last executing test programs:

1m25.847668861s ago: executing program 4 (id=293):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x100000000, 0x0, 0x2, r3}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)

1m23.84020309s ago: executing program 4 (id=301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = epoll_create1(0x80000)
epoll_pwait2(r2, &(0x7f0000001a40)=[{}], 0x1, &(0x7f0000001a80)={0x0, 0x3938700}, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xc3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001400000076000000bf910000000000007b080000000000008500000005000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
syz_emit_ethernet(0x16, &(0x7f0000000140)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'C', "988b2b"}}}}}, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
read$msr(r0, &(0x7f00000003c0)=""/219, 0xdb)
sendto$inet(r4, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0)

1m23.017096991s ago: executing program 4 (id=303):
socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r1, 0x0, 0x0, 0x100000000, 0x0, 0x2, r1}])

1m21.136381117s ago: executing program 4 (id=310):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x1400037e)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x100000000, 0x0, 0x2, r2}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r2, @ANYRESOCT=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

1m17.899761866s ago: executing program 4 (id=321):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x2, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x400600, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}}, 0xf0}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0xfffffffe, 0x2, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8a00}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x30040000}, 0x8004)

1m17.878050247s ago: executing program 32 (id=321):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x2, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x400600, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}}, 0xf0}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0xfffffffe, 0x2, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8a00}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x30040000}, 0x8004)

1m12.759082823s ago: executing program 1 (id=345):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
getegid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000400), 0x12)
pread64(r5, &(0x7f0000000340)=""/69, 0x45, 0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)

1m11.824387926s ago: executing program 1 (id=349):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
r3 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0xa2040, 0x30)
io_setup(0x20fe, &(0x7f0000000540)=<r4=>0x0)
io_submit(r4, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)='p', 0x8200, 0x600}])
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fd", 0x42, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x4, r8, 0x15, r2}, 0x10)
io_cancel(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000000)="f11760e292f91e302a456afc4e5238d88a60c623694b4c6697a2fc88f7e42a4155d8192b51c20cdf8d2c43523f3f92ef3a1a8bd33ef61cc846262b1ecdb5e243fa85d9469f4a0310b364db2ddd16ae060ba5d1c58916a032", 0x58, 0x47f7, 0x0, 0x0, r1}, &(0x7f0000000140))
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

1m10.794061621s ago: executing program 1 (id=353):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x100000000, 0x0, 0x2, r3}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r3, @ANYRESOCT=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

1m9.642673409s ago: executing program 1 (id=359):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x100000000, 0x0, 0x2, r3}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r3, @ANYRESOCT=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

1m8.080548928s ago: executing program 1 (id=365):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x100000000, 0x0, 0x2, r3}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x10}, 0x14)
fcntl$getflags(r1, 0x1)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r3, @ANYRESOCT=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

1m6.440371648s ago: executing program 0 (id=368):
socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r1, 0x0, 0x0, 0x100000000, 0x0, 0x2, r1}])

1m6.284527522s ago: executing program 1 (id=369):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0)
syz_emit_ethernet(0x56, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m6.206690574s ago: executing program 33 (id=369):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0)
syz_emit_ethernet(0x56, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m4.233138133s ago: executing program 0 (id=376):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0)
syz_emit_ethernet(0x56, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m2.7037312s ago: executing program 0 (id=383):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$clear(0x3, 0xfffffffffffffffd)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = epoll_create1(0x80000)
r5 = fcntl$dupfd(r3, 0x0, r3)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014})
r6 = gettid()
kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, 0x0)
setpgid(r0, r6)

1m1.639845646s ago: executing program 0 (id=385):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x1400037e)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x100000000, 0x0, 0x2, r2}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r2, @ANYRESOCT=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

1m0.739094258s ago: executing program 0 (id=388):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0)
syz_emit_ethernet(0x56, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

57.536552207s ago: executing program 0 (id=399):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getegid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000400), 0x12)
pread64(r5, &(0x7f0000000340)=""/69, 0x45, 0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)

57.450812079s ago: executing program 34 (id=399):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getegid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000400), 0x12)
pread64(r5, &(0x7f0000000340)=""/69, 0x45, 0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)

55.286832692s ago: executing program 5 (id=409):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560f, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)

54.352559715s ago: executing program 5 (id=413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000000)='exofs\x00', 0x108010, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa26}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000)
futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000000140)=0xfffffffd, 0xc6fffffd)
io_setup(0x1, &(0x7f0000000b80))
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0xc)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0)

53.376233219s ago: executing program 5 (id=416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = epoll_create1(0x80000)
epoll_pwait2(r2, &(0x7f0000001a40)=[{}], 0x1, &(0x7f0000001a80)={0x0, 0x3938700}, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xc3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf86000000000000070800", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001400000076000000bf910000000000007b080000000000008500000005000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000140)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'C', "988b2b"}}}}}, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)

53.295275611s ago: executing program 5 (id=418):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x1400037e)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x100000000, 0x0, 0x2, r2}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r2, @ANYRESOCT=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

51.575310644s ago: executing program 5 (id=421):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
inotify_init()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x100000000, 0x0, 0x2, r2}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r2, @ANYRESOCT=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

50.558895568s ago: executing program 5 (id=427):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
getegid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000400), 0x12)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/69, 0x45, 0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)

50.430225081s ago: executing program 35 (id=427):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
getegid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000400), 0x12)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/69, 0x45, 0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)

28.313040405s ago: executing program 8 (id=506):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a8, &(0x7f0000000240)="$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")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e20, @broadcast}, 0xc8)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@jqfmt_vfsold}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
setpriority(0x0, 0x0, 0x2a14b58)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)

26.979607168s ago: executing program 8 (id=510):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
r3 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0xa2040, 0x30)
io_setup(0x20fe, &(0x7f0000000540)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x600}])
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x4, r8, 0x15, r2}, 0x10)
io_cancel(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000000)="f11760e292f91e302a456afc4e5238d88a60c623694b4c6697a2fc88f7e42a4155d8192b51c20cdf8d2c43523f3f92ef3a1a8bd33ef61cc846262b1ecdb5e243fa85d9469f4a0310b364db2ddd16ae060ba5d1c58916a0", 0x57, 0x47f7, 0x0, 0x0, r1}, &(0x7f0000000140))
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

25.845908765s ago: executing program 8 (id=513):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000000)='exofs\x00', 0x108010, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa26}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000)
futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000000140)=0xfffffffd, 0xc6fffffd)
io_setup(0x1, &(0x7f0000000b80))
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0xc)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)

22.878266348s ago: executing program 8 (id=523):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x100000000, 0x0, 0x2, r3}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r3, @ANYRESOCT=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

22.071977038s ago: executing program 8 (id=526):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x5, &(0x7f0000000000)={0x6, 0x825, 0xfffffffffffffff9, 0x1000000a000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9657, 0x100, 0x9, 0x3, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffe, 0x2, 0x17, 0x16, 0xf, 0x5, 0x2200000006, 0xfffffffffffffffb, 0x3, 0x2000000000a})
ptrace(0x10, r0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@sb={'sb', 0x3d, 0x9}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@data_err_abort}, {@lazytime}, {@resuid}, {@nolazytime}, {@test_dummy_encryption_v1}, {@resgid}, {@lazytime}, {@sysvgroups}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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")
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_disconnect(r1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffddb, 0x0}, 0x900d0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

20.336410621s ago: executing program 8 (id=529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000000)='exofs\x00', 0x108010, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa26}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000)
futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000000140)=0xfffffffd, 0xc6fffffd)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)

20.315601491s ago: executing program 36 (id=529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000000)='exofs\x00', 0x108010, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa26}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000)
futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000000140)=0xfffffffd, 0xc6fffffd)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)

17.159845359s ago: executing program 9 (id=530):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000006a80)={0x2, 0xb, 0x3, 0xd01551cf19939c3f, 0x2, 0x0, 0x8008}, 0x10}}, 0x2004c8d4)
syz_emit_ethernet(0x56, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

15.09377798s ago: executing program 9 (id=547):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200880, &(0x7f0000000280)=ANY=[@ANYBLOB="6769643d00000000f3ffff1f0000000000000000", @ANYRES16, @ANYBLOB=',shortname=lower,shortname=winnt,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x11, 0x305, &(0x7f0000000300)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x7, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0x8800000, 0x863, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000800)={0x74, 0x38, 0x4, 0x70bd26, 0x25dfdbfd, {0x13}, [@typed={0x4e, 0xb1, 0x0, 0x0, @str='$\x00\x99\xd4|\xf1TGx\xd9\xd4}\xdf\xb4\xfe\xf1\x8dd\x92\x93\xf7-G\x03\xdc\xc4\xeaLl8,\x01\xab\xcba\xab*\xfb\x82\xe2n\x14UA\xbf`9(\x92\xd3\xa2\xa7a~&\xde3mE\xdd\x82`&\xeb\xdf\x8e%\xa2\x91<\xdd/\x00\x00'}, @typed={0x4, 0xd3}, @nested={0xc, 0xba, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @u32=0x729}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x2010)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac141421000000000000000000000000200100000000000000fffffffffffffffe0000000000000000000a"], 0xec}}, 0x0)

13.388030031s ago: executing program 9 (id=549):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x100000000, 0x0, 0x2, r3}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)

11.270941604s ago: executing program 3 (id=556):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x44}}, 0x0)
syz_emit_ethernet(0x56, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

10.60257948s ago: executing program 9 (id=558):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)
syz_emit_ethernet(0x56, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

10.333723017s ago: executing program 3 (id=561):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000006a80)={0x2, 0xb, 0x3, 0xd01551cf19939c3f, 0x2, 0x0, 0x8008}, 0x10}}, 0x2004c8d4)
syz_emit_ethernet(0x56, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

8.843156803s ago: executing program 3 (id=564):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200880, &(0x7f0000000280)=ANY=[@ANYBLOB="6769643d00000000f3ffff1f0000000000000000", @ANYRES16, @ANYBLOB=',shortname=lower,shortname=winnt,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x11, 0x305, &(0x7f0000000300)="$eJzs3UGLG2UYB/Cna7srK9vZgwgK4ote9DLsrl/AIC2IC8ralepBmLqzGjJNlkyopIh68+rnKB69CeIX2It3b9724rGHYiQZmyY1ogjboe3vB8n7JG/+8A5hwnMJz9n17272juv8uBjF2lsp1iJi7W7E9qxqXGieLjSv1mPRN/FGdv3Xlz/46ON3O/v7Vw5Sutq59uZeSunyKz998eX3r/48eu7DHy7/uBGn25+c/b732+kLpy+e/XHt826dunXqD0apSDcGg1FxoyrTUbfu5Sm9X5VFXaZuvy6HS/vH1eDkZJyK/tHW5smwrOtU9MepV47TaJBGw3EqPiu6/ZTnedraDP7N4Z2Dg6LT9ik4X8Nhp5jevBt/2zm808qBAIBW/ef+f/r+rNb/Pzn0/0+Daf+//tf9u0z/DwAAAAAAAAAAAAAAj4O7k0k2mUyy++vDjxWRSy0ck3PyP75/niALf9x7NqL69tbhrcNmbfY7x9GNKsrYiSzuRUzmmvrqO/tXdtLMdmzd/LrJT9dnlvO7kcX26vxuk0/L+UuxuZjfiyyeX53fW5lfj9dfW8jnkcUvn8YgqjiKafZB/qvdlN5+b/+h/MbscwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HfI0t3J+f57/036Tn8/X34ks7q2ez7+zcj7/xXjpYrvXDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD31ePbvaKqyqFCoVDMi7Z/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODRezD0u+2TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ6fLtXVFU5PMei7WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nPwZAAD//38rKVo=")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x7, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0x8800000, 0x863, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(r6, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000800)={0x74, 0x38, 0x4, 0x70bd26, 0x25dfdbfd, {0x13}, [@typed={0x4e, 0xb1, 0x0, 0x0, @str='$\x00\x99\xd4|\xf1TGx\xd9\xd4}\xdf\xb4\xfe\xf1\x8dd\x92\x93\xf7-G\x03\xdc\xc4\xeaLl8,\x01\xab\xcba\xab*\xfb\x82\xe2n\x14UA\xbf`9(\x92\xd3\xa2\xa7a~&\xde3mE\xdd\x82`&\xeb\xdf\x8e%\xa2\x91<\xdd/\x00\x00'}, @typed={0x4, 0xd3}, @nested={0xc, 0xba, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @u32=0x729}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x2010)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac141421000000000000000000000000200100000000000000fffffffffffffffe0000000000000000000a"], 0xec}}, 0x0)

7.496025986s ago: executing program 2 (id=566):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200880, &(0x7f0000000280)=ANY=[@ANYBLOB="6769643d00000000f3ffff1f0000000000000000", @ANYRES16, @ANYBLOB=',shortname=lower,shortname=winnt,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x11, 0x305, &(0x7f0000000300)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x7, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0x8800000, 0x863, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000800)={0x74, 0x38, 0x4, 0x70bd26, 0x25dfdbfd, {0x13}, [@typed={0x4e, 0xb1, 0x0, 0x0, @str='$\x00\x99\xd4|\xf1TGx\xd9\xd4}\xdf\xb4\xfe\xf1\x8dd\x92\x93\xf7-G\x03\xdc\xc4\xeaLl8,\x01\xab\xcba\xab*\xfb\x82\xe2n\x14UA\xbf`9(\x92\xd3\xa2\xa7a~&\xde3mE\xdd\x82`&\xeb\xdf\x8e%\xa2\x91<\xdd/\x00\x00'}, @typed={0x4, 0xd3}, @nested={0xc, 0xba, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @u32=0x729}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x2010)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac141421000000000000000000000000200100000000000000fffffffffffffffe0000000000000000000a"], 0xec}}, 0x0)

7.135939775s ago: executing program 3 (id=568):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20)
lseek(r0, 0x0, 0x2)
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000))
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402)
writev(r4, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}], 0x3)

6.552045339s ago: executing program 9 (id=569):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
getegid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000400), 0x12)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/69, 0x45, 0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)

6.551825279s ago: executing program 37 (id=569):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
getegid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000400), 0x12)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/69, 0x45, 0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)

5.467269236s ago: executing program 3 (id=572):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x100000000, 0x0, 0x2, r3}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r3, @ANYRESOCT=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

5.466494996s ago: executing program 2 (id=573):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
getegid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000400), 0x12)
pread64(r5, &(0x7f0000000340)=""/69, 0x45, 0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c)

4.362082973s ago: executing program 2 (id=576):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x5, &(0x7f0000000000)={0x6, 0x825, 0xfffffffffffffff9, 0x1000000a000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9657, 0x100, 0x9, 0x3, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffe, 0x2, 0x17, 0x16, 0xf, 0x5, 0x2200000006, 0xfffffffffffffffb, 0x3, 0x2000000000a})
ptrace(0x10, r0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@sb={'sb', 0x3d, 0x9}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@data_err_abort}, {@lazytime}, {@resuid}, {@nolazytime}, {@test_dummy_encryption_v1}, {@resgid}, {@lazytime}, {@sysvgroups}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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")
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xd, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_disconnect(r1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffddb, 0x0}, 0x900d0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

3.396107987s ago: executing program 3 (id=579):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x5, &(0x7f0000000000)={0x6, 0x825, 0xfffffffffffffff9, 0x1000000a000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9657, 0x100, 0x9, 0x3, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffe, 0x2, 0x17, 0x16, 0xf, 0x5, 0x2200000006, 0xfffffffffffffffb, 0x3, 0x2000000000a})
ptrace(0x10, r0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@sb={'sb', 0x3d, 0x9}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@data_err_abort}, {@lazytime}, {@resuid}, {@nolazytime}, {@test_dummy_encryption_v1}, {@resgid}, {@lazytime}, {@sysvgroups}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3E1vFOcdAPD/rtc2LlC79I23lm1pVatVMTavhx4AtRKXSpVaVfS4tQ2iGKiwK4FlFVNVIPXQik/QNrdI+QQ5JZcoiXJIlGtQrlEkFPkCySGaaHZnNrveXXtt1l4Z/37SLs/MPjPz/Gfmwc/Lzgawa5XTt0LEvoj4KCJGa4vNGcq1f56vLE1/vrI0XYgk+f1nhWq+ZytL03nWfLu92cJ4MaL4z0IcaT3s8Py9xRuVubnZO9mKiYVilrpZuTZ7bfbW1Pnzp0+NnDs7daYncaZlenb477ePHrr8p8e/nb7y+M/vvJaWN8k+b4yjZqz6PtT1EQZa1pSj3HwuG/y0+6LvCPsb0oVS+l7sX2HoWnrXppdrsFr/R2OgulQzGr/5R18LB2ypJEmS4Za19b9ly0mjQqG2QZI8SICXQCH6XQKgP/I/9M9W0p7q0nRrP/jl9vRiVHtAadzPs1ftk1K1B1seq/WNBrfo+N+JiCvLX/w3fUXbcQgAgN5642LEo0u1dkf+qn1SjO815PtmNjc0FhHfiogDEfHtrP3y3Yhq3u9HxMGGbfZ3MQtQXrXc2v75YCRLNDZXeyZt//0qm9tqbv/VSz42kC3tr8Y/WLh6fW72ZHZOxmNwOF2ebN11fVjtzV9/+J9Oxy83tP/SV3r8vC2YlePT0qoBupnKQuVF4849fVA9sfdb4y9EqZCnIg5FxOFN7D89Z9d//urRTp83xZ/G2RL/vzvvvLSJAq2S/D/iZ7XrvxzV+POxz1rwQ1lqYuHmXyfm7y3+8nrj/OTkubNTZyb2xNzsyYn8rmj17vsPf5clW7oRzdc/SRquf141tnQiLb3+32h7/9dnLsfSVH2+dn7jx3j45FHHPs1m7/+hwh+q6Xx+9m5lYeHOZMRQYbl1/dTX296tjDTlT+MfP96+/h+I+PJ/2XZHIiK9iX8QET+MiGNZ2X8UET+OiONrxP/2pZ/8pVMXcv34t1Ya/8yGrv+9xZHIEvU1aeLCexHNa/LEwI23Xm858L/KLfEPRqfrf7qaGs/WzFQW9qwXV5sCtk288AkEAACAHeBYROyLQvFENtC0L4rFEyci9tZHUOYXfnH19t9uzdSeERiLwWI+0jXaMB46mY0Np8vpVlMNy+nnp6rjxkmSJCPpctp/nzvY39Bh19vbof6nPml9pAV42WxoHq3TE23AjrS6/j/pesvefyED2F49+B4NsEOp/7B7dV3/t+opOKBv2tX/+xHP+1AUYJu1q/9/bFlzYVvKAmyvdvXf3D/sDpsf//NlANjpjP/DrtTVQ/KbSBy4vEaeQqm7/ZS6fox/vUQx1v4VgLGo/6ZB3qZZe4cfFyN6c8YGenrmR5quabFtnj3Ri2NFcd08pQ38EMP2JoqVubn8AZe+l2c4Ita5e+s32/08sbjVBauem1f69z8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb3wVAAD//8B9zog=")
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffddb, 0x0}, 0x900d0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

2.958675428s ago: executing program 4 (id=571):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x5, &(0x7f0000000000)={0x6, 0x825, 0xfffffffffffffff9, 0x1000000a000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9657, 0x100, 0x9, 0x3, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffe, 0x2, 0x17, 0x16, 0xf, 0x5, 0x2200000006, 0xfffffffffffffffb, 0x3, 0x2000000000a})
ptrace(0x10, r0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@sb={'sb', 0x3d, 0x9}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@data_err_abort}, {@lazytime}, {@resuid}, {@nolazytime}, {@test_dummy_encryption_v1}, {@resgid}, {@lazytime}, {@sysvgroups}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3E1vFOcdAPD/rtc2LlC79I23lm1pVatVMTavhx4AtRKXSpVaVfS4tQ2iGKiwK4FlFVNVIPXQik/QNrdI+QQ5JZcoiXJIlGtQrlEkFPkCySGaaHZnNrveXXtt1l4Z/37SLs/MPjPz/Gfmwc/Lzgawa5XTt0LEvoj4KCJGa4vNGcq1f56vLE1/vrI0XYgk+f1nhWq+ZytL03nWfLu92cJ4MaL4z0IcaT3s8Py9xRuVubnZO9mKiYVilrpZuTZ7bfbW1Pnzp0+NnDs7daYncaZlenb477ePHrr8p8e/nb7y+M/vvJaWN8k+b4yjZqz6PtT1EQZa1pSj3HwuG/y0+6LvCPsb0oVS+l7sX2HoWnrXppdrsFr/R2OgulQzGr/5R18LB2ypJEmS4Za19b9ly0mjQqG2QZI8SICXQCH6XQKgP/I/9M9W0p7q0nRrP/jl9vRiVHtAadzPs1ftk1K1B1seq/WNBrfo+N+JiCvLX/w3fUXbcQgAgN5642LEo0u1dkf+qn1SjO815PtmNjc0FhHfiogDEfHtrP3y3Yhq3u9HxMGGbfZ3MQtQXrXc2v75YCRLNDZXeyZt//0qm9tqbv/VSz42kC3tr8Y/WLh6fW72ZHZOxmNwOF2ebN11fVjtzV9/+J9Oxy83tP/SV3r8vC2YlePT0qoBupnKQuVF4849fVA9sfdb4y9EqZCnIg5FxOFN7D89Z9d//urRTp83xZ/G2RL/vzvvvLSJAq2S/D/iZ7XrvxzV+POxz1rwQ1lqYuHmXyfm7y3+8nrj/OTkubNTZyb2xNzsyYn8rmj17vsPf5clW7oRzdc/SRquf141tnQiLb3+32h7/9dnLsfSVH2+dn7jx3j45FHHPs1m7/+hwh+q6Xx+9m5lYeHOZMRQYbl1/dTX296tjDTlT+MfP96+/h+I+PJ/2XZHIiK9iX8QET+MiGNZ2X8UET+OiONrxP/2pZ/8pVMXcv34t1Ya/8yGrv+9xZHIEvU1aeLCexHNa/LEwI23Xm858L/KLfEPRqfrf7qaGs/WzFQW9qwXV5sCtk288AkEAACAHeBYROyLQvFENtC0L4rFEyci9tZHUOYXfnH19t9uzdSeERiLwWI+0jXaMB46mY0Np8vpVlMNy+nnp6rjxkmSJCPpctp/nzvY39Bh19vbof6nPml9pAV42WxoHq3TE23AjrS6/j/pesvefyED2F49+B4NsEOp/7B7dV3/t+opOKBv2tX/+xHP+1AUYJu1q/9/bFlzYVvKAmyvdvXf3D/sDpsf//NlANjpjP/DrtTVQ/KbSBy4vEaeQqm7/ZS6fox/vUQx1v4VgLGo/6ZB3qZZe4cfFyN6c8YGenrmR5quabFtnj3Ri2NFcd08pQ38EMP2JoqVubn8AZe+l2c4Ita5e+s32/08sbjVBauem1f69z8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb3wVAAD//8B9zog=")
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_disconnect(r1)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffddb, 0x0}, 0x900d0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

1.341976948s ago: executing program 2 (id=582):
r0 = socket(0x11, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x3, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x100000000, 0x0, 0x2, r3}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x10}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
fcntl$getflags(r1, 0x1)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000056c0)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYRES64=r3, @ANYRESOCT=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x3000c896}, 0x44840)

822.39699ms ago: executing program 2 (id=592):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "d861bb99d1df3f8992a457c5d97dd5a5b5804ce8946b5d8b0fb1dc5d0e35fc81a63048e2163aebc369d1ab59"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000010500001400128009000100626f6e64"], 0x34}}, 0x0)
connect$netlink(r4, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfa, 0x20000000}, 0xc)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, 0x0, 0xa)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x8000)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x2c, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x40)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5fa}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x4000890)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x8015)

582.155786ms ago: executing program 2 (id=599):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1d8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1ac, 0x2, [@TCA_BPF_ACT={0x1a8, 0x1, [@m_xt={0x138, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x10d, 0x6, "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"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x40, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x18, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

550.526787ms ago: executing program 38 (id=599):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1d8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1ac, 0x2, [@TCA_BPF_ACT={0x1a8, 0x1, [@m_xt={0x138, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x10d, 0x6, "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"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x40, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x18, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

399.475591ms ago: executing program 7 (id=601):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}})

326.122923ms ago: executing program 7 (id=603):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a4}, 0xc810)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002380)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

253.942764ms ago: executing program 6 (id=604):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})

200.287935ms ago: executing program 6 (id=605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

173.036076ms ago: executing program 7 (id=606):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}]}, 0x6c}}, 0x400c040)

172.670086ms ago: executing program 6 (id=607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xf5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008894)

133.008457ms ago: executing program 7 (id=608):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0xffff, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0xfffffffffffffffc, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
r1 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804)

113.211358ms ago: executing program 6 (id=609):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f000000c000)={0x0, 0x0, &(0x7f000000c040)={&(0x7f000000c080)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x10a}, {0xa, 0xa}}}, 0x24}}, 0x0)

91.711188ms ago: executing program 7 (id=610):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000008, 0x11, r1, 0xaca5f000)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x48080)

43.307779ms ago: executing program 6 (id=611):
unshare(0x8040480)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

42.539389ms ago: executing program 7 (id=612):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4)
r1 = socket$key(0xf, 0x3, 0x2)
recvfrom(0xffffffffffffffff, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20000090)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc00000000000000e9ffffffffffffffe000000100000000000000000000000000000004000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

0s ago: executing program 6 (id=613):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x28, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb4}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0)

kernel console output (not intermixed with test programs):

loop3: detected capacity change from 0 to 512
[  127.614415][ T1337] EXT4-fs (loop1): 2 truncates cleaned up
[  127.625855][ T1337] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.042245][ T1343] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.242: invalid indirect mapped block 4294967295 (level 1)
[  128.057048][ T1343] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.242: invalid indirect mapped block 4294967295 (level 1)
[  128.071678][ T1343] EXT4-fs (loop3): 2 truncates cleaned up
[  128.077449][ T1343] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.148189][  T307] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  128.188830][ T1354] loop1: detected capacity change from 0 to 512
[  128.258749][ T1354] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.244: invalid indirect mapped block 4294967295 (level 1)
[  128.295691][ T1354] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.244: invalid indirect mapped block 4294967295 (level 1)
[  128.310273][ T1354] EXT4-fs (loop1): 2 truncates cleaned up
[  128.318307][ T1354] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.321808][ T1359] loop4: detected capacity change from 0 to 512
[  128.343631][   T30] audit: type=1400 audit(1788566947.717:159): avc:  denied  { read append open } for  pid=1353 comm="syz.1.244" path="/42/file0/blkio.throttle.io_service_bytes" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  128.411473][ T1359] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.247: invalid indirect mapped block 4294967295 (level 1)
[  128.473531][ T1359] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.247: invalid indirect mapped block 4294967295 (level 1)
[  128.498676][ T1359] EXT4-fs (loop4): 2 truncates cleaned up
[  128.504491][ T1359] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.568255][  T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  128.592624][  T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  128.615918][  T307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  128.634232][  T307] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  128.643638][  T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.662063][  T307] usb 1-1: config 0 descriptor??
[  128.698262][ T1324] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  128.998384][   T30] audit: type=1400 audit(1788566948.377:160): avc:  denied  { watch watch_reads } for  pid=1353 comm="syz.1.244" path="/42/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  129.038664][   T30] audit: type=1400 audit(1788566948.397:161): avc:  denied  { read } for  pid=1353 comm="syz.1.244" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  129.078307][   T30] audit: type=1400 audit(1788566948.397:162): avc:  denied  { bind } for  pid=1353 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  129.159517][  T307] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  129.189288][  T307] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  129.251175][ T1370] loop1: detected capacity change from 0 to 512
[  129.366194][  T307] usb 1-1: USB disconnect, device number 9
[  129.375744][ T1370] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  129.405908][ T1370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  129.416421][ T1370] EXT4-fs (loop1): orphan cleanup on readonly fs
[  129.428295][ T1370] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.249: attempt to clear invalid blocks 1024 len 1
[  129.448539][ T1370] EXT4-fs (loop1): Remounting filesystem read-only
[  129.469976][ T1370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.249: bg 0: block 361: padding at end of block bitmap is not set
[  129.497835][ T1374] loop3: detected capacity change from 0 to 512
[  129.515422][ T1370] EXT4-fs (loop1): Remounting filesystem read-only
[  129.522118][ T1370] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  129.531243][ T1370] EXT4-fs (loop1): Remounting filesystem read-only
[  129.538019][ T1370] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.249: invalid indirect mapped block 1811939328 (level 0)
[  129.552233][ T1370] EXT4-fs (loop1): Remounting filesystem read-only
[  129.559153][ T1370] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.249: invalid indirect mapped block 2185560079 (level 1)
[  129.573327][ T1370] EXT4-fs (loop1): Remounting filesystem read-only
[  129.580104][ T1370] EXT4-fs (loop1): 1 truncate cleaned up
[  129.585803][ T1370] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  129.615714][ T1374] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  129.638421][ T1380] loop2: detected capacity change from 0 to 512
[  129.645506][ T1374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  129.655667][ T1374] EXT4-fs (loop3): orphan cleanup on readonly fs
[  129.663193][ T1380] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  129.683312][ T1374] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.251: attempt to clear invalid blocks 1024 len 1
[  129.696696][ T1380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  129.704910][ T1374] EXT4-fs (loop3): Remounting filesystem read-only
[  129.705851][ T1380] EXT4-fs (loop2): orphan cleanup on readonly fs
[  129.728906][ T1374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.251: bg 0: block 361: padding at end of block bitmap is not set
[  129.743647][ T1380] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.252: attempt to clear invalid blocks 1024 len 1
[  129.756802][ T1374] EXT4-fs (loop3): Remounting filesystem read-only
[  129.758916][ T1380] EXT4-fs (loop2): Remounting filesystem read-only
[  129.763430][ T1374] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  129.786572][ T1380] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.252: bg 0: block 361: padding at end of block bitmap is not set
[  129.788355][ T1374] EXT4-fs (loop3): Remounting filesystem read-only
[  129.807581][ T1374] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.251: invalid indirect mapped block 1811939328 (level 0)
[  129.821647][ T1380] EXT4-fs (loop2): Remounting filesystem read-only
[  129.828237][ T1374] EXT4-fs (loop3): Remounting filesystem read-only
[  129.828259][ T1380] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  129.828320][ T1374] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.251: invalid indirect mapped block 2185560079 (level 1)
[  129.845057][ T1380] EXT4-fs (loop2): Remounting filesystem read-only
[  129.864212][ T1380] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.252: invalid indirect mapped block 1811939328 (level 0)
[  129.878307][  T307] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  129.881079][ T1380] EXT4-fs (loop2): Remounting filesystem read-only
[  129.892601][ T1380] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.252: invalid indirect mapped block 2185560079 (level 1)
[  129.906747][ T1380] EXT4-fs (loop2): Remounting filesystem read-only
[  129.913508][ T1374] EXT4-fs (loop3): Remounting filesystem read-only
[  129.913880][ T1380] EXT4-fs (loop2): 1 truncate cleaned up
[  129.925288][ T1374] EXT4-fs (loop3): 1 truncate cleaned up
[  129.929683][ T1380] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  129.932699][ T1374] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  130.118048][ T1388] ip6t_rpfilter: unknown options
[  130.268191][  T366] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  130.275791][  T396] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  130.542567][  T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  130.558179][  T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  130.578194][  T307] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  130.598187][  T307] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.607533][  T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.629088][  T307] usb 2-1: config 0 descriptor??
[  130.648247][ T1370] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  130.678270][  T366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  130.689509][  T396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  130.700910][  T366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  130.712316][  T396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  130.737976][  T366] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  130.751365][  T396] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  130.764528][  T396] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.773702][  T366] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.784481][  T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.792581][  T366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.802145][  T396] usb 4-1: config 0 descriptor??
[  130.810540][  T366] usb 3-1: config 0 descriptor??
[  130.838268][ T1374] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  130.838268][ T1380] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  131.002785][ T1397] loop4: detected capacity change from 0 to 512
[  131.036475][ T1397] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  131.067818][ T1397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  131.076347][ T1397] EXT4-fs (loop4): orphan cleanup on readonly fs
[  131.083440][ T1397] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.256: attempt to clear invalid blocks 1024 len 1
[  131.096824][ T1397] EXT4-fs (loop4): Remounting filesystem read-only
[  131.103864][ T1397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.256: bg 0: block 361: padding at end of block bitmap is not set
[  131.118682][ T1397] EXT4-fs (loop4): Remounting filesystem read-only
[  131.120872][  T307] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  131.125220][ T1397] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  131.125695][ T1397] EXT4-fs (loop4): Remounting filesystem read-only
[  131.147908][  T307] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  131.148626][ T1397] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.256: invalid indirect mapped block 1811939328 (level 0)
[  131.193834][ T1397] EXT4-fs (loop4): Remounting filesystem read-only
[  131.201602][ T1397] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.256: invalid indirect mapped block 2185560079 (level 1)
[  131.215910][ T1397] EXT4-fs (loop4): Remounting filesystem read-only
[  131.231835][ T1397] EXT4-fs (loop4): 1 truncate cleaned up
[  131.237650][ T1397] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  131.289683][  T396] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  131.303956][  T396] plantronics 0003:047F:FFFF.0017: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  131.326570][  T307] usb 2-1: USB disconnect, device number 11
[  131.358774][  T366] usbhid 3-1:0.0: can't add hid device: -71
[  131.364964][  T366] usbhid: probe of 3-1:0.0 failed with error -71
[  131.380116][  T366] usb 3-1: USB disconnect, device number 8
[  131.686067][  T396] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  131.699217][  T467] usb 4-1: USB disconnect, device number 7
[  132.058286][  T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  132.069463][  T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  132.080897][  T396] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.094140][  T396] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.103560][  T396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.112979][  T396] usb 5-1: config 0 descriptor??
[  132.128295][ T1397] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  132.855042][ T1427] loop3: detected capacity change from 0 to 512
[  132.901214][ T1427] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  132.913048][ T1427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  132.921704][ T1427] EXT4-fs (loop3): orphan cleanup on readonly fs
[  132.928765][ T1427] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.262: attempt to clear invalid blocks 1024 len 1
[  132.942078][ T1427] EXT4-fs (loop3): Remounting filesystem read-only
[  132.949423][ T1427] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.262: bg 0: block 361: padding at end of block bitmap is not set
[  132.964305][ T1427] EXT4-fs (loop3): Remounting filesystem read-only
[  132.971161][ T1427] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  132.980380][ T1427] EXT4-fs (loop3): Remounting filesystem read-only
[  132.987079][ T1427] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.262: invalid indirect mapped block 1811939328 (level 0)
[  133.001493][  T396] usbhid 5-1:0.0: can't add hid device: -71
[  133.007608][  T396] usbhid: probe of 5-1:0.0 failed with error -71
[  133.014501][ T1427] EXT4-fs (loop3): Remounting filesystem read-only
[  133.028443][  T396] usb 5-1: USB disconnect, device number 9
[  133.033148][ T1427] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.262: invalid indirect mapped block 2185560079 (level 1)
[  133.077000][ T1427] EXT4-fs (loop3): Remounting filesystem read-only
[  133.105133][ T1427] EXT4-fs (loop3): 1 truncate cleaned up
[  133.127434][ T1427] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  133.968223][  T467] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  134.084837][ T1445] loop0: detected capacity change from 0 to 512
[  134.122533][ T1445] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.268: invalid block
[  134.136402][ T1445] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.268: invalid indirect mapped block 4294967295 (level 1)
[  134.295052][ T1445] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.268: invalid indirect mapped block 4294967295 (level 1)
[  134.352430][ T1445] EXT4-fs (loop0): 2 truncates cleaned up
[  134.506043][  T467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  134.537720][ T1445] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  134.550398][  T467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  134.584548][  T467] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  134.617989][  T467] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  134.627488][  T467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.641209][  T467] usb 4-1: config 0 descriptor??
[  134.658269][ T1427] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  134.981837][ T1462] loop2: detected capacity change from 0 to 512
[  135.036060][ T1462] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.271: invalid indirect mapped block 4294967295 (level 1)
[  135.058420][ T1462] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.271: invalid indirect mapped block 4294967295 (level 1)
[  135.084689][ T1462] EXT4-fs (loop2): 2 truncates cleaned up
[  135.099262][ T1462] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.168469][  T467] usbhid 4-1:0.0: can't add hid device: -71
[  135.174694][  T467] usbhid: probe of 4-1:0.0 failed with error -71
[  135.184008][  T467] usb 4-1: USB disconnect, device number 8
[  135.301056][ T1466] loop0: detected capacity change from 0 to 512
[  135.348977][ T1466] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  135.386610][ T1466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  135.416190][ T1466] EXT4-fs (loop0): orphan cleanup on readonly fs
[  135.445196][ T1466] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.272: attempt to clear invalid blocks 1024 len 1
[  135.478321][ T1466] EXT4-fs (loop0): Remounting filesystem read-only
[  135.486222][ T1466] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.272: bg 0: block 361: padding at end of block bitmap is not set
[  135.508231][ T1466] EXT4-fs (loop0): Remounting filesystem read-only
[  135.517231][ T1466] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  135.536181][ T1466] EXT4-fs (loop0): Remounting filesystem read-only
[  135.546281][ T1466] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.272: invalid indirect mapped block 1811939328 (level 0)
[  135.568201][ T1466] EXT4-fs (loop0): Remounting filesystem read-only
[  135.574913][ T1466] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.272: invalid indirect mapped block 2185560079 (level 1)
[  135.598187][ T1466] EXT4-fs (loop0): Remounting filesystem read-only
[  135.605016][ T1466] EXT4-fs (loop0): 1 truncate cleaned up
[  135.614987][ T1466] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  135.918309][  T370] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  136.248226][  T396] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  136.514522][  T396] usb 2-1: Using ep0 maxpacket: 16
[  136.608227][  T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  136.620061][  T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  136.631455][  T370] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  136.638421][  T396] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.656091][  T396] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.665294][  T370] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  136.684662][  T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.704027][  T370] usb 1-1: config 0 descriptor??
[  136.728278][ T1466] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.750526][ T1490] loop4: detected capacity change from 0 to 512
[  136.770872][ T1490] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  136.790811][ T1490] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  136.799345][ T1490] EXT4-fs (loop4): orphan cleanup on readonly fs
[  136.806117][ T1490] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.278: attempt to clear invalid blocks 1024 len 1
[  136.818447][  T396] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  136.821158][ T1490] EXT4-fs (loop4): Remounting filesystem read-only
[  136.835058][ T1490] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.278: bg 0: block 361: padding at end of block bitmap is not set
[  136.849701][ T1490] EXT4-fs (loop4): Remounting filesystem read-only
[  136.856248][ T1490] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  136.865812][ T1490] EXT4-fs (loop4): Remounting filesystem read-only
[  136.872626][ T1490] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.278: invalid indirect mapped block 1811939328 (level 0)
[  136.886970][ T1490] EXT4-fs (loop4): Remounting filesystem read-only
[  136.893756][ T1490] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.278: invalid indirect mapped block 2185560079 (level 1)
[  136.908113][ T1490] EXT4-fs (loop4): Remounting filesystem read-only
[  136.915042][ T1490] EXT4-fs (loop4): 1 truncate cleaned up
[  136.920321][  T396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.922815][ T1490] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  136.948221][  T396] usb 2-1: Product: syz
[  136.968227][  T396] usb 2-1: Manufacturer: syz
[  136.972881][  T396] usb 2-1: SerialNumber: syz
[  137.010295][ T1494] loop2: detected capacity change from 0 to 256
[  137.191054][  T370] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[  137.208416][  T370] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  137.298270][  T366] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  137.318315][  T396] usb 2-1: 0:2 : does not exist
[  137.323299][  T396] usb 2-1: unit 6 not found!
[  137.333269][  T396] usb 2-1: USB disconnect, device number 12
[  137.346742][  T466] udevd[466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  137.398580][  T370] usb 1-1: USB disconnect, device number 10
[  137.668248][  T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  137.679428][  T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  137.690678][  T366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  137.703670][  T366] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.712781][  T366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.721974][  T366] usb 5-1: config 0 descriptor??
[  137.738294][ T1490] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  138.181433][ T1507] loop2: detected capacity change from 0 to 512
[  138.261997][ T1507] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  138.290698][ T1507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  138.308751][ T1507] EXT4-fs (loop2): orphan cleanup on readonly fs
[  138.325776][ T1507] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.282: attempt to clear invalid blocks 1024 len 1
[  138.348360][ T1507] EXT4-fs (loop2): Remounting filesystem read-only
[  138.352060][  T366] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving
[  138.355621][ T1507] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.282: bg 0: block 361: padding at end of block bitmap is not set
[  138.385590][  T366] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  138.445467][ T1507] EXT4-fs (loop2): Remounting filesystem read-only
[  138.465459][ T1507] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  138.558350][ T1507] EXT4-fs (loop2): Remounting filesystem read-only
[  138.565487][ T1507] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.282: invalid indirect mapped block 1811939328 (level 0)
[  138.579952][ T1507] EXT4-fs (loop2): Remounting filesystem read-only
[  138.586590][ T1507] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.282: invalid indirect mapped block 2185560079 (level 1)
[  138.644297][ T1507] EXT4-fs (loop2): Remounting filesystem read-only
[  138.651208][ T1507] EXT4-fs (loop2): 1 truncate cleaned up
[  138.656921][ T1507] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  138.707321][  T366] usb 5-1: USB disconnect, device number 10
[  138.819362][ T1517] fido_id[1517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  139.290558][ T1526] loop4: detected capacity change from 0 to 512
[  139.328200][   T20] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  139.885113][ T1533] incfs: Options parsing error. -22
[  139.893103][ T1531] loop1: detected capacity change from 0 to 512
[  139.938240][ T1533] incfs: mount failed -22
[  139.949236][ T1531] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  139.969326][ T1531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  139.977754][ T1531] EXT4-fs (loop1): orphan cleanup on readonly fs
[  140.008520][ T1531] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.288: attempt to clear invalid blocks 1024 len 1
[  140.034932][ T1531] EXT4-fs (loop1): Remounting filesystem read-only
[  140.048071][ T1531] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.288: bg 0: block 361: padding at end of block bitmap is not set
[  140.078249][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  140.088891][ T1531] EXT4-fs (loop1): Remounting filesystem read-only
[  140.095865][ T1531] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  140.104761][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  140.127020][ T1531] EXT4-fs (loop1): Remounting filesystem read-only
[  140.138280][ T1531] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.288: invalid indirect mapped block 1811939328 (level 0)
[  140.148252][   T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  140.171602][ T1531] EXT4-fs (loop1): Remounting filesystem read-only
[  140.195703][ T1531] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.288: invalid indirect mapped block 2185560079 (level 1)
[  140.198314][   T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  140.214958][ T1531] EXT4-fs (loop1): Remounting filesystem read-only
[  140.234310][ T1531] EXT4-fs (loop1): 1 truncate cleaned up
[  140.244424][ T1531] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  140.258312][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.290045][   T20] usb 3-1: config 0 descriptor??
[  140.318246][ T1504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  141.026717][ T1550] loop4: detected capacity change from 0 to 512
[  141.033082][   T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  141.058243][   T20] usbhid 3-1:0.0: can't add hid device: -71
[  141.064811][   T20] usbhid: probe of 3-1:0.0 failed with error -71
[  141.073240][   T20] usb 3-1: USB disconnect, device number 9
[  141.108206][ T1550] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.293: invalid indirect mapped block 4294967295 (level 1)
[  141.125586][ T1550] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.293: invalid indirect mapped block 4294967295 (level 1)
[  141.184615][ T1550] EXT4-fs (loop4): 2 truncates cleaned up
[  141.190525][ T1550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  141.778384][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  141.833022][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  142.148784][   T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  142.161923][   T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  142.171484][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.208725][   T26] usb 2-1: config 0 descriptor??
[  142.228241][ T1531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  143.018369][   T26] usbhid 2-1:0.0: can't add hid device: -71
[  143.031584][   T26] usbhid: probe of 2-1:0.0 failed with error -71
[  143.095665][   T26] usb 2-1: USB disconnect, device number 13
[  143.604985][ T1590] incfs: Options parsing error. -22
[  143.610322][ T1590] incfs: mount failed -22
[  143.947029][ T1596] loop4: detected capacity change from 0 to 512
[  143.966311][ T1597] loop1: detected capacity change from 0 to 512
[  144.328944][ T1596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.303: invalid indirect mapped block 4294967295 (level 1)
[  144.348631][ T1597] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.304: invalid indirect mapped block 4294967295 (level 1)
[  144.388421][ T1596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.303: invalid indirect mapped block 4294967295 (level 1)
[  144.402803][ T1597] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.304: invalid indirect mapped block 4294967295 (level 1)
[  144.418375][ T1596] EXT4-fs (loop4): 2 truncates cleaned up
[  144.424368][ T1597] EXT4-fs (loop1): 2 truncates cleaned up
[  144.430175][ T1597] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  144.441502][ T1596] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  145.418198][ T1604] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  145.729110][   T30] audit: type=1400 audit(1788566965.107:163): avc:  denied  { unlink } for  pid=289 comm="syz-executor" name="file.cold" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  146.856731][ T1635] loop0: detected capacity change from 0 to 512
[  146.949900][ T1635] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.313: invalid indirect mapped block 4294967295 (level 1)
[  146.964270][ T1635] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.313: invalid indirect mapped block 4294967295 (level 1)
[  146.979057][ T1635] EXT4-fs (loop0): 2 truncates cleaned up
[  146.984907][ T1635] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.618424][ T1604] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  148.291810][ T1653] loop2: detected capacity change from 0 to 512
[  148.323265][ T1655] loop3: detected capacity change from 0 to 512
[  148.344684][ T1653] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.317: invalid indirect mapped block 4294967295 (level 1)
[  148.366998][ T1653] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.317: invalid indirect mapped block 4294967295 (level 1)
[  148.386813][ T1653] EXT4-fs (loop2): 2 truncates cleaned up
[  148.394183][ T1655] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.318: invalid indirect mapped block 4294967295 (level 1)
[  148.419166][ T1653] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  148.432609][ T1655] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.318: invalid indirect mapped block 4294967295 (level 1)
[  148.479950][ T1655] EXT4-fs (loop3): 2 truncates cleaned up
[  148.485820][ T1655] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  148.778229][ T1604] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  148.884011][ T1664] loop1: detected capacity change from 0 to 512
[  148.938752][ T1664] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  148.948217][ T1664] EXT4-fs (loop1): failed to open journal device unknown-block(129,0) -6
[  148.960396][ T1664] xt_bpf: check failed: parse error
[  149.207951][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.215213][ T1670] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.249026][ T1670] device bridge_slave_0 entered promiscuous mode
[  149.258929][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.266109][ T1670] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.274058][ T1670] device bridge_slave_1 entered promiscuous mode
[  149.366387][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.373625][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.380987][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.388057][ T1670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.412511][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.421533][  T464] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.429185][  T464] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.398956][ T1684] loop1: detected capacity change from 0 to 256
[  150.408122][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.416953][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.430534][  T317] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.437625][  T317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.445134][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.453563][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.462258][  T317] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.469329][  T317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.502932][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.558336][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.570918][   T45] device bridge_slave_1 left promiscuous mode
[  150.577443][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.585824][   T45] device bridge_slave_0 left promiscuous mode
[  150.592214][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.601168][   T45] device veth1_macvtap left promiscuous mode
[  150.607323][   T45] device veth0_vlan left promiscuous mode
[  150.761776][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.777258][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.861110][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  150.872853][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.909561][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  150.921004][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.938093][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.954670][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.973175][ T1670] device veth0_vlan entered promiscuous mode
[  151.005141][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.018641][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.041044][ T1670] device veth1_macvtap entered promiscuous mode
[  151.063159][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  151.075212][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.096760][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.125841][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.137565][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  152.234804][ T1727] loop5: detected capacity change from 0 to 512
[  152.329640][ T1727] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.336: invalid indirect mapped block 4294967295 (level 1)
[  152.358561][ T1727] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.336: invalid indirect mapped block 4294967295 (level 1)
[  152.389163][ T1727] EXT4-fs (loop5): 2 truncates cleaned up
[  152.397415][ T1727] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  154.358471][ T1771] loop5: detected capacity change from 0 to 256
[  154.643499][   T20] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  155.248237][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  155.265141][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  155.276696][   T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  155.300275][   T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  155.725790][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.744298][   T20] usb 3-1: config 0 descriptor??
[  155.858261][ T1768] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  156.091804][ T1796] loop1: detected capacity change from 0 to 512
[  156.168940][ T1796] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.353: invalid indirect mapped block 4294967295 (level 1)
[  156.194344][ T1796] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.353: invalid indirect mapped block 4294967295 (level 1)
[  156.208806][ T1796] EXT4-fs (loop1): 2 truncates cleaned up
[  156.214630][ T1796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  156.588226][   T20] usbhid 3-1:0.0: can't add hid device: -71
[  156.595438][   T20] usbhid: probe of 3-1:0.0 failed with error -71
[  156.614437][   T20] usb 3-1: USB disconnect, device number 10
[  156.854699][ T1812] incfs: Options parsing error. -22
[  156.877951][ T1812] incfs: mount failed -22
[  157.034207][ T1814] loop3: detected capacity change from 0 to 512
[  157.097486][ T1814] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.357: invalid indirect mapped block 4294967295 (level 1)
[  157.120494][ T1814] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.357: invalid indirect mapped block 4294967295 (level 1)
[  157.135227][ T1814] EXT4-fs (loop3): 2 truncates cleaned up
[  157.141413][ T1814] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.205154][ T1817] loop2: detected capacity change from 0 to 512
[  157.284962][ T1821] loop1: detected capacity change from 0 to 512
[  157.293323][ T1817] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  157.321178][ T1817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  157.339852][ T1817] EXT4-fs (loop2): orphan cleanup on readonly fs
[  157.355696][ T1817] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.358: attempt to clear invalid blocks 1024 len 1
[  157.382844][ T1817] EXT4-fs (loop2): Remounting filesystem read-only
[  157.391493][ T1821] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.359: invalid block
[  157.418330][ T1817] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.358: bg 0: block 361: padding at end of block bitmap is not set
[  157.433092][ T1821] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.359: invalid indirect mapped block 4294967295 (level 1)
[  157.448457][ T1821] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.359: invalid indirect mapped block 4294967295 (level 1)
[  157.462427][ T1817] EXT4-fs (loop2): Remounting filesystem read-only
[  157.472542][ T1817] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  157.508606][ T1821] EXT4-fs (loop1): 2 truncates cleaned up
[  157.514496][ T1821] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.525573][ T1817] EXT4-fs (loop2): Remounting filesystem read-only
[  157.548390][ T1817] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.358: invalid indirect mapped block 1811939328 (level 0)
[  157.585705][ T1817] EXT4-fs (loop2): Remounting filesystem read-only
[  157.616198][ T1817] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.358: invalid indirect mapped block 2185560079 (level 1)
[  157.648866][ T1817] EXT4-fs (loop2): Remounting filesystem read-only
[  157.665834][ T1817] EXT4-fs (loop2): 1 truncate cleaned up
[  157.678553][ T1817] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  158.858239][ T1800] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  160.243499][ T1857] loop2: detected capacity change from 0 to 512
[  160.330384][ T1857] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  160.338953][ T1857] EXT4-fs (loop2): failed to open journal device unknown-block(129,0) -6
[  160.411963][ T1855] xt_bpf: check failed: parse error
[  160.449565][ T1859] loop0: detected capacity change from 0 to 512
[  160.486497][ T1859] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.368: invalid block
[  160.505830][ T1859] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.368: invalid indirect mapped block 4294967295 (level 1)
[  160.520678][  T285] syz-executor (285) used greatest stack depth: 21184 bytes left
[  160.539250][ T1859] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.368: invalid indirect mapped block 4294967295 (level 1)
[  160.585324][ T1859] EXT4-fs (loop0): 2 truncates cleaned up
[  160.608375][ T1859] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.605695][ T1881] loop3: detected capacity change from 0 to 512
[  161.624158][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.631377][ T1870] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.635555][ T1881] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  161.640313][ T1870] device bridge_slave_0 entered promiscuous mode
[  161.655527][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.662736][ T1870] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.672334][ T1881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  161.694175][ T1881] EXT4-fs (loop3): orphan cleanup on readonly fs
[  162.060978][ T1861] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  162.082306][ T1881] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.372: attempt to clear invalid blocks 1024 len 1
[  162.105933][ T1881] EXT4-fs (loop3): Remounting filesystem read-only
[  162.109959][ T1870] device bridge_slave_1 entered promiscuous mode
[  162.119065][ T1886] loop5: detected capacity change from 0 to 256
[  162.128552][ T1881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.372: bg 0: block 361: padding at end of block bitmap is not set
[  162.143558][ T1881] EXT4-fs (loop3): Remounting filesystem read-only
[  162.150517][ T1881] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  162.159712][ T1881] EXT4-fs (loop3): Remounting filesystem read-only
[  162.166421][ T1881] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.372: invalid indirect mapped block 1811939328 (level 0)
[  162.195465][ T1881] EXT4-fs (loop3): Remounting filesystem read-only
[  162.203018][ T1881] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.372: invalid indirect mapped block 2185560079 (level 1)
[  162.217439][ T1881] EXT4-fs (loop3): Remounting filesystem read-only
[  162.224236][ T1881] EXT4-fs (loop3): 1 truncate cleaned up
[  162.230013][ T1881] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  162.383449][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.390678][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.398019][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.405140][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.457650][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.466772][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.476709][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.487830][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.499549][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  162.509439][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.517179][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.518360][  T366] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  162.532372][ T1870] device veth0_vlan entered promiscuous mode
[  162.543641][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  162.555054][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  162.563091][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  162.576247][ T1870] device veth1_macvtap entered promiscuous mode
[  162.584819][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  162.605454][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  162.615033][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  162.625017][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.634091][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  162.716103][  T317] device bridge_slave_1 left promiscuous mode
[  162.722536][  T317] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.823384][  T317] device bridge_slave_0 left promiscuous mode
[  162.852432][  T317] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.918512][  T366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.935697][  T317] device veth1_macvtap left promiscuous mode
[  163.015377][  T366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.044776][  T317] device veth0_vlan left promiscuous mode
[  163.098199][  T366] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.128316][  T366] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.150131][  T366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.172883][  T366] usb 4-1: config 0 descriptor??
[  163.717861][ T1911] loop6: detected capacity change from 0 to 512
[  163.823421][ T1911] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.380: invalid indirect mapped block 4294967295 (level 1)
[  163.841529][ T1911] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.380: invalid indirect mapped block 4294967295 (level 1)
[  163.858793][ T1911] EXT4-fs (loop6): 2 truncates cleaned up
[  163.864577][ T1911] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  163.978535][  T366] usbhid 4-1:0.0: can't add hid device: -71
[  163.998229][  T366] usbhid: probe of 4-1:0.0 failed with error -71
[  164.021501][ T1915] loop2: detected capacity change from 0 to 512
[  164.038120][  T366] usb 4-1: USB disconnect, device number 9
[  164.145022][ T1918] loop5: detected capacity change from 0 to 512
[  164.192117][ T1915] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.381: invalid block
[  164.205242][ T1915] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.381: invalid indirect mapped block 4294967295 (level 1)
[  164.219832][ T1915] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.381: invalid indirect mapped block 4294967295 (level 1)
[  164.239400][ T1915] EXT4-fs (loop2): 2 truncates cleaned up
[  164.259498][ T1915] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  164.312460][ T1918] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.382: invalid indirect mapped block 4294967295 (level 1)
[  164.557305][ T1918] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.382: invalid indirect mapped block 4294967295 (level 1)
[  164.652304][ T1918] EXT4-fs (loop5): 2 truncates cleaned up
[  164.668352][ T1918] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  165.232280][ T1934] loop0: detected capacity change from 0 to 512
[  165.261614][ T1934] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.385: invalid indirect mapped block 4294967295 (level 1)
[  165.283907][ T1934] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.385: invalid indirect mapped block 4294967295 (level 1)
[  165.301397][ T1934] EXT4-fs (loop0): 2 truncates cleaned up
[  165.310344][ T1934] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  165.898295][ T1913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  166.244575][ T1953] loop2: detected capacity change from 0 to 512
[  166.704850][ T1913] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  166.718922][ T1953] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  166.728351][ T1953] EXT4-fs (loop2): failed to open journal device unknown-block(129,0) -6
[  167.372687][ T1953] xt_bpf: check failed: parse error
[  168.291949][ T1971] loop6: detected capacity change from 0 to 512
[  168.469512][ T1971] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.395: invalid indirect mapped block 4294967295 (level 1)
[  168.498820][ T1971] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.395: invalid indirect mapped block 4294967295 (level 1)
[  168.538091][ T1982] futex_wake_op: syz.3.396 tries to shift op by -1; fix this program
[  168.568839][ T1982] usb usb7: check_ctrlrecip: process 1982 (syz.3.396) requesting ep 01 but needs 81
[  168.578372][ T1982] usb usb7: usbfs: process 1982 (syz.3.396) did not claim interface 0 before use
[  168.793343][   T30] audit: type=1400 audit(1788566987.927:164): avc:  denied  { write } for  pid=1972 comm="syz.3.396" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  168.862558][ T1971] EXT4-fs (loop6): 2 truncates cleaned up
[  168.869413][ T1971] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  169.654671][ T2005] usb usb7: check_ctrlrecip: process 2005 (syz.3.403) requesting ep 01 but needs 81
[  169.666336][ T2000] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.674037][ T2000] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.684707][ T2000] device bridge_slave_0 entered promiscuous mode
[  169.692144][ T2005] usb usb7: usbfs: process 2005 (syz.3.403) did not claim interface 0 before use
[  169.707401][ T2000] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.738573][ T2000] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.746153][ T2000] device bridge_slave_1 entered promiscuous mode
[  170.010708][ T2000] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.017944][ T2000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.025347][ T2000] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.032440][ T2000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.208902][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.218666][  T464] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.238978][  T464] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.274060][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.288608][  T464] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.295720][  T464] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.318802][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.338497][  T464] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.345683][  T464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.375419][  T317] device bridge_slave_1 left promiscuous mode
[  170.382112][  T317] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.409065][  T317] device bridge_slave_0 left promiscuous mode
[  170.418242][  T317] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.439223][  T317] device veth1_macvtap left promiscuous mode
[  170.445304][  T317] device veth0_vlan left promiscuous mode
[  170.528206][  T370] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  170.683817][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.702216][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.722363][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.748420][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.786557][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  170.796972][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.823255][ T2000] device veth0_vlan entered promiscuous mode
[  170.840254][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  170.858681][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.876221][ T2000] device veth1_macvtap entered promiscuous mode
[  170.893499][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.900994][  T370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.912878][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.928197][  T370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.938798][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.947094][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.965264][  T370] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  170.996970][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  171.004666][  T370] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  171.040636][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.049072][  T370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.068549][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.081980][  T370] usb 7-1: config 0 descriptor??
[  171.140383][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.158706][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  171.243363][ T2021] futex_wake_op: syz.2.407 tries to shift op by -1; fix this program
[  171.907258][ T2033] futex_wake_op: syz.3.408 tries to shift op by -1; fix this program
[  172.128276][  T370] usbhid 7-1:0.0: can't add hid device: -71
[  172.134350][  T370] usbhid: probe of 7-1:0.0 failed with error -71
[  172.142471][  T370] usb 7-1: USB disconnect, device number 2
[  172.343131][ T2036] loop7: detected capacity change from 0 to 512
[  172.387806][ T2041] ip6t_rpfilter: unknown options
[  172.477790][ T2036] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  172.710303][ T2049] futex_wake_op: syz.5.413 tries to shift op by -1; fix this program
[  172.732995][ T2049] usb usb7: check_ctrlrecip: process 2049 (syz.5.413) requesting ep 01 but needs 81
[  172.742518][ T2049] usb usb7: usbfs: process 2049 (syz.5.413) did not claim interface 0 before use
[  173.337733][   T30] audit: type=1400 audit(1788566992.137:165): avc:  denied  { create } for  pid=2043 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  173.359490][ T2036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  173.386182][ T2055] loop3: detected capacity change from 0 to 512
[  173.393206][ T2036] EXT4-fs (loop7): orphan cleanup on readonly fs
[  173.465703][   T30] audit: type=1400 audit(1788566992.157:166): avc:  denied  { setopt } for  pid=2043 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  173.492940][ T2036] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.410: attempt to clear invalid blocks 1024 len 1
[  173.530363][ T2036] EXT4-fs (loop7): Remounting filesystem read-only
[  173.537256][ T2036] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.410: bg 0: block 361: padding at end of block bitmap is not set
[  173.558778][ T2036] EXT4-fs (loop7): Remounting filesystem read-only
[  173.581719][ T2055] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  173.619143][ T2036] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  173.629564][ T2063] loop5: detected capacity change from 0 to 512
[  173.636079][ T2055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  173.644880][ T2055] EXT4-fs (loop3): orphan cleanup on readonly fs
[  173.662672][ T2055] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.415: attempt to clear invalid blocks 1024 len 1
[  173.676646][ T2055] EXT4-fs (loop3): Remounting filesystem read-only
[  173.683556][ T2055] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.415: bg 0: block 361: padding at end of block bitmap is not set
[  173.695701][ T2036] EXT4-fs (loop7): Remounting filesystem read-only
[  173.699527][ T2055] EXT4-fs (loop3): Remounting filesystem read-only
[  173.705890][ T2036] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.410: invalid indirect mapped block 1811939328 (level 0)
[  173.711408][ T2055] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  173.725834][ T2036] EXT4-fs (loop7): Remounting filesystem read-only
[  174.128293][ T2036] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.410: invalid indirect mapped block 2185560079 (level 1)
[  174.143414][ T2055] EXT4-fs (loop3): Remounting filesystem read-only
[  174.157340][ T2063] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.418: invalid indirect mapped block 4294967295 (level 1)
[  174.171740][ T2055] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.415: invalid indirect mapped block 1811939328 (level 0)
[  174.186210][ T2036] EXT4-fs (loop7): Remounting filesystem read-only
[  174.193132][ T2063] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.418: invalid indirect mapped block 4294967295 (level 1)
[  174.211114][ T2070] loop6: detected capacity change from 0 to 512
[  174.217653][ T2036] EXT4-fs (loop7): 1 truncate cleaned up
[  174.224132][ T2055] EXT4-fs (loop3): Remounting filesystem read-only
[  174.231468][ T2036] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  174.266633][ T2070] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  174.277185][ T2055] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.415: invalid indirect mapped block 2185560079 (level 1)
[  174.293553][ T2063] EXT4-fs (loop5): 2 truncates cleaned up
[  174.300889][ T2070] EXT4-fs (loop6): failed to open journal device unknown-block(129,0) -6
[  174.309611][ T2063] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  174.341256][ T2055] EXT4-fs (loop3): Remounting filesystem read-only
[  174.467726][ T2055] EXT4-fs (loop3): 1 truncate cleaned up
[  174.484798][ T2055] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  175.068184][   T20] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  175.110270][ T2046] xt_bpf: check failed: parse error
[  175.468276][   T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  175.498433][   T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  175.519765][   T20] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  175.553454][   T20] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  175.579618][   T20] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.598787][   T20] usb 8-1: config 0 descriptor??
[  175.618208][   T20] usb 8-1: can't set config #0, error -71
[  175.624567][   T20] usb 8-1: USB disconnect, device number 2
[  175.682873][ T2088] loop2: detected capacity change from 0 to 512
[  175.737257][ T2088] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.424: invalid indirect mapped block 4294967295 (level 1)
[  175.768289][ T2088] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.424: invalid indirect mapped block 4294967295 (level 1)
[  175.803950][ T2088] EXT4-fs (loop2): 2 truncates cleaned up
[  175.819313][ T2088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.126286][ T2097] loop3: detected capacity change from 0 to 512
[  176.144656][ T2098] incfs: Options parsing error. -22
[  176.168228][ T2098] incfs: mount failed -22
[  176.219281][ T2097] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.426: invalid indirect mapped block 4294967295 (level 1)
[  176.238405][ T2097] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.426: invalid indirect mapped block 4294967295 (level 1)
[  176.276258][ T2097] EXT4-fs (loop3): 2 truncates cleaned up
[  176.312564][ T2097] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.498838][   T45] device bridge_slave_1 left promiscuous mode
[  176.505030][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.558723][   T45] device bridge_slave_0 left promiscuous mode
[  176.565035][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.589243][   T45] device veth1_macvtap left promiscuous mode
[  176.626970][   T45] device veth0_vlan left promiscuous mode
[  177.222616][ T2103] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.258176][ T2103] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.265765][ T2103] device bridge_slave_0 entered promiscuous mode
[  177.333906][ T2103] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.385731][ T2103] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.400464][ T2103] device bridge_slave_1 entered promiscuous mode
[  177.556328][ T2125] loop6: detected capacity change from 0 to 512
[  177.845439][ T2127] incfs: Options parsing error. -22
[  177.850806][ T2127] incfs: mount failed -22
[  177.946298][ T2103] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.953403][ T2103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.960764][ T2103] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.967820][ T2103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.026938][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.037904][  T464] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.055221][  T464] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.077511][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.090010][  T464] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.097113][  T464] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.120873][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.132355][  T464] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.139614][  T464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.171228][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.182869][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.196536][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.222162][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.232749][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.253425][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.263549][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.275023][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.282982][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.304784][ T2103] device veth0_vlan entered promiscuous mode
[  178.326698][ T2103] device veth1_macvtap entered promiscuous mode
[  178.361094][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.369658][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.377996][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  178.398770][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  178.461056][ T2131] loop2: detected capacity change from 0 to 512
[  178.473934][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  178.482558][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  178.491869][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  178.944476][ T2131] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  179.061519][ T2131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  179.174403][ T2131] EXT4-fs (loop2): orphan cleanup on readonly fs
[  179.196099][ T2131] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.436: attempt to clear invalid blocks 1024 len 1
[  179.238558][ T2131] EXT4-fs (loop2): Remounting filesystem read-only
[  179.247459][ T2131] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.436: bg 0: block 361: padding at end of block bitmap is not set
[  179.264084][ T2131] EXT4-fs (loop2): Remounting filesystem read-only
[  179.273688][ T2131] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  179.302931][ T2131] EXT4-fs (loop2): Remounting filesystem read-only
[  179.309838][ T2131] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.436: invalid indirect mapped block 1811939328 (level 0)
[  179.333890][ T2147] loop3: detected capacity change from 0 to 512
[  179.342458][ T2131] EXT4-fs (loop2): Remounting filesystem read-only
[  179.353892][ T2131] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.436: invalid indirect mapped block 2185560079 (level 1)
[  179.375181][ T2131] EXT4-fs (loop2): Remounting filesystem read-only
[  179.381968][ T2131] EXT4-fs (loop2): 1 truncate cleaned up
[  179.387780][ T2131] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  179.798058][ T2147] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.438: invalid block
[  179.823677][ T2147] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.438: invalid indirect mapped block 4294967295 (level 1)
[  179.872395][ T2147] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.438: invalid indirect mapped block 4294967295 (level 1)
[  179.887107][ T2147] EXT4-fs (loop3): 2 truncates cleaned up
[  179.893078][ T2147] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  180.009412][ T2160] loop8: detected capacity change from 0 to 512
[  180.079142][ T2160] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  180.087989][ T2160] EXT4-fs (loop8): failed to open journal device unknown-block(129,0) -6
[  180.100245][ T2160] xt_bpf: check failed: parse error
[  180.118196][  T605] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  180.520937][ T2164] loop6: detected capacity change from 0 to 512
[  180.600817][ T2164] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  180.708283][  T605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  180.739730][  T605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  180.761523][ T2164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  180.771965][ T2164] EXT4-fs (loop6): orphan cleanup on readonly fs
[  180.791123][  T605] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  180.818554][ T2164] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.442: attempt to clear invalid blocks 1024 len 1
[  180.848433][ T2164] EXT4-fs (loop6): Remounting filesystem read-only
[  180.855132][ T2164] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.442: bg 0: block 361: padding at end of block bitmap is not set
[  180.976013][ T2164] EXT4-fs (loop6): Remounting filesystem read-only
[  180.988202][ T2164] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  181.007386][ T2164] EXT4-fs (loop6): Remounting filesystem read-only
[  181.017421][ T2164] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.442: invalid indirect mapped block 1811939328 (level 0)
[  181.026523][  T605] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  181.348891][ T2164] EXT4-fs (loop6): Remounting filesystem read-only
[  181.363201][ T2151] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  181.377883][ T2164] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.442: invalid indirect mapped block 2185560079 (level 1)
[  181.405375][ T2164] EXT4-fs (loop6): Remounting filesystem read-only
[  181.419364][ T2164] EXT4-fs (loop6): 1 truncate cleaned up
[  181.431329][ T2164] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  181.485449][  T605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.494381][  T605] usb 3-1: config 0 descriptor??
[  181.518790][  T605] usb 3-1: can't set config #0, error -71
[  181.530820][  T605] usb 3-1: USB disconnect, device number 11
[  182.200508][  T307] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  182.650985][ T2192] futex_wake_op: syz.3.448 tries to shift op by -1; fix this program
[  182.684232][ T2191] loop2: detected capacity change from 0 to 512
[  182.782399][ T2195] futex_wake_op: syz.8.450 tries to shift op by -1; fix this program
[  182.973123][ T2191] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.449: invalid indirect mapped block 4294967295 (level 1)
[  183.044977][ T2191] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.449: invalid indirect mapped block 4294967295 (level 1)
[  183.068566][ T2191] EXT4-fs (loop2): 2 truncates cleaned up
[  183.088262][ T2191] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.147962][  T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  183.168253][  T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  183.188164][  T307] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  183.201370][  T307] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  183.210878][  T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.232103][  T307] usb 7-1: config 0 descriptor??
[  183.248238][ T2164] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  183.858238][  T307] usbhid 7-1:0.0: can't add hid device: -71
[  183.864480][  T307] usbhid: probe of 7-1:0.0 failed with error -71
[  183.875746][  T307] usb 7-1: USB disconnect, device number 3
[  183.967644][ T2210] loop2: detected capacity change from 0 to 512
[  183.979846][ T2210] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.453: invalid indirect mapped block 4294967295 (level 1)
[  184.004800][ T2210] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.453: invalid indirect mapped block 4294967295 (level 1)
[  184.025640][ T2210] EXT4-fs (loop2): 2 truncates cleaned up
[  184.031851][ T2210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  184.046850][ T2212] futex_wake_op: syz.6.452 tries to shift op by -1; fix this program
[  185.793728][ T2243] loop8: detected capacity change from 0 to 512
[  186.004035][ T2243] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.461: invalid indirect mapped block 4294967295 (level 1)
[  186.024395][ T2243] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.461: invalid indirect mapped block 4294967295 (level 1)
[  186.058722][ T2243] EXT4-fs (loop8): 2 truncates cleaned up
[  186.067675][ T2243] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  187.098371][ T2198] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  188.168944][  T366] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  190.061058][ T2312] futex_wake_op: syz.8.477 tries to shift op by -1; fix this program
[  190.688096][ T2308] incfs: Options parsing error. -22
[  190.807772][ T2308] incfs: mount failed -22
[  190.968940][ T2324] loop6: detected capacity change from 0 to 512
[  191.001854][ T2324] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.480: invalid indirect mapped block 4294967295 (level 1)
[  191.019696][ T2324] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.480: invalid indirect mapped block 4294967295 (level 1)
[  191.351959][ T2324] EXT4-fs (loop6): 2 truncates cleaned up
[  191.357847][ T2324] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  191.869378][ T2339] loop3: detected capacity change from 0 to 512
[  191.927343][ T2339] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.484: invalid indirect mapped block 4294967295 (level 1)
[  191.965709][ T2339] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.484: invalid indirect mapped block 4294967295 (level 1)
[  191.982041][ T2339] EXT4-fs (loop3): 2 truncates cleaned up
[  191.987870][ T2339] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  192.363349][ T2326] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  193.658576][ T2326] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  193.877996][ T2367] loop8: detected capacity change from 0 to 512
[  193.932438][ T2367] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  193.946116][ T2367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  193.962886][ T2367] EXT4-fs (loop8): orphan cleanup on readonly fs
[  193.972684][ T2367] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.489: attempt to clear invalid blocks 1024 len 1
[  193.987999][ T2367] EXT4-fs (loop8): Remounting filesystem read-only
[  193.996660][ T2367] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.489: bg 0: block 361: padding at end of block bitmap is not set
[  194.012474][ T2367] EXT4-fs (loop8): Remounting filesystem read-only
[  194.158213][ T2367] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  194.335530][ T2367] EXT4-fs (loop8): Remounting filesystem read-only
[  194.351037][ T2367] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.489: invalid indirect mapped block 1811939328 (level 0)
[  194.377685][ T2375] loop7: detected capacity change from 0 to 512
[  194.384536][ T2367] EXT4-fs (loop8): Remounting filesystem read-only
[  194.392353][ T2367] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.489: invalid indirect mapped block 2185560079 (level 1)
[  194.410395][ T2367] EXT4-fs (loop8): Remounting filesystem read-only
[  194.418075][ T2367] EXT4-fs (loop8): 1 truncate cleaned up
[  194.425001][ T2367] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  194.442385][ T2375] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  194.467504][ T2375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  194.476268][ T2375] EXT4-fs (loop7): orphan cleanup on readonly fs
[  194.483733][ T2375] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.491: attempt to clear invalid blocks 1024 len 1
[  194.497212][ T2375] EXT4-fs (loop7): Remounting filesystem read-only
[  194.503977][ T2375] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.491: bg 0: block 361: padding at end of block bitmap is not set
[  194.519443][ T2375] EXT4-fs (loop7): Remounting filesystem read-only
[  194.526026][ T2375] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  194.738278][ T2375] EXT4-fs (loop7): Remounting filesystem read-only
[  194.848022][ T2375] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.491: invalid indirect mapped block 1811939328 (level 0)
[  194.863697][ T2383] loop6: detected capacity change from 0 to 512
[  194.897308][ T2383] FAT-fs (loop6): Unrecognized mount option "gid=" or missing value
[  194.905788][ T2375] EXT4-fs (loop7): Remounting filesystem read-only
[  194.912501][ T2375] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.491: invalid indirect mapped block 2185560079 (level 1)
[  194.926739][ T2375] EXT4-fs (loop7): Remounting filesystem read-only
[  194.951664][ T2375] EXT4-fs (loop7): 1 truncate cleaned up
[  194.957408][ T2375] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  195.044133][  T605] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  196.061872][ T2391] loop3: detected capacity change from 0 to 512
[  196.170093][ T2391] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  196.252053][ T2391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  196.260533][ T2391] EXT4-fs (loop3): orphan cleanup on readonly fs
[  196.267236][ T2391] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.495: attempt to clear invalid blocks 1024 len 1
[  196.280442][ T2391] EXT4-fs (loop3): Remounting filesystem read-only
[  196.287135][ T2391] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.495: bg 0: block 361: padding at end of block bitmap is not set
[  196.301515][ T2391] EXT4-fs (loop3): Remounting filesystem read-only
[  196.308254][ T2391] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  196.317182][ T2391] EXT4-fs (loop3): Remounting filesystem read-only
[  196.324330][ T2391] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.495: invalid indirect mapped block 1811939328 (level 0)
[  196.338389][ T2391] EXT4-fs (loop3): Remounting filesystem read-only
[  196.342512][  T307] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  196.345144][ T2391] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.495: invalid indirect mapped block 2185560079 (level 1)
[  196.366899][ T2391] EXT4-fs (loop3): Remounting filesystem read-only
[  196.373740][ T2391] EXT4-fs (loop3): 1 truncate cleaned up
[  196.379583][ T2391] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  196.456277][ T2397] futex_wake_op: syz.6.496 tries to shift op by -1; fix this program
[  196.474557][ T2397] usb usb7: check_ctrlrecip: process 2397 (syz.6.496) requesting ep 01 but needs 81
[  196.484151][ T2397] usb usb7: usbfs: process 2397 (syz.6.496) did not claim interface 0 before use
[  196.718894][  T605] usb 9-1: device descriptor read/64, error -71
[  197.076437][  T307] usb 8-1: device descriptor read/64, error -71
[  197.144864][ T2403] loop8: detected capacity change from 0 to 512
[  197.160599][ T2403] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  197.176650][ T2403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  197.185991][ T2403] EXT4-fs (loop8): orphan cleanup on readonly fs
[  197.187793][ T2407] loop6: detected capacity change from 0 to 256
[  197.202721][ T2403] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.498: attempt to clear invalid blocks 1024 len 1
[  197.218060][ T2403] EXT4-fs (loop8): Remounting filesystem read-only
[  197.226939][ T2403] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.498: bg 0: block 361: padding at end of block bitmap is not set
[  197.241505][ T2403] EXT4-fs (loop8): Remounting filesystem read-only
[  197.248075][ T2403] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  197.257359][ T2403] EXT4-fs (loop8): Remounting filesystem read-only
[  197.266772][ T2403] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.498: invalid indirect mapped block 1811939328 (level 0)
[  197.281440][ T2403] EXT4-fs (loop8): Remounting filesystem read-only
[  197.288660][ T2403] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.498: invalid indirect mapped block 2185560079 (level 1)
[  197.303083][ T2403] EXT4-fs (loop8): Remounting filesystem read-only
[  197.310222][ T2403] EXT4-fs (loop8): 1 truncate cleaned up
[  197.316053][ T2403] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  197.414182][ T2410] loop7: detected capacity change from 0 to 512
[  197.441698][ T2410] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  197.452848][ T2410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  197.461616][ T2410] EXT4-fs (loop7): orphan cleanup on readonly fs
[  197.468803][ T2410] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.500: attempt to clear invalid blocks 1024 len 1
[  197.482198][ T2410] EXT4-fs (loop7): Remounting filesystem read-only
[  197.489586][ T2410] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.500: bg 0: block 361: padding at end of block bitmap is not set
[  197.504152][ T2410] EXT4-fs (loop7): Remounting filesystem read-only
[  197.510785][ T2410] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  197.520012][ T2410] EXT4-fs (loop7): Remounting filesystem read-only
[  197.526771][ T2410] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.500: invalid indirect mapped block 1811939328 (level 0)
[  197.540930][ T2410] EXT4-fs (loop7): Remounting filesystem read-only
[  197.547642][ T2410] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.500: invalid indirect mapped block 2185560079 (level 1)
[  197.562252][ T2410] EXT4-fs (loop7): Remounting filesystem read-only
[  197.569052][ T2410] EXT4-fs (loop7): 1 truncate cleaned up
[  197.578574][ T2410] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  198.388275][  T307] usb 8-1: device descriptor read/64, error -71
[  198.685977][  T307] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  198.705032][ T2432] loop8: detected capacity change from 0 to 256
[  198.986557][ T2430] futex_wake_op: syz.3.505 tries to shift op by -1; fix this program
[  198.996324][ T2430] usb usb7: check_ctrlrecip: process 2430 (syz.3.505) requesting ep 01 but needs 81
[  199.005786][ T2430] usb usb7: usbfs: process 2430 (syz.3.505) did not claim interface 0 before use
[  199.014994][ T2434] futex_wake_op: syz.2.504 tries to shift op by -1; fix this program
[  199.025233][ T2434] usb usb7: check_ctrlrecip: process 2434 (syz.2.504) requesting ep 01 but needs 81
[  199.034771][ T2434] usb usb7: usbfs: process 2434 (syz.2.504) did not claim interface 0 before use
[  199.520043][ T2438] loop3: detected capacity change from 0 to 512
[  199.540425][ T2438] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  199.583496][ T2438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  199.592034][ T2438] EXT4-fs (loop3): orphan cleanup on readonly fs
[  199.599464][ T2438] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.508: attempt to clear invalid blocks 1024 len 1
[  199.612954][ T2438] EXT4-fs (loop3): Remounting filesystem read-only
[  199.621074][ T2438] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.508: bg 0: block 361: padding at end of block bitmap is not set
[  199.635659][ T2438] EXT4-fs (loop3): Remounting filesystem read-only
[  199.642516][ T2438] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  199.651591][ T2438] EXT4-fs (loop3): Remounting filesystem read-only
[  199.658439][  T307] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  199.671557][ T2438] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.508: invalid indirect mapped block 1811939328 (level 0)
[  199.685658][  T307] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024
[  199.697019][  T307] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  199.710227][ T2438] EXT4-fs (loop3): Remounting filesystem read-only
[  199.710248][  T307] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  199.718109][ T2438] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.508: invalid indirect mapped block 2185560079 (level 1)
[  199.726340][  T307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.758312][ T2438] EXT4-fs (loop3): Remounting filesystem read-only
[  199.765028][ T2438] EXT4-fs (loop3): 1 truncate cleaned up
[  199.778422][  T307] usb 8-1: config 0 descriptor??
[  199.788351][ T2438] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  199.804547][ T2410] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  199.854386][ T2446] loop6: detected capacity change from 0 to 512
[  199.920235][ T2446] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  199.944726][ T2446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  199.953322][ T2446] EXT4-fs (loop6): orphan cleanup on readonly fs
[  199.968356][ T2446] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.509: attempt to clear invalid blocks 1024 len 1
[  199.996707][ T2446] EXT4-fs (loop6): Remounting filesystem read-only
[  200.017354][ T2446] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.509: bg 0: block 361: padding at end of block bitmap is not set
[  200.042108][ T2446] EXT4-fs (loop6): Remounting filesystem read-only
[  200.052012][ T2446] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  200.068362][ T2446] EXT4-fs (loop6): Remounting filesystem read-only
[  200.078427][ T2446] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.509: invalid indirect mapped block 1811939328 (level 0)
[  200.098359][ T2446] EXT4-fs (loop6): Remounting filesystem read-only
[  200.110523][ T2446] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.509: invalid indirect mapped block 2185560079 (level 1)
[  200.158093][  T370] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  200.167267][ T2446] EXT4-fs (loop6): Remounting filesystem read-only
[  200.174789][ T2446] EXT4-fs (loop6): 1 truncate cleaned up
[  200.182928][ T2446] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  200.269433][  T307] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving
[  200.281448][  T307] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  200.485540][  T605] usb 8-1: USB disconnect, device number 5
[  200.498174][  T866] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  200.518228][  T370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.529487][  T370] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  200.542203][  T370] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  200.551608][  T370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.573873][  T370] usb 4-1: config 0 descriptor??
[  200.778161][  T866] usb 7-1: device descriptor read/64, error -71
[  201.213335][ T2464] futex_wake_op: syz.8.513 tries to shift op by -1; fix this program
[  201.228557][  T866] usb 7-1: device descriptor read/64, error -71
[  201.498255][  T866] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  201.898212][  T866] usb 7-1: device descriptor read/64, error -71
[  202.358221][  T866] usb 7-1: device descriptor read/64, error -71
[  202.516954][  T866] usb usb7-port1: attempt power cycle
[  202.762088][  T370] usb 4-1: USB disconnect, device number 10
[  203.517442][ T2494] loop7: detected capacity change from 0 to 512
[  203.529519][ T2494] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  203.540131][ T2494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  203.548854][ T2494] EXT4-fs (loop7): orphan cleanup on readonly fs
[  203.555880][ T2494] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.520: attempt to clear invalid blocks 1024 len 1
[  203.569585][ T2494] EXT4-fs (loop7): Remounting filesystem read-only
[  203.576371][ T2494] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.520: bg 0: block 361: padding at end of block bitmap is not set
[  203.591193][ T2494] EXT4-fs (loop7): Remounting filesystem read-only
[  203.597905][ T2494] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  203.606927][ T2494] EXT4-fs (loop7): Remounting filesystem read-only
[  203.613768][ T2494] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.520: invalid indirect mapped block 1811939328 (level 0)
[  203.628409][ T2494] EXT4-fs (loop7): Remounting filesystem read-only
[  203.635049][ T2494] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.520: invalid indirect mapped block 2185560079 (level 1)
[  203.711109][ T2494] EXT4-fs (loop7): Remounting filesystem read-only
[  203.717800][ T2494] EXT4-fs (loop7): 1 truncate cleaned up
[  203.745067][ T2494] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  203.785492][ T2499] loop2: detected capacity change from 0 to 512
[  203.939477][ T2499] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  204.048198][  T293] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  204.216762][ T2499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  204.227915][ T2506] loop8: detected capacity change from 0 to 512
[  204.234866][ T2499] EXT4-fs (loop2): orphan cleanup on readonly fs
[  204.241901][ T2499] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.521: attempt to clear invalid blocks 1024 len 1
[  204.255299][ T2499] EXT4-fs (loop2): Remounting filesystem read-only
[  204.264434][ T2499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.521: bg 0: block 361: padding at end of block bitmap is not set
[  204.299871][ T2506] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.523: invalid block
[  204.323580][ T2499] EXT4-fs (loop2): Remounting filesystem read-only
[  204.329574][ T2506] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.523: invalid indirect mapped block 4294967295 (level 1)
[  204.339906][ T2499] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  204.348887][ T2506] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.523: invalid indirect mapped block 4294967295 (level 1)
[  204.371587][ T2506] EXT4-fs (loop8): 2 truncates cleaned up
[  204.377475][ T2506] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  204.380455][ T2499] EXT4-fs (loop2): Remounting filesystem read-only
[  204.414795][ T2499] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.521: invalid indirect mapped block 1811939328 (level 0)
[  204.444255][ T2499] EXT4-fs (loop2): Remounting filesystem read-only
[  204.458331][  T293] usb 8-1: too many configurations: 255, using maximum allowed: 8
[  204.470306][ T2499] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.521: invalid indirect mapped block 2185560079 (level 1)
[  204.510235][ T2499] EXT4-fs (loop2): Remounting filesystem read-only
[  204.527236][ T2499] EXT4-fs (loop2): 1 truncate cleaned up
[  204.537209][ T2499] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  204.588234][  T293] usb 8-1: unable to read config index 0 descriptor/start: -61
[  204.595862][  T293] usb 8-1: can't read configurations, error -61
[  204.768161][  T293] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  205.171531][  T370] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  205.195820][  T293] usb 8-1: too many configurations: 255, using maximum allowed: 8
[  205.348202][  T293] usb 8-1: unable to read config index 0 descriptor/start: -61
[  205.358048][  T293] usb 8-1: can't read configurations, error -61
[  205.371704][  T293] usb usb8-port1: attempt power cycle
[  205.568237][  T370] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.588167][  T370] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  205.607369][  T370] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  205.626653][  T370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.682074][  T370] usb 3-1: config 0 descriptor??
[  205.808239][  T293] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  205.938645][  T293] usb 8-1: too many configurations: 255, using maximum allowed: 8
[  206.208392][  T293] usb 8-1: unable to read config index 0 descriptor/start: -61
[  206.234026][  T293] usb 8-1: can't read configurations, error -61
[  206.418196][  T293] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  206.653846][  T293] usb 8-1: device descriptor read/8, error -71
[  206.698581][ T2532] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.705907][ T2532] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.713430][ T2532] device bridge_slave_0 entered promiscuous mode
[  206.720439][ T2532] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.727476][ T2532] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.735586][ T2532] device bridge_slave_1 entered promiscuous mode
[  207.218337][  T293] usb 8-1: device descriptor read/8, error -71
[  207.391053][  T293] usb usb8-port1: unable to enumerate USB device
[  207.667299][  T396] usb 3-1: USB disconnect, device number 12
[  207.965933][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  208.190865][ T2558] futex_wake_op: syz.7.535 tries to shift op by -1; fix this program
[  208.238535][ T2553] usb usb7: check_ctrlrecip: process 2553 (syz.7.535) requesting ep 01 but needs 81
[  208.248170][ T2553] usb usb7: usbfs: process 2553 (syz.7.535) did not claim interface 0 before use
[  208.260702][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  208.331888][ T2560] futex_wake_op: syz.2.536 tries to shift op by -1; fix this program
[  208.523818][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  208.532517][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  208.541053][  T481] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.548263][  T481] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.571214][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  208.626197][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  208.634697][  T481] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.641844][  T481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.661522][ T2566] loop3: detected capacity change from 0 to 256
[  208.671881][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  208.679707][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.687865][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.696371][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.706430][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  209.029357][ T2564] futex_wake_op: syz.6.537 tries to shift op by -1; fix this program
[  209.038807][ T2564] usb usb7: check_ctrlrecip: process 2564 (syz.6.537) requesting ep 01 but needs 81
[  209.048357][ T2564] usb usb7: usbfs: process 2564 (syz.6.537) did not claim interface 0 before use
[  209.063702][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  209.085721][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.106274][ T2532] device veth0_vlan entered promiscuous mode
[  209.119550][ T2532] device veth1_macvtap entered promiscuous mode
[  209.185362][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  209.193913][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  209.203180][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  209.212499][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  209.221106][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  209.229246][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.368230][ T2575] futex_wake_op: syz.7.539 tries to shift op by -1; fix this program
[  209.408708][ T2574] usb usb7: check_ctrlrecip: process 2574 (syz.7.539) requesting ep 01 but needs 81
[  209.418199][ T2574] usb usb7: usbfs: process 2574 (syz.7.539) did not claim interface 0 before use
[  209.429472][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.438021][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  209.446724][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  209.461237][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  209.469281][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  209.485599][   T45] device bridge_slave_1 left promiscuous mode
[  209.492061][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.500321][   T45] device bridge_slave_0 left promiscuous mode
[  209.506620][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.515123][   T45] device veth1_macvtap left promiscuous mode
[  209.521426][   T45] device veth0_vlan left promiscuous mode
[  211.054291][ T2606] loop6: detected capacity change from 0 to 512
[  211.098872][ T2606] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  211.107306][ T2606] EXT4-fs (loop6): failed to open journal device unknown-block(129,0) -6
[  211.172834][ T2606] xt_bpf: check failed: parse error
[  211.825964][ T2608] loop9: detected capacity change from 0 to 512
[  211.929153][ T2608] FAT-fs (loop9): Unrecognized mount option "gid=" or missing value
[  213.643591][ T2617] loop9: detected capacity change from 0 to 512
[  213.737136][ T2617] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.549: invalid indirect mapped block 4294967295 (level 1)
[  213.765070][ T2617] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.549: invalid indirect mapped block 4294967295 (level 1)
[  213.780877][ T2617] EXT4-fs (loop9): 2 truncates cleaned up
[  213.786811][ T2617] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  214.715484][ T2637] loop6: detected capacity change from 0 to 512
[  214.787270][ T2639] usb usb7: check_ctrlrecip: process 2639 (syz.3.553) requesting ep 01 but needs 81
[  214.796832][ T2639] usb usb7: usbfs: process 2639 (syz.3.553) did not claim interface 0 before use
[  214.888924][ T2637] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  215.075842][ T2637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  215.086909][ T2640] incfs: Options parsing error. -22
[  215.105133][ T2637] EXT4-fs (loop6): orphan cleanup on readonly fs
[  215.116855][ T2640] incfs: mount failed -22
[  215.131972][ T2637] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.554: attempt to clear invalid blocks 1024 len 1
[  215.347959][ T2637] EXT4-fs (loop6): Remounting filesystem read-only
[  215.389237][ T2637] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.554: bg 0: block 361: padding at end of block bitmap is not set
[  215.528196][ T2637] EXT4-fs (loop6): Remounting filesystem read-only
[  215.534827][ T2637] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  215.583420][ T2637] EXT4-fs (loop6): Remounting filesystem read-only
[  215.600336][ T2637] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.554: invalid indirect mapped block 1811939328 (level 0)
[  215.620130][ T2637] EXT4-fs (loop6): Remounting filesystem read-only
[  215.626728][ T2637] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.554: invalid indirect mapped block 2185560079 (level 1)
[  215.641498][ T2637] EXT4-fs (loop6): Remounting filesystem read-only
[  215.648510][ T2637] EXT4-fs (loop6): 1 truncate cleaned up
[  215.654345][ T2637] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  216.265169][   T30] audit: type=1400 audit(1788567035.637:167): avc:  denied  { watch watch_reads } for  pid=2651 comm="syz.2.557" path="/120" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  216.354138][ T2656] loop7: detected capacity change from 0 to 512
[  216.368260][  T467] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  216.399016][ T2656] FAT-fs (loop7): Unrecognized mount option "gid=" or missing value
[  216.479571][ T2658] loop2: detected capacity change from 0 to 256
[  217.715924][ T2621] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  218.028196][  T467] usb 7-1: device descriptor read/all, error -71
[  218.035032][ T2670] loop3: detected capacity change from 0 to 512
[  218.108541][ T2670] FAT-fs (loop3): Unrecognized mount option "gid=" or missing value
[  218.325583][ T2679] loop6: detected capacity change from 0 to 512
[  218.388897][ T2679] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  218.402581][ T2679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  218.411439][ T2679] EXT4-fs (loop6): orphan cleanup on readonly fs
[  218.418537][ T2679] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.565: attempt to clear invalid blocks 1024 len 1
[  218.433942][ T2679] EXT4-fs (loop6): Remounting filesystem read-only
[  218.453255][ T2679] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.565: bg 0: block 361: padding at end of block bitmap is not set
[  218.469794][ T2679] EXT4-fs (loop6): Remounting filesystem read-only
[  218.476439][ T2679] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  218.498401][ T2679] EXT4-fs (loop6): Remounting filesystem read-only
[  218.510301][ T2679] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.565: invalid indirect mapped block 1811939328 (level 0)
[  218.529349][ T2679] EXT4-fs (loop6): Remounting filesystem read-only
[  218.536043][ T2679] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.565: invalid indirect mapped block 2185560079 (level 1)
[  218.551825][ T2679] EXT4-fs (loop6): Remounting filesystem read-only
[  218.560427][ T2679] EXT4-fs (loop6): 1 truncate cleaned up
[  218.566394][ T2679] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  218.610927][ T2683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=2683 comm=syz.3.564
[  219.439667][ T2687] loop2: detected capacity change from 0 to 512
[  219.764068][ T2687] FAT-fs (loop2): Unrecognized mount option "gid=" or missing value
[  220.461106][  T481] device bridge_slave_1 left promiscuous mode
[  221.352137][  T481] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.479927][  T481] device bridge_slave_0 left promiscuous mode
[  221.595815][ T2705] loop3: detected capacity change from 0 to 512
[  221.623035][  T481] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.631577][  T481] device veth1_macvtap left promiscuous mode
[  221.637628][  T481] device veth0_vlan left promiscuous mode
[  221.655120][ T2705] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.572: invalid indirect mapped block 4294967295 (level 1)
[  221.678745][ T2705] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.572: invalid indirect mapped block 4294967295 (level 1)
[  221.912979][ T2705] EXT4-fs (loop3): 2 truncates cleaned up
[  221.966368][ T2705] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  222.214240][ T2711] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.221755][ T2711] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.233323][ T2711] device bridge_slave_0 entered promiscuous mode
[  222.272405][ T2718] futex_wake_op: syz.6.574 tries to shift op by -1; fix this program
[  222.293052][ T2718] usb usb7: check_ctrlrecip: process 2718 (syz.6.574) requesting ep 01 but needs 81
[  222.302586][ T2718] usb usb7: usbfs: process 2718 (syz.6.574) did not claim interface 0 before use
[  222.483866][ T2711] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.508244][ T2711] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.521377][ T2723] loop2: detected capacity change from 0 to 512
[  222.528401][ T2711] device bridge_slave_1 entered promiscuous mode
[  222.632503][ T2723] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  222.871950][ T2723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  222.900448][ T2730] loop6: detected capacity change from 0 to 256
[  222.958823][ T2723] EXT4-fs (loop2): orphan cleanup on readonly fs
[  223.010845][ T2723] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.576: attempt to clear invalid blocks 1024 len 1
[  223.068370][ T2723] EXT4-fs (loop2): Remounting filesystem read-only
[  223.076281][ T2723] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.576: bg 0: block 361: padding at end of block bitmap is not set
[  223.114613][ T2723] EXT4-fs (loop2): Remounting filesystem read-only
[  223.130558][ T2711] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.137656][ T2711] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.144998][ T2711] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.148312][ T2723] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  223.152105][ T2711] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.178603][ T2723] EXT4-fs (loop2): Remounting filesystem read-only
[  223.185383][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.194698][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.205481][ T2723] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.576: invalid indirect mapped block 1811939328 (level 0)
[  223.239751][ T2723] EXT4-fs (loop2): Remounting filesystem read-only
[  223.249059][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  223.258302][ T2723] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.576: invalid indirect mapped block 2185560079 (level 1)
[  223.273754][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  223.289990][ T2723] EXT4-fs (loop2): Remounting filesystem read-only
[  223.299187][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  223.302623][ T2723] EXT4-fs (loop2): 1 truncate cleaned up
[  223.313366][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  223.316957][ T2723] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  223.329596][  T464] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.344376][  T464] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.368224][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  223.383465][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.417776][  T464] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.424947][  T464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.445434][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  223.453699][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  223.464046][ T2735] loop7: detected capacity change from 0 to 512
[  223.469675][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  223.478763][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  223.492140][ T2735] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  223.496469][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  223.511224][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.515808][ T2735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  223.528370][ T2735] EXT4-fs (loop7): orphan cleanup on readonly fs
[  223.535217][ T2735] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.578: attempt to clear invalid blocks 1024 len 1
[  223.551400][ T2711] device veth0_vlan entered promiscuous mode
[  223.561146][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  223.570327][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  223.585961][ T2735] EXT4-fs (loop7): Remounting filesystem read-only
[  223.589902][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  223.600303][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  223.607101][ T2735] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.578: bg 0: block 361: padding at end of block bitmap is not set
[  223.608669][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  223.631179][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  223.632028][ T2739] loop3: detected capacity change from 0 to 512
[  223.640705][ T2735] EXT4-fs (loop7): Remounting filesystem read-only
[  223.648873][  T293] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  223.652381][ T2735] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  223.669984][ T2739] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  223.678692][ T2735] EXT4-fs (loop7): Remounting filesystem read-only
[  223.687881][ T2711] device veth1_macvtap entered promiscuous mode
[  223.699243][ T2739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  223.707771][ T2739] EXT4-fs (loop3): orphan cleanup on readonly fs
[  223.714369][ T2735] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.578: invalid indirect mapped block 1811939328 (level 0)
[  223.729237][ T2739] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.579: attempt to clear invalid blocks 1024 len 1
[  223.736317][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  223.750225][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  223.758838][ T2739] EXT4-fs (loop3): Remounting filesystem read-only
[  223.765462][ T2735] EXT4-fs (loop7): Remounting filesystem read-only
[  223.768593][ T2739] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.579: bg 0: block 361: padding at end of block bitmap is not set
[  223.772115][ T2735] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.578: invalid indirect mapped block 2185560079 (level 1)
[  223.787777][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  223.808800][ T2735] EXT4-fs (loop7): Remounting filesystem read-only
[  223.809848][ T2739] EXT4-fs (loop3): Remounting filesystem read-only
[  223.815715][ T2735] EXT4-fs (loop7): 1 truncate cleaned up
[  223.828187][ T2735] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  223.849854][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  223.857980][ T2739] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  223.868568][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  223.879695][ T2739] EXT4-fs (loop3): Remounting filesystem read-only
[  223.905242][ T2739] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.579: invalid indirect mapped block 1811939328 (level 0)
[  223.928390][ T2739] EXT4-fs (loop3): Remounting filesystem read-only
[  223.935023][ T2739] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.579: invalid indirect mapped block 2185560079 (level 1)
[  223.956539][ T2739] EXT4-fs (loop3): Remounting filesystem read-only
[  223.963107][  T293] usb 3-1: device descriptor read/64, error -71
[  223.971064][ T2739] EXT4-fs (loop3): 1 truncate cleaned up
[  223.976861][ T2739] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  224.000019][ T2743] loop4: detected capacity change from 0 to 512
[  224.015308][ T2743] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  224.025557][ T2743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  224.034644][ T2743] EXT4-fs (loop4): orphan cleanup on readonly fs
[  224.042320][ T2743] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.571: attempt to clear invalid blocks 1024 len 1
[  224.055597][ T2743] EXT4-fs (loop4): Remounting filesystem read-only
[  224.062792][ T2743] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.571: bg 0: block 361: padding at end of block bitmap is not set
[  224.081152][ T2743] EXT4-fs (loop4): Remounting filesystem read-only
[  224.087696][ T2743] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  224.096989][ T2743] EXT4-fs (loop4): Remounting filesystem read-only
[  224.103832][ T2743] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.571: invalid indirect mapped block 1811939328 (level 0)
[  224.120223][ T2743] EXT4-fs (loop4): Remounting filesystem read-only
[  224.126910][ T2743] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.571: invalid indirect mapped block 2185560079 (level 1)
[  224.141655][ T2743] EXT4-fs (loop4): Remounting filesystem read-only
[  224.148937][ T2743] EXT4-fs (loop4): 1 truncate cleaned up
[  224.154829][ T2743] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none.
[  224.188210][ T2665] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  224.408227][  T293] usb 3-1: device descriptor read/64, error -71
[  224.458252][  T605] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  224.468207][ T2665] usb 8-1: device descriptor read/64, error -71
[  224.508235][  T467] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  224.678185][  T293] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  224.778578][  T467] usb 5-1: device descriptor read/64, error -71
[  224.848703][  T605] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.858892][ T2665] usb 8-1: device descriptor read/64, error -71
[  224.858955][  T605] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  224.878465][  T605] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  224.950825][  T605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.035377][  T293] usb 3-1: device descriptor read/64, error -71
[  225.161687][  T605] usb 4-1: config 0 descriptor??
[  225.190391][ T2665] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  225.216354][  T605] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  225.298188][  T467] usb 5-1: device descriptor read/64, error -71
[  225.428232][  T293] usb 3-1: device descriptor read/64, error -71
[  225.458181][ T2665] usb 8-1: device descriptor read/64, error -71
[  225.548397][  T293] usb usb3-port1: attempt power cycle
[  225.564742][ T2756] loop2: detected capacity change from 0 to 512
[  225.568393][  T467] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  225.583771][ T2756] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.582: invalid block
[  225.596043][ T2756] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.582: invalid indirect mapped block 4294967295 (level 1)
[  225.610651][ T2756] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.582: invalid indirect mapped block 4294967295 (level 1)
[  225.625064][ T2756] EXT4-fs (loop2): 2 truncates cleaned up
[  225.630928][ T2756] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  225.858379][  T467] usb 5-1: device descriptor read/64, error -71
[  225.864839][ T2665] usb 8-1: device descriptor read/64, error -71
[  225.939402][ T2775] netlink: 16 bytes leftover after parsing attributes in process `syz.6.589'.
[  225.961028][   T30] audit: type=1400 audit(1788567045.337:168): avc:  denied  { create } for  pid=2776 comm="syz.6.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  225.984123][   T30] audit: type=1400 audit(1788567045.337:169): avc:  denied  { bind } for  pid=2776 comm="syz.6.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  226.007104][ T2665] usb usb8-port1: attempt power cycle
[  226.012622][   T30] audit: type=1400 audit(1788567045.337:170): avc:  denied  { write } for  pid=2776 comm="syz.6.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  226.057623][   T30] audit: type=1400 audit(1788567045.427:171): avc:  denied  { create } for  pid=2780 comm="syz.6.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  226.089536][   T30] audit: type=1400 audit(1788567045.457:172): avc:  denied  { getopt } for  pid=2780 comm="syz.6.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  226.111125][ T2783] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.118473][ T2783] Zero length message leads to an empty skb
[  226.208034][   T30] audit: type=1400 audit(1788567045.577:173): avc:  denied  { connect } for  pid=2790 comm="syz.6.598" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  226.230072][   T30] audit: type=1400 audit(1788567045.577:174): avc:  denied  { write } for  pid=2790 comm="syz.6.598" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  226.263227][ T2792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.598'.
[  226.298367][  T467] usb 5-1: device descriptor read/64, error -71
[  226.416597][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.424068][  T467] usb usb5-port1: attempt power cycle
[  226.429613][ T2794] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.437211][ T2794] device bridge_slave_0 entered promiscuous mode
[  226.443938][ T2665] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  226.462121][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.469642][ T2794] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.477306][ T2794] device bridge_slave_1 entered promiscuous mode
[  226.549916][ T2803] device syzkaller0 entered promiscuous mode
[  226.573699][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.580832][ T2794] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.588255][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.595316][ T2794] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.609750][   T30] audit: type=1400 audit(1788567045.987:175): avc:  denied  { execute } for  pid=2804 comm="syz.6.604" path="/59/cgroup.controllers" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  226.637853][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  226.648846][  T317] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.661969][  T317] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.694396][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  226.706711][  T464] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.713828][  T464] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.735324][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  226.744428][  T464] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.751522][  T464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.774657][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  226.783324][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  226.817509][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  226.825946][   T30] audit: type=1400 audit(1788567046.197:176): avc:  denied  { setopt } for  pid=2820 comm="syz.7.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  226.848219][  T467] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  226.862235][ T2821] ==================================================================
[  226.870380][ T2821] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x635/0x6e0
[  226.872280][   T30] audit: type=1400 audit(1788567046.237:177): avc:  denied  { write } for  pid=2820 comm="syz.7.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  226.879669][ T2821] Read of size 1 at addr ffff88810bdb43f8 by task syz.7.612/2821
[  226.879693][ T2821] 
[  226.879699][ T2821] CPU: 0 PID: 2821 Comm: syz.7.612 Not tainted syzkaller #0
[  226.879730][ T2821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  226.926245][ T2821] Call Trace:
[  226.929530][ T2821]  <TASK>
[  226.932470][ T2821]  __dump_stack+0x21/0x30
[  226.936843][ T2821]  dump_stack_lvl+0x110/0x170
[  226.941555][ T2821]  ? show_regs_print_info+0x20/0x20
[  226.946873][ T2821]  ? load_image+0x3f0/0x3f0
[  226.951414][ T2821]  ? unwind_get_return_address+0x4d/0x90
[  226.957091][ T2821]  ? stack_trace_save+0xf0/0xf0
[  226.958447][ T2665] usb 8-1: device not accepting address 12, error -71
[  226.962009][ T2821]  print_address_description+0x7f/0x2c0
[  226.974387][ T2821]  ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0
[  226.980930][ T2821]  kasan_report+0x10f/0x150
[  226.985481][ T2821]  ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0
[  226.991997][ T2821]  __asan_report_load1_noabort+0x14/0x20
[  226.997660][ T2821]  xfrm_policy_inexact_list_reinsert+0x635/0x6e0
[  226.998402][  T467] usb 5-1: device descriptor read/8, error -71
[  227.004015][ T2821]  xfrm_policy_inexact_insert_node+0x954/0xb60
[  227.016356][ T2821]  ? xfrm_netlink_rcv+0x72/0x90
[  227.021243][ T2821]  ? netlink_unicast+0x86c/0xa30
[  227.026217][ T2821]  ? ____sys_sendmsg+0x5be/0x8f0
[  227.028094][   T39] usb 4-1: USB disconnect, device number 11
[  227.031189][ T2821]  ? ___sys_sendmsg+0x236/0x2e0
[  227.031219][ T2821]  xfrm_policy_inexact_alloc_chain+0x540/0xb40
[  227.048224][ T2821]  xfrm_policy_inexact_insert+0x6a/0x1190
[  227.053987][ T2821]  ? __kasan_check_write+0x14/0x20
[  227.059139][ T2821]  ? _raw_spin_lock_bh+0x94/0xf0
[  227.064122][ T2821]  xfrm_policy_insert+0x12c/0x9c0
[  227.069180][ T2821]  xfrm_add_policy+0x4e1/0x840
[  227.073978][ T2821]  ? xfrm_dump_sa_done+0xc0/0xc0
[  227.078962][ T2821]  xfrm_user_rcv_msg+0x559/0x7f0
[  227.083908][ T2821]  ? xfrm_netlink_rcv+0x90/0x90
[  227.088766][ T2821]  ? avc_has_perm_noaudit+0x490/0x490
[  227.094168][ T2821]  ? x64_sys_call+0x4b/0x9a0
[  227.098941][ T2821]  ? selinux_nlmsg_lookup+0x233/0x440
[  227.104328][ T2821]  netlink_rcv_skb+0x1e9/0x430
[  227.109118][ T2821]  ? xfrm_netlink_rcv+0x90/0x90
[  227.113975][ T2821]  ? netlink_ack+0xb10/0xb10
[  227.118580][ T2821]  ? wait_for_completion_killable_timeout+0x10/0x10
[  227.125201][ T2821]  ? __netlink_lookup+0x387/0x3b0
[  227.130243][ T2821]  xfrm_netlink_rcv+0x72/0x90
[  227.134943][ T2821]  netlink_unicast+0x86c/0xa30
[  227.139716][ T2821]  netlink_sendmsg+0x879/0xb80
[  227.144489][ T2821]  ? netlink_getsockopt+0x530/0x530
[  227.149705][ T2821]  ? alloc_file+0x59/0x580
[  227.154165][ T2821]  ? security_socket_sendmsg+0x82/0xa0
[  227.159640][ T2821]  ? netlink_getsockopt+0x530/0x530
[  227.164871][ T2821]  ____sys_sendmsg+0x5be/0x8f0
[  227.169823][ T2821]  ? __sys_sendmsg_sock+0x40/0x40
[  227.174859][ T2821]  ? import_iovec+0x7c/0xb0
[  227.179398][ T2821]  ___sys_sendmsg+0x236/0x2e0
[  227.184390][ T2821]  ? __sys_sendmsg+0x280/0x280
[  227.189165][ T2821]  ? percpu_counter_add_batch+0x13c/0x160
[  227.194900][ T2821]  ? __fdget+0x1a1/0x230
[  227.199159][ T2821]  __x64_sys_sendmsg+0x201/0x2d0
[  227.204306][ T2821]  ? ___sys_sendmsg+0x2e0/0x2e0
[  227.209180][ T2821]  ? __kasan_check_write+0x14/0x20
[  227.214317][ T2821]  ? switch_fpu_return+0x15d/0x2c0
[  227.219452][ T2821]  x64_sys_call+0x4b/0x9a0
[  227.223883][ T2821]  do_syscall_64+0x4c/0xa0
[  227.228318][ T2821]  ? clear_bhb_loop+0x50/0xa0
[  227.233013][ T2821]  ? clear_bhb_loop+0x50/0xa0
[  227.237699][ T2821]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.243620][ T2821] RIP: 0033:0x7f4a05bd1159
[  227.248070][ T2821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.267799][ T2821] RSP: 002b:00007f4a0462a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.276234][ T2821] RAX: ffffffffffffffda RBX: 00007f4a05e58fa0 RCX: 00007f4a05bd1159
[  227.284216][ T2821] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007
[  227.292195][ T2821] RBP: 00007f4a05c68024 R08: 0000000000000000 R09: 0000000000000000
[  227.300176][ T2821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.308163][ T2821] R13: 00007f4a05e59038 R14: 00007f4a05e58fa0 R15: 00007ffcb9493348
[  227.316154][ T2821]  </TASK>
[  227.319185][ T2821] 
[  227.321523][ T2821] Allocated by task 2821:
[  227.325851][ T2821]  __kasan_kmalloc+0xd4/0x100
[  227.330550][ T2821]  __kmalloc+0x13d/0x2c0
[  227.334816][ T2821]  sk_prot_alloc+0xed/0x320
[  227.339329][ T2821]  sk_alloc+0x38/0x430
[  227.343418][ T2821]  pfkey_create+0x12a/0x650
[  227.347943][ T2821]  __sock_create+0x38d/0x7a0
[  227.352577][ T2821]  __sys_socket+0xec/0x190
[  227.357020][ T2821]  __x64_sys_socket+0x7a/0x90
[  227.361724][ T2821]  x64_sys_call+0x8c5/0x9a0
[  227.366236][ T2821]  do_syscall_64+0x4c/0xa0
[  227.370785][ T2821]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.377042][ T2821] 
[  227.379417][ T2821] The buggy address belongs to the object at ffff88810bdb4000
[  227.379417][ T2821]  which belongs to the cache kmalloc-1k of size 1024
[  227.393561][ T2821] The buggy address is located 1016 bytes inside of
[  227.393561][ T2821]  1024-byte region [ffff88810bdb4000, ffff88810bdb4400)
[  227.407103][ T2821] The buggy address belongs to the page:
[  227.412741][ T2821] page:ffffea00042f6c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bdb0
[  227.423001][ T2821] head:ffffea00042f6c00 order:3 compound_mapcount:0 compound_pincount:0
[  227.431415][ T2821] flags: 0x4000000000010200(slab|head|zone=1)
[  227.437507][ T2821] raw: 4000000000010200 ffffea0004478800 0000000300000003 ffff888100043080
[  227.446105][ T2821] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  227.454692][ T2821] page dumped because: kasan: bad access detected
[  227.461109][ T2821] page_owner tracks the page as allocated
[  227.466837][ T2821] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1169, ts 114859187135, free_ts 111779118296
[  227.487517][ T2821]  post_alloc_hook+0x192/0x1b0
[  227.492307][ T2821]  prep_new_page+0x1c/0x110
[  227.496827][ T2821]  get_page_from_freelist+0x2c3a/0x2cd0
[  227.502392][ T2821]  __alloc_pages+0x1a2/0x460
[  227.507000][ T2821]  new_slab+0xa0/0x4d0
[  227.511081][ T2821]  ___slab_alloc+0x3ac/0x840
[  227.515683][ T2821]  __slab_alloc+0x49/0x90
[  227.520027][ T2821]  __kmalloc_track_caller+0x169/0x2c0
[  227.525411][ T2821]  __alloc_skb+0x210/0x730
[  227.529875][ T2821]  alloc_uevent_skb+0x85/0x240
[  227.534764][ T2821]  kobject_uevent_net_broadcast+0x1a6/0x5a0
[  227.540674][ T2821]  kobject_uevent_env+0x52b/0x700
[  227.545711][ T2821]  kobject_uevent+0x1d/0x30
[  227.550312][ T2821]  netdev_queue_update_kobjects+0x1c9/0x3e0
[  227.556225][ T2821]  netdev_register_kobject+0x281/0x330
[  227.561697][ T2821]  register_netdevice+0xeaa/0x1490
[  227.566826][ T2821] page last free stack trace:
[  227.571502][ T2821]  free_unref_page_prepare+0x5fa/0x600
[  227.576975][ T2821]  free_unref_page+0xae/0x540
[  227.581752][ T2821]  __free_pages+0x6c/0x100
[  227.586212][ T2821]  __free_slab+0xe5/0x1e0
[  227.590581][ T2821]  __unfreeze_partials+0x15a/0x190
[  227.595711][ T2821]  put_cpu_partial+0xc6/0x120
[  227.600412][ T2821]  __slab_free+0x1d4/0x290
[  227.604842][ T2821]  ___cache_free+0x104/0x120
[  227.609443][ T2821]  qlink_free+0x4d/0x90
[  227.613611][ T2821]  qlist_free_all+0x5f/0xb0
[  227.618132][ T2821]  kasan_quarantine_reduce+0x14a/0x170
[  227.623625][ T2821]  __kasan_slab_alloc+0x2f/0xe0
[  227.628486][ T2821]  slab_post_alloc_hook+0x4f/0x2b0
[  227.633612][ T2821]  kmem_cache_alloc+0xf7/0x260
[  227.638382][ T2821]  getname_flags+0xba/0x510
[  227.642898][ T2821]  getname+0x19/0x20
[  227.646802][ T2821] 
[  227.649129][ T2821] Memory state around the buggy address:
[  227.654759][ T2821]  ffff88810bdb4280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  227.662826][ T2821]  ffff88810bdb4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  227.670897][ T2821] >ffff88810bdb4380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  227.678962][ T2821]                                                                 ^
[  227.686939][ T2821]  ffff88810bdb4400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.695002][ T2821]  ffff88810bdb4480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.703579][ T2821] ==================================================================
[  227.711656][ T2821] Disabling lock debugging due to kernel taint
[  227.725827][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  227.735045][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  227.743299][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  227.757387][ T2794] device veth0_vlan entered promiscuous mode
[  227.763942][ T2823] netlink: 48 bytes leftover after parsing attributes in process `syz.6.613'.
[  227.773529][ T2823] netem: unknown loss type 11
[  227.778419][  T467] usb 5-1: device descriptor read/8, error -71
[  227.784774][ T2823] netem: change failed
[  227.815652][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  227.824440][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  227.835561][ T2794] device veth1_macvtap entered promiscuous mode
[  227.843576][  T481] device bridge_slave_1 left promiscuous mode
[  227.850286][  T481] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.859672][  T481] device bridge_slave_0 left promiscuous mode
[  227.865805][  T481] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.874084][  T481] device veth1_macvtap left promiscuous mode
[  227.880440][  T481] device veth0_vlan left promiscuous mode
[  227.962725][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  227.970521][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  227.978939][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  227.988818][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  227.997372][  T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready