last executing test programs:

11.352710845s ago: executing program 1 (id=55):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x7, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8b4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c00", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xb, 0x0, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x5b10df4d84c3f683}, 0x64040848)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40}, 0xa)
poll(&(0x7f0000000000)=[{r1, 0x200}], 0x1, 0x6)
prctl$PR_SET_ENDIAN(0x14, 0x2)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101142, 0xeaff)
read$FUSE(r2, 0x0, 0x0)
syz_read_part_table(0x104e, &(0x7f0000001300)="$eJzsz8EJwjAYBeDX1pbm4G5eXERn8uIgTuHdHQSJEFtxARHh+07Jy88Lf/ipLsmwHpK5HndLkPTLzD0p2V5e6fXQpqe1YDrdNi0p7ZaMKd2QR621vY/z1GV+l5XPz/v9+esLAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfeAYAAP//pX4L3Q==")

11.103947861s ago: executing program 1 (id=56):
syz_read_part_table(0x104e, &(0x7f0000001300)="$eJzsz8EJwjAYBeDX1pbm4G5eXERn8uIgTuHdHQSJEFtxARHh+07Jy88Lf/ipLsmwHpK5HndLkPTLzD0p2V5e6fXQpqe1YDrdNi0p7ZaMKd2QR621vY/z1GV+l5XPz/v9+esLAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfeAYAAP//pX4L3Q==") (fail_nth: 4)

10.73175618s ago: executing program 1 (id=59):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffd}}, {@errors_remount}, {@oldalloc}, {@jqfmt_vfsold}]}, 0x1, 0x4d4, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001d00)={r1, &(0x7f0000000cc0), &(0x7f0000001cc0)=""/30}, 0x20)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r3, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x16)

10.480532326s ago: executing program 1 (id=62):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x48f, &(0x7f0000000940)="$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")
mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x103)
mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x103)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs\x00')
readv(r2, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x48f, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvzG6LUqCIiMoPqaKx8UdrCyoHD2r0pomJHvBiUttCkIUaWhIhRKsxeDQk3o0nY/Qv8KQXo55MvOrdkBAlJqAHXTO7M6Ut3aU/drvF/XySKe/NvOW97868mTfzdjeArjWQ/UkitkTELxHRX88uLDBQ/+falfPjf105P55Etfrq70mt3NUr58eLosXr+vLMYBqRfpjklSw0ffbcibFKZfJ0nh+eOfn28PTZc48fPzl2bPLY5KnRw4cPHRx5+qnRJ1sSZxbX1d3vTu1Nyq9ffHn8yMU3f/iqHBG79tW3z49jTdK+ueRAFvgf1ZrFxR5qSWUbx9Z56aTcwYawIqWIyHZXT63/90cpru+8/njxg442Dmir7Nq0qfHm2SrwP5ZEp1sAdEZxoc/uf4tl+aOH2bUOPzru8nP1G6As7mv5Ut9SjjQv09PG+u+JiCOzf3+aLZHvh3+2LFHw3r42tgIA6CbfZOOfx5Ya/6Wxa165bfkcyvaIuCMidkTEnRGxMyLuiqiVvTsfz6xEfWqoNJe/cfyZXlp1cMuQjf+eyee2Fo7/6qO/arX6bynPba3F35McPV6ZfCJ/TwajZ1OWH2lSx7cv/PzxolWjxcB7YN74L1uy+ouxYN6OS+VFD+gmxmbGWjUovfx+xO7yUvEnczMBSTb8jIjdK/uvtxWJ4498sbdRoZvH30QL5pmqn0U8XN//s7Eo/kLSfH5y+Lao9MZwcVTc6MefLrzSqP41xd8C2f7fvPD4X1Si/89k/nzt9MrruPDrRw3vKVd7/Pcmr9XmrHvzde+MzcycHonoTV6q5ResH73+2iJflM/iHzywdP/fkb8mi39PRGQH8b6IuC8i9udtvz8iHoiIA03i//75B99affztlcU/seT5b+74375w/688UTrx3deN6l/e/j9USw3ma2rnv5to3JyoTGan9VUfzQAAAHDrSSNiSyTp0Fw6TYeG6p/h3xmb08rU9MyjR6fOnJqof0dge/SkxZOu/vx5aHa3PZIUnwWoPx8dzZ8VF89LD+bPjT8p3V7LD41PVSY6HDt0u74G/T/zW6nTrQPazve1oHst7v9ph9oBrD/Xf+heDft/+dn1bQiw7lz/oXvN6/9fnrmwp5Z4r/Z3/9yGJecCmvxyCHBrcP2H7qX/Q/fS/6F76f/Qldbyvf6NnejdGM1YeeLzng3RjJslIm1W5o1Y94bFhnhbWp1Imv6YRRsTnT4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtMZ/AQAA//9KofJ3") (async)
mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x103) (async)
mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x103) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs\x00') (async)
readv(r2, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1) (async)

10.135845724s ago: executing program 1 (id=68):
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
prctl$PR_GET_NO_NEW_PRIVS(0x27) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = socket$inet(0x2, 0x80000, 0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x4, 0x9, 0x10, 0xffff33fd, 0x20, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7, 0x8000, 0xc8e, 0x10000}})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @remote, @local}, 0xc) (async)
r2 = syz_ublk_setup_io_uring(0x5750, &(0x7f0000000100)={0x0, 0x4b16, 0x8, 0x1, 0x2a1}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r0, r0], 0x2)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000380)={r2, &(0x7f0000000280)=']\x00', 0x321000, &(0x7f00000002c0)={@align=0x6, {0x9, 0xc000, 0x5, 0xa}}, 0x3a, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x9})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
prctl$PR_GET_NO_NEW_PRIVS(0x27)

9.779824423s ago: executing program 1 (id=71):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0xc63ef4f5b0e0954a, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008891}, 0x44000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x200, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2021, 0x100000b, 0x11, r3, 0x100000000)

9.707673395s ago: executing program 32 (id=71):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0xc63ef4f5b0e0954a, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008891}, 0x44000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x200, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2021, 0x100000b, 0x11, r3, 0x100000000)

6.796289235s ago: executing program 4 (id=91):
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x10000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000600)={{}, "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"})
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0xffff, 0x6})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r7=>0x0})
socket(0x22, 0x4, 0xa0)
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0/file0', [{0x20, '/dev/fuse\x00'}, {}, {0x20, '.&${\'!-!!'}, {0x20, '/{[.@'}, {0x20, 'cpuacct.usage_user\x00'}], 0xa, "621fd54414"}, 0x46)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x1f, 0xd1, 0xfd, r7}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_FLAGS={0x8, 0x8, 0x1c8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1899f07ce9df00000051"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080))

6.719673427s ago: executing program 4 (id=92):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
io_setup(0x4, &(0x7f00000000c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xf, r1, 0x0, 0x0, 0x4000000}])
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001bc0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000002c0)=0x8)
r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000001980)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x38, 0x66, 0x64, 0x37, 0x33, 0x39, 0x66], 0x2d, [0x66, 0x32, 0x64], 0x2d, [0x61, 0x37, 0x63, 0x38], 0x2d, [0x62, 0x63, 0x37, 0x34], 0x2d, [0x31, 0x33, 0x32, 0x65, 0x2e, 0x63, 0x3e, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, 'syz2'}}]}, 0x7, 0x52e, &(0x7f0000000400)="$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")
keyctl$get_keyring_id(0x0, 0x0, 0x7)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = dup(r6)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000200)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffb}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}}], 0x1, 0x4c840)
r9 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)
sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000000000000c41000000030014"], 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x0)
syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00')
r10 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00')
unshare(0x4000400)
r11 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r12 = accept4$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800)
r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x4a8500, 0x0)
io_submit(r2, 0xa, &(0x7f00000023c0)=[&(0x7f0000001b80)={0x0, 0x0, 0x0, 0x6, 0x5f5, r13, &(0x7f0000001ac0)="d2e360f86ad5491def1d595f78b78252c1b640f84cfb036c498ac99b8ed6fe5550f6f9c09249df4ae1ccb9662b43118a367c7b36a4f55959dfb2b36641bc36d7a41ca37eca91d80b40e25cdf31653ae0b1606b9f411cebdf718844db46fc6e440338316b97b299fee86a515a945eeed834b0c760a0c952c4df04640cd59d16c29f3cc626fbb2a8e052d4466d30fb5f636374f1373bbb994fd87593d3d4", 0x9d, 0x7}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0xce00, r9, &(0x7f0000001cc0)="fb4f05734d6050804d79425d2dbeb622e2362d87b04f1679d3064813bd2d7706c8dad7490291d2ac15a12ef7edc3de972fd81f5eb36c71a00e5f7ed0a55a14beb83bfda011372f9ea33d7fb5159482acc26f477b712cc07d5aedb646d59b72917f072849dbb33dfbf3bce68f3e4645591b2ebb45dc3e25b263", 0x79, 0x4, 0x0, 0x0, r7}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x7, 0x101, r0, &(0x7f0000001d80)="263901a5660063df7c3143bb3901017c21ee4275e0b98579bc212409b2f7e7621a1fd0006fa40d78f726e66f425cfd0bcd4525c9881e6d058b04bf9d6506c85cb52d350c7ca4fb6ec1d1740bc126db84bb655f30a2a3bf8204eb6de4c1fe3d1ec8b0c485009b3655ebeaa61965b704f2caa2af3f37cd7b56438b16d1eb0adb9b9f77d7a6083625dc7ebc1f8380acdf4c5cec7ca1d0cb09825d4c4e50d485dedacb86aef9561ba51a96ee71eddd04d5ddb10c85c4b9fc8ee5fd075d43bb3807ef2e6e8bb7bd8c078f288ba1a5cbbb604dc2b4973f65743abda88a4066fec1", 0xde, 0x6, 0x0, 0x0, r7}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0xf, 0x2, r9, &(0x7f0000001ec0)="d69a1581608c364748291c75", 0xc, 0x5d778215, 0x0, 0x3, r1}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000001f40)="09d93837d3aa9f9a31f0477bc6d26a3be3512f734b914dfb5472df980901467da847f4e582267d1ab8c6e995c6883bcb6c388d8852ee73516aab8de44ec16e2b7e183bdeca3b", 0x46, 0x7, 0x0, 0x4}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x6, 0x422b, r12, &(0x7f0000002000)="5cf6b1070d20452c521317701fb674bdc0a935dbbaaa953136d0c47b", 0x1c, 0x4802, 0x0, 0x3}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x7, r11, &(0x7f0000002080)="71d6a54a1075fba5c8368611cfca1d66b51200a3c4ed05862ef585d4229f8aa136db32dea12464e3e8a128a63c3033188cda77a4f494916d6e3e2d1ee9f86152d5f505a83b329a028128b5c051d71e5e005bc90da0bcf406182cd93297987e6480c836496a164354a3ca28210164ac541625c93d9dbcb2577a888678ea35e9520e528aa9a6569534fdb478721d48baea1e020963f27748837f427e982adfc6", 0x9f, 0x8000000000000000, 0x0, 0x0, r1}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000002180)="b0985ba1b6fa89c10a6e7f3ad0dd0d35e2e67e23b867e5b34f991deb401c947c6e479a8efd266d826b7d9396df1c7aaa075a9fbcdd97173df8da", 0x3a, 0xd, 0x0, 0x3, r7}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x8, 0x8000, r0, &(0x7f0000002200)="b8ff7ac1", 0x4, 0x8}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x3, r11, &(0x7f0000002280)="97fb89dd7d0943ab7b488a3766d77ba61335a0a2ade7213e8db00e64bb6d0a6fb3a915c51dc2687b8dc0fa824c55808d94bd9d3a533af20f56e97e61e95952116de09f8e55417da5faf41bc979219efee7cf63f9a701406df3e796a31d75741ec9bfba9dc2c831b1f01cb2b8c8d43a6cf2e126f5c7da2e90449a9d7432ea6abfbb256a192e724808b56f75d8fd8c4b0673fd02cfc599f08d912487ca4c86f1d0f40837f36d98bd828f607c5958cb52ff57eac06cc4b5d4ec34df5bea3b235b7ef9634af59798d6cb4aa430e95210b06960aa998390d730dc12af8118104e57690e1fd094cef932309934ee45f7099eeb988457", 0xf3, 0x7, 0x0, 0x1}])
ioctl$BTRFS_IOC_SNAP_CREATE(r11, 0x50009401, &(0x7f0000000940)={{r12}, "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"})
pwritev(r11, 0x0, 0x0, 0xfffffff9, 0xa)
write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2a8fdcf, 0x3a, '', 0x3a, '::&*@(@}:', 0x3a, './file0', 0x3a, [0x46, 0x0, 0x4f, 0x50]}, 0x34)
openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff)
openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff)

6.719331367s ago: executing program 5 (id=93):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffec100f4b, 0xd, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x40, 0x20ffff}}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000004c0)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x249, &(0x7f00000007c0)="$eJzs3UFoFFcYB/BvZnebJllK2l4KhbZQSmkDIb0VekkvLQRKCKUU2kJKKb20JIU0obfEkxcPelbJyUsQb0aPkkvwogieouYQL4IGDwYPeliZnUSiWTUycUczvx9MMrP73nxvmP2/WRaGCaCyBiJiJCJqETEYEY2ISHY2+CRfBrY2F3pXJiJarR/vJu12+XZuu19/RMxHxNcRsZwm8Xc9Ynbp1/X7q99/fmSm8dmppV96u3qQWzbW137YPDl2+OzoV7OXr94eS2Ikmk8c1/5LOrxWTyLeexXFXhNJvewRsBfj/5+5luX+/Yj4tJ3/RqSRn7yj028tN+LLE8/qe+zOlQ+7OVZg/7VajewaON8CKieNiGYk6VBE5OtpOjSUf4e/XutL/5ma/m/wr6mZyT/LnqmA/dKMWPvufM+5/qfyf6uW5x84uLL8/zS+eCNb36ztuVvS6fcs4M2S5X/w97kv4uXyDxwA8g/VJf9QXfIP1fW8/KcljQnoDtd/qC75h+qSf6gu+Yfqkn+orp35BwCqpdVT9h3IQFnKnn8AAAAAAAAAAAAAAAAAAIDdFnpXJraXbtW8eDxi49uIqHeqX9t6DsHb7b9995Ks2WNJ3q2Q3z4uuIOCTpd89/U7N8utf+mjcuvPTUbMH4qI4Xp99+cvKfwcjHdf8H7jj4IFCvrm53LrP1wst/7oasSFbP4Z7jT/pPFB+3/n+aeZnb+C9f99UHAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdM2jAAAA//9BqW0t")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808070, 0x0, 0x1, 0x0, &(0x7f00000003c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0xc, 0x2, 0xe4, 0x40, 0x2a, 0xff, 0x34, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0xc, 0x58, 0x5, 0x3}, {0xdddd1000, 0xe000, 0xb, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0x3, 0x5d, 0x4, 0x43, 0x0, 0xfa, 0x80, 0x7, 0xe, 0x4}, {0x0, 0x9000, 0x8, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x13, 0xa0, 0xb6, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x60000, 0x2, 0x4, 0x5, 0x7, 0xb, 0xb, 0x0, 0x6, 0x7e, 0xff, 0x70}, {0xc000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x3, 0x16, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x3ff}, 0x80000031, 0x0, 0x6000, 0x42024, 0x806, 0x9501, 0x3000, [0x6840000000000001, 0x3, 0x91, 0xff]})
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84842, 0x181)
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0xd02)

6.643980329s ago: executing program 4 (id=94):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000000000108fdffff000000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000002c001a8020000280040001"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x40014)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x32a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf585, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x81, 0x2}}}}}]}}]}}, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_usb_control_io$hid(r4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000154000/0x2000)=nil, 0x2000, 0xa, 0x110, 0xffffffffffffffff, 0xcac82000)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = getpid()
sched_setscheduler(r6, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
openat$cgroup_int(r5, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0)

6.370471255s ago: executing program 5 (id=100):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000040)='./file7\x00', 0x200041, &(0x7f0000000240)={[{@lazytime}, {@noauto_da_alloc}, {@i_version}, {@debug}, {@dioread_nolock}]}, 0x1, 0x510, &(0x7f0000000440)="$eJzs3cFvHFcZAPBvxt7YddzYhUoFBDSUQkBRdu1NG1U9lQsIVZUQFScOrrE3luVdr+Vdl9pEqv0/VKISBwQnzhyQOFTqiSOCG9xyCQekABEoRuKwaHbHjmPv2m688Sre308azbx54/ney2re2/2i3RfA0LoaEdsRcSki3ouIqfx8km/xVmfLrnv44M7C7oM7C0m0Wu/+M2nXZ+fiwN9kLuf3HI+IH34v4ifJ0biN1sjKfLVaWc/LpWZtrdTY3LqxXJtfqixVVsvlW7O3Zt64+Xq5b319ufbb+99dfvtHn/z+K/f+vP3tn2XNmszrDvajnzpdL+zHyYxGxNtPI9gAjOT9uTTohvBE0oj4XES80n7+p2Kk/WqeTpfHGgB4BrRaU9GaOlgGAC66tJ0DS9JinguYjDQtFjs5vBdjIq3WG83rt+sbq4udXNl0FNLby9XKTJ4rnI5CkpVnP8yOH5XL8Xj5ZkS8EBEfjT3XLhcXTp9nAAD66/Kh+f8/Y535HwC44MZPumDufNoBAJyfE+d/AODCMf8DwPAx/wPA8DH/A8CwuTzoBgAA5+7u3uf/kUG3BAA4Fz94551sa+3mv3+9+P7mxkr9/RuLlcZKsbaxUFyor68Vl+r1pWqluFCvnXS/ar2+NvtabHxQalYazVJjc2uuVt9Ybc61f9d7rlI4l14BAMd54eVP/5pExPabz7W3OLCWg7kaLrZ00A0ABkbOH4aXX+GG4eUzPnDSWp49vyL08RMEa334BH8E9Nu1L8r/w7CS/4fhJf8Pw0v+H4ZXq5X0WvM/3b/kgCvdTgIAzxQ5fuBs////0fN9bxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Aybb2/SBcpoWixHPR8R0FJLby9XKTERciYi/jBXGsvLsQFsMAJxd+vckX//r2tSrk4drLyX/HWvvI+Knv3j35x/MN5vr2RuA5F/755sf5+fLg2g/AHCSvXl6fx7PPXxwZ2FvO8/23P9OZ3HRLO5uvnVqRmM02/1pPAoRMfHvpFPOZe9XRvoQf3snIr7Qrf9JOzcyna98ejh+Frsfi56ePn76WPy0XdfZZ/8Wnz9y57GeMU9a6xWGxafZ+PNWt+cvjavt/XjXxY/H2yPU2e2Nf7tHxr+95328PdZ0G/+unjbGa3/4fs+6nYgvjXaLn+zHT3rEf/WU8e9++auv9Kpr/SriWhyKnz5+TRar1KytlRqbWzeWa/NLlaXKarl8a3Zs5o2br5dL7Rx1aS9TfdQ/3rx+pWf/fxMxcTh+HnX8hP5/49het/YH4F//770ff61X/J2Ib329++v/4jHxsznxm8fGf2R+4nc9l+/O4i92+r/zWV//66eMf+9vW4unvBQAOAeNza2V+Wq1st7Xg0L0+YYHDpKn1GYHF/wgez9+1vu8lKfMul7zx19+8lJWOfCe9uVgwAMT8NQ9eugH3RIAAAAAAAAAAAAAAKCXQ1/6Sfr+daJ00D0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIvt/AAAA//+BYMNZ")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newsa={0x110, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xc, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x110}}, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x4)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

5.891467497s ago: executing program 5 (id=106):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4081, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xc1}}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@min_batch_time}]}, 0x30, 0x527, &(0x7f0000000200)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2)
unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="20228c4c1291acbe7d7f034ee0280000002821c263138526792c3cbdeace918d0fb74237cc6e446c4e885af26e3244cd3d1ef96c5e362faee7889681ce2a52973661d67a0d55431107009692f6dd44f5fa7744383e7244bcab638d06c4eeae2681bee9eb8f9539cfc7778c8c4315bfd344ffc76ed2df6fa7b1b63603a6473245fe6d46550e327f6f0313c278ba703a4b188dc1b9444bdcb28afcd63a5884242d32b7928be8942655a963d5b67175b2111003784b6cb1d40a8a113747a18ce83ba27d6c3b48"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xc0, 0x30, 0x2, 0x70bd27, 0x0, {}, [{0xac, 0x1, [@m_police={0x6c, 0x16, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1caa}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xc0}}, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000340)={0x2b, 0x30, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x79, 0x7, [0x8, 0x96ea]}}, @generic={0x47, 0x8, "e237ce087318f2a6"}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x58, {0x1, 0x14, 0x74, 0xd8da, [0x750e, 0x3, 0x10000, 0xb17, 0x82c, 0x6, 0x3, 0x4, 0x7, 0x5]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x51, 0xf, [0xfe]}}, @generic={0x6, 0xe1, "9a01485ecac729407a0390fc142e75498f5b3f81a83039a4a1bfaef9e1731bc1400d7af38b6673e8e365aa2e2e8137a3e844d14be4bc9c4e7887b711b40f79170c834f3308cc4eb4ca7b6def9213df0de94bb278581c1b4ad590b8df62f1958f4d1efbd13aa4178b9a89a77c9d57a01baf1b0ba18b45233707b8e7171f02795def423eedb32a0e48e8522a1294e03fd22c0b1a82d5076a7e0308b6986c2ac8ff86d8a9226c426a712cdd623b176ac9ca12c15e5674d59782b2455aee918a199dea7034ff0ca03c875558a3d5217952dc73e5dee45b6681ce4431f4f5de4c1ef0f3"}]}, 0x188)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x4e21, 0x80, @mcast1, 0x7}}, {{0xa, 0x4e22, 0x3, @remote, 0xe}}}, 0x108)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0xc, 0x4c, {0x4c, 0x21, "59d873b6ca493303e775e843d7b79ca411a7f4cf9cbc358cb243a6ecad6a5229ec252dedfcfa2ccb2f14a50e67e710e20a5614a9b0ee90a1df0ed35364f7ba098a338ca7325ef00b54c0"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0xf, 0x4c, "210b1da864d57011a41ac0d5df03c15899a65e5f2d6529ac14fa453d3d8b7f6db259eaa4f98e7bb5cde281acb93f93c7fd01d00e98f945489ad52ae1bd5aa9850e41d95613daaa2f7d4ac891"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb2}, &(0x7f0000000300)={0x20, 0x81, 0x1, "da"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "fbfc3b"}, &(0x7f0000000380)={0x20, 0x83, 0x1, '5'}, &(0x7f00000003c0)={0x20, 0x84, 0x3, "127295"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "91cafe"}})

4.261971076s ago: executing program 3 (id=121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'nat\x00', 0x0, [0x5, 0xd0, 0xfffffffa, 0x81, 0x4]}, &(0x7f0000000200)=0x54)
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
write$FUSE_INIT(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00', <r5=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
r7 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x48882, 0x20, 0x2}, 0x18)
setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000080)={@local, @rand_addr=0x64010100, 0x1, "baf6ee28d485cef441cc4d7b7af726e5c14ea4c79035e320a3927398ce71d385", 0x40, 0xdc93, 0x4, 0x2}, 0x3c)

4.238714567s ago: executing program 3 (id=123):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@orlov}]}, 0x1, 0x577, &(0x7f0000001040)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', 0x0, 0xc002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4)

4.064486881s ago: executing program 3 (id=126):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
unshare(0x22020600)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+pids'], 0x6)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="ebfa0e81ceb3dc4c430515dc4dade38ff8c84ace9d15af003afa41b75fbebe5b76443645c1dc73113beef85ec94ed0415b012c498c3bb8f9f0c37b9b323b6d", 0x3f}], 0x1)

3.980446583s ago: executing program 3 (id=129):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
socket$unix(0x1, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3.971621714s ago: executing program 3 (id=130):
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xff01}, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x26)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
splice(r0, &(0x7f00000001c0)=0xfead, r2, &(0x7f0000000240)=0x8, 0x7, 0x8)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000180)={0x20, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x26, 0x0)

3.67864131s ago: executing program 5 (id=137):
r0 = socket(0x840000000002, 0x3, 0x100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r1, r2, 0x0, 0x200000) (async)
sendfile(r1, r2, 0x0, 0x200000)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) (async)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d6173710000000014000280080002400000001708000340000000040900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000})
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x7}, 0x1, 0x0, 0x0, 0x8091}, 0x20048080) (async)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x7}, 0x1, 0x0, 0x0, 0x8091}, 0x20048080)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0)
write$tcp_mem(r6, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48)
socket$inet(0x2, 0x3, 0x1) (async)
socket$inet(0x2, 0x3, 0x1)

3.614891902s ago: executing program 4 (id=139):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000040))
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f130000000000001d440000000000006b0af8fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faff92c3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f0400000040d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462e8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f843226"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00')
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100))
syz_read_part_table(0x104e, &(0x7f0000001300)="$eJzsz8EJwjAYBeDX1pbm4G5eXERn8uIgTuHdHQSJEFtxARHh+07Jy88Lf/ipLsmwHpK5HndLkPTLzD0p2V5e6fXQpqe1YDrdNi0p7ZaMKd2QR621vY/z1GV+l5XPz/v9+esLAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfeAYAAP//pX4L3Q==")

3.457181616s ago: executing program 5 (id=140):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x5)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffff0000000003)
r5 = socket(0x1e, 0x5, 0x0)
listen(r5, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010000300"/17, @ANYRES32=0x0, @ANYBLOB="0000000001000000300012800b000100697036746e6c000020000280060011004e2100001400030000000000000000000000ffff00000000"], 0x50}}, 0x8000)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r5, 0x0, 0x0, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000006980)=ANY=[@ANYBLOB], &(0x7f0000006f80)={0x0, 0x0, 0x0, 0x0})
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000000)={0x140, 0x800000a, 0x5, 0x7, 0x10, "737b27e90e2947801cf3a25bada40a9fd86040"})
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000240)=0xd)
getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000400), &(0x7f0000000480)=0x68)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000040000000600000000000000", @ANYRES32=0x1, @ANYBLOB="2000000006ff6c8900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0x8000000, 0xe, 0x9, 0xfd, 0x6, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0x0, 0x5, 0x5, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0x80a0000, 0xf, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xe000, 0xb, 0x3, 0x2, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xd, 0x6}, {0x1000, 0x100000, 0xa, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x0, 0x2, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x4000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c0cd}, 0x34008098)

3.28770459s ago: executing program 4 (id=141):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000040)='./file7\x00', 0x200041, &(0x7f0000000240)={[{@lazytime}, {@noauto_da_alloc}, {@i_version}, {@debug}, {@dioread_nolock}]}, 0x1, 0x510, &(0x7f0000000440)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newsa={0x110, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xc, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x110}}, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

2.89087484s ago: executing program 4 (id=142):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r2)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, 0x0, &(0x7f00000000c0))
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x694c, 0x4)
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="e6d4825f3773", 0x6}, {&(0x7f0000000280)='%', 0x1}], 0x2, 0x0)
splice(r0, 0x0, r3, 0x0, 0xcc0, 0xc)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@init_itable}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4e9, &(0x7f0000000a00)="$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")
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}, 0x80001}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x13)
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x10)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r6, 0x6609)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
fchdir(r8)
r9 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00')
preadv(r9, &(0x7f0000003440), 0x0, 0x15f, 0xb)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x40880, 0xa0)
getdents(r10, 0x0, 0x0)
pwrite64(r7, 0x0, 0x0, 0x4b1)

1.409099936s ago: executing program 2 (id=160):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x21)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005080)={0x10, 0x2e, 0x1, 0x70bd2c, 0xfffffffc}, 0x10}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)

1.363508037s ago: executing program 0 (id=162):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=[@set_irq_handler={0xc8, 0x20, {0x1}}, @code={0xa, 0x6a, {"a741d39d000000000f20c035010000000f22c0c7442400944e0000c74424020c000000c7442406000000000f011c24650f0766b8d1000f00d066baf80cb8c8ffa28aef66bafc0c66b801ed66eff2676543d9e865410f01c9fb"}}, @uexit={0x0, 0x18, 0x456e555e}, @out_dx={0x6a, 0x28, {0x218a, 0x5, 0x2}}, @code={0xa, 0x63, {"400fc73a0f08676640ff1c954f6afd6f66baf80cb8d829e384ef66bafc0cb8cb000000ef420f789a00480000450fc7aba50b0000400f0fb370000000bf0f01c366baf80cb800bb938cef66bafc0cedf344a5"}}, @code={0xa, 0x6a, {"0f30640f01c2666540f4c482b13f050e000000b9800000c00f3235008000000f306565f2420f06c4e1ed6a84887a00000066baf80cb8868d258def66bafc0cecc74424001e000000c7442402d8000000ff1c24430f38ca62c6"}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x9b, 0x6, 0x4}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x5, 0x40}}, @in_dx={0x69, 0x20, {0x808b, 0x5}}, @wr_drn={0x68, 0x20, {0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7, 0x7fffffff, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @code={0xa, 0x70, {"66baf80cb83cd5e782ef66bafc0c66edb9800000c00f3235000400000f3066baa100ed26f26626410f84000000000f1e06c7442400c3000000c744240200000100c7442406000000000f01142466ba4000ed450fc7700036f23cc1410f78c3"}}, @nested_vmresume={0x130, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6824, 0x1, 0x7, 0xe6}}, @out_dx={0x6a, 0x28, {0x7d3a, 0x1, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x9a, 0x1}}], 0x417})
ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000640)={0x4, 0x0, [{0x2a, 0x0, 0x1}, {0xb7d, 0x0, 0x2}, {0xba6, 0x0, 0x6a}, {0x8f4, 0x0, 0x401}]})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r3=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0x4}, 0x80)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf9, &(0x7f0000000240)=""/249, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xc, 0xb, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x1, 0x4, 0x3}, {0x1, 0x5, 0x0, 0x9}, {0x2, 0x7, 0x10, 0xb}, {0x0, 0x5, 0xe, 0xa}, {0x5, 0x2, 0xf, 0x5}], 0x10, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x70, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20)
r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
r11 = fsmount(r10, 0x0, 0x0)
listen(r11, 0x3)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x8, 0x9e, 0x4}, 0x10, r3, r4, 0x6, &(0x7f0000000cc0)=[r5, r6, r8, r9, r11, r12, r13], &(0x7f0000000d00)=[{0x4, 0x2, 0xc, 0xb}, {0x5, 0x1, 0x3, 0x5}, {0x1, 0x4, 0xc, 0x4}, {0x0, 0x3, 0x7, 0x6}, {0x3, 0x4, 0x0, 0x3}, {0x2, 0x3, 0x3, 0x2}], 0x10, 0x5}, 0x94)

1.351808827s ago: executing program 0 (id=163):
getpid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x6, 0x0, 0x100, 0x6, 0x988103, r1})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

1.315700458s ago: executing program 2 (id=164):
syz_read_part_table(0x104e, &(0x7f0000001300)="$eJzsz8GpwkAUBdCb5Cc/s7A3NzaiNbmxEKtwbw+CjDAxYgMiwjmrmfcud5jwVV2S//WQzPWwTYZl1z8zt6Rkc16ml31LT2vBdLz+tUlpt2RM6Ybca61tP85Tl/lVVt4f73enj38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7AIwAA//+ubgvh")

1.22778292s ago: executing program 0 (id=165):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000040)='./file7\x00', 0x200041, &(0x7f0000000240)={[{@lazytime}, {@noauto_da_alloc}, {@i_version}, {@debug}, {@dioread_nolock}]}, 0x1, 0x510, &(0x7f0000000440)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newsa={0x110, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xc, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x110}}, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x4)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

1.22601458s ago: executing program 2 (id=166):
r0 = syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800015, &(0x7f0000005ac0)=ANY=[@ANYBLOB="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"], 0x1, 0x5507, &(0x7f0000000340)="$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")
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='f2fs\x00', 0x8000, &(0x7f0000000080)={@align=0x2d0, {0xc, 0x6, 0x401, 0x8}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8})
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000180)={0x7, 0x1})
r2 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, &(0x7f0000000200))

993.574366ms ago: executing program 0 (id=167):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600) (async)
unshare(0x22020600)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x8)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r3, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000040)='./file1\x00', 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4001010) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4001010)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

929.095137ms ago: executing program 2 (id=168):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r0, &(0x7f0000000000)="fa", 0xfffffdef) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000100001042cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400100012800b00010062726964676500001400028005002c000500640005002b0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x20044081}, 0x20040844)

739.774312ms ago: executing program 3 (id=169):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200000004000000080000000100000080000000e1913b7a91df1556e639fbec75c36ebfa62d6c1f29a3c7f3c5ae99f2544fe32a74d82a4690fe4dcbca06fa3abf5c6f042d79a89b93b7959383a03a24c989a53620c89457f35fa063413f857e1670d9ff643023a163301d203a15242419a96ce0dc86b3bae072663f0564ae4e6ef229b4479b13747b920389f802e210f381fd61395dbb0caf4e80f82d56fe31bab6da00dea2e7755222896d5022deba68cc38f292350810110be74feed3bbf6159238ce1ce7b2e23c6a10d5796aa01dc2c8c497143800c273351d1b7f4666489e7d86f282b826f1d1a17bf78c5594f174d0a9c6b99722e840c60e42d3874719fc1084", @ANYBLOB="0000000000d408d82cb7e021a08c6e4214e513071a36"], 0x48)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r7 = socket$netlink(0x10, 0x3, 0x0)
preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x62}], 0x1, 0x81000001, 0x10000)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_read_part_table(0x104e, &(0x7f0000001300)="$eJzsz8EJwjAYBeDX1pbm4G5eXERn8uIgTuHdHQSJEFtxARHh+07Jy88Lf/ipLsmwHpK5HndLkPTLzD0p2V5e6fXQpqe1YDrdNi0p7ZaMKd2QR621vY/z1GV+l5XPz/v9+esLAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfeAYAAP//pX4L3Q==")

729.925232ms ago: executing program 0 (id=170):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@orlov}]}, 0x1, 0x577, &(0x7f0000001040)="$eJzs3V9rW+UfAPDvSdv9328djPFTRIq7cDKXbq1/JngxL0WHA72fpc3KaLqMJp1rHbpduBtvZAgiDsRr9d7L4RvwVQy0MGQURbypnPSk7ZK0zdK0zZbPB07zPOec9HmenPN9eJ48CQmgZw2lf3IRz0XEV0nEkTXH+iM7OLR83uKjm+PplsTS0od/JpFk+2rnJ9njwSzz/4j49YuIU7nGcstz81NjxWJhJssPV6avDZfn5k9fmR6bLEwWro6Mjp57fXTkrTff6FhbX7n497cf3H/33JcnFr/5eeHo3STOx6Hs2Np2bMGttZmhGMpek4E4X3fi2Q4U1k2S3a4AbenL4nwg0j7gSPRlUQ88+z6PiCWgRyXiH3pUbRxQm9t3aB781Hj4zvIEqLH9fdkZ+6pzowOLyWMzo3S+O9iB8oci4pc/7t1Nt+jc+xAAm7p1OyLO9Pc39n/J8nvDW3CmhXPqy9D/wc65n45/Xm02/sllsbmv+rd+/HOwSey2Y/P4zy3UnbKnA8WuSMd/bzcd/64sWg32ZbnD1THfQHL5SrGQ9m3/i4iTMbA3zW+0nnNu8cFSw87Plh/Wjv/SLS2/NhbM6rHQv/fxp06MVca22u6ah7cjnm86/k1Wrn/S5Pqnr8fFFss4Xrj34nrHNm//9lr6IeLlptd/dUUr2Xh9crh6PwzX7opGf905/tt65e92+9Prf2C5/f9kU8L69g8ma9dry09exvf7/i2sd6zd+39P8lE1XesMboxVKjNnI/Yk7zfuH1l9bi1fOz9t/8kTG/d/ze7//RHxcYvtv3Pspxfab//2Sts/sfH9X3f9nzzx4L1Pv1uv/Nau/2vV1MlsTyv9X6sV3MprBwAAAAAAAN0mFxGHIsnlV9K5XD6//PmOY3EgVyyVK6cul2avTkT1u7KDMZCrrXQfWf08RHW5dXDN5yNG6vKjEXE0Ir7u21/N58dLxYndbjwAAAAAAAAAAAAAAAAAAAB0iYPrfP8/9XvfbtcO2Hbt/eT3QMfrAey8TeO/E7/0BHSlTeL/pU92qiLAjmtv/A88C8Q/9C7xD71L/EPvEv/Qu8Q/9C7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAB118cKFdFtafHRzPM1PXJ+bnSpdPz1RKE/lp2fH8+OlmWv5yVJpsljIj5emN/t/xVLp2tmRmL0xXCmUK8PluflL06XZq5VLV6Z/PBxR8KPhAAAAAAAAAAAAAAAAAAAA0Kg8Nz81ViwWZiSqib3RFdV4ihL93VGN3kxEbFsRu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCq/wIAAP//Gx846w==")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4)

474.206328ms ago: executing program 0 (id=171):
timerfd_create(0x0, 0x800)
r0 = socket$inet6(0xa, 0x2, 0x3)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="0004040000000000fc000000000000000000000000000000ff01", @ANYRESDEC=r0], 0x28)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'veth1_to_bridge\x00'})

359.579021ms ago: executing program 5 (id=172):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x39c, 0x0, 0xc00, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x140, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37eca6aa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb77}, @TIPC_NLA_NODE_ID={0x27, 0x3, "4fee102d8271eac860ee12b568a4cb1b8dc476a89610976e11f41de0e8c6b80833078c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe01}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd49}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x505}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x450}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4e78}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1d4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x2000000}, 0x48b1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x10, &(0x7f0000000b40)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@check_normal}, {@fat=@check_strict}, {@utf8no}, {@utf8}, {@numtail}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x548, &(0x7f0000001740)="$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")
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="0a000000010001", 0x7)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x100a, 0x9}, 0x50)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, 0xffffffffffffffff, 0x6d365000)
syz_read_part_table(0x107b, &(0x7f0000001080)="$eJzs0MFNAzEQBdCfON5kRRqgAtqgIM5cgS6QOFEJVxqgBWpAymHQegNUAFzeO9jyWH/GcvhX80u/SlJ3yZy2VB4Pye7i6/44ajmM9aOSU+3nn/j1lPSkqo/jrqV6VZ0ja/Fyk01S78+ZvnP7h7G1TPebZco673WbPE25OWZJ3OZt7dBatuMFp1qdGyfVf/d3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvfAYAAP//ReQdug==")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
getrlimit(0xd, &(0x7f0000000080))
getrlimit(0x5, &(0x7f0000000040))

69.253248ms ago: executing program 2 (id=173):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESDEC], 0x0, 0x1da, &(0x7f0000000600)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (rerun: 32)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) (async, rerun: 32)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

0s ago: executing program 2 (id=174):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008530000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = dup2(r0, r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x9, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x3, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x7, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x4, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x3d7, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff6, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x3, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x9, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x3, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x7, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x4, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x3d7, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff6, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x3, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts.
[   21.475428][   T30] audit: type=1400 audit(1785024535.772:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.476496][  T277] cgroup: Unknown subsys name 'net'
[   21.498073][   T30] audit: type=1400 audit(1785024535.772:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.525977][   T30] audit: type=1400 audit(1785024535.822:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.526107][  T277] cgroup: Unknown subsys name 'devices'
[   21.642487][  T277] cgroup: Unknown subsys name 'hugetlb'
[   21.648111][  T277] cgroup: Unknown subsys name 'rlimit'
[   21.784301][   T30] audit: type=1400 audit(1785024536.082:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.807523][   T30] audit: type=1400 audit(1785024536.082:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.812745][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.832403][   T30] audit: type=1400 audit(1785024536.082:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.863873][   T30] audit: type=1400 audit(1785024536.132:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.874415][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.889671][   T30] audit: type=1400 audit(1785024536.132:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.923752][   T30] audit: type=1400 audit(1785024536.172:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.949256][   T30] audit: type=1400 audit(1785024536.172:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.444248][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.451351][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.458630][  T285] device bridge_slave_0 entered promiscuous mode
[   22.466452][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.473498][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.480853][  T285] device bridge_slave_1 entered promiscuous mode
[   22.526889][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.534003][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.541395][  T287] device bridge_slave_0 entered promiscuous mode
[   22.548080][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.555218][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.562496][  T287] device bridge_slave_1 entered promiscuous mode
[   22.609109][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.616243][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.623971][  T286] device bridge_slave_0 entered promiscuous mode
[   22.630658][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.637789][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.645074][  T286] device bridge_slave_1 entered promiscuous mode
[   22.710492][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.717557][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.724900][  T289] device bridge_slave_0 entered promiscuous mode
[   22.731563][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.738587][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.745974][  T288] device bridge_slave_0 entered promiscuous mode
[   22.752808][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.759825][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.767246][  T288] device bridge_slave_1 entered promiscuous mode
[   22.781375][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.788400][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.795710][  T289] device bridge_slave_1 entered promiscuous mode
[   22.896222][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.903280][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.910545][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.917574][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.925870][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.932909][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.940153][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.947182][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.964615][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.971664][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.978908][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.985935][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.994226][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.001263][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.008527][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.015549][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.069669][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.076724][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.083981][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.091008][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.099492][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.107048][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.114273][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.121445][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.128778][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.136037][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.143208][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.150325][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.157536][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.164696][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.172651][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.180011][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.196668][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.204884][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.211979][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.226071][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.233658][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.241331][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.248681][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.256970][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.264006][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.271338][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.279402][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.286425][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.301926][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.310012][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.317167][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.324983][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.333496][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.340636][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.348071][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.362839][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.370771][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.378964][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.385986][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.393326][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.401571][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.408569][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.417873][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.426023][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.433045][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.443854][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.452184][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.482003][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.490176][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.498361][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.506397][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.514271][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.521778][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.529156][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.537167][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.545085][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.553224][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.561309][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.569244][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.577214][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.585244][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.599380][  T285] device veth0_vlan entered promiscuous mode
[   23.610020][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.618348][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.626688][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.633730][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.641394][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.649576][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.657740][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.664781][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.672160][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.679936][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.687962][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.696276][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.704751][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.712266][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.721019][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.729331][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.740907][  T285] device veth1_macvtap entered promiscuous mode
[   23.752496][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.760617][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.768904][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.776620][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.786364][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.794575][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.811889][  T289] device veth0_vlan entered promiscuous mode
[   23.821693][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.829102][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.836700][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.845144][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.853551][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.861811][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.869986][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.878260][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.886535][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.894468][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.902393][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.910167][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.918127][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.926486][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.933957][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.941421][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.948729][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.957825][  T286] device veth0_vlan entered promiscuous mode
[   23.972010][  T285] request_module fs-gadgetfs succeeded, but still no fs?
[   23.972471][  T286] device veth1_macvtap entered promiscuous mode
[   23.988292][  T287] device veth0_vlan entered promiscuous mode
[   24.002159][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.011287][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.019326][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.027537][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.035213][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.043382][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.061696][  T287] device veth1_macvtap entered promiscuous mode
[   24.077691][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.085419][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.094453][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.102281][  T309] loop1: detected capacity change from 0 to 8192
[   24.103027][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.117195][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.125502][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.134082][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.142428][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.142897][  T309]  loop1: p1 p2 < > p4
[   24.150710][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.154794][  T309] loop1: partition table partially beyond EOD, truncated
[   24.162965][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.169690][  T309] loop1: p1 start 16777216 is beyond EOD, truncated
[   24.181779][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.184672][  T309] loop1: p2 start 4294770691 is beyond EOD, truncated
[   24.193998][  T289] device veth1_macvtap entered promiscuous mode
[   24.201109][  T309] loop1: p4 size 33554432 extends beyond EOD, truncated
[   24.218136][  T288] device veth0_vlan entered promiscuous mode
[   24.237986][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.246357][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.253802][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.262508][  T311] loop1: detected capacity change from 0 to 512
[   24.280848][  T313] loop3: detected capacity change from 0 to 512
[   24.284864][  T288] device veth1_macvtap entered promiscuous mode
[   24.294398][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.303821][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.312128][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.321344][  T313] =======================================================
[   24.321344][  T313] WARNING: The mand mount option has been deprecated and
[   24.321344][  T313]          and is ignored by this kernel. Remove the mand
[   24.321344][  T313]          option from the mount to silence this warning.
[   24.321344][  T313] =======================================================
[   24.327056][  T311] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   24.357279][  T306] udevd[306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   24.387237][  T311] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   24.387639][  T317] IPv6: sit1: Disabled Multicast RS
[   24.400607][  T311] System zones: 0-2, 18-18, 34-35
[   24.405775][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.414314][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.414544][  T311] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   24.423022][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.446648][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.455236][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.463503][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.465836][  T311] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   24.483778][  T311] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   24.505517][  T313] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   24.529560][  T326] loop2: detected capacity change from 0 to 512
[   24.542031][  T313] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   24.554422][  T311] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[   24.566089][  T313] System zones: 0-2, 18-18, 34-35
[   24.572363][  T313] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   24.574782][  T311] ext4 filesystem being remounted at /1/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   24.620423][  T334] loop4: detected capacity change from 0 to 1024
[   24.632184][  T326] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   24.655730][  T313] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   24.678383][  T313] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   24.686555][  T326] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   24.696294][  T326] System zones: 0-2, 18-18, 34-35
[   24.702150][  T326] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   24.721805][  T334] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   24.733075][  T334] EXT4-fs (loop4): Ignoring removed orlov option
[   24.739578][  T313] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[   24.751594][  T313] ext4 filesystem being remounted at /0/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   24.751794][  T326] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   24.787356][  T334] EXT4-fs (loop4): corrupt root inode, run e2fsck
[   24.801118][  T334] EXT4-fs (loop4): mount failed
[   24.806215][  T326] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   24.885135][  T343] loop0: detected capacity change from 0 to 512
[   24.894560][  T326] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback.
[   24.902317][  T326] ext4 filesystem being remounted at /0/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   24.923579][  T346] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.6: corrupted xattr block 33
[   24.937917][  T346] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   24.947271][  T346] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.6: corrupted xattr block 33
[   24.959023][  T346] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   25.361235][  T347] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.4: corrupted xattr block 33
[   25.501867][  T346] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.1.6: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   25.522401][  T346] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem
[   25.534592][  T346] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #12: comm syz.1.6: Deleting old file: nlink 2, error=-117
[   25.547499][  T346] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.6: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   25.547710][  T347] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   25.573313][  T347] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.4: corrupted xattr block 33
[   25.596855][  T347] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   25.616886][  T347] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.3.4: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   25.638997][  T347] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[   25.649066][  T347] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #12: comm syz.3.4: Deleting old file: nlink 2, error=-117
[   25.663079][  T347] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   25.671009][  T346] EXT4-fs error (device loop1): ext4_evict_inode:296: comm syz.1.6: couldn't truncate inode 15 (err -117)
[   25.680157][  T347] EXT4-fs error (device loop3): ext4_evict_inode:296: comm syz.3.4: couldn't truncate inode 15 (err -117)
[   25.807974][  T348] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.3: corrupted xattr block 33
[   25.820656][  T348] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   25.829835][  T348] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.3: corrupted xattr block 33
[   25.841592][  T348] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   25.850906][  T348] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.2.3: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   25.871613][  T348] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem
[   25.874120][  T343] EXT4-fs (loop0): 1 truncate cleaned up
[   25.880499][  T348] EXT4-fs warning (device loop2): ext4_rename_delete:3792: inode #12: comm syz.2.3: Deleting old file: nlink 2, error=-117
[   25.893202][  T343] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[   25.899433][  T348] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.3: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   25.918824][  T355] loop4: detected capacity change from 0 to 512
[   25.927842][  T348] EXT4-fs error (device loop2): ext4_evict_inode:296: comm syz.2.3: couldn't truncate inode 15 (err -117)
[   26.001110][  T355] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   26.028600][  T358] loop3: detected capacity change from 0 to 512
[   26.035284][  T355] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   26.043514][  T355] System zones: 0-2, 18-18, 34-35
[   26.049089][  T355] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   26.065503][  T358] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   26.071759][  T355] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   26.089728][  T355] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   26.113820][  T359] device sit1 entered promiscuous mode
[   26.123071][  T359] Zero length message leads to an empty skb
[   26.127466][  T358] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   26.137350][  T358] System zones: 0-2, 18-18, 34-35
[   26.137432][  T355] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback.
[   26.143051][  T358] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   26.171743][  T358] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   26.177826][  T359] loop1: detected capacity change from 0 to 1024
[   26.195274][  T355] ext4 filesystem being remounted at /2/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   26.206881][  T358] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   26.257646][  T370] loop2: detected capacity change from 0 to 8192
[   26.265112][  T358] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[   26.272853][  T358] ext4 filesystem being remounted at /1/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   26.314319][  T101]  loop2: p1 p2 < > p4
[   26.318412][  T101] loop2: partition table partially beyond EOD, truncated
[   26.325586][  T101] loop2: p1 start 16777216 is beyond EOD, truncated
[   26.332182][  T101] loop2: p2 start 4294770691 is beyond EOD, truncated
[   26.345683][  T359] EXT4-fs (loop1): Ignoring removed orlov option
[   26.347526][  T101] loop2: p4 size 33554432 extends beyond EOD, truncated
[   26.360123][  T370]  loop2: p1 p2 < > p4
[   26.364245][  T370] loop2: partition table partially beyond EOD, truncated
[   26.371575][  T370] loop2: p1 start 16777216 is beyond EOD, truncated
[   26.372553][  T359] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,noblock_validity,orlov,. Quota mode: none.
[   26.378171][  T370] loop2: p2 start 4294770691 is beyond EOD, truncated
[   26.410483][  T370] loop2: p4 size 33554432 extends beyond EOD, 
[   26.410846][  T375] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.10: corrupted xattr block 33
[   26.410846][  T374] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.12: corrupted xattr block 33
[   26.413356][  T374] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   26.428776][  T374] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.12: corrupted xattr block 33
[   26.440152][  T370] truncated
[   26.449415][  T374] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   26.460666][  T375] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   26.464315][  T374] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.4.12: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   26.472709][  T375] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.10: corrupted xattr block 33
[   26.481870][  T374] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem
[   26.522594][  T375] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   26.523007][  T374] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #12: comm syz.4.12: Deleting old file: nlink 2, error=-117
[   26.544606][  T374] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.12: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   26.561701][  T349] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   26.569454][  T375] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.3.10: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   26.569468][  T374] EXT4-fs error (device loop4): ext4_evict_inode:296: comm syz.4.12: couldn't truncate inode 15 (err -117)
[   26.570202][  T375] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[   26.611548][  T375] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #12: comm syz.3.10: Deleting old file: nlink 2, error=-117
[   26.625139][  T375] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.10: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   26.643112][  T375] EXT4-fs error (device loop3): ext4_evict_inode:296: comm syz.3.10: couldn't truncate inode 15 (err -117)
[   26.659221][  T377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'.
[   26.661879][   T30] kauditd_printk_skb: 49 callbacks suppressed
[   26.661891][   T30] audit: type=1400 audit(1785024540.952:123): avc:  denied  { create } for  pid=376 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   26.668082][  T377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'.
[   26.674177][   T30] audit: type=1400 audit(1785024540.952:124): avc:  denied  { create } for  pid=376 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.722455][   T30] audit: type=1400 audit(1785024540.952:125): avc:  denied  { write } for  pid=376 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.767470][  T379] FAULT_INJECTION: forcing a failure.
[   26.767470][  T379] name failslab, interval 1, probability 0, space 0, times 1
[   26.780618][  T379] CPU: 0 PID: 379 Comm: syz.1.15 Not tainted syzkaller #0
[   26.787740][  T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   26.794828][  T316] udevd[316]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   26.797800][  T379] Call Trace:
[   26.810670][  T379]  <TASK>
[   26.813601][  T379]  __dump_stack+0x21/0x30
[   26.816917][  T316] udevd[316]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   26.817941][  T379]  dump_stack_lvl+0x110/0x170
[   26.817961][  T379]  ? show_regs_print_info+0x20/0x20
[   26.837391][  T379]  dump_stack+0x15/0x20
[   26.841554][  T379]  should_fail+0x3ab/0x500
[   26.845968][  T379]  __should_failslab+0xa4/0xe0
[   26.850731][  T379]  should_failslab+0x9/0x20
[   26.855233][  T379]  slab_pre_alloc_hook+0x39/0xd0
[   26.860171][  T379]  __kmalloc+0x6d/0x2c0
[   26.864328][  T379]  ? __se_sys_memfd_create+0xf2/0x3c0
[   26.869702][  T379]  ? strnlen_user+0x13b/0x1c0
[   26.874375][  T379]  __se_sys_memfd_create+0xf2/0x3c0
[   26.879553][  T379]  __x64_sys_memfd_create+0x5b/0x70
[   26.884725][  T379]  x64_sys_call+0x473/0x9a0
[   26.889209][  T379]  do_syscall_64+0x4c/0xa0
[   26.893607][  T379]  ? clear_bhb_loop+0x50/0xa0
[   26.898261][  T379]  ? clear_bhb_loop+0x50/0xa0
[   26.902920][  T379]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   26.908791][  T379] RIP: 0033:0x7f8dd27cae99
[   26.913181][  T379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   26.932790][  T379] RSP: 002b:00007f8dd1223d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f
[   26.941181][  T379] RAX: ffffffffffffffda RBX: 000000000000104e RCX: 00007f8dd27cae99
[   26.949129][  T379] RDX: 00007f8dd1223ddc RSI: 0000000000000000 RDI: 00007f8dd286108f
[   26.957087][  T379] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000
[   26.965033][  T379] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001
[   26.972981][  T379] R13: 00007f8dd1223ddc R14: 00007f8dd1223de0 R15: 00007ffe92ff7698
[   26.980935][  T379]  </TASK>
[   26.981024][  T349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.013169][  T381]  loop2: p2 < > p4
[   27.017086][  T381] loop2: partition table partially beyond EOD, truncated
[   27.024691][  T381] loop2: p2 start 4278191872 is beyond EOD, truncated
[   27.030467][  T349] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[   27.032155][  T381] loop2: p4 size 100663296 extends beyond EOD, 
[   27.042983][   T30] audit: type=1400 audit(1785024541.342:126): avc:  denied  { append } for  pid=382 comm="syz.1.19" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   27.043182][  T381] truncated
[   27.049242][   T30] audit: type=1400 audit(1785024541.342:127): avc:  denied  { open } for  pid=382 comm="syz.1.19" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   27.072076][  T383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   27.075184][   T30] audit: type=1400 audit(1785024541.372:128): avc:  denied  { ioctl } for  pid=382 comm="syz.1.19" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   27.156278][   T30] audit: type=1400 audit(1785024541.432:129): avc:  denied  { read } for  pid=382 comm="syz.1.19" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   27.179167][   T30] audit: type=1400 audit(1785024541.442:130): avc:  denied  { name_bind } for  pid=387 comm="syz.4.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   27.201366][   T30] audit: type=1400 audit(1785024541.442:131): avc:  denied  { node_bind } for  pid=387 comm="syz.4.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   27.221908][   T30] audit: type=1400 audit(1785024541.492:132): avc:  denied  { write } for  pid=387 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   27.222005][  T349] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[   27.250426][  T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.265293][  T349] usb 1-1: Product: syz
[   27.269541][  T349] usb 1-1: Manufacturer: syz
[   27.276798][  T349] usb 1-1: SerialNumber: syz
[   27.341544][  T406] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   27.348864][  T406] EXT4-fs (loop1): Ignoring removed orlov option
[   27.361795][  T406] EXT4-fs (loop1): corrupt root inode, run e2fsck
[   27.368273][  T406] EXT4-fs (loop1): mount failed
[   27.374937][  T404] erofs: (device loop3): mounted with root inode @ nid 36.
[   27.395741][   T49] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   27.413435][  T404] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[   27.447625][  T415] sch_tbf: burst 6 is lower than device veth0_to_bridge mtu (1514) !
[   27.450964][  T296] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   27.465096][  T404] overlayfs: filesystem on './file0' not supported as upperdir
[   27.487559][  T404] syz.3.21 (404) used greatest stack depth: 21696 bytes left
[   27.574329][  T417] EXT4-fs (loop3): Unrecognized mount option "dont_measure" or missing value
[   27.612507][  T415] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   27.620218][  T415] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   27.629526][  T415] F2FS-fs (loop1): invalid crc value
[   27.636083][  T415] F2FS-fs (loop1): Found nat_bits in checkpoint
[   27.658283][  T415] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   27.665459][  T415] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   27.722196][  T423]  loop3: p1 p2 < > p4
[   27.726448][  T423] loop3: partition table partially beyond EOD, truncated
[   27.734000][  T423] loop3: p1 start 16777216 is beyond EOD, truncated
[   27.740906][  T423] loop3: p2 start 4294770691 is beyond EOD, truncated
[   27.748018][  T423] loop3: p4 size 33554432 extends beyond EOD, truncated
[   27.786954][  T430] FAULT_INJECTION: forcing a failure.
[   27.786954][  T430] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   27.800122][  T430] CPU: 0 PID: 430 Comm: syz.1.30 Not tainted syzkaller #0
[   27.807234][  T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   27.817271][  T430] Call Trace:
[   27.820527][  T430]  <TASK>
[   27.823436][  T430]  __dump_stack+0x21/0x30
[   27.827744][  T430]  dump_stack_lvl+0x110/0x170
[   27.832398][  T430]  ? show_regs_print_info+0x20/0x20
[   27.837569][  T430]  dump_stack+0x15/0x20
[   27.841700][  T430]  should_fail+0x3ab/0x500
[   27.846094][  T430]  should_fail_usercopy+0x1a/0x20
[   27.851110][  T430]  _copy_from_user+0x20/0xd0
[   27.855672][  T430]  __se_sys_memfd_create+0x12b/0x3c0
[   27.860931][  T430]  __x64_sys_memfd_create+0x5b/0x70
[   27.866115][  T430]  x64_sys_call+0x473/0x9a0
[   27.870593][  T430]  do_syscall_64+0x4c/0xa0
[   27.874980][  T430]  ? clear_bhb_loop+0x50/0xa0
[   27.879631][  T430]  ? clear_bhb_loop+0x50/0xa0
[   27.881022][  T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9
[   27.884281][  T430]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   27.895251][  T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41682, setting to 1024
[   27.901103][  T430] RIP: 0033:0x7f8dd27cae99
[   27.901127][  T430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   27.901141][  T430] RSP: 002b:00007f8dd1223d58 EFLAGS: 00000206
[   27.912235][  T296] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   27.916617][  T430]  ORIG_RAX: 000000000000013f
[   27.936232][  T296] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   27.942242][  T430] RAX: ffffffffffffffda RBX: 000000000000104e RCX: 00007f8dd27cae99
[   27.942255][  T430] RDX: 00007f8dd1223ddc RSI: 0000000000000000 RDI: 00007f8dd286108f
[   27.942265][  T430] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000
[   27.942275][  T430] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001
[   27.942283][  T430] R13: 00007f8dd1223ddc R14: 00007f8dd1223de0 R15: 00007ffe92ff7698
[   27.942298][  T430]  </TASK>
[   28.012827][  T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.021417][  T296] usb 3-1: config 0 descriptor??
[   28.031831][  T316] udevd[316]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   28.064089][  T432] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   28.077388][  T432] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   28.085766][  T432] System zones: 0-2, 18-18, 34-35
[   28.091413][  T432] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   28.097182][  T443] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   28.109639][  T432] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   28.124333][  T443] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   28.130007][  T432] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   28.146990][  T443] UDC core: couldn't find an available UDC or it's busy: -16
[   28.151588][  T432] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[   28.155289][  T443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   28.162873][  T432] ext4 filesystem being remounted at /11/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.273844][  T449] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.31: corrupted xattr block 33
[   28.285700][  T449] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   28.295079][  T449] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.31: corrupted xattr block 33
[   28.306836][  T449] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   28.316149][  T449] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.1.31: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   28.336827][  T449] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem
[   28.345772][  T449] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #12: comm syz.1.31: Deleting old file: nlink 2, error=-117
[   28.358724][  T449] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.31: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   28.375828][  T449] EXT4-fs error (device loop1): ext4_evict_inode:296: comm syz.1.31: couldn't truncate inode 15 (err -117)
[   28.387438][   T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   28.401012][  T440] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   28.491950][  T296] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   28.500831][  T296] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   28.631031][   T26] usb 4-1: Using ep0 maxpacket: 16
[   28.651106][  T349] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[   28.672907][  T453] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   28.680321][  T453] EXT4-fs (loop0): Ignoring removed orlov option
[   28.680995][  T440] usb 5-1: device descriptor read/64, error -71
[   28.701711][  T453] EXT4-fs (loop0): corrupt root inode, run e2fsck
[   28.708192][  T453] EXT4-fs (loop0): mount failed
[   28.751033][   T26] usb 4-1: config 73 has too many interfaces: 76, using maximum allowed: 32
[   28.761424][   T26] usb 4-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config
[   28.772183][   T26] usb 4-1: config 73 has 0 interfaces, different from the descriptor's value: 76
[   28.772349][   T60] usb 3-1: USB disconnect, device number 2
[   28.786420][  T349] usb 1-1: USB disconnect, device number 2
[   28.797336][   T26] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[   28.836658][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.891755][  T459] capability: warning: `syz.1.35' uses 32-bit capabilities (legacy support in use)
[   28.909868][  T464] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   28.941397][  T469] netlink: 43 bytes leftover after parsing attributes in process `syz.1.40'.
[   28.961835][  T470] exfat: Deprecated parameter 'utf8'
[   28.967162][  T470] exfat: Deprecated parameter 'utf8'
[   28.972688][  T470] exfat: Bad value for 'dmask'
[   29.021264][  T316]  loop1: p1 p2 < > p4
[   29.025401][  T316] loop1: partition table partially beyond EOD, truncated
[   29.032664][  T316] loop1: p1 start 16777216 is beyond EOD, truncated
[   29.039354][  T316] loop1: p2 start 4294770691 is beyond EOD, truncated
[   29.046167][  T316] loop1: p4 size 33554432 extends beyond EOD, truncated
[   29.054462][  T472]  loop1: p1 p2 < > p4
[   29.058582][  T472] loop1: partition table partially beyond EOD, truncated
[   29.066019][  T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.066167][  T472] loop1: p1 start 16777216 is beyond EOD, truncated
[   29.092474][  T472] loop1: p2 start 4294770691 is beyond EOD, truncated
[   29.099262][  T472] loop1: p4 size 33554432 extends beyond EOD, truncated
[   29.101563][  T435] x_tables: duplicate underflow at hook 1
[   29.106301][  T440] usb 5-1: device descriptor read/64, error -71
[   29.151391][   T26] usb 4-1: string descriptor 0 read error: -71
[   29.161313][   T26] usb 4-1: USB disconnect, device number 2
[   29.167364][  T477] FAULT_INJECTION: forcing a failure.
[   29.167364][  T477] name failslab, interval 1, probability 0, space 0, times 0
[   29.180330][  T477] CPU: 0 PID: 477 Comm: syz.1.42 Not tainted syzkaller #0
[   29.187450][  T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   29.197493][  T477] Call Trace:
[   29.200750][  T477]  <TASK>
[   29.203662][  T477]  __dump_stack+0x21/0x30
[   29.207976][  T477]  dump_stack_lvl+0x110/0x170
[   29.212628][  T477]  ? show_regs_print_info+0x20/0x20
[   29.217815][  T477]  ? __kasan_slab_alloc+0x69/0xe0
[   29.222818][  T477]  dump_stack+0x15/0x20
[   29.226947][  T477]  should_fail+0x3ab/0x500
[   29.231338][  T477]  __should_failslab+0xa4/0xe0
[   29.236078][  T477]  should_failslab+0x9/0x20
[   29.240563][  T477]  slab_pre_alloc_hook+0x39/0xd0
[   29.245495][  T477]  ? shmem_alloc_inode+0x1a/0x30
[   29.250406][  T477]  kmem_cache_alloc+0x44/0x260
[   29.255147][  T477]  ? shmem_match+0x160/0x160
[   29.259714][  T477]  shmem_alloc_inode+0x1a/0x30
[   29.264465][  T477]  new_inode_pseudo+0x62/0x210
[   29.269206][  T477]  new_inode+0x28/0x1e0
[   29.273355][  T477]  shmem_get_inode+0x343/0x9d0
[   29.278101][  T477]  __shmem_file_setup+0x113/0x2b0
[   29.283118][  T477]  shmem_file_setup+0x2f/0x40
[   29.287772][  T477]  __se_sys_memfd_create+0x1de/0x3c0
[   29.293055][  T477]  __x64_sys_memfd_create+0x5b/0x70
[   29.298250][  T477]  x64_sys_call+0x473/0x9a0
[   29.302733][  T477]  do_syscall_64+0x4c/0xa0
[   29.307141][  T477]  ? clear_bhb_loop+0x50/0xa0
[   29.311793][  T477]  ? clear_bhb_loop+0x50/0xa0
[   29.316456][  T477]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   29.322341][  T477] RIP: 0033:0x7f8dd27cae99
[   29.326735][  T477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   29.346337][  T477] RSP: 002b:00007f8dd1223d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f
[   29.354753][  T477] RAX: ffffffffffffffda RBX: 000000000000104e RCX: 00007f8dd27cae99
[   29.362701][  T477] RDX: 00007f8dd1223ddc RSI: 0000000000000000 RDI: 00007f8dd286108f
[   29.370648][  T477] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000
[   29.378596][  T477] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001
[   29.386543][  T477] R13: 00007f8dd1223ddc R14: 00007f8dd1223de0 R15: 00007ffe92ff7698
[   29.394507][  T477]  </TASK>
[   29.436022][  T316] udevd[316]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   29.445745][  T440] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   29.458202][  T316] udevd[316]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   29.710979][   T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   29.741931][  T296] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   29.750976][  T440] usb 5-1: device descriptor read/64, error -71
[   29.785796][  T486] set_capacity_and_notify: 11 callbacks suppressed
[   29.785806][  T486] loop0: detected capacity change from 0 to 1024
[   29.807785][  T488] loop3: detected capacity change from 0 to 512
[   29.823940][  T486] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   29.831304][  T486] EXT4-fs (loop0): Ignoring removed orlov option
[   29.841781][  T486] EXT4-fs (loop0): corrupt root inode, run e2fsck
[   29.848349][  T486] EXT4-fs (loop0): mount failed
[   29.855018][  T488] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   29.869758][  T488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   29.877861][  T488] System zones: 0-2, 18-18, 34-35
[   29.883228][  T488] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   29.901988][  T488] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   29.914257][  T488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   29.931704][  T488] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[   29.939193][  T488] ext4 filesystem being remounted at /7/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.961514][  T486] incfs: Backing dir is not set, filesystem can't be mounted.
[   29.969113][  T486] incfs: mount failed -2
[   30.022467][  T505] loop0: detected capacity change from 0 to 4096
[   30.057770][  T506] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.47: corrupted xattr block 33
[   30.070474][  T506] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   30.071020][   T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.079491][  T506] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.47: corrupted xattr block 33
[   30.101411][  T506] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   30.106879][   T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.110789][  T506] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.3.47: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   30.124548][  T505] EXT4-fs (loop0): Test dummy encryption mode enabled
[   30.140419][  T506] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[   30.155474][  T506] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #12: comm syz.3.47: Deleting old file: nlink 2, error=-117
[   30.168414][  T506] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.47: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   30.185661][  T506] EXT4-fs error (device loop3): ext4_evict_inode:296: comm syz.3.47: couldn't truncate inode 15 (err -117)
[   30.187456][  T505] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,,errors=continue. Quota mode: writeback.
[   30.218000][  T509] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   30.221306][  T296] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59648, setting to 1024
[   30.236468][  T440] usb 5-1: device descriptor read/64, error -71
[   30.242778][  T296] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[   30.252795][  T296] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   30.279287][  T514] loop0: detected capacity change from 0 to 128
[   30.289813][  T514] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   30.301309][  T514] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   30.311031][   T60] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   30.322856][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.330847][   T60] usb 2-1: Product: syz
[   30.335028][   T60] usb 2-1: Manufacturer: syz
[   30.339628][   T60] usb 2-1: SerialNumber: syz
[   30.351033][  T296] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   30.360133][  T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   30.368196][  T440] usb usb5-port1: attempt power cycle
[   30.374031][  T296] usb 3-1: SerialNumber: syz
[   30.375814][  T516] EXT4-fs (loop0): shut down requested (0)
[   30.391042][  T484] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   30.612039][  T484] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   30.620459][  T523] loop1: detected capacity change from 0 to 8192
[   30.654077][  T306]  loop1: p1 p2 < > p4
[   30.658210][  T306] loop1: partition table partially beyond EOD, truncated
[   30.665661][  T306] loop1: p1 start 16777216 is beyond EOD, truncated
[   30.672449][  T306] loop1: p2 start 4294770691 is beyond EOD, truncated
[   30.679265][  T306] loop1: p4 size 33554432 extends beyond EOD, truncated
[   30.687716][  T523]  loop1: p1 p2 < > p4
[   30.691897][  T523] loop1: partition table partially beyond EOD, truncated
[   30.699271][  T525] loop3: detected capacity change from 0 to 128
[   30.701283][  T523] loop1: p1 start 16777216 is beyond EOD, truncated
[   30.712257][  T523] loop1: p2 start 4294770691 is beyond EOD, truncated
[   30.719151][  T523] loop1: p4 size 33554432 extends beyond EOD, truncated
[   30.722652][  T525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   30.726406][   T60] usb 2-1: 0:1 : does not exist
[   30.734169][  T525] System zones: 1-3, 19-19, 35-36
[   30.745070][  T525] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[   30.757230][  T525] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   30.790565][  T440] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   30.792881][   T60] usb 2-1: BAAD SPEAKER p_chmask mismatch
[   30.808426][   T60] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   30.817734][   T60] usb 2-1: USB disconnect, device number 2
[   30.846328][  T316] udevd[316]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   30.860270][  T316] udevd[316]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   30.887482][  T528] loop1: detected capacity change from 0 to 8192
[   30.931218][  T316]  loop1: p1 p2 < > p4
[   30.935306][  T316] loop1: partition table partially beyond EOD, truncated
[   30.942559][  T316] loop1: p1 start 16777216 is beyond EOD, truncated
[   30.949157][  T316] loop1: p2 start 4294770691 is beyond EOD, truncated
[   30.955993][  T316] loop1: p4 size 33554432 extends beyond EOD, truncated
[   30.964595][  T528]  loop1: p1 p2 < > p4
[   30.968731][  T528] loop1: partition table partially beyond EOD, truncated
[   30.975961][  T528] loop1: p1 start 16777216 is beyond EOD, truncated
[   30.982700][  T440] usb 5-1: device descriptor read/8, error -71
[   30.982813][  T528] loop1: p2 start 4294770691 is beyond EOD, truncated
[   30.995751][  T528] loop1: p4 size 33554432 extends beyond EOD, truncated
[   31.042293][  T296] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[   31.076397][  T316] udevd[316]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   31.134968][  T316] udevd[316]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   31.147848][  T550] loop4: detected capacity change from 0 to 1024
[   31.155119][  T548] FAULT_INJECTION: forcing a failure.
[   31.155119][  T548] name failslab, interval 1, probability 0, space 0, times 0
[   31.168082][  T548] CPU: 1 PID: 548 Comm: syz.1.56 Not tainted syzkaller #0
[   31.175208][  T548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   31.185258][  T548] Call Trace:
[   31.188519][  T548]  <TASK>
[   31.191427][  T548]  __dump_stack+0x21/0x30
[   31.195732][  T548]  dump_stack_lvl+0x110/0x170
[   31.200378][  T548]  ? show_regs_print_info+0x20/0x20
[   31.205554][  T548]  dump_stack+0x15/0x20
[   31.209681][  T548]  should_fail+0x3ab/0x500
[   31.214073][  T548]  __should_failslab+0xa4/0xe0
[   31.218818][  T548]  should_failslab+0x9/0x20
[   31.223296][  T548]  slab_pre_alloc_hook+0x39/0xd0
[   31.228208][  T548]  ? security_inode_alloc+0x33/0x110
[   31.233465][  T548]  kmem_cache_alloc+0x44/0x260
[   31.238206][  T548]  security_inode_alloc+0x33/0x110
[   31.243300][  T548]  inode_init_always+0x72c/0x9b0
[   31.248234][  T548]  new_inode_pseudo+0x91/0x210
[   31.252977][  T548]  new_inode+0x28/0x1e0
[   31.257115][  T548]  shmem_get_inode+0x343/0x9d0
[   31.261868][  T548]  __shmem_file_setup+0x113/0x2b0
[   31.266865][  T548]  shmem_file_setup+0x2f/0x40
[   31.271515][  T548]  __se_sys_memfd_create+0x1de/0x3c0
[   31.276774][  T548]  __x64_sys_memfd_create+0x5b/0x70
[   31.281945][  T548]  x64_sys_call+0x473/0x9a0
[   31.286427][  T548]  do_syscall_64+0x4c/0xa0
[   31.290816][  T548]  ? clear_bhb_loop+0x50/0xa0
[   31.295473][  T548]  ? clear_bhb_loop+0x50/0xa0
[   31.300123][  T548]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   31.305987][  T548] RIP: 0033:0x7f8dd27cae99
[   31.310378][  T548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   31.329958][  T548] RSP: 002b:00007f8dd1223d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f
[   31.338350][  T548] RAX: ffffffffffffffda RBX: 000000000000104e RCX: 00007f8dd27cae99
[   31.346296][  T548] RDX: 00007f8dd1223ddc RSI: 0000000000000000 RDI: 00007f8dd286108f
[   31.354243][  T548] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000
[   31.362211][  T548] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001
[   31.370158][  T548] R13: 00007f8dd1223ddc R14: 00007f8dd1223de0 R15: 00007ffe92ff7698
[   31.378114][  T548]  </TASK>
[   31.382895][   T60] usb 3-1: USB disconnect, device number 3
[   31.392741][  T556] loop1: detected capacity change from 0 to 512
[   31.392795][   T60] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[   31.401009][  T440] usb 5-1: device descriptor read/8, error -71
[   31.431792][  T556] EXT4-fs (loop1): Ignoring removed oldalloc option
[   31.440149][  T556] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.1.59: corrupted xattr block 95
[   31.462736][  T550] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   31.475607][  T556] EXT4-fs (loop1): Remounting filesystem read-only
[   31.485009][  T550] EXT4-fs (loop4): Ignoring removed orlov option
[   31.489655][  T556] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   31.504752][  T556] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.59: bg 0: block 7: invalid block bitmap
[   31.522077][  T556] EXT4-fs (loop1): Remounting filesystem read-only
[   31.531122][  T556] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   31.549500][  T556] EXT4-fs (loop1): Remounting filesystem read-only
[   31.563113][  T556] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #11: comm syz.1.59: corrupted xattr block 95
[   31.564029][  T550] EXT4-fs (loop4): corrupt root inode, run e2fsck
[   31.586589][  T556] EXT4-fs (loop1): Remounting filesystem read-only
[   31.590270][  T581] loop3: detected capacity change from 0 to 512
[   31.601041][  T556] EXT4-fs warning (device loop1): ext4_evict_inode:305: xattr delete (err -117)
[   31.609883][  T550] EXT4-fs (loop4): mount failed
[   31.619436][  T556] EXT4-fs (loop1): 1 orphan inode deleted
[   31.631095][  T556] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000fffd,errors=remount-ro,oldalloc,jqfmt=vfsold,. Quota mode: none.
[   31.632007][  T581] EXT4-fs (loop3): unsupported inode size: 143
[   31.683699][  T581] EXT4-fs (loop3): blocksize: 4096
[   31.726318][  T550] incfs: Backing dir is not set, filesystem can't be mounted.
[   31.733959][  T550] incfs: mount failed -2
[   31.751274][   T30] kauditd_printk_skb: 79 callbacks suppressed
[   31.751288][   T30] audit: type=1400 audit(1785024546.052:212): avc:  denied  { getopt } for  pid=597 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   31.782472][  T571] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   31.791546][  T603] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   31.817771][  T571] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   31.826935][  T591] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.62: inode has both inline data and extents flags
[   31.848958][  T571] F2FS-fs (loop0): invalid crc value
[   31.854335][  T591] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.62: couldn't read orphan inode 15 (err -117)
[   31.869145][  T591] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   31.880144][  T603] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   31.880409][  T591] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.62: Directory hole found for htree leaf block 0
[   31.894309][  T603] System zones: 0-2, 18-18, 34-35
[   31.902281][  T316]  loop3: p1 p2 < > p4
[   31.910521][  T571] F2FS-fs (loop0): Found nat_bits in checkpoint
[   31.917082][  T316] loop3: partition table partially beyond EOD, truncated
[   31.924458][  T591] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.62: Directory hole found for htree leaf block 0
[   31.937994][  T603] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   31.947417][  T316] loop3: p1 start 16777216 is beyond EOD, truncated
[   31.971202][  T316] loop3: p2 start 4294770691 is beyond EOD, truncated
[   31.978127][  T316] loop3: p4 size 33554432 extends beyond EOD, truncated
[   31.978876][  T285] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory hole found for htree leaf block 0
[   31.999204][  T571] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   32.006293][  T571] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   32.018398][  T606]  loop3: p1 p2 < > p4
[   32.018436][  T603] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   32.025272][   T30] audit: type=1400 audit(1785024546.322:213): avc:  denied  { create } for  pid=570 comm="syz.0.60" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   32.056517][  T606] loop3: partition table partially beyond EOD, truncated
[   32.071520][  T306]  loop2: p1 p2 < > p4
[   32.075650][  T306] loop2: partition table partially beyond EOD, truncated
[   32.076239][   T30] audit: type=1400 audit(1785024546.322:214): avc:  denied  { setattr } for  pid=570 comm="syz.0.60" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   32.086933][  T603] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   32.105130][   T30] audit: type=1400 audit(1785024546.362:215): avc:  denied  { rename } for  pid=570 comm="syz.0.60" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   32.113588][  T306] loop2: p1 start 16777216 is beyond EOD, 
[   32.135807][  T606] loop3: p1 start 16777216 is beyond EOD, 
[   32.137937][  T306] truncated
[   32.142648][  T606] truncated
[   32.147546][  T306] loop2: p2 start 4294770691 is beyond EOD, 
[   32.150599][  T606] loop3: p2 start 4294770691 is beyond EOD, 
[   32.154892][  T287] attempt to access beyond end of device
[   32.154892][  T287] loop0: rw=2049, want=45104, limit=40427
[   32.159915][  T606] truncated
[   32.165751][  T306] truncated
[   32.177011][  T606] loop3: p4 size 33554432 extends beyond EOD, 
[   32.180873][  T306] loop2: p4 size 33554432 extends beyond EOD, 
[   32.183351][  T606] truncated
[   32.189475][  T306] truncated
[   32.205148][  T611]  loop2: p1 p2 < > p4
[   32.209224][  T611] loop2: partition table partially beyond EOD, truncated
[   32.217670][  T611] loop2: p1 start 16777216 is beyond EOD, truncated
[   32.217825][  T603] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback.
[   32.224490][  T611] loop2: p2 start 4294770691 is beyond EOD, truncated
[   32.237579][  T603] ext4 filesystem being remounted at /10/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.238612][  T611] loop2: p4 size 33554432 extends beyond EOD, truncated
[   32.319571][  T316] udevd[316]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   32.323417][  T285] syz-executor (285) used greatest stack depth: 20736 bytes left
[   32.388887][  T623] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.65: corrupted xattr block 33
[   32.401107][  T623] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   32.410067][  T623] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.65: corrupted xattr block 33
[   32.422305][  T623] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   32.432112][  T623] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.4.65: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   32.453840][  T623] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem
[   32.462872][  T623] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #12: comm syz.4.65: Deleting old file: nlink 2, error=-117
[   32.475823][  T623] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.65: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   32.493092][  T623] EXT4-fs error (device loop4): ext4_evict_inode:296: comm syz.4.65: couldn't truncate inode 15 (err -117)
[   32.512954][  T316] udevd[316]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   32.591493][   T30] audit: type=1400 audit(1785024546.892:216): avc:  denied  { mounton } for  pid=625 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   32.627970][  T629] FAULT_INJECTION: forcing a failure.
[   32.627970][  T629] name failslab, interval 1, probability 0, space 0, times 0
[   32.640632][  T629] CPU: 1 PID: 629 Comm: syz.0.69 Not tainted syzkaller #0
[   32.647743][  T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   32.650013][  T627] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   32.657791][  T629] Call Trace:
[   32.657800][  T629]  <TASK>
[   32.657806][  T629]  __dump_stack+0x21/0x30
[   32.657825][  T629]  dump_stack_lvl+0x110/0x170
[   32.680249][  T629]  ? show_regs_print_info+0x20/0x20
[   32.685457][  T629]  dump_stack+0x15/0x20
[   32.689617][  T629]  should_fail+0x3ab/0x500
[   32.690916][  T474] udevd[474]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   32.694032][  T629]  __should_failslab+0xa4/0xe0
[   32.708387][  T629]  should_failslab+0x9/0x20
[   32.712891][  T629]  slab_pre_alloc_hook+0x39/0xd0
[   32.717833][  T629]  ? __d_alloc+0x2d/0x690
[   32.722148][  T629]  kmem_cache_alloc+0x44/0x260
[   32.726896][  T629]  __d_alloc+0x2d/0x690
[   32.731034][  T629]  d_alloc_pseudo+0x1d/0x70
[   32.735535][  T629]  alloc_file_pseudo+0xe0/0x200
[   32.740365][  T629]  ? alloc_empty_file_noaccount+0x80/0x80
[   32.746067][  T629]  ? __kasan_check_write+0x14/0x20
[   32.751160][  T629]  ? clear_nlink+0x8a/0xe0
[   32.755558][  T629]  __shmem_file_setup+0x1df/0x2b0
[   32.760562][  T629]  shmem_file_setup+0x2f/0x40
[   32.765216][  T629]  __se_sys_memfd_create+0x1de/0x3c0
[   32.770501][  T629]  __x64_sys_memfd_create+0x5b/0x70
[   32.775680][  T629]  x64_sys_call+0x473/0x9a0
[   32.780163][  T629]  do_syscall_64+0x4c/0xa0
[   32.784558][  T629]  ? clear_bhb_loop+0x50/0xa0
[   32.789219][  T629]  ? clear_bhb_loop+0x50/0xa0
[   32.793875][  T629]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   32.799781][  T629] RIP: 0033:0x7f62e2f47e99
[   32.804179][  T629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   32.823767][  T629] RSP: 002b:00007f62e19a0d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f
[   32.832164][  T629] RAX: ffffffffffffffda RBX: 000000000000104e RCX: 00007f62e2f47e99
[   32.840115][  T629] RDX: 00007f62e19a0ddc RSI: 0000000000000000 RDI: 00007f62e2fde08f
[   32.848066][  T629] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000
[   32.856028][  T629] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001
[   32.864038][  T629] R13: 00007f62e19a0ddc R14: 00007f62e19a0de0 R15: 00007ffffaac6938
[   32.871994][  T629]  </TASK>
[   32.882528][  T627] EXT4-fs (loop4): Ignoring removed orlov option
[   32.894342][   T30] audit: type=1400 audit(1785024547.192:217): avc:  denied  { mount } for  pid=632 comm="syz.2.74" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   32.902810][  T625] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.923097][   T30] audit: type=1400 audit(1785024547.222:218): avc:  denied  { bind } for  pid=632 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   32.925176][  T625] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.950594][  T474] udevd[474]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   32.950642][  T625] device bridge_slave_0 entered promiscuous mode
[   32.967205][  T625] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.968588][  T627] EXT4-fs (loop4): corrupt root inode, run e2fsck
[   32.974411][  T625] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.986535][  T627] EXT4-fs (loop4): mount failed
[   32.989788][  T625] device bridge_slave_1 entered promiscuous mode
[   33.000421][   T30] audit: type=1400 audit(1785024547.262:219): avc:  denied  { write } for  pid=632 comm="syz.2.74" path="socket:[15354]" dev="sockfs" ino=15354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   33.025065][  T622] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   33.041687][  T642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.77'.
[   33.042246][  T622] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   33.058813][   T30] audit: type=1400 audit(1785024547.262:220): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   33.079409][   T30] audit: type=1400 audit(1785024547.292:221): avc:  denied  { setopt } for  pid=639 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.080313][  T643] FAT-fs (loop2): Unrecognized mount option "" or missing value
[   33.123117][  T627] incfs: Backing dir is not set, filesystem can't be mounted.
[   33.149892][  T627] incfs: mount failed -2
[   33.154583][  T622] F2FS-fs (loop3): invalid crc value
[   33.157110][  T645] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   33.183169][  T625] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.188185][  T622] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   33.190224][  T625] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.208634][  T625] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.215672][  T625] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.231031][  T645] overlayfs: filesystem on './file0' not supported as upperdir
[   33.281952][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.299015][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.311128][  T622] F2FS-fs (loop3): Start checkpoint disabled!
[   33.325187][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.337618][  T622] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   33.342854][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.347508][  T622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   33.522507][  T662] fscrypt (loop3, inode 3): Error -61 getting encryption context
[   34.245517][  T664] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   34.285848][  T664] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   34.301017][  T664] System zones: 0-2, 18-18, 34-35
[   34.306570][  T664] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   34.327451][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.336098][  T657]  loop0: p1 p2 < > p4
[   34.340180][  T657] loop0: partition table partially beyond EOD, truncated
[   34.347728][  T657] loop0: p1 start 16777216 is beyond EOD, truncated
[   34.348054][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.354554][  T657] loop0: p2 start 4294770691 is beyond EOD, truncated
[   34.369200][  T657] loop0: p4 size 33554432 extends beyond EOD, truncated
[   34.375680][  T664] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   34.376727][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.395142][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.402805][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.407554][  T664] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   34.411192][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.427189][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.431350][  T664] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[   34.434218][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.441969][  T664] ext4 filesystem being remounted at /12/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.471289][  T674] FAULT_INJECTION: forcing a failure.
[   34.471289][  T674] name failslab, interval 1, probability 0, space 0, times 0
[   34.485041][  T101]  loop0: p1 p2 < > p4
[   34.489141][  T101] loop0: partition table partially beyond EOD, truncated
[   34.496701][  T101] loop0: p1 start 16777216 is beyond EOD, truncated
[   34.503417][  T674] CPU: 0 PID: 674 Comm: syz.0.86 Not tainted syzkaller #0
[   34.510521][  T674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   34.516528][  T101] loop0: p2 start 4294770691 is beyond EOD, 
[   34.520564][  T674] Call Trace:
[   34.520565][  T101] truncated
[   34.520572][  T101] loop0: p4 size 33554432 extends beyond EOD, 
[   34.526520][  T674]  <TASK>
[   34.526527][  T674]  __dump_stack+0x21/0x30
[   34.526546][  T674]  dump_stack_lvl+0x110/0x170
[   34.526560][  T674]  ? show_regs_print_info+0x20/0x20
[   34.526575][  T674]  ? __kasan_check_write+0x14/0x20
[   34.529877][  T101] truncated
[   34.532923][  T674]  ? _raw_spin_lock+0x94/0xf0
[   34.532942][  T674]  dump_stack+0x15/0x20
[   34.532954][  T674]  should_fail+0x3ab/0x500
[   34.532970][  T674]  __should_failslab+0xa4/0xe0
[   34.532986][  T674]  should_failslab+0x9/0x20
[   34.533000][  T674]  slab_pre_alloc_hook+0x39/0xd0
[   34.533017][  T674]  ? __alloc_file+0x28/0x2a0
[   34.533032][  T674]  kmem_cache_alloc+0x44/0x260
[   34.533047][  T674]  __alloc_file+0x28/0x2a0
[   34.533062][  T674]  alloc_empty_file+0x97/0x180
[   34.546450][  T667]  loop4: p1 p2 < > p4
[   34.551059][  T674]  alloc_file+0x59/0x580
[   34.551083][  T674]  alloc_file_pseudo+0x180/0x200
[   34.551099][  T674]  ? alloc_empty_file_noaccount+0x80/0x80
[   34.551117][  T674]  ? __kasan_check_write+0x14/0x20
[   34.556345][  T667] loop4: partition table partially beyond EOD, 
[   34.561371][  T674]  ? clear_nlink+0x8a/0xe0
[   34.561392][  T674]  __shmem_file_setup+0x1df/0x2b0
[   34.561408][  T674]  shmem_file_setup+0x2f/0x40
[   34.564973][  T667] truncated
[   34.569150][  T674]  __se_sys_memfd_create+0x1de/0x3c0
[   34.569175][  T674]  __x64_sys_memfd_create+0x5b/0x70
[   34.573602][  T667] loop4: p1 start 16777216 is beyond EOD, 
[   34.577692][  T674]  x64_sys_call+0x473/0x9a0
[   34.582582][  T667] truncated
[   34.586916][  T674]  do_syscall_64+0x4c/0xa0
[   34.586934][  T674]  ? clear_bhb_loop+0x50/0xa0
[   34.592038][  T667] loop4: p2 start 4294770691 is beyond EOD, 
[   34.596403][  T674]  ? clear_bhb_loop+0x50/0xa0
[   34.596422][  T674]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   34.601307][  T667] truncated
[   34.605539][  T674] RIP: 0033:0x7f62e2f47e99
[   34.605556][  T674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.610326][  T667] loop4: p4 size 33554432 extends beyond EOD, 
[   34.614333][  T674] RSP: 002b:00007f62e19a0d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f
[   34.614351][  T674] RAX: ffffffffffffffda RBX: 000000000000104e RCX: 00007f62e2f47e99
[   34.614362][  T674] RDX: 00007f62e19a0ddc RSI: 0000000000000000 RDI: 00007f62e2fde08f
[   34.614372][  T674] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000
[   34.614381][  T674] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001
[   34.619037][  T667] truncated
[   34.623537][  T674] R13: 00007f62e19a0ddc R14: 00007f62e19a0de0 R15: 00007ffffaac6938
[   34.623554][  T674]  </TASK>
[   34.682024][  T676] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.83: corrupted xattr block 33
[   34.686719][   T45] device bridge_slave_1 left promiscuous mode
[   34.691156][  T676] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   34.696775][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.701270][  T676] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.83: corrupted xattr block 33
[   34.840791][   T45] device bridge_slave_0 left promiscuous mode
[   34.847003][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.848706][  T101]  loop4: p1 p2 < > p4
[   34.854200][  T676] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   34.858425][  T101] loop4: partition table partially beyond EOD, truncated
[   34.869749][  T683] capability: warning: `syz.2.88' uses deprecated v2 capabilities in a way that may be insecure
[   34.874583][  T101] loop4: p1 start 16777216 is beyond EOD, truncated
[   34.891476][  T676] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.3.83: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   34.891557][   T45] device veth1_macvtap left promiscuous mode
[   34.911919][  T676] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[   34.925642][  T683] overlayfs: failed to clone upperpath
[   34.926799][  T676] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #12: comm syz.3.83: Deleting old file: nlink 2, error=-117
[   34.933544][   T45] device veth0_vlan left promiscuous mode
[   34.945017][  T676] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.83: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   34.951964][  T101] loop4: p2 start 4294770691 is beyond EOD, truncated
[   34.967445][  T676] EXT4-fs error (device loop3): ext4_evict_inode:296: comm syz.3.83: couldn't truncate inode 15 (err -117)
[   34.981535][  T101] loop4: p4 size 33554432 extends beyond EOD, truncated
[   35.043694][  T316] udevd[316]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   35.055886][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   35.064147][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   35.067514][  T316] udevd[316]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   35.072260][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   35.091479][  T440] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   35.091528][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   35.109882][  T474] udevd[474]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   35.124567][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   35.133919][  T316] udevd[316]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   35.138417][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.152191][  T688] set_capacity_and_notify: 12 callbacks suppressed
[   35.152203][  T688] loop4: detected capacity change from 0 to 1024
[   35.168208][  T625] device veth0_vlan entered promiscuous mode
[   35.175153][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   35.183234][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.191291][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   35.198658][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.209334][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.217425][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.226633][  T625] device veth1_macvtap entered promiscuous mode
[   35.233453][  T688] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   35.240824][  T688] EXT4-fs (loop4): Ignoring removed orlov option
[   35.245200][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.254941][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.263286][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.263871][  T688] EXT4-fs (loop4): corrupt root inode, run e2fsck
[   35.277865][  T688] EXT4-fs (loop4): mount failed
[   35.283818][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.292172][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.315269][  T692] loop5: detected capacity change from 0 to 128
[   35.325853][  T692] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   35.339887][  T692] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   35.370985][  T440] usb 1-1: Using ep0 maxpacket: 32
[   35.376604][  T694] netlink: 7 bytes leftover after parsing attributes in process `syz.4.91'.
[   35.408442][  T696] loop4: detected capacity change from 0 to 512
[   35.419872][   T45] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   35.444209][  T696] EXT4-fs (loop4): Unrecognized mount option "smackfsfloor=ext4" or missing value
[   35.527612][  T701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=701 comm=syz.4.94
[   35.531106][  T440] usb 1-1: unable to get BOS descriptor or descriptor too short
[   35.540759][  T702] loop5: detected capacity change from 0 to 128
[   35.609148][  T702] EXT4-fs (loop5): Test dummy encryption mode enabled
[   35.626150][  T702] EXT4-fs (loop5): Test dummy encryption mode enabled
[   35.658049][  T702] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none.
[   35.681087][  T702] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   35.732786][  T702] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   35.791057][  T440] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   35.800241][  T440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.808392][  T440] usb 1-1: Product: syz
[   35.813058][  T440] usb 1-1: Manufacturer: syz
[   35.817708][  T440] usb 1-1: SerialNumber: syz
[   35.840976][   T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   35.860278][  T722] loop5: detected capacity change from 0 to 512
[   35.866690][  T319] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   35.888178][  T722] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   35.911483][  T722] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   35.919514][  T722] System zones: 0-2, 18-18, 34-35
[   35.925257][  T722] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   35.937943][  T731] netlink: 76 bytes leftover after parsing attributes in process `syz.2.104'.
[   35.943202][  T722] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   35.956390][  T731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'.
[   35.962334][  T722] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   35.982301][  T722] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback.
[   35.989920][  T722] ext4 filesystem being remounted at /2/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.081051][   T60] usb 5-1: Using ep0 maxpacket: 8
[   36.111054][  T319] usb 4-1: Using ep0 maxpacket: 32
[   36.117266][  T737] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.100: corrupted xattr block 33
[   36.129211][  T737] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   36.138237][  T737] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.100: corrupted xattr block 33
[   36.150055][  T737] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   36.159439][  T737] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.5.100: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   36.171093][  T440] usb 1-1: unit 0 not found!
[   36.181040][  T737] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem
[   36.193297][  T737] EXT4-fs warning (device loop5): ext4_rename_delete:3792: inode #12: comm syz.5.100: Deleting old file: nlink 2, error=-117
[   36.206306][  T737] EXT4-fs error (device loop5): ext4_ext_remove_space:2944: inode #15: comm syz.5.100: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   36.223518][  T737] EXT4-fs error (device loop5): ext4_evict_inode:296: comm syz.5.100: couldn't truncate inode 15 (err -117)
[   36.257030][   T60] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   36.268041][   T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   36.281329][   T60] usb 5-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00
[   36.290531][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.299643][   T60] usb 5-1: config 0 descriptor??
[   36.304693][  T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[   36.315578][  T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[   36.481053][  T319] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   36.490144][  T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.498156][  T319] usb 4-1: Product: 祬䖝倄갹뱂␺ꟍ托繪➪천꿘ꥳᐶ誕国濿ꭃ䋄⾐뻊꣄㰣聂玤蒏寠誾豀麩甅읉޳⺥枷째쁧⳼洧❗邫玲뀅蓹䱸䡟騖耥釚赈圖쇇嬔來漞쀙ᤧ煔쬺†ᅿ宽䣡쐏켬㡉ᨼౄ駚뛡䊢"뻄Ӿ퓗䯄딅喒M핌緩䃃䒎阍̵眄㔾毩⑛葖㫳ꠙꏏȂ恜衂쫿썞⚹1䂋糰ࠩ쬄킮륺㲗챇䥎ˀ༖㠸䣣
[   36.521590][  T440] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   36.533433][  T319] usb 4-1: Manufacturer: ц
[   36.544673][  T319] usb 4-1: SerialNumber: Ύ䧧Ὶఎ넯ኲ疚᭗眾༗诶鳹Ͳ⑭〔ɀ幫땢鸒흒횱먱熝팶蕃㟺鸃迪뵯萀궪癥罵ꐼ綳徽驼坤꽩맓㶬ከ桫짫֑䨥㲂晵
[   36.581183][  T440] usb 1-1: unit 0 not found!
[   36.601058][   T20] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   36.641387][  T440] snd-usb-audio: probe of 1-1:1.1 failed with error -22
[   36.681085][  T440] usb 1-1: unit 0 not found!
[   36.741305][  T440] snd-usb-audio: probe of 1-1:1.2 failed with error -22
[   36.750640][  T440] usb 1-1: USB disconnect, device number 3
[   36.861055][   T20] usb 6-1: Using ep0 maxpacket: 16
[   36.981070][   T20] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 2047, setting to 1024
[   36.992348][   T20] usb 6-1: config 0 interface 0 has no altsetting 0
[   36.998951][   T20] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[   37.008117][   T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.021427][   T20] usb 6-1: config 0 descriptor??
[   37.036681][  T744] loop0: detected capacity change from 0 to 8192
[   37.043120][  T739] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[   37.071275][  T475]  loop0: p1 p2 < > p4
[   37.075369][  T475] loop0: partition table partially beyond EOD, truncated
[   37.082508][  T475] loop0: p1 start 16777216 is beyond EOD, truncated
[   37.089092][  T475] loop0: p2 start 4294770691 is beyond EOD, truncated
[   37.096836][  T475] loop0: p4 size 33554432 extends beyond EOD, truncated
[   37.105430][  T744]  loop0: p1 p2 < > p4
[   37.109547][  T744] loop0: partition table partially beyond EOD, truncated
[   37.116758][  T744] loop0: p1 start 16777216 is beyond EOD, truncated
[   37.123534][  T744] loop0: p2 start 4294770691 is beyond EOD, truncated
[   37.130350][  T744] loop0: p4 size 33554432 extends beyond EOD, truncated
[   37.152331][  T753] device syzkaller0 entered promiscuous mode
[   37.159150][   T30] kauditd_printk_skb: 18 callbacks suppressed
[   37.159161][   T30] audit: type=1400 audit(1785024551.452:240): avc:  denied  { ioctl } for  pid=752 comm="syz.0.111" path="socket:[17784]" dev="sockfs" ino=17784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   37.190903][   T30] audit: type=1400 audit(1785024551.452:241): avc:  denied  { read } for  pid=752 comm="syz.0.111" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   37.198860][  T753] loop0: detected capacity change from 0 to 8192
[   37.214110][   T30] audit: type=1400 audit(1785024551.452:242): avc:  denied  { open } for  pid=752 comm="syz.0.111" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   37.231872][  T704] UDC core: couldn't find an available UDC or it's busy: -16
[   37.243973][   T30] audit: type=1400 audit(1785024551.452:243): avc:  denied  { write } for  pid=752 comm="syz.0.111" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   37.251811][  T704] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   37.274241][   T30] audit: type=1400 audit(1785024551.532:244): avc:  denied  { getopt } for  pid=703 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.282299][  T739] UDC core: couldn't find an available UDC or it's busy: -16
[   37.309712][  T753]  loop0: p1 p2 < > p4
[   37.310994][  T739] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   37.319144][  T753] loop0: partition table partially beyond EOD, truncated
[   37.328787][  T753] loop0: p1 start 16777216 is beyond EOD, truncated
[   37.331796][  T739] loop5: detected capacity change from 0 to 512
[   37.335673][  T753] loop0: p2 start 4294770691 is beyond EOD, 
[   37.341745][  T319] usb 4-1: MIDIStreaming interface descriptor not found
[   37.342318][  T753] truncated
[   37.353591][  T319] usb 4-1: USB disconnect, device number 3
[   37.355035][  T753] loop0: p4 size 33554432 extends beyond EOD, truncated
[   37.424349][  T739] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.437467][  T739] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   37.446698][  T739] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[   37.457556][  T739] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[   37.467013][  T739] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   37.475050][  T739] System zones: 0-2, 18-18, 34-35
[   37.480362][  T739] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none.
[   37.501964][  T316] udevd[316]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   37.510461][  T756] loop0: detected capacity change from 0 to 1024
[   37.551424][  T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.564929][  T756] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   37.574501][  T756] EXT4-fs (loop0): Ignoring removed orlov option
[   37.587571][  T316] udevd[316]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   37.591557][  T756] EXT4-fs (loop0): corrupt root inode, run e2fsck
[   37.602741][  T316] udevd[316]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   37.604078][  T756] EXT4-fs (loop0): mount failed
[   37.727648][   T30] audit: type=1400 audit(1785024552.022:245): avc:  denied  { remount } for  pid=773 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   37.808913][  T776] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[   37.818316][  T776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'.
[   37.827330][  T776] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[   37.848748][   T30] audit: type=1400 audit(1785024552.142:246): avc:  denied  { create } for  pid=779 comm="syz.2.120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   37.873499][   T30] audit: type=1400 audit(1785024552.162:247): avc:  denied  { read } for  pid=779 comm="syz.2.120" name="file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   37.897818][   T30] audit: type=1400 audit(1785024552.162:248): avc:  denied  { open } for  pid=779 comm="syz.2.120" path="/30/file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   37.925766][  T786] loop3: detected capacity change from 0 to 1024
[   37.934465][   T30] audit: type=1400 audit(1785024552.172:249): avc:  denied  { ioctl } for  pid=779 comm="syz.2.120" path="/30/file0" dev="tmpfs" ino=188 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   37.959952][  T786] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   37.967417][  T786] EXT4-fs (loop3): Ignoring removed orlov option
[   37.981825][  T786] EXT4-fs (loop3): corrupt root inode, run e2fsck
[   37.988494][  T786] EXT4-fs (loop3): mount failed
[   37.994025][  T296] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   38.011024][   T20] usbhid 6-1:0.0: can't add hid device: -71
[   38.017039][   T20] usbhid: probe of 6-1:0.0 failed with error -71
[   38.025083][   T20] usb 6-1: USB disconnect, device number 2
[   38.401019][  T296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   38.414214][  T296] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[   38.423432][  T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.433975][  T296] usb 1-1: config 0 descriptor??
[   38.461037][  T349] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   38.661007][   T60] usbhid 5-1:0.0: can't add hid device: -71
[   38.667255][   T60] usbhid: probe of 5-1:0.0 failed with error -71
[   38.674729][   T60] usb 5-1: USB disconnect, device number 6
[   38.715071][  T835] netlink: 48 bytes leftover after parsing attributes in process `syz.5.140'.
[   38.730993][  T349] usb 4-1: Using ep0 maxpacket: 32
[   38.741503][  T474]  loop4: p1 p2 < > p4
[   38.745584][  T474] loop4: partition table partially beyond EOD, truncated
[   38.752832][  T474] loop4: p1 start 16777216 is beyond EOD, truncated
[   38.759509][  T474] loop4: p2 start 4294770691 is beyond EOD, truncated
[   38.766296][  T474] loop4: p4 size 33554432 extends beyond EOD, truncated
[   38.774685][  T827]  loop4: p1 p2 < > p4
[   38.778756][  T827] loop4: partition table partially beyond EOD, truncated
[   38.786009][  T827] loop4: p1 start 16777216 is beyond EOD, truncated
[   38.792668][  T827] loop4: p2 start 4294770691 is beyond EOD, truncated
[   38.799437][  T827] loop4: p4 size 33554432 extends beyond EOD, truncated
[   38.851009][  T349] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   38.859204][  T349] usb 4-1: config 0 has no interface number 0
[   38.865360][  T349] usb 4-1: config 0 interface 184 has no altsetting 0
[   38.941633][  T839] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   38.948057][  T474] udevd[474]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   38.967972][  T839] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   38.974880][  T474] udevd[474]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   38.977929][  T839] System zones: 0-2, 18-18, 34-35
[   38.991454][  T839] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   39.015851][  T839] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   39.028117][  T839] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   39.031030][  T349] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   39.045146][  T349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.051635][  T839] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback.
[   39.053235][  T349] usb 4-1: Product: syz
[   39.060966][   T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   39.064714][  T349] usb 4-1: Manufacturer: syz
[   39.072396][  T839] ext4 filesystem being remounted at /19/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.076747][  T349] usb 4-1: SerialNumber: syz
[   39.077388][  T349] usb 4-1: config 0 descriptor??
[   39.131307][  T839] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.141: corrupted xattr block 33
[   39.143187][  T839] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   39.152215][  T839] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.141: corrupted xattr block 33
[   39.164061][  T839] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   39.173421][  T839] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.4.141: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   39.193927][  T839] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem
[   39.203045][  T839] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #12: comm syz.4.141: Deleting old file: nlink 2, error=-117
[   39.216060][  T839] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.141: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   39.233124][  T839] EXT4-fs error (device loop4): ext4_evict_inode:296: comm syz.4.141: couldn't truncate inode 15 (err -117)
[   39.246570][  T349] smsc75xx v1.0.0
[   39.343601][  T845] netlink: 9052 bytes leftover after parsing attributes in process `syz.2.143'.
[   39.370960][   T20] usb 6-1: device descriptor read/64, error -71
[   39.551229][  T296] usbhid 1-1:0.0: can't add hid device: -71
[   39.557176][  T296] usbhid: probe of 1-1:0.0 failed with error -71
[   39.566938][  T296] usb 1-1: USB disconnect, device number 4
[   39.620994][  T319] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   39.622003][  T857] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   39.635872][  T857] EXT4-fs (loop0): Ignoring removed orlov option
[   39.651961][  T857] EXT4-fs (loop0): corrupt root inode, run e2fsck
[   39.658413][  T857] EXT4-fs (loop0): mount failed
[   39.780981][   T20] usb 6-1: device descriptor read/64, error -71
[   39.801307][  T316]  loop0: p1 p2 < > p4
[   39.805370][  T316] loop0: partition table partially beyond EOD, truncated
[   39.812586][  T316] loop0: p1 start 16777216 is beyond EOD, truncated
[   39.819175][  T316] loop0: p2 start 4294770691 is beyond EOD, truncated
[   39.821053][  T349] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   39.825976][  T316] loop0: p4 size 33554432 extends beyond EOD, 
[   39.836731][  T349] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   39.837044][  T316] truncated
[   39.856365][  T866]  loop0: p1 p2 < > p4
[   39.860433][  T866] loop0: partition table partially beyond EOD, truncated
[   39.867658][  T866] loop0: p1 start 16777216 is beyond EOD, truncated
[   39.874339][  T866] loop0: p2 start 4294770691 is beyond EOD, truncated
[   39.881247][  T866] loop0: p4 size 33554432 extends beyond EOD, truncated
[   39.900968][  T319] usb 5-1: device descriptor read/64, error -71
[   39.983835][  T873] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   39.996647][  T873] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   40.004739][  T873] System zones: 0-2, 18-18, 34-35
[   40.010097][  T873] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   40.028389][  T873] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   40.040701][  T873] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   40.051082][   T20] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   40.051510][  T873] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback.
[   40.066194][  T873] ext4 filesystem being remounted at /30/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.080403][  T873] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.153: corrupted xattr block 33
[   40.092330][  T873] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   40.101280][  T873] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.153: corrupted xattr block 33
[   40.113052][  T873] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   40.122336][  T873] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.0.153: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   40.143024][  T873] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem
[   40.151940][  T873] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #12: comm syz.0.153: Deleting old file: nlink 2, error=-117
[   40.164907][  T873] EXT4-fs error (device loop0): ext4_ext_remove_space:2944: inode #15: comm syz.0.153: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   40.181908][  T873] EXT4-fs error (device loop0): ext4_evict_inode:296: comm syz.0.153: couldn't truncate inode 15 (err -117)
[   40.237920][  T877] set_capacity_and_notify: 7 callbacks suppressed
[   40.237930][  T877] loop0: detected capacity change from 0 to 128
[   40.264627][  T877] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   40.275286][  T877] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   40.291021][  T319] usb 5-1: device descriptor read/64, error -71
[   40.317309][  T880] loop0: detected capacity change from 0 to 512
[   40.323640][   T20] usb 6-1: device descriptor read/64, error -71
[   40.332394][  T880] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.155: bg 0: block 393: padding at end of block bitmap is not set
[   40.346778][  T880] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   40.355981][  T880] EXT4-fs (loop0): 2 truncates cleaned up
[   40.361855][  T880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   40.429044][  T886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'.
[   40.509820][  T888] loop0: detected capacity change from 0 to 256
[   40.561041][  T319] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   40.710982][   T20] usb 6-1: device descriptor read/64, error -71
[   40.818917][  T901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'.
[   40.831025][  T319] usb 5-1: device descriptor read/64, error -71
[   40.838048][   T20] usb usb6-port1: attempt power cycle
[   40.898688][  T905] loop0: detected capacity change from 0 to 512
[   40.918081][  T905] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   40.933491][  T905] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   40.941849][  T905] System zones: 0-2, 18-18, 34-35
[   40.947374][  T905] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noauto_da_alloc,i_version,debug,dioread_nolock,,errors=continue. Quota mode: writeback.
[   40.968576][  T905] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   41.001111][  T905] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002]
[   41.014410][  T905] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback.
[   41.030967][  T905] ext4 filesystem being remounted at /39/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.043511][  T905] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.165: corrupted xattr block 33
[   41.055361][  T905] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   41.064360][  T905] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.165: corrupted xattr block 33
[   41.076197][  T905] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   41.086051][  T905] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.0.165: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   41.106752][  T905] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem
[   41.115689][  T905] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #12: comm syz.0.165: Deleting old file: nlink 2, error=-117
[   41.128719][  T905] EXT4-fs error (device loop0): ext4_ext_remove_space:2944: inode #15: comm syz.0.165: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   41.145807][  T905] EXT4-fs error (device loop0): ext4_evict_inode:296: comm syz.0.165: couldn't truncate inode 15 (err -117)
[   41.230979][  T319] usb 5-1: device descriptor read/64, error -71
[   41.250972][   T20] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   41.381020][  T349] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[   41.414227][  T349] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[   41.424157][  T319] usb usb5-port1: attempt power cycle
[   41.434504][  T922] loop0: detected capacity change from 0 to 1024
[   41.455412][  T922] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   41.463993][  T349] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   41.487247][  T922] EXT4-fs (loop0): Ignoring removed orlov option
[   41.496539][  T349] smsc75xx: probe of 4-1:0.184 failed with error -71
[   41.518813][  T349] usb 4-1: USB disconnect, device number 4
[   41.526691][  T922] EXT4-fs (loop0): corrupt root inode, run e2fsck
[   41.537097][  T922] EXT4-fs (loop0): mount failed
[   41.571026][  T926] loop3: detected capacity change from 0 to 8192
[   41.571152][   T20] usb 6-1: device descriptor read/8, error -71
[   41.631384][  T316]  loop3: p1 p2 < > p4
[   41.635556][  T316] loop3: partition table partially beyond EOD, truncated
[   41.649320][  T316] loop3: p1 start 16777216 is beyond EOD, truncated
[   41.662444][  T316] loop3: p2 start 4294770691 is beyond EOD, truncated
[   41.677116][  T316] loop3: p4 size 33554432 extends beyond EOD, truncated
[   41.691315][  T287] ------------[ cut here ]------------
[   41.700026][  T287] WARNING: CPU: 0 PID: 287 at fs/inode.c:335 drop_nlink+0xc5/0x110
[   41.745220][  T926]  loop3: p1 p2 < > p4
[   41.749392][  T926] loop3: partition table partially beyond EOD, truncated
[   41.757033][  T926] loop3: p1 start 16777216 is beyond EOD, truncated
[   41.763716][  T926] loop3: p2 start 4294770691 is beyond EOD, truncated
[   41.770482][  T926] loop3: p4 size 33554432 extends beyond EOD, truncated
[   41.777759][  T287] Modules linked in:
[   41.783847][  T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[   41.800947][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   41.801037][   T20] usb 6-1: device descriptor read/8, error -71
[   41.820990][  T287] RIP: 0010:drop_nlink+0xc5/0x110
[   41.826078][  T287] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 c3 0b f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3b 9a b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   41.840969][  T319] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   41.853609][  T287] RSP: 0018:ffffc90000a57cd0 EFLAGS: 00010293
[   41.859804][  T287] RAX: ffffffff81b71ca5 RBX: ffff88812a4bcbf0 RCX: ffff88811bd14f00
[   41.876117][  T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   41.885663][  T287] RBP: ffffc90000a57cf8 R08: 0000000000000003 R09: 0000000000000004
[   41.894091][  T287] R10: dffffc0000000000 R11: fffff5200014af88 R12: dffffc0000000000
[   41.910989][  T287] R13: 1ffff11025497987 R14: ffff88812a4bcc38 R15: 0000000000000000
[   41.918983][  T287] FS:  0000555558bb9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   41.941012][  T287] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.947615][  T287] CR2: 00007fd211bb1000 CR3: 0000000126ee4000 CR4: 00000000003506a0
[   41.959593][  T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   41.972926][  T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   41.985796][  T287] Call Trace:
[   42.004296][  T287]  <TASK>
[   42.007229][  T287]  shmem_rmdir+0x5b/0x90
[   42.011493][  T287]  vfs_rmdir+0x1ae/0x450
[   42.015737][  T287]  incfs_kill_sb+0xfe/0x210
[   42.020259][  T287]  deactivate_locked_super+0xa0/0x100
[   42.021009][  T319] usb 5-1: device descriptor read/8, error -71
[   42.026775][  T287]  deactivate_super+0xaf/0xe0
[   42.040978][  T287]  cleanup_mnt+0x44f/0x500
[   42.045414][  T287]  __cleanup_mnt+0x19/0x20
[   42.049831][  T287]  task_work_run+0x127/0x190
[   42.070964][  T287]  exit_to_user_mode_loop+0xd0/0xe0
[   42.080838][  T287]  exit_to_user_mode_prepare+0x87/0xd0
[   42.091912][  T287]  syscall_exit_to_user_mode+0x1a/0x30
[   42.097398][  T287]  do_syscall_64+0x58/0xa0
[   42.101982][  T287]  ? clear_bhb_loop+0x50/0xa0
[   42.106742][  T287]  ? clear_bhb_loop+0x50/0xa0
[   42.114740][  T287]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   42.120715][  T287] RIP: 0033:0x7f62e2f490d7
[   42.121411][  T930] overlayfs: failed to clone upperpath
[   42.125366][  T287] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   42.150438][  T287] RSP: 002b:00007ffffaac5ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   42.159548][  T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f62e2f490d7
[   42.169113][  T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffaac5c60
[   42.177362][  T287] RBP: 00007ffffaac5c60 R08: 00007ffffaac6c60 R09: 00000000ffffffff
[   42.185662][  T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffaac6cf0
[   42.193868][  T287] R13: 00007f62e2fdd30a R14: 000000000000a1c0 R15: 00007ffffaac6d30
[   42.202127][  T287]  </TASK>
[   42.209213][  T287] ---[ end trace 3fa0a69b6840adfa ]---
[   42.216233][  T287] ==================================================================
[   42.224297][  T287] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60
[   42.230543][  T287] Write of size 4 at addr 0000000000000170 by task syz-executor/287
[   42.238510][  T287] 
[   42.240829][  T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G        W         syzkaller #0
[   42.249673][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   42.259726][  T287] Call Trace:
[   42.262998][  T287]  <TASK>
[   42.265924][  T287]  __dump_stack+0x21/0x30
[   42.270251][  T287]  dump_stack_lvl+0x110/0x170
[   42.274928][  T287]  ? show_regs_print_info+0x20/0x20
[   42.280127][  T287]  ? _raw_spin_lock+0x94/0xf0
[   42.284811][  T287]  ? _raw_spin_trylock_bh+0x150/0x150
[   42.290190][  T287]  ? ihold+0x20/0x60
[   42.294083][  T287]  kasan_report+0xcc/0x150
[   42.298510][  T287]  ? ihold+0x20/0x60
[   42.302417][  T287]  kasan_check_range+0x249/0x2a0
[   42.307352][  T287]  __kasan_check_write+0x14/0x20
[   42.312284][  T287]  ihold+0x20/0x60
[   42.316000][  T287]  vfs_rmdir+0x23d/0x450
[   42.320242][  T287]  incfs_kill_sb+0xfe/0x210
[   42.324744][  T287]  deactivate_locked_super+0xa0/0x100
[   42.330123][  T287]  deactivate_super+0xaf/0xe0
[   42.334801][  T287]  cleanup_mnt+0x44f/0x500
[   42.339221][  T287]  __cleanup_mnt+0x19/0x20
[   42.343639][  T287]  task_work_run+0x127/0x190
[   42.348236][  T287]  exit_to_user_mode_loop+0xd0/0xe0
[   42.353436][  T287]  exit_to_user_mode_prepare+0x87/0xd0
[   42.358891][  T287]  syscall_exit_to_user_mode+0x1a/0x30
[   42.364346][  T287]  do_syscall_64+0x58/0xa0
[   42.368918][  T287]  ? clear_bhb_loop+0x50/0xa0
[   42.373601][  T287]  ? clear_bhb_loop+0x50/0xa0
[   42.378276][  T287]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   42.384166][  T287] RIP: 0033:0x7f62e2f490d7
[   42.388579][  T287] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   42.408183][  T287] RSP: 002b:00007ffffaac5ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   42.416594][  T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f62e2f490d7
[   42.424563][  T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffaac5c60
[   42.432530][  T287] RBP: 00007ffffaac5c60 R08: 00007ffffaac6c60 R09: 00000000ffffffff
[   42.440498][  T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffaac6cf0
[   42.448462][  T287] R13: 00007f62e2fdd30a R14: 000000000000a1c0 R15: 00007ffffaac6d30
[   42.456466][  T287]  </TASK>
[   42.459481][  T287] ==================================================================
[   42.467528][  T287] Disabling lock debugging due to kernel taint
[   42.480282][  T287] BUG: kernel NULL pointer dereference, address: 0000000000000170
[   42.488092][  T287] #PF: supervisor write access in kernel mode
[   42.494148][  T287] #PF: error_code(0x0002) - not-present page
[   42.500117][  T287] PGD 129ffb067 P4D 129ffb067 PUD 0 
[   42.505407][  T287] Oops: 0002 [#1] PREEMPT SMP KASAN
[   42.510596][  T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G    B   W         syzkaller #0
[   42.519435][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   42.529485][  T287] RIP: 0010:ihold+0x26/0x60
[   42.533991][  T287] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 51 92 b2 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 b0 03 f2 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1
[   42.553595][  T287] RSP: 0018:ffffc90000a57d10 EFLAGS: 00010246
[   42.559662][  T287] RAX: ffff88811bd14f00 RBX: 0000000000000000 RCX: ffff88811bd14f00
[   42.567632][  T287] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff
[   42.568189][  T944] loop5: detected capacity change from 0 to 2048
[   42.575602][  T287] RBP: ffffc90000a57d20 R08: 0000000000000003 R09: 0000000000000004
[   42.575616][  T287] R10: dffffc0000000000 R11: fffffbfff0e18c4c R12: 1ffff11025362de2
[   42.575627][  T287] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[   42.575637][  T287] FS:  0000555558bb9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   42.575650][  T287] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.575661][  T287] CR2: 0000000000000170 CR3: 0000000126ee4000 CR4: 00000000003506b0
[   42.575675][  T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   42.637147][  T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   42.645098][  T287] Call Trace:
[   42.648360][  T287]  <TASK>
[   42.651272][  T287]  vfs_rmdir+0x23d/0x450
[   42.655499][  T287]  incfs_kill_sb+0xfe/0x210
[   42.659981][  T287]  deactivate_locked_super+0xa0/0x100
[   42.665332][  T287]  deactivate_super+0xaf/0xe0
[   42.669988][  T287]  cleanup_mnt+0x44f/0x500
[   42.674382][  T287]  __cleanup_mnt+0x19/0x20
[   42.678774][  T287]  task_work_run+0x127/0x190
[   42.683358][  T287]  exit_to_user_mode_loop+0xd0/0xe0
[   42.688533][  T287]  exit_to_user_mode_prepare+0x87/0xd0
[   42.693981][  T287]  syscall_exit_to_user_mode+0x1a/0x30
[   42.699416][  T287]  do_syscall_64+0x58/0xa0
[   42.703808][  T287]  ? clear_bhb_loop+0x50/0xa0
[   42.708461][  T287]  ? clear_bhb_loop+0x50/0xa0
[   42.713112][  T287]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   42.718991][  T287] RIP: 0033:0x7f62e2f490d7
[   42.723385][  T287] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   42.742969][  T287] RSP: 002b:00007ffffaac5ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   42.751374][  T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f62e2f490d7
[   42.759322][  T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffaac5c60
[   42.767287][  T287] RBP: 00007ffffaac5c60 R08: 00007ffffaac6c60 R09: 00000000ffffffff
[   42.775234][  T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffaac6cf0
[   42.783198][  T287] R13: 00007f62e2fdd30a R14: 000000000000a1c0 R15: 00007ffffaac6d30
[   42.791168][  T287]  </TASK>
[   42.794166][  T287] Modules linked in:
[   42.798048][  T287] CR2: 0000000000000170
[   42.802185][  T287] ---[ end trace 3fa0a69b6840adfb ]---
[   42.807614][  T287] RIP: 0010:ihold+0x26/0x60
[   42.812096][  T287] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 51 92 b2 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 b0 03 f2 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1
[   42.831695][  T287] RSP: 0018:ffffc90000a57d10 EFLAGS: 00010246
[   42.837742][  T287] RAX: ffff88811bd14f00 RBX: 0000000000000000 RCX: ffff88811bd14f00
[   42.845690][  T287] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff
[   42.853659][  T287] RBP: ffffc90000a57d20 R08: 0000000000000003 R09: 0000000000000004
[   42.861624][  T287] R10: dffffc0000000000 R11: fffffbfff0e18c4c R12: 1ffff11025362de2
[   42.869589][  T287] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[   42.878143][  T287] FS:  0000555558bb9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   42.887071][  T287] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.893631][  T287] CR2: 0000000000000170 CR3: 0000000126ee4000 CR4: 00000000003506b0
[   42.901580][  T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   42.909525][  T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   42.917474][  T287] Kernel panic - not syncing: Fatal exception
[   42.923727][  T287] Kernel Offset: disabled
[   42.928037][  T287] Rebooting in 86400 seconds..