592423fecf0f5d39e4d6dbd56820032dcdb10b10855d49"}}]})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000f80), &(0x7f0000000fc0)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f00000011c0)="$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")
open(&(0x7f0000006700)='./file1\x00', 0xa0bc2, 0x1df2a23c5997fa5f)
getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000006740), 0x4000087, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000006780)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000007880)={0x1, 0xc, &(0x7f0000007940)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000079c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000007a00)={r1, 0x0, 0xe, 0x0, &(0x7f0000007a80)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0xffff1000, 0x53d52e78, 0x6, 0x6ddb, 0x0, [{0x8, 0xf, 0x2}, {0xf2, 0x4, 0x2, '\x00', 0xa}, {0xc, 0x80, 0x0, '\x00', 0x9}, {0x1, 0x67, 0x0, '\x00', 0x4}, {0x7, 0x9, 0x7, '\x00', 0x7}, {0x6, 0x2, 0x8, '\x00', 0x3}, {0x41, 0x3, 0xa, '\x00', 0x7}, {0x0, 0xa, 0x1, '\x00', 0x40}, {0xff, 0x7, 0xf, '\x00', 0x51}, {0x6, 0x3, 0x2, '\x00', 0x7}, {0x9, 0x2, 0x3, '\x00', 0x10}, {0x9, 0xe, 0xcd, '\x00', 0x3}, {0x6, 0x0, 0x8, '\x00', 0x1}, {0x9, 0x6, 0x1, '\x00', 0x7}, {0x4, 0x6, 0x1, '\x00', 0xc}, {0x2, 0x7, 0xb, '\x00', 0x6f}, {0x13, 0x1, 0x8, '\x00', 0x8}, {0x8, 0x0, 0x7}, {0x30, 0x6, 0x5, '\x00', 0x3}, {0x3, 0xef, 0x7, '\x00', 0x2}, {0x9, 0x6, 0xfa, '\x00', 0x8}, {0x81, 0x6, 0x83, '\x00', 0x7}, {0x7, 0x10, 0x0, '\x00', 0x3}, {0x2, 0x3, 0xd, '\x00', 0x6}]}})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x16, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6112a800000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e40), 0x140, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000e80)={0x79, 0x0, 0xc53})
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000f40))

4.062725072s ago: executing program 4 (id=236):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070003"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)

4.060114073s ago: executing program 4 (id=237):
syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYBLOB="c5bfe97354eaeb82418ac006d90a386ec21df6b4eacce23c8b46c7f1e9955deec8c255cf68349334274ecba336c1798f0fe3dd71a5c513bec3dd18a362ca858f49d9bd6d83278cca4d454e3265bbd3ddd481753f05b0a7b3445431dd97dd3c767c4558176e71"], 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/fib_trie\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x8)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000ac0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
get_robust_list(r1, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000bc0), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000c00)=0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r4}, &(0x7f0000001280), &(0x7f00000012c0)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={r4, &(0x7f0000001340), 0x0}, 0x20)
recvmmsg(r2, &(0x7f0000000c40), 0x10106, 0x2, 0x0)
set_tid_address(0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x5802, 0x294, 0x258, 0x294, 0x390, 0x325, 0x378, 0x390, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0x0, 0xff], [0x0, 0xffffffff, 0x2000000], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x11}, 0x0, 0x230, 0x258, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x7fff, 0x3}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)
syz_usb_connect$cdc_ncm(0x3, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000182505a1a440000102030109028000020176c31df404000001020d0000240f010900000008000100f906241a0300110424020c0c241b00000002064007000207240a04100426052415060007240a0f0905070905810380edfe05090904010000020d00000904010102020d000009058202200403010b09050302ff0303232200"/146], &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xd, 0x4, 0x9, 0x8, 0x2}, 0x9f, &(0x7f0000000100)={0x5, 0xf, 0x9f, 0x3, [@generic={0x7f, 0x10, 0xa, "475695004126e05df09db8bf8e5ef31c41294b9753522bf8f4748e2d10b4357a25e0039e7d87ecdf05d08c3bce51d25cfd0e644b46e637d3bfd3f046418fbfb443e77ae45a578d6fa27b38240d51bb603c74a2140c2c3fb2f3e0776a08ade61b9355000ee4170b999329ea21fa2611222a3b861080990863075c1c87"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "11de522d38a70251b393aa39b89afd9b"}]}, 0x7, [{0x93, &(0x7f00000001c0)=@string={0x93, 0x3, "29e0f70e888034bcc9525648bc4900f488ad2deeae8f1448039e0a92d8298c32b73594d28577d8f057c5525c213f0a135b726be3782a1295a7d41e007908a1754a5275da2404bfb281d0b9a6a0350207e1460c5204762fd51493516c82d02a979f6d56e61dc677e0f70744205df1c8f53000d64926a0a74e96d4e984a4baa52c8ce5803c53f953e4d2918bf95527215058"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x140c}}, {0x81, &(0x7f00000002c0)=@string={0x81, 0x3, "5a8a8c92ff1d40db513389a2687ac7a9f8bf3577ecc9087b6e3efbcc77e8a5d148bc2b78cfb81585d473ca6d9c128360131da3967d73d6d05eef1eb6bd2d03b75c1cc91334098ec8e21a47fcf9a6bac7755810ba8d308772710cc1c3784f690efbbc54d65792a4de03decbeb3311df41355f9f754f9614460489c51a4b80dc"}}, {0xfe, &(0x7f0000000400)=@string={0xfe, 0x3, "831368606e2a4ab02e820e280b1868b3d592b49b54e4bee0e9d6d72900ceafad3a1539dd0b1bfc2a65a9b95bff87c35001a1fd3fde97a023ad23d4a790eb93b2ee24ef5b7f9a716b083ee7133a50cc4fdf6c935527693f4cb78727d7cdedad575e03c30823261b4f25b31dca45b55ed7a95bb4b0d62433fc4b1011e5e7792b84428f7c1b29959e76bb7e1786b27974d3e9951d81013190793f213a5608ecdc76a038615cce9936f0400615b5857d365059d257930cc152cf3e284d51b2e579a0a5e2be1db695c2de89ad7344471cd10dfbaeede820708aea7732cbc71831b94d2e3045939fb0bfb4a3f0ba72bbe2d7e82c57a089f50e785e141d32d9"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1004}}, {0xc9, &(0x7f0000000540)=@string={0xc9, 0x3, "cd7667074c464f2b13b9be1e35e0d8b83e8a33a6aee2314dbe51de9fdc713b5b0cb7fab529563976b1ffeda9e317c3b5fac5cbfaa9c65df5ec31f9b086bf12546975036b90f191e01c5f1c129eeb93e2750a13d0bf3cc6828484733f18ccff59961109e44916d80108cacae63b3236bbc22443b496d2e72ba82a1e35d9b495d6b5cc04b7b11bea810dca4ee28191586bb30a0dea9a57dd1114413f7b3b477912888184419748d0e20d77768188fc75e8ccc42a8aba702ba9c236d90faa8c60a52561c921a379d4"}}, {0xe9, &(0x7f0000000640)=@string={0xe9, 0x3, "4d9ba7b9d32d84d3cecfd4afd02a3b893f1caa13f2643fdcc4864da8a61636abb3d19a7c369d48c1022ee65ba7a141dd75fcbf7c1471977e45f60bddff3e88a60584fec2aafa7a1f646910635f1d4886015027d4b1e544fa1b07f2ebdaefd85110e933fed45c2108b1e6ab0fcd44a3cbacc2e3afe90ba40d300965d34583453fb410852c9fea52c435648a426330c87c80c8354410f8193cdcd7a57a5716380f94fd8adf436ce832e517c6863b1e03a8f2562f60206bde9fb41d95372d4a285d147054b983d8a0ac489daf9c7031baa9611b03c474f1f12024ea242cf081d494a2a487c5c910a9"}}]})
socket$nl_netfilter(0x10, 0x3, 0xc)

3.587161251s ago: executing program 5 (id=239):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000180)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)

3.466725294s ago: executing program 5 (id=240):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x600, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.466387234s ago: executing program 5 (id=241):
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x4)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1e, 0x0, @void}, 0x10)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000280))
bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r3, 0x4)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x16, {0x8, 0xb, 0x0, 0x2, 0x1, 0x21, 0x30, 0x20}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x85, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0)

2.493531713s ago: executing program 3 (id=242):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000180)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000007d40)='./file1\x00', 0x42, 0x0)
openat(r2, &(0x7f0000000000)='./file1\x00', 0x385080, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, 0x0)

2.488957884s ago: executing program 2 (id=253):
io_uring_setup(0x638b, &(0x7f0000000200)={0x0, 0x73e4, 0x1, 0x1, 0x38c})
close(0x3)
syz_create_resource$futex(&(0x7f0000000080)=0x1)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000840)={0x0, &(0x7f0000000640)=[@uexit={0x0, 0x18, 0x5}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @code={0xa, 0x58, {"420f01c2263e6536f3430f1efc66baf80cb854afc581ef66bafc0cb8d5070000efc443f97c2700f20f2219c4a1fc50f0470f07400f009630050000c4a1d975cb6766430f388126"}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x37, 0x3, 0x3, 0x3}}, @nested_vmresume={0x130, 0x18}, @code={0xa, 0x65, {"0fc758f06466400f3a2080000000008966baf80cb810d11d82ef66bafc0cb88000c0feef2e430f68421c66bad104edc744240051000000c744240236000000ff2c249c670f0666f30faeeac4826d45a700000000"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c03, 0x3, 0x1, 0x8001}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x57, 0x2, 0x4a, 0x2}}], 0x1dd})
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000880))
r1 = syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000a80)='./mnt\x00', 0x0, &(0x7f0000000ac0), 0x0, 0x23d3, &(0x7f0000000b00)="$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")
mknodat(r1, &(0x7f0000002f00)='fc_a\x00', 0x8180, 0x0)
r2 = openat(r1, &(0x7f0000002f40)='fc_a\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000002f80)='fast_commit_d', 0xd, 0x0)
fsync(r2)
linkat(r1, &(0x7f0000002fc0)='fc_a\x00', r1, &(0x7f0000003000)='fc_b\x00', 0x0)
fallocate(r2, 0x0, 0x1000, 0x2000)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000003040)={0xa, {0x1, 0x7, 0xff}}, 0xffffffcb)
unlinkat(r1, &(0x7f0000003080)='fc_b\x00', 0x0)
fsync(r2)
syz_create_resource$futex(&(0x7f0000000280))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80080001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040050)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x4b, &(0x7f00000005c0), &(0x7f0000000600)={0x9}, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0341, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0003052cbd70000200"/20, @ANYRES32=0x0, @ANYBLOB="1111020031880000"], 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)

2.375763246s ago: executing program 3 (id=244):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000940), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000980), 0x4000087, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r2], &(0x7f0000000b40)=""/257, 0x2e, 0x101, 0x6}, 0x28)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000c80))
sendmsg$nl_xfrm(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd29, 0x4, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x5, 0x2, 0x0, 0x1ff, 0x1ffd}, {{@in=@loopback, 0x0, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x0, 0x1, 0x0, 0x87, 0x29a, 0x0, 0x81}]}]}, 0x13c}}, 0x20004)
openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x2241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={0x0}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x2, 0x5, 0x4c0, 0x340, 0x340, 0xffffffff, 0x250, 0x250, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [0x0, 0xff], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@remote}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x19, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [0x0, 0x0, 0x0, 0xffffffff], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv6=@empty, @ipv6=@mcast1, @port=0x4e22, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r8 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$XFS_IOC_DIOINFO(r8, 0x800c581e, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48)

1.584574177s ago: executing program 5 (id=245):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000940), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000980), 0x4000087, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r2], &(0x7f0000000b40)=""/257, 0x2e, 0x101, 0x6}, 0x28)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000c80))
sendmsg$nl_xfrm(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd29, 0x4, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x5, 0x2, 0x0, 0x1ff, 0x1ffd}, {{@in=@loopback, 0x0, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x0, 0x1, 0x0, 0x87, 0x29a, 0x0, 0x81}]}]}, 0x13c}}, 0x20004)
openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x2241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={0x0}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x2, 0x5, 0x4c0, 0x340, 0x340, 0xffffffff, 0x250, 0x250, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [0x0, 0xff], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@remote}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x19, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [0x0, 0x0, 0x0, 0xffffffff], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv6=@empty, @ipv6=@mcast1, @port=0x4e22, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r8 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$XFS_IOC_DIOINFO(r8, 0x800c581e, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48)

1.328338613s ago: executing program 33 (id=141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='7', 0x1)
recvmmsg$unix(r0, 0x0, 0x0, 0x2001, &(0x7f0000000280))
ptrace(0x10, 0x1)

1.236517453s ago: executing program 3 (id=247):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@usrquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f0000000b40)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000340)=0x12, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x1b, @l2={'eth', 0x3a, 'vcan0\x00'}}}}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x101, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000)
getpid()
syz_mount_image$fuse(0x0, 0x0, 0x1100000, 0x0, 0x1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}, 0x40000000)
close(r7)
recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x1c0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x15)
pwrite64(r8, &(0x7f0000007c40)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)

1.211616796s ago: executing program 2 (id=248):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8008010)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000002140)=ANY=[@ANYBLOB="f0000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000080000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000070000000000000000000000020000000000000000000000ffffffff8200ffff07000000000000000000000000000000080028000000000008001f000100000028001a00fc000000000000000000000000000000000000000000000000000000000000000a000700"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x10)

794.373018ms ago: executing program 4 (id=249):
r0 = socket$inet6(0xa, 0x3, 0x5)
fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7000000}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

322.273547ms ago: executing program 4 (id=250):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000009c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000009d40)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009dc0)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000080000000000000000000000000008001f0003"], 0xc0}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x6, 0x4, 0x1}, {0x4, 0xc8, 0x7, 0xc6}, {0x4, 0x3, 0x2, 0x8}]})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
fcntl$setstatus(r4, 0x4, 0x42400)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r5 = fsmount(r3, 0x0, 0x83)
fchdir(r5)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x100}, {0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0)

321.420007ms ago: executing program 3 (id=251):
r0 = socket$netlink(0x10, 0x3, 0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES64], 0x1, 0x3b3, &(0x7f0000000180)="$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")
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000540)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000580)=0x400000001, 0x4)
connect$inet6(r3, &(0x7f00000005c0)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x50)
pipe2(&(0x7f0000000600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
write$P9_RGETLOCK(r5, &(0x7f0000000640)=ANY=[], 0xffffff6a)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0xc201})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'syzkaller1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffe2c, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x1, 0xe, 0x1}, {0x7, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x1, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
pipe2(&(0x7f0000000a80)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
tee(r4, r10, 0xfffffffffffffc01, 0x1)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r11, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b40), 0x8)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000b80), 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000bc0)={0x2, 0x0, @pic={0x4, 0x5, 0x7, 0x3, 0x1, 0x2f, 0xff, 0x1, 0x3, 0x21, 0x1, 0x41, 0x66, 0x1, 0x1, 0x4}})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000))
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtaction={0x84, 0x12, 0xbf68af9d17701211, 0x70bd29, 0x65dfdbff, {0x7}, [{0x4}, {0x38, 0x1, [@m_bpf={0x34, 0x16, 0x0, 0x0, {{0x8}, {0xc, 0x1d, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x34, 0x1, [@m_police={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c094}, 0x0)

307.901148ms ago: executing program 5 (id=252):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f00000000c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) (async)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async, rerun: 32)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@shortname_winnt}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@numtail}]}, 0x81, 0x2b6, &(0x7f0000000640)="$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") (async, rerun: 32)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x8000, 0x1)
getdents64(r3, &(0x7f0000000940)=""/4096, 0x1000) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x68, 0x0, 0x9, @mcast1, @private1, 0x8000, 0x8000, 0x4, 0xe2}}) (rerun: 64)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000550001050000000000c4000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0xd5a481077750d15d}, 0x0) (async)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200004c, &(0x7f00000000c0)=ANY=[], 0x3, 0x1cb, &(0x7f0000000340)="$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")

162.646873ms ago: executing program 2 (id=254):
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xa7, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, &(0x7f0000000400)={0x4a, 0x0, 0x0, 0x0, 0x47, [{0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x455}}, {0x3a, &(0x7f00000001c0)=@string={0x0, 0x3, "a1f80ba9008f6972da537c45be02e99bc117279d3d7d0e1fdda13237ede7e980a9f4bce5978a8c46f711bef786b6642ca48d0991434a28796f8110b15ded19ec834fcd62892372b3938aefaeea73f230dd03c5bc5c497538e8b08d8954bdc6bcd972688ba99e8aafddec14759b4ec49653f4ca334eda50e70eba91bb5f83967ba3d665f62b6ec3c5c3e8fb1d6b524f"}}, {0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, {0x0, &(0x7f0000000340)=@string={0x0, 0x3, "a7059299a0289ee9818019a9128e6a2c99cd6118cb28dc14abf3dd679ac57385f5ad8ff88d60a01c9eca08d0b3e5c058cf71522e09e94a234bfd74d7eb4a3f84612431a85c3a"}}, {0x0, &(0x7f00000003c0)=@string={0x0, 0x3, "7098f87fe133ae11d710acf8ae80460a8707592423fecf0f5d39e4d6dbd56820032dcdb10b10855d49"}}]})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000f80), &(0x7f0000000fc0)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f00000011c0)="$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")
open(&(0x7f0000006700)='./file1\x00', 0xa0bc2, 0x1df2a23c5997fa5f)
getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000006740), 0x4000087, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000006780)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000007880)={0x1, 0xc, &(0x7f0000007940)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000079c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000007a00)={r1, 0x0, 0xe, 0x0, &(0x7f0000007a80)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0xffff1000, 0x53d52e78, 0x6, 0x6ddb, 0x0, [{0x8, 0xf, 0x2}, {0xf2, 0x4, 0x2, '\x00', 0xa}, {0xc, 0x80, 0x0, '\x00', 0x9}, {0x1, 0x67, 0x0, '\x00', 0x4}, {0x7, 0x9, 0x7, '\x00', 0x7}, {0x6, 0x2, 0x8, '\x00', 0x3}, {0x41, 0x3, 0xa, '\x00', 0x7}, {0x0, 0xa, 0x1, '\x00', 0x40}, {0xff, 0x7, 0xf, '\x00', 0x51}, {0x6, 0x3, 0x2, '\x00', 0x7}, {0x9, 0x2, 0x3, '\x00', 0x10}, {0x9, 0xe, 0xcd, '\x00', 0x3}, {0x6, 0x0, 0x8, '\x00', 0x1}, {0x9, 0x6, 0x1, '\x00', 0x7}, {0x4, 0x6, 0x1, '\x00', 0xc}, {0x2, 0x7, 0xb, '\x00', 0x6f}, {0x13, 0x1, 0x8, '\x00', 0x8}, {0x8, 0x0, 0x7}, {0x30, 0x6, 0x5, '\x00', 0x3}, {0x3, 0xef, 0x7, '\x00', 0x2}, {0x9, 0x6, 0xfa, '\x00', 0x8}, {0x81, 0x6, 0x83, '\x00', 0x7}, {0x7, 0x10, 0x0, '\x00', 0x3}, {0x2, 0x3, 0xd, '\x00', 0x6}]}})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x16, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e40), 0x140, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000e80)={0x79, 0x0, 0xc53})
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000f40))

162.468243ms ago: executing program 4 (id=255):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa00, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

94.5551ms ago: executing program 4 (id=256):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00'})
r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000140))
r2 = syz_create_resource$futex(&(0x7f00000000c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r3, &(0x7f0000000240)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0)
lseek(r3, 0x0, 0x4)
sendfile(r3, r3, &(0x7f0000000340), 0x7fa)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', 0x0})
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
write(r5, &(0x7f0000000480)='0', 0x1)
io_uring_setup(0x6001, &(0x7f00000004c0)={0x0, 0xeddf, 0x40, 0x2, 0x116})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40042, 0x1)
close(r6)
socket(0x1e, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x4a0, &(0x7f0000000640)="$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")
futex(r1, 0xb, 0x1, 0x0, r2, 0x0)
futex(r2, 0xd, 0x2, 0x0, r1, 0x0)
write(r0, &(0x7f0000000280)="4c8e619bbcd5ea34d81762138d9aab002711d19337f00bbbf29456233a73f0087c7584aa197a8ae29aeb55b0a85c77eb7888256a1b10030d1b170caf970e6753aa03cdee78dd6504989ac1990d16", 0x4e)
futex(r1, 0xc, 0x1, 0x0, r2, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
exit(0x3)

0s ago: executing program 5 (id=257):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"/18, @ANYRES32=r1, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r1}, 0x0, &(0x7f0000000480)='%pI4   \x00'}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts.
[   22.055307][   T30] audit: type=1400 audit(1794489058.426:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.056435][  T277] cgroup: Unknown subsys name 'net'
[   22.077986][   T30] audit: type=1400 audit(1794489058.426:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.105412][   T30] audit: type=1400 audit(1794489058.456:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.105592][  T277] cgroup: Unknown subsys name 'devices'
[   22.251558][  T277] cgroup: Unknown subsys name 'hugetlb'
[   22.257182][  T277] cgroup: Unknown subsys name 'rlimit'
[   22.393173][   T30] audit: type=1400 audit(1794489058.766:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.416372][   T30] audit: type=1400 audit(1794489058.766:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.441256][   T30] audit: type=1400 audit(1794489058.766:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.442134][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.473295][   T30] audit: type=1400 audit(1794489058.846:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.498703][   T30] audit: type=1400 audit(1794489058.846:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.512619][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.524469][   T30] audit: type=1400 audit(1794489058.886:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.558444][   T30] audit: type=1400 audit(1794489058.886:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.112375][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.119419][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.126921][  T285] device bridge_slave_0 entered promiscuous mode
[   23.133921][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.141017][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.148288][  T285] device bridge_slave_1 entered promiscuous mode
[   23.204341][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.211418][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.218681][  T287] device bridge_slave_0 entered promiscuous mode
[   23.227927][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.234980][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.242365][  T287] device bridge_slave_1 entered promiscuous mode
[   23.306046][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.313189][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.320597][  T292] device bridge_slave_0 entered promiscuous mode
[   23.327378][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.334445][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.341842][  T292] device bridge_slave_1 entered promiscuous mode
[   23.382299][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.389348][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.397019][  T286] device bridge_slave_0 entered promiscuous mode
[   23.429021][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.436095][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.443596][  T286] device bridge_slave_1 entered promiscuous mode
[   23.470546][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.477598][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.485024][  T291] device bridge_slave_0 entered promiscuous mode
[   23.491874][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.498901][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.506329][  T291] device bridge_slave_1 entered promiscuous mode
[   23.533310][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.540393][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.547675][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.554708][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.623585][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.630660][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.637912][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.644939][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.667686][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.674762][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.682040][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.689051][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.711849][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.719123][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.726470][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.733928][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.741430][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.748593][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.757032][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.764446][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.788283][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.796529][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.803573][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.811206][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.819316][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.826358][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.838058][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.857813][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.865636][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.873884][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.880915][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.888443][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.896950][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.910713][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.936191][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.945283][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.953436][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.961796][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.968877][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.976511][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.984561][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.993036][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.000098][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.007453][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.015502][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.033261][  T285] device veth0_vlan entered promiscuous mode
[   24.041951][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.049997][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.057890][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.066183][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.073761][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.084509][  T292] device veth0_vlan entered promiscuous mode
[   24.097336][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.105671][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.113968][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.122448][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.134627][  T292] device veth1_macvtap entered promiscuous mode
[   24.142427][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.150730][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.158792][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.175876][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.183420][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.190871][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   24.199083][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.207503][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.214574][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.222110][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.229506][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.237008][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   24.245344][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.253594][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.260619][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.268045][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   24.276371][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.284609][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.291644][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.299007][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   24.307465][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.318579][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.325625][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.333146][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.341027][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.362271][  T285] device veth1_macvtap entered promiscuous mode
[   24.368850][  T287] device veth0_vlan entered promiscuous mode
[   24.378212][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.387594][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.396013][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.404250][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.412373][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.420717][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.428946][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.437234][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.445364][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.453813][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.462282][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.470532][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.478611][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.486246][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.494195][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.502592][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.510105][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.534091][  T287] device veth1_macvtap entered promiscuous mode
[   24.542394][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.551321][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.559403][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.568364][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.576684][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.584892][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.592955][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.601299][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.609546][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.617874][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.626244][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.643133][  T292] request_module fs-gadgetfs succeeded, but still no fs?
[   24.651632][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.661042][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.669444][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.678172][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.686737][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.695173][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.721380][  T286] IPv6: veth1_vlan: Failed to add prefix route for address fe80::31; dropping
[   24.774983][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.790148][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.808676][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.826946][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.840483][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.860084][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.868134][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.890149][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.897702][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.910275][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.926798][  T291] device veth0_vlan entered promiscuous mode
[   24.940029][  T286] device veth0_vlan entered promiscuous mode
[   24.958783][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.970211][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.970657][  T313] loop3: detected capacity change from 0 to 40427
[   24.987100][  T291] device veth1_macvtap entered promiscuous mode
[   24.998274][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.019423][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.028039][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.040475][  T313] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   25.051932][  T286] device veth1_macvtap entered promiscuous mode
[   25.061661][  T313] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   25.082412][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.090975][  T313] F2FS-fs (loop3): invalid crc value
[   25.100385][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.110604][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.126841][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.141029][  T313] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   25.145504][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.177503][  T313] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   25.184674][  T313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   25.188629][  T317] loop0: detected capacity change from 0 to 40427
[   25.209904][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.223884][  T317] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12
[   25.232407][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.235071][  T317] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   25.258657][  T317] F2FS-fs (loop0): invalid crc value
[   25.262116][  T285] attempt to access beyond end of device
[   25.262116][  T285] loop3: rw=2049, want=45104, limit=40427
[   25.269068][  T324] ip_tables: iptables: counters copy to user failed while replacing table
[   25.276529][  T317] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   25.294613][  T324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   25.316387][  T324] ip_tables: iptables: counters copy to user failed while replacing table
[   25.341395][  T317] F2FS-fs (loop0): recover fsync data on readonly fs
[   25.348692][  T317] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[   25.366527][  T331] Zero length message leads to an empty skb
[   25.372678][  T317] F2FS-fs (loop0): checkpoint=disable on readonly fs
[   25.391344][  T331] loop1: detected capacity change from 0 to 256
[   25.423662][  T331] exfat: Unknown parameter 'keep_last_dots'
[   25.435734][  T329] loop4: detected capacity change from 0 to 49152
[   25.460881][  T329] EXT4-fs (loop4): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none.
[   25.484096][  T331] FAULT_INJECTION: forcing a failure.
[   25.484096][  T331] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   25.497408][  T331] CPU: 1 PID: 331 Comm: syz.1.8 Not tainted syzkaller #0
[   25.504439][  T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   25.514512][  T331] Call Trace:
[   25.517797][  T331]  <TASK>
[   25.520731][  T331]  __dump_stack+0x21/0x30
[   25.525086][  T331]  dump_stack_lvl+0x110/0x170
[   25.529774][  T331]  ? show_regs_print_info+0x20/0x20
[   25.534980][  T331]  dump_stack+0x15/0x20
[   25.539151][  T331]  should_fail+0x3ab/0x500
[   25.543588][  T331]  should_fail_alloc_page+0x55/0x80
[   25.548798][  T331]  prepare_alloc_pages+0x13f/0x590
[   25.553926][  T331]  ? __alloc_pages_bulk+0xab0/0xab0
[   25.559125][  T331]  __alloc_pages+0x11d/0x460
[   25.563702][  T331]  ? unlock_page_memcg+0x114/0x130
[   25.568805][  T331]  ? zone_watermark_fast+0x250/0x250
[   25.574070][  T331]  ? page_remove_rmap+0xc6d/0xf40
[   25.579075][  T331]  ? page_add_file_rmap+0x700/0x700
[   25.584253][  T331]  ? __kasan_check_write+0x14/0x20
[   25.589347][  T331]  ? _raw_spin_lock+0x94/0xf0
[   25.594015][  T331]  __get_free_pages+0x10/0x30
[   25.598680][  T331]  __tlb_remove_page_size+0x18a/0x310
[   25.604037][  T331]  unmap_page_range+0x1059/0x1e00
[   25.609047][  T331]  ? mmu_notifier_invalidate_range_end+0xe0/0xe0
[   25.615354][  T331]  ? lru_cache_add+0x7e0/0x7e0
[   25.620099][  T331]  unmap_vmas+0x26d/0x380
[   25.624410][  T331]  ? unmap_page_range+0x1e00/0x1e00
[   25.629589][  T331]  ? __kasan_check_write+0x14/0x20
[   25.634688][  T331]  ? tlb_gather_mmu_fullmm+0x144/0x1c0
[   25.640133][  T331]  exit_mmap+0x412/0x8b0
[   25.644361][  T331]  ? vm_brk+0x30/0x30
[   25.648325][  T331]  ? mutex_unlock+0x8f/0x230
[   25.652899][  T331]  ? uprobe_clear_state+0x2c6/0x320
[   25.658082][  T331]  __mmput+0x92/0x300
[   25.662067][  T331]  mmput+0x50/0x150
[   25.665859][  T331]  do_exit+0xacc/0x29a0
[   25.670007][  T331]  ? ____kasan_slab_free+0x125/0x160
[   25.675273][  T331]  ? __x64_sys_mount+0xbf/0xd0
[   25.680019][  T331]  ? put_task_struct+0x90/0x90
[   25.684766][  T331]  ? __kasan_check_write+0x14/0x20
[   25.689879][  T331]  ? _raw_spin_lock_irq+0x95/0xf0
[   25.694888][  T331]  do_group_exit+0x149/0x310
[   25.699460][  T331]  ? __kasan_check_write+0x14/0x20
[   25.704560][  T331]  ? recalc_sigpending+0x1ac/0x230
[   25.709654][  T331]  get_signal+0x64f/0x1430
[   25.714067][  T331]  arch_do_signal_or_restart+0xe2/0x1100
[   25.719684][  T331]  ? __kasan_slab_free+0x11/0x20
[   25.724607][  T331]  ? slab_free_freelist_hook+0xc2/0x190
[   25.730134][  T331]  ? __se_sys_mount+0x353/0x390
[   25.734969][  T331]  ? get_sigframe_size+0x10/0x10
[   25.739886][  T331]  ? __se_sys_futex+0x135/0x330
[   25.744720][  T331]  exit_to_user_mode_loop+0xa7/0xe0
[   25.749901][  T331]  exit_to_user_mode_prepare+0x87/0xd0
[   25.755342][  T331]  syscall_exit_to_user_mode+0x1a/0x30
[   25.760786][  T331]  do_syscall_64+0x58/0xa0
[   25.765187][  T331]  ? clear_bhb_loop+0x50/0xa0
[   25.769851][  T331]  ? clear_bhb_loop+0x50/0xa0
[   25.774508][  T331]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   25.780386][  T331] RIP: 0033:0x7f22f1994fd9
[   25.784788][  T331] Code: Unable to access opcode bytes at RIP 0x7f22f1994faf.
[   25.792130][  T331] RSP: 002b:00007f22f03e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   25.800539][  T331] RAX: fffffffffffffe00 RBX: 00007f22f1c11fa8 RCX: 00007f22f1994fd9
[   25.808514][  T331] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f22f1c11fa8
[   25.816465][  T331] RBP: 00007f22f1c11fa0 R08: 0000000000000000 R09: 0000000000000000
[   25.824416][  T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   25.832374][  T331] R13: 00007f22f1c12038 R14: 00007ffd6fabb200 R15: 00007ffd6fabb2e8
[   25.840330][  T331]  </TASK>
[   25.929539][  T339] loop3: detected capacity change from 0 to 256
[   25.964681][  T339] exfat: Unknown parameter 'zero_size_dir'
[   25.984776][  T345] loop2: detected capacity change from 0 to 40427
[   26.033396][  T345] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   26.040929][  T345] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   26.050609][  T345] F2FS-fs (loop2): invalid crc value
[   26.063247][  T345] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   26.089220][  T345] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   26.096415][  T345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   26.133153][  T352] attempt to access beyond end of device
[   26.133153][  T352] loop2: rw=2049, want=45112, limit=40427
[   26.139953][  T306] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   26.249957][  T296] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.361692][  T360] loop2: detected capacity change from 0 to 49152
[   26.409899][  T306] usb 2-1: Using ep0 maxpacket: 16
[   26.631532][  T360] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   26.757583][  T360] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: journalled.
[   27.349218][   T30] kauditd_printk_skb: 78 callbacks suppressed
[   27.349233][   T30] audit: type=1400 audit(1794489063.716:152): avc:  denied  { read write } for  pid=369 comm="syz.3.17" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   27.378901][   T30] audit: type=1400 audit(1794489063.726:153): avc:  denied  { open } for  pid=369 comm="syz.3.17" path="/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   27.403115][   T30] audit: type=1400 audit(1794489063.756:154): avc:  denied  { ioctl } for  pid=369 comm="syz.3.17" path="/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   27.405944][  T306] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[   27.437788][  T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.447013][   T30] audit: type=1400 audit(1794489063.826:155): avc:  denied  { create } for  pid=369 comm="syz.3.17" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   27.467389][   T30] audit: type=1400 audit(1794489063.826:156): avc:  denied  { read write } for  pid=369 comm="syz.3.17" name="dm0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   27.480125][  T296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.491035][   T30] audit: type=1400 audit(1794489063.826:157): avc:  denied  { open } for  pid=369 comm="syz.3.17" path="/3/dm0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   27.502558][  T306] usb 2-1: config 0 descriptor??
[   27.521739][  T368] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   27.528101][  T373] loop2: detected capacity change from 0 to 32896
[   27.541012][  T296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   27.544495][   T30] audit: type=1400 audit(1794489063.906:158): avc:  denied  { unlink } for  pid=285 comm="syz-executor" name="dm0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   27.562655][  T296] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   27.572713][   T30] audit: type=1400 audit(1794489063.926:159): avc:  denied  { name_bind } for  pid=374 comm="syz.3.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   27.583482][  T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.611327][  T306] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   27.619158][  T306] usb 2-1: Detected FT-X
[   27.625060][   T30] audit: type=1400 audit(1794489063.976:160): avc:  denied  { read } for  pid=376 comm="syz.3.19" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   27.647857][   T30] audit: type=1400 audit(1794489063.976:161): avc:  denied  { open } for  pid=376 comm="syz.3.19" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   27.677076][  T296] usb 1-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   27.686696][  T296] usb 1-1: No streaming interface found for terminal 2.
[   27.694161][  T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   27.705027][  T373] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   27.726822][  T373] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   27.735470][  T373] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   27.744937][  T373] fscrypt: loop2: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13
[   27.809871][  T368] usb 5-1: Using ep0 maxpacket: 8
[   27.809920][  T306] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   27.830169][  T386] netlink: 'syz.3.19': attribute type 3 has an invalid length.
[   27.988871][  T317] UDC core: couldn't find an available UDC or it's busy: -16
[   27.996762][  T317] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   28.005767][   T39] usb 1-1: USB disconnect, device number 2
[   28.089901][  T306] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[   28.100036][  T306] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   28.119049][  T306] usb 2-1: USB disconnect, device number 2
[   28.125310][  T368] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   28.138648][  T368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.143813][  T306] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   28.156018][  T368] usb 5-1: Product: syz
[   28.160969][  T368] usb 5-1: Manufacturer: syz
[   28.165572][  T368] usb 5-1: SerialNumber: syz
[   28.192231][  T306] ftdi_sio 2-1:0.0: device disconnected
[   28.207776][  T390] loop2: detected capacity change from 0 to 40427
[   28.231064][  T390] F2FS-fs (loop2): invalid crc value
[   28.251594][  T390] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   28.358905][  T390] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   28.530008][  T368] usb 5-1: Unsupported UAC3 BADD profile
[   28.546476][  T368] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[   28.572691][  T368] usb 5-1: USB disconnect, device number 2
[   28.681850][  T292] attempt to access beyond end of device
[   28.681850][  T292] loop2: rw=2049, want=45112, limit=40427
[   28.750071][  T397] loop0: detected capacity change from 0 to 36864
[   28.770740][  T397] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   28.779697][  T397] EXT4-fs (loop0): Test dummy encryption mode enabled
[   28.794361][  T402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'.
[   28.796118][    C1] blk_update_request: I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0
[   28.830531][    C1] blk_update_request: I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0
[   28.859861][    C1] blk_update_request: I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 0
[   28.883522][    C1] blk_update_request: I/O error, dev loop0, sector 384 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[   28.949443][  T397] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   28.968096][  T397] EXT4-fs (loop0): mount failed
[   28.973028][    C1] blk_update_request: I/O error, dev loop0, sector 144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   28.973062][    C1] Buffer I/O error on dev loop0, logical block 18, async page read
[   29.013498][  T405] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d)
[   29.552287][  T411] =======================================================
[   29.552287][  T411] WARNING: The mand mount option has been deprecated and
[   29.552287][  T411]          and is ignored by this kernel. Remove the mand
[   29.552287][  T411]          option from the mount to silence this warning.
[   29.552287][  T411] =======================================================
[   30.049038][  T411] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   30.070392][  T411] EXT4-fs (loop3): orphan cleanup on readonly fs
[   30.111780][  T411] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.27: bg 0: block 10: padding at end of block bitmap is not set
[   30.134707][  T397] syz.0.22 (397) used greatest stack depth: 20552 bytes left
[   30.238044][  T418] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   30.264236][  T411] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.27: Failed to acquire dquot type 0
[   30.284233][  T411] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.27: Failed to acquire dquot type 0
[   30.313940][  T411] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.27: Freeing blocks not in datazone - block = 0, count = 4096
[   30.340119][  T411] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.27: Failed to acquire dquot type 0
[   30.374551][  T423] set_capacity_and_notify: 2 callbacks suppressed
[   30.374566][  T423] loop2: detected capacity change from 0 to 33280
[   30.497449][  T425] netlink: 'syz.0.30': attribute type 4 has an invalid length.
[   30.516114][  T411] EXT4-fs (loop3): 1 orphan inode deleted
[   30.531328][  T411] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   30.564920][  T423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.31: bg 0: block 7: invalid block bitmap
[   30.590458][  T423] EXT4-fs (loop2): Remounting filesystem read-only
[   30.607172][  T423] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   30.626289][  T423] EXT4-fs (loop2): Remounting filesystem read-only
[   30.656670][  T423] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2928: inode #11: comm syz.2.31: corrupted xattr block 95
[   30.670536][  T423] EXT4-fs (loop2): Remounting filesystem read-only
[   30.680250][  T423] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -117)
[   30.700040][  T423] EXT4-fs (loop2): 1 orphan inode deleted
[   30.708007][  T423] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: none.
[   30.851814][  T413] loop4: detected capacity change from 0 to 131072
[   31.217800][  T413] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0)
[   31.651545][  T411] syz.3.27 (411) used greatest stack depth: 20488 bytes left
[   31.690615][  T413] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   31.699286][  T413] F2FS-fs (loop4): Test dummy encryption mode enabled
[   31.757561][  T413] F2FS-fs (loop4): invalid crc value
[   31.765573][  T434] loop2: detected capacity change from 0 to 49152
[   31.780761][  T434] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   31.791390][  T413] F2FS-fs (loop4): Found nat_bits in checkpoint
[   31.807911][  T438] loop0: detected capacity change from 0 to 49152
[   31.828785][  T446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'.
[   31.837754][  T413] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   31.844073][  T434] EXT4-fs (loop2): too many log groups per flexible block group
[   31.845252][  T413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   31.852791][  T434] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   31.871077][  T434] EXT4-fs (loop2): mount failed
[   31.891434][  T452] process 'syz.3.37' launched './file1' with NULL argv: empty string added
[   31.893508][  T438] EXT4-fs (loop0): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none.
[   31.912369][  T438] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.930033][  T438] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[   31.939282][  T438] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[   32.007320][  T468] ip_tables: iptables: counters copy to user failed while replacing table
[   32.079419][  T470] loop2: detected capacity change from 0 to 49152
[   32.089308][  T485] device-mapper: table: 253:1: raid: unknown target type
[   32.096476][  T485] device-mapper: ioctl: error adding target to table
[   32.126658][  T470] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   32.160156][  T470] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none.
[   32.179876][  T296] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   32.263514][  T510] loop3: detected capacity change from 0 to 49152
[   32.274088][  T510] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   32.302186][  T510] EXT4-fs error (device loop3): ext4_quota_enable:6431: comm syz.3.61: Bad quota inum: 1, type: 1
[   32.313217][  T510] Aborting journal on device loop3-8.
[   32.318885][  T510] EXT4-fs (loop3): Remounting filesystem read-only
[   32.325783][  T510] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix.
[   32.341012][  T510] EXT4-fs (loop3): mount failed
[   32.384300][  T523] loop1: detected capacity change from 0 to 49152
[   32.400029][    T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   32.419047][  T523] EXT4-fs (loop1): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none.
[   32.428396][  T529] loop2: detected capacity change from 0 to 33792
[   32.459543][  T529] EXT4-fs (loop2): Unrecognized mount option "buffered_iomap" or missing value
[   32.478151][  T533] loop3: detected capacity change from 0 to 32896
[   32.542969][  T533] EXT4-fs (loop3): Ignoring removed bh option
[   32.549909][  T296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.561590][  T296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.572316][  T533] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,bh,,errors=continue. Quota mode: none.
[   32.588751][   T30] kauditd_printk_skb: 71 callbacks suppressed
[   32.588764][   T30] audit: type=1400 audit(70399659.957:223): avc:  denied  { append } for  pid=532 comm="syz.3.71" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   32.659883][    T6] usb 1-1: Using ep0 maxpacket: 32
[   32.668344][  T541] loop1: detected capacity change from 0 to 49152
[   32.689965][  T296] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00
[   32.699328][  T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   32.707997][  T296] usb 5-1: Product: syz
[   32.712343][  T296] usb 5-1: Manufacturer: syz
[   32.717952][  T543] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   32.733107][  T541] EXT4-fs error (device loop1): ext4_init_orphan_info:629: comm syz.1.73: orphan file block 3: bad checksum
[   32.735721][  T543] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none.
[   32.745814][  T541] EXT4-fs (loop1): mount failed
[   32.789981][    T6] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   32.798419][    T6] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   32.827118][    T6] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   32.836316][   T30] audit: type=1400 audit(70399660.207:224): avc:  denied  { read } for  pid=557 comm="syz.2.77" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   32.860762][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   32.871572][    T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   32.881401][   T30] audit: type=1400 audit(70399660.207:225): avc:  denied  { open } for  pid=557 comm="syz.2.77" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   32.905195][    T6] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   32.918392][    T6] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   32.926516][  T563] device-mapper: table: 253:2: snapshot: Couldn't create exception store
[   32.927687][   T30] audit: type=1400 audit(70399660.287:226): avc:  denied  { read } for  pid=560 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.935952][  T563] device-mapper: ioctl: error adding target to table
[   32.963756][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.969959][  T436] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   32.979608][   T30] audit: type=1400 audit(70399660.337:227): avc:  denied  { remove_name } for  pid=291 comm="syz-executor" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   33.023905][   T30] audit: type=1400 audit(70399660.337:228): avc:  denied  { rmdir } for  pid=291 comm="syz-executor" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.028645][    T6] usb 1-1: config 0 descriptor??
[   33.075392][   T30] audit: type=1400 audit(70399660.447:229): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   33.115531][  T569] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   33.126261][  T296] usbhid 5-1:1.0: can't add hid device: -71
[   33.129415][  T569] syz.1.84 (pid 569) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   33.133558][  T296] usbhid: probe of 5-1:1.0 failed with error -71
[   33.145391][  T569] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)"
[   33.157185][  T296] usb 5-1: USB disconnect, device number 3
[   33.176827][   T30] audit: type=1400 audit(70399660.547:230): avc:  denied  { remove_name } for  pid=568 comm="syz.1.84" name="bus" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.216417][   T30] audit: type=1400 audit(70399660.577:231): avc:  denied  { rename } for  pid=568 comm="syz.1.84" name="bus" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.259921][  T436] usb 4-1: Using ep0 maxpacket: 16
[   33.275824][  T577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'.
[   33.288388][  T307] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   33.325290][   T30] audit: type=1400 audit(70399660.697:232): avc:  denied  { write } for  pid=587 comm="syz.1.91" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.329292][  T588] input: syz0 as /devices/virtual/input/input4
[   33.348824][    T6] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   33.367435][    T6] usb 1-1: USB disconnect, device number 3
[   33.373417][  T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   33.381382][  T586] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   33.390013][  T436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.414576][    T6] usblp0: removed
[   33.418769][  T436] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   33.432807][  T436] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   33.442826][  T436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.446623][  T592] EXT4-fs (loop1): Test dummy encryption mode enabled
[   33.455855][  T436] usb 4-1: config 0 descriptor??
[   33.460215][  T586] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none.
[   33.464495][  T592] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.490950][  T592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   33.502289][  T592] EXT4-fs (loop1): 1 truncate cleaned up
[   33.508023][  T592] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,test_dummy_encryption=v1,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,resgid=0x0000000000000000,noquota,,errors=continue. Quota mode: none.
[   33.616130][  T606] using random self ethernet address
[   33.622304][  T606] using random host ethernet address
[   33.638504][  T611] ip_tables: iptables: counters copy to user failed while replacing table
[   33.647903][  T611] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   33.799915][  T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.820251][  T306] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   33.839869][  T306] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   33.970007][    T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   34.019907][  T436] usbhid 4-1:0.0: can't add hid device: -71
[   34.025887][  T436] usbhid: probe of 4-1:0.0 failed with error -71
[   34.041630][  T436] usb 4-1: USB disconnect, device number 2
[   34.060309][  T306] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   34.071927][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.080669][  T306] usb 3-1: Product: syz
[   34.084935][  T306] usb 3-1: Manufacturer: syz
[   34.089556][  T306] usb 3-1: SerialNumber: syz
[   34.209900][    T6] usb 1-1: Using ep0 maxpacket: 32
[   34.339947][    T6] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   34.348488][    T6] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   34.358254][    T6] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   34.367892][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   34.378470][    T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   34.388651][    T6] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   34.402301][    T6] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   34.411867][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.424081][    T6] usb 1-1: config 0 descriptor??
[   35.779835][    C0] sched: RT throttling activated
[   35.799930][    T6] usb 1-1: can't set config #0, error -71
[   35.827557][    T6] usb 1-1: USB disconnect, device number 4
[   35.841034][  T307] usb 3-1: USB disconnect, device number 2
[   36.927035][  T621] tipc: Started in network mode
[   36.932265][  T621] tipc: Node identity 7f000001, cluster identity 4711
[   36.939243][  T621] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   36.959327][  T624] set_capacity_and_notify: 4 callbacks suppressed
[   36.959342][  T624] loop3: detected capacity change from 0 to 32896
[   37.003278][  T624] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   37.047374][  T632] loop0: detected capacity change from 0 to 49152
[   37.057038][  T632] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   37.069362][  T632] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   37.071563][  T624] EXT4-fs (loop3): shut down requested (1)
[   37.078953][  T632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   37.118488][  T632] EXT4-fs (loop0): mounted filesystem with journalled data mode. Opts: dioread_nolock,stripe=0x00000000000004c3,data=journal,i_version,,errors=continue. Quota mode: journalled.
[   37.124205][  T625] loop1: detected capacity change from 0 to 49152
[   37.156083][  T629] loop4: detected capacity change from 0 to 49152
[   37.163614][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   37.169070][  T627] loop2: detected capacity change from 0 to 49152
[   37.181029][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.189630][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.198339][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.204891][  T625] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   37.208697][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.232247][  T625] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   37.241944][  T625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.241954][  T627] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   37.284101][  T625] EXT4-fs (loop1): mounted filesystem with journalled data mode. Opts: dioread_nolock,stripe=0x00000000000004c3,data=journal,i_version,,errors=continue. Quota mode: journalled.
[   37.315497][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.324141][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.332787][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.341247][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.349569][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.358144][  T624] fscrypt (loop3, inode 12): Error -5 getting encryption context
[   37.365897][  T629] EXT4-fs (loop4): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none.
[   37.420264][  T627] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: journalled.
[   37.670014][   T30] kauditd_printk_skb: 21 callbacks suppressed
[   37.670026][   T30] audit: type=1400 audit(70399665.047:254): avc:  denied  { append } for  pid=675 comm="syz.0.124" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   37.759010][  T670] loop4: detected capacity change from 0 to 49152
[   37.790504][  T670] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   37.830350][   T30] audit: type=1400 audit(70399665.197:255): avc:  denied  { create } for  pid=685 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.840882][  T686] FAULT_INJECTION: forcing a failure.
[   37.840882][  T686] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   37.862594][  T686] CPU: 1 PID: 686 Comm: syz.0.128 Not tainted syzkaller #0
[   37.869805][  T686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   37.869878][   T30] audit: type=1400 audit(70399665.207:256): avc:  denied  { setopt } for  pid=685 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.879860][  T686] Call Trace:
[   37.879866][  T686]  <TASK>
[   37.879872][  T686]  __dump_stack+0x21/0x30
[   37.879894][  T686]  dump_stack_lvl+0x110/0x170
[   37.914157][  T686]  ? show_regs_print_info+0x20/0x20
[   37.919465][  T686]  dump_stack+0x15/0x20
[   37.923633][  T686]  should_fail+0x3ab/0x500
[   37.928066][  T686]  should_fail_alloc_page+0x55/0x80
[   37.933276][  T686]  prepare_alloc_pages+0x13f/0x590
[   37.938405][  T686]  ? __alloc_pages_bulk+0xab0/0xab0
[   37.943629][  T686]  __alloc_pages+0x11d/0x460
[   37.948240][  T686]  ? unlock_page_memcg+0x114/0x130
[   37.953449][  T686]  ? zone_watermark_fast+0x250/0x250
[   37.958746][  T686]  ? page_remove_rmap+0xc6d/0xf40
[   37.963778][  T686]  ? page_add_file_rmap+0x700/0x700
[   37.969145][  T686]  ? mark_page_accessed+0x3a8/0x8e0
[   37.974342][  T686]  __get_free_pages+0x10/0x30
[   37.979007][  T686]  __tlb_remove_page_size+0x18a/0x310
[   37.984360][  T686]  unmap_page_range+0x1059/0x1e00
[   37.989370][  T686]  ? mmu_notifier_invalidate_range_end+0xe0/0xe0
[   37.995700][  T686]  unmap_vmas+0x26d/0x380
[   38.000018][  T686]  ? unmap_page_range+0x1e00/0x1e00
[   38.005215][  T686]  ? __kasan_check_write+0x14/0x20
[   38.010326][  T686]  ? tlb_gather_mmu_fullmm+0x144/0x1c0
[   38.015772][  T686]  exit_mmap+0x412/0x8b0
[   38.019994][  T686]  ? vm_brk+0x30/0x30
[   38.023964][  T686]  ? mutex_unlock+0x8f/0x230
[   38.028534][  T686]  ? uprobe_clear_state+0x2c6/0x320
[   38.033715][  T686]  __mmput+0x92/0x300
[   38.037683][  T686]  mmput+0x50/0x150
[   38.041475][  T686]  do_exit+0xacc/0x29a0
[   38.045611][  T686]  ? put_task_struct+0x90/0x90
[   38.050361][  T686]  ? debug_smp_processor_id+0x17/0x20
[   38.055803][  T686]  ? kasan_quarantine_put+0x34/0x190
[   38.061067][  T686]  ? __kasan_check_write+0x14/0x20
[   38.066168][  T686]  ? _raw_spin_lock_irq+0x95/0xf0
[   38.071172][  T686]  do_group_exit+0x149/0x310
[   38.075743][  T686]  ? __kasan_check_write+0x14/0x20
[   38.080837][  T686]  ? recalc_sigpending+0x1ac/0x230
[   38.085928][  T686]  get_signal+0x64f/0x1430
[   38.090324][  T686]  ? __mutex_lock_slowpath+0x10/0x10
[   38.095592][  T686]  arch_do_signal_or_restart+0xe2/0x1100
[   38.101208][  T686]  ? xsk_poll+0x4a0/0x4a0
[   38.105519][  T686]  ? __fget_files+0x2e1/0x340
[   38.110177][  T686]  ? get_sigframe_size+0x10/0x10
[   38.115091][  T686]  ? __se_sys_futex+0x135/0x330
[   38.119926][  T686]  exit_to_user_mode_loop+0xa7/0xe0
[   38.125103][  T686]  exit_to_user_mode_prepare+0x87/0xd0
[   38.130637][  T686]  syscall_exit_to_user_mode+0x1a/0x30
[   38.136165][  T686]  do_syscall_64+0x58/0xa0
[   38.140560][  T686]  ? clear_bhb_loop+0x50/0xa0
[   38.145246][  T686]  ? clear_bhb_loop+0x50/0xa0
[   38.149900][  T686]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   38.155775][  T686] RIP: 0033:0x7f96cf8cafd9
[   38.160179][  T686] Code: Unable to access opcode bytes at RIP 0x7f96cf8cafaf.
[   38.167518][  T686] RSP: 002b:00007f96ce3190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   38.175911][  T686] RAX: fffffffffffffe00 RBX: 00007f96cfb47fa8 RCX: 00007f96cf8cafd9
[   38.183863][  T686] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f96cfb47fa8
[   38.191813][  T686] RBP: 00007f96cfb47fa0 R08: 0000000000000000 R09: 0000000000000000
[   38.199766][  T686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.207714][  T686] R13: 00007f96cfb48038 R14: 00007fff43d39160 R15: 00007fff43d39248
[   38.215670][  T686]  </TASK>
[   38.252380][  T670] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   38.304947][  T670] EXT4-fs (loop4): orphan cleanup on readonly fs
[   38.314508][   T30] audit: type=1400 audit(70399665.687:257): avc:  denied  { mmap_zero } for  pid=699 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   38.341312][  T670] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.121: bad orphan inode 65535
[   38.377050][  T670] Aborting journal on device loop4-8.
[   38.393074][  T670] EXT4-fs (loop4): Remounting filesystem read-only
[   38.399780][  T670] EXT4-fs (loop4): mounted filesystem with writeback data mode. Opts: init_itable=0x0000000000000001,errors=remount-ro,data=writeback,journal_checksum,usrquota,resgid=0x0000000000000000,data_err=abort,nojournal_checksum,. Quota mode: journalled.
[   38.435526][  T712] device-mapper: table: 253:3: multipath: unknown target type
[   38.445211][  T712] device-mapper: ioctl: error adding target to table
[   38.467887][  T717] FAULT_INJECTION: forcing a failure.
[   38.467887][  T717] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   38.509946][  T717] CPU: 0 PID: 717 Comm: syz.1.141 Not tainted syzkaller #0
[   38.517184][  T717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   38.527245][  T717] Call Trace:
[   38.530524][  T717]  <TASK>
[   38.533451][  T717]  __dump_stack+0x21/0x30
[   38.537789][  T717]  dump_stack_lvl+0x110/0x170
[   38.542467][  T717]  ? show_regs_print_info+0x20/0x20
[   38.543303][  T655] loop3: detected capacity change from 0 to 131072
[   38.547669][  T717]  dump_stack+0x15/0x20
[   38.558310][  T717]  should_fail+0x3ab/0x500
[   38.562739][  T717]  should_fail_usercopy+0x1a/0x20
[   38.567774][  T717]  fpu__restore_sig+0x1de/0xef0
[   38.572628][  T717]  ? _raw_spin_unlock_irq+0x4e/0x70
[   38.577832][  T717]  ? copy_fpstate_to_sigframe+0xa40/0xa40
[   38.583557][  T717]  ? __kasan_check_write+0x14/0x20
[   38.588763][  T717]  ? recalc_sigpending+0x1ac/0x230
[   38.593887][  T717]  ? __kasan_check_write+0x14/0x20
[   38.599015][  T717]  ? _copy_from_user+0x95/0xd0
[   38.603788][  T717]  __ia32_sys_rt_sigreturn+0x601/0x730
[   38.604659][  T722] loop4: detected capacity change from 0 to 49152
[   38.609251][  T717]  ? load_gs_index+0xc0/0xc0
[   38.609272][  T717]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   38.626302][  T717]  x64_sys_call+0x4ab/0x9a0
[   38.630823][  T717]  do_syscall_64+0x4c/0xa0
[   38.635252][  T717]  ? clear_bhb_loop+0x50/0xa0
[   38.639952][  T717]  ? clear_bhb_loop+0x50/0xa0
[   38.644644][  T717]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   38.650539][  T717] RIP: 0033:0x7f22f1994fd9
[   38.654960][  T717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.660576][  T726] loop2: detected capacity change from 0 to 8192
[   38.674567][  T717] RSP: 002b:00007f22f03e3028 EFLAGS: 00000246
[   38.674590][  T717] RAX: 0000000000000000 RBX: 00007f22f1c11fa0 RCX: 00007f22f1994fd9
[   38.674601][  T717] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[   38.674609][  T717] RBP: 00007f22f1a23fed R08: 0000000000000000 R09: 0000000000000000
[   38.674619][  T717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.674628][  T717] R13: 00007f22f1c12038 R14: 00007f22f1c11fa0 R15: 00007ffd6fabb2e8
[   38.674643][  T717]  </TASK>
[   38.750942][  T722] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   38.763188][  T722] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   38.765619][  T655] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(5) blocks(1024)
[   38.781383][  T655] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   38.782169][  T726] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.800314][   T30] audit: type=1400 audit(70399666.177:258): avc:  denied  { mount } for  pid=725 comm="syz.2.145" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   38.852387][  T655] F2FS-fs (loop3): Found nat_bits in checkpoint
[   38.852956][  T722] EXT4-fs (loop4): mounted filesystem with ordered data mode. Opts: dioread_nolock,stripe=0x00000000000004c3,noquota,i_version,,errors=continue. Quota mode: journalled.
[   38.891974][  T722] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   38.904868][  T722] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: journalled.
[   38.912985][  T655] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   38.920129][   T30] audit: type=1400 audit(70399666.287:259): avc:  denied  { setattr } for  pid=721 comm="syz.4.140" path="/20/bus" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.942489][  T655] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[   38.963714][   T30] audit: type=1400 audit(70399666.337:260): avc:  denied  { append } for  pid=654 comm="syz.3.116" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   39.015569][   T30] audit: type=1400 audit(70399666.387:261): avc:  denied  { mounton } for  pid=654 comm="syz.3.116" path="/31/mnt/encrypted_dir/bus" dev="loop3" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   39.071327][  T735] loop3: detected capacity change from 131072 to 64
[   39.085942][  T735] attempt to access beyond end of device
[   39.085942][  T735] loop3: rw=2049, want=45152, limit=64
[   39.099890][  T306] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   39.210457][   T30] audit: type=1400 audit(70399666.587:262): avc:  denied  { create } for  pid=736 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   39.240099][   T30] audit: type=1400 audit(70399666.597:263): avc:  denied  { connect } for  pid=736 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.379881][  T306] usb 1-1: Using ep0 maxpacket: 8
[   39.669927][  T306] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   39.689207][  T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.697488][  T306] usb 1-1: Product: syz
[   39.698481][  T743] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   39.707412][  T306] usb 1-1: Manufacturer: syz
[   39.740007][  T306] usb 1-1: SerialNumber: syz
[   39.745291][  T306] usb 1-1: config 0 descriptor??
[   39.922140][  T285] F2FS-fs (loop3): access invalid blkaddr:65536
[   39.937825][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   39.945315][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   39.955366][  T285] Call Trace:
[   39.958641][  T285]  <TASK>
[   39.961563][  T285]  __dump_stack+0x21/0x30
[   39.965896][  T285]  dump_stack_lvl+0x110/0x170
[   39.970574][  T285]  ? show_regs_print_info+0x20/0x20
[   39.975783][  T285]  dump_stack+0x15/0x20
[   39.979941][  T285]  f2fs_is_valid_blkaddr+0xc27/0x1220
[   39.985931][  T285]  f2fs_map_blocks+0xb83/0x3530
[   39.990801][  T285]  ? f2fs_do_map_lock+0x80/0x80
[   39.995662][  T285]  f2fs_mpage_readpages+0xa7d/0x1c80
[   40.000950][  T285]  ? get_mem_cgroup_from_objcg+0x170/0x170
[   40.006779][  T285]  ? dquot_release_reservation_block+0xa0/0xa0
[   40.012936][  T285]  ? __this_cpu_preempt_check+0x13/0x20
[   40.018489][  T285]  ? cgroup_rstat_updated+0xf0/0x360
[   40.023783][  T285]  f2fs_readahead+0xfc/0x240
[   40.028372][  T285]  ? f2fs_set_data_page_dirty+0x510/0x510
[   40.034089][  T285]  read_pages+0x186/0xad0
[   40.038419][  T285]  ? __lru_cache_activate_page+0x210/0x210
[   40.044224][  T285]  ? page_cache_ra_unbounded+0x960/0x960
[   40.049861][  T285]  page_cache_ra_unbounded+0x782/0x960
[   40.055321][  T285]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[   40.061822][  T285]  ? _find_next_bit+0x1b5/0x200
[   40.066681][  T285]  ondemand_readahead+0x8b7/0xeb0
[   40.071880][  T285]  ? page_cache_sync_ra+0x5a0/0x5a0
[   40.077077][  T285]  page_cache_sync_ra+0x544/0x5a0
[   40.082231][  T285]  ? force_page_cache_ra+0x460/0x460
[   40.087534][  T285]  ? __kasan_check_read+0x11/0x20
[   40.092561][  T285]  f2fs_readdir+0x495/0x9e0
[   40.097072][  T285]  ? f2fs_fill_dentries+0xcd0/0xcd0
[   40.102274][  T285]  ? down_read_killable+0xc1/0x110
[   40.107382][  T285]  ? security_file_permission+0x83/0xa0
[   40.112929][  T285]  iterate_dir+0x25c/0x600
[   40.117340][  T285]  ? f2fs_fill_dentries+0xcd0/0xcd0
[   40.122538][  T285]  __se_sys_getdents64+0xf2/0x250
[   40.127559][  T285]  ? release_firmware_map_entry+0x190/0x190
[   40.133448][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   40.138643][  T285]  ? filldir+0x660/0x660
[   40.142879][  T285]  ? __kasan_check_write+0x14/0x20
[   40.147993][  T285]  ? switch_fpu_return+0x15d/0x2c0
[   40.153104][  T285]  __x64_sys_getdents64+0x7b/0x90
[   40.158252][  T285]  x64_sys_call+0x592/0x9a0
[   40.162836][  T285]  do_syscall_64+0x4c/0xa0
[   40.167255][  T285]  ? clear_bhb_loop+0x50/0xa0
[   40.171925][  T285]  ? clear_bhb_loop+0x50/0xa0
[   40.176600][  T285]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   40.182488][  T285] RIP: 0033:0x7fc780102bb3
[   40.186896][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 21 6a fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   40.206498][  T285] RSP: 002b:00007ffc0fd15ec8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   40.214916][  T285] RAX: ffffffffffffffda RBX: 00005555774b1910 RCX: 00007fc780102bb3
[   40.222980][  T285] RDX: 0000000000008000 RSI: 00005555774b1940 RDI: 0000000000000005
[   40.230949][  T285] RBP: 00005555774b1940 R08: 00007fc78032ae20 R09: 0000000000000001
[   40.238916][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555774b1914
[   40.246886][  T285] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffc0fd18170
[   40.254866][  T285]  </TASK>
[   40.266755][  T285] F2FS-fs (loop3): access invalid blkaddr:65536
[   40.273101][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   40.280558][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   40.290596][  T285] Call Trace:
[   40.293860][  T285]  <TASK>
[   40.296773][  T285]  __dump_stack+0x21/0x30
[   40.301086][  T285]  dump_stack_lvl+0x110/0x170
[   40.305756][  T285]  ? show_regs_print_info+0x20/0x20
[   40.310932][  T285]  ? page_cache_prev_miss+0x290/0x290
[   40.316291][  T285]  dump_stack+0x15/0x20
[   40.320426][  T285]  f2fs_is_valid_blkaddr+0xc27/0x1220
[   40.325782][  T285]  f2fs_get_read_data_page+0x43f/0x6e0
[   40.331223][  T285]  ? f2fs_get_block+0x140/0x140
[   40.336057][  T285]  ? force_page_cache_ra+0x460/0x460
[   40.341328][  T285]  f2fs_find_data_page+0x189/0x3c0
[   40.346422][  T285]  f2fs_readdir+0x4b4/0x9e0
[   40.350913][  T285]  ? f2fs_fill_dentries+0xcd0/0xcd0
[   40.356093][  T285]  ? down_read_killable+0xc1/0x110
[   40.361186][  T285]  ? security_file_permission+0x83/0xa0
[   40.366713][  T285]  iterate_dir+0x25c/0x600
[   40.371113][  T285]  ? f2fs_fill_dentries+0xcd0/0xcd0
[   40.376302][  T285]  __se_sys_getdents64+0xf2/0x250
[   40.381308][  T285]  ? release_firmware_map_entry+0x190/0x190
[   40.387187][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   40.392368][  T285]  ? filldir+0x660/0x660
[   40.396593][  T285]  ? __kasan_check_write+0x14/0x20
[   40.401688][  T285]  ? switch_fpu_return+0x15d/0x2c0
[   40.406790][  T285]  __x64_sys_getdents64+0x7b/0x90
[   40.411793][  T285]  x64_sys_call+0x592/0x9a0
[   40.416277][  T285]  do_syscall_64+0x4c/0xa0
[   40.420672][  T285]  ? clear_bhb_loop+0x50/0xa0
[   40.425333][  T285]  ? clear_bhb_loop+0x50/0xa0
[   40.429991][  T285]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   40.435870][  T285] RIP: 0033:0x7fc780102bb3
[   40.440268][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 21 6a fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   40.459917][  T285] RSP: 002b:00007ffc0fd15ec8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   40.468322][  T285] RAX: ffffffffffffffda RBX: 00005555774b1910 RCX: 00007fc780102bb3
[   40.476276][  T285] RDX: 0000000000008000 RSI: 00005555774b1940 RDI: 0000000000000005
[   40.484237][  T285] RBP: 00005555774b1940 R08: 00007fc78032ae20 R09: 0000000000000001
[   40.492194][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555774b1914
[   40.500146][  T285] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffc0fd18170
[   40.508100][  T285]  </TASK>
[   40.656010][  T285] F2FS-fs (loop3): access invalid blkaddr:65536
[   40.668950][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   40.676451][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   40.686516][  T285] Call Trace:
[   40.689800][  T285]  <TASK>
[   40.692722][  T285]  __dump_stack+0x21/0x30
[   40.697049][  T285]  dump_stack_lvl+0x110/0x170
[   40.701723][  T285]  ? show_regs_print_info+0x20/0x20
[   40.706926][  T285]  ? page_cache_prev_miss+0x290/0x290
[   40.712316][  T285]  dump_stack+0x15/0x20
[   40.716481][  T285]  f2fs_is_valid_blkaddr+0xc27/0x1220
[   40.721861][  T285]  f2fs_get_read_data_page+0x43f/0x6e0
[   40.727346][  T285]  ? f2fs_get_block+0x140/0x140
[   40.732198][  T285]  f2fs_find_data_page+0x189/0x3c0
[   40.737308][  T285]  f2fs_readdir+0x4b4/0x9e0
[   40.741816][  T285]  ? f2fs_fill_dentries+0xcd0/0xcd0
[   40.747019][  T285]  ? debug_smp_processor_id+0x17/0x20
[   40.752394][  T285]  ? down_read_killable+0xc1/0x110
[   40.757502][  T285]  ? security_file_permission+0x83/0xa0
[   40.763052][  T285]  iterate_dir+0x25c/0x600
[   40.767470][  T285]  ? f2fs_fill_dentries+0xcd0/0xcd0
[   40.772677][  T285]  __se_sys_getdents64+0xf2/0x250
[   40.777706][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   40.782899][  T285]  ? filldir+0x660/0x660
[   40.787146][  T285]  ? d_delete_notify+0x160/0x160
[   40.792084][  T285]  ? debug_smp_processor_id+0x17/0x20
[   40.797459][  T285]  __x64_sys_getdents64+0x7b/0x90
[   40.802486][  T285]  x64_sys_call+0x592/0x9a0
[   40.806991][  T285]  do_syscall_64+0x4c/0xa0
[   40.811495][  T285]  ? clear_bhb_loop+0x50/0xa0
[   40.816170][  T285]  ? clear_bhb_loop+0x50/0xa0
[   40.820853][  T285]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   40.826754][  T285] RIP: 0033:0x7fc780102bb3
[   40.831271][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 21 6a fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   40.850880][  T285] RSP: 002b:00007ffc0fd15ec8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   40.859364][  T285] RAX: ffffffffffffffda RBX: 00005555774b1910 RCX: 00007fc780102bb3
[   40.867321][  T285] RDX: 0000000000008000 RSI: 00005555774b1940 RDI: 0000000000000005
[   40.875296][  T285] RBP: 00005555774b1940 R08: 0000000000008680 R09: 00000000ffffffff
[   40.883248][  T285] R10: 0000000000000100 R11: 0000000000000293 R12: 00005555774b1914
[   40.891200][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc0fd18170
[   40.899166][  T285]  </TASK>
[   40.902937][  T285] attempt to access beyond end of device
[   40.902937][  T285] loop3: rw=2049, want=45160, limit=64
[   40.922025][  T753] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12
[   40.935858][  T753] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   40.939677][  T747] F2FS-fs (loop2): invalid crc value
[   40.953820][  T753] F2FS-fs (loop4): invalid crc value
[   40.968153][  T753] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   40.991754][  T747] F2FS-fs (loop2): Found nat_bits in checkpoint
[   40.998230][  T753] F2FS-fs (loop4): recover fsync data on readonly fs
[   41.005487][  T753] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[   41.017592][  T753] F2FS-fs (loop4): checkpoint=disable on readonly fs
[   41.043155][  T747] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   41.057241][  T747] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   41.182089][  T760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'.
[   41.403124][  T307] usb 1-1: USB disconnect, device number 5
[   41.769809][  T777] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noquota,data_err=ignore,jqfmt=vfsv1,noquota,nojournal_checksum,errors=continue,barrier,usrjquota=,bsddf,abort,,errors=continue. Quota mode: none.
[   41.945957][  T777] incfs: ino conflict with backing FS 2
[   42.353336][  T789] netlink: 104 bytes leftover after parsing attributes in process `syz.2.163'.
[   42.390323][  T309] tipc: Left network mode
[   42.459881][    T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   42.553485][  T803] capability: warning: `syz.2.167' uses 32-bit capabilities (legacy support in use)
[   42.681405][  T804] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.688531][  T804] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.696273][  T804] device bridge_slave_0 entered promiscuous mode
[   42.703489][  T804] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.710835][  T804] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.718466][  T804] device bridge_slave_1 entered promiscuous mode
[   42.779526][  T804] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.786595][  T804] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.793886][  T804] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.800924][  T804] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.824230][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   42.834350][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.841686][    T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.852828][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.859958][    T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   42.870279][  T306] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   42.891689][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   42.900133][    T6] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   42.909555][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.916606][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.924312][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.934575][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   42.942947][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.950000][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.957662][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   42.965728][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   42.974286][    T6] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   42.992938][  T804] device veth0_vlan entered promiscuous mode
[   42.999087][    T6] usb 5-1: No streaming interface found for terminal 2.
[   43.007020][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.027182][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.037347][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.045146][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.054201][  T309] device bridge_slave_1 left promiscuous mode
[   43.060697][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.069091][  T309] device bridge_slave_0 left promiscuous mode
[   43.075543][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.085261][  T309] device veth1_macvtap left promiscuous mode
[   43.091365][  T309] device veth0_vlan left promiscuous mode
[   43.129920][  T306] usb 3-1: Using ep0 maxpacket: 32
[   43.164672][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.186021][  T804] device veth1_macvtap entered promiscuous mode
[   43.192511][  T753] UDC core: couldn't find an available UDC or it's busy: -16
[   43.200501][  T753] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   43.210394][  T567] usb 5-1: USB disconnect, device number 4
[   43.217421][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.233251][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.253761][   T30] kauditd_printk_skb: 20 callbacks suppressed
[   43.253774][   T30] audit: type=1400 audit(70399670.627:284): avc:  denied  { mounton } for  pid=804 comm="syz-executor" path="/root/syzkaller.6CUl6H/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   43.297413][   T30] audit: type=1400 audit(70399670.667:285): avc:  denied  { connect } for  pid=809 comm="syz.5.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   43.298607][  T810] set_capacity_and_notify: 4 callbacks suppressed
[   43.298620][  T810] loop5: detected capacity change from 0 to 32896
[   43.330530][  T306] usb 3-1: unable to get BOS descriptor or descriptor too short
[   43.338387][   T30] audit: type=1400 audit(70399670.667:286): avc:  denied  { setopt } for  pid=809 comm="syz.5.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   43.400777][  T810] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   43.420167][  T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.431068][  T306] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 126, changing to 7
[   43.570696][   T30] audit: type=1400 audit(70399670.947:287): avc:  denied  { write } for  pid=823 comm="syz.5.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   43.602922][   T30] audit: type=1400 audit(70399670.977:288): avc:  denied  { search } for  pid=825 comm="syz.3.173" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   43.609967][  T306] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[   43.633617][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.642284][  T306] usb 3-1: Product: syz
[   43.646586][  T306] usb 3-1: Manufacturer: syz
[   43.651518][  T306] usb 3-1: SerialNumber: syz
[   43.657235][  T826] loop3: detected capacity change from 0 to 49152
[   43.700443][  T826] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   43.728055][  T826] EXT4-fs (loop3): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: journalled.
[   43.760131][   T30] audit: type=1400 audit(70399671.127:289): avc:  denied  { create } for  pid=834 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   43.784531][  T835] loop4: detected capacity change from 0 to 512
[   43.825004][  T840] loop3: detected capacity change from 0 to 32896
[   43.990604][  T844] netlink: 168 bytes leftover after parsing attributes in process `syz.4.177'.
[   44.109581][  T840] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   44.356670][  T842] netlink: 'syz.4.177': attribute type 29 has an invalid length.
[   44.423743][  T842] netlink: 'syz.4.177': attribute type 29 has an invalid length.
[   44.715678][   T30] audit: type=1400 audit(70399672.087:290): avc:  denied  { ioctl } for  pid=851 comm="syz.5.184" path="/7/file0" dev="tmpfs" ino=58 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   44.763773][  T860] capability: warning: `syz.3.180' uses deprecated v2 capabilities in a way that may be insecure
[   44.785661][  T306] usb 3-1: USB disconnect, device number 3
[   44.806240][  T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.807473][  T860] loop3: detected capacity change from 0 to 33280
[   44.830537][  T864] loop4: detected capacity change from 0 to 33280
[   44.839901][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   44.879928][  T860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   44.942577][  T860] System zones: 1-12
[   44.972770][  T864] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.182: iget: bad extended attribute block 134217728
[   44.992188][  T860] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.180: missing EA_INODE flag
[   45.018852][  T864] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.182: couldn't read orphan inode 15 (err -117)
[   45.030910][  T860] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.180: error while reading EA inode 12 err=-117
[   45.031142][  T864] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   45.062816][  T860] EXT4-fs (loop3): 1 orphan inode deleted
[   45.066446][   T30] audit: type=1400 audit(70399672.437:291): avc:  denied  { unmount } for  pid=804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   45.068882][  T860] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug,errors=continue,,errors=continue. Quota mode: writeback.
[   45.108072][  T864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.182: bg 0: block 465: padding at end of block bitmap is not set
[   45.110319][   T30] audit: type=1400 audit(70399672.477:292): avc:  denied  { ioctl } for  pid=854 comm="syz.4.182" path="/26/file0/file0/file0" dev="loop4" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.150477][  T864] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   45.164161][  T864] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.182: invalid indirect mapped block 234881024 (level 0)
[   45.179340][   T30] audit: type=1400 audit(70399672.477:293): avc:  denied  { getopt } for  pid=877 comm="syz.5.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   45.198488][  T864] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.182: invalid indirect mapped block 768 (level 1)
[   45.226433][  T882] loop5: detected capacity change from 0 to 32896
[   45.385921][  T882] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   45.579926][  T306] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   46.351943][  T906] loop3: detected capacity change from 0 to 256
[   46.423478][  T906] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   46.692192][  T306] usb 5-1: Using ep0 maxpacket: 32
[   46.734524][  T910] loop2: detected capacity change from 0 to 32896
[   46.760012][   T20] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   46.788360][  T912] netlink: 104 bytes leftover after parsing attributes in process `syz.3.203'.
[   46.792935][  T910] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   46.823711][  T567] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.840267][  T567] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   46.860025][  T306] usb 5-1: unable to get BOS descriptor or descriptor too short
[   46.867116][  T916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.204'.
[   46.888554][  T917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'.
[   46.896916][  T921] netlink: 6 bytes leftover after parsing attributes in process `syz.2.205'.
[   46.897852][  T916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'.
[   46.915093][  T921] netlink: 6 bytes leftover after parsing attributes in process `syz.2.205'.
[   46.928376][  T921] loop2: detected capacity change from 0 to 256
[   46.972534][  T921] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[   46.980373][  T921] FAT-fs (loop2): Filesystem has been set read-only
[   47.029928][   T20] usb 6-1: device descriptor read/64, error -71
[   47.093167][  T925] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   47.179944][  T306] usb 5-1: string descriptor 0 read error: -22
[   47.186188][  T306] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[   47.195403][  T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.230501][  T937] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   47.238485][  T937] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   47.419944][   T20] usb 6-1: device descriptor read/64, error -71
[   47.533169][  T884] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   47.539623][  T884] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   47.548973][  T884] F2FS-fs (loop4): invalid crc value
[   47.556152][  T884] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   47.577823][  T884] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   47.584947][  T884] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   47.649929][  T306] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[   47.657511][  T306] usb 5-1: USB disconnect, device number 5
[   47.699908][   T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   47.969916][   T20] usb 6-1: device descriptor read/64, error -71
[   48.020788][  T953] netlink: 104 bytes leftover after parsing attributes in process `syz.2.214'.
[   48.238587][  T955] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   48.457499][  T291] attempt to access beyond end of device
[   48.457499][  T291] loop4: rw=2049, want=45104, limit=40427
[   48.922471][  T962] set_capacity_and_notify: 3 callbacks suppressed
[   48.922484][  T962] loop3: detected capacity change from 0 to 256
[   48.937986][  T962] exfat: Deprecated parameter 'utf8'
[   48.989077][  T962] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   49.009943][  T973] loop4: detected capacity change from 0 to 33280
[   49.053691][  T973] EXT4-fs (loop4): Ignoring removed nobh option
[   49.071084][  T973] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,usrquota,nobh,,errors=continue. Quota mode: writeback.
[   49.087486][   T30] kauditd_printk_skb: 3 callbacks suppressed
[   49.087499][   T30] audit: type=1400 audit(70399676.457:297): avc:  denied  { create } for  pid=972 comm="syz.4.216" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   49.135441][   T30] audit: type=1400 audit(70399676.457:298): avc:  denied  { ioctl } for  pid=972 comm="syz.4.216" path="socket:[19070]" dev="sockfs" ino=19070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   49.207297][  T980] loop3: detected capacity change from 0 to 49152
[   49.225441][  T982] loop4: detected capacity change from 0 to 32896
[   49.248404][  T980] EXT4-fs (loop3): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none.
[   49.263014][   T30] audit: type=1400 audit(70399676.637:299): avc:  denied  { link } for  pid=979 comm="syz.3.221" name="fc_a" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.291824][  T982] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   49.442278][ T1000] loop4: detected capacity change from 0 to 32896
[   49.449929][    T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   49.469593][ T1000] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   50.119470][   T30] audit: type=1400 audit(70399677.487:300): avc:  denied  { connect } for  pid=1015 comm="syz.5.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   50.491307][ T1018] loop4: detected capacity change from 0 to 32896
[   50.500022][  T306] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   50.770422][ T1022] loop5: detected capacity change from 0 to 33280
[   50.834569][ T1018] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   50.907377][ T1022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   50.915857][ T1022] System zones: 1-12
[   50.925988][ T1022] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.243: missing EA_INODE flag
[   50.938611][ T1022] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.243: error while reading EA inode 12 err=-117
[   50.951983][ T1022] EXT4-fs (loop5): 1 orphan inode deleted
[   50.957764][ T1022] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   51.529990][    T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.564309][ T1021] loop5: detected capacity change from 0 to 33280
[   51.586481][ T1030] device ip6gre1 entered promiscuous mode
[   51.609966][  T306] usb 4-1: Using ep0 maxpacket: 32
[   51.630288][ T1021] EXT4-fs (loop5): Ignoring removed oldalloc option
[   51.638116][ T1021] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13
[   51.646439][ T1021] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #13: comm syz.5.243: iget: bad i_size value: 12154757448730
[   51.659212][ T1021] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.243: couldn't read orphan inode 13 (err -117)
[   51.671294][ T1021] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,oldalloc,noinit_itable,usrjquota=,grpjquota=.,errors=continue. Quota mode: writeback.
[   51.699958][    T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   51.709097][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.717189][    T6] usb 3-1: Product: syz
[   51.721418][    T6] usb 3-1: Manufacturer: syz
[   51.725997][    T6] usb 3-1: SerialNumber: syz
[   51.769977][  T306] usb 4-1: unable to get BOS descriptor or descriptor too short
[   51.779004][    T6] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   51.869957][   T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   51.977543][   T30] audit: type=1400 audit(70399679.347:301): avc:  denied  { read write } for  pid=977 comm="syz.2.230" name="cdc-wdm0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   52.001091][   T30] audit: type=1400 audit(70399679.347:302): avc:  denied  { open } for  pid=977 comm="syz.2.230" path="/dev/cdc-wdm0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   52.025282][   T30] audit: type=1400 audit(70399679.347:303): avc:  denied  { ioctl } for  pid=977 comm="syz.2.230" path="/dev/cdc-wdm0" dev="devtmpfs" ino=755 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   52.025630][    T6] usb 3-1: USB disconnect, device number 4
[   52.052071][   T30] audit: type=1400 audit(70399679.347:304): avc:  denied  { shutdown } for  pid=977 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.076002][   T30] audit: type=1400 audit(70399679.347:305): avc:  denied  { read } for  pid=977 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.105455][ T1038] loop5: detected capacity change from 0 to 32896
[   52.155138][ T1038] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   52.170112][   T26] usb 5-1: device descriptor read/64, error -71
[   52.189984][  T306] usb 4-1: string descriptor 0 read error: -22
[   52.196466][  T306] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[   52.209413][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.499906][  T567] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   52.526896][ T1003] loop3: detected capacity change from 0 to 40427
[   52.559943][   T26] usb 5-1: device descriptor read/64, error -71
[   52.570523][ T1003] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   52.576894][ T1003] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   52.585994][ T1003] F2FS-fs (loop3): invalid crc value
[   52.592736][ T1003] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   52.613466][ T1003] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   52.620611][ T1003] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   52.679971][  T306] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[   52.687798][  T306] usb 4-1: USB disconnect, device number 3
[   52.839907][   T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   52.879949][  T567] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[   53.050099][  T567] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[   53.059201][  T567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.067234][  T567] usb 6-1: Product: syz
[   53.071415][  T567] usb 6-1: Manufacturer: syz
[   53.076012][  T567] usb 6-1: SerialNumber: syz
[   53.160558][   T26] usb 5-1: device descriptor read/64, error -71
[   53.179641][  T285] attempt to access beyond end of device
[   53.179641][  T285] loop3: rw=2049, want=45104, limit=40427
[   53.288456][ T1053] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   53.299415][ T1051] EXT4-fs (loop2): mounted filesystem with ordered data mode. Opts: ,errors=continue. Quota mode: none.
[   53.729943][   T26] usb 5-1: device descriptor read/64, error -71
[   53.860346][   T26] usb usb5-port1: attempt power cycle
[   54.440070][   T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   54.458801][ T1067] set_capacity_and_notify: 2 callbacks suppressed
[   54.458817][ T1067] loop3: detected capacity change from 0 to 34816
[   54.650074][   T26] usb 5-1: device descriptor read/8, error -71
[   54.781021][ T1067] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,. Quota mode: writeback.
[   54.940028][   T26] usb 5-1: device descriptor read/8, error -71
[   55.085001][   T30] audit: type=1400 audit(70399682.457:306): avc:  denied  { audit_read } for  pid=1066 comm="syz.3.247" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   55.326349][   T30] audit: type=1400 audit(70399682.527:307): avc:  denied  { map } for  pid=1066 comm="syz.3.247" path="/60/file0/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   55.356766][ T1077] netlink: 104 bytes leftover after parsing attributes in process `syz.4.250'.
[   55.375560][  T567] usb 6-1: Can't get UAC3 power state for id 10
[   55.385077][   T30] audit: type=1400 audit(70399682.757:308): avc:  denied  { ioctl } for  pid=1078 comm="syz.5.252" path="socket:[19305]" dev="sockfs" ino=19305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   55.386542][ T1080] loop5: detected capacity change from 0 to 256
[   55.432811][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.439988][  T567] usb 6-1: BAAD HEADPHONE p_chmask mismatch
[   55.446159][  T567] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[   55.463589][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.471972][ T1072] device bridge_slave_0 entered promiscuous mode
[   55.479090][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.480042][  T567] usb 6-1: USB disconnect, device number 4
[   55.486523][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.499498][ T1072] device bridge_slave_1 entered promiscuous mode
[   55.508872][  T309] device bridge_slave_1 left promiscuous mode
[   55.518014][ T1086] loop3: detected capacity change from 0 to 512
[   55.523623][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.573390][  T309] device bridge_slave_0 left promiscuous mode
[   55.580010][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.603156][  T309] device veth1_macvtap left promiscuous mode
[   55.613125][  T309] device veth0_vlan left promiscuous mode
[   55.672635][ T1086] netlink: 168 bytes leftover after parsing attributes in process `syz.3.251'.
[   55.687935][ T1096] ==================================================================
[   55.696115][ T1096] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760
[   55.704287][ T1096] Read of size 4 at addr ffff888127e9f470 by task syz.4.256/1096
[   55.712009][ T1096] 
[   55.714329][ T1096] CPU: 0 PID: 1096 Comm: syz.4.256 Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   55.721618][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   55.731681][ T1096] Call Trace:
[   55.734966][ T1096]  <TASK>
[   55.737906][ T1096]  __dump_stack+0x21/0x30
[   55.742247][ T1096]  dump_stack_lvl+0x110/0x170
[   55.746935][ T1096]  ? show_regs_print_info+0x20/0x20
[   55.752144][ T1096]  ? load_image+0x3f0/0x3f0
[   55.756655][ T1096]  print_address_description+0x7f/0x2c0
[   55.762210][ T1096]  ? unaccount_page_cache_page+0x6f1/0x760
[   55.768024][ T1096]  kasan_report+0x10f/0x150
[   55.772541][ T1096]  ? unaccount_page_cache_page+0x6f1/0x760
[   55.778377][ T1096]  __asan_report_load4_noabort+0x14/0x20
[   55.784012][ T1096]  unaccount_page_cache_page+0x6f1/0x760
[   55.789653][ T1096]  __delete_from_page_cache+0xbe/0x470
[   55.795114][ T1096]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[   55.802135][ T1096]  ? __kasan_check_write+0x14/0x20
[   55.807244][ T1096]  ? __kasan_check_read+0x11/0x20
[   55.812252][ T1096]  ? workingset_eviction+0x402/0x9f0
[   55.817524][ T1096]  __remove_mapping+0x601/0x990
[   55.822362][ T1096]  ? remove_mapping+0xa0/0xa0
[   55.827020][ T1096]  ? __kasan_check_read+0x11/0x20
[   55.832030][ T1096]  shrink_page_list+0x2a24/0x5800
[   55.837041][ T1096]  ? shrink_page_list+0x931/0x5800
[   55.842138][ T1096]  ? reclaim_clean_pages_from_list+0x7e0/0x7e0
[   55.848277][ T1096]  ? __this_cpu_preempt_check+0x13/0x20
[   55.853815][ T1096]  ? __mod_zone_page_state+0x8e/0xd0
[   55.859106][ T1096]  ? isolate_lru_pages+0xff1/0x11f0
[   55.864310][ T1096]  ? should_run_aging+0x410/0x410
[   55.869327][ T1096]  ? cgroup_rstat_updated+0x70/0x360
[   55.874609][ T1096]  ? _raw_spin_lock_irq+0x95/0xf0
[   55.879626][ T1096]  ? __this_cpu_preempt_check+0x13/0x20
[   55.885159][ T1096]  ? __count_memcg_events+0xad/0x120
[   55.890431][ T1096]  shrink_lruvec+0x11eb/0x3b00
[   55.895198][ T1096]  ? down_read_trylock+0x317/0x630
[   55.900293][ T1096]  ? mem_cgroup_shrink_node+0x550/0x550
[   55.905826][ T1096]  ? __kasan_check_write+0x14/0x20
[   55.910920][ T1096]  ? queue_work_on+0x104/0x150
[   55.915667][ T1096]  ? __kasan_check_write+0x14/0x20
[   55.920766][ T1096]  ? inactive_is_low+0x160/0x2f0
[   55.925697][ T1096]  ? css_next_descendant_pre+0x1e1/0x210
[   55.931313][ T1096]  ? mem_cgroup_iter+0x465/0x6c0
[   55.936235][ T1096]  shrink_node+0x11ee/0x2a40
[   55.940812][ T1096]  ? __kasan_check_write+0x14/0x20
[   55.945911][ T1096]  ? allow_direct_reclaim+0x370/0x370
[   55.951267][ T1096]  ? _raw_spin_lock_irq+0x95/0xf0
[   55.956275][ T1096]  ? _raw_spin_lock_irqsave+0x130/0x130
[   55.961824][ T1096]  do_try_to_free_pages+0x5a7/0x1580
[   55.967095][ T1096]  ? _raw_spin_lock_irqsave+0x130/0x130
[   55.972627][ T1096]  ? try_to_free_pages+0x1010/0x1010
[   55.977892][ T1096]  ? propagate_protected_usage+0x84/0x250
[   55.983597][ T1096]  try_to_free_mem_cgroup_pages+0x261/0x610
[   55.989508][ T1096]  ? shrink_lruvec+0x3b00/0x3b00
[   55.994451][ T1096]  ? mutex_unlock+0x8f/0x230
[   55.999044][ T1096]  mem_cgroup_force_empty_write+0x130/0x170
[   56.004941][ T1096]  ? memcg_stat_show+0x1360/0x1360
[   56.010047][ T1096]  cgroup_file_write+0x294/0x560
[   56.014984][ T1096]  ? cgroup_seqfile_stop+0xc0/0xc0
[   56.020081][ T1096]  ? mutex_lock+0x9b/0x1c0
[   56.024488][ T1096]  ? wait_for_completion_killable_timeout+0x10/0x10
[   56.031088][ T1096]  ? __kasan_check_write+0x14/0x20
[   56.036193][ T1096]  ? cgroup_seqfile_stop+0xc0/0xc0
[   56.041287][ T1096]  kernfs_fop_write_iter+0x2bd/0x400
[   56.046571][ T1096]  vfs_write+0x831/0xfd0
[   56.050827][ T1096]  ? file_end_write+0x1b0/0x1b0
[   56.055660][ T1096]  ? wait_for_completion_killable_timeout+0x10/0x10
[   56.062234][ T1096]  ? __fget_files+0x2e1/0x340
[   56.066898][ T1096]  ? __fdget_pos+0x2d2/0x380
[   56.071556][ T1096]  ? ksys_write+0x70/0x260
[   56.075956][ T1096]  ksys_write+0x14a/0x260
[   56.080277][ T1096]  ? __ia32_sys_read+0x90/0x90
[   56.085029][ T1096]  ? __kasan_check_write+0x14/0x20
[   56.090123][ T1096]  ? switch_fpu_return+0x15d/0x2c0
[   56.095221][ T1096]  __x64_sys_write+0x7b/0x90
[   56.099798][ T1096]  x64_sys_call+0x8ef/0x9a0
[   56.104285][ T1096]  do_syscall_64+0x4c/0xa0
[   56.108693][ T1096]  ? clear_bhb_loop+0x50/0xa0
[   56.113370][ T1096]  ? clear_bhb_loop+0x50/0xa0
[   56.118030][ T1096]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   56.123910][ T1096] RIP: 0033:0x7f7b4f258fd9
[   56.128312][ T1096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.147901][ T1096] RSP: 002b:00007f7b4dca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   56.156311][ T1096] RAX: ffffffffffffffda RBX: 00007f7b4f4d5fa0 RCX: 00007f7b4f258fd9
[   56.164285][ T1096] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000006
[   56.172242][ T1096] RBP: 00007f7b4f2e7fed R08: 0000000000000000 R09: 0000000000000000
[   56.180193][ T1096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.188147][ T1096] R13: 00007f7b4f4d6038 R14: 00007f7b4f4d5fa0 R15: 00007ffe076288b8
[   56.196220][ T1096]  </TASK>
[   56.199222][ T1096] 
[   56.201528][ T1096] Allocated by task 753:
[   56.205747][ T1096]  __kasan_kmalloc+0xd4/0x100
[   56.210412][ T1096]  kmem_cache_alloc_trace+0x119/0x270
[   56.215769][ T1096]  alloc_super+0x5e/0x840
[   56.220081][ T1096]  sget+0x1e2/0x4c0
[   56.223877][ T1096]  mount_bdev+0xec/0x3c0
[   56.228100][ T1096]  f2fs_mount+0x34/0x40
[   56.232238][ T1096]  legacy_get_tree+0xed/0x190
[   56.236894][ T1096]  vfs_get_tree+0x89/0x260
[   56.241292][ T1096]  do_new_mount+0x251/0xb40
[   56.245783][ T1096]  path_mount+0x640/0xff0
[   56.250094][ T1096]  __se_sys_mount+0x320/0x390
[   56.254755][ T1096]  __x64_sys_mount+0xbf/0xd0
[   56.259335][ T1096]  x64_sys_call+0x6bf/0x9a0
[   56.263820][ T1096]  do_syscall_64+0x4c/0xa0
[   56.268221][ T1096]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   56.274096][ T1096] 
[   56.276410][ T1096] Freed by task 307:
[   56.280281][ T1096]  kasan_set_track+0x4a/0x70
[   56.284884][ T1096]  kasan_set_free_info+0x23/0x40
[   56.289804][ T1096]  ____kasan_slab_free+0x125/0x160
[   56.294894][ T1096]  __kasan_slab_free+0x11/0x20
[   56.299638][ T1096]  slab_free_freelist_hook+0xc2/0x190
[   56.304989][ T1096]  kfree+0xc4/0x270
[   56.308779][ T1096]  destroy_super_work+0x40/0x50
[   56.313618][ T1096]  process_one_work+0x6c8/0xbb0
[   56.318456][ T1096]  worker_thread+0xaa0/0x1250
[   56.323116][ T1096]  kthread+0x3f5/0x4f0
[   56.327166][ T1096]  ret_from_fork+0x1f/0x30
[   56.331566][ T1096] 
[   56.333872][ T1096] Last potentially related work creation:
[   56.339579][ T1096]  kasan_save_stack+0x3a/0x60
[   56.344241][ T1096]  __kasan_record_aux_stack+0xd2/0x100
[   56.349683][ T1096]  kasan_record_aux_stack_noalloc+0xb/0x10
[   56.355474][ T1096]  insert_work+0x51/0x310
[   56.359785][ T1096]  __queue_work+0x8e1/0xc60
[   56.364272][ T1096]  queue_work_on+0xde/0x150
[   56.368757][ T1096]  destroy_super_rcu+0xd1/0xe0
[   56.373504][ T1096]  rcu_do_batch+0x4c1/0xbf0
[   56.377992][ T1096]  rcu_core+0x4a3/0xef0
[   56.382126][ T1096]  rcu_core_si+0x9/0x10
[   56.386264][ T1096]  handle_softirqs+0x250/0x560
[   56.391017][ T1096]  run_ksoftirqd+0x28/0x40
[   56.395423][ T1096]  smpboot_thread_fn+0x446/0x880
[   56.400345][ T1096]  kthread+0x3f5/0x4f0
[   56.404395][ T1096]  ret_from_fork+0x1f/0x30
[   56.408793][ T1096] 
[   56.411095][ T1096] Second to last potentially related work creation:
[   56.417653][ T1096]  kasan_save_stack+0x3a/0x60
[   56.422331][ T1096]  __kasan_record_aux_stack+0xd2/0x100
[   56.427799][ T1096]  kasan_record_aux_stack_noalloc+0xb/0x10
[   56.433587][ T1096]  call_rcu+0x10b/0xf60
[   56.437727][ T1096]  __put_super+0x26b/0x2d0
[   56.442125][ T1096]  deactivate_locked_super+0xd4/0x100
[   56.447480][ T1096]  mount_bdev+0x2ab/0x3c0
[   56.451791][ T1096]  f2fs_mount+0x34/0x40
[   56.455927][ T1096]  legacy_get_tree+0xed/0x190
[   56.460638][ T1096]  vfs_get_tree+0x89/0x260
[   56.465137][ T1096]  do_new_mount+0x251/0xb40
[   56.469619][ T1096]  path_mount+0x640/0xff0
[   56.473937][ T1096]  __se_sys_mount+0x320/0x390
[   56.478597][ T1096]  __x64_sys_mount+0xbf/0xd0
[   56.483165][ T1096]  x64_sys_call+0x6bf/0x9a0
[   56.487647][ T1096]  do_syscall_64+0x4c/0xa0
[   56.492067][ T1096]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   56.497941][ T1096] 
[   56.500248][ T1096] The buggy address belongs to the object at ffff888127e9f000
[   56.500248][ T1096]  which belongs to the cache kmalloc-2k of size 2048
[   56.514295][ T1096] The buggy address is located 1136 bytes inside of
[   56.514295][ T1096]  2048-byte region [ffff888127e9f000, ffff888127e9f800)
[   56.527723][ T1096] The buggy address belongs to the page:
[   56.533343][ T1096] page:ffffea00049fa600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127e98
[   56.543567][ T1096] head:ffffea00049fa600 order:3 compound_mapcount:0 compound_pincount:0
[   56.551869][ T1096] flags: 0x4000000000010200(slab|head|zone=1)
[   56.558022][ T1096] raw: 4000000000010200 0000000000000000 0000000600000001 ffff888100043200
[   56.566673][ T1096] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[   56.575241][ T1096] page dumped because: kasan: bad access detected
[   56.581631][ T1096] page_owner tracks the page as allocated
[   56.587322][ T1096] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 291, ts 23352994777, free_ts 0
[   56.605441][ T1096]  post_alloc_hook+0x192/0x1b0
[   56.610192][ T1096]  prep_new_page+0x1c/0x110
[   56.614675][ T1096]  get_page_from_freelist+0x2d42/0x2dd0
[   56.620200][ T1096]  __alloc_pages+0x1a2/0x460
[   56.624777][ T1096]  new_slab+0xa0/0x4d0
[   56.628828][ T1096]  ___slab_alloc+0x3ac/0x840
[   56.633401][ T1096]  __slab_alloc+0x49/0x90
[   56.637727][ T1096]  __kmalloc+0x16a/0x2c0
[   56.641956][ T1096]  __register_sysctl_table+0xeb/0x1240
[   56.647413][ T1096]  register_net_sysctl+0x21d/0x230
[   56.652508][ T1096]  __addrconf_sysctl_register+0x277/0x3e0
[   56.658209][ T1096]  addrconf_sysctl_register+0x147/0x1a0
[   56.663744][ T1096]  ipv6_add_dev+0xc09/0x1150
[   56.668326][ T1096]  addrconf_notify+0x582/0xe00
[   56.673069][ T1096]  raw_notifier_call_chain+0x90/0x100
[   56.678422][ T1096]  call_netdevice_notifiers+0x119/0x190
[   56.683950][ T1096] page_owner free stack trace missing
[   56.689296][ T1096] 
[   56.691598][ T1096] Memory state around the buggy address:
[   56.697230][ T1096]  ffff888127e9f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   56.705275][ T1096]  ffff888127e9f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   56.713316][ T1096] >ffff888127e9f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   56.721358][ T1096]                                                              ^
[   56.729052][ T1096]  ffff888127e9f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   56.737090][ T1096]  ffff888127e9f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   56.745125][ T1096] ==================================================================
[   56.753162][ T1096] Disabling lock debugging due to kernel taint
[   56.760394][  T368] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   56.768004][   T30] audit: type=1400 audit(70399683.117:309): avc:  denied  { write } for  pid=277 comm="syz-executor" path="pipe:[1441]" dev="pipefs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   56.789332][ T1098] loop4: detected capacity change from 0 to 33280
[   56.798858][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.814834][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.826861][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.861201][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.873554][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.882000][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.891593][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.898634][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.906106][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.914762][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.923219][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.930291][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.937747][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.460434][  T309] device bridge_slave_1 left promiscuous mode
[   58.466553][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.474055][  T309] device bridge_slave_0 left promiscuous mode
[   58.480259][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.487904][  T309] device bridge_slave_1 left promiscuous mode
[   58.494223][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.501605][  T309] device bridge_slave_0 left promiscuous mode
[   58.507693][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.515455][  T309] device bridge_slave_1 left promiscuous mode
[   58.521646][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.528968][  T309] device bridge_slave_0 left promiscuous mode
[   58.535216][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.542960][  T309] device bridge_slave_1 left promiscuous mode
[   58.549140][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.556683][  T309] device bridge_slave_0 left promiscuous mode
[   58.562885][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.571256][  T309] device veth1_macvtap left promiscuous mode
[   58.577256][  T309] device veth0_vlan left promiscuous mode
[   58.583318][  T309] device veth1_macvtap left promiscuous mode
[   58.589305][  T309] device veth0_vlan left promiscuous mode
[   58.595295][  T309] device veth1_macvtap left promiscuous mode
[   58.601369][  T309] device veth0_vlan left promiscuous mode