last executing test programs:

53.929953593s ago: executing program 32 (id=42):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x400)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

47.249479629s ago: executing program 33 (id=258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0x7, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x1}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)

45.901874043s ago: executing program 34 (id=292):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x8, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc)

44.141779635s ago: executing program 5 (id=336):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x2401, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x8800000, 0x9, 0x0)

44.05835086s ago: executing program 5 (id=339):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2a0, &(0x7f00000008c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x10)
dup3(r1, r0, 0x0)
io_setup(0x91, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

43.702324487s ago: executing program 5 (id=345):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000720a00ff000000007900081300000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000c5cf000000000000009500000800000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x51)
write(r0, &(0x7f0000000200)='r:my_probe ./file0:0x0\n', 0xffffff01)

43.701973996s ago: executing program 5 (id=347):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000180)='./bus\x00', &(0x7f0000000000), 0x200c002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(0x0, 0x20)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)

43.42609454s ago: executing program 5 (id=354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x5c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2000, 0x88be, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "d54ea11c8feb0966b00ce7d7e82e663e9aa08703cb5dccf0", "00000000f72490180b20d4a05ad6cbb5aa4ec6dc17be5450b53920f9822200"}}}}}}}, 0x6e)

43.367687082s ago: executing program 5 (id=356):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1808014, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/716, @ANYRES8, @ANYRES64, @ANYRES16], 0x6, 0x5593, &(0x7f00000061c0)="$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")
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0xe, 0x140230})

43.281418056s ago: executing program 35 (id=356):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1808014, &(0x7f0000000900)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716, @ANYRES8, @ANYRES64, @ANYRES16], 0x6, 0x5593, &(0x7f00000061c0)="$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")
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0xe, 0x140230})

35.540388872s ago: executing program 0 (id=545):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72b, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)

34.596697236s ago: executing program 0 (id=558):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x13e)
ioctl$BLKPG(r2, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0})

34.532951239s ago: executing program 0 (id=559):
r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x4)

34.50975703s ago: executing program 0 (id=560):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x28008dd, &(0x7f00000003c0)={[{@noblock_validity}, {}, {@noblock_validity}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

34.29869788s ago: executing program 0 (id=563):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
close(0x3)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x840)

34.09422479s ago: executing program 0 (id=571):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x20000400)
r1 = socket$igmp6(0xa, 0x3, 0x2)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0), 0x4)

34.078704601s ago: executing program 36 (id=571):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x20000400)
r1 = socket$igmp6(0xa, 0x3, 0x2)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0), 0x4)

31.535861041s ago: executing program 7 (id=634):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r0 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131})
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1)

31.262926214s ago: executing program 7 (id=654):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0)

31.230393045s ago: executing program 7 (id=645):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x86ac0, 0x47)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus\x00', 0x63)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
stat(&(0x7f0000000180)='./file0/file2\x00', &(0x7f00000002c0))

31.198262077s ago: executing program 7 (id=648):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvzHaLBLAV8Qc/1CoaG3+0FFA5eFCjiQdMTPSgx6YtBFmooTURQhSMwZMxJt6NR/8FT3oxxpOJV70bEmK4AJ7WzO4M3d3uLrDsstD9fJJp35sffe+7b97Om3m7DWBkTWU/koitEfFXREzUs807TNV/Xb18duHa5bMLSVSr7/2b1Pa7cvnsQrFrcdyWPDOdRqRfJrG7Tbkrp88cn69Ulk7l+dnVEx/Prpw+8+KxE/NHl44undx/6NDBA3OvvLz/pb7EmdXpyq7PlvfsfPvDb985/HVT/C1x9MlUt43PVKt9Lm64tjWkk7EhVoRbUoqIrLnKtf4/EaVYa7yJeOuLoVYOGKhqtVrd0nnzuSqwgSXRnNflYVQUF/rs/rdYWgcBrw1u+DF0l16v3wBlcV/Nl/qWsUjzfcot97f9NBURH5z77/tsicE8hwAAaPJzNv55od34L42HG/a7P58bmoyIByJie0Q8GBE7IuKhiNq+j0TEo7dYfuskyfrxT3qxp8BuUjb+ezWf22oe/xWjv5gs5blttfjLyZFjlaV9+WsyHeVNWX6uSxm/vPnnN522NY7/siUrvxgL5vW4OLap+ZjF+dX524m50aXzEbvG2sWfXJ8JSCJiZ0Ts6rGMY8/9uKfTthvH30Uf5pmqP0Q8W2//c9ESfyHpPj85e19UlvbNFmfFer//ceHdTuXfVvx9cOl8FGfXuvbPTSaN87Urt17Ghb+/6nhP0+v5P568X0uP5+s+nV9dPTUXMZ4crle6cf3+tWOLfLF/dv5P723f/7fH2iuxOyKyk/ixiHg8Ip7I6/5kRDwVEXu7xP/bG09/1Hv8g5XFv9j2/a9T+68lxqN1TftE6fivPzUVOrku/mvd2/9gLTWdr7mZ97+bqVdvZzMAAADce9KI2BpJOnM9naYzM/XPy++ISCvLK6vPH1n+5ORi/TsCk1FOiyddEw3PQ+fy2/p6/nxE1D9aUGw/kD83/q60uZafWViuLA47eBhxWzr0/8w/pWHXDhg439eC0aX/w+jS/2F06f8wutr0/83DqAdw57W7/n8+hHoAd15L/zftByOj7P4fRljH/r+R//MPUNPD9T8ZRD2AO2plc9z4S/JdE8Vf6vHwDZuI8l1RjdtPVJO2jRvpsCt240Rxlbpb6nMvJYb3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/wcAAP//vQDabw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000300)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0))

31.072597333s ago: executing program 7 (id=653):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)

30.926360319s ago: executing program 7 (id=657):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"})
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000280))

30.855062973s ago: executing program 37 (id=657):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"})
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000280))

16.243927313s ago: executing program 8 (id=878):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="d1ae6b2d0d9f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x1, 0x10001}}}}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x2001000400, 0x40c00)
ioctl$EVIOCGPHYS(r1, 0x80404507, 0x0)
readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1)

16.189555555s ago: executing program 8 (id=879):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

16.142858068s ago: executing program 8 (id=881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newtaction={0x74, 0x30, 0xb, 0x9, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x4, 0xffffffffffffffff, 0x0, 0x400}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7bdc3023}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

15.955955916s ago: executing program 8 (id=888):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvzHaLBLAV8Qc/1CoaG3+0FFA5eFCjiQdMTPSgx6YtBFmooTURQhSMwZMxJt6NR/8FT3oxxpOJV70bEmK4AJ7WzO4M3d3uLrDsstD9fJJp35sffe+7b97Om3m7DWBkTWU/koitEfFXREzUs807TNV/Xb18duHa5bMLSVSr7/2b1Pa7cvnsQrFrcdyWPDOdRqRfJrG7Tbkrp88cn69Ulk7l+dnVEx/Prpw+8+KxE/NHl44undx/6NDBA3OvvLz/pb7EmdXpyq7PlvfsfPvDb985/HVT/C1x9MlUt43PVKt9Lm64tjWkk7EhVoRbUoqIrLnKtf4/EaVYa7yJeOuLoVYOGKhqtVrd0nnzuSqwgSXRnNflYVQUF/rs/rdYWgcBrw1u+DF0l16v3wBlcV/Nl/qWsUjzfcot97f9NBURH5z77/tsicE8hwAAaPJzNv55od34L42HG/a7P58bmoyIByJie0Q8GBE7IuKhiNq+j0TEo7dYfuskyfrxT3qxp8BuUjb+ezWf22oe/xWjv5gs5blttfjLyZFjlaV9+WsyHeVNWX6uSxm/vPnnN522NY7/siUrvxgL5vW4OLap+ZjF+dX524m50aXzEbvG2sWfXJ8JSCJiZ0Ts6rGMY8/9uKfTthvH30Uf5pmqP0Q8W2//c9ESfyHpPj85e19UlvbNFmfFer//ceHdTuXfVvx9cOl8FGfXuvbPTSaN87Urt17Ghb+/6nhP0+v5P568X0uP5+s+nV9dPTUXMZ4crle6cf3+tWOLfLF/dv5P723f/7fH2iuxOyKyk/ixiHg8Ip7I6/5kRDwVEXu7xP/bG09/1Hv8g5XFv9j2/a9T+68lxqN1TftE6fivPzUVOrku/mvd2/9gLTWdr7mZ97+bqVdvZzMAAADce9KI2BpJOnM9naYzM/XPy++ISCvLK6vPH1n+5ORi/TsCk1FOiyddEw3PQ+fy2/p6/nxE1D9aUGw/kD83/q60uZafWViuLA47eBhxWzr0/8w/pWHXDhg439eC0aX/w+jS/2F06f8wutr0/83DqAdw57W7/n8+hHoAd15L/zftByOj7P4fRljH/r+R//MPUNPD9T8ZRD2AO2plc9z4S/JdE8Vf6vHwDZuI8l1RjdtPVJO2jRvpsCt240Rxlbpb6nMvJYb3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/wcAAP//vQDabw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000300)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, 0x0, 0x0)

15.760666186s ago: executing program 8 (id=889):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r1 = dup(r0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8a00, 0x0)
sendfile(r0, r2, 0x0, 0x8000fffffffe)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x1000000000000000, 0x0, 0x7f, 0x3, 0x0, 0x0, 0xd3d5}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

15.442381321s ago: executing program 8 (id=894):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

15.407006782s ago: executing program 38 (id=894):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.099086804s ago: executing program 2 (id=1119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

2.97187405s ago: executing program 2 (id=1124):
unshare(0x400)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x5, 0x13, 0x7, 0x3, 0xa, 0x0, 0x3, 0x54, 0x2d22b85d880a5550})

2.9714811s ago: executing program 2 (id=1125):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket$inet(0x2, 0x2, 0x0)
shutdown(r0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3)

2.846374355s ago: executing program 2 (id=1130):
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@grpquota}]}, 0x4, 0x4e9, &(0x7f0000001140)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5)

2.467304833s ago: executing program 2 (id=1137):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000440)="66b9800000c00f326635000100000f30f20f5d3966b9ec02000066b80070000066ba000000000f3036650fc77b00dad0ffa0fc3fabb8c9000f00d8baa100edff48700f00d0", 0x45}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.467154683s ago: executing program 6 (id=1138):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
pread64(r2, &(0x7f0000000240)=""/91, 0x5b, 0x7)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1, 0x5, 0x1000000)

2.448870914s ago: executing program 6 (id=1140):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
readv(r1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1)
signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

2.32949838s ago: executing program 6 (id=1143):
socket$netlink(0x10, 0x3, 0x7)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x30, 0x3, "fa2d94"}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x20, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.238262014s ago: executing program 2 (id=1145):
io_uring_setup(0x7059, &(0x7f0000001e40)={0x0, 0x55bf, 0x8, 0x3, 0x336})
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
accept$unix(r0, 0x0, 0x0)
close(0x3)

2.157113908s ago: executing program 39 (id=1145):
io_uring_setup(0x7059, &(0x7f0000001e40)={0x0, 0x55bf, 0x8, 0x3, 0x336})
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
accept$unix(r0, 0x0, 0x0)
close(0x3)

1.675851751s ago: executing program 3 (id=1151):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x19, 0x0, @void}, 0x30)

1.344378346s ago: executing program 9 (id=1156):
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local, 0xc}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="a95cec", 0x3}], 0x1}}], 0x1, 0x80c4)

1.344264436s ago: executing program 9 (id=1157):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
close(0x3)

953.989415ms ago: executing program 4 (id=1163):
chdir(&(0x7f0000000340)='./cgroup\x00')
connect$unix(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

932.187836ms ago: executing program 4 (id=1165):
openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file2\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$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")
mount$bind(0x0, 0x0, 0x0, 0x21d000, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)

893.426278ms ago: executing program 4 (id=1166):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0xfed7)
fallocate(r0, 0x0, 0x37e9, 0x2f92)

835.379191ms ago: executing program 4 (id=1167):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x9)

809.743261ms ago: executing program 4 (id=1168):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000feffffff850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f0000000a00)={@local, @empty, @void, {@mpls_uc={0x8847, {[], @ipv6=@esp={0x7, 0x6, "184639", 0xd4b, 0x32, 0x0, @private2, @local, {[@routing={0x5e, 0x4, 0x2, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}], {0x4d2, 0x9, @cc={0x1, 0x0, 0x7, 0x200, 0x9, 0xa72e, 0x10001, [@ipv4=@tcp={{0xa, 0x4, 0x0, 0x25, 0xc1, 0x68, 0x0, 0x1, 0x6, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x13, 0xa8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @multicast2]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0x10, 0x5, 0x0, 0xfff8, {[@sack={0x5, 0xa, [0xff, 0x9]}, @mptcp=@mp_join={0x1e, 0x3}, @mptcp=@capable={0x1e, 0x14, 0x3, 0x8, 0x7c, 0x1, [0x101]}]}}, {"b8246e216484635daaa853c9624fc044d568c91f1a5fba5622607d03f56b5801e742563ed46e3c119dd96f5c6cfbb6d2339e44df67b1dd8a31d70ccc6f8748cc574ec6e430f75c62cf3b262f109dccc052a92d87cd62c35d769cc7effafeac0024"}}}, @ipv4=@gre={{0x6, 0x4, 0x2, 0x5, 0xc3a, 0x64, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xbb, 0x0}, @private=0xa010101, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x7}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xf4], "a9480f27c9298174902249f3dd4353d7248a729e30881da4d10d63b3d9f4727150a1b14a75f7e318a6fe83473b3a4c2d8595100252da9fe9e91fb468465608a09bd674133280b93d0206e6a26ca1bcf2b5fc0a48a9cff54f1c6a7ace22f1a9704624540d32984e065d4ebb5c680fe3bb790f28a88dec7acee5142c41f4d9bfe8a0332e4903bd4f8bb8e2eec042b5ee74b06e04680c88f86f4c25c8720d03715928a2531f2dcde4a05077d4f82320d144918a765e62357fa258ea7f2a0ee7c0edc8919cd9dff9f06ec6b3fadf9719f08e8c63324d7630dd78972d7ba51f8dd528c1688f748e98ed7b3651d07896790c11f9fd4869edb74cdeca7fc728924d8ac378d75e45a780c3bb32111bd1dbc84eb43c4604119158e12496b26c2b2074baeed2fcc5c274175c56c270b13662ffe0cd529c2b7e082d96e18740ffcd22c84d614e12bfe86e0d361360aefb4461d4befb71ee3162830a386b2988e8732310270285ec7bb5db1bc9f7e660bc25743cf3843c60a2f08f7b03265a94eb29e843eb4b44adff3fea0039d293535cd74970bc7f53e6e635bca2932ce9e432663919a40fa63be75abf12388d07055a3b1f8c3af49b5d59f7951d4175db322250118e9e00262d7e7c9f8c3a0f6c34816d4eee6cb412e2f15e7d041bf774f0687a7bef071805028e25555bc1b414da973732b2821915ac8f3e897e96268ebea65106938558a0f0017174a8173d54c818aec1849f731a27f35e0f4e4fec3618e7b3a838e80c16e34a64fe3f0316543ea7f2bcc0df17122108e8d0e9e283805250a2db76def097554c3aaf2490dd33c03c4fd8422bc93f8fba487a31ebf205dc69432c5d4967438015fa8b047fc98d737cc5b777e84c8cf78bab3ef9c09b044a14951ae6ad4325eeaa17e87293a924dedc2763357170e154b0521a89e923f147bba32e52105856c8f919b675df9532d0879f07f50b5a0bb084902ab56255f881d47d2cc8fc8018f06b8c90e4249ec3978f8b60f54a18104fd60c68195b2023997576460dd60ce7402bf41bcd90d4d963b0ab306963b8870a6b9aae4dca0edadd4da53ba30caabb68ccbc0c6d1ee79e62b7c972d8d817e3174e64a6f34b6f28d3f2269581726805b701d258ffbc169f30f87ecd99c674704930c195dbb79a43d0e3c67f92e9a07fa1959780be6519d450cbe71ce888d7eddfbe39f1fc025a5cfbe8cf9c6305a4a19ed462c93ded1e0320ae450c7b1186ae4892a6536d28157bfa9e9c3a7165ba4852b9ffc39b50820cb5807694fab400df516cb3447e531be924abfff0b197c082a03c1e5f509d49d2ed8c1d78ec4d8147872b7d23efe1091e1b44aaaf2ff89046876660acf3ac49b5b4a748b91f4d39e1bbe0fa08930a7e33afc078cf4b408ec50f8fc00ca2ecef738070bee6038d2af3ce76e896aef97ab80cc9e9c4d4780af36e642bade6dad21334186c317598a708156061da4de2fa1ac1b3c85811d9ff456293eef1e102b8a3a94141140235844af6157ed774f7300608ab736ed4b1cb77fe6f861c5790cc75db07167902abfe4d0fe01f1517e4f4d87ba2d17ba14129c7ef5032e20939572374a9aa533cd620cb94fce3b018292336ead4577df588286af8ac90e556837d5323ed5b5d198977dc513a8ae9a51ed1d55d585ced72eb4b562b8b1cd7d45b87db267384421c7ad64f3de9b6504b42a2263c31b97ac25491025c81b781a2b86f7c9ae0fc22987b8588d132a55a6d8fb093ca49c12f676372278bd2c86c9b3d2f5c10d624ae40bb21e27662aa4af5c6dd372f249e11f75ce3f3ede72d5e76442c4a40abd0dfd02e84bb78ff8ee10f3bd254e8b245352df6b19773a2f045feeca691a94c14bda229e94e1b6efc084c0126511920874feb0e1dc576eb314c6748d193b6b4dbddd28c38d5e3991dd3e7656aa9c38043ba85ac676619ccec8d33fe83568f4414aa53b924401653f7262d78622a159b3f2bc6a4dbd7cc6655e36c2fc9542e69a1f0436af8719ab9426b9df1c74d37e96ded46b9081971e8bb484fbff322a0447445764ad82b14657c18da2fb782c3f510e747c01c75249fb2f43d6946c3d4813d358b4902d99403d424aab8346a1a361b6d8853c4d742d1f540aaef9b661441debce36843c4943f1646c0b62753080fc6d645013ec21f94c2fbe73f98cbc34c9d8b5e79a36a1e6a0b1c407f62478fea5b00d861750b21d8ac828e58f187fb306b658266d76c786eaa84507d1f5552211b5ffe30eff9dedc7b9ef43b75a7c2d8068adc1601eb3c5e82df46e201dd5da079b056dc80a73a0f4604aeb9799fc12fb2b8522db57dc77ba63a702e19440a589d258352fe87d40544d829e51c0b6b57b041614beed2ed4b3ec9da9d35d2ffa2d776a10fe1f7e021d69afc6967a2554d636f99440717f991fed32c43976ec472c016869f12c87c4747855231522c2c6e494dbe688bb0710850cb1d61a031982bfe32bdb3b3fb8624e92ba8270c5757769434f600301612ccba9b5f7cc5f8bf712e51a72ebe6f4fb016eba248924dc78d52e2501c517cabd6e50d3d8a66d5fc7dc660dff07bffecd5ecadd5affcfd288b0df47b5de9473ec63219113fecbcd0bd5fd3c8f58e633e40db46c17fda302b77cf5c1b1f13655b89277064d272a4cb60e9fee6c00aefd369bdf824722d41882e8049dedb97f8a6c8f05640810d61510765dfaf04c42920b8c0a52616c0c2911e153f4f6da11af5d00d91d94f37352bf3a69b507f1064bd1e97a512ab31ec86da80a903d9e5c590fef4bd0066122a239907e81b00ab20e3e61e31d1b09a26b3d91c13d0abe0291b736e75feb45c67c76b9a10f19a405817c7ebbcfae7b5ce9a391b429cb6254eb5c990861d70754341c463daeeff19a2ffce14095b529e653d34b6a59c8059d3d4ccc8f01a5aca5643d7759aa26d91751b5eca2377844d3a563ab252a9e1c90f03c0fa9666091a173343f9954840352b183407dd09aca600fdaf79433b0cb922a255879cfde8d3e240f24d155e59e233fa1d840eb0fd9e36f069ec48778a2a2859de86fd7886babc2ce42e58ab54e7b9d1524a7eae32080992bd6ce74687703d97cb3c1122466b12e4ad7e14703e6680f7706e02cd4ff7f90d327e83b2526b4cc340fedd8813898e8cff8bd78683801fd4d702a2767906d45ad5515a15d17e739c8a208e60eaf4a47e50ffa066ce32b42e604b975b1bc0c8bf78acfc5be06d2da45590c65a30b9b47172b0bd517ead056f8b638cef8413cb91a433fc1ff5161233fda1414df2c062d8fd4b3c44ae48d51b1c521b226c86f6c48c2533022e1e037e6b29e88417b5e566556d6f065cdd4f33ececa2be7260718dc878f095785748f7d3d06759cea565722c002171fa7b09d2b9412ae48f369a7092d49e31afd58d09df2bc29816d29ab3b7c9cb38f28916fe458c5bad7584e3473ad8aab6949c267f046b5bbe9beed8c6f29034ddd4eaaf7d7311fe91fc77968ab40a993484a3c2091ee1d3d540f3c35af7306543bc413eb680382250b55512bc0d496ab31e7c27e7c42d432384db57dbbfb5015edafa9e2b5d2f47a420ad86c394904e0d08e827853cf225e79250ebbb6614fd7b6c452b4b3cfba3728b1c408ff11cb39737433e03634963f202ae3664998c4ffdca16faf8512f73f1e719733cf5111be725d86448899251cf7ed44e615e9c16ce428635ca6a2824d03ae6501f829709252bab9219c372091334b5a136f0a267efaf1a56160cdd2bb9f734e39928d19ca1cbcd50d59baa5b84aee57972e52c770bc225f1ebd403a246e65129d4650a72ad02018dd7f9dbf265c78cb82741cf20eaebc0b55a87e17508649ceb884035cb4197f68d04050f0fe764dfb788d8c968f316b79de08d2d91d17376e42c4640a8ef6ee59a1d3c7eb1a90b7182f6ea65f5be9ad74e793143dc752b8d6e1448a7fc88cf17926a686e528e0f33923341a9018c7488df98f43fbf74de8c5e1e3ae9c64fe6b8096b4a1a83b7fb1aa9401ac9a237175617160606c0ddf9d7080cb6f3a2207b3eb28419df8f5de68b97c43b9577e919da07c59421ed6c8f4793c70e5af8f73b702b8b5b30825489ef57c2cf3fe988d3311a1e7c50628d260047466aecc15d06c14d53b74d2a1d7a5a0ce0e465164beaa0e96d28b6ccc80ba4a90598192fa52ac5a35d15bd87b9fccbb77e41d510cf8a523579c39c9a64c5381980a03165994133b7882bee3b43aec90e178862a6c6bca0c946452ff39e1dff4f495d76fb18c9a4c17d0b4fc6a8a40e2a9b"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x800]}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0xf, 0x1, 0x0, 0x3, 0x0, 0x2}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x2, {{0x5, 0x2, 0x80, 0x2, 0x0, 0x3, 0x0, 0x6}, 0x2, {0xc, 0x25, 0x1, 0x5, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}]}, "ce88f0011a47", 0x6}}}}}}}, 0x0)

738.336125ms ago: executing program 4 (id=1169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x9}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x16, 0x14, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}}}}}}}, 0x5c)

712.805946ms ago: executing program 40 (id=1169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x9}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x16, 0x14, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}}}}}}}, 0x5c)

534.067125ms ago: executing program 1 (id=1173):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)

518.816155ms ago: executing program 9 (id=1174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x88}, {0x0, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080)

476.779677ms ago: executing program 1 (id=1175):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003640)={0x1, 0x0, [{0x100000, 0x1000, &(0x7f0000001600)=""/4096}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe6e40000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

414.39992ms ago: executing program 1 (id=1176):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r1, @ANYRES32=r0], 0x1c}}, 0x0)

414.16435ms ago: executing program 9 (id=1177):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x300, 0xfc, 0xfffffffd}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

414.04118ms ago: executing program 1 (id=1178):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc1a81, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}})
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)

345.961154ms ago: executing program 6 (id=1179):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg")
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0xd, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000020, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000100)=0x4, 0x80000000)

345.706144ms ago: executing program 3 (id=1180):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r2, &(0x7f0000000280)='0\x00', 0x2)

269.381817ms ago: executing program 3 (id=1181):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0xc844, 0x0, 0xfffffd84)

269.210497ms ago: executing program 9 (id=1182):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000001a40)=ANY=[], 0x0)

219.448009ms ago: executing program 3 (id=1183):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x80487436, 0x0)

190.809471ms ago: executing program 1 (id=1184):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000370429bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="8d0c0100000000002c0012800b000100697036746e6c00"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x0)

190.307351ms ago: executing program 9 (id=1185):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40850)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

185.912341ms ago: executing program 6 (id=1186):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

86.957355ms ago: executing program 3 (id=1187):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x309}, 0x18}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x80000000, 0x0)
ptrace$setsig(0x4203, r0, 0x81, &(0x7f00000000c0)={0x5, 0x4, 0x5})

2.35611ms ago: executing program 6 (id=1188):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e)

2.16211ms ago: executing program 3 (id=1189):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)

0s ago: executing program 1 (id=1190):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r1 = syz_open_pts(r0, 0x141601)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)

kernel console output (not intermixed with test programs):

fs (loop6): Try to recover 1th superblock, ret: 0
[   47.122926][ T1703] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   47.131279][ T1713] device vcan0 entered promiscuous mode
[   47.139533][ T1713] device dummy0 entered promiscuous mode
[   47.147355][ T1713] device veth0 entered promiscuous mode
[   47.173215][ T1713] device veth1 entered promiscuous mode
[   47.181547][ T1713] device wg0 entered promiscuous mode
[   47.191617][ T1713] device wg1 entered promiscuous mode
[   47.198438][ T1713] device wg2 entered promiscuous mode
[   47.205160][ T1713] device veth0_to_bridge entered promiscuous mode
[   47.226815][ T1713] device veth1_to_bridge entered promiscuous mode
[   47.236572][ T1713] device veth0_to_bond entered promiscuous mode
[   47.243827][ T1713] device bond_slave_0 entered promiscuous mode
[   47.250424][ T1713] device veth1_to_bond entered promiscuous mode
[   47.262654][ T1012] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   47.262679][ T1012] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   47.265156][ T1713] device bond_slave_1 entered promiscuous mode
[   47.280621][ T1012] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[   47.287209][ T1713] device veth0_to_team entered promiscuous mode
[   47.307724][ T1713] device team_slave_0 entered promiscuous mode
[   47.322645][ T1713] device veth1_to_team entered promiscuous mode
[   47.340784][ T1738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.536'.
[   47.347046][ T1713] device team_slave_1 entered promiscuous mode
[   47.358714][ T1738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.536'.
[   47.368019][ T1713] device veth0_to_batadv entered promiscuous mode
[   47.379085][ T1713] device batadv_slave_0 entered promiscuous mode
[   47.399327][ T1713] device veth1_to_batadv entered promiscuous mode
[   47.418487][ T1713] device batadv_slave_1 entered promiscuous mode
[   47.437155][ T1713] device xfrm0 entered promiscuous mode
[   47.453297][ T1713] device veth0_to_hsr entered promiscuous mode
[   47.478957][ T1713] device hsr_slave_0 entered promiscuous mode
[   47.495260][ T1713] device veth1_to_hsr entered promiscuous mode
[   47.506515][ T1713] device hsr_slave_1 entered promiscuous mode
[   47.523078][ T1713] device veth1_virt_wifi entered promiscuous mode
[   47.535014][ T1713] device veth0_virt_wifi entered promiscuous mode
[   47.547400][ T1713] device veth1_vlan entered promiscuous mode
[   47.562638][ T1713] device vlan0 entered promiscuous mode
[   47.568463][ T1713] device vlan1 entered promiscuous mode
[   47.575232][ T1713] device veth0_macvtap entered promiscuous mode
[   47.588647][ T1713] device macsec0 entered promiscuous mode
[   47.702140][ T1756] set_capacity_and_notify: 12 callbacks suppressed
[   47.702160][ T1756] loop6: detected capacity change from 0 to 512
[   47.721420][ T1756] ext4: Unknown parameter 'nouser_xattr'
[   47.735675][ T1750] kvm: pic: non byte write
[   47.852231][ T1773] netlink: 'syz.6.552': attribute type 4 has an invalid length.
[   47.861722][ T1773] device lo entered promiscuous mode
[   47.881939][ T1773] device tunl0 entered promiscuous mode
[   47.899631][ T1773] device gre0 entered promiscuous mode
[   47.907467][ T1778] device-mapper: table: 252:1: integrity: unknown target type
[   47.915073][ T1773] device gretap0 entered promiscuous mode
[   47.922611][ T1773] device erspan0 entered promiscuous mode
[   47.930401][ T1773] device ip_vti0 entered promiscuous mode
[   47.931862][ T1778] device-mapper: ioctl: error adding target to table
[   47.943064][ T1773] device ip6_vti0 entered promiscuous mode
[   47.956942][ T1773] device sit0 entered promiscuous mode
[   47.973578][ T1773] device ip6tnl0 entered promiscuous mode
[   47.983860][ T1773] device ip6gre0 entered promiscuous mode
[   47.994838][ T1773] device syz_tun entered promiscuous mode
[   48.002096][ T1773] device ip6gretap0 entered promiscuous mode
[   48.009530][ T1773] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.016764][ T1773] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.024210][ T1773] device bridge0 entered promiscuous mode
[   48.032109][ T1773] device vcan0 entered promiscuous mode
[   48.038384][ T1773] device dummy0 entered promiscuous mode
[   48.045286][ T1773] device veth0 entered promiscuous mode
[   48.055307][ T1773] device veth1 entered promiscuous mode
[   48.062562][ T1773] device wg0 entered promiscuous mode
[   48.069281][ T1773] device wg1 entered promiscuous mode
[   48.075843][ T1773] device wg2 entered promiscuous mode
[   48.103373][ T1773] device veth0_to_bridge entered promiscuous mode
[   48.120170][ T1773] device veth1_to_bridge entered promiscuous mode
[   48.145355][ T1773] device veth0_to_bond entered promiscuous mode
[   48.166469][ T1773] device bond_slave_0 entered promiscuous mode
[   48.177456][ T1773] device veth1_to_bond entered promiscuous mode
[   48.184441][ T1773] device bond_slave_1 entered promiscuous mode
[   48.226750][ T1773] device veth0_to_team entered promiscuous mode
[   48.233937][ T1773] device team_slave_0 entered promiscuous mode
[   48.240630][ T1773] device veth1_to_team entered promiscuous mode
[   48.247823][ T1773] device team_slave_1 entered promiscuous mode
[   48.254247][ T1773] device veth0_to_batadv entered promiscuous mode
[   48.282392][ T1773] device batadv_slave_0 entered promiscuous mode
[   48.291712][ T1773] device veth1_to_batadv entered promiscuous mode
[   48.299375][ T1773] device batadv_slave_1 entered promiscuous mode
[   48.306846][ T1773] device xfrm0 entered promiscuous mode
[   48.316917][ T1773] device veth0_to_hsr entered promiscuous mode
[   48.324461][ T1773] device hsr_slave_0 entered promiscuous mode
[   48.331676][ T1773] device veth1_to_hsr entered promiscuous mode
[   48.339438][ T1773] device hsr_slave_1 entered promiscuous mode
[   48.348077][ T1773] device veth1_virt_wifi entered promiscuous mode
[   48.360051][ T1814] loop0: detected capacity change from 0 to 1024
[   48.366515][ T1773] device veth0_virt_wifi entered promiscuous mode
[   48.375233][ T1814] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.383596][ T1773] device veth1_vlan entered promiscuous mode
[   48.394679][ T1773] device vlan0 entered promiscuous mode
[   48.399280][ T1814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   48.401050][ T1773] device vlan1 entered promiscuous mode
[   48.416866][ T1773] device veth0_macvtap entered promiscuous mode
[   48.424303][ T1773] device macsec0 entered promiscuous mode
[   48.524680][ T1399] EXT4-fs (loop0): unmounting filesystem.
[   48.585729][ T1823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.574'.
[   48.595566][ T1823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.574'.
[   48.843106][ T1843] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.850282][ T1843] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.857803][ T1843] device bridge_slave_0 entered promiscuous mode
[   48.864815][ T1843] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.872105][ T1843] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.879806][ T1843] device bridge_slave_1 entered promiscuous mode
[   48.973283][ T1854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'.
[   48.983083][ T1854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'.
[   49.050028][ T1843] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.057168][ T1843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.064481][ T1843] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.071752][ T1843] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.116937][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.131992][ T1728] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.140527][ T1728] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.164456][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.176223][ T1728] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.183366][ T1728] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.199487][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.208738][ T1728] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.215846][ T1728] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.230514][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.238724][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.257221][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.268884][ T1843] device veth0_vlan entered promiscuous mode
[   49.276123][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.295113][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.317474][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.332924][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.342415][ T1843] device veth1_macvtap entered promiscuous mode
[   49.353799][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.366807][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.428580][  T398] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.436282][  T398] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.663462][ T1918] FAULT_INJECTION: forcing a failure.
[   49.663462][ T1918] name failslab, interval 1, probability 0, space 0, times 0
[   49.676847][ T1918] CPU: 0 PID: 1918 Comm: syz.6.605 Not tainted syzkaller #0
[   49.684202][ T1918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.694291][ T1918] Call Trace:
[   49.697591][ T1918]  <TASK>
[   49.700521][ T1918]  __dump_stack+0x21/0x24
[   49.704882][ T1918]  dump_stack_lvl+0x110/0x170
[   49.709567][ T1918]  ? __cfi_dump_stack_lvl+0x8/0x8
[   49.714625][ T1918]  dump_stack+0x15/0x24
[   49.718792][ T1918]  should_fail_ex+0x3bf/0x510
[   49.723478][ T1918]  __should_failslab+0xac/0xf0
[   49.728249][ T1918]  should_failslab+0x9/0x20
[   49.732757][ T1918]  __kmem_cache_alloc_node+0x3d/0x2d0
[   49.738138][ T1918]  ? call_usermodehelper_setup+0x8e/0x210
[   49.743866][ T1918]  ? call_usermodehelper_setup+0x8e/0x210
[   49.749589][ T1918]  kmalloc_trace+0x29/0xb0
[   49.754015][ T1918]  call_usermodehelper_setup+0x8e/0x210
[   49.759570][ T1918]  ? __cfi_free_modprobe_argv+0x10/0x10
[   49.765127][ T1918]  __request_module+0x391/0x910
[   49.769981][ T1918]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   49.775898][ T1918]  ? __cfi___request_module+0x10/0x10
[   49.781301][ T1918]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   49.787126][ T1918]  ? __cfi___wake_up+0x10/0x10
[   49.791913][ T1918]  ? __kasan_check_write+0x14/0x20
[   49.797031][ T1918]  ? _raw_read_lock_irqsave+0x94/0xf0
[   49.802429][ T1918]  ? __cfi__raw_read_lock_irqsave+0x10/0x10
[   49.808345][ T1918]  netlink_create+0x1b6/0x640
[   49.813045][ T1918]  __sock_create+0x39e/0x7c0
[   49.817670][ T1918]  __sys_socket+0xcd/0x1a0
[   49.822119][ T1918]  __x64_sys_socket+0x7a/0x90
[   49.826816][ T1918]  x64_sys_call+0x449/0x9a0
[   49.831339][ T1918]  do_syscall_64+0x4c/0xa0
[   49.835780][ T1918]  ? clear_bhb_loop+0x30/0x80
[   49.840457][ T1918]  ? clear_bhb_loop+0x30/0x80
[   49.845138][ T1918]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.851030][ T1918] RIP: 0033:0x7fd74bd9e159
[   49.855456][ T1918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.875062][ T1918] RSP: 002b:00007fd74cc5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   49.883480][ T1918] RAX: ffffffffffffffda RBX: 00007fd74c025fa0 RCX: 00007fd74bd9e159
[   49.891472][ T1918] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010
[   49.899486][ T1918] RBP: 00007fd74be3506b R08: 0000000000000000 R09: 0000000000000000
[   49.907468][ T1918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.915437][ T1918] R13: 00007fd74c026038 R14: 00007fd74c025fa0 R15: 00007fffd6b560b8
[   49.923415][ T1918]  </TASK>
[   50.072843][ T1932] kvm: pic: non byte write
[   50.176032][ T1957] FAULT_INJECTION: forcing a failure.
[   50.176032][ T1957] name failslab, interval 1, probability 0, space 0, times 0
[   50.188976][ T1957] CPU: 0 PID: 1957 Comm: syz.8.623 Not tainted syzkaller #0
[   50.196296][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   50.206348][ T1957] Call Trace:
[   50.209627][ T1957]  <TASK>
[   50.212578][ T1957]  __dump_stack+0x21/0x24
[   50.216920][ T1957]  dump_stack_lvl+0x110/0x170
[   50.221621][ T1957]  ? __cfi_dump_stack_lvl+0x8/0x8
[   50.226663][ T1957]  ? __cfi_avc_has_perm+0x10/0x10
[   50.231691][ T1957]  dump_stack+0x15/0x24
[   50.235856][ T1957]  should_fail_ex+0x3bf/0x510
[   50.240534][ T1957]  __should_failslab+0xac/0xf0
[   50.245326][ T1957]  should_failslab+0x9/0x20
[   50.249830][ T1957]  __kmem_cache_alloc_node+0x3d/0x2d0
[   50.255217][ T1957]  ? __request_module+0x2a7/0x910
[   50.260244][ T1957]  ? __request_module+0x2a7/0x910
[   50.265268][ T1957]  kmalloc_trace+0x29/0xb0
[   50.269698][ T1957]  ? netlink_create+0x1b6/0x640
[   50.274570][ T1957]  __request_module+0x2a7/0x910
[   50.279423][ T1957]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   50.285324][ T1957]  ? __cfi___request_module+0x10/0x10
[   50.290716][ T1957]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   50.296562][ T1957]  ? __cfi___wake_up+0x10/0x10
[   50.301381][ T1957]  ? __kasan_check_write+0x14/0x20
[   50.306523][ T1957]  ? _raw_read_lock_irqsave+0x94/0xf0
[   50.311943][ T1957]  ? __cfi__raw_read_lock_irqsave+0x10/0x10
[   50.317880][ T1957]  netlink_create+0x1b6/0x640
[   50.322595][ T1957]  __sock_create+0x39e/0x7c0
[   50.327228][ T1957]  __sys_socket+0xcd/0x1a0
[   50.331681][ T1957]  __x64_sys_socket+0x7a/0x90
[   50.336395][ T1957]  x64_sys_call+0x449/0x9a0
[   50.340932][ T1957]  do_syscall_64+0x4c/0xa0
[   50.345391][ T1957]  ? clear_bhb_loop+0x30/0x80
[   50.350109][ T1957]  ? clear_bhb_loop+0x30/0x80
[   50.354846][ T1957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   50.360771][ T1957] RIP: 0033:0x7f8342b9e159
[   50.365214][ T1957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.384847][ T1957] RSP: 002b:00007f83415f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   50.393301][ T1957] RAX: ffffffffffffffda RBX: 00007f8342e25fa0 RCX: 00007f8342b9e159
[   50.401308][ T1957] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010
[   50.409313][ T1957] RBP: 00007f8342c3506b R08: 0000000000000000 R09: 0000000000000000
[   50.417309][ T1957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.425303][ T1957] R13: 00007f8342e26038 R14: 00007f8342e25fa0 R15: 00007ffcd10520f8
[   50.433309][ T1957]  </TASK>
[   50.438584][ T1963] loop3: detected capacity change from 0 to 1024
[   50.446368][ T1963] EXT4-fs: Ignoring removed nobh option
[   50.457088][ T1963] EXT4-fs: Ignoring removed bh option
[   50.463464][ T1963] EXT4-fs: Ignoring removed nobh option
[   50.482156][ T1965] tipc: Started in network mode
[   50.487047][ T1965] tipc: Node identity 7f000001, cluster identity 4711
[   50.492133][ T1963] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   50.495018][ T1965] tipc: Enabled bearer <udp:syz2>, priority 10
[   50.511410][ T1965] tipc: Disabling bearer <udp:syz2>
[   50.539854][  T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /119/file1/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   50.563302][  T287] EXT4-fs (loop3): Remounting filesystem read-only
[   50.570791][  T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /119/file1/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   50.595160][  T287] EXT4-fs (loop3): Remounting filesystem read-only
[   50.669644][  T287] EXT4-fs (loop3): unmounting filesystem.
[   50.835009][ T1977] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.842236][ T1977] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.850141][ T1977] device bridge_slave_0 entered promiscuous mode
[   50.866438][ T1977] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.873761][ T1977] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.881680][ T1977] device bridge_slave_1 entered promiscuous mode
[   50.978010][ T1977] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.985102][ T1977] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.992432][ T1977] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.999515][ T1977] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.035469][ T1985] kvm: pic: non byte write
[   51.044075][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.054101][  T398] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.061950][  T398] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.078388][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.087202][  T398] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.094285][  T398] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.102891][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.111256][  T398] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.118372][  T398] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.134899][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.144596][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.159741][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.171878][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.181154][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.188973][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.198367][ T1977] device veth0_vlan entered promiscuous mode
[   51.216767][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.234538][ T1977] device veth1_macvtap entered promiscuous mode
[   51.253467][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.269499][   T10] device bridge_slave_1 left promiscuous mode
[   51.277083][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.298184][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.306850][   T10] device veth1_macvtap left promiscuous mode
[   51.313275][   T10] device veth0_vlan left promiscuous mode
[   51.453928][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.511081][ T2007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.641'.
[   51.548877][ T2013] netlink: 20 bytes leftover after parsing attributes in process `syz.7.654'.
[   51.616626][ T2026] loop7: detected capacity change from 0 to 512
[   51.636257][ T2026] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   51.669630][ T2026] EXT4-fs (loop7): 1 truncate cleaned up
[   51.675432][ T2026] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   51.810159][ T1457] EXT4-fs (loop7): unmounting filesystem.
[   51.829628][ T2034] loop8: detected capacity change from 0 to 40427
[   51.842126][ T2034] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64)
[   51.854265][ T2034] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[   51.873611][ T2034] F2FS-fs (loop8): Image doesn't support compression
[   51.881007][ T2034] F2FS-fs (loop8): Image doesn't support compression
[   51.887343][ T1789] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   51.901969][ T2034] F2FS-fs (loop8): invalid crc value
[   51.908155][ T2034] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   51.945941][ T2034] F2FS-fs (loop8): Start checkpoint disabled!
[   51.954991][ T2034] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[   51.975688][ T2034] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[   51.983718][ T2034] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[   52.088453][ T1789] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   52.104058][ T1789] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   52.126610][ T1789] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   52.150038][ T1789] usb 10-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   52.174385][ T1789] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.202134][ T2025] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[   52.211909][ T2025] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[   52.228612][ T1789] pl2303 10-1:1.0: pl2303 converter detected
[   52.239268][ T1789] usb 10-1: pl2303 converter now attached to ttyUSB0
[   52.250763][ T2046] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.270042][ T2046] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.285626][ T2046] device bridge_slave_0 entered promiscuous mode
[   52.299056][ T2046] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.314858][ T2046] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.328766][ T2046] device bridge_slave_1 entered promiscuous mode
[   52.408926][ T1803] smpboot: CPU 1 is now offline
[   52.430457][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.442801][ T2062] x86: Booting SMP configuration:
[   52.454723][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.463244][ T2062] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   52.558279][ T2025] pl2303 10-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[   52.576945][ T2025] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[   52.584533][ T2025] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[   52.591934][ T2025] pl2303 10-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[   52.607257][ T2025] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[   52.777703][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.785833][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.798530][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.827803][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.844842][ T1801] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.851945][ T1801] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.867671][ T2084] netlink: 'syz.3.673': attribute type 4 has an invalid length.
[   52.875756][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.883500][ T2025] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[   52.889993][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.898155][ T2025] pl2303 ttyUSB0: error sending break = -32
[   52.907656][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.920901][ T1801] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.927978][ T1801] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.946991][ T2083] device lo entered promiscuous mode
[   52.955174][ T2083] device tunl0 entered promiscuous mode
[   52.962312][ T1803] usb 10-1: USB disconnect, device number 2
[   52.968944][ T2083] device gre0 entered promiscuous mode
[   52.974716][ T1803] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   52.991363][ T2083] device gretap0 entered promiscuous mode
[   52.994526][ T1803] pl2303 10-1:1.0: device disconnected
[   53.006914][ T2083] device erspan0 entered promiscuous mode
[   53.022655][ T2083] device ip_vti0 entered promiscuous mode
[   53.034711][ T2083] device ip6_vti0 entered promiscuous mode
[   53.047087][ T2083] device sit0 entered promiscuous mode
[   53.060007][ T2083] device ip6tnl0 entered promiscuous mode
[   53.072453][ T2083] device ip6gre0 entered promiscuous mode
[   53.086741][ T2083] device syz_tun entered promiscuous mode
[   53.094529][ T2083] device ip6gretap0 entered promiscuous mode
[   53.106027][ T2083] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.113323][ T2083] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.124989][ T2083] device bridge0 entered promiscuous mode
[   53.140993][ T2083] device vcan0 entered promiscuous mode
[   53.154355][ T2083] device dummy0 entered promiscuous mode
[   53.167935][ T2083] device veth0 entered promiscuous mode
[   53.183449][ T2083] device veth1 entered promiscuous mode
[   53.198109][ T2083] device wg0 entered promiscuous mode
[   53.204747][ T2083] device wg1 entered promiscuous mode
[   53.212297][ T2083] device wg2 entered promiscuous mode
[   53.219877][ T2083] device veth0_to_bridge entered promiscuous mode
[   53.231368][ T2083] device veth1_to_bridge entered promiscuous mode
[   53.243626][ T2083] device veth0_to_bond entered promiscuous mode
[   53.252816][ T2083] device bond_slave_0 entered promiscuous mode
[   53.259351][ T2083] device veth1_to_bond entered promiscuous mode
[   53.266284][ T2083] device bond_slave_1 entered promiscuous mode
[   53.272684][ T2083] device veth0_to_team entered promiscuous mode
[   53.283352][ T2083] device team_slave_0 entered promiscuous mode
[   53.294149][ T2083] device veth1_to_team entered promiscuous mode
[   53.301453][ T2083] device team_slave_1 entered promiscuous mode
[   53.308157][ T2083] device veth0_to_batadv entered promiscuous mode
[   53.315798][ T2083] device batadv_slave_0 entered promiscuous mode
[   53.329775][ T2083] device veth1_to_batadv entered promiscuous mode
[   53.337868][ T2083] device batadv_slave_1 entered promiscuous mode
[   53.345095][ T2091] loop8: detected capacity change from 0 to 16
[   53.351908][ T2083] device xfrm0 entered promiscuous mode
[   53.371878][ T2083] device veth0_to_hsr entered promiscuous mode
[   53.383203][ T2083] device hsr_slave_0 entered promiscuous mode
[   53.389495][ T2091] erofs: (device loop8): mounted with root inode @ nid 36.
[   53.397782][ T2083] device veth1_to_hsr entered promiscuous mode
[   53.414329][ T2083] device hsr_slave_1 entered promiscuous mode
[   53.421475][ T2091] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   53.430546][ T2083] device veth1_virt_wifi entered promiscuous mode
[   53.435631][ T2091] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   53.448353][ T2083] device veth0_virt_wifi entered promiscuous mode
[   53.451765][ T2091] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   53.464217][ T2083] device veth1_vlan entered promiscuous mode
[   53.471516][ T2091] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   53.485551][ T2091] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   53.489179][ T2083] device vlan0 entered promiscuous mode
[   53.510509][ T2083] device vlan1 entered promiscuous mode
[   53.522190][ T2083] device veth0_macvtap entered promiscuous mode
[   53.537262][ T2083] device macsec0 entered promiscuous mode
[   53.557459][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.596032][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.605171][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.616932][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.635483][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.646132][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.661853][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.672334][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.696337][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.709421][ T2046] device veth0_vlan entered promiscuous mode
[   53.732738][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.742222][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.752723][ T2046] device veth1_macvtap entered promiscuous mode
[   53.764534][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.772466][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.780820][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.807066][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.820391][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.874030][ T2108] loop3: detected capacity change from 0 to 512
[   53.903038][ T2108] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.681: iget: bad i_size value: 38620345925642
[   53.916236][ T2108] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.681: couldn't read orphan inode 15 (err -117)
[   53.932347][ T2108] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   54.011779][ T2123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'.
[   54.016240][ T2122] loop6: detected capacity change from 0 to 128
[   54.091830][ T2108] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.681: bg 0: block 5: invalid block bitmap
[   54.105328][ T2108] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   54.118055][ T2108] EXT4-fs (loop3): This should not happen!! Data will be lost
[   54.118055][ T2108] 
[   54.130626][ T2108] EXT4-fs (loop3): Total free blocks count 0
[   54.136664][ T2108] EXT4-fs (loop3): Free/Dirty block details
[   54.143464][ T2108] EXT4-fs (loop3): free_blocks=0
[   54.149317][ T2108] EXT4-fs (loop3): dirty_blocks=2804
[   54.154891][ T2108] EXT4-fs (loop3): Block reservation details
[   54.166190][ T2108] EXT4-fs (loop3): i_reserved_data_blocks=2804
[   54.187669][ T1728] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 752 with error 28
[   54.254220][ T2141] loop4: detected capacity change from 0 to 512
[   54.263531][ T2141] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   54.333695][ T2149] loop4: detected capacity change from 0 to 512
[   54.385515][ T2149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   54.405080][ T2149] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.469352][ T2046] EXT4-fs (loop4): unmounting filesystem.
[   54.635681][ T2155] loop9: detected capacity change from 0 to 40427
[   54.661880][ T2155] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64)
[   54.680285][ T2155] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   54.707455][ T2155] F2FS-fs (loop9): Image doesn't support compression
[   54.737932][ T2155] F2FS-fs (loop9): Image doesn't support compression
[   54.761889][ T2155] F2FS-fs (loop9): invalid crc value
[   54.783719][ T2155] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   54.795217][ T2170] netlink: 'syz.3.706': attribute type 1 has an invalid length.
[   54.813741][ T2172] netlink: 36 bytes leftover after parsing attributes in process `syz.8.707'.
[   54.818405][ T2170] netlink: 1 bytes leftover after parsing attributes in process `syz.3.706'.
[   54.874815][ T2155] F2FS-fs (loop9): Start checkpoint disabled!
[   54.896999][ T2174] loop3: detected capacity change from 0 to 512
[   54.903636][ T2155] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[   54.920656][ T2174] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   54.937454][ T2155] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[   54.944745][ T2155] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[   54.965021][ T2174] EXT4-fs (loop3): 1 truncate cleaned up
[   54.977619][ T2174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   55.124029][ T2182] loop6: detected capacity change from 0 to 512
[   55.140120][ T1977] EXT4-fs (loop3): unmounting filesystem.
[   55.168479][ T2182] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   55.208369][ T2182] EXT4-fs (loop6): 1 truncate cleaned up
[   55.218183][ T2182] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   55.237158][  T308] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   55.254148][ T2182] xt_hashlimit: size too large, truncated to 1048576
[   55.339004][ T2188] loop9: detected capacity change from 0 to 512
[   55.428276][ T2188] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   55.438339][  T308] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.449207][ T2188] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.464019][  T308] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.480050][  T308] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   55.493630][  T308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.501934][  T308] usb 9-1: Product: syz
[   55.506192][  T308] usb 9-1: Manufacturer: syz
[   55.511083][  T308] usb 9-1: SerialNumber: syz
[   55.554671][ T1843] EXT4-fs (loop9): unmounting filesystem.
[   55.598601][ T2199] loop4: detected capacity change from 0 to 512
[   55.609152][ T1728] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.621186][ T1728] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.659092][ T2199] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.721: iget: bad i_size value: 38620345925642
[   55.727427][ T2199] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.721: couldn't read orphan inode 15 (err -117)
[   55.772534][ T2199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   55.921162][ T2203] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.928603][ T2203] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.936255][ T2203] device bridge_slave_0 entered promiscuous mode
[   55.956927][ T2203] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.964316][ T2203] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.972117][ T2203] device bridge_slave_1 entered promiscuous mode
[   55.992301][ T2199] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.721: bg 0: block 5: invalid block bitmap
[   56.047954][ T2199] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   56.062518][ T2203] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.069612][ T2203] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.076913][ T2203] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.080285][ T2199] EXT4-fs (loop4): This should not happen!! Data will be lost
[   56.080285][ T2199] 
[   56.083984][ T2203] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.109910][ T1012] EXT4-fs (loop6): unmounting filesystem.
[   56.115990][ T2199] EXT4-fs (loop4): Total free blocks count 0
[   56.133046][ T2199] EXT4-fs (loop4): Free/Dirty block details
[   56.152056][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.157969][ T2199] EXT4-fs (loop4): free_blocks=0
[   56.164360][ T2199] EXT4-fs (loop4): dirty_blocks=2768
[   56.171676][ T1728] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.171915][ T2199] EXT4-fs (loop4): Block reservation details
[   56.185118][ T1728] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.194360][ T2199] EXT4-fs (loop4): i_reserved_data_blocks=2768
[   56.211868][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.225970][ T1728] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.233097][ T1728] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.244078][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.248498][   T10] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 712 with error 28
[   56.253067][ T1728] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.271855][ T1728] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.301697][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.317266][ T1728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.337431][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.349588][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.358065][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.365593][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.375605][ T2203] device veth0_vlan entered promiscuous mode
[   56.402346][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.416248][ T2203] device veth1_macvtap entered promiscuous mode
[   56.430737][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.440108][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.525368][  T308] cdc_ncm 9-1:1.0: bind() failure
[   56.530584][  T308] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[   56.530607][  T308] cdc_ncm 9-1:1.1: bind() failure
[   56.541262][ T2228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   56.541334][ T2228] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   56.577004][ T2228] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.728: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   56.614204][ T2228] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.728: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   56.649050][ T2228] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.728: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   56.690994][ T2234] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 18: comm syz.4.728: lblock 23 mapped to illegal pblock 18 (length 1)
[   56.733916][ T1797] usb 9-1: USB disconnect, device number 2
[   56.748733][ T2228] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 14: comm syz.4.728: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   56.769520][ T2228] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 15: comm syz.4.728: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   56.791203][ T2228] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.728: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   56.813272][ T2228] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 17: comm syz.4.728: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   56.842369][ T2228] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 18: comm syz.4.728: lblock 23 mapped to illegal pblock 18 (length 1)
[   56.857053][ T2228] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 19: comm syz.4.728: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   56.963639][ T2244] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   56.984263][ T2244] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.125118][ T1012] EXT4-fs (loop6): unmounting filesystem.
[   57.223981][ T2248] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   57.264954][ T2250] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   57.279838][ T2248] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   57.321880][ T2250] EXT4-fs (loop3): 1 truncate cleaned up
[   57.337241][ T2250] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   57.411272][ T2250] xt_hashlimit: size too large, truncated to 1048576
[   57.490922][ T1012] EXT4-fs (loop6): unmounting filesystem.
[   57.586934][ T2261] FAULT_INJECTION: forcing a failure.
[   57.586934][ T2261] name failslab, interval 1, probability 0, space 0, times 0
[   57.607009][ T2261] CPU: 0 PID: 2261 Comm: syz.4.735 Not tainted syzkaller #0
[   57.614355][ T2261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   57.624454][ T2261] Call Trace:
[   57.627759][ T2261]  <TASK>
[   57.630698][ T2261]  __dump_stack+0x21/0x24
[   57.635062][ T2261]  dump_stack_lvl+0x110/0x170
[   57.639764][ T2261]  ? __cfi_dump_stack_lvl+0x8/0x8
[   57.645070][ T2261]  ? stack_trace_save+0xa6/0xf0
[   57.649947][ T2261]  ? __stack_depot_save+0x36/0x490
[   57.655164][ T2261]  dump_stack+0x15/0x24
[   57.659367][ T2261]  should_fail_ex+0x3bf/0x510
[   57.664066][ T2261]  __should_failslab+0xac/0xf0
[   57.668853][ T2261]  should_failslab+0x9/0x20
[   57.673369][ T2261]  slab_pre_alloc_hook+0x30/0x1d0
[   57.678418][ T2261]  kmem_cache_alloc_lru+0x49/0x280
[   57.683547][ T2261]  ? __d_alloc+0x34/0x6d0
[   57.687899][ T2261]  __d_alloc+0x34/0x6d0
[   57.692077][ T2261]  d_alloc_pseudo+0x1d/0x70
[   57.696609][ T2261]  alloc_file_pseudo+0xe0/0x200
[   57.701480][ T2261]  ? __cfi_alloc_file_pseudo+0x10/0x10
[   57.706957][ T2261]  ? _raw_spin_unlock+0x4c/0x70
[   57.711830][ T2261]  anon_inode_getfile+0xa6/0x180
[   57.716813][ T2261]  do_epoll_create+0x26d/0x350
[   57.721596][ T2261]  __x64_sys_epoll_create1+0x37/0x40
[   57.726903][ T2261]  x64_sys_call+0x346/0x9a0
[   57.731421][ T2261]  do_syscall_64+0x4c/0xa0
[   57.735853][ T2261]  ? clear_bhb_loop+0x30/0x80
[   57.740542][ T2261]  ? clear_bhb_loop+0x30/0x80
[   57.745232][ T2261]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   57.751139][ T2261] RIP: 0033:0x7fc74439e159
[   57.755566][ T2261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.775194][ T2261] RSP: 002b:00007fc7452dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[   57.783640][ T2261] RAX: ffffffffffffffda RBX: 00007fc744625fa0 RCX: 00007fc74439e159
[   57.791637][ T2261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   57.799628][ T2261] RBP: 00007fc74443506b R08: 0000000000000000 R09: 0000000000000000
[   57.807617][ T2261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.815692][ T2261] R13: 00007fc744626038 R14: 00007fc744625fa0 R15: 00007ffca9f4ee88
[   57.823688][ T2261]  </TASK>
[   57.961231][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   57.961246][   T28] audit: type=1326 audit(1789717802.340:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   57.996140][   T28] audit: type=1326 audit(1789717802.340:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.029213][   T28] audit: type=1326 audit(1789717802.340:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.066692][   T28] audit: type=1326 audit(1789717802.340:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.125264][   T28] audit: type=1326 audit(1789717802.370:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.125302][   T28] audit: type=1326 audit(1789717802.370:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.125330][   T28] audit: type=1326 audit(1789717802.370:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.125374][   T28] audit: type=1326 audit(1789717802.370:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.125400][   T28] audit: type=1326 audit(1789717802.370:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.125425][   T28] audit: type=1326 audit(1789717802.370:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.6.738" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd74bd9e159 code=0x7ffc0000
[   58.253311][ T2279] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   58.253345][ T2279] FAT-fs (loop8): Filesystem has been set read-only
[   58.471847][ T2292] set_capacity_and_notify: 6 callbacks suppressed
[   58.471898][ T2292] loop3: detected capacity change from 0 to 1024
[   58.594816][ T2292] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   58.671520][ T2297] netlink: 'syz.4.749': attribute type 1 has an invalid length.
[   58.680631][ T2301] loop9: detected capacity change from 0 to 512
[   58.696477][ T2297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'.
[   58.706761][ T2301] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.751: iget: bad i_size value: 38620345925642
[   58.751679][ T2301] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.751: couldn't read orphan inode 15 (err -117)
[   58.870483][ T2312] FAULT_INJECTION: forcing a failure.
[   58.870483][ T2312] name failslab, interval 1, probability 0, space 0, times 0
[   58.901681][ T2312] CPU: 0 PID: 2312 Comm: syz.3.754 Not tainted syzkaller #0
[   58.909055][ T2312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   58.919157][ T2312] Call Trace:
[   58.922460][ T2312]  <TASK>
[   58.925420][ T2312]  __dump_stack+0x21/0x24
[   58.929802][ T2312]  dump_stack_lvl+0x110/0x170
[   58.934525][ T2312]  ? __cfi_dump_stack_lvl+0x8/0x8
[   58.939596][ T2312]  ? __cfi_do_futex+0x10/0x10
[   58.944303][ T2312]  dump_stack+0x15/0x24
[   58.948509][ T2312]  should_fail_ex+0x3bf/0x510
[   58.953227][ T2312]  __should_failslab+0xac/0xf0
[   58.958028][ T2312]  should_failslab+0x9/0x20
[   58.962577][ T2312]  __kmem_cache_alloc_node+0x3d/0x2d0
[   58.967982][ T2312]  ? do_epoll_create+0x109/0x350
[   58.972958][ T2312]  ? do_epoll_create+0x109/0x350
[   58.977934][ T2312]  kmalloc_trace+0x29/0xb0
[   58.982383][ T2312]  do_epoll_create+0x109/0x350
[   58.987177][ T2312]  __x64_sys_epoll_create1+0x37/0x40
[   58.992496][ T2312]  x64_sys_call+0x346/0x9a0
[   58.997038][ T2312]  do_syscall_64+0x4c/0xa0
[   59.001492][ T2312]  ? clear_bhb_loop+0x30/0x80
[   59.006198][ T2312]  ? clear_bhb_loop+0x30/0x80
[   59.010919][ T2312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   59.016862][ T2312] RIP: 0033:0x7f0d1839e159
[   59.021300][ T2312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.040949][ T2312] RSP: 002b:00007f0d1924d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123
[   59.049400][ T2312] RAX: ffffffffffffffda RBX: 00007f0d18625fa0 RCX: 00007f0d1839e159
[   59.057448][ T2312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   59.065449][ T2312] RBP: 00007f0d1843506b R08: 0000000000000000 R09: 0000000000000000
[   59.073456][ T2312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.081471][ T2312] R13: 00007f0d18626038 R14: 00007f0d18625fa0 R15: 00007ffcef905108
[   59.089486][ T2312]  </TASK>
[   59.129335][ T2301] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.751: bg 0: block 5: invalid block bitmap
[   59.153498][ T2301] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   59.172677][ T2301] EXT4-fs (loop9): This should not happen!! Data will be lost
[   59.172677][ T2301] 
[   59.182883][ T2301] EXT4-fs (loop9): Total free blocks count 0
[   59.191377][ T2301] EXT4-fs (loop9): Free/Dirty block details
[   59.199960][ T2320] tipc: Started in network mode
[   59.205055][ T2301] EXT4-fs (loop9): free_blocks=0
[   59.210368][ T2301] EXT4-fs (loop9): dirty_blocks=3960
[   59.215790][ T2320] tipc: Node identity 7f000001, cluster identity 4711
[   59.234418][ T2301] EXT4-fs (loop9): Block reservation details
[   59.248266][ T2301] EXT4-fs (loop9): i_reserved_data_blocks=3960
[   59.255458][ T2320] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.288353][ T1728] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1904 with error 28
[   59.301600][ T2326] tipc: Disabling bearer <udp:syz2>
[   59.313420][ T1728] EXT4-fs (loop9): This should not happen!! Data will be lost
[   59.313420][ T1728] 
[   59.384671][ T2328] loop4: detected capacity change from 0 to 2048
[   59.438492][ T2328] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.599812][ T2344] loop3: detected capacity change from 0 to 1024
[   59.610589][ T2344] EXT4-fs: Ignoring removed i_version option
[   59.616754][ T2344] EXT4-fs: Ignoring removed bh option
[   59.658709][ T2344] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.690043][ T2346] loop9: detected capacity change from 0 to 2048
[   59.724656][ T2344] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.769: Freeing blocks not in datazone - block = 0, count = 16
[   59.764318][ T2344] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.769: bg 0: block 112: padding at end of block bitmap is not set
[   59.786239][ T2346] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   59.819210][ T2344] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 28
[   59.838060][ T2344] EXT4-fs (loop3): This should not happen!! Data will be lost
[   59.838060][ T2344] 
[   59.848164][ T2344] EXT4-fs (loop3): Total free blocks count 0
[   59.854285][ T2344] EXT4-fs (loop3): Free/Dirty block details
[   59.860838][ T2344] EXT4-fs (loop3): free_blocks=0
[   59.865877][ T2344] EXT4-fs (loop3): dirty_blocks=32
[   59.871368][ T2344] EXT4-fs (loop3): Block reservation details
[   59.877606][ T2344] EXT4-fs (loop3): i_reserved_data_blocks=2
[   59.889326][ T2343] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 12 with error 28
[   59.902244][ T2343] EXT4-fs (loop3): This should not happen!! Data will be lost
[   59.902244][ T2343] 
[   59.971541][ T2362] loop8: detected capacity change from 0 to 512
[   60.006037][ T2362] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   60.037660][ T1789] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   60.059274][ T2366] loop6: detected capacity change from 0 to 4096
[   60.066027][ T2366] EXT4-fs: Ignoring removed mblk_io_submit option
[   60.077568][ T2366] EXT4-fs (loop6): Test dummy encryption mode enabled
[   60.091053][ T2362] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.775: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   60.135898][ T2362] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 12: comm syz.8.775: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   60.158675][ T2362] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 13: comm syz.8.775: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   60.228238][ T1789] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30
[   60.239217][ T1789] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[   60.252683][ T1789] usb 5-1: config 1 interface 0 has no altsetting 0
[   60.268839][ T2371] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 18: comm syz.8.775: lblock 23 mapped to illegal pblock 18 (length 1)
[   60.287601][ T2362] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 14: comm syz.8.775: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   60.308719][ T1789] usb 5-1: string descriptor 0 read error: -22
[   60.312320][ T2362] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 15: comm syz.8.775: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   60.327592][ T1789] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40
[   60.346266][ T1789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.354834][ T2362] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 16: comm syz.8.775: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   60.388170][ T2362] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 17: comm syz.8.775: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   60.410234][ T2379] netlink: 16 bytes leftover after parsing attributes in process `syz.6.779'.
[   60.429292][ T2362] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 18: comm syz.8.775: lblock 23 mapped to illegal pblock 18 (length 1)
[   60.450088][ T2381] xt_hashlimit: size too large, truncated to 1048576
[   60.497212][ T2362] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 19: comm syz.8.775: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   60.780975][ T1789] logitech 0003:046D:C626.0003: unknown main item tag 0x2
[   60.797161][ T1789] logitech 0003:046D:C626.0003: unexpected long global item
[   60.807544][ T1789] logitech 0003:046D:C626.0003: parse failed
[   60.813864][ T1789] logitech: probe of 0003:046D:C626.0003 failed with error -22
[   60.978767][ T2406] loop9: detected capacity change from 0 to 1024
[   60.987864][ T2406] EXT4-fs: Ignoring removed i_version option
[   60.994366][ T2406] EXT4-fs: Ignoring removed bh option
[   61.007591][ T1803] usb 5-1: USB disconnect, device number 2
[   61.043985][ T2406] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.090213][ T2406] EXT4-fs error (device loop9): ext4_free_blocks:6220: comm syz.9.789: Freeing blocks not in datazone - block = 0, count = 16
[   61.113462][ T2406] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.789: bg 0: block 112: padding at end of block bitmap is not set
[   61.128161][ T2406] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 28
[   61.140564][ T2406] EXT4-fs (loop9): This should not happen!! Data will be lost
[   61.140564][ T2406] 
[   61.150445][ T2406] EXT4-fs (loop9): Total free blocks count 0
[   61.156469][ T2406] EXT4-fs (loop9): Free/Dirty block details
[   61.162686][ T2406] EXT4-fs (loop9): free_blocks=0
[   61.168134][ T2406] EXT4-fs (loop9): dirty_blocks=32
[   61.173345][ T2406] EXT4-fs (loop9): Block reservation details
[   61.179570][ T2406] EXT4-fs (loop9): i_reserved_data_blocks=2
[   61.189872][ T2405] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 12 with error 28
[   61.225937][ T2405] EXT4-fs (loop9): This should not happen!! Data will be lost
[   61.225937][ T2405] 
[   61.341789][ T2423] netlink: 16 bytes leftover after parsing attributes in process `syz.9.794'.
[   61.439721][ T2425] loop6: detected capacity change from 0 to 1024
[   61.457041][ T2425] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.796: lblock 2 mapped to illegal pblock 2 (length 1)
[   61.472071][ T2425] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.796: lblock 0 mapped to illegal pblock 48 (length 1)
[   61.486790][ T2425] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.796: Failed to acquire dquot type 0
[   61.498320][ T2425] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   61.508125][ T2425] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.796: mark_inode_dirty error
[   61.519825][ T2425] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[   61.531324][ T2425] EXT4-fs (loop6): 1 orphan inode deleted
[   61.560331][ T1728] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:25: lblock 1 mapped to illegal pblock 1 (length 1)
[   61.595972][ T2425] EXT4-fs error (device loop6): __ext4_get_inode_loc:4522: comm syz.6.796: Invalid inode table block 1 in block_group 0
[   61.617420][ T1728] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:25: Failed to release dquot type 0
[   61.645919][ T2425] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   61.666824][ T2425] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #2: comm syz.6.796: mark_inode_dirty error
[   61.680790][ T2436] loop9: detected capacity change from 0 to 512
[   61.701577][  T398] EXT4-fs error (device loop6): __ext4_get_inode_loc:4522: comm kworker/u4:4: Invalid inode table block 1 in block_group 0
[   61.715872][ T1728] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:25: lblock 1 mapped to illegal pblock 1 (length 1)
[   61.753648][ T1728] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:25: Failed to release dquot type 0
[   61.779373][ T2438] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   61.822850][ T1012] EXT4-fs error (device loop6): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0
[   61.838699][ T2436] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   61.928880][ T1012] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   62.029126][ T2421] F2FS-fs (loop3): invalid crc value
[   62.031236][ T2436] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 3: comm syz.9.800: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   62.064445][ T2436] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 12: comm syz.9.800: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   62.070477][ T2421] F2FS-fs (loop3): Found nat_bits in checkpoint
[   62.093582][ T2436] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 13: comm syz.9.800: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   62.153590][ T2436] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 14: comm syz.9.800: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   62.164621][ T2421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   62.192595][ T2462] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.807: iget: bad i_size value: 38620345925642
[   62.206224][ T2462] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.807: couldn't read orphan inode 15 (err -117)
[   62.244810][ T2436] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 15: comm syz.9.800: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   62.309745][ T2459] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #2: block 18: comm syz.9.800: lblock 23 mapped to illegal pblock 18 (length 1)
[   62.336042][ T2472] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.807: bg 0: block 5: invalid block bitmap
[   62.348978][ T2472] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   62.362235][ T2472] EXT4-fs (loop8): This should not happen!! Data will be lost
[   62.362235][ T2472] 
[   62.372660][ T2472] EXT4-fs (loop8): Total free blocks count 0
[   62.379429][ T2472] EXT4-fs (loop8): Free/Dirty block details
[   62.383863][ T2436] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 16: comm syz.9.800: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   62.398636][ T2472] EXT4-fs (loop8): free_blocks=0
[   62.413320][ T2472] EXT4-fs (loop8): dirty_blocks=2420
[   62.419392][ T2472] EXT4-fs (loop8): Block reservation details
[   62.426189][ T2472] EXT4-fs (loop8): i_reserved_data_blocks=2420
[   62.446307][ T2436] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 17: comm syz.9.800: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   62.514668][ T2436] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #2: block 18: comm syz.9.800: lblock 23 mapped to illegal pblock 18 (length 1)
[   62.661506][ T1801] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 368 with error 28
[   62.676462][ T1801] EXT4-fs (loop8): This should not happen!! Data will be lost
[   62.676462][ T1801] 
[   62.918387][ T2482] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.288908][ T2507] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.812: lblock 2 mapped to illegal pblock 2 (length 1)
[   63.340290][ T2507] __quota_error: 62 callbacks suppressed
[   63.340312][ T2507] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   63.368357][ T2507] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.812: lblock 0 mapped to illegal pblock 48 (length 1)
[   63.421023][ T2507] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   63.442989][ T2507] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.812: Failed to acquire dquot type 0
[   63.497328][ T2507] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   63.510483][   T28] audit: type=1400 audit(1789717813.883:434): avc:  denied  { read write } for  pid=2517 comm="syz.9.823" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   63.535211][ T2507] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.812: mark_inode_dirty error
[   63.561650][ T2507] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[   63.577191][ T2507] EXT4-fs (loop3): 1 orphan inode deleted
[   63.583076][   T28] audit: type=1400 audit(1789717813.913:435): avc:  denied  { open } for  pid=2517 comm="syz.9.823" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   63.607422][  T313] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   63.622128][ T2507] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.812: Invalid inode table block 1 in block_group 0
[   63.635545][ T2507] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   63.645062][  T313] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   63.655037][  T313] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0
[   63.658756][ T2507] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #2: comm syz.3.812: mark_inode_dirty error
[   63.695095][  T313] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm kworker/u4:3: Invalid inode table block 1 in block_group 0
[   63.717325][ T1388] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1)
[   63.731857][ T1388] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   63.740554][ T1388] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:12: Failed to release dquot type 0
[   63.752426][ T2203] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0
[   63.780553][ T2203] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   63.802529][ T2527] set_capacity_and_notify: 5 callbacks suppressed
[   63.802547][ T2527] loop6: detected capacity change from 0 to 512
[   63.845084][   T28] audit: type=1400 audit(1789717814.213:436): avc:  denied  { read } for  pid=2531 comm="syz.3.828" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.868446][ T2527] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.825: iget: bad i_size value: 38620345925642
[   63.882198][ T2527] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.825: couldn't read orphan inode 15 (err -117)
[   63.925609][ T2536] serio: Serial port ptm0
[   63.951861][ T2538] loop9: detected capacity change from 0 to 1024
[   63.997242][ T2538] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   64.025663][ T2538] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[   64.064288][ T2538] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal
[   64.081946][ T2527] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.825: bg 0: block 5: invalid block bitmap
[   64.096159][ T2527] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   64.109374][ T2527] EXT4-fs (loop6): This should not happen!! Data will be lost
[   64.109374][ T2527] 
[   64.120716][ T2527] EXT4-fs (loop6): Total free blocks count 0
[   64.126730][ T2527] EXT4-fs (loop6): Free/Dirty block details
[   64.133208][ T2527] EXT4-fs (loop6): free_blocks=0
[   64.135674][ T2547] loop4: detected capacity change from 0 to 1024
[   64.139001][ T2527] EXT4-fs (loop6): dirty_blocks=2096
[   64.150378][   T28] audit: type=1400 audit(1789717814.533:437): avc:  denied  { unmount } for  pid=2203 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.153404][ T2527] EXT4-fs (loop6): Block reservation details
[   64.202427][ T2527] EXT4-fs (loop6): i_reserved_data_blocks=2096
[   64.212844][ T2547] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.834: lblock 2 mapped to illegal pblock 2 (length 1)
[   64.244110][ T2551] 9pnet: p9_errstr2errno: server reported unknown error õ€ÿ00000000000000000003
[   64.283944][ T1801] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 40 with error 28
[   64.306924][ T2547] Quota error (device loop4): qtree_write_dquot: dquota write failed
[   64.337168][ T1801] EXT4-fs (loop6): This should not happen!! Data will be lost
[   64.337168][ T1801] 
[   64.358440][ T2547] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.834: lblock 0 mapped to illegal pblock 48 (length 1)
[   64.423280][ T2547] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   64.460804][ T2547] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.834: Failed to acquire dquot type 0
[   64.520745][ T2556] kvm [2555]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0xc1) = 0x60000000
[   64.529462][ T2547] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   64.539618][ T2547] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.834: mark_inode_dirty error
[   64.551856][ T2556] kvm [2555]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0xc2) = 0x60000000
[   64.560866][ T2547] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[   64.571989][ T2567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'.
[   64.581116][ T2547] EXT4-fs (loop4): 1 orphan inode deleted
[   64.594649][ T2547] EXT4-fs mount: 32 callbacks suppressed
[   64.594670][ T2547] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   64.609266][ T2448] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:34: lblock 1 mapped to illegal pblock 1 (length 1)
[   64.618260][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'.
[   64.628273][ T2556] kvm [2555]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x11e) = 0x60000000
[   64.641439][ T2448] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:34: Failed to release dquot type 0
[   64.676673][ T2547] netlink: 'syz.4.834': attribute type 1 has an invalid length.
[   64.695470][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.697813][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'.
[   64.711481][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.717002][ T2556] kvm [2555]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x186) = 0x60000000
[   64.729162][ T2556] kvm [2555]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x187) = 0x60000000
[   64.745320][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.771089][ T1801] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.778258][ T1801] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.816104][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.842355][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.860483][ T1801] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.867651][ T1801] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.884439][ T2574] loop3: detected capacity change from 0 to 512
[   64.897287][ T2046] EXT4-fs (loop4): unmounting filesystem.
[   64.904381][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.913943][ T2046] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0
[   64.933347][ T2523] loop8: detected capacity change from 0 to 131072
[   64.940424][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   64.967970][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.976993][ T2523] F2FS-fs (loop8): invalid crc value
[   64.982881][ T2046] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   65.004886][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   65.014116][ T2574] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   65.018098][ T2046] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error
[   65.035613][ T2523] F2FS-fs (loop8): Found nat_bits in checkpoint
[   65.041507][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.045806][ T2574] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   65.061853][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.129306][ T2523] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[   65.147466][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.167601][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.184367][ T2574] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.846: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   65.185913][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.221128][ T2574] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.846: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   65.260643][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.277637][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.286099][ T2574] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.846: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   65.317539][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.329911][ T2584] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 18: comm syz.3.846: lblock 23 mapped to illegal pblock 18 (length 1)
[   65.345467][ T2574] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.846: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   65.356325][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.369592][ T2574] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.846: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   65.390724][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.402269][ T2574] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.846: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   65.408063][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.436014][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.454714][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.460942][ T2574] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.846: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   65.476339][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.507525][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.516250][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.526883][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.535688][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.547441][ T2574] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 18: comm syz.3.846: lblock 23 mapped to illegal pblock 18 (length 1)
[   65.565842][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.577189][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.586952][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.596900][ T1801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.604678][ T2574] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 19: comm syz.3.846: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   65.825629][ T2609] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[   65.834128][ T2203] EXT4-fs (loop3): unmounting filesystem.
[   65.879236][ T2612] loop9: detected capacity change from 0 to 128
[   65.936560][ T2612] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[   65.997475][ T2612] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   66.047975][ T2612] Invalid argument reading file caps for ./file0
[   66.086795][ T2628] loop8: detected capacity change from 0 to 1024
[   66.094819][ T1843] EXT4-fs (loop9): unmounting filesystem.
[   66.100701][ T2628] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   66.113433][ T2628] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   66.123907][ T2628] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[   66.163440][ T2637] loop9: detected capacity change from 0 to 128
[   66.452720][ T2666] loop3: detected capacity change from 0 to 128
[   66.468703][ T2666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   66.503267][ T2666] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   66.585172][ T2666] Invalid argument reading file caps for ./file0
[   66.623939][ T2203] EXT4-fs (loop3): unmounting filesystem.
[   66.721048][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.730446][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.738348][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.746664][ T2444] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.753744][ T2444] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.766928][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.775473][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.785290][ T2444] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.792379][ T2444] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.800038][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.817851][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   66.825875][ T2689] loop6: detected capacity change from 0 to 512
[   66.826426][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.846533][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   66.860870][ T2692] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   66.872515][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.873490][ T2692] EXT4-fs (loop8): 1 truncate cleaned up
[   66.881741][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.894917][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.903353][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.911940][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.919936][ T2689] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.887: iget: bad i_size value: 38620345925642
[   66.921283][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.941141][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.949610][ T2692] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   66.958262][ T2689] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.887: couldn't read orphan inode 15 (err -117)
[   66.970660][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.986556][ T2689] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   67.000562][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.036705][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.074959][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.085211][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.093296][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.101709][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.110902][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.119034][ T2695] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.887: bg 0: block 5: invalid block bitmap
[   67.131687][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.139843][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.142188][ T2695] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 512 with error 28
[   67.148458][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.167225][ T2695] EXT4-fs (loop6): This should not happen!! Data will be lost
[   67.167225][ T2695] 
[   67.176873][ T2695] EXT4-fs (loop6): Total free blocks count 0
[   67.183280][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.190813][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.198793][ T2695] EXT4-fs (loop6): Free/Dirty block details
[   67.204720][ T2695] EXT4-fs (loop6): free_blocks=0
[   67.211730][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.236142][ T2695] EXT4-fs (loop6): dirty_blocks=516
[   67.237601][ T2444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.251752][ T2695] EXT4-fs (loop6): Block reservation details
[   67.266514][ T2695] EXT4-fs (loop6): i_reserved_data_blocks=516
[   67.281793][ T1388] tipc: Left network mode
[   67.288226][ T1259] EXT4-fs (loop8): unmounting filesystem.
[   67.360654][ T1012] EXT4-fs (loop6): unmounting filesystem.
[   67.657238][ T2732] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.664411][ T2732] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.674003][ T2732] device bridge_slave_0 entered promiscuous mode
[   67.681190][ T2732] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.688459][ T2732] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.695935][ T2732] device bridge_slave_1 entered promiscuous mode
[   67.747189][ T1789] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   67.769951][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.777688][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.786461][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.795152][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.803488][ T1663] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.810573][ T1663] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.818587][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.828948][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.837353][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.845483][ T1663] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.852541][ T1663] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.866988][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.875142][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.883354][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.892217][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.901074][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.908620][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.938550][ T1789] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   67.949789][ T1789] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.963056][ T1789] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   67.972272][ T1789] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   67.980656][ T1789] usb 7-1: Product: syz
[   67.984869][ T1789] usb 7-1: Manufacturer: syz
[   67.995324][ T1789] hub 7-1:4.0: USB hub found
[   68.024482][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.036722][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.045029][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.052535][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.062189][ T2732] device veth0_vlan entered promiscuous mode
[   68.073551][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.083151][ T2732] device veth1_macvtap entered promiscuous mode
[   68.094348][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.103017][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.113304][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.121759][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.156939][ T2741] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[
[   68.156939][ T2741] Q&|xù6
[   68.397073][ T1789] hub 7-1:4.0: 2 ports detected
[   68.546434][   T28] kauditd_printk_skb: 11 callbacks suppressed
[   68.546451][   T28] audit: type=1400 audit(1789717818.913:448): avc:  denied  { create } for  pid=2751 comm="syz.9.919" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   68.560569][ T2749] device ip6gre1 entered promiscuous mode
[   68.580802][   T28] audit: type=1400 audit(1789717818.963:449): avc:  denied  { mounton } for  pid=2751 comm="syz.9.919" path="/54/file0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   68.643615][   T28] audit: type=1400 audit(1789717819.013:450): avc:  denied  { watch watch_reads } for  pid=2759 comm="syz.9.911" path="/55/file0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   68.668905][ T2756] syz.3.909 (2756) used greatest stack depth: 17792 bytes left
[   68.684256][ T2754] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.907: iget: bad i_size value: 38620345925642
[   68.703274][ T2754] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.907: couldn't read orphan inode 15 (err -117)
[   68.743668][ T2754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   68.763037][   T28] audit: type=1400 audit(1789717819.133:451): avc:  denied  { shutdown } for  pid=2770 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   68.847969][ T2776] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.907: bg 0: block 5: invalid block bitmap
[   68.860662][ T2776] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   68.881809][ T2776] EXT4-fs (loop2): This should not happen!! Data will be lost
[   68.881809][ T2776] 
[   68.892754][ T2776] EXT4-fs (loop2): Total free blocks count 0
[   68.900450][ T2776] EXT4-fs (loop2): Free/Dirty block details
[   68.907650][ T2776] EXT4-fs (loop2): free_blocks=0
[   68.912764][   T28] audit: type=1400 audit(1789717819.283:452): avc:  denied  { ioctl } for  pid=2779 comm="syz.3.921" path="socket:[29300]" dev="sockfs" ino=29300 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   68.938673][ T2776] EXT4-fs (loop2): dirty_blocks=2388
[   68.950542][ T2776] EXT4-fs (loop2): Block reservation details
[   68.962826][ T2776] EXT4-fs (loop2): i_reserved_data_blocks=2388
[   69.015732][ T1388] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 332 with error 28
[   69.018193][ T1789] usb 7-1: USB disconnect, device number 2
[   69.199737][ T2792] device ip6gre1 entered promiscuous mode
[   69.331716][ T2804] input: syz0 as /devices/virtual/input/input7
[   69.350046][   T28] audit: type=1400 audit(1789717819.723:453): avc:  denied  { read } for  pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=922 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.393808][   T28] audit: type=1400 audit(1789717819.723:454): avc:  denied  { open } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=922 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.417414][   T28] audit: type=1400 audit(1789717819.723:455): avc:  denied  { ioctl } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=922 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.442169][   T28] audit: type=1400 audit(1789717819.753:456): avc:  denied  { getopt } for  pid=2799 comm="syz.3.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.731319][ T2837] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[
[   69.731319][ T2837] Q&|xù6
[   69.801841][ T2448] tipc: Subscription rejected, illegal request
[   69.814088][   T28] audit: type=1400 audit(1789717820.183:457): avc:  denied  { read } for  pid=2844 comm="syz.3.948" path="socket:[29664]" dev="sockfs" ino=29664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.883470][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'.
[   69.923724][ T2850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.951'.
[   69.939145][ T2850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'.
[   70.338133][ T2866] set_capacity_and_notify: 2 callbacks suppressed
[   70.338152][ T2866] loop3: detected capacity change from 0 to 16
[   70.400795][ T2866] erofs: (device loop3): mounted with root inode @ nid 36.
[   70.429326][ T2066] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[   70.440420][ T2866] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   70.460103][ T2866] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   70.473346][ T2856] loop4: detected capacity change from 0 to 131072
[   70.482925][ T2856] F2FS-fs (loop4): Test dummy encryption mode enabled
[   70.491492][ T2866] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   70.515660][ T2856] F2FS-fs (loop4): invalid crc value
[   70.527481][ T2866] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   70.573604][ T2856] F2FS-fs (loop4): Found nat_bits in checkpoint
[   70.697224][ T2856] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   70.747839][ T2895] kvm [2894]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0xc1) = 0x60000000
[   70.759673][ T2895] kvm [2894]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0xc2) = 0x60000000
[   70.800998][ T2895] kvm [2894]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x11e) = 0x60000000
[   70.839486][ T2895] kvm [2894]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x186) = 0x60000000
[   70.865194][ T2895] kvm [2894]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x187) = 0x60000000
[   71.288813][ T2883] loop6: detected capacity change from 0 to 131072
[   71.298772][ T2883] F2FS-fs (loop6): invalid crc value
[   71.305665][ T2883] F2FS-fs (loop6): Found nat_bits in checkpoint
[   71.343057][ T2883] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[   71.936868][ T2943] loop4: detected capacity change from 0 to 512
[   71.999559][ T2943] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.980: iget: bad i_size value: 38620345925642
[   72.013475][ T2943] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.980: couldn't read orphan inode 15 (err -117)
[   72.025599][ T2943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   72.137408][ T2958] loop6: detected capacity change from 0 to 512
[   72.219748][ T2943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.980: bg 0: block 5: invalid block bitmap
[   72.252854][ T2960] kvm [2959]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0xc1) = 0x60000000
[   72.261747][ T2943] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   72.274426][ T2960] kvm [2959]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0xc2) = 0x60000000
[   72.287716][ T2943] EXT4-fs (loop4): This should not happen!! Data will be lost
[   72.287716][ T2943] 
[   72.301510][ T2960] kvm [2959]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x11e) = 0x60000000
[   72.310214][ T2943] EXT4-fs (loop4): Total free blocks count 0
[   72.322886][ T2943] EXT4-fs (loop4): Free/Dirty block details
[   72.330793][ T2960] kvm [2959]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x186) = 0x60000000
[   72.337318][ T2943] EXT4-fs (loop4): free_blocks=0
[   72.339856][ T2960] kvm [2959]: vcpu0, guest rIP: 0x912a Unhandled WRMSR(0x187) = 0x60000000
[   72.344657][ T2943] EXT4-fs (loop4): dirty_blocks=2344
[   72.370822][ T2943] EXT4-fs (loop4): Block reservation details
[   72.377152][ T2943] EXT4-fs (loop4): i_reserved_data_blocks=2344
[   72.427303][ T1730] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 292 with error 28
[   72.530173][ T2963] device ipip0 entered promiscuous mode
[   72.544750][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[   72.685548][ T2947] loop9: detected capacity change from 0 to 131072
[   72.693177][ T2947] F2FS-fs (loop9): invalid crc value
[   72.749011][ T2947] F2FS-fs (loop9): Found nat_bits in checkpoint
[   72.769378][ T2875] tipc: Subscription rejected, illegal request
[   72.855870][ T2947] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[   72.936474][ T2991] loop4: detected capacity change from 0 to 16
[   72.947424][ T2991] erofs: (device loop4): mounted with root inode @ nid 36.
[   72.974565][ T2991] syz.4.997: attempt to access beyond end of device
[   72.974565][ T2991] loop4: rw=524288, sector=1347166200, nr_sectors = 8192 limit=16
[   73.002306][ T2991] syz.4.997: attempt to access beyond end of device
[   73.002306][ T2991] loop4: rw=0, sector=1347166200, nr_sectors = 4096 limit=16
[   73.027650][ T2991] syz.4.997: attempt to access beyond end of device
[   73.027650][ T2991] loop4: rw=0, sector=1347166200, nr_sectors = 4096 limit=16
[   73.050860][ T2991] syz.4.997: attempt to access beyond end of device
[   73.050860][ T2991] loop4: rw=0, sector=1347166200, nr_sectors = 4096 limit=16
[   73.088815][ T2991] syz.4.997: attempt to access beyond end of device
[   73.088815][ T2991] loop4: rw=0, sector=1347166200, nr_sectors = 4096 limit=16
[   73.489618][ T3014] loop6: detected capacity change from 0 to 40427
[   73.505660][ T3014] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   73.529369][ T3014] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   73.542948][ T3014] F2FS-fs (loop6): Found nat_bits in checkpoint
[   73.590911][ T3014] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   73.598257][ T3014] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   73.698859][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   73.698875][   T28] audit: type=1400 audit(1789717824.073:460): avc:  denied  { read write } for  pid=3019 comm="syz.3.1007" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   73.732589][ T1785] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   73.747868][ T1785] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   73.758850][ T3022] loop9: detected capacity change from 0 to 256
[   73.766938][ T3022] FAT-fs (loop9): error, clusters badly computed (0 != 128)
[   73.787317][ T3022] FAT-fs (loop9): Filesystem has been set read-only
[   73.804517][   T28] audit: type=1400 audit(1789717824.103:461): avc:  denied  { open } for  pid=3019 comm="syz.3.1007" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   73.817395][ T3022] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   73.857785][ T3024] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   73.951020][   T28] audit: type=1400 audit(1789717824.323:462): avc:  denied  { write } for  pid=3019 comm="syz.3.1007" path="/dev/hidraw0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   73.961182][ T3029] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1010'.
[   73.985176][ T3029] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1010'.
[   73.994348][ T3029] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1010'.
[   74.020556][ T3035] loop6: detected capacity change from 0 to 256
[   74.042376][ T3035] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[   74.066758][ T3035] incfs: ino conflict with backing FS 1
[   74.066779][   T28] audit: type=1400 audit(1789717824.433:463): avc:  denied  { mounton } for  pid=3032 comm="syz.6.1012" path="/142/file1/bus" dev="loop6" ino=1048671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   74.113385][   T28] audit: type=1400 audit(1789717824.473:464): avc:  denied  { unlink } for  pid=1012 comm="syz-executor" name="file0" dev="loop6" ino=1048681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   74.179996][ T1730] tipc: Left network mode
[   74.443716][ T3061] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.450844][ T3061] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.458612][ T3061] device bridge_slave_0 entered promiscuous mode
[   74.467600][ T3061] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.474641][ T3061] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.482143][ T3061] device bridge_slave_1 entered promiscuous mode
[   74.527878][ T3061] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.534931][ T3061] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.542252][ T3061] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.549319][ T3061] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.587695][ T2875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.601056][   T28] audit: type=1400 audit(1789717824.973:465): avc:  denied  { getattr } for  pid=3065 comm="syz.9.1029" name="/" dev="incremental-fs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   74.632707][ T2875] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.640660][ T2875] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.660000][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.668494][ T2874] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.675547][ T2874] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.734634][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.743024][ T2864] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.750127][ T2864] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.780930][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.792741][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.806604][ T1730] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.815482][ T1730] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.928251][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.947926][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.957693][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.971372][   T28] audit: type=1400 audit(1789717825.343:466): avc:  denied  { map } for  pid=3086 comm="syz.3.1028" path="socket:[31345]" dev="sockfs" ino=31345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.987506][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.016992][ T3061] device veth0_vlan entered promiscuous mode
[   75.025776][ T3089] netlink: 'syz.3.1030': attribute type 34 has an invalid length.
[   75.061454][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.071353][ T3061] device veth1_macvtap entered promiscuous mode
[   75.094206][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.105402][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.116956][   T28] audit: type=1400 audit(1789717825.493:467): avc:  denied  { create } for  pid=3097 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   75.158644][ T3100] erofs: (device loop4): mounted with root inode @ nid 36.
[   75.169887][   T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[   75.182472][ T3100] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   75.204219][ T3100] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   75.207237][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   75.247653][ T3100] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   75.268816][   T28] audit: type=1400 audit(1789717825.643:468): avc:  denied  { write } for  pid=3106 comm="syz.2.1036" name="functions" dev="configfs" ino=16754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   75.292148][ T3107] using random self ethernet address
[   75.307515][ T3100] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   75.321972][ T3107] using random host ethernet address
[   75.337278][   T28] audit: type=1400 audit(1789717825.663:469): avc:  denied  { add_name } for  pid=3106 comm="syz.2.1036" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   75.423011][ T3104] set_capacity_and_notify: 1 callbacks suppressed
[   75.423028][ T3104] loop6: detected capacity change from 0 to 40427
[   75.441757][ T3104] F2FS-fs (loop6): invalid crc value
[   75.464651][ T3104] F2FS-fs (loop6): Found nat_bits in checkpoint
[   75.556715][ T3104] F2FS-fs (loop6): Start checkpoint disabled!
[   75.566090][ T3104] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[   75.586696][ T3104] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   75.678091][ T3137] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1054'.
[   75.717433][ T3139] loop2: detected capacity change from 0 to 16
[   75.724246][ T3139] erofs: (device loop2): mounted with root inode @ nid 36.
[   75.740613][   T46] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[   75.765189][ T3139] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   75.797483][ T3139] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   75.836338][ T3139] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   75.858489][ T3139] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   75.904126][ T3154] FAULT_INJECTION: forcing a failure.
[   75.904126][ T3154] name failslab, interval 1, probability 0, space 0, times 0
[   75.916940][ T3154] CPU: 1 PID: 3154 Comm: syz.6.1047 Not tainted syzkaller #0
[   75.924336][ T3154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   75.934499][ T3154] Call Trace:
[   75.937806][ T3154]  <TASK>
[   75.940766][ T3154]  __dump_stack+0x21/0x24
[   75.945136][ T3154]  dump_stack_lvl+0x110/0x170
[   75.949847][ T3154]  ? __cfi_dump_stack_lvl+0x8/0x8
[   75.954910][ T3154]  dump_stack+0x15/0x24
[   75.959107][ T3154]  should_fail_ex+0x3bf/0x510
[   75.963822][ T3154]  ? security_inode_alloc+0x33/0x120
[   75.969174][ T3154]  __should_failslab+0xac/0xf0
[   75.973983][ T3154]  should_failslab+0x9/0x20
[   75.978539][ T3154]  kmem_cache_alloc+0x3b/0x320
[   75.983350][ T3154]  security_inode_alloc+0x33/0x120
[   75.988502][ T3154]  inode_init_always+0x6ee/0x950
[   75.993481][ T3154]  new_inode_pseudo+0xa2/0x1f0
[   75.998293][ T3154]  alloc_anon_inode+0x21/0x300
[   76.003101][ T3154]  ? __alloc_percpu+0x24/0x30
[   76.007810][ T3154]  aio_setup_ring+0xfc/0xbc0
[   76.012439][ T3154]  ? free_ioctx_reqs+0x160/0x160
[   76.017428][ T3154]  ioctx_alloc+0x31d/0x720
[   76.021877][ T3154]  __se_sys_io_setup+0x6f/0x230
[   76.026781][ T3154]  __x64_sys_io_setup+0x5b/0x70
[   76.031657][ T3154]  x64_sys_call+0x840/0x9a0
[   76.036192][ T3154]  do_syscall_64+0x4c/0xa0
[   76.040651][ T3154]  ? clear_bhb_loop+0x30/0x80
[   76.045375][ T3154]  ? clear_bhb_loop+0x30/0x80
[   76.050085][ T3154]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   76.056007][ T3154] RIP: 0033:0x7f07e419e159
[   76.060441][ T3154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.080074][ T3154] RSP: 002b:00007f07e5007028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   76.088522][ T3154] RAX: ffffffffffffffda RBX: 00007f07e4425fa0 RCX: 00007f07e419e159
[   76.096512][ T3154] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[   76.104510][ T3154] RBP: 00007f07e423506b R08: 0000000000000000 R09: 0000000000000000
[   76.112502][ T3154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.120496][ T3154] R13: 00007f07e4426038 R14: 00007f07e4425fa0 R15: 00007ffeac72a928
[   76.128501][ T3154]  </TASK>
[   76.308333][ T3156] loop2: detected capacity change from 0 to 40427
[   76.322906][ T3156] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   76.339580][ T3156] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   76.379089][ T3156] F2FS-fs (loop2): Found nat_bits in checkpoint
[   76.458239][ T3156] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   76.465330][ T3156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   76.578838][ T3175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1068'.
[   76.669335][ T3185] loop9: detected capacity change from 0 to 256
[   76.730679][ T3187] loop6: detected capacity change from 0 to 256
[   76.775320][ T3187] FAT-fs (loop6): error, clusters badly computed (0 != 128)
[   76.798630][ T3187] FAT-fs (loop6): Filesystem has been set read-only
[   76.819380][ T3141] loop4: detected capacity change from 0 to 131072
[   76.845219][ T3187] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   76.861220][ T3141] F2FS-fs (loop4): invalid crc value
[   76.868503][ T3189] input: syz0 as /devices/virtual/input/input8
[   76.871359][ T3190] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   76.892705][ T3195] loop2: detected capacity change from 0 to 256
[   76.915796][ T3141] F2FS-fs (loop4): Found nat_bits in checkpoint
[   77.054592][ T3141] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   77.090776][ T3183] loop3: detected capacity change from 0 to 40427
[   77.110436][ T3183] F2FS-fs (loop3): invalid crc value
[   77.139087][ T3183] F2FS-fs (loop3): Found nat_bits in checkpoint
[   77.201859][ T3214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'.
[   77.251019][ T3183] F2FS-fs (loop3): Start checkpoint disabled!
[   77.267418][ T3183] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   77.284223][ T3183] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   77.445292][  T308] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   77.473218][  T308] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   77.617506][ T3234] input: syz0 as /devices/virtual/input/input9
[   77.863779][ T3247] loop3: detected capacity change from 0 to 128
[   77.912839][ T3251] loop9: detected capacity change from 0 to 256
[   77.936667][ T3251] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777'
[   78.163984][ T3255] F2FS-fs (loop4): invalid crc value
[   78.170961][ T3255] F2FS-fs (loop4): Found nat_bits in checkpoint
[   78.210739][ T3255] F2FS-fs (loop4): Start checkpoint disabled!
[   78.217640][ T3255] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   78.235320][ T3255] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   78.440734][ T3281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   78.520717][ T2732] EXT4-fs (loop2): unmounting filesystem.
[   78.542853][ T3294] input: syz0 as /devices/virtual/input/input10
[   78.611791][ T3282] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   78.620064][ T3282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   78.655885][ T3282] F2FS-fs (loop3): Found nat_bits in checkpoint
[   78.720146][ T3282] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   78.727426][ T3282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   78.903710][ T3320] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   78.918640][   T28] kauditd_printk_skb: 77 callbacks suppressed
[   78.918655][   T28] audit: type=1400 audit(1789717829.293:547): avc:  denied  { append } for  pid=3319 comm="syz.3.1111" name="file1" dev="loop3" ino=1048693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   78.948399][   T28] audit: type=1400 audit(1789717829.323:548): avc:  denied  { map } for  pid=3319 comm="syz.3.1111" path="/98/file2/file1" dev="loop3" ino=1048693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   78.950377][ T3320] syz.3.1111: attempt to access beyond end of device
[   78.950377][ T3320] loop3: rw=524288, sector=440, nr_sectors = 256 limit=256
[   78.971954][   T28] audit: type=1400 audit(1789717829.323:549): avc:  denied  { execute } for  pid=3319 comm="syz.3.1111" path="/98/file2/file1" dev="loop3" ino=1048693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   79.010620][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.010620][ T3320] loop3: rw=524288, sector=696, nr_sectors = 256 limit=256
[   79.025443][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.025443][ T3320] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[   79.039225][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.039225][ T3320] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[   79.052608][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.052608][ T3320] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[   79.065871][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.065871][ T3320] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[   79.079098][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.079098][ T3320] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[   79.092347][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.092347][ T3320] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[   79.105586][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.105586][ T3320] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[   79.118993][ T3320] syz.3.1111: attempt to access beyond end of device
[   79.118993][ T3320] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[   79.694158][ T3336] input: syz0 as /devices/virtual/input/input11
[   79.715027][ T3340] netlink: 'syz.2.1119': attribute type 3 has an invalid length.
[   79.728129][ T3340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'.
[   79.761803][ T3342] input: syz1 as /devices/virtual/input/input12
[   79.800299][   T28] audit: type=1400 audit(1789717830.173:550): avc:  denied  { write } for  pid=3346 comm="syz.2.1124" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   79.869601][   T28] audit: type=1400 audit(1789717830.173:551): avc:  denied  { ioctl } for  pid=3346 comm="syz.2.1124" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   79.894904][ T3350] EXT4-fs: Ignoring removed nobh option
[   79.917167][   T28] audit: type=1400 audit(1789717830.213:552): avc:  denied  { create } for  pid=3348 comm="syz.9.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   79.940021][ T3364] ip_tables: iptables: counters copy to user failed while replacing table
[   79.962894][ T3350] EXT4-fs (loop9): 1 truncate cleaned up
[   79.976802][ T3350] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[   79.998841][ T3368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'.
[   80.032960][ T3362] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   80.085119][ T3362] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1130: bg 0: block 5: invalid block bitmap
[   80.117795][ T1843] EXT4-fs (loop9): unmounting filesystem.
[   80.143946][ T3362] EXT4-fs (loop2): Remounting filesystem read-only
[   80.159265][ T3362] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   80.182654][ T3362] EXT4-fs (loop2): Remounting filesystem read-only
[   80.203908][ T3362] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1130: invalid indirect mapped block 3 (level 2)
[   80.217645][ T3362] EXT4-fs (loop2): Remounting filesystem read-only
[   80.224267][ T3362] EXT4-fs (loop2): 2 truncates cleaned up
[   80.230427][ T3362] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   80.242761][ T3362] overlayfs: failed to set xattr on upper
[   80.249729][   T28] audit: type=1400 audit(1789717830.623:553): avc:  denied  { add_name } for  pid=3361 comm="syz.2.1130" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.270430][ T2732] EXT4-fs error (device loop2): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[   80.284503][ T2732] EXT4-fs (loop2): Remounting filesystem read-only
[   80.302626][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   80.314797][ T2732] EXT4-fs error (device loop2): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[   80.337406][ T3382] device bridge_slave_0 left promiscuous mode
[   80.359054][ T2732] EXT4-fs (loop2): Remounting filesystem read-only
[   80.367506][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.392079][ T3382] device bridge_slave_1 left promiscuous mode
[   80.398623][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.411065][ T3390] tipc: Started in network mode
[   80.416062][ T3390] tipc: Node identity aaaaaaaaaa1e, cluster identity 4711
[   80.426281][ T3390] tipc: Enabled bearer <eth:veth1_to_bond>, priority 10
[   80.490471][ T2732] EXT4-fs (loop2): unmounting filesystem.
[   80.518415][   T28] audit: type=1400 audit(1789717830.893:554): avc:  denied  { create } for  pid=3391 comm="syz.9.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   80.606753][   T28] audit: type=1400 audit(1789717830.973:555): avc:  denied  { mounton } for  pid=3401 comm="syz.3.1144" path="/104/file0" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   80.777195][ T1785] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   80.837467][ T3411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'.
[   80.848363][ T3411] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   80.892499][ T3409] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.907769][ T3409] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.918708][ T3409] device bridge_slave_0 entered promiscuous mode
[   80.957338][ T3409] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.966616][ T3409] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.974286][ T1785] usb 7-1: Using ep0 maxpacket: 16
[   80.980635][ T1785] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.997927][ T3409] device bridge_slave_1 entered promiscuous mode
[   81.007676][ T1785] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.034083][ T1785] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   81.053408][ T1785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   81.063543][ T1785] usb 7-1: SerialNumber: syz
[   81.093845][ T1785] usb 7-1: 0:2 : does not exist
[   81.178287][ T1663] device bridge_slave_1 left promiscuous mode
[   81.184502][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.207471][ T1663] device bridge_slave_0 left promiscuous mode
[   81.213861][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.229218][ T1663] device veth1_macvtap left promiscuous mode
[   81.237524][ T1663] device veth0_vlan left promiscuous mode
[   81.358200][ T3427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.370272][ T3427] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   81.397247][ T1788] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   81.415245][ T3429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'.
[   81.443331][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.451332][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.461186][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.470258][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.478956][  T438] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.486049][  T438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.493935][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.504028][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.513359][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.521821][  T438] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.528933][  T438] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.546987][ T1804] tipc: Node number set to 11840170
[   81.556485][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.566549][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.584400][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.594071][ T1788] usb 4-1: config 0 has no interfaces?
[   81.601842][ T1788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.615422][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.623834][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.631982][ T1788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.632948][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.640660][ T1788] usb 4-1: Product: syz
[   81.651797][ T3409] device veth0_vlan entered promiscuous mode
[   81.653622][ T1788] usb 4-1: Manufacturer: syz
[   81.662651][ T1788] usb 4-1: SerialNumber: syz
[   81.668564][ T1788] usb 4-1: config 0 descriptor??
[   81.679162][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.689216][ T3409] device veth1_macvtap entered promiscuous mode
[   81.701418][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.712407][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.871467][ T3460] set_capacity_and_notify: 6 callbacks suppressed
[   81.871485][ T3460] loop4: detected capacity change from 0 to 128
[   81.902297][ T1785] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[   81.910736][  T308] usb 4-1: USB disconnect, device number 3
[   81.927577][ T1785] usb 7-1: USB disconnect, device number 3
[   82.213630][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.221200][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.228695][ T3471] device bridge_slave_0 entered promiscuous mode
[   82.237887][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.245242][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.253605][ T3471] device bridge_slave_1 entered promiscuous mode
[   82.302794][ T3478] x86/PAT: syz.1.1173:3478 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[   82.381008][ T3490] tap0: tun_chr_ioctl cmd 1074025677
[   82.386805][ T3490] tap0: linktype set to 825
[   82.398736][ T3490] tap0: tun_chr_ioctl cmd 35108
[   82.412764][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.419871][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.427201][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.434248][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.462600][ T3492] loop6: detected capacity change from 0 to 128
[   82.470380][ T3490] tap0: tun_chr_ioctl cmd 2148553947
[   82.475210][ T3492] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   82.518415][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.546187][ T2867] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.559390][ T2867] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.587963][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.609314][ T3269] Buffer I/O error on dev loop6, logical block 156, lost async page write
[   82.620191][ T3269] Buffer I/O error on dev loop6, logical block 157, lost async page write
[   82.620707][ T2867] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.630469][ T3269] Buffer I/O error on dev loop6, logical block 158, lost async page write
[   82.635789][ T2867] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.644851][ T3269] Buffer I/O error on dev loop6, logical block 159, lost async page write
[   82.659550][ T2867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.670084][ T3269] Buffer I/O error on dev loop6, logical block 160, lost async page write
[   82.679849][ T3269] Buffer I/O error on dev loop6, logical block 161, lost async page write
[   82.682352][ T2867] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.689219][ T3269] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   82.695474][ T2867] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.720367][ T3503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1184'.
[   82.736882][ T3505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1184'.
[   82.767837][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.803601][ T1663] device bridge_slave_1 left promiscuous mode
[   82.811609][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.824277][ T3502] ==================================================================
[   82.832408][ T3502] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0
[   82.840086][ T3502] Write of size 8 at addr ffff888126bb4190 by task syz.3.1183/3502
[   82.847999][ T3502] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   82.850346][ T3502] CPU: 1 PID: 3502 Comm: syz.3.1183 Not tainted syzkaller #0
[   82.857752][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   82.867183][   T28] audit: type=1400 audit(1789717833.193:556): avc:  denied  { write } for  pid=278 comm="syz-executor" path="pipe:[14291]" dev="pipefs" ino=14291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   82.867828][ T3502] Call Trace:
[   82.867836][ T3502]  <TASK>
[   82.897155][ T3502]  __dump_stack+0x21/0x24
[   82.901533][ T3502]  dump_stack_lvl+0x110/0x170
[   82.906254][ T3502]  ? __cfi_dump_stack_lvl+0x8/0x8
[   82.911332][ T3502]  ? rcu_segcblist_enqueue+0x9c/0xb0
[   82.916652][ T3502]  print_address_description+0x71/0x200
[   82.922234][ T3502]  print_report+0x4a/0x60
[   82.926593][ T3502]  kasan_report+0x122/0x150
[   82.931129][ T3502]  ? rcu_segcblist_enqueue+0x9c/0xb0
[   82.936451][ T3502]  __asan_report_store8_noabort+0x17/0x20
[   82.942208][ T3502]  rcu_segcblist_enqueue+0x9c/0xb0
[   82.947358][ T3502]  call_rcu+0x554/0xf50
[   82.951557][ T3502]  ? __cfi_call_rcu+0x10/0x10
[   82.956269][ T3502]  ? __kasan_check_write+0x14/0x20
[   82.961417][ T3502]  ? selinux_inode_free_security+0x21f/0x230
[   82.967435][ T3502]  security_inode_free+0xc5/0xe0
[   82.972407][ T3502]  __destroy_inode+0x175/0x500
[   82.977210][ T3502]  evict+0x777/0x8c0
[   82.981149][ T3502]  ? proc_nr_inodes+0x2f0/0x2f0
[   82.986033][ T3502]  ? _raw_spin_lock+0x94/0xf0
[   82.990747][ T3502]  ? __cfi__raw_spin_lock+0x10/0x10
[   82.995996][ T3502]  ? __kasan_check_write+0x14/0x20
[   83.001159][ T3502]  iput+0x633/0x690
[   83.004999][ T3502]  dentry_unlink_inode+0x346/0x3f0
[   83.010147][ T3502]  __dentry_kill+0x46c/0x680
[   83.014785][ T3502]  dentry_kill+0xc0/0x2a0
[   83.019157][ T3502]  dput+0x42/0x80
[   83.022835][ T3502]  __fput+0x5c0/0x8f0
[   83.026856][ T3502]  ____fput+0x15/0x20
[   83.030874][ T3502]  task_work_run+0x1e1/0x250
[   83.035518][ T3502]  ? __cfi_task_work_run+0x10/0x10
[   83.040695][ T3502]  ? free_nsproxy+0x21f/0x270
[   83.045405][ T3502]  do_exit+0xb0d/0x29f0
[   83.049593][ T3502]  ? __cfi_do_exit+0x10/0x10
[   83.054207][ T3502]  ? xfd_validate_state+0x70/0x150
[   83.059365][ T3502]  ? __kasan_check_write+0x14/0x20
[   83.064501][ T3502]  __x64_sys_exit+0x40/0x40
[   83.069031][ T3502]  x64_sys_call+0x67/0x9a0
[   83.073465][ T3502]  do_syscall_64+0x4c/0xa0
[   83.077904][ T3502]  ? clear_bhb_loop+0x30/0x80
[   83.082602][ T3502]  ? clear_bhb_loop+0x30/0x80
[   83.087297][ T3502]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   83.093214][ T3502] RIP: 0033:0x7f0d1839e159
[   83.097643][ T3502] Code: Unable to access opcode bytes at 0x7f0d1839e12f.
[   83.104679][ T3502] RSP: 002b:00007f0d1924cef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[   83.113116][ T3502] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0d1839e159
[   83.121104][ T3502] RDX: 00007f0d1924d9c8 RSI: 0000000000000000 RDI: 0000000000000000
[   83.129095][ T3502] RBP: 00007f0d1843506b R08: 0000000000000000 R09: 0000000000000058
[   83.137091][ T3502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.145081][ T3502] R13: 00007f0d18626038 R14: 00007f0d18625fa0 R15: 00007ffcef905108
[   83.153084][ T3502]  </TASK>
[   83.156145][ T3502] 
[   83.158477][ T3502] Allocated by task 3500:
[   83.162819][ T3502]  kasan_set_track+0x4b/0x70
[   83.167430][ T3502]  kasan_save_alloc_info+0x1f/0x30
[   83.172550][ T3502]  __kasan_kmalloc+0x95/0xb0
[   83.177155][ T3502]  __kmalloc+0xb4/0x1e0
[   83.181325][ T3502]  l2tp_session_create+0x38/0xbd0
[   83.186367][ T3502]  pppol2tp_connect+0xbf5/0x1640
[   83.191323][ T3502]  __sys_connect+0x3da/0x460
[   83.195927][ T3502]  __x64_sys_connect+0x7a/0x90
[   83.200706][ T3502]  x64_sys_call+0x88d/0x9a0
[   83.205220][ T3502]  do_syscall_64+0x4c/0xa0
[   83.209674][ T3502]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   83.215579][ T3502] 
[   83.217909][ T3502] Freed by task 398:
[   83.221814][ T3502]  kasan_set_track+0x4b/0x70
[   83.226420][ T3502]  kasan_save_free_info+0x2b/0x40
[   83.231452][ T3502]  ____kasan_slab_free+0x132/0x180
[   83.236582][ T3502]  __kasan_slab_free+0x11/0x20
[   83.241356][ T3502]  slab_free_freelist_hook+0xc2/0x190
[   83.246743][ T3502]  __kmem_cache_free+0xb7/0x1b0
[   83.251610][ T3502]  kfree+0x6f/0xf0
[   83.255342][ T3502]  l2tp_session_put+0xaf/0x1a0
[   83.260118][ T3502]  l2tp_session_delete+0x3df/0x4d0
[   83.265251][ T3502]  l2tp_tunnel_del_work+0x199/0x410
[   83.270474][ T3502]  process_one_work+0x717/0xc30
[   83.275349][ T3502]  worker_thread+0xa4d/0x11d0
[   83.280044][ T3502]  kthread+0x281/0x320
[   83.284126][ T3502]  ret_from_fork+0x1f/0x30
[   83.288557][ T3502] 
[   83.290893][ T3502] Last potentially related work creation:
[   83.296611][ T3502]  kasan_save_stack+0x3a/0x60
[   83.301316][ T3502]  __kasan_record_aux_stack+0xb6/0xc0
[   83.306725][ T3502]  kasan_record_aux_stack_noalloc+0xb/0x10
[   83.312541][ T3502]  call_rcu+0xcf/0xf50
[   83.316631][ T3502]  pppol2tp_release+0x1e3/0x2b0
[   83.321503][ T3502]  sock_close+0xc9/0x220
[   83.325759][ T3502]  __fput+0x1fd/0x8f0
[   83.329767][ T3502]  ____fput+0x15/0x20
[   83.333767][ T3502]  task_work_run+0x1e1/0x250
[   83.338368][ T3502]  do_exit+0xb0d/0x29f0
[   83.342549][ T3502]  __cfi___ia32_sys_exit+0x0/0x10
[   83.347593][ T3502]  x64_sys_call+0x67/0x9a0
[   83.352024][ T3502]  do_syscall_64+0x4c/0xa0
[   83.356456][ T3502]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   83.362359][ T3502] 
[   83.364699][ T3502] The buggy address belongs to the object at ffff888126bb4000
[   83.364699][ T3502]  which belongs to the cache kmalloc-512 of size 512
[   83.378758][ T3502] The buggy address is located 400 bytes inside of
[   83.378758][ T3502]  512-byte region [ffff888126bb4000, ffff888126bb4200)
[   83.392126][ T3502] 
[   83.394463][ T3502] The buggy address belongs to the physical page:
[   83.400882][ T3502] page:ffffea00049aed00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126bb4
[   83.411125][ T3502] head:ffffea00049aed00 order:2 compound_mapcount:0 compound_pincount:0
[   83.419454][ T3502] flags: 0x4000000000010200(slab|head|zone=1)
[   83.425550][ T3502] raw: 4000000000010200 ffffea00045ff700 dead000000000003 ffff888100042f00
[   83.434146][ T3502] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   83.442737][ T3502] page dumped because: kasan: bad access detected
[   83.449158][ T3502] page_owner tracks the page as allocated
[   83.454874][ T3502] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1789, tgid 1789 (kworker/1:14), ts 75138382539, free_ts 75058505396
[   83.475541][ T3502]  post_alloc_hook+0x1f5/0x210
[   83.480326][ T3502]  prep_new_page+0x1c/0x110
[   83.484846][ T3502]  get_page_from_freelist+0x2ca9/0x2d20
[   83.490404][ T3502]  __alloc_pages+0x1fa/0x610
[   83.495095][ T3502]  alloc_slab_page+0x6e/0xf0
[   83.499694][ T3502]  new_slab+0x98/0x3e0
[   83.503770][ T3502]  ___slab_alloc+0x70f/0xb70
[   83.508390][ T3502]  __slab_alloc+0x5e/0xa0
[   83.512740][ T3502]  __kmem_cache_alloc_node+0x204/0x2d0
[   83.518246][ T3502]  __kmalloc+0xa4/0x1e0
[   83.522539][ T3502]  ___neigh_create+0x6e3/0x1db0
[   83.527404][ T3502]  __neigh_create+0x31/0x40
[   83.531923][ T3502]  ip6_finish_output2+0xaaf/0x18b0
[   83.537046][ T3502]  ip6_finish_output+0x60b/0xbe0
[   83.541998][ T3502]  ip6_output+0x1fa/0x410
[   83.546342][ T3502]  ndisc_send_skb+0x7c8/0xcd0
[   83.551032][ T3502] page last free stack trace:
[   83.555712][ T3502]  free_unref_page_prepare+0x81b/0x820
[   83.561185][ T3502]  free_unref_page+0x93/0x530
[   83.565895][ T3502]  __free_pages+0x67/0x100
[   83.570326][ T3502]  __free_slab+0xc7/0x1a0
[   83.574666][ T3502]  discard_slab+0x29/0x40
[   83.579000][ T3502]  __slab_free+0x201/0x280
[   83.583432][ T3502]  ___cache_free+0xbf/0xd0
[   83.587861][ T3502]  qlist_free_all+0xc6/0x140
[   83.592460][ T3502]  kasan_quarantine_reduce+0x14a/0x170
[   83.597949][ T3502]  __kasan_slab_alloc+0x24/0x80
[   83.602810][ T3502]  slab_post_alloc_hook+0x4f/0x2d0
[   83.607944][ T3502]  kmem_cache_alloc+0x166/0x320
[   83.612851][ T3502]  getname_flags+0xba/0x510
[   83.617370][ T3502]  user_path_at_empty+0x2f/0x1c0
[   83.622324][ T3502]  do_readlinkat+0xd9/0x490
[   83.626847][ T3502]  __x64_sys_readlink+0x7f/0x90
[   83.631715][ T3502] 
[   83.634052][ T3502] Memory state around the buggy address:
[   83.639689][ T3502]  ffff888126bb4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.647760][ T3502]  ffff888126bb4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.655825][ T3502] >ffff888126bb4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.663884][ T3502]                          ^
[   83.668477][ T3502]  ffff888126bb4200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   83.676542][ T3502]  ffff888126bb4280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   83.684618][ T3502] ==================================================================
[   83.692677][ T3502] Disabling lock debugging due to kernel taint
[   83.715305][ T1663] device bridge_slave_0 left promiscuous mode
[   83.732461][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.793312][ T1663] device veth1_macvtap left promiscuous mode
[   83.799966][ T1663] device veth0_vlan left promiscuous mode
[   83.977446][  T438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.788093][ T1663] device bridge_slave_1 left promiscuous mode
[   84.794225][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.801876][ T1663] device bridge_slave_0 left promiscuous mode
[   84.808305][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.816167][ T1663] device bridge_slave_1 left promiscuous mode
[   84.822512][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.830072][ T1663] device bridge_slave_0 left promiscuous mode
[   84.836203][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.844346][ T1663] device bridge_slave_1 left promiscuous mode
[   84.850645][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.858184][ T1663] device bridge_slave_0 left promiscuous mode
[   84.864287][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.872690][ T1663] device veth1_macvtap left promiscuous mode
[   84.878724][ T1663] device veth0_vlan left promiscuous mode
[   84.884646][ T1663] device veth1_macvtap left promiscuous mode
[   84.890866][ T1663] device veth0_vlan left promiscuous mode
[   86.048021][ T1663] device bridge_slave_1 left promiscuous mode
[   86.054151][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.061739][ T1663] device bridge_slave_0 left promiscuous mode
[   86.068042][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.075996][ T1663] device veth1_macvtap left promiscuous mode
[   86.082108][ T1663] device veth0_vlan left promiscuous mode