last executing test programs:

35.158732026s ago: executing program 4 (id=42):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r1, r0, 0x2b, 0x2002}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

35.01156377s ago: executing program 4 (id=48):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0})
readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)

34.608903189s ago: executing program 4 (id=56):
syz_clone3(&(0x7f0000000900)={0xa3803200, &(0x7f0000000100), 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket(0x200000000000011, 0x2, 0xd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)

34.528831732s ago: executing program 4 (id=59):
socket$packet(0x11, 0xa, 0x300)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000100)='?', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./trace\x00', 0x0, 0x0, 0x0)

34.417836754s ago: executing program 4 (id=60):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket(0x28, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

34.316709087s ago: executing program 4 (id=61):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x1, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r3, r0, 0x12, 0x6}, 0x10)

34.316485407s ago: executing program 32 (id=61):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x1, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r3, r0, 0x12, 0x6}, 0x10)

32.301591128s ago: executing program 0 (id=103):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
r2 = fsopen(&(0x7f0000000440)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000001d40)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0)

32.265595368s ago: executing program 0 (id=104):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5b30, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@delsa={0x30, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x2, 0x32}, [@sa_dir={0x5, 0x21, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x6000)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xcc411eaf6a585b1f, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040095}, 0x40)

32.254888769s ago: executing program 0 (id=105):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "a5000505007d0008"}, 0x10}}, 0xd209f6d814827b17)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000080)=""/54, 0x36)

32.246194809s ago: executing program 0 (id=106):
mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x2210081, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000680), 0x14c98, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x8b100a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901)
umount2(&(0x7f0000000540)='./file0\x00', 0x9)

32.237232719s ago: executing program 0 (id=107):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
ftruncate(r3, 0xc17a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32.18960092s ago: executing program 0 (id=108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80)

32.18918299s ago: executing program 33 (id=108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80)

10.877203097s ago: executing program 5 (id=510):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b)

10.852390487s ago: executing program 5 (id=511):
signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x8, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x648}, 0x0, 0x0, 0x0, 0x0)

10.606171854s ago: executing program 5 (id=513):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x8020000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10.492122207s ago: executing program 5 (id=518):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)

10.469226687s ago: executing program 5 (id=520):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4)

10.390723838s ago: executing program 5 (id=527):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x204}}, 0x10)
close(r0)

10.049089227s ago: executing program 34 (id=527):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x204}}, 0x10)
close(r0)

4.36561216s ago: executing program 7 (id=650):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4.264017133s ago: executing program 7 (id=653):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x69, 0x0, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0xffffff1b, &(0x7f0000000000)='\x00\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x100100, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0)
syz_ublk_setup_io_uring(0x114e, 0x0, 0x0, 0x0, 0x0)
pipe2(0x0, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

3.703369427s ago: executing program 7 (id=662):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r1 = inotify_init1(0x800)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

3.675230048s ago: executing program 7 (id=663):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x840, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
openat$tun(0xffffffffffffff9c, 0x0, 0xb641, 0x0)
r0 = memfd_create(&(0x7f0000000300)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
umount2(&(0x7f0000000440)='./file0\x00', 0x2)

2.77593662s ago: executing program 7 (id=679):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)={0x10000008})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.420550749s ago: executing program 1 (id=686):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f00000005c0)="$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")
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x200000, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001180)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000001540)='.\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', 0x8000, 0x1f7)
mkdirat(r1, &(0x7f00000015c0)='./bus\x00', 0xe)
chdir(&(0x7f0000001600)='./bus\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001640)='.\x00', 0x0, 0x104)
getdents(r2, &(0x7f0000001680)=""/29, 0x1d)

2.3937362s ago: executing program 7 (id=688):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x50f, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', 0xa0c42, 0x100)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x10, 0x2}, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

2.169993325s ago: executing program 1 (id=700):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff)
creat(&(0x7f0000000140)='./file0\x00', 0x148)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2)

2.099958958s ago: executing program 3 (id=693):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000054c0)={[{@test_dummy_encryption}, {@noauto_da_alloc}, {@oldalloc}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x65, 0x35, 0x35, 0x30, 0x64, 0x31, 0x36], 0x2d, [0x63, 0x64, 0x39, 0x31], 0x2d, [0x62, 0x63, 0x34, 0x34], 0x2d, [0x63, 0x62, 0x32, 0x38], 0x2d, [0x38, 0x31, 0x36, 0x38, 0x31, 0x64, 0x36, 0x34]}}}, {@euid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, ',!\x00'}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==")
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x0, 0x2, 0x200000000180, 0x31b9, 0x6, 0x200f1, 0x50, 0x81, 0x5, 0x0, 0x80000008000029, 0x0, 0x2000000000006, 0x100, 0xbdc], 0x1, 0x43102})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x6, 0x4, 0x10043, 0x5, 0x2, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0xeef, 0x1, 0x0, 0x9], 0xeeee8000, 0x283a02})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x32, 0x80}, {0x5000, 0x4000, 0xc, 0x0, 0x3e, 0x5, 0x5, 0x5, 0x2, 0x5, 0xfc, 0x89}, {0x6000, 0x54000, 0x0, 0x5, 0x3, 0x7, 0x1, 0x7, 0x9b, 0x2, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x1c, 0x42, 0xb, 0x1, 0x2, 0x7, 0xe}, {0xeeee0000, 0x1, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x80}, {0xdddd1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x3, 0xf, 0x81, 0x7}, {0x5000, 0x1, 0x0, 0x12, 0xe1, 0x15, 0x7, 0x3, 0x0, 0x81, 0x4, 0x6}, {0xd000, 0x4000, 0x0, 0x5, 0xcd, 0x7, 0x1, 0x92, 0x2, 0x4c, 0xb0, 0x9}, {0xc000, 0x9}, {0x8000000, 0x7}, 0x8000000b, 0x0, 0x0, 0x402105, 0x1000000000000, 0x1500, 0x3000, [0x9, 0xffffffffffff14ac, 0x5, 0x3ff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.050585159s ago: executing program 3 (id=694):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)

1.974631131s ago: executing program 3 (id=695):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000040000000c"], 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0x9)

1.889630653s ago: executing program 3 (id=696):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = eventfd2(0xffffffff, 0x1)
write$eventfd(r2, &(0x7f0000000080)=0xffffffff00000000, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0)

1.879352053s ago: executing program 2 (id=698):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20)
recvfrom$inet6(r1, &(0x7f0000000080)=""/26, 0x1a, 0x22, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.822797484s ago: executing program 6 (id=701):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
close(0x3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

1.785762895s ago: executing program 6 (id=702):
mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000028c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000002940)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004a00)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004a40)="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", 0x2000, &(0x7f0000006a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000006b80)='./file0\x00', 0x101001, 0x0)
writev(r3, &(0x7f0000008cc0)=[{&(0x7f0000008d00)="e1", 0x56000}], 0x1)
umount2(&(0x7f0000008d40)='./file0\x00', 0x1)

1.60659132s ago: executing program 2 (id=703):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10)
r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x0, 0xce2c, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.60577496s ago: executing program 2 (id=704):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x200008, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRESOCT], 0x1, 0x3a4, &(0x7f00000007c0)="$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")
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x973bb000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x1000, &(0x7f0000012000/0x1000)=nil})
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)

1.57067154s ago: executing program 6 (id=705):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r1, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x20000000, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xaf294387f9b3d173, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

1.335143557s ago: executing program 3 (id=706):
r0 = socket$inet(0x2, 0x1, 0x0)
socket(0x1, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000900)={@multicast2, @local}, 0xc)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000980)={@multicast2, @local, @remote}, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a40)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

1.302003367s ago: executing program 1 (id=707):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x80000)
memfd_create(&(0x7f0000000040)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa5\xed\x05\x12\x0f\x0eu\xe5 \xfe\xcdMX\xb5X\x838\xf5\x18x\xc9\xb9\x03\t\x06\x96g\x8a5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0\x1f\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x40042, 0x1)
r0 = fsopen(&(0x7f0000000940)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000ec0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000f40)=ANY=[@ANYRES8=r1], 0xd)

1.281389588s ago: executing program 1 (id=708):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f00000000c0), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)='?', 0x20000081}], 0x2)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)="cc", 0x1}], 0x1)

1.170505541s ago: executing program 6 (id=709):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001b40)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, 0x0)
fremovexattr(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="6d0048f3e2be808c376d4f545c71fae12a074581658008db517aa824fc54b08d3f5b7067969dbe167ed5a07b5d4625566ca5252c24fcce"])

1.038324514s ago: executing program 2 (id=710):
io_uring_setup(0x7, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

954.637006ms ago: executing program 6 (id=711):
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x4, 0x0, &(0x7f0000000000))
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f000028b000/0x3000)=nil, &(0x7f00000bb000/0x2000)=nil, 0x3000, 0x2})
rename(&(0x7f0000000380)='./bus/file0\x00', &(0x7f0000000100)='./bus\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==")
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

426.25756ms ago: executing program 1 (id=712):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
syz_clone(0x2180100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
dup3(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
syz_clone3(&(0x7f0000000080)={0x180a01400, &(0x7f0000000600), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)

291.681163ms ago: executing program 1 (id=713):
r0 = userfaultfd(0x801)
r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x35b}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0)

286.864603ms ago: executing program 2 (id=714):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2071, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x14a}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006"], 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}})
io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0)

256.556264ms ago: executing program 2 (id=715):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = syz_usb_connect$uac2(0x3, 0xa2, &(0x7f0000000340)=ANY=[@ANYBLOB="120100030000002035121000400001020301090290000301000002080b0101010a20020904000000010120000924010700063000b2092407030300027f950b240606030900020004000c24030304040606038100801e240802"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "5605f21c03bba8484b16c18e8ff6ac69d825e97b3f97299dac4be2ad3f124ac54b4b8e227236a49fd8c270"}}}, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
write$tcp_mem(r2, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000080)=0x2, 0x4)

227.641414ms ago: executing program 6 (id=716):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=717):
signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000002c0)={0xf, 0x10000000000001, 0x0, 0x8000, 0x800, 0x9}, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts.
[   23.274623][   T28] audit: type=1400 audit(1791929054.616:64): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   23.275729][  T279] cgroup: Unknown subsys name 'net'
[   23.297300][   T28] audit: type=1400 audit(1791929054.616:65): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.324560][   T28] audit: type=1400 audit(1791929054.646:66): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.324699][  T279] cgroup: Unknown subsys name 'devices'
[   23.464478][  T279] cgroup: Unknown subsys name 'hugetlb'
[   23.470080][  T279] cgroup: Unknown subsys name 'rlimit'
[   23.572820][   T28] audit: type=1400 audit(1791929054.906:67): avc:  denied  { setattr } for  pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.595998][   T28] audit: type=1400 audit(1791929054.916:68): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   23.620813][   T28] audit: type=1400 audit(1791929054.916:69): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.630419][  T281] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   23.653119][   T28] audit: type=1400 audit(1791929054.996:70): avc:  denied  { relabelto } for  pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.678710][   T28] audit: type=1400 audit(1791929054.996:71): avc:  denied  { write } for  pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.680080][  T279] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.704305][   T28] audit: type=1400 audit(1791929055.026:72): avc:  denied  { read } for  pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.738930][   T28] audit: type=1400 audit(1791929055.026:73): avc:  denied  { open } for  pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.586951][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.594125][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.601621][  T290] device bridge_slave_0 entered promiscuous mode
[   24.609779][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.616863][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.624318][  T290] device bridge_slave_1 entered promiscuous mode
[   24.703193][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.710249][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.717706][  T288] device bridge_slave_0 entered promiscuous mode
[   24.726082][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.733203][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.740479][  T288] device bridge_slave_1 entered promiscuous mode
[   24.779332][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.786502][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.793874][  T287] device bridge_slave_0 entered promiscuous mode
[   24.823446][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.830494][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.837871][  T287] device bridge_slave_1 entered promiscuous mode
[   24.878111][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.885285][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.892712][  T289] device bridge_slave_0 entered promiscuous mode
[   24.902409][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.909496][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.916936][  T289] device bridge_slave_1 entered promiscuous mode
[   24.977170][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.984364][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.991638][  T291] device bridge_slave_0 entered promiscuous mode
[   24.998789][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.005863][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.013242][  T291] device bridge_slave_1 entered promiscuous mode
[   25.064648][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.071701][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.079001][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.086033][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.112053][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.119140][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.126461][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.133507][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.150160][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.157230][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.192014][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.199085][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.206364][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.213390][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.239523][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.247127][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.254387][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.261581][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.268928][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.276211][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.283559][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.291532][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.299018][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.336878][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.344952][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.353408][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.360425][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.367881][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.376097][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.383135][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.390464][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.398790][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.406908][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.413935][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.421265][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.429570][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.436606][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.447268][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.456435][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.477959][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.485940][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.493819][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.501699][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.510016][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.517068][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.524592][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.532685][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.539713][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.547080][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   25.572103][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.580277][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.587316][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.595256][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.603827][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.611674][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.619860][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.626889][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.634342][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.642441][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.649483][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.657085][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.665284][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.672299][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.679711][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.687749][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.701685][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.710025][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.730795][  T290] device veth0_vlan entered promiscuous mode
[   25.737401][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.746436][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.754885][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.762891][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.770762][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.778784][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.786829][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.794779][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.811087][  T287] device veth0_vlan entered promiscuous mode
[   25.823010][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.830469][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.838112][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.846408][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.854566][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.862537][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.870635][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.879089][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.887492][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.895382][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.903550][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.910974][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.925823][  T287] device veth1_macvtap entered promiscuous mode
[   25.934251][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.942291][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.950758][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.959097][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.967464][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.975247][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.982699][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.993739][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   26.002084][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.010591][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.018799][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.028043][  T288] device veth0_vlan entered promiscuous mode
[   26.037794][  T290] device veth1_macvtap entered promiscuous mode
[   26.045978][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.053735][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.061912][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.070455][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   26.079001][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.089064][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   26.096987][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.115481][  T289] device veth0_vlan entered promiscuous mode
[   26.121783][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.129299][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.136949][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.145644][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.154118][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.162370][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.170751][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.178992][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.190471][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   26.198475][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.215526][  T287] request_module fs-gadgetfs succeeded, but still no fs?
[   26.216390][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.230607][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.238564][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.247087][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.255424][  T291] device veth0_vlan entered promiscuous mode
[   26.262842][  T288] device veth1_macvtap entered promiscuous mode
[   26.289116][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.299347][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.308178][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.330238][  T289] device veth1_macvtap entered promiscuous mode
[   26.337356][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.346113][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.354699][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.363062][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.371283][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.385611][  T291] device veth1_macvtap entered promiscuous mode
[   26.401098][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.409807][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.418359][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.426689][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.435952][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.444755][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.453374][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.472377][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.485755][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.512561][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.521109][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.562540][  T326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'.
[   26.579502][  T330] loop3: detected capacity change from 0 to 512
[   26.589209][  T330] EXT4-fs: Ignoring removed bh option
[   26.603289][  T330] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   26.615122][  T330] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[   26.625695][  T330] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8: Corrupt directory, running e2fsck is recommended
[   26.640967][  T330] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   26.658988][  T330] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.8: corrupted in-inode xattr
[   26.674545][  T330] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.8: couldn't read orphan inode 15 (err -117)
[   26.686646][  T330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   27.417481][  T290] EXT4-fs (loop3): unmounting filesystem.
[   27.459318][  T354] loop4: detected capacity change from 0 to 8192
[   27.483861][  T354]  loop4: p1 p2 p3 < > p4 < p5 p6 >
[   27.489430][  T354] loop4: p1 start 4294967295 is beyond EOD, truncated
[   27.497928][  T354] loop4: p5 start 4294967295 is beyond EOD, truncated
[   27.521490][  T356] binder: 355:356 ioctl c0306201 200000000680 returned -14
[   27.532700][  T356] binder: BINDER_SET_CONTEXT_MGR already set
[   27.541997][  T356] binder: 355:356 ioctl 4018620d 200000000740 returned -16
[   27.577938][  T362] ip_tables: iptables: counters copy to user failed while replacing table
[   27.589271][  T362] raw_sendmsg: syz.3.18 forgot to set AF_INET. Fix it!
[   27.605604][  T364] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   27.807279][  T380] device syz_tun entered promiscuous mode
[   27.813794][  T380] bridge0: port 3(syz_tun) entered blocking state
[   27.820383][  T380] bridge0: port 3(syz_tun) entered disabled state
[   27.827760][  T380] bridge0: port 3(syz_tun) entered blocking state
[   27.834216][  T380] bridge0: port 3(syz_tun) entered forwarding state
[   28.130895][  T405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[   28.250948][  T410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'.
[   28.304302][   T28] kauditd_printk_skb: 80 callbacks suppressed
[   28.304314][   T28] audit: type=1400 audit(1791929059.646:154): avc:  denied  { setopt } for  pid=411 comm="syz.0.34" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   28.352567][  T414] loop0: detected capacity change from 0 to 512
[   28.379998][  T414] =======================================================
[   28.379998][  T414] WARNING: The mand mount option has been deprecated and
[   28.379998][  T414]          and is ignored by this kernel. Remove the mand
[   28.379998][  T414]          option from the mount to silence this warning.
[   28.379998][  T414] =======================================================
[   28.422379][   T28] audit: type=1400 audit(1791929059.766:155): avc:  denied  { create } for  pid=415 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   28.444305][   T28] audit: type=1400 audit(1791929059.786:156): avc:  denied  { write } for  pid=415 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   28.464857][   T28] audit: type=1400 audit(1791929059.786:157): avc:  denied  { nlmsg_write } for  pid=415 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   28.485563][  T414] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[   28.493996][  T414] System zones: 0-7
[   28.512457][   T28] audit: type=1400 audit(1791929059.846:158): avc:  denied  { mount } for  pid=424 comm="syz.3.39" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   28.519637][  T414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   28.563286][   T28] audit: type=1400 audit(1791929059.896:159): avc:  denied  { bind } for  pid=400 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   28.602833][   T28] audit: type=1400 audit(1791929059.896:160): avc:  denied  { name_bind } for  pid=400 comm="syz.4.30" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   28.610293][  T404] syz.4.30 (404) used greatest stack depth: 20800 bytes left
[   28.632713][   T28] audit: type=1400 audit(1791929059.896:161): avc:  denied  { node_bind } for  pid=400 comm="syz.4.30" saddr=ff02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   28.654960][   T28] audit: type=1400 audit(1791929059.906:162): avc:  denied  { write } for  pid=413 comm="syz.0.35" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   28.677802][   T28] audit: type=1400 audit(1791929059.906:163): avc:  denied  { add_name } for  pid=413 comm="syz.0.35" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   28.678784][  T289] EXT4-fs (loop0): unmounting filesystem.
[   29.238652][  T467] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[   29.261792][  T476] loop4: detected capacity change from 0 to 256
[   29.284039][  T476] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[   29.316247][  T476] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   29.326727][  T476] exFAT-fs (loop4): Filesystem has been set read-only
[   29.334727][  T476] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   29.364515][  T291] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   29.374983][  T291] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   29.573430][  T485] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.580488][  T485] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.587934][  T485] device bridge_slave_0 entered promiscuous mode
[   29.594961][  T485] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.602285][  T485] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.610646][  T485] device bridge_slave_1 entered promiscuous mode
[   29.700311][  T485] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.707401][  T485] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.714705][  T485] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.721756][  T485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.793313][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   29.801185][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.813731][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.824978][  T506] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[   29.838970][  T506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   29.865745][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   29.893595][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   29.910171][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   29.919231][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   29.929510][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   29.947985][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   29.964087][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   29.972280][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   29.980656][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   29.990232][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.997309][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.009850][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.018740][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.025802][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.058598][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.071999][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.095575][  T523] xt_hashlimit: size too large, truncated to 1048576
[   30.103094][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.118846][  T485] device veth0_vlan entered promiscuous mode
[   30.131094][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.144718][    T8] device bridge_slave_1 left promiscuous mode
[   30.150853][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.178664][    T8] device bridge_slave_0 left promiscuous mode
[   30.186483][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.203866][    T8] device veth1_macvtap left promiscuous mode
[   30.209916][    T8] device veth0_vlan left promiscuous mode
[   30.372050][  T485] device veth1_macvtap entered promiscuous mode
[   30.379473][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.393596][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.403084][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.429817][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.443072][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.461616][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.470567][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.577686][  T555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.90'.
[   30.613746][  T555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.90'.
[   30.642894][  T558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'.
[   30.674878][  T558] HTB: quantum of class 80010002 is big. Consider r2q change.
[   30.781185][  T570] loop2: detected capacity change from 0 to 256
[   30.817966][  T570] FAT-fs (loop2): Directory bread(block 64) failed
[   30.834208][  T570] FAT-fs (loop2): Directory bread(block 65) failed
[   30.850625][  T570] FAT-fs (loop2): Directory bread(block 66) failed
[   30.866954][  T570] FAT-fs (loop2): Directory bread(block 67) failed
[   30.881683][  T570] FAT-fs (loop2): Directory bread(block 68) failed
[   30.893856][  T570] FAT-fs (loop2): Directory bread(block 69) failed
[   30.910664][  T570] FAT-fs (loop2): Directory bread(block 70) failed
[   30.926981][  T570] FAT-fs (loop2): Directory bread(block 71) failed
[   30.941263][  T570] FAT-fs (loop2): Directory bread(block 72) failed
[   30.956543][  T570] FAT-fs (loop2): Directory bread(block 73) failed
[   31.369155][  T581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'.
[   31.396655][  T581] bridge0: port 3(syz_tun) entered disabled state
[   31.420041][  T581] device syz_tun left promiscuous mode
[   31.425594][  T581] bridge0: port 3(syz_tun) entered disabled state
[   31.566422][   T43] kworker/u4:2: attempt to access beyond end of device
[   31.566422][   T43] loop2: rw=1, sector=1224, nr_sectors = 544 limit=256
[   31.580440][   T43] kworker/u4:2: attempt to access beyond end of device
[   31.580440][   T43] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256
[   31.622086][   T43] kworker/u4:2: attempt to access beyond end of device
[   31.622086][   T43] loop2: rw=1, sector=1960, nr_sectors = 31840 limit=256
[   31.743221][  T602] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.750351][  T602] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.758191][  T602] device bridge_slave_0 entered promiscuous mode
[   31.764799][  T577] syz.1.98 (577) used greatest stack depth: 20648 bytes left
[   31.778260][  T602] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.792792][  T602] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.803446][  T602] device bridge_slave_1 entered promiscuous mode
[   31.955114][  T602] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.962196][  T602] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.969492][  T602] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.976536][  T602] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.010719][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.018553][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.029501][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.060096][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.076447][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.083548][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.092949][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.101203][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.108278][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.129795][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.143865][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.178888][  T602] device veth0_vlan entered promiscuous mode
[   32.185939][  T619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.117'.
[   32.196855][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   32.217099][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.226075][  T619] Zero length message leads to an empty skb
[   32.232462][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.242693][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.250456][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.267900][    T8] device bridge_slave_1 left promiscuous mode
[   32.275807][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.298497][    T8] device bridge_slave_0 left promiscuous mode
[   32.307304][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.322895][    T8] device veth1_macvtap left promiscuous mode
[   32.339312][    T8] device veth0_vlan left promiscuous mode
[   32.366383][  T630] loop5: detected capacity change from 0 to 512
[   32.406078][  T630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   32.474249][  T630] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   32.498697][  T630] EXT4-fs (loop5): 1 truncate cleaned up
[   32.512040][  T630] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   32.541329][  T602] device veth1_macvtap entered promiscuous mode
[   32.552282][  T639] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   32.573947][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.604505][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.628957][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.650205][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.664357][  T649] capability: warning: `syz.3.129' uses deprecated v2 capabilities in a way that may be insecure
[   32.681240][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.719579][  T485] EXT4-fs (loop5): unmounting filesystem.
[   32.753190][  T658] loop5: detected capacity change from 0 to 512
[   32.784270][  T658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   32.802856][  T658] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.102827][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   33.130094][  T666] loop6: detected capacity change from 0 to 256
[   33.150372][  T666] FAT-fs (loop6): Directory bread(block 64) failed
[   33.156976][  T666] FAT-fs (loop6): Directory bread(block 65) failed
[   33.164022][  T666] FAT-fs (loop6): Directory bread(block 66) failed
[   33.170547][  T666] FAT-fs (loop6): Directory bread(block 67) failed
[   33.178100][  T666] FAT-fs (loop6): Directory bread(block 68) failed
[   33.184670][  T666] FAT-fs (loop6): Directory bread(block 69) failed
[   33.191301][  T666] FAT-fs (loop6): Directory bread(block 70) failed
[   33.198424][  T666] FAT-fs (loop6): Directory bread(block 71) failed
[   33.205033][  T666] FAT-fs (loop6): Directory bread(block 72) failed
[   33.211598][  T666] FAT-fs (loop6): Directory bread(block 73) failed
[   33.297591][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.311844][   T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   33.321247][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.333118][   T24] usb 6-1: config 0 descriptor??
[   33.522545][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.522545][    T8] loop6: rw=1, sector=1192, nr_sectors = 576 limit=256
[   33.542086][   T24] usbhid 6-1:0.0: can't add hid device: -71
[   33.547271][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.547271][    T8] loop6: rw=1, sector=1800, nr_sectors = 128 limit=256
[   33.548117][   T24] usbhid: probe of 6-1:0.0 failed with error -71
[   33.588829][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.588829][    T8] loop6: rw=1, sector=1960, nr_sectors = 2048 limit=256
[   33.609342][   T24] usb 6-1: USB disconnect, device number 2
[   33.640210][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.640210][    T8] loop6: rw=1, sector=4008, nr_sectors = 10624 limit=256
[   33.687913][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.687913][    T8] loop6: rw=1, sector=14632, nr_sectors = 5776 limit=256
[   33.733844][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.733844][    T8] loop6: rw=1, sector=20408, nr_sectors = 13392 limit=256
[   33.773796][  T675] loop2: detected capacity change from 0 to 1024
[   33.776256][  T677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'.
[   33.822444][  T675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   33.857115][   T28] kauditd_printk_skb: 59 callbacks suppressed
[   33.857128][   T28] audit: type=1400 audit(1791929065.196:223): avc:  denied  { bind } for  pid=676 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.909266][  T287] EXT4-fs (loop2): unmounting filesystem.
[   33.936419][   T28] audit: type=1400 audit(1791929065.226:224): avc:  denied  { ioctl } for  pid=674 comm="syz.2.138" path="/20/file1/bus" dev="loop2" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.994082][   T28] audit: type=1400 audit(1791929065.276:225): avc:  denied  { ioctl } for  pid=681 comm="syz.3.140" path="socket:[17599]" dev="sockfs" ino=17599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.005730][  T693] loop6: detected capacity change from 0 to 512
[   34.026567][   T28] audit: type=1400 audit(1791929065.276:226): avc:  denied  { read write } for  pid=683 comm="syz.2.141" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   34.107501][   T28] audit: type=1400 audit(1791929065.276:227): avc:  denied  { open } for  pid=683 comm="syz.2.141" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   34.134410][   T28] audit: type=1400 audit(1791929065.276:228): avc:  denied  { ioctl } for  pid=683 comm="syz.2.141" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   34.163333][  T707] fuse: Bad value for 'fd'
[   34.168293][   T28] audit: type=1400 audit(1791929065.396:229): avc:  denied  { ioctl } for  pid=692 comm="syz.6.134" path="socket:[17623]" dev="sockfs" ino=17623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   34.193329][   T28] audit: type=1400 audit(1791929065.396:230): avc:  denied  { create } for  pid=698 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   34.212790][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   34.235158][   T28] audit: type=1400 audit(1791929065.396:231): avc:  denied  { setopt } for  pid=698 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   34.273026][   T28] audit: type=1400 audit(1791929065.446:232): avc:  denied  { create } for  pid=696 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   34.320946][  T713] loop6: detected capacity change from 0 to 2048
[   34.347482][  T713] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   34.356268][  T713] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.373128][  T713] fs-verity: sha512 using implementation "sha512-avx2"
[   34.404723][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.415792][   T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   34.425023][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.434031][  T602] EXT4-fs (loop6): unmounting filesystem.
[   34.436017][   T24] usb 6-1: config 0 descriptor??
[   34.554415][  T735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'.
[   34.863715][  T740] loop2: detected capacity change from 0 to 128
[   34.882779][  T740] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   34.941243][  T748] netlink: 'syz.2.167': attribute type 12 has an invalid length.
[   35.058548][  T753] mmap: syz.2.169 (753) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   35.082362][  T755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'.
[   35.185134][  T763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[   35.273326][   T24] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[   35.282942][   T24] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input4
[   35.602359][   T24] usb 6-1: USB disconnect, device number 3
[   35.605863][  T794] ip_tables: iptables: counters copy to user failed while replacing table
[   35.608270][    C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[   36.175419][  T485] EXT4-fs (loop5): unmounting filesystem.
[   36.365696][  T838] fuse: Bad value for 'fd'
[   36.507188][  T835] loop1: detected capacity change from 0 to 40427
[   36.517037][  T835] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   36.527732][  T835] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   36.536845][  T835] F2FS-fs (loop1): invalid crc value
[   36.559000][  T835] F2FS-fs (loop1): Found nat_bits in checkpoint
[   36.636329][  T835] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   36.643639][  T835] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   36.658749][  T872] netlink: 16 bytes leftover after parsing attributes in process `syz.6.217'.
[   36.692381][  T882] loop6: detected capacity change from 0 to 512
[   36.744103][  T882] loop6: detected capacity change from 0 to 512
[   36.745194][  T885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'.
[   36.772952][  T882] EXT4-fs: Ignoring removed oldalloc option
[   36.781645][  T888] netlink: 'syz.5.223': attribute type 4 has an invalid length.
[   36.791657][  T882] EXT4-fs: journaled quota format not specified
[   36.801351][  T888] netlink: 'syz.5.223': attribute type 4 has an invalid length.
[   36.826976][  T890] fuse: Bad value for 'fd'
[   36.839317][  T890] process 'syz.3.224' launched './file0' with NULL argv: empty string added
[   36.850556][  T835] syz.1.204: attempt to access beyond end of device
[   36.850556][  T835] loop1: rw=2049, sector=77824, nr_sectors = 2072 limit=40427
[   36.855228][  T892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.225'.
[   36.872840][  T835] syz.1.204: attempt to access beyond end of device
[   36.872840][  T835] loop1: rw=2049, sector=79896, nr_sectors = 2024 limit=40427
[   36.904728][  T896] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   36.907398][  T835] syz.1.204: attempt to access beyond end of device
[   36.907398][  T835] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[   36.931107][  T835] syz.1.204: attempt to access beyond end of device
[   36.931107][  T835] loop1: rw=2049, sector=57344, nr_sectors = 504 limit=40427
[   37.014040][  T835] syz.1.204: attempt to access beyond end of device
[   37.014040][  T835] loop1: rw=524288, sector=77824, nr_sectors = 256 limit=40427
[   37.028198][  T835] syz.1.204: attempt to access beyond end of device
[   37.028198][  T835] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   37.042701][  T835] syz.1.204: attempt to access beyond end of device
[   37.042701][  T835] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   37.056422][  T835] syz.1.204: attempt to access beyond end of device
[   37.056422][  T835] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   37.070095][  T835] syz.1.204: attempt to access beyond end of device
[   37.070095][  T835] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   37.083779][  T834] syz.1.204: attempt to access beyond end of device
[   37.083779][  T834] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   37.723780][  T917] set_capacity_and_notify: 1 callbacks suppressed
[   37.723798][  T917] loop2: detected capacity change from 0 to 131072
[   37.760032][  T917] F2FS-fs (loop2): invalid crc value
[   37.782975][  T917] F2FS-fs (loop2): Found nat_bits in checkpoint
[   37.847635][  T917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   38.262850][  T949] loop5: detected capacity change from 0 to 512
[   38.284644][  T951] file system registered
[   38.293872][  T949] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   38.312954][  T949] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.314405][  T951] read descriptors
[   38.364285][  T288] ffs_data_put(): freeing
[   38.547661][  T969] ip_tables: iptables: counters copy to user failed while replacing table
[   38.553876][  T967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'.
[   38.669484][  T970] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   38.724376][  T485] EXT4-fs (loop5): unmounting filesystem.
[   38.939889][ T1002] device batadv_slave_0 entered promiscuous mode
[   38.963580][ T1004] FAULT_INJECTION: forcing a failure.
[   38.963580][ T1004] name failslab, interval 1, probability 0, space 0, times 1
[   38.976766][ T1004] CPU: 0 PID: 1004 Comm: syz.5.263 Not tainted syzkaller #0
[   38.984073][ T1004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   38.994155][ T1004] Call Trace:
[   38.997445][ T1004]  <TASK>
[   39.000385][ T1004]  __dump_stack+0x21/0x24
[   39.004754][ T1004]  dump_stack_lvl+0x110/0x170
[   39.009454][ T1004]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.014499][ T1004]  dump_stack+0x15/0x24
[   39.018678][ T1004]  should_fail_ex+0x3bf/0x510
[   39.023373][ T1004]  __should_failslab+0xac/0xf0
[   39.028152][ T1004]  should_failslab+0x9/0x20
[   39.032677][ T1004]  __kmem_cache_alloc_node+0x3d/0x2d0
[   39.038075][ T1004]  ? alloc_super+0x5d/0x850
[   39.042606][ T1004]  ? alloc_super+0x5d/0x850
[   39.047130][ T1004]  kmalloc_trace+0x29/0xb0
[   39.051571][ T1004]  alloc_super+0x5d/0x850
[   39.055921][ T1004]  sget+0x1f0/0x530
[   39.059759][ T1004]  ? __cfi_set_anon_super+0x10/0x10
[   39.064984][ T1004]  ? __cfi_ovl_fill_super+0x10/0x10
[   39.070190][ T1004]  mount_nodev+0x33/0x100
[   39.074529][ T1004]  ovl_mount+0x2c/0x40
[   39.078603][ T1004]  legacy_get_tree+0xfe/0x1a0
[   39.083292][ T1004]  ? __cfi_ovl_mount+0x10/0x10
[   39.088072][ T1004]  vfs_get_tree+0x9a/0x270
[   39.092493][ T1004]  do_new_mount+0x251/0xb40
[   39.096995][ T1004]  ? security_capable+0x99/0xc0
[   39.100424][   T28] kauditd_printk_skb: 41 callbacks suppressed
[   39.100436][   T28] audit: type=1326 audit(1791929070.436:274): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.3.265" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a0bf9e2d9 code=0x0
[   39.101857][ T1004]  path_mount+0x640/0xfd0
[   39.136444][ T1004]  __se_sys_mount+0x320/0x390
[   39.141109][ T1004]  ? __this_cpu_preempt_check+0x13/0x20
[   39.146655][ T1004]  ? __x64_sys_mount+0xd0/0xd0
[   39.151406][ T1004]  ? __kasan_check_write+0x14/0x20
[   39.156505][ T1004]  ? fpregs_restore_userregs+0x128/0x260
[   39.162120][ T1004]  __x64_sys_mount+0xbf/0xd0
[   39.166694][ T1004]  x64_sys_call+0x65d/0x9a0
[   39.171182][ T1004]  do_syscall_64+0x4c/0xa0
[   39.175590][ T1004]  ? clear_bhb_loop+0x30/0x80
[   39.180263][ T1004]  ? clear_bhb_loop+0x30/0x80
[   39.184924][ T1004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.190805][ T1004] RIP: 0033:0x7fd212d9e2d9
[   39.195243][ T1004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.214850][ T1004] RSP: 002b:00007fd213d1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   39.223271][ T1004] RAX: ffffffffffffffda RBX: 00007fd213025fa0 RCX: 00007fd212d9e2d9
[   39.231232][ T1004] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000
[   39.239186][ T1004] RBP: 00007fd212e35888 R08: 00002000000000c0 R09: 0000000000000000
[   39.247147][ T1004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.255125][ T1004] R13: 00007fd213026038 R14: 00007fd213025fa0 R15: 00007ffd331bdc68
[   39.263096][ T1004]  </TASK>
[   39.275643][ T1001] device batadv_slave_0 left promiscuous mode
[   39.300709][   T28] audit: type=1400 audit(1791929070.636:275): avc:  denied  { write } for  pid=1016 comm="syz.5.267" path="socket:[19670]" dev="sockfs" ino=19670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.335938][   T28] audit: type=1400 audit(1791929070.676:276): avc:  denied  { read } for  pid=1016 comm="syz.5.267" path="socket:[20486]" dev="sockfs" ino=20486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.347376][ T1019] syz.5.268 uses obsolete (PF_INET,SOCK_PACKET)
[   39.390455][ T1023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.270'.
[   39.592246][   T28] audit: type=1400 audit(1791929070.926:277): avc:  denied  { ioctl } for  pid=1040 comm="syz.1.278" path="socket:[19856]" dev="sockfs" ino=19856 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.631498][   T28] audit: type=1400 audit(1791929070.926:278): avc:  denied  { getopt } for  pid=1040 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   40.022791][  T309] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   40.106312][   T28] audit: type=1400 audit(1791929071.446:279): avc:  denied  { getopt } for  pid=1070 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   40.139036][ T1074] tipc: Started in network mode
[   40.144016][ T1074] tipc: Node identity 4, cluster identity 4711
[   40.150275][ T1074] tipc: Node number set to 4
[   40.156869][ T1074] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   40.203889][  T309] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   40.212586][  T309] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   40.222970][  T309] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   40.232027][  T309] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   40.243215][  T309] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   40.263559][  T309] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   40.272683][  T309] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   40.280728][  T309] usb 7-1: Product: syz
[   40.284929][  T309] usb 7-1: Manufacturer: syz
[   40.303695][  T309] cdc_wdm 7-1:1.0: skipping garbage
[   40.309482][  T309] cdc_wdm 7-1:1.0: skipping garbage
[   40.323474][  T309] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   40.401345][   T28] audit: type=1400 audit(1791929071.736:280): avc:  denied  { bind } for  pid=1077 comm="syz.5.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   40.427555][   T28] audit: type=1400 audit(1791929071.766:281): avc:  denied  { setopt } for  pid=1080 comm="syz.5.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   40.465607][ T1085] overlayfs: failed to get index nlink (file0/file1, err=-61)
[   40.509718][   T19] usb 7-1: USB disconnect, device number 2
[   40.710145][   T28] audit: type=1400 audit(1791929072.046:282): avc:  denied  { read write } for  pid=1049 comm="syz.6.282" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   40.733714][   T28] audit: type=1400 audit(1791929072.046:283): avc:  denied  { open } for  pid=1049 comm="syz.6.282" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   41.202811][   T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   41.393860][   T60] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   41.403072][   T60] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   41.419612][   T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   41.437592][   T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   41.449806][   T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   41.470086][   T60] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   41.483031][   T60] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   41.492714][   T60] usb 7-1: Product: syz
[   41.498261][   T60] usb 7-1: Manufacturer: syz
[   41.506965][ T1109] input: syz0 as /devices/virtual/input/input5
[   41.513452][   T60] cdc_wdm 7-1:1.0: skipping garbage
[   41.526642][   T60] cdc_wdm 7-1:1.0: skipping garbage
[   41.546631][   T60] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   41.672762][  T315] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   41.723967][   T60] usb 7-1: USB disconnect, device number 3
[   41.860780][ T1121] loop5: detected capacity change from 0 to 4096
[   41.893422][ T1121] EXT4-fs: Ignoring removed nobh option
[   41.916893][ T1121] EXT4-fs: Ignoring removed bh option
[   41.933310][ T1121] EXT4-fs (loop5): Test dummy encryption mode enabled
[   41.963499][ T1121] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   41.993694][ T1121] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   42.023841][ T1121] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   42.059255][  T485] EXT4-fs (loop5): unmounting filesystem.
[   42.585485][ T1176] loop2: detected capacity change from 0 to 128
[   42.596759][ T1176] EXT4-fs (loop2): Test dummy encryption mode enabled
[   42.624081][ T1176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   42.634498][ T1176] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   42.682119][ T1176] EXT4-fs (loop2): unmounting filesystem.
[   42.774145][ T1194] input: syz0 as /devices/virtual/input/input6
[   43.251081][ T1225] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12)
[   43.486477][ T1242] capability: warning: `syz.2.350' uses 32-bit capabilities (legacy support in use)
[   43.996602][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.003838][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.039239][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.046425][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.053762][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.060790][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.083258][ T1267] device bridge0 entered promiscuous mode
[   44.174717][ T1278] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   44.200214][ T1282] xt_hashlimit: max too large, truncated to 1048576
[   44.248891][   T28] kauditd_printk_skb: 33 callbacks suppressed
[   44.248906][   T28] audit: type=1400 audit(1791929075.586:317): avc:  denied  { bind } for  pid=1283 comm="syz.5.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   44.285498][ T1286] Illegal XDP return value 4294967294 on prog  (id 85) dev syz_tun, expect packet loss!
[   44.303205][ T1288] loop5: detected capacity change from 0 to 256
[   44.316896][ T1288] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[   44.338300][ T1290] loop6: detected capacity change from 0 to 1024
[   44.349984][   T28] audit: type=1400 audit(1791929075.696:318): avc:  denied  { read } for  pid=1287 comm="syz.5.366" name="bus" dev="loop5" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.353096][ T1290] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   44.412462][ T1290] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   44.618235][  T602] EXT4-fs (loop6): unmounting filesystem.
[   44.656796][   T28] audit: type=1400 audit(1791929075.996:319): avc:  denied  { ioctl } for  pid=1298 comm="syz.6.369" path="socket:[20235]" dev="sockfs" ino=20235 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   44.736257][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.743412][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.923394][   T28] audit: type=1400 audit(1791929076.266:320): avc:  denied  { remount } for  pid=1310 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   45.833219][ T1333] loop5: detected capacity change from 0 to 512
[   45.856235][ T1333] EXT4-fs: Ignoring removed nobh option
[   45.861043][ T1341] fuse: Bad value for 'fd'
[   45.869545][ T1333] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[   45.878265][ T1333] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.380: attempt to clear invalid blocks 1 len 1
[   45.900678][ T1333] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   45.915587][ T1333] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.380: invalid indirect mapped block 1819239214 (level 0)
[   45.916296][   T28] audit: type=1400 audit(1791929077.256:321): avc:  denied  { remount } for  pid=1346 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   45.929801][ T1333] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.380: invalid indirect mapped block 1819239214 (level 1)
[   45.963712][ T1333] EXT4-fs (loop5): 1 truncate cleaned up
[   45.969548][ T1333] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   45.979177][   T28] audit: type=1400 audit(1791929077.296:322): avc:  denied  { mounton } for  pid=1346 comm="syz.3.385" path="/100/file0" dev="ramfs" ino=20297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   46.001564][   T28] audit: type=1400 audit(1791929077.296:323): avc:  denied  { mount } for  pid=1346 comm="syz.3.385" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   46.011794][ T1351] tipc: Started in network mode
[   46.024908][   T28] audit: type=1400 audit(1791929077.336:324): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   46.073267][ T1351] tipc: Node identity 10101, cluster identity 4711
[   46.073377][ T1333] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.380: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   46.099362][ T1351] tipc: Node number set to 65793
[   46.112156][ T1355] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   46.194645][  T485] EXT4-fs (loop5): unmounting filesystem.
[   46.284923][ T1361] device syzkaller0 entered promiscuous mode
[   46.337356][ T1352] loop1: detected capacity change from 0 to 40427
[   46.361833][ T1352] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   46.388856][ T1352] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   46.405586][ T1352] F2FS-fs (loop1): invalid crc value
[   46.429140][ T1352] F2FS-fs (loop1): Found nat_bits in checkpoint
[   46.482805][ T1352] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   46.489932][ T1352] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   46.565807][   T28] audit: type=1400 audit(1791929077.906:325): avc:  denied  { append } for  pid=1350 comm="syz.1.387" path="/68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   46.611733][ T1380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'.
[   46.681408][ T1383] fuse: Bad value for 'fd'
[   46.699408][   T28] audit: type=1400 audit(1791929077.996:326): avc:  denied  { map } for  pid=1350 comm="syz.1.387" path="/68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   46.711530][ T1381] bio_check_eod: 6235 callbacks suppressed
[   46.711548][ T1381] syz.1.387: attempt to access beyond end of device
[   46.711548][ T1381] loop1: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[   46.772579][ T1386] fuse: Bad value for 'fd'
[   46.823320][ T1376] 9pnet_fd: p9_fd_create_tcp (1376): problem connecting socket to 127.0.0.1
[   46.839328][ T1376] 9pnet_fd: p9_fd_create_tcp (1376): problem connecting socket to 127.0.0.1
[   46.849585][ T1376] 9pnet_fd: p9_fd_create_tcp (1376): problem connecting socket to 127.0.0.1
[   46.858922][ T1376] 9pnet_fd: p9_fd_create_tcp (1376): problem connecting socket to 127.0.0.1
[   46.861556][ T1381] syz.1.387: attempt to access beyond end of device
[   46.861556][ T1381] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[   46.868288][ T1376] 9pnet_fd: p9_fd_create_tcp (1376): problem connecting socket to 127.0.0.1
[   46.891611][ T1376] 9pnet_virtio: no channels available for device 127.0.0.1
[   46.902246][ T1352] syz.1.387: attempt to access beyond end of device
[   46.902246][ T1352] loop1: rw=524288, sector=77832, nr_sectors = 248 limit=40427
[   46.904919][ T1381] syz.1.387: attempt to access beyond end of device
[   46.904919][ T1381] loop1: rw=2049, sector=57344, nr_sectors = 1168 limit=40427
[   46.918340][ T1352] syz.1.387: attempt to access beyond end of device
[   46.918340][ T1352] loop1: rw=0, sector=77832, nr_sectors = 8 limit=40427
[   46.944561][ T1352] syz.1.387: attempt to access beyond end of device
[   46.944561][ T1352] loop1: rw=0, sector=77832, nr_sectors = 8 limit=40427
[   46.958411][ T1352] syz.1.387: attempt to access beyond end of device
[   46.958411][ T1352] loop1: rw=0, sector=77832, nr_sectors = 8 limit=40427
[   46.972470][ T1352] syz.1.387: attempt to access beyond end of device
[   46.972470][ T1352] loop1: rw=0, sector=77832, nr_sectors = 8 limit=40427
[   46.987288][ T1352] syz.1.387: attempt to access beyond end of device
[   46.987288][ T1352] loop1: rw=0, sector=77832, nr_sectors = 8 limit=40427
[   47.004764][ T1352] syz.1.387: attempt to access beyond end of device
[   47.004764][ T1352] loop1: rw=0, sector=77832, nr_sectors = 8 limit=40427
[   47.235698][ T1418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.412'.
[   47.246987][ T1418] device bridge_slave_1 left promiscuous mode
[   47.254581][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.262397][ T1418] device bridge_slave_0 left promiscuous mode
[   47.268734][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.356989][ T1430] loop6: detected capacity change from 0 to 512
[   47.374098][ T1430] EXT4-fs: Ignoring removed bh option
[   47.388295][ T1430] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   47.436445][ T1430] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   47.455072][ T1430] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.475028][ T1440] loop5: detected capacity change from 0 to 8192
[   47.538324][  T602] EXT4-fs (loop6): unmounting filesystem.
[   47.646217][ T1457] MTRR 1 not used
[   48.550247][ T1446] syz.1.419 (1446) used greatest stack depth: 19688 bytes left
[   48.617516][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   48.640903][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   48.669777][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   48.684633][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   48.713185][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.733396][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.761905][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.776824][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.308987][ T1525] fuse: Bad value for 'fd'
[   49.327823][ T1527] netlink: 'syz.5.442': attribute type 4 has an invalid length.
[   49.357289][ T1527] netlink: 'syz.5.442': attribute type 4 has an invalid length.
[   49.460395][ T1535] loop5: detected capacity change from 0 to 512
[   49.517203][ T1535] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   49.564324][ T1535] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   49.585129][ T1535] EXT4-fs (loop5): 1 truncate cleaned up
[   49.590803][ T1535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   49.642370][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   49.642383][   T28] audit: type=1400 audit(1791929080.976:334): avc:  denied  { create } for  pid=1534 comm="syz.5.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1
[   49.669021][  T485] EXT4-fs (loop5): unmounting filesystem.
[   49.712164][ T1541] loop5: detected capacity change from 0 to 1024
[   49.766854][ T1541] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.782460][ T1541] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   49.821315][ T1543] loop6: detected capacity change from 0 to 1024
[   49.832979][ T1541] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103]
[   49.837577][ T1543] EXT4-fs (loop6): inodes count not valid: 1 vs 32
[   49.848732][ T1541] System zones: 0-1, 3-36
[   49.905190][ T1541] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   49.984255][   T28] audit: type=1400 audit(1791929081.326:335): avc:  denied  { create } for  pid=1540 comm="syz.5.447" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   50.031049][  T485] EXT4-fs (loop5): unmounting filesystem.
[   50.164722][   T28] audit: type=1400 audit(1791929081.506:336): avc:  denied  { sqpoll } for  pid=1555 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   50.367048][ T1569] fuse: Bad value for 'fd'
[   50.928036][ T1587] netlink: 'syz.1.465': attribute type 11 has an invalid length.
[   50.950695][ T1587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.465'.
[   51.377953][   T28] audit: type=1400 audit(1791929082.716:337): avc:  denied  { write } for  pid=1606 comm="syz.1.473" name="mcfilter6" dev="proc" ino=4026532432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   51.415375][ T1609] netlink: 144 bytes leftover after parsing attributes in process `syz.1.474'.
[   51.472387][   T28] audit: type=1400 audit(1791929082.806:338): avc:  denied  { watch watch_reads } for  pid=1614 comm="syz.5.477" path="/file1" dev="ramfs" ino=21835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   51.474124][ T1583] syz.3.463 (1583) used greatest stack depth: 16264 bytes left
[   51.520782][   T28] audit: type=1400 audit(1791929082.856:339): avc:  denied  { watch watch_reads } for  pid=1616 comm="syz.2.478" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   51.620802][ T1625] tipc: Resetting bearer <eth:syz_tun>
[   51.627616][ T1624] HTB: quantum of class FFF10001 is small. Consider r2q change.
[   51.676064][ T1627] sock: sock_set_timeout: `syz.5.482' (pid 1627) tries to set negative timeout
[   51.722299][ T1633] FAULT_INJECTION: forcing a failure.
[   51.722299][ T1633] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   51.735746][ T1633] CPU: 0 PID: 1633 Comm: syz.5.485 Not tainted syzkaller #0
[   51.743057][ T1633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   51.753122][ T1633] Call Trace:
[   51.756407][ T1633]  <TASK>
[   51.759341][ T1633]  __dump_stack+0x21/0x24
[   51.763688][ T1633]  dump_stack_lvl+0x110/0x170
[   51.768388][ T1633]  ? __cfi_dump_stack_lvl+0x8/0x8
[   51.773431][ T1633]  dump_stack+0x15/0x24
[   51.777610][ T1633]  should_fail_ex+0x3bf/0x510
[   51.782296][ T1633]  should_fail+0xb/0x10
[   51.786462][ T1633]  should_fail_usercopy+0x1a/0x20
[   51.791499][ T1633]  strncpy_from_user+0x24/0x2c0
[   51.796361][ T1633]  ? kmem_cache_alloc+0x166/0x320
[   51.801397][ T1633]  ? getname_flags+0xba/0x510
[   51.806088][ T1633]  getname_flags+0xf5/0x510
[   51.810600][ T1633]  getname+0x19/0x20
[   51.814502][ T1633]  do_sys_openat2+0xeb/0x820
[   51.819104][ T1633]  ? __se_sys_futex+0x136/0x310
[   51.823965][ T1633]  ? do_sys_open+0xe0/0xe0
[   51.828395][ T1633]  ? __this_cpu_preempt_check+0x13/0x20
[   51.833962][ T1633]  ? xfd_validate_state+0x70/0x150
[   51.839086][ T1633]  __x64_sys_openat+0x136/0x160
[   51.843949][ T1633]  x64_sys_call+0x783/0x9a0
[   51.848485][ T1633]  do_syscall_64+0x4c/0xa0
[   51.852921][ T1633]  ? clear_bhb_loop+0x30/0x80
[   51.857668][ T1633]  ? clear_bhb_loop+0x30/0x80
[   51.862361][ T1633]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   51.868274][ T1633] RIP: 0033:0x7fd212d5eb0e
[   51.872698][ T1633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   51.892311][ T1633] RSP: 002b:00007fd213d1eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   51.900738][ T1633] RAX: ffffffffffffffda RBX: 00007fd213d1f6c0 RCX: 00007fd212d5eb0e
[   51.908721][ T1633] RDX: 0000000000000002 RSI: 00007fd213d1ef90 RDI: ffffffffffffff9c
[   51.916704][ T1633] RBP: 00007fd212e35888 R08: 0000000000000000 R09: 0000000000000000
[   51.924685][ T1633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.932665][ T1633] R13: 00007fd213026038 R14: 00007fd213025fa0 R15: 00007ffd331bdc68
[   51.940649][ T1633]  </TASK>
[   52.412137][ T1428] syz.3.414 (1428) used greatest stack depth: 13536 bytes left
[   52.433450][ T1656] overlayfs: failed to clone upperpath
[   52.433629][ T1654] netlink: 64 bytes leftover after parsing attributes in process `syz.3.494'.
[   52.449712][ T1656] overlayfs: failed to clone upperpath
[   52.581149][ T1670] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.588418][ T1670] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.599947][ T1670] device bridge_slave_1 left promiscuous mode
[   52.606317][ T1670] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.614117][ T1670] device bridge_slave_0 left promiscuous mode
[   52.620336][ T1670] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.910932][ T1694] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.510'.
[   53.361399][ T1723] loop6: detected capacity change from 0 to 1024
[   53.369674][ T1721] netlink: 'syz.3.523': attribute type 4 has an invalid length.
[   53.408026][ T1729] FAULT_INJECTION: forcing a failure.
[   53.408026][ T1729] name failslab, interval 1, probability 0, space 0, times 0
[   53.421746][ T1723] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   53.433086][ T1729] CPU: 0 PID: 1729 Comm: syz.3.528 Not tainted syzkaller #0
[   53.440394][ T1729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   53.450450][ T1729] Call Trace:
[   53.453725][ T1729]  <TASK>
[   53.456648][ T1729]  __dump_stack+0x21/0x24
[   53.460981][ T1729]  dump_stack_lvl+0x110/0x170
[   53.465657][ T1729]  ? __cfi_dump_stack_lvl+0x8/0x8
[   53.470678][ T1729]  ? kvm_sched_clock_read+0x18/0x40
[   53.475870][ T1729]  dump_stack+0x15/0x24
[   53.480021][ T1729]  should_fail_ex+0x3bf/0x510
[   53.484683][ T1729]  __should_failslab+0xac/0xf0
[   53.489434][ T1729]  should_failslab+0x9/0x20
[   53.493920][ T1729]  kmem_cache_alloc_node+0x42/0x330
[   53.499107][ T1729]  ? __alloc_skb+0xe8/0x4a0
[   53.503599][ T1729]  ? is_bpf_text_address+0x177/0x190
[   53.508871][ T1729]  __alloc_skb+0xe8/0x4a0
[   53.513186][ T1729]  ? __kernel_text_address+0xd/0x30
[   53.518373][ T1729]  tipc_msg_create+0x4c/0x4f0
[   53.523034][ T1729]  ? arch_stack_walk+0xfc/0x150
[   53.527902][ T1729]  tipc_group_proto_xmit+0x155/0x840
[   53.533174][ T1729]  tipc_group_delete+0x13b/0x470
[   53.538095][ T1729]  ? __cfi_tipc_group_delete+0x10/0x10
[   53.543537][ T1729]  ? __tipc_shutdown+0xa00/0x14c0
[   53.548551][ T1729]  ? __x64_sys_close_range+0x7a/0x90
[   53.553855][ T1729]  ? tipc_group_self+0x25/0x1c0
[   53.558691][ T1729]  tipc_sk_leave+0x14b/0x4d0
[   53.563270][ T1729]  ? __tipc_shutdown+0x14c0/0x14c0
[   53.568371][ T1729]  ? __cfi_locks_remove_file+0x10/0x10
[   53.573851][ T1729]  tipc_release+0x102/0x1640
[   53.578433][ T1729]  ? rwsem_write_trylock+0x136/0x300
[   53.583704][ T1729]  ? __cfi_tipc_release+0x10/0x10
[   53.588715][ T1729]  sock_close+0xc9/0x220
[   53.592943][ T1729]  ? __cfi_sock_close+0x10/0x10
[   53.597808][ T1729]  __fput+0x1fd/0x8f0
[   53.601783][ T1729]  ____fput+0x15/0x20
[   53.605757][ T1729]  task_work_run+0x1e1/0x250
[   53.610339][ T1729]  ? __cfi_task_work_run+0x10/0x10
[   53.615439][ T1729]  ? __cfi___close_range+0x10/0x10
[   53.620623][ T1729]  exit_to_user_mode_loop+0x9b/0xb0
[   53.625812][ T1729]  exit_to_user_mode_prepare+0x87/0xd0
[   53.631259][ T1729]  syscall_exit_to_user_mode+0x1a/0x30
[   53.636705][ T1729]  do_syscall_64+0x58/0xa0
[   53.641115][ T1729]  ? clear_bhb_loop+0x30/0x80
[   53.645776][ T1729]  ? clear_bhb_loop+0x30/0x80
[   53.650443][ T1729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   53.656320][ T1729] RIP: 0033:0x7f3a0bf9e2d9
[   53.660720][ T1729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.680308][ T1729] RSP: 002b:00007f3a0cf36028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   53.688711][ T1729] RAX: 0000000000000000 RBX: 00007f3a0c225fa0 RCX: 00007f3a0bf9e2d9
[   53.696673][ T1729] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[   53.704634][ T1729] RBP: 00007f3a0c035888 R08: 0000000000000000 R09: 0000000000000000
[   53.712588][ T1729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.720561][ T1729] R13: 00007f3a0c226038 R14: 00007f3a0c225fa0 R15: 00007fff0163a178
[   53.728523][ T1729]  </TASK>
[   53.748991][   T28] audit: type=1400 audit(1791929085.086:340): avc:  denied  { setattr } for  pid=1733 comm="syz.1.530" name="/" dev="configfs" ino=13558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   53.842102][   T28] audit: type=1400 audit(1791929085.176:341): avc:  denied  { execute } for  pid=1722 comm="syz.6.524" path="/78/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   53.956706][ T1743] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.964965][ T1743] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.972449][ T1743] device bridge_slave_0 entered promiscuous mode
[   53.979654][ T1743] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.986724][ T1743] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.995573][ T1743] device bridge_slave_1 entered promiscuous mode
[   54.059767][ T1743] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.066855][ T1743] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.074130][ T1743] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.081170][ T1743] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.096387][  T602] EXT4-fs (loop6): unmounting filesystem.
[   54.134772][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.149588][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.159156][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.169896][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.178223][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.185293][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.201552][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.210283][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.217349][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.230254][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.239165][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.258272][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.279021][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.287170][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.295260][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.314201][ T1743] device veth0_vlan entered promiscuous mode
[   54.327336][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.339046][   T43] device veth1_macvtap left promiscuous mode
[   54.347591][   T43] device veth0_vlan left promiscuous mode
[   54.459784][ T1743] device veth1_macvtap entered promiscuous mode
[   54.471933][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.488563][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.516245][   T28] audit: type=1400 audit(1791929085.856:342): avc:  denied  { mounton } for  pid=1743 comm="syz-executor" path="/root/syzkaller.90RxLp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   54.829956][ T1770] overlayfs: failed to clone upperpath
[   55.238141][   T28] audit: type=1400 audit(1791929086.576:343): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   55.364831][   T28] audit: type=1400 audit(1791929086.706:344): avc:  denied  { setopt } for  pid=1792 comm="syz.6.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   55.391833][ T1793] ip_tables: iptables: counters copy to user failed while replacing table
[   55.440673][ T1796] VFS: Mount too revealing
[   55.552964][ T1806] bridge0: port 3(syz_tun) entered blocking state
[   55.567009][ T1806] bridge0: port 3(syz_tun) entered disabled state
[   55.580525][ T1806] device syz_tun entered promiscuous mode
[   55.593156][ T1806] bridge0: port 3(syz_tun) entered blocking state
[   55.599631][ T1806] bridge0: port 3(syz_tun) entered forwarding state
[   55.625981][ T1806] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   56.199188][ T1793] 9pnet_fd: p9_fd_create_tcp (1793): problem connecting socket to 127.0.0.1
[   56.278575][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.567'.
[   56.684266][ T1846] loop7: detected capacity change from 0 to 128
[   56.712401][ T1846] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   56.725715][ T1846] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   56.755563][ T1743] EXT4-fs (loop7): unmounting filesystem.
[   56.785853][ T1858] bridge0: port 3(syz_tun) entered disabled state
[   56.795849][ T1858] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.804149][ T1858] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.864890][   T28] audit: type=1400 audit(1791929094.209:345): avc:  denied  { bind } for  pid=1857 comm="syz.7.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.904727][   T28] audit: type=1400 audit(1791929094.229:346): avc:  denied  { listen } for  pid=1857 comm="syz.7.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.938718][   T28] audit: type=1400 audit(1791929094.229:347): avc:  denied  { shutdown } for  pid=1857 comm="syz.7.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   57.122124][   T28] audit: type=1400 audit(1791929094.459:348): avc:  denied  { create } for  pid=1894 comm="syz.6.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[   57.149222][   T28] audit: type=1400 audit(1791929094.489:349): avc:  denied  { bind } for  pid=1894 comm="syz.6.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[   57.169124][   T28] audit: type=1400 audit(1791929094.489:350): avc:  denied  { name_bind } for  pid=1894 comm="syz.6.589" src=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   57.178363][ T1899] loop1: detected capacity change from 0 to 512
[   57.223367][   T28] audit: type=1400 audit(1791929094.489:351): avc:  denied  { node_bind } for  pid=1894 comm="syz.6.589" saddr=::1 src=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   57.261856][   T28] audit: type=1400 audit(1791929094.519:352): avc:  denied  { connect } for  pid=1894 comm="syz.6.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[   57.314089][ T1899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   57.353533][ T1899] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.368089][ T1899] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.590: corrupted inode contents
[   57.436397][ T1899] EXT4-fs (loop1): Remounting filesystem read-only
[   57.464559][ T1899] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.590: mark_inode_dirty error
[   57.508694][ T1899] EXT4-fs (loop1): Remounting filesystem read-only
[   57.523059][ T1899] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.590: corrupted inode contents
[   57.562365][ T1899] EXT4-fs (loop1): Remounting filesystem read-only
[   57.569687][ T1899] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.590: mark_inode_dirty error
[   57.588179][ T1899] EXT4-fs (loop1): Remounting filesystem read-only
[   57.595172][ T1949] netlink: 8952 bytes leftover after parsing attributes in process `syz.3.606'.
[   57.604873][ T1925] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.590: corrupted inode contents
[   57.612556][ T1949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'.
[   57.627535][ T1925] EXT4-fs (loop1): Remounting filesystem read-only
[   57.642926][ T1925] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.590: mark_inode_dirty error
[   57.664224][ T1925] EXT4-fs (loop1): Remounting filesystem read-only
[   57.672291][ T1925] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.590: corrupted inode contents
[   57.686250][ T1925] EXT4-fs (loop1): Remounting filesystem read-only
[   57.693329][ T1964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'.
[   57.695374][ T1932] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.590: corrupted inode contents
[   57.716432][ T1932] EXT4-fs (loop1): Remounting filesystem read-only
[   57.723034][ T1932] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.590: mark_inode_dirty error
[   57.733994][ T1932] EXT4-fs (loop1): Remounting filesystem read-only
[   57.741578][ T1932] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem
[   57.856840][ T1972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.615'.
[   57.875542][ T1972] ------------[ cut here ]------------
[   57.881053][ T1972] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16)
[   57.920899][ T1972] WARNING: CPU: 1 PID: 1972 at net/sched/cls_u32.c:853 u32_change+0x1c11/0x2300
[   57.930037][ T1972] Modules linked in:
[   57.934062][ T1972] CPU: 1 PID: 1972 Comm: syz.1.615 Not tainted syzkaller #0
[   57.941362][ T1972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   57.951555][ T1972] RIP: 0010:u32_change+0x1c11/0x2300
[   57.956949][ T1972] Code: fc ff ff e8 71 31 5e fd c6 05 31 6d 7c 03 01 b9 10 00 00 00 48 c7 c7 e0 14 ff 85 4c 89 e6 48 c7 c2 60 15 ff 85 e8 8f b4 2e fd <0f> 0b e9 09 f0 ff ff e8 43 31 5e fd be 02 00 00 00 eb 0a e8 37 31
[   57.976680][ T1972] RSP: 0018:ffffc900032bee40 EFLAGS: 00010246
[   57.982817][ T1972] RAX: f1d08ce957043c00 RBX: ffff888111ea3ac0 RCX: 0000000000080000
[   57.990798][ T1972] RDX: ffffc90001adb000 RSI: 0000000000006d8f RDI: 0000000000006d90
[   57.998802][ T1972] RBP: ffffc900032beff8 R08: ffffc900032bea27 R09: 1ffff92000657d44
[   58.006802][ T1972] R10: dffffc0000000000 R11: fffff52000657d45 R12: 0000000000000020
[   58.014807][ T1972] R13: ffff888111ea2200 R14: ffff888111ea22c0 R15: 0000000000000001
[   58.022791][ T1972] FS:  00007f38bc10c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   58.031764][ T1972] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   58.038387][ T1972] CR2: 00007f38bb1eb9c0 CR3: 0000000144950000 CR4: 00000000003506a0
[   58.046410][ T1972] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[   58.054416][ T1972] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   58.062392][ T1972] Call Trace:
[   58.065737][ T1972]  <TASK>
[   58.068678][ T1972]  ? __cfi_u32_change+0x10/0x10
[   58.073762][ T1972]  ? __kasan_check_write+0x14/0x20
[   58.078894][ T1972]  ? mutex_unlock+0x8f/0x230
[   58.083621][ T1972]  ? __cfi_mutex_unlock+0x10/0x10
[   58.088660][ T1972]  ? __cfi_u32_change+0x10/0x10
[   58.093556][ T1972]  tc_new_tfilter+0x1488/0x1a30
[   58.098434][ T1972]  ? __cfi_tc_new_tfilter+0x10/0x10
[   58.103690][ T1972]  ? security_capable+0x99/0xc0
[   58.108554][ T1972]  ? ns_capable+0x8c/0xf0
[   58.112923][ T1972]  ? netlink_net_capable+0x125/0x160
[   58.118221][ T1972]  ? __cfi_tc_new_tfilter+0x10/0x10
[   58.123489][ T1972]  rtnetlink_rcv_msg+0xa9a/0xde0
[   58.128437][ T1972]  ? 0xffffffffa0004440
[   58.132608][ T1972]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[   58.138111][ T1972]  ? __kernel_text_address+0xd/0x30
[   58.143335][ T1972]  ? avc_has_perm_noaudit+0x390/0x490
[   58.148717][ T1972]  ? memcpy+0x56/0x70
[   58.152708][ T1972]  ? avc_has_perm_noaudit+0x30a/0x490
[   58.158125][ T1972]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[   58.163887][ T1972]  ? kasan_save_alloc_info+0x1f/0x30
[   58.169181][ T1972]  ? avc_has_perm+0x163/0x250
[   58.173899][ T1972]  ? __alloc_skb+0x226/0x4a0
[   58.178495][ T1972]  ? netlink_sendmsg+0x635/0xbd0
[   58.183493][ T1972]  ? ____sys_sendmsg+0x5fb/0x9c0
[   58.188447][ T1972]  ? __cfi_avc_has_perm+0x10/0x10
[   58.193510][ T1972]  ? selinux_nlmsg_lookup+0x39d/0x440
[   58.198888][ T1972]  netlink_rcv_skb+0x200/0x450
[   58.203694][ T1972]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[   58.209160][ T1972]  ? __cfi_netlink_rcv_skb+0x10/0x10
[   58.214535][ T1972]  ? __netlink_lookup+0x387/0x3b0
[   58.219584][ T1972]  rtnetlink_rcv+0x1c/0x20
[   58.224040][ T1972]  netlink_unicast+0x8c1/0xa60
[   58.228815][ T1972]  netlink_sendmsg+0x8b9/0xbd0
[   58.233764][ T1972]  ? __cfi_netlink_sendmsg+0x10/0x10
[   58.239058][ T1972]  ? __switch_to+0x56f/0x1070
[   58.243797][ T1972]  ? security_socket_sendmsg+0x93/0xb0
[   58.249265][ T1972]  ? __cfi_netlink_sendmsg+0x10/0x10
[   58.254597][ T1972]  ____sys_sendmsg+0x5fb/0x9c0
[   58.259380][ T1972]  ? __sys_sendmsg_sock+0x40/0x40
[   58.264465][ T1972]  ? import_iovec+0x7c/0xb0
[   58.268976][ T1972]  ___sys_sendmsg+0x2a2/0x360
[   58.273703][ T1972]  ? __sys_sendmsg+0x290/0x290
[   58.278482][ T1972]  ? __cfi_futex_wait+0x10/0x10
[   58.283390][ T1972]  ? __fdget+0x19c/0x220
[   58.287640][ T1972]  __sys_sendmmsg+0x2cc/0x4e0
[   58.292342][ T1972]  ? __cfi___sys_sendmmsg+0x10/0x10
[   58.297605][ T1972]  ? fpregs_restore_userregs+0x128/0x260
[   58.303276][ T1972]  __x64_sys_sendmmsg+0xa0/0xb0
[   58.308146][ T1972]  x64_sys_call+0x3f5/0x9a0
[   58.312663][ T1972]  do_syscall_64+0x4c/0xa0
[   58.317128][ T1972]  ? clear_bhb_loop+0x30/0x80
[   58.321808][ T1972]  ? clear_bhb_loop+0x30/0x80
[   58.326533][ T1972]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   58.332433][ T1972] RIP: 0033:0x7f38bb19e2d9
[   58.336879][ T1972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.356532][ T1972] RSP: 002b:00007f38bc10c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   58.364985][ T1972] RAX: ffffffffffffffda RBX: 00007f38bb425fa0 RCX: 00007f38bb19e2d9
[   58.372977][ T1972] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004
[   58.380956][ T1972] RBP: 00007f38bb235888 R08: 0000000000000000 R09: 0000000000000000
[   58.388976][ T1972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.396979][ T1972] R13: 00007f38bb426038 R14: 00007f38bb425fa0 R15: 00007ffe11a09908
[   58.404982][ T1972]  </TASK>
[   58.408007][ T1972] ---[ end trace 0000000000000000 ]---
[   58.611118][ T1992] sd 0:0:1:0: device reset
[   58.650020][ T1994] tipc: Resetting bearer <eth:syz_tun>
[   58.684647][ T1994] bridge0: port 3(syz_tun) entered blocking state
[   58.691103][ T1994] bridge0: port 3(syz_tun) entered disabled state
[   58.706817][ T1998] ip_tables: iptables: counters copy to user failed while replacing table
[   58.727752][ T1994] device syz_tun entered promiscuous mode
[   58.742910][ T1994] bridge0: port 3(syz_tun) entered blocking state
[   58.749382][ T1994] bridge0: port 3(syz_tun) entered forwarding state
[   58.858613][ T2020] bpf getsockopt: ignoring program buffer with optlen=809329267 (max_optlen=4096)
[   58.983333][ T2037] fuse: Bad value for 'fd'
[   59.333476][ T2058] loop1: detected capacity change from 0 to 1024
[   59.341419][ T2060] fuse: Bad value for 'fd'
[   59.373131][ T2062] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[   59.389547][ T2058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   59.389942][ T2062] tipc: Enabled bearer <udp:syz0>, priority 10
[   59.415089][ T2058] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.426491][ T2062] tipc: New replicast peer: 255.255.255.255
[   59.432665][ T2062] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.458630][ T2068] netlink: 24 bytes leftover after parsing attributes in process `syz.7.650'.
[   59.506155][ T2058] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.645: lblock 0 mapped to illegal pblock 0 (length 3)
[   59.567239][ T2058] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[   59.603764][ T2058] EXT4-fs (loop1): This should not happen!! Data will be lost
[   59.603764][ T2058] 
[   59.657335][  T288] EXT4-fs (loop1): unmounting filesystem.
[   59.667761][ T2077] overlayfs: failed to clone upperpath
[   59.673564][  T517] bridge0: port 3(syz_tun) entered disabled state
[   59.682855][  T517] tipc: Resetting bearer <eth:syz_tun>
[   60.642323][ T2104] loop7: detected capacity change from 0 to 40427
[   60.665770][ T2104] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   60.682792][ T2104] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   60.701586][ T2104] F2FS-fs (loop7): invalid crc value
[   60.743487][ T2104] F2FS-fs (loop7): Found nat_bits in checkpoint
[   60.850273][ T2104] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   60.872274][ T2104] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   60.911201][   T28] kauditd_printk_skb: 60 callbacks suppressed
[   60.911216][   T28] audit: type=1400 audit(1791929098.249:413): avc:  denied  { read } for  pid=2103 comm="syz.7.663" name="file0" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   60.911298][ T2104] fuse: Unknown parameter 'group_id00000000000000000000'
[   60.958475][   T28] audit: type=1400 audit(1791929098.299:414): avc:  denied  { connect } for  pid=2143 comm="syz.6.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.023591][ T2151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.680'.
[   61.030168][ T2152] loop6: detected capacity change from 0 to 256
[   61.063725][ T2152] FAT-fs (loop6): Directory bread(block 64) failed
[   61.090539][ T2152] FAT-fs (loop6): Directory bread(block 65) failed
[   61.104163][ T2152] FAT-fs (loop6): Directory bread(block 66) failed
[   61.130928][ T2152] FAT-fs (loop6): Directory bread(block 67) failed
[   61.151327][ T2152] FAT-fs (loop6): Directory bread(block 68) failed
[   61.171265][ T2152] FAT-fs (loop6): Directory bread(block 69) failed
[   61.211666][ T2152] FAT-fs (loop6): Directory bread(block 70) failed
[   61.233205][ T2152] FAT-fs (loop6): Directory bread(block 71) failed
[   61.244204][ T2157] bridge0: port 3(syz_tun) entered blocking state
[   61.258607][ T2152] FAT-fs (loop6): Directory bread(block 72) failed
[   61.263928][ T2157] bridge0: port 3(syz_tun) entered disabled state
[   61.275470][ T2152] FAT-fs (loop6): Directory bread(block 73) failed
[   61.288916][ T2157] device syz_tun entered promiscuous mode
[   61.298948][ T2157] bridge0: port 3(syz_tun) entered blocking state
[   61.305442][ T2157] bridge0: port 3(syz_tun) entered forwarding state
[   61.368013][ T2169] loop1: detected capacity change from 0 to 512
[   61.387476][ T2169] EXT4-fs (loop1): Test dummy encryption mode enabled
[   61.398437][ T2173] loop7: detected capacity change from 0 to 512
[   61.422039][ T2173] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   61.459525][ T2169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   61.469645][ T2173] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.574671][  T288] EXT4-fs (loop1): unmounting filesystem.
[   61.630912][ T2183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'.
[   61.753117][  T517] bridge0: port 3(syz_tun) entered disabled state
[   61.772806][   T28] audit: type=1326 audit(1791929099.109:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2186 comm="syz.2.692" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517939e2d9 code=0x7fc00000
[   61.822869][ T1306] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   61.860746][   T28] audit: type=1326 audit(1791929099.109:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2186 comm="syz.2.692" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f517939e2d9 code=0x7fc00000
[   61.902819][   T28] audit: type=1326 audit(1791929099.149:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2186 comm="syz.2.692" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517939e2d9 code=0x7fc00000
[   61.958645][   T28] audit: type=1326 audit(1791929099.149:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2186 comm="syz.2.692" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517939e2d9 code=0x7fc00000
[   62.004226][   T28] audit: type=1326 audit(1791929099.149:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2186 comm="syz.2.692" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517939e2d9 code=0x7fc00000
[   62.029026][   T28] audit: type=1326 audit(1791929099.149:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2186 comm="syz.2.692" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517939e2d9 code=0x7fc00000
[   62.053932][   T28] audit: type=1326 audit(1791929099.149:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2186 comm="syz.2.692" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517939e2d9 code=0x7fc00000
[   62.079855][   T28] audit: type=1326 audit(1791929099.149:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2186 comm="syz.2.692" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517939e2d9 code=0x7fc00000
[   62.109387][ T1306] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.132945][ T1306] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.143512][ T1306] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   62.152966][ T1306] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.166893][ T1306] usb 8-1: config 0 descriptor??
[   62.385348][ T1306] usbhid 8-1:0.0: can't add hid device: -71
[   62.391324][ T1306] usbhid: probe of 8-1:0.0 failed with error -71
[   62.416582][ T1306] usb 8-1: USB disconnect, device number 2
[   62.507545][ T2225] tipc: Resetting bearer <eth:syz_tun>
[   62.513867][ T2225] bridge0: port 3(syz_tun) entered disabled state
[   62.532036][ T2225] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.539361][ T2225] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.665413][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   62.778699][ T2231] tipc: Resetting bearer <eth:syz_tun>
[   62.808979][ T2075] syz.7.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   62.828780][ T2075] CPU: 1 PID: 2075 Comm: syz.7.653 Tainted: G        W          syzkaller #0
[   62.837581][ T2075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   62.847654][ T2075] Call Trace:
[   62.850938][ T2075]  <TASK>
[   62.853871][ T2075]  __dump_stack+0x21/0x24
[   62.858229][ T2075]  dump_stack_lvl+0x110/0x170
[   62.862918][ T2075]  ? __cfi_dump_stack_lvl+0x8/0x8
[   62.867950][ T2075]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   62.873770][ T2075]  ? ___ratelimit+0x40a/0x590
[   62.878451][ T2075]  dump_stack+0x15/0x24
[   62.882609][ T2075]  dump_header+0xdb/0x660
[   62.886945][ T2075]  ? __cfi_gfp_zone+0x10/0x10
[   62.890472][ T2238] loop6: detected capacity change from 0 to 1024
[   62.891656][ T2075]  oom_kill_process+0x32a/0x410
[   62.902808][ T2075]  ? kvm_sched_clock_read+0x18/0x40
[   62.908005][ T2075]  out_of_memory+0x630/0x930
[   62.912588][ T2075]  ? __cfi_out_of_memory+0x10/0x10
[   62.917689][ T2075]  mem_cgroup_out_of_memory+0x2be/0x390
[   62.923219][ T2075]  ? __kasan_check_write+0x14/0x20
[   62.928313][ T2075]  ? mem_cgroup_oom_trylock+0x360/0x360
[   62.933845][ T2075]  try_charge_memcg+0xb8a/0x1650
[   62.938777][ T2075]  ? mem_cgroup_swap_full+0x1a0/0x1a0
[   62.944140][ T2075]  ? __asan_set_shadow_00+0xe/0x10
[   62.949242][ T2075]  ? shmem_alloc_and_acct_folio+0x848/0x8c0
[   62.955121][ T2075]  ? __kasan_check_write+0x14/0x20
[   62.960220][ T2075]  charge_memcg+0x81/0x1f0
[   62.964620][ T2075]  __mem_cgroup_charge+0x93/0x290
[   62.969664][ T2075]  ? xas_start+0x31d/0x3e0
[   62.974065][ T2075]  ? __cfi___mem_cgroup_charge+0x10/0x10
[   62.979683][ T2075]  ? xas_load+0x3a2/0x3c0
[   62.984005][ T2075]  shmem_add_to_page_cache+0x5b1/0xae0
[   62.989451][ T2075]  ? put_page+0xb0/0xb0
[   62.993630][ T2075]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   62.999444][ T2075]  ? rcu_preempt_deferred_qs_irqrestore+0x674/0x960
[   63.006025][ T2075]  shmem_get_folio_gfp+0xef9/0x20f0
[   63.011214][ T2075]  ? preempt_schedule_thunk+0x16/0x18
[   63.016572][ T2075]  shmem_fault+0x1ab/0x670
[   63.020977][ T2075]  ? __cfi_shmem_fault+0x10/0x10
[   63.025898][ T2075]  ? preempt_schedule_irq+0xca/0x120
[   63.031169][ T2075]  ? __cfi_preempt_schedule_irq+0x10/0x10
[   63.036868][ T2075]  ? vma_data_pages+0xfc/0x130
[   63.041621][ T2075]  do_fault+0x19de/0x1e30
[   63.045942][ T2075]  ? pte_marker_clear+0x220/0x220
[   63.050976][ T2075]  handle_mm_fault+0x1363/0x26b0
[   63.055896][ T2075]  ? __cfi_handle_mm_fault+0x10/0x10
[   63.061175][ T2075]  __get_user_pages+0x34b/0xdb0
[   63.066028][ T2075]  ? populate_vma_page_range+0x120/0x120
[   63.071665][ T2075]  get_dump_page+0x169/0x640
[   63.076250][ T2075]  ? __cfi_get_dump_page+0x10/0x10
[   63.081362][ T2075]  dump_user_range+0x123/0x630
[   63.086132][ T2075]  ? __cfi_dump_user_range+0x10/0x10
[   63.091443][ T2075]  ? dump_align+0xfe/0x120
[   63.095862][ T2075]  ? dump_emit+0xa8/0xc0
[   63.100098][ T2075]  elf_core_dump+0x2b60/0x30b0
[   63.104852][ T2075]  ? __cfi_elf_core_dump+0x10/0x10
[   63.109957][ T2075]  ? dump_interrupted+0xd0/0xd0
[   63.114789][ T2075]  ? filp_open+0x195/0x1e0
[   63.119543][ T2075]  ? 0xffffffffff600000
[   63.123682][ T2075]  do_coredump+0x160e/0x23a0
[   63.128266][ T2075]  ? __cfi_do_coredump+0x10/0x10
[   63.133196][ T2075]  ? kmem_cache_free+0x12d/0x300
[   63.138124][ T2075]  ? ____kasan_slab_free+0x13d/0x180
[   63.143427][ T2075]  ? get_signal+0xac2/0x1700
[   63.148004][ T2075]  ? kmem_cache_free+0x12d/0x300
[   63.152930][ T2075]  get_signal+0x157d/0x1700
[   63.157424][ T2075]  ? __cfi_get_signal+0x10/0x10
[   63.162259][ T2075]  arch_do_signal_or_restart+0xd1/0x11c0
[   63.167882][ T2075]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   63.173679][ T2075]  ? force_sig_fault+0xd9/0x130
[   63.178533][ T2075]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   63.184740][ T2075]  ? page_fault_oops+0x8b0/0x8b0
[   63.189694][ T2075]  ? __bad_area_nosemaphore+0x303/0x630
[   63.195253][ T2075]  exit_to_user_mode_loop+0x7a/0xb0
[   63.200454][ T2075]  exit_to_user_mode_prepare+0x87/0xd0
[   63.205909][ T2075]  irqentry_exit_to_user_mode+0x9/0x10
[   63.211362][ T2075]  irqentry_exit+0x12/0x40
[   63.215770][ T2075]  exc_page_fault+0x5e/0xb0
[   63.220262][ T2075]  asm_exc_page_fault+0x27/0x30
[   63.225106][ T2075] RIP: 0033:0x7fe27d79e2e1
[   63.229509][ T2075] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   63.249123][ T2075] RSP: 002b:fffffffffffffec0 EFLAGS: 00010217
[   63.255188][ T2075] RAX: 0000000000000000 RBX: 00007fe27da25fa0 RCX: 00007fe27d79e2d9
[   63.263153][ T2075] RDX: 0000000000000000 RSI: fffffffffffffec0 RDI: 0000000000100000
[   63.271114][ T2075] RBP: 00007fe27d835888 R08: 0000000000000000 R09: 0000000000000000
[   63.279078][ T2075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   63.287034][ T2075] R13: 00007fe27da26038 R14: 00007fe27da25fa0 R15: 00007ffef85685a8
[   63.294997][ T2075]  </TASK>
[   63.299424][ T2238] EXT4-fs: Ignoring removed orlov option
[   63.310655][ T2075] memory: usage 307200kB, limit 307200kB, failcnt 5443
[   63.311069][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.317670][ T2075] memory+swap: usage 323860kB, limit 9007199254740988kB, failcnt 0
[   63.324595][ T2231] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.326692][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.346783][ T2231] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.362276][ T2075] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[   63.379512][ T2075] Memory cgroup stats for /syz7:
[   63.379703][ T2075] anon 8761344
[   63.379703][ T2075] file 305524736
[   63.379703][ T2075] kernel 0
[   63.379703][ T2075] kernel_stack 0
[   63.379703][ T2075] pagetables 0
[   63.379703][ T2075] sec_pagetables 0
[   63.379703][ T2075] percpu 0
[   63.379703][ T2075] sock 0
[   63.379703][ T2075] vmalloc 0
[   63.379703][ T2075] shmem 305512448
[   63.379703][ T2075] file_mapped 126566400
[   63.379703][ T2075] file_dirty 8192
[   63.379703][ T2075] file_writeback 0
[   63.379703][ T2075] swapcached 286720
[   63.379703][ T2075] anon_thp 0
[   63.379703][ T2075] file_thp 0
[   63.379703][ T2075] shmem_thp 0
[   63.379703][ T2075] inactive_anon 295866368
[   63.379703][ T2075] active_anon 18694144
[   63.379703][ T2075] inactive_file 8192
[   63.379703][ T2075] active_file 4096
[   63.379703][ T2075] unevictable 0
[   63.379703][ T2075] slab_reclaimable 0
[   63.379703][ T2075] slab_unreclaimable 0
[   63.379703][ T2075] slab 0
[   63.379703][ T2075] workingset_refault_anon 0
[   63.450148][ T2231] device veth0_vlan left promiscuous mode
[   63.487266][ T2231] device veth0_vlan entered promiscuous mode
[   63.495415][ T2238] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   63.510389][ T2231] device veth1_macvtap left promiscuous mode
[   63.517755][ T2231] device veth1_macvtap entered promiscuous mode
[   63.530353][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.530412][ T2075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.653,pid=2075,uid=0
[   63.543532][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.554113][ T2075] Memory cgroup out of memory: Killed process 2075 (syz.7.653) total-vm:194392kB, anon-rss:9616kB, file-rss:20544kB, shmem-rss:123544kB, UID:0 pgtables:372kB oom_score_adj:1000
[   63.560450][ T1306] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   63.586078][  T602] EXT4-fs (loop6): unmounting filesystem.
[   63.595835][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.605927][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.621338][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.641551][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.650446][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.658988][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.668219][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.677137][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.686924][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.703730][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.712092][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.723462][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.736249][  T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.749962][ T1308] IPv6: BUG: Address fc00:: on device lo is missing its host route.
[   63.886333][ T1306] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.901643][ T1306] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.921281][ T1306] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   63.947458][ T1306] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.965213][ T1306] usb 8-1: config 0 descriptor??
[   64.377776][ T1306] aiptek 8-1:0.0: Aiptek using 400 ms programming speed
[   64.385570][ T1306] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input7
[   64.394909][ T1306] input: failed to attach handler kbd to device input7, error: -5
[   64.407376][ T1306] usb 8-1: USB disconnect, device number 3
[   64.902137][ T1743] EXT4-fs (loop7): unmounting filesystem.