last executing test programs:

2m50.110335186s ago: executing program 32 (id=124):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20)
mkdirat(0xffffffffffffff9c, 0x0, 0xc0)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='!,\x00\xe5\x9b\xb41\x89\x1a\xd1;m\x83+\xbd\xe1\xdb5f\x14\x8a\xe8\xf7\x8fe\xf0\xea\x15\x1am\xe8=\x99I\xe1\xb6^\xf40\x99\xae\xa2&\xf7\xcc\fJ|aW\xab\xd6\xbcD[\xb5\x97\x14\x11\xac\x83\xce\xaf4g\x14\x9b\xb4%Zn\xe7\x8e[\xf8\xefQ=\xb6\xff\xd3\xeaX\x01\n\xaf\x9b\xc7=\x83\x88\xae\xcb-\xac\xbc\x12\xe7i\xdd\xddy[\xa2\x00\x16\xca\xcfca\xd7A\xfdL\xf1I\xb5\xab\xf7c\xb5\xb8\b\xe6m\n\x85\x00L')
socket$inet(0x2, 0x3, 0x2)
openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)

2m44.141805574s ago: executing program 33 (id=145):
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

1m57.272152411s ago: executing program 34 (id=338):
mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x40009, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000240)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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")
creat(0x0, 0x0)
creat(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x9, 0x2, 0x3]}, &(0x7f0000000000)=0x44)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
listen(r4, 0x0)
socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e21, @multicast2}, 0x10)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0x17, "ff00f70000e5020052c4f21c7f000000002000"})
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14)

1m56.055658751s ago: executing program 6 (id=347):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x194, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="f192258b68b5"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x368}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_IE={0x109, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x32}, 0xa, 0x7, @device_b, 0x54, 0x27, 0x7b4}}, @measure_req={0x26, 0x9f, {0xb, 0x8, 0x5, "c25207c3142f2b6cd7e970e66ff6cfeb1e33db1b54fe7da3d432efbeeec6908b46b1b16f8eaa089ec6b7fc557e32227c88f61374c37e18a851328ff601ebee6ce7c2e20907894e2ffb0d94da7748eef4bfa853d8cd9f41e0473caf93340e5c3faef6c87d1d8e972f1365b6191ae4e7dfa8a785d7610caf9ec996a03ef15f8fc56acf5a26408d812c5a831f206587209f64ffe3c19d924cad2214eaed"}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0xf}}, @perr={0x84, 0x1c, {0x4, 0x2, [{{}, @broadcast, 0x7fffffff, @void, 0x40}, {{}, @device_b, 0x0, @void, 0x39}]}}, @gcr_ga={0xbd, 0x6}, @chsw_timing={0x68, 0x4, {0x6, 0x8c}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x40, 0x40, 0x0, 0x9}, 0xd, 0x1000000, 0x5}}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x4040000}, 0x24020041)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x880)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="b12a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0)

1m54.835280961s ago: executing program 6 (id=353):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x5, 0x2, 0x14, 0x0, 0x1, 0x10000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)

1m54.790923853s ago: executing program 35 (id=353):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x5, 0x2, 0x14, 0x0, 0x1, 0x10000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)

1m52.320551864s ago: executing program 8 (id=367):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f000011d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/210, 0xd2, 0x0, &(0x7f00000002c0)=""/35, 0x23}, &(0x7f0000000340)=0x40)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f00008b2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/34, 0x22, 0x1, &(0x7f0000000400)=""/12, 0xc}, &(0x7f0000000480)=0x40)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

1m52.163233258s ago: executing program 8 (id=371):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getrlimit(0x2, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdfe70000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x80242, 0x10)
open(0x0, 0x80202, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000540)=0x1, 0x4)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0xfffffff9, 0x8009}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24)
io_setup(0x5, &(0x7f0000001380)=<r6=>0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14)
tgkill(r0, r0, 0x2)
tkill(r0, 0x7)
wait4(r0, 0x0, 0x0, 0x0)

1m47.015807366s ago: executing program 8 (id=378):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000840)=ANY=[])

1m46.602943826s ago: executing program 8 (id=385):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0xe, &(0x7f0000000440)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xc90}}, {@minixdf}, {@auto_da_alloc}, {@data_journal}, {@lazytime}, {@oldalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}, {@auto_da_alloc}]}, 0x3, 0x445, &(0x7f00000006c0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080))
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb1)
ioctl$TIOCSCTTY(r0, 0x540e, 0x3)
r1 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0)
r2 = io_uring_setup(0x21c5, &(0x7f0000000040)={0x0, 0xe007, 0x2, 0x3, 0x87})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r3, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
readv(r1, &(0x7f0000000b40)=[{&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f00000005c0)=""/200, 0xc8}], 0x3)
syz_fuse_handle_req(r3, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc56161eaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce70bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bccb4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d791e8fb222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7e18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14808e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c37900002665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250934ab0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea00", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lstat(&(0x7f0000007a80)='./file0\x00', &(0x7f0000007ac0))
r4 = eventfd(0x5)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f00000000c0)=r4, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000000c0))
rename(&(0x7f0000000000)='./file0/file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x2)

1m46.4569431s ago: executing program 36 (id=386):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="530000000700004600f580ff07", @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRESHEX=r1], 0x53)
sysinfo(&(0x7f00000000c0)=""/42)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3b)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="5d88664a6e6f3d", @ANYRESHEX=r2, @ANYBLOB=',k'])

1m45.684413809s ago: executing program 8 (id=393):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20)
mkdirat(0xffffffffffffff9c, 0x0, 0xc0)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='!,\x00\xe5\x9b\xb41\x89\x1a\xd1;m\x83+\xbd\xe1\xdb5f\x14\x8a\xe8\xf7\x8fe\xf0\xea\x15\x1am\xe8=\x99I\xe1\xb6^\xf40\x99\xae\xa2&\xf7\xcc\fJ|aW\xab\xd6\xbcD[\xb5\x97\x14\x11\xac\x83\xce\xaf4g\x14\x9b\xb4%Zn\xe7\x8e[\xf8\xefQ=\xb6\xff\xd3\xeaX\x01\n\xaf\x9b\xc7=\x83\x88\xae\xcb-\xac\xbc\x12\xe7i\xdd\xddy[\xa2\x00\x16\xca\xcfca\xd7A\xfdL\xf1I\xb5\xab\xf7c\xb5\xb8\b\xe6m\n\x85\x00L')
r7 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000840)=ANY=[])

1m44.389700542s ago: executing program 8 (id=399):
syz_open_dev$MSR(0x0, 0xfaaa, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x7f}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]})
syz_emit_ethernet(0xef, &(0x7f00000001c0)={@empty, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x4e, 0x0, "3e94", "1496da955237bcb60990c8cc014c5b2bd3f6f9aa0e5f0570b88767b3bd0e90045b746af05355de5ec2b124723af298acf3a4470ed8589b38937a6b2245d46778cd35bea94863867683975143bd0dbb699f895afff6f213e012c1abbb3fbbcf40fa3ecd6cbac6bb851a5e6c4937224d5932aec670482ef84b9e5bb9fc7a299d1cb71aa3e6fd73bee21b88c4acb6090a09f8597610a2939884b20defaa16ddf6a9b862f8a46c42fbc69b9e01cdc793af0a4cf2d42c14f9fe3e84b55249c68361c0c2a88c23b1607dd0a6c5b5b9082c8e42cada59465c"}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0x5fd, 0x219, 0x602, 0x36a]})
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
ftruncate(r3, 0x200004)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r4, r3, 0x0, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
getsockopt$inet6_mreq(r5, 0x29, 0x1, 0x0, &(0x7f0000003d40))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)

1m44.192461986s ago: executing program 37 (id=399):
syz_open_dev$MSR(0x0, 0xfaaa, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x7f}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]})
syz_emit_ethernet(0xef, &(0x7f00000001c0)={@empty, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x4e, 0x0, "3e94", "1496da955237bcb60990c8cc014c5b2bd3f6f9aa0e5f0570b88767b3bd0e90045b746af05355de5ec2b124723af298acf3a4470ed8589b38937a6b2245d46778cd35bea94863867683975143bd0dbb699f895afff6f213e012c1abbb3fbbcf40fa3ecd6cbac6bb851a5e6c4937224d5932aec670482ef84b9e5bb9fc7a299d1cb71aa3e6fd73bee21b88c4acb6090a09f8597610a2939884b20defaa16ddf6a9b862f8a46c42fbc69b9e01cdc793af0a4cf2d42c14f9fe3e84b55249c68361c0c2a88c23b1607dd0a6c5b5b9082c8e42cada59465c"}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0x5fd, 0x219, 0x602, 0x36a]})
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
ftruncate(r3, 0x200004)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r4, r3, 0x0, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
getsockopt$inet6_mreq(r5, 0x29, 0x1, 0x0, &(0x7f0000003d40))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)

49.00427014s ago: executing program 7 (id=605):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0xe, &(0x7f0000000440)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xc90}}, {@minixdf}, {@auto_da_alloc}, {@data_journal}, {@lazytime}, {@oldalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}, {@auto_da_alloc}]}, 0x3, 0x445, &(0x7f00000006c0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0))
rename(&(0x7f0000000080)='./file1\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x2)

48.815101815s ago: executing program 7 (id=607):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/101, 0x26)
syz_usb_control_io(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

44.422266894s ago: executing program 7 (id=635):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x610003d5)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5)
io_setup(0x5, &(0x7f00000002c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x0, 0x0, 0xaf}])

44.19036281s ago: executing program 7 (id=640):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0x9, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x39, 0xc7, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' \"('], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0xc, 0x4)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x1, 0xbb8, &(0x7f00000017c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x10, 0x0, &(0x7f0000000440)=[@increfs, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000180)={&(0x7f00001a0000/0x4000)=nil, 0x4000})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)

40.000315544s ago: executing program 7 (id=663):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getrlimit(0x2, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc)
open(0x0, 0x80202, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000540)=0x1, 0x4)
io_setup(0x5, &(0x7f0000001380)=<r4=>0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="8f064ab6bf7c", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@hopopts={0x0, 0x2, '\x00', [@ra, @calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x90}}, @generic={0x3}]}]}}}}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14)
tgkill(r0, r0, 0x2)
tkill(r0, 0x7)
wait4(r0, 0x0, 0x0, 0x0)

39.535747826s ago: executing program 7 (id=668):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f00008b2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/34, 0x22, 0x1, &(0x7f0000000400)=""/12, 0xc}, &(0x7f0000000480)=0x40)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

39.526910046s ago: executing program 38 (id=668):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f00008b2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/34, 0x22, 0x1, &(0x7f0000000400)=""/12, 0xc}, &(0x7f0000000480)=0x40)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

39.525464106s ago: executing program 4 (id=670):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)

38.906767512s ago: executing program 4 (id=671):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='alloc_mode=default', 0x0, r0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0)
syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x20502, 0x0) (async)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) (async)
r3 = gettid()
timer_create(0x3, &(0x7f0000002900)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000180)) (async)
read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchmod(r4, 0x0) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3fd8, 0x1}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents64(r6, &(0x7f0000000340)=""/4096, 0x1000) (async)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8)
r7 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0)
r8 = fsmount(r7, 0x1, 0x2)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000340)='./bus\x00', 0x1800004, &(0x7f0000000740)={[{@discard_unit_segment}, {@nocheckpoint_merge}, {@two_active_logs}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=disable'}}, {@alloc_mode_def}, {@whint_mode_fs}, {@resgid}, {@checkpoint_diasble}, {@whint_mode_off}, {@io_bits={'io_bits', 0x3d, 0xf7}}, {@heap}, {@resgid}, {@noquota}, {@prjquota={'prjquota', 0x3d, '\x9dQ\xa5\xbb \xf6w\x81C\x18Zf\'\xd8\xbf\xd6\xad\xc6A\xd2\xbdp\xb2*\xb7\x9fv\xeb\"\bf\xba\xd5\x18Z\xd0\xc6\x04\x9e\x1aE\xcc\x7f\xa1\xe1%s&\x83\xf0\xc1:D\x92C\x15\xeb\xdb\xccV\f,\xb52\"\x00p\xf8L\xd1\x81i\x95\xcf\xf2\xac\xec\xf7\x936\x1c7\x00G\x11\x02\xb8\xa15\x82\x0f\x17\xfdxcz9D\xdbV\xdaq\xc3\x18\x9a\x92\x8f\xbekW\"\f7\x1b=A: 5=z\x81!\x1f\xb5\xc62\xc7f\xd1'}}]}, 0x1, 0x552d, &(0x7f000000cf00)="$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") (async)
setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x6}, 0x8)

38.862454513s ago: executing program 4 (id=672):
unshare(0x2068000)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xd}, {0xfff1, 0xffff}, {0x3, 0x10}}}, 0x24}}, 0x4c804)

38.861999823s ago: executing program 4 (id=673):
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
faccessat2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
truncate(0x0, 0xc00)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x81800)
r2 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a469, &(0x7f0000001000)=ANY=[], 0x1, 0x0, &(0x7f0000000b40))
r3 = syz_clone(0x80, &(0x7f00000000c0)="6bc7e46bf4e817afe760c5dada19e6ddf9e717cc0c425937688c801253c412e7474edeeb4728bfee019635bacfdad3516455de054423080683536ec7e71a1a30c381ac57896ff43433d8eae9a713ae179e1a914b2d260bf82df24b99c2fe520d651ab86804e7b9d7a72c74d1f5c0d0685ef0b9734f247f3ce5d486746be8a519a2c0b48f1aa04dddcefefe9b4da09ffebfdd72574ad9eb2939c1799b7effdf8d2feaaedcbba8b3d9e89788e9617209d79d1bd3fc65318ecf35ff948593571590f1593e76c11bb2e9d8b7e92ccbfcef6b7c4dd90f", 0xd4, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)="396435ba99b045c0ee4567573cbb9800e08f7b7d6bac5acba5ed5c37339a398a468f1d228875b2fdb7579800563d89ae5cc2b074f8af395db7f422a56d87c765d3c20900d996db55ea729d9c7f1f6be641444b1fdd8bc1712b43d14d8475322ca9a38065e0765b61923c2d73eba39b598bdb4b7a55859a5f76c65a8f4d73eb6316a35f9f62cd0353e8eb52490ee5b911d6bec7d5acae872d06ce")
mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x2, 0x13, r1, 0x87f3e78e)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)=<r4=>0x0)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f00000003c0)={r1, r2, 0x1})
renameat2(r1, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async)
faccessat2(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
truncate(0x0, 0xc00) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async)
open_tree(0xffffffffffffff9c, 0x0, 0x81800) (async)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a469, &(0x7f0000001000)=ANY=[], 0x1, 0x0, &(0x7f0000000b40)) (async)
syz_clone(0x80, &(0x7f00000000c0)="6bc7e46bf4e817afe760c5dada19e6ddf9e717cc0c425937688c801253c412e7474edeeb4728bfee019635bacfdad3516455de054423080683536ec7e71a1a30c381ac57896ff43433d8eae9a713ae179e1a914b2d260bf82df24b99c2fe520d651ab86804e7b9d7a72c74d1f5c0d0685ef0b9734f247f3ce5d486746be8a519a2c0b48f1aa04dddcefefe9b4da09ffebfdd72574ad9eb2939c1799b7effdf8d2feaaedcbba8b3d9e89788e9617209d79d1bd3fc65318ecf35ff948593571590f1593e76c11bb2e9d8b7e92ccbfcef6b7c4dd90f", 0xd4, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)="396435ba99b045c0ee4567573cbb9800e08f7b7d6bac5acba5ed5c37339a398a468f1d228875b2fdb7579800563d89ae5cc2b074f8af395db7f422a56d87c765d3c20900d996db55ea729d9c7f1f6be641444b1fdd8bc1712b43d14d8475322ca9a38065e0765b61923c2d73eba39b598bdb4b7a55859a5f76c65a8f4d73eb6316a35f9f62cd0353e8eb52490ee5b911d6bec7d5acae872d06ce") (async)
mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x2, 0x13, r1, 0x87f3e78e) (async)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)) (async)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f00000003c0)={r1, r2, 0x1}) (async)
renameat2(r1, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) (async)

38.294939617s ago: executing program 4 (id=675):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)

37.860514248s ago: executing program 4 (id=679):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x610003d5)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5)
io_setup(0x5, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000200)=[0x0])

37.716276252s ago: executing program 39 (id=679):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x610003d5)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5)
io_setup(0x5, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000200)=[0x0])

16.826113261s ago: executing program 1 (id=789):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
r0 = open(&(0x7f0000006080)='.\x00', 0x8000, 0x112)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}})
getdents(r0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0x0, 0x0)

16.647731886s ago: executing program 1 (id=791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd090224"], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r2, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=@newtaction={0x80, 0x58, 0x284f, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x68, 0x18, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_DATA={0x7, 0x3, '/(\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x80}}, 0x0)

14.316432804s ago: executing program 1 (id=808):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14.101399969s ago: executing program 1 (id=809):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540)={'#! ', '', [{0x20, 'cpuset.effective_mems\x00'}, {0x20, ']f$-\xfb!\x85Q\x06\xd2%\xc8\x9e\xf7q\v]\x92\x9a\xa7\x87c d\xa4\xab\x15#\x8fG\xb4\xdc\xe4\x1asN(\x1bl\x90I\x11\xfa\x1c\xa9$(\x8e\x86\xa9b\x8d\xc4\xbc\x12)\xc0\xdbF\x1c\xa3GX\x99|X\xabyd\x04\xbb\x17\xef\xbf\xe9\xa2\x14\x8f<\x189A\xdd\xc3k\xb5?x\x86\x89\x80\xc7SXAb\xc1\x05\xe7\xd25:\xfd\x0e:\\VJ\x95(\x97\x10S\xcd\x9b\x8f'}], 0xa, "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"}, 0x1f3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, &(0x7f0000000100)=0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
io_setup(0x2278, &(0x7f0000000180))
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @private=0xa010101}, 'team_slave_1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
ioctl$sock_netdev_private(r3, 0x8994, &(0x7f0000000000)=':')
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x800)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r3)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)

13.66159155s ago: executing program 1 (id=812):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff00000057f68fda65d01b009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\xa0\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\x02\xb3\x1d\xfai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D')
pipe2(&(0x7f0000000180), 0x800)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x35, 0x65, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "0011223344556677889eaabbccddeeff00142233445566088899aabbccddeeff00112233445566778807aabbccddee000000000000010000000000000500", 0x40}, 0x48, r2)
add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)

13.543738233s ago: executing program 1 (id=813):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

13.517988624s ago: executing program 40 (id=813):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

11.917363054s ago: executing program 6 (id=814):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0)
r3 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = eventfd2(0x6, 0x81001)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYRES8=r5, @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r0])
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @broadcast}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00')
syz_clone(0x30800200, &(0x7f0000000580)="8604c3db35d77eea479aa1c91b8be7158e1fe2a0147da167a61991b3a506ce8b8463001c32f5ac0272369b3ef8b3b55c8c3347c7c28759a71e2b62d0a3d5014b8efab5d09e1329dabcb4004ac61ae7306f9547250f786a7684d9a861f37cf7617d5274d633a0da078979f1962e0947e115bee4a2f92b0d3ce058b9e34641dd78aad0f0934d1a36cf22b5c0a6f80127dd356b239ec913eb74f5ed73ec4512de6cf23900a2a554f52907c5733e6ca4aa4d25cc80a0185e17266d610808ce2b84", 0xbf, &(0x7f0000000640), &(0x7f00000000c0), &(0x7f00000008c0)="75760a813423fa9ab2059a8fd5b9a566440a4ab3c5849244d12e9dc3234d43b794c1edd877ee28f8630a8a6819062dbdab198f14584f5a62fd665c5892af0a9cf39f5c35efadeb23c3b1d703ae6ae2b93faf04a137696ff9624febe7188e9a73e43efc5f896ae7d543e1dbca9af61d13e1ebd47bb48473a7ec")
getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x5000)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r8}, 0x8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)

10.933344727s ago: executing program 6 (id=829):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$9p_xen(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000020, 0x0)
mount$incfs(&(0x7f0000002100)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x4406, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), r1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480}, 0x40006)
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$int_in(r4, 0x5452, &(0x7f0000002580)=0x200000080000400)
r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
preadv(r5, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/85, 0x55}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, 0x800, 0x4000000)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001f80)={0x0, <r6=>0x0}, &(0x7f0000001fc0)=0xc)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000001f40)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000002000)={0x8, 0x0, 0x100000001, 0x8, 0x2, 0x1, 0x8000, 0x101, 0x2})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x4, 0x7ffc0001}]})
setpgid(0x0, 0x0)
setpgid(0x0, 0x0)
fsopen(&(0x7f0000002080)='fuseblk\x00', 0x0)
getpid()
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000002180), 0x4)
execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000010c0))

10.353184942s ago: executing program 6 (id=831):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000400)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@fsname={'fsname', 0x3d, '\x1b,&/.'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
symlink(0x0, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000fc1100010024bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20140000000004001400030077673000"/28], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
setns(0xc9, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
futex(&(0x7f0000000300)=0x2, 0x80, 0x2, &(0x7f0000000340), 0x0, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r4, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000)

10.170231027s ago: executing program 6 (id=832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r1, 0x11, 0x70bdac, 0x25dfdbfe, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x10008800)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa0841, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x3097c0, 0x0)
unshare(0x22020600)
pwrite64(r3, 0x0, 0x0, 0x3)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8016, &(0x7f0000000500)={[{@nodelalloc}]}, 0xfc, 0x515, &(0x7f0000000c40)="$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")
ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304)
getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

9.64903102s ago: executing program 41 (id=832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r1, 0x11, 0x70bdac, 0x25dfdbfe, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x10008800)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa0841, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x3097c0, 0x0)
unshare(0x22020600)
pwrite64(r3, 0x0, 0x0, 0x3)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8016, &(0x7f0000000500)={[{@nodelalloc}]}, 0xfc, 0x515, &(0x7f0000000c40)="$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")
ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304)
getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

1.219649729s ago: executing program 5 (id=1114):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x3, 0x1, 0x100009, 0x7, 0x4, 0x9, 0x400009, 0xfb, 0xfffffbfe, 0xd, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}})

1.127628822s ago: executing program 5 (id=1119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000030801010000000000000000000000001c000480080006400000000008000840000000f607000740000000000500030006"], 0x38}}, 0x0)

1.127393072s ago: executing program 5 (id=1121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0xe10535a769635f87, 0x0, 0x0, 0x4}, 0x1e)

1.108454872s ago: executing program 5 (id=1124):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xfd, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "872d74b608894489b4d09343824d65eff755755f1b0dac57", "8e32bb0ced2b3803bce86b1f601d0a58dc47ba90b0ca872b6d4a6cf2af3aa3a2"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)

929.746837ms ago: executing program 9 (id=1139):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x40000109, [{0x5, 0x4, 0x1}]}]}, {0x0, [0x2e]}}, &(0x7f0000000f40)=""/4079, 0x33, 0xfef, 0x8}, 0x28)

863.916289ms ago: executing program 9 (id=1144):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x2, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000050)

819.13053ms ago: executing program 9 (id=1148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000000225bd10000000df2500100000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e00200002800800030000000000080001"], 0x58}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, 0x0}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

775.618281ms ago: executing program 9 (id=1150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x30, r2, 0x1, 0x70bd2a, 0x10, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x46b038a6}]}]}, 0x30}}, 0x0)

775.570821ms ago: executing program 9 (id=1151):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0xfffffe7c, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)

704.153633ms ago: executing program 9 (id=1159):
socket(0x1e, 0x1, 0x200)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710})

543.539097ms ago: executing program 2 (id=1169):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000020001680080001000200000014000500fe"], 0x4c}}, 0x0)

518.327867ms ago: executing program 2 (id=1171):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050)

447.676759ms ago: executing program 2 (id=1173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050)

447.369289ms ago: executing program 2 (id=1176):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
ioctl$HCIINQUIRY(r1, 0x890c, 0x0)

249.941874ms ago: executing program 5 (id=1188):
socket(0x2, 0x80805, 0x0)
socket$inet(0x2, 0x3, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[], 0x0)

213.888365ms ago: executing program 5 (id=1189):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r1 = gettid()
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

204.807665ms ago: executing program 0 (id=1190):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

162.991546ms ago: executing program 3 (id=1192):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in6=@local, @in6=@private2, 0x3c, 0x2, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

162.732226ms ago: executing program 2 (id=1193):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x20001040}, 0x24000840)

162.666216ms ago: executing program 0 (id=1194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000003a00)={0x0, 0x2710}, 0x10)
getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000005a80))

162.452816ms ago: executing program 3 (id=1195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r2 = getpid()
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/user\x00')
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000)

87.773998ms ago: executing program 0 (id=1196):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

87.653848ms ago: executing program 2 (id=1197):
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa)

87.553248ms ago: executing program 3 (id=1198):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080))

82.656978ms ago: executing program 0 (id=1199):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
setsockopt(r0, 0x112, 0x7, 0x0, 0x0)

82.562158ms ago: executing program 3 (id=1200):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3d3a, 0x4)
sendto$inet(r0, &(0x7f0000002d00)='m', 0x1, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/92, 0x5c}, {0x0}], 0x2)

56.023568ms ago: executing program 0 (id=1201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xfffffffffffffde5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x2}]}, 0x40}}, 0x0)

584.07µs ago: executing program 3 (id=1202):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb014bef0000000000000060000000600000000b0000000200000006000084020000000000000003000000000000000600000002000000ff7f000005000000050000004d0000000200000002000000080000000a00000002000000ff0100000600000004000000020000000c0000000000000c0400000000615f61005f61615f5f00"], &(0x7f0000001a80)=""/147, 0x83, 0x93, 0x1, 0xfffffff8}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004800000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_skb=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x0, 0x23, 0x56, &(0x7f0000000400)="af1dad01ba9a5552cb6b3d14cad67083778a07192b5cebda3d9aa327d645bc09373b6a", &(0x7f0000000480)=""/86, 0x5, 0x0, 0x1000, 0xe9, &(0x7f0000000900)="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", &(0x7f0000001900)="bd5d15ed97db8c4890c61c4f8a59d7f4d9a7080d0190060424ff9b0424cee43486a08bec3e7260db39c18ff0641146423429eac9cb967eeb374635156652ed6c34f50a1bfa0a5c0c6903ff1df3c23f8f897e9024eca1bd99c291445b565459d13935b5541c497910b258174b225acc0c5cb1c18e1378498e524c1d4afb2596b08e665d8dd27c4840ec2b3c7e62c32d494ab3f5e1a28fb813250fd73004b313292f840e5769a3ad362ea9da153ea005d1f58ae1ee48833f54aa15421d1104c09a229c9f95447419910fdbf1f51d2950c30711da98d584a94a6276bf03b9725708a957e43522c0054388", 0x0, 0x0, 0x7fffffff}, 0x50)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000380)={'wg0\x00', 0x400})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x1, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000104e95463160000000000000000000f0500010001"], 0x1c}}, 0x54)
close(r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}]}}]}, 0x3c}}, 0x4048090)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x9, r11}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000200)={0x86, 0x2})

411.88µs ago: executing program 0 (id=1203):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000003000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 3 (id=1204):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

kernel console output (not intermixed with test programs):

uota mode: writeback.
[  203.608716][ T1618] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0)
[  203.645057][ T1618] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0)
[  203.820171][  T536] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  203.826618][ T2790] EXT4-fs (loop5): Test dummy encryption mode enabled
[  203.836288][ T2790] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.5.666: corrupted xattr block 95
[  203.848973][ T2790] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.666: bg 0: block 7: invalid block bitmap
[  203.869463][ T2790] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  203.882132][ T2790] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2925: inode #11: comm syz.5.666: corrupted xattr block 95
[  203.894686][ T2790] EXT4-fs warning (device loop5): ext4_evict_inode:305: xattr delete (err -117)
[  203.904435][ T2790] EXT4-fs (loop5): 1 orphan inode deleted
[  203.910751][ T2790] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[  203.926170][ T2793] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  203.956513][ T2793] EXT4-fs (loop9): 1 truncate cleaned up
[  203.962265][ T2793] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  204.081632][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.088797][ T2799] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.583952][ T2799] device bridge_slave_0 entered promiscuous mode
[  204.590929][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.598167][ T2799] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.605851][ T2799] device bridge_slave_1 entered promiscuous mode
[  204.793455][ T2816] set_capacity_and_notify: 4 callbacks suppressed
[  204.793497][ T2816] loop4: detected capacity change from 0 to 128
[  204.859041][ T2815] loop5: detected capacity change from 0 to 512
[  204.859946][  T536] usb 2-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config
[  204.879306][  T536] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  204.892286][  T536] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  204.901481][  T536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.910268][  T536] usb 2-1: config 0 descriptor??
[  204.916705][ T2815] EXT4-fs (loop5): Test dummy encryption mode enabled
[  204.928392][ T2815] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  204.948699][ T2815] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  204.956349][ T2815] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  204.976374][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  204.976388][   T30] audit: type=1400 audit(1786150806.811:261): avc:  denied  { mmap_zero } for  pid=2814 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  204.990588][  T536] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  205.015294][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  205.025357][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  205.035189][   T30] audit: type=1400 audit(1786150806.861:262): avc:  denied  { remount } for  pid=2814 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  205.062793][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  205.072625][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  205.083100][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.090174][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.097949][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  205.107081][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  205.124995][   T30] audit: type=1400 audit(1786150806.951:263): avc:  denied  { read } for  pid=2832 comm="syz.9.674" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  205.149104][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  205.149152][ T2833] capability: warning: `syz.9.674' uses deprecated v2 capabilities in a way that may be insecure
[  205.157732][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.174698][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.188897][ T2756] loop1: detected capacity change from 0 to 256
[  205.196930][   T30] audit: type=1400 audit(1786150806.951:264): avc:  denied  { open } for  pid=2832 comm="syz.9.674" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  205.238120][  T292] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  205.253635][  T292] FAT-fs (loop4): Filesystem has been set read-only
[  205.270676][  T292] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  205.276942][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  205.301479][ T2756] FAT-fs (loop1): Directory bread(block 64) failed
[  205.309398][ T2756] FAT-fs (loop1): Directory bread(block 65) failed
[  205.316219][ T2756] FAT-fs (loop1): Directory bread(block 66) failed
[  205.322810][ T2756] FAT-fs (loop1): Directory bread(block 67) failed
[  205.329984][ T2756] FAT-fs (loop1): Directory bread(block 68) failed
[  205.338074][ T2756] FAT-fs (loop1): Directory bread(block 69) failed
[  205.344126][ T2835] xt_hashlimit: size too large, truncated to 1048576
[  205.350167][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  205.363528][ T2843] loop9: detected capacity change from 0 to 512
[  205.366709][ T2756] FAT-fs (loop1): Directory bread(block 70) failed
[  205.377073][ T2756] FAT-fs (loop1): Directory bread(block 71) failed
[  205.389669][ T2756] FAT-fs (loop1): Directory bread(block 72) failed
[  205.390168][ T2843] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  205.396842][ T2756] FAT-fs (loop1): Directory bread(block 73) failed
[  205.409347][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  205.425895][ T2843] EXT4-fs (loop9): 1 truncate cleaned up
[  205.486588][ T2847] loop5: detected capacity change from 0 to 16
[  205.494110][ T2843] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  205.548431][ T2847] erofs: (device loop5): mounted with root inode @ nid 36.
[  205.579665][   T45] device bridge_slave_1 left promiscuous mode
[  205.675649][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.703525][   T45] device bridge_slave_0 left promiscuous mode
[  205.755686][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.846453][   T45] device veth1_macvtap left promiscuous mode
[  205.852506][   T45] device veth0_vlan left promiscuous mode
[  206.204209][   T20] usb 2-1: USB disconnect, device number 8
[  206.232696][ T2799] device veth0_vlan entered promiscuous mode
[  206.244523][ T2799] device veth1_macvtap entered promiscuous mode
[  206.256863][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  206.264870][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  206.272560][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  206.280725][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  206.333542][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  206.342077][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  206.350897][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  206.374411][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  206.416622][ T2865] loop5: detected capacity change from 0 to 512
[  206.428290][ T2853] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.435344][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.444958][ T2853] device bridge_slave_0 entered promiscuous mode
[  206.497553][ T2868] loop1: detected capacity change from 0 to 16
[  206.528411][ T2868] erofs: (device loop1): mounted with root inode @ nid 36.
[  206.550904][ T2865] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  206.689797][ T2853] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.307325][ T2873] loop9: detected capacity change from 0 to 16
[  207.364540][ T2873] erofs: (device loop9): mounted with root inode @ nid 36.
[  207.596833][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.604351][ T2853] device bridge_slave_1 entered promiscuous mode
[  207.976107][ T2880] loop2: detected capacity change from 0 to 16
[  207.993725][ T2865] EXT4-fs (loop5): 1 truncate cleaned up
[  208.009449][ T2880] erofs: (device loop2): mounted with root inode @ nid 36.
[  208.159723][ T2865] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  208.670764][ T2853] device veth0_vlan entered promiscuous mode
[  208.682760][ T2853] device veth1_macvtap entered promiscuous mode
[  208.776798][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.785388][ T2885] loop9: detected capacity change from 0 to 4096
[  208.802116][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.810347][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  208.890780][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  209.006135][ T2893] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  209.010417][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  209.023516][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  209.027329][ T2885] EXT4-fs (loop9): Test dummy encryption mode enabled
[  209.031132][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  209.046025][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.046647][ T2885] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  209.053516][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.066956][ T2893] EXT4-fs (loop2): 1 truncate cleaned up
[  209.070421][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.084008][ T2893] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  209.104836][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.113823][ T2885] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  209.122011][ T2885] System zones: 0-5
[  209.127296][ T2885] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  209.139108][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.158700][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.165999][  T536] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  209.174169][ T2885] overlayfs: failed to resolve './bus': -2
[  209.177493][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  209.192095][ T2878] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  209.200274][ T2878] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  209.209886][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  209.219226][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.226302][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.234664][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.244227][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.254403][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  209.256194][ T2878] F2FS-fs (loop1): Found nat_bits in checkpoint
[  209.263053][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  209.342435][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  209.379636][ T2902] xt_hashlimit: size too large, truncated to 1048576
[  209.414576][ T2878] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  209.423852][ T2878] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  209.486234][  T536] usb 4-1: Using ep0 maxpacket: 16
[  209.698276][ T2908] erofs: (device loop5): mounted with root inode @ nid 36.
[  209.918038][   T45] device bridge_slave_1 left promiscuous mode
[  209.942473][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.107609][   T45] device bridge_slave_0 left promiscuous mode
[  210.194073][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.303617][   T45] device veth1_macvtap left promiscuous mode
[  210.438004][   T45] device veth0_vlan left promiscuous mode
[  210.567633][ T2910] x_tables: duplicate underflow at hook 2
[  210.595679][  T536] usb 4-1: unable to get BOS descriptor or descriptor too short
[  210.634229][ T2912] set_capacity_and_notify: 3 callbacks suppressed
[  210.634245][ T2912] loop2: detected capacity change from 0 to 512
[  210.674615][ T2910] loop1: detected capacity change from 0 to 40427
[  210.675707][  T536] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.691169][  T536] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  210.696354][ T2912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  210.710097][   T20] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  210.722721][ T2912] EXT4-fs (loop2): 1 truncate cleaned up
[  210.728622][ T2912] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  210.751728][ T2910] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  210.759391][ T2910] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  210.785336][ T2910] F2FS-fs (loop1): invalid crc value
[  210.803698][ T2910] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  210.837408][ T2921] loop5: detected capacity change from 0 to 16
[  210.841528][ T2910] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  210.851285][ T2910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  210.865644][  T536] usb 4-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40
[  210.881533][ T2921] erofs: (device loop5): mounted with root inode @ nid 36.
[  211.068069][   T30] audit: type=1400 audit(1786150812.901:265): avc:  denied  { read } for  pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  211.093616][  T536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.101758][  T536] usb 4-1: Product: syz
[  211.106005][  T536] usb 4-1: Manufacturer: syz
[  211.110606][  T536] usb 4-1: SerialNumber: syz
[  211.116613][   T30] audit: type=1400 audit(1786150812.941:266): avc:  denied  { search } for  pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.138814][   T30] audit: type=1400 audit(1786150812.941:267): avc:  denied  { read } for  pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=10589 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  211.143045][ T2921] x_tables: duplicate underflow at hook 2
[  211.161589][   T30] audit: type=1400 audit(1786150812.941:268): avc:  denied  { open } for  pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=10589 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  211.190127][   T30] audit: type=1400 audit(1786150812.941:269): avc:  denied  { getattr } for  pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=10589 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  211.214452][   T30] audit: type=1400 audit(1786150812.971:270): avc:  denied  { rename } for  pid=2920 comm="syz.5.694" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  211.237171][   T30] audit: type=1400 audit(1786150812.971:271): avc:  denied  { remove_name } for  pid=2920 comm="syz.5.694" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  211.267412][   T30] audit: type=1400 audit(1786150812.971:272): avc:  denied  { unlink } for  pid=2920 comm="syz.5.694" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  211.289709][   T20] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.289936][   T30] audit: type=1400 audit(1786150812.971:273): avc:  denied  { create } for  pid=2920 comm="syz.5.694" name="#a4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  211.305600][   T20] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 149
[  211.320479][   T30] audit: type=1400 audit(1786150812.971:274): avc:  denied  { associate } for  pid=2920 comm="syz.5.694" name="#a4" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  211.349189][   T20] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.465769][  T536] usb 4-1: unit 3 not found!
[  212.821343][ T2930] loop1: detected capacity change from 0 to 16
[  212.875996][ T2932] FAULT_INJECTION: forcing a failure.
[  212.875996][ T2932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.879286][  T536] usb 4-1: USB disconnect, device number 8
[  212.896487][ T2932] CPU: 1 PID: 2932 Comm: syz.9.698 Not tainted syzkaller #0
[  212.903883][ T2932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  212.914126][ T2932] Call Trace:
[  212.917406][ T2932]  <TASK>
[  212.920383][ T2932]  __dump_stack+0x21/0x30
[  212.924716][ T2932]  dump_stack_lvl+0x110/0x170
[  212.925605][   T20] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  212.929432][ T2932]  ? show_regs_print_info+0x20/0x20
[  212.943718][ T2932]  ? kasan_poison+0x62/0x70
[  212.948228][ T2932]  ? __kasan_kmalloc_large+0xa4/0xb0
[  212.953619][ T2932]  dump_stack+0x15/0x20
[  212.956829][ T2934] loop5: detected capacity change from 0 to 128
[  212.957773][ T2932]  should_fail+0x3ab/0x500
[  212.966457][   T20] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.968389][ T2932]  should_fail_usercopy+0x1a/0x20
[  212.977931][ T2935] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000'
[  212.981656][ T2932]  _copy_from_user+0x20/0xd0
[  212.988713][   T20] usb 10-1: Product: syz
[  212.993240][ T2932]  memdup_sockptr+0x91/0xe0
[  213.000490][  T748] udevd[748]: incorrect ext4 checksum on /dev/loop5
[  213.001941][ T2932]  ip_setsockopt+0x2144/0x37a0
[  213.013292][ T2932]  ? ipv4_pktinfo_prepare+0x520/0x520
[  213.018653][ T2932]  ? stack_trace_save+0xa6/0xf0
[  213.023491][ T2932]  ? __stack_depot_save+0x34/0x480
[  213.029331][ T2932]  ? path_openat+0x284f/0x2f80
[  213.034189][ T2932]  ? avc_has_perm_noaudit+0x390/0x490
[  213.039652][ T2932]  ? memcpy+0x56/0x70
[  213.043631][ T2932]  ? avc_has_perm_noaudit+0x30a/0x490
[  213.048994][ T2932]  ? avc_denied+0x1b0/0x1b0
[  213.053494][ T2932]  ? kstrtouint_from_user+0x1c4/0x220
[  213.059173][ T2932]  ? avc_has_perm+0x163/0x250
[  213.064085][ T2932]  ? avc_has_perm_noaudit+0x490/0x490
[  213.069573][ T2932]  ? proc_fail_nth_write+0x180/0x200
[  213.074983][ T2932]  ? proc_fail_nth_read+0x220/0x220
[  213.080374][ T2932]  ? selinux_socket_setsockopt+0x282/0x360
[  213.086176][ T2932]  ? selinux_socket_getsockopt+0x340/0x340
[  213.091973][ T2932]  ? vfs_write+0xc72/0xfd0
[  213.096375][ T2932]  ? __fget_files+0x2e1/0x340
[  213.101134][ T2932]  udp_setsockopt+0x8a/0xa0
[  213.105833][ T2932]  sock_common_setsockopt+0xa0/0xb0
[  213.111447][ T2932]  ? sock_common_recvmsg+0x1c0/0x1c0
[  213.116856][ T2932]  __sys_setsockopt+0x2e9/0x470
[  213.121707][ T2932]  ? __kasan_check_write+0x14/0x20
[  213.127378][ T2932]  ? __ia32_sys_recv+0xb0/0xb0
[  213.132134][ T2932]  ? ksys_write+0x1fa/0x260
[  213.136715][ T2932]  ? __ia32_sys_read+0x90/0x90
[  213.141771][ T2932]  __x64_sys_setsockopt+0xbf/0xd0
[  213.146811][ T2932]  x64_sys_call+0x982/0x9a0
[  213.151299][ T2932]  do_syscall_64+0x4c/0xa0
[  213.155704][ T2932]  ? clear_bhb_loop+0x50/0xa0
[  213.160375][ T2932]  ? clear_bhb_loop+0x50/0xa0
[  213.165058][ T2932]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  213.171123][ T2932] RIP: 0033:0x7fc01ca310d9
[  213.175536][ T2932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.195467][ T2932] RSP: 002b:00007fc01b48a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  213.204048][ T2932] RAX: ffffffffffffffda RBX: 00007fc01ccb8fa0 RCX: 00007fc01ca310d9
[  213.212043][ T2932] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003
[  213.220098][ T2932] RBP: 00007fc01b48a090 R08: 0000000000005000 R09: 0000000000000000
[  213.228236][ T2932] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  213.236216][ T2932] R13: 00007fc01ccb9038 R14: 00007fc01ccb8fa0 R15: 00007fffa74e8aa8
[  213.244273][ T2932]  </TASK>
[  213.247793][ T2930] erofs: (device loop1): mounted with root inode @ nid 36.
[  213.265703][ T2934] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  213.298015][   T20] usb 10-1: can't set config #1, error -71
[  213.307029][   T20] usb 10-1: USB disconnect, device number 6
[  213.380086][ T2939] loop2: detected capacity change from 0 to 40427
[  213.393294][ T2939] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  213.402373][ T2939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  213.410147][ T2944] loop5: detected capacity change from 0 to 4096
[  213.431831][ T2944] EXT4-fs (loop5): Test dummy encryption mode enabled
[  213.442213][ T2944] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  213.444453][ T2939] F2FS-fs (loop2): Found nat_bits in checkpoint
[  213.453609][ T2944] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  213.466618][ T2944] System zones: 0-5
[  213.505362][ T2944] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  213.521356][ T2939] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  213.537160][ T2939] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  213.545229][ T2944] overlayfs: failed to resolve './bus': -2
[  213.580364][ T2954] loop1: detected capacity change from 0 to 512
[  213.592210][ T2954] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  213.603900][ T2954] EXT4-fs (loop1): 1 truncate cleaned up
[  213.609813][ T2954] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  213.657341][ T2958] loop5: detected capacity change from 0 to 4096
[  213.696521][ T2958] EXT4-fs (loop5): Test dummy encryption mode enabled
[  213.703548][ T2958] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  213.733697][ T2958] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  213.753605][ T2958] System zones: 0-5
[  213.757702][   T20] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  213.785618][  T536] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  213.796518][ T2958] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  213.856030][ T2958] overlayfs: missing 'lowerdir'
[  213.941233][ T2964] loop5: detected capacity change from 0 to 256
[  214.046658][ T2964] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  214.067852][ T2966] erofs: (device loop2): mounted with root inode @ nid 36.
[  214.475653][   T39] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  214.613916][ T2972] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  214.633327][ T2972] EXT4-fs (loop5): 1 truncate cleaned up
[  214.640058][ T2972] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  214.888214][  T536] usb 4-1: Using ep0 maxpacket: 32
[  214.893418][   T20] usb 10-1: Using ep0 maxpacket: 32
[  214.935908][   T39] usb 2-1: Using ep0 maxpacket: 32
[  214.952376][ T2977] xt_hashlimit: size too large, truncated to 1048576
[  215.066027][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.098913][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.152055][   T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  215.187951][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.200109][   T39] usb 2-1: config 0 descriptor??
[  215.215665][  T536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.226600][   T20] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.237724][  T536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.246706][   T39] hub 2-1:0.0: USB hub found
[  215.247671][   T20] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.262110][  T536] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  215.271550][   T20] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  215.280810][  T536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.288833][   T20] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.297557][  T536] usb 4-1: config 0 descriptor??
[  215.303104][   T20] usb 10-1: config 0 descriptor??
[  215.336080][  T536] hub 4-1:0.0: USB hub found
[  215.346161][   T20] hub 10-1:0.0: USB hub found
[  215.474914][   T39] hub 2-1:0.0: 1 port detected
[  215.479934][  T432] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  215.531853][ T2985] FAULT_INJECTION: forcing a failure.
[  215.531853][ T2985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.545349][ T2985] CPU: 1 PID: 2985 Comm: syz.5.711 Not tainted syzkaller #0
[  215.545388][  T536] hub 4-1:0.0: 1 port detected
[  215.552736][ T2985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  215.552750][ T2985] Call Trace:
[  215.552755][ T2985]  <TASK>
[  215.552761][ T2985]  __dump_stack+0x21/0x30
[  215.552783][ T2985]  dump_stack_lvl+0x110/0x170
[  215.552796][ T2985]  ? show_regs_print_info+0x20/0x20
[  215.552811][ T2985]  dump_stack+0x15/0x20
[  215.552823][ T2985]  should_fail+0x3ab/0x500
[  215.552839][ T2985]  should_fail_usercopy+0x1a/0x20
[  215.566013][   T20] hub 10-1:0.0: 1 port detected
[  215.567619][ T2985]  _copy_to_user+0x20/0x90
[  215.610696][ T2985]  simple_read_from_buffer+0xe9/0x160
[  215.616058][ T2985]  proc_fail_nth_read+0x1a6/0x220
[  215.621087][ T2985]  ? proc_fault_inject_write+0x310/0x310
[  215.626703][ T2985]  ? security_file_permission+0x83/0xa0
[  215.632238][ T2985]  ? proc_fault_inject_write+0x310/0x310
[  215.637891][ T2985]  vfs_read+0x28c/0xc20
[  215.642035][ T2985]  ? kernel_read+0x1f0/0x1f0
[  215.646624][ T2985]  ? __kasan_check_write+0x14/0x20
[  215.651719][ T2985]  ? mutex_lock+0x9b/0x1c0
[  215.656167][ T2985]  ? wait_for_completion_killable_timeout+0x10/0x10
[  215.662747][ T2985]  ? __fget_files+0x2e1/0x340
[  215.667426][ T2985]  ? __fdget_pos+0x2d2/0x380
[  215.672014][ T2985]  ? ksys_read+0x70/0x260
[  215.676327][ T2985]  ksys_read+0x14a/0x260
[  215.680549][ T2985]  ? vfs_write+0xfd0/0xfd0
[  215.685075][ T2985]  ? debug_smp_processor_id+0x17/0x20
[  215.690448][ T2985]  __x64_sys_read+0x7b/0x90
[  215.694935][ T2985]  x64_sys_call+0x96d/0x9a0
[  215.699422][ T2985]  do_syscall_64+0x4c/0xa0
[  215.703839][ T2985]  ? clear_bhb_loop+0x50/0xa0
[  215.708493][ T2985]  ? clear_bhb_loop+0x50/0xa0
[  215.713149][ T2985]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  215.719020][ T2985] RIP: 0033:0x7f6fc0f3990e
[  215.723416][ T2985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  215.743008][ T2985] RSP: 002b:00007f6fbf9d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  215.751421][ T2985] RAX: ffffffffffffffda RBX: 00007f6fbf9d26c0 RCX: 00007f6fc0f3990e
[  215.759382][ T2985] RDX: 000000000000000f RSI: 00007f6fbf9d20a0 RDI: 0000000000000003
[  215.767358][ T2985] RBP: 00007f6fbf9d2090 R08: 0000000000000000 R09: 0000000000000000
[  215.775312][ T2985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.783271][ T2985] R13: 00007f6fc1201038 R14: 00007f6fc1200fa0 R15: 00007ffce10e89b8
[  215.791228][ T2985]  </TASK>
[  216.045854][  T432] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.056085][  T432] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 149
[  216.066003][  T432] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.135634][    T6] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  216.215662][   T39] hub 2-1:0.0: activate --> -90
[  216.235720][  T432] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  216.244891][  T432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.245130][  T306] usb 10-1: USB disconnect, device number 7
[  216.253087][  T432] usb 3-1: Product: syz
[  216.259287][  T536] hub 10-1:0.0: hub_ext_port_status failed (err = -71)
[  216.263311][  T432] usb 3-1: Manufacturer: syz
[  216.275223][  T432] usb 3-1: SerialNumber: syz
[  216.295659][ T2979] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  216.316304][  T432] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  216.327915][  T432] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  216.328133][  T536] usb 4-1: USB disconnect, device number 9
[  216.338962][  T432] usbserial_generic 3-1:1.0: generic converter detected
[  216.344558][   T20] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  216.353894][  T432] usb 3-1: generic converter now attached to ttyUSB0
[  216.415618][    T6] usb 6-1: Using ep0 maxpacket: 16
[  216.466219][ T2968] UDC core: couldn't find an available UDC or it's busy: -16
[  216.474038][ T2968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  216.482810][  T432] usb 2-1: USB disconnect, device number 9
[  216.488704][   T39] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  216.530863][ T2977] set_capacity_and_notify: 2 callbacks suppressed
[  216.530874][ T2977] loop2: detected capacity change from 0 to 1024
[  216.575648][    T6] usb 6-1: unable to get BOS descriptor or descriptor too short
[  216.655869][    T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.667892][ T2977] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  216.668313][    T6] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  216.686465][ T2977] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102]
[  216.694604][ T2977] System zones: 0-1, 3-12
[  216.699650][ T2977] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none.
[  216.732372][  T536] usb 3-1: USB disconnect, device number 5
[  216.739025][  T536] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  216.747772][  T536] usbserial_generic 3-1:1.0: device disconnected
[  216.845657][    T6] usb 6-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40
[  216.854723][    T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.862810][    T6] usb 6-1: Product: syz
[  216.867080][    T6] usb 6-1: Manufacturer: syz
[  216.871754][    T6] usb 6-1: SerialNumber: syz
[  216.947401][ T2998] loop9: detected capacity change from 0 to 16
[  217.028315][ T2998] erofs: (device loop9): mounted with root inode @ nid 36.
[  217.488413][ T3000] loop1: detected capacity change from 0 to 4096
[  217.567001][ T3000] EXT4-fs (loop1): Test dummy encryption mode enabled
[  217.617915][ T3000] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  217.913957][ T3000] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  217.925084][ T3003] loop5: detected capacity change from 0 to 256
[  217.926219][ T2996] loop3: detected capacity change from 0 to 40427
[  217.931608][ T3000] System zones: 0-5
[  217.942058][ T2996] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  217.942813][ T3000] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  217.950457][ T2996] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  217.974328][    T6] usb 6-1: unit 3 not found!
[  218.001331][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  218.001345][   T30] audit: type=1400 audit(1786150819.831:283): avc:  denied  { mount } for  pid=3006 comm="syz.9.719" name="/" dev="ramfs" ino=26156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  218.020603][ T3003] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  218.048094][    T6] usb 6-1: USB disconnect, device number 7
[  218.050770][ T3000] overlayfs: missing 'lowerdir'
[  218.067153][ T3005] loop2: detected capacity change from 0 to 512
[  218.080890][   T30] audit: type=1400 audit(1786150819.881:284): avc:  denied  { remount } for  pid=3006 comm="syz.9.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  218.085465][ T3005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  218.148649][ T2996] F2FS-fs (loop3): Found nat_bits in checkpoint
[  218.157889][ T3005] EXT4-fs (loop2): 1 truncate cleaned up
[  218.163640][ T3005] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  218.207433][ T2996] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  218.215743][ T2996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  218.256230][  T709] udevd[709]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  218.310399][ T3020] loop5: detected capacity change from 0 to 512
[  218.417729][ T3020] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  218.621955][ T3020] EXT4-fs (loop5): 1 truncate cleaned up
[  218.657714][ T3020] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  218.699148][ T3016] loop1: detected capacity change from 0 to 40427
[  218.712478][ T3016] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  218.731612][ T3016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  218.790030][ T3027] loop3: detected capacity change from 0 to 512
[  218.803342][ T3016] F2FS-fs (loop1): Found nat_bits in checkpoint
[  219.071001][ T3027] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.722: inode has both inline data and extents flags
[  219.134982][ T3027] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.722: couldn't read orphan inode 15 (err -117)
[  219.154701][ T3035] loop2: detected capacity change from 0 to 512
[  219.165930][ T3016] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  219.173059][ T3016] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  219.181318][ T3027] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[  219.259352][ T3016] attempt to access beyond end of device
[  219.259352][ T3016] loop1: rw=2049, want=45104, limit=40427
[  219.273815][ T3016] attempt to access beyond end of device
[  219.273815][ T3016] loop1: rw=2049, want=77960, limit=40427
[  219.295480][ T3035] EXT4-fs (loop2): Ignoring removed oldalloc option
[  219.307973][ T3035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  219.318013][   T30] audit: type=1400 audit(1786150821.141:285): avc:  denied  { unmount } for  pid=1777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  219.326704][ T3035] EXT4-fs (loop2): 1 truncate cleaned up
[  219.345371][ T3035] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000c90,minixdf,auto_da_alloc,data=journal,lazytime,oldalloc,max_batch_time=0x000000007fffffff,auto_da_alloc,,errors=continue. Quota mode: none.
[  219.352402][ T3037] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  219.379650][   T30] audit: type=1400 audit(1786150821.211:286): avc:  denied  { create } for  pid=3034 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  219.400495][ T3037] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.435393][   T30] audit: type=1400 audit(1786150821.261:287): avc:  denied  { map } for  pid=3036 comm="syz.5.724" path="/138/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  219.458544][   T30] audit: type=1400 audit(1786150821.261:288): avc:  denied  { execute } for  pid=3036 comm="syz.5.724" path="/138/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  219.537805][ T3049] xt_hashlimit: size too large, truncated to 1048576
[  219.570197][ T3052] EXT4-fs (loop1): Test dummy encryption mode enabled
[  219.579287][ T3052] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  219.605601][   T26] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  219.613610][ T3052] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  219.625879][ T3052] System zones: 0-5
[  219.633620][ T3052] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  219.692165][ T3052] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  219.701231][ T3052] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  219.765574][    T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  219.806146][ T3056] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  219.865572][   T20] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  219.875601][   T26] usb 10-1: Using ep0 maxpacket: 32
[  219.894459][ T3037] EXT4-fs (loop5): Unrecognized mount option "memory=low" or missing value
[  219.971326][   T30] audit: type=1400 audit(1786150821.801:289): avc:  denied  { create } for  pid=3065 comm="syz.5.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  219.990929][   T30] audit: type=1400 audit(1786150821.801:290): avc:  denied  { connect } for  pid=3065 comm="syz.5.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  220.005595][    T6] usb 3-1: Using ep0 maxpacket: 16
[  220.010879][   T26] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.027342][   T26] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.037678][   T26] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  220.038659][ T3064] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  220.047039][   T26] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.084017][   T26] usb 10-1: config 0 descriptor??
[  220.126123][   T26] hub 10-1:0.0: USB hub found
[  220.150072][   T30] audit: type=1400 audit(1786150821.981:291): avc:  denied  { ioctl } for  pid=3067 comm="syz.5.736" path="socket:[26291]" dev="sockfs" ino=26291 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  220.185668][    T6] usb 3-1: unable to get BOS descriptor or descriptor too short
[  220.225693][   T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.236087][   T20] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 149
[  220.246191][   T20] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.275666][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.285866][    T6] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  220.345653][   T26] hub 10-1:0.0: 1 port detected
[  220.415657][   T20] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  220.424850][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.432921][   T20] usb 4-1: Product: syz
[  220.437105][   T20] usb 4-1: Manufacturer: syz
[  220.441881][   T20] usb 4-1: SerialNumber: syz
[  220.446587][    T6] usb 3-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40
[  220.455868][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.464124][    T6] usb 3-1: Product: syz
[  220.468318][    T6] usb 3-1: Manufacturer: syz
[  220.472904][    T6] usb 3-1: SerialNumber: syz
[  220.477677][ T3053] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  220.496024][   T20] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  220.507294][   T20] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  220.518853][   T20] usbserial_generic 4-1:1.0: generic converter detected
[  220.526835][   T20] usb 4-1: generic converter now attached to ttyUSB0
[  220.565676][ T2648] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  220.736165][ T3049] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  220.746410][ T3049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102]
[  220.754603][ T3049] System zones: 0-1, 3-12
[  220.759870][ T3049] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none.
[  220.792511][  T351] usb 4-1: USB disconnect, device number 10
[  220.798963][  T351] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  220.808935][  T351] usbserial_generic 4-1:1.0: device disconnected
[  220.815762][ T2648] usb 2-1: Using ep0 maxpacket: 16
[  220.835657][    T6] usb 3-1: unit 3 not found!
[  220.880157][    T6] usb 3-1: USB disconnect, device number 6
[  220.902121][ T3081] FAULT_INJECTION: forcing a failure.
[  220.902121][ T3081] name failslab, interval 1, probability 0, space 0, times 0
[  220.914852][ T3081] CPU: 1 PID: 3081 Comm: syz.5.740 Not tainted syzkaller #0
[  220.922163][ T3081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  220.932220][ T3081] Call Trace:
[  220.935584][ T3081]  <TASK>
[  220.938509][ T3081]  __dump_stack+0x21/0x30
[  220.942892][ T3081]  dump_stack_lvl+0x110/0x170
[  220.947556][ T3081]  ? show_regs_print_info+0x20/0x20
[  220.952736][ T3081]  dump_stack+0x15/0x20
[  220.956876][ T3081]  should_fail+0x3ab/0x500
[  220.961280][ T3081]  __should_failslab+0xa4/0xe0
[  220.966048][ T3081]  should_failslab+0x9/0x20
[  220.970546][ T3081]  slab_pre_alloc_hook+0x39/0xd0
[  220.975473][ T3081]  ? __alloc_skb+0xe4/0x730
[  220.979993][ T3081]  kmem_cache_alloc+0x44/0x260
[  220.984756][ T3081]  __alloc_skb+0xe4/0x730
[  220.989081][ T3081]  netlink_sendmsg+0x611/0xb80
[  220.993922][ T3081]  ? netlink_getsockopt+0x530/0x530
[  220.999109][ T3081]  ? kasan_set_track+0x4a/0x70
[  221.003855][ T3081]  ? security_socket_sendmsg+0x82/0xa0
[  221.009303][ T3081]  ? netlink_getsockopt+0x530/0x530
[  221.014637][ T3081]  ____sys_sendmsg+0x5be/0x8f0
[  221.019436][ T3081]  ? __sys_sendmsg_sock+0x40/0x40
[  221.024445][ T3081]  ? import_iovec+0x7c/0xb0
[  221.028961][ T3081]  ___sys_sendmsg+0x236/0x2e0
[  221.033621][ T3081]  ? __sys_sendmsg+0x280/0x280
[  221.038470][ T3081]  ? __fdget+0x1a1/0x230
[  221.042767][ T3081]  __x64_sys_sendmsg+0x201/0x2d0
[  221.047787][ T3081]  ? ___sys_sendmsg+0x2e0/0x2e0
[  221.052639][ T3081]  ? ksys_write+0x1fa/0x260
[  221.057492][ T3081]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  221.063552][ T3081]  x64_sys_call+0x4b/0x9a0
[  221.068067][ T3081]  do_syscall_64+0x4c/0xa0
[  221.072462][ T3081]  ? clear_bhb_loop+0x50/0xa0
[  221.077119][ T3081]  ? clear_bhb_loop+0x50/0xa0
[  221.081772][ T3081]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.087673][ T3081] RIP: 0033:0x7f6fc0f790d9
[  221.092075][ T3081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.111673][ T3081] RSP: 002b:00007f6fbf9d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.120069][ T3081] RAX: ffffffffffffffda RBX: 00007f6fc1200fa0 RCX: 00007f6fc0f790d9
[  221.128021][ T3081] RDX: 000000000004c804 RSI: 0000200000000600 RDI: 0000000000000004
[  221.136327][ T3081] RBP: 00007f6fbf9d2090 R08: 0000000000000000 R09: 0000000000000000
[  221.144638][ T3081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.152599][ T3081] R13: 00007f6fc1201038 R14: 00007f6fc1200fa0 R15: 00007ffce10e89b8
[  221.160680][ T3081]  </TASK>
[  221.175667][ T2648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.186704][ T2648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.196634][ T2648] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  221.206462][ T3083] EXT4-fs (loop5): Test dummy encryption mode enabled
[  221.210064][  T748] udevd[748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  221.232159][ T2648] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  221.242586][    T6] usb 10-1: USB disconnect, device number 8
[  221.247143][ T2648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.256806][   T26] hub 10-1:0.0: hub_ext_port_status failed (err = -71)
[  221.268098][ T3083] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  221.276799][ T2648] usb 2-1: config 0 descriptor??
[  221.277945][ T3085] EXT4-fs (loop2): Ignoring removed oldalloc option
[  221.289602][ T3085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  221.290246][ T3083] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  221.302037][ T3085] EXT4-fs (loop2): 1 truncate cleaned up
[  221.307665][ T3083] System zones: 0-5
[  221.313418][ T3085] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000c90,minixdf,auto_da_alloc,data=journal,lazytime,oldalloc,max_batch_time=0x000000007fffffff,auto_da_alloc,,errors=continue. Quota mode: none.
[  221.318080][ T3083] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  221.373260][ T3083] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  221.382258][ T3083] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  221.474102][ T3092] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  221.521727][ T3075] UDC core: couldn't find an available UDC or it's busy: -16
[  221.529801][ T3075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  221.576745][ T3099] set_capacity_and_notify: 9 callbacks suppressed
[  221.576757][ T3099] loop3: detected capacity change from 0 to 512
[  221.611901][ T3099] EXT4-fs (loop3): Ignoring removed oldalloc option
[  221.618720][ T3099] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  221.630502][ T3099] EXT4-fs (loop3): 1 truncate cleaned up
[  221.632184][ T3102] loop5: detected capacity change from 0 to 512
[  221.636477][ T3099] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000c90,minixdf,auto_da_alloc,data=journal,lazytime,oldalloc,max_batch_time=0x000000007fffffff,auto_da_alloc,,errors=continue. Quota mode: none.
[  221.668016][ T3099] FAULT_INJECTION: forcing a failure.
[  221.668016][ T3099] name failslab, interval 1, probability 0, space 0, times 0
[  221.674770][ T3102] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.747: inode has both inline data and extents flags
[  221.684832][ T3099] CPU: 0 PID: 3099 Comm: syz.3.746 Not tainted syzkaller #0
[  221.694440][ T3102] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.747: couldn't read orphan inode 15 (err -117)
[  221.701010][ T3099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.701023][ T3099] Call Trace:
[  221.701028][ T3099]  <TASK>
[  221.701033][ T3099]  __dump_stack+0x21/0x30
[  221.701054][ T3099]  dump_stack_lvl+0x110/0x170
[  221.701067][ T3099]  ? show_regs_print_info+0x20/0x20
[  221.701083][ T3099]  ? __kasan_slab_alloc+0xc9/0xe0
[  221.701099][ T3099]  ? __kasan_slab_alloc+0xb7/0xe0
[  221.701113][ T3099]  ? slab_post_alloc_hook+0x4f/0x2b0
[  221.701132][ T3099]  ? security_inode_alloc+0x33/0x110
[  221.713623][ T3102] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[  221.722891][ T3099]  ? inode_init_always+0x72c/0x9b0
[  221.722914][ T3099]  dump_stack+0x15/0x20
[  221.722928][ T3099]  should_fail+0x3ab/0x500
[  221.789831][ T3099]  __should_failslab+0xa4/0xe0
[  221.794687][ T3099]  should_failslab+0x9/0x20
[  221.799200][ T3099]  slab_pre_alloc_hook+0x39/0xd0
[  221.804143][ T3099]  ? __d_alloc+0x2d/0x690
[  221.808664][ T3099]  kmem_cache_alloc+0x44/0x260
[  221.813450][ T3099]  ? avc_denied+0x1b0/0x1b0
[  221.818149][ T3099]  __d_alloc+0x2d/0x690
[  221.822298][ T3099]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  221.827773][ T3099]  d_alloc_parallel+0xe5/0x1380
[  221.832717][ T3099]  ? avc_has_perm_noaudit+0x390/0x490
[  221.838172][ T3099]  ? avc_has_perm_noaudit+0x30a/0x490
[  221.843544][ T3099]  ? d_hash_and_lookup+0x1f0/0x1f0
[  221.848640][ T3099]  ? __kasan_check_write+0x14/0x20
[  221.853763][ T3099]  ? rwsem_read_trylock+0x2af/0x640
[  221.858946][ T3099]  ? lockref_get_not_dead+0xe6/0x1c0
[  221.864224][ T3099]  ? downgrade_write+0x440/0x440
[  221.869277][ T3099]  __lookup_slow+0x14c/0x410
[  221.873970][ T3099]  ? lookup_one_len+0x2d0/0x2d0
[  221.878800][ T3099]  ? down_read+0xab/0x100
[  221.883108][ T3099]  ? unwind_get_return_address+0x4d/0x90
[  221.888740][ T3099]  ? handle_dots+0xe10/0xe10
[  221.893417][ T3099]  lookup_slow+0x57/0x70
[  221.897750][ T3099]  walk_component+0x326/0x460
[  221.902414][ T3099]  link_path_walk+0x688/0xde0
[  221.907083][ T3099]  ? handle_lookup_down+0x130/0x130
[  221.912495][ T3099]  __filename_parentat+0x254/0x690
[  221.917589][ T3099]  ? vfs_path_parent_lookup+0x60/0x60
[  221.922946][ T3099]  do_renameat2+0x39c/0xfc0
[  221.927578][ T3099]  ? fsnotify_move+0x450/0x450
[  221.932324][ T3099]  ? strncpy_from_user+0x186/0x2d0
[  221.937415][ T3099]  ? getname_flags+0x205/0x510
[  221.942157][ T3099]  __x64_sys_renameat2+0xd8/0xf0
[  221.947073][ T3099]  x64_sys_call+0x258/0x9a0
[  221.951557][ T3099]  do_syscall_64+0x4c/0xa0
[  221.955950][ T3099]  ? clear_bhb_loop+0x50/0xa0
[  221.960606][ T3099]  ? clear_bhb_loop+0x50/0xa0
[  221.965267][ T3099]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.971161][ T3099] RIP: 0033:0x7fc15476b0d9
[  221.975556][ T3099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.995327][ T3099] RSP: 002b:00007fc1531c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  222.003810][ T3099] RAX: ffffffffffffffda RBX: 00007fc1549f2fa0 RCX: 00007fc15476b0d9
[  222.011763][ T3099] RDX: ffffffffffffff9c RSI: 00002000000004c0 RDI: ffffffffffffff9c
[  222.019716][ T3099] RBP: 00007fc1531c4090 R08: 0000000000000002 R09: 0000000000000000
[  222.027670][ T3099] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  222.035627][ T3099] R13: 00007fc1549f3038 R14: 00007fc1549f2fa0 R15: 00007fff135f9e18
[  222.043596][ T3099]  </TASK>
[  222.048541][ T3107] UDC core: couldn't find an available UDC or it's busy: -16
[  222.060995][ T3107] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  222.146983][ T3112] loop5: detected capacity change from 0 to 512
[  222.221451][ T3117] loop9: detected capacity change from 0 to 16
[  222.261391][ T3112] EXT4-fs (loop5): Test dummy encryption mode enabled
[  222.279535][ T3117] erofs: (device loop9): mounted with root inode @ nid 36.
[  222.370104][ T3075] UDC core: couldn't find an available UDC or it's busy: -16
[  222.440188][ T3075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  222.513020][ T3112] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.5.748: corrupted xattr block 95
[  222.957471][ T3114] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  222.976763][ T2648] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[  222.987354][ T2648] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[  223.007989][ T3114] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  223.017077][ T3112] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.748: bg 0: block 7: invalid block bitmap
[  223.041674][ T3112] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  223.057888][ T3112] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2925: inode #11: comm syz.5.748: corrupted xattr block 95
[  223.082126][ T3112] EXT4-fs warning (device loop5): ext4_evict_inode:305: xattr delete (err -117)
[  223.104064][ T3112] EXT4-fs (loop5): 1 orphan inode deleted
[  223.110445][ T3122] loop2: detected capacity change from 0 to 4096
[  223.110973][ T3112] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[  223.196103][ T3122] EXT4-fs (loop2): Test dummy encryption mode enabled
[  223.203027][ T3122] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  223.213736][ T3122] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  223.221982][ T3122] System zones: 0-5
[  223.226864][ T3122] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  223.271069][ T3122] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  223.280467][ T3122] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  223.535589][   T20] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  223.592644][ T3138] FAULT_INJECTION: forcing a failure.
[  223.592644][ T3138] name failslab, interval 1, probability 0, space 0, times 0
[  223.605720][ T3138] CPU: 0 PID: 3138 Comm: syz.5.758 Not tainted syzkaller #0
[  223.613028][ T3138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  223.623159][ T3138] Call Trace:
[  223.626421][ T3138]  <TASK>
[  223.629336][ T3138]  __dump_stack+0x21/0x30
[  223.633651][ T3138]  dump_stack_lvl+0x110/0x170
[  223.638310][ T3138]  ? show_regs_print_info+0x20/0x20
[  223.643493][ T3138]  dump_stack+0x15/0x20
[  223.648014][ T3138]  should_fail+0x3ab/0x500
[  223.652416][ T3138]  ? netlink_sendmsg+0x611/0xb80
[  223.657338][ T3138]  __should_failslab+0xa4/0xe0
[  223.662085][ T3138]  should_failslab+0x9/0x20
[  223.666577][ T3138]  slab_pre_alloc_hook+0x39/0xd0
[  223.671513][ T3138]  ? netlink_sendmsg+0x611/0xb80
[  223.676435][ T3138]  ? netlink_sendmsg+0x611/0xb80
[  223.681359][ T3138]  __kmalloc_track_caller+0x6c/0x2c0
[  223.686633][ T3138]  ? netlink_sendmsg+0x611/0xb80
[  223.691557][ T3138]  ? netlink_sendmsg+0x611/0xb80
[  223.696484][ T3138]  __alloc_skb+0x210/0x730
[  223.700890][ T3138]  netlink_sendmsg+0x611/0xb80
[  223.705683][ T3138]  ? netlink_getsockopt+0x530/0x530
[  223.710867][ T3138]  ? kasan_set_track+0x4a/0x70
[  223.715616][ T3138]  ? security_socket_sendmsg+0x82/0xa0
[  223.721145][ T3138]  ? netlink_getsockopt+0x530/0x530
[  223.726330][ T3138]  ____sys_sendmsg+0x5be/0x8f0
[  223.731350][ T3138]  ? __sys_sendmsg_sock+0x40/0x40
[  223.736360][ T3138]  ? import_iovec+0x7c/0xb0
[  223.740996][ T3138]  ___sys_sendmsg+0x236/0x2e0
[  223.745672][ T3138]  ? __sys_sendmsg+0x280/0x280
[  223.750432][ T3138]  ? __fdget+0x1a1/0x230
[  223.754660][ T3138]  __x64_sys_sendmsg+0x201/0x2d0
[  223.759665][ T3138]  ? ___sys_sendmsg+0x2e0/0x2e0
[  223.764500][ T3138]  ? ksys_write+0x1fa/0x260
[  223.768997][ T3138]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  223.775050][ T3138]  x64_sys_call+0x4b/0x9a0
[  223.779448][ T3138]  do_syscall_64+0x4c/0xa0
[  223.783847][ T3138]  ? clear_bhb_loop+0x50/0xa0
[  223.788509][ T3138]  ? clear_bhb_loop+0x50/0xa0
[  223.793204][ T3138]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  223.799215][ T3138] RIP: 0033:0x7f6fc0f790d9
[  223.803624][ T3138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.823390][ T3138] RSP: 002b:00007f6fbf9d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.831888][ T3138] RAX: ffffffffffffffda RBX: 00007f6fc1200fa0 RCX: 00007f6fc0f790d9
[  223.839853][ T3138] RDX: 000000000004c804 RSI: 0000200000000600 RDI: 0000000000000004
[  223.848072][ T3138] RBP: 00007f6fbf9d2090 R08: 0000000000000000 R09: 0000000000000000
[  223.856025][ T3138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.864098][ T3138] R13: 00007f6fc1201038 R14: 00007f6fc1200fa0 R15: 00007ffce10e89b8
[  223.872084][ T3138]  </TASK>
[  223.886036][ T2648] microsoft 0003:045E:07DA.0003: No inputs registered, leaving
[  223.902271][ T3143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.759'.
[  223.912141][ T2648] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  223.922089][ T3143] bridge: RTM_NEWNEIGH with invalid ether address
[  223.941489][ T3150] loop1: detected capacity change from 0 to 512
[  223.942934][ T3143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.759'.
[  223.957955][ T2648] microsoft 0003:045E:07DA.0003: no inputs found
[  223.964323][ T2648] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[  223.965723][   T30] audit: type=1400 audit(1786150825.791:292): avc:  denied  { write } for  pid=3144 comm="syz.5.762" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  223.997252][ T3143] bridge: RTM_NEWNEIGH with invalid ether address
[  223.999539][ T2648] usb 2-1: USB disconnect, device number 10
[  224.013701][ T3151] FAULT_INJECTION: forcing a failure.
[  224.013701][ T3151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.060995][ T3160] loop9: detected capacity change from 0 to 4096
[  224.068220][ T3151] CPU: 1 PID: 3151 Comm: syz.2.763 Not tainted syzkaller #0
[  224.068631][ T3150] EXT4-fs (loop1): Ignoring removed oldalloc option
[  224.075651][ T3151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  224.075664][ T3151] Call Trace:
[  224.075670][ T3151]  <TASK>
[  224.075676][ T3151]  __dump_stack+0x21/0x30
[  224.075695][ T3151]  dump_stack_lvl+0x110/0x170
[  224.102589][ T3150] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  224.102862][ T3151]  ? show_regs_print_info+0x20/0x20
[  224.124914][ T3151]  dump_stack+0x15/0x20
[  224.129080][ T3151]  should_fail+0x3ab/0x500
[  224.133504][ T3151]  should_fail_usercopy+0x1a/0x20
[  224.138526][ T3151]  _copy_to_user+0x20/0x90
[  224.142947][ T3151]  simple_read_from_buffer+0xe9/0x160
[  224.145683][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  224.148326][ T3151]  proc_fail_nth_read+0x1a6/0x220
[  224.148350][ T3151]  ? proc_fault_inject_write+0x310/0x310
[  224.165595][   T20] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  224.168782][ T3151]  ? security_file_permission+0x83/0xa0
[  224.168808][ T3151]  ? proc_fault_inject_write+0x310/0x310
[  224.190240][ T3151]  vfs_read+0x28c/0xc20
[  224.194412][ T3151]  ? kernel_read+0x1f0/0x1f0
[  224.195598][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  224.199006][ T3151]  ? __kasan_check_write+0x14/0x20
[  224.199029][ T3151]  ? mutex_lock+0x9b/0x1c0
[  224.218221][ T3151]  ? wait_for_completion_killable_timeout+0x10/0x10
[  224.218930][   T20] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  224.224809][ T3151]  ? __fget_files+0x2e1/0x340
[  224.224832][ T3151]  ? __fdget_pos+0x2d2/0x380
[  224.243813][ T3151]  ? ksys_read+0x70/0x260
[  224.248196][ T3151]  ksys_read+0x14a/0x260
[  224.252440][ T3151]  ? vfs_write+0xfd0/0xfd0
[  224.256859][ T3151]  ? debug_smp_processor_id+0x17/0x20
[  224.262314][ T3151]  __x64_sys_read+0x7b/0x90
[  224.266884][ T3151]  x64_sys_call+0x96d/0x9a0
[  224.271372][ T3151]  do_syscall_64+0x4c/0xa0
[  224.275770][ T3151]  ? clear_bhb_loop+0x50/0xa0
[  224.280429][ T3151]  ? clear_bhb_loop+0x50/0xa0
[  224.285088][ T3151]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  224.290962][ T3151] RIP: 0033:0x7fb9401c790e
[  224.295367][ T3151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  224.315154][ T3151] RSP: 002b:00007fb93ec5ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  224.323557][ T3151] RAX: ffffffffffffffda RBX: 00007fb93ec606c0 RCX: 00007fb9401c790e
[  224.331513][ T3151] RDX: 000000000000000f RSI: 00007fb93ec600a0 RDI: 0000000000000006
[  224.339471][ T3151] RBP: 00007fb93ec60090 R08: 0000000000000000 R09: 0000000000000000
[  224.347427][ T3151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.355647][ T3151] R13: 00007fb94048f038 R14: 00007fb94048efa0 R15: 00007ffd3565f878
[  224.363625][ T3151]  </TASK>
[  224.387774][ T3150] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,noinit_itable,,errors=continue. Quota mode: writeback.
[  224.405759][ T3150] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.417826][ T3160] EXT4-fs (loop9): Test dummy encryption mode enabled
[  224.424693][ T3160] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  224.469645][ T3162] fido_id[3162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  224.505624][   T20] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  224.516099][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.524110][   T30] audit: type=1400 audit(1786150826.351:293): avc:  denied  { bind } for  pid=3168 comm="syz.5.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  224.545561][   T20] usb 4-1: Product: syz
[  224.547802][ T3160] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  224.549801][   T20] usb 4-1: Manufacturer: syz
[  224.558092][ T3160] System zones: 0-5
[  224.565607][   T20] usb 4-1: SerialNumber: syz
[  224.567154][ T3160] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  224.595997][   T20] usb 4-1: config 0 descriptor??
[  224.636034][   T20] ums-isd200 4-1:0.0: USB Mass Storage device detected
[  224.689022][ T3178] loop9: detected capacity change from 0 to 4096
[  224.710572][ T3178] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  224.726555][ T3178] EXT4-fs (loop9): shut down requested (2)
[  224.735888][   T30] audit: type=1400 audit(1786150826.571:294): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  224.741600][ T3178] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=15
[  224.766702][   T30] audit: type=1400 audit(1786150826.571:295): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  224.788573][   T30] audit: type=1400 audit(1786150826.571:296): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  224.805813][ T3178] netlink: 12 bytes leftover after parsing attributes in process `syz.9.768'.
[  224.810181][   T30] audit: type=1400 audit(1786150826.571:297): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  224.839900][   T30] audit: type=1400 audit(1786150826.571:298): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  224.860934][   T26] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  224.868403][   T30] audit: type=1400 audit(1786150826.571:299): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  224.883716][   T20] scsi host1: usb-storage 4-1:0.0
[  224.891396][   T30] audit: type=1400 audit(1786150826.571:300): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  224.910226][   T20] usb 4-1: USB disconnect, device number 11
[  224.918959][ T2648] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  225.053963][ T3185] loop9: detected capacity change from 0 to 40427
[  225.108122][ T3185] F2FS-fs (loop9): Invalid SB checksum offset: 0
[  225.114597][ T3185] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  225.123843][ T3185] F2FS-fs (loop9): invalid crc value
[  225.130442][ T3185] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  225.151961][ T3185] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[  225.159684][ T3185] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  225.175622][ T2648] usb 2-1: Using ep0 maxpacket: 16
[  225.180865][   T26] usb 3-1: device descriptor read/64, error -71
[  225.299812][ T3201] loop5: detected capacity change from 0 to 2048
[  225.306349][ T2648] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  225.319431][ T2648] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.326170][ T2648] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  225.335239][ T2648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.343750][ T2648] usb 2-1: config 0 descriptor??
[  225.348959][ T3201] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  225.356479][ T3201] EXT4-fs (loop5): Ignoring removed oldalloc option
[  225.363226][ T3201] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  225.377360][ T3205] EXT4-fs (loop9): Test dummy encryption mode enabled
[  225.384261][ T3205] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  225.394995][ T3205] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  225.403198][ T3205] System zones: 0-5
[  225.407787][ T3205] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  225.469860][   T30] audit: type=1400 audit(1786150827.301:301): avc:  denied  { bind } for  pid=3210 comm="syz.5.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  225.501751][ T3208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  225.519905][ T3208] EXT4-fs (loop3): 1 truncate cleaned up
[  225.525921][ T3208] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  225.546116][ T3213] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  225.581276][ T3213] EXT4-fs (loop9): 1 truncate cleaned up
[  225.587583][ T3213] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  225.615696][   T26] usb 3-1: device descriptor read/64, error -71
[  225.970690][ T2648] lenovo 0003:17EF:6009.0004: unknown main item tag 0x2
[  225.978986][ T2648] lenovo 0003:17EF:6009.0004: unknown main item tag 0x6
[  225.987534][ T2648] lenovo 0003:17EF:6009.0004: ignoring exceeding usage max
[  226.009409][ T2648] lenovo 0003:17EF:6009.0004: hidraw0: USB HID v40.81 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0
[  226.062111][   T26] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  226.127240][ T3227] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  226.143889][ T2648] usb 2-1: USB disconnect, device number 11
[  226.148320][ T3227] EXT4-fs (loop5): 1 truncate cleaned up
[  226.156586][ T3227] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  226.401383][   T26] usb 3-1: device descriptor read/64, error -71
[  226.415090][ T3232] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  226.422839][ T3232] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  226.456883][ T3232] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback.
[  226.478547][ T3232] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.620109][ T3243] set_capacity_and_notify: 5 callbacks suppressed
[  226.620125][ T3243] loop5: detected capacity change from 0 to 40427
[  226.668513][ T3243] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  226.683688][ T3245] loop1: detected capacity change from 0 to 512
[  226.688163][ T3243] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  226.702415][ T3243] F2FS-fs (loop5): invalid crc value
[  226.707805][ T2648] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  226.712240][ T3245] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.789: inode has both inline data and extents flags
[  226.717502][ T3243] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  226.749218][ T3245] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.789: couldn't read orphan inode 15 (err -117)
[  226.762458][ T3245] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[  226.766981][ T3251] loop9: detected capacity change from 0 to 4096
[  226.782009][ T3243] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  226.789420][ T3243] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  226.805599][   T26] usb 3-1: device descriptor read/64, error -71
[  226.815001][ T3251] EXT4-fs (loop9): Test dummy encryption mode enabled
[  226.822459][ T3251] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  226.832952][ T3251] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  226.841143][ T3251] System zones: 0-5
[  226.846403][ T3251] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  226.925771][   T26] usb usb3-port1: attempt power cycle
[  227.033643][ T3261] loop5: detected capacity change from 0 to 40427
[  227.065716][ T2648] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.075905][ T2648] usb 4-1: New USB device found, idVendor=04b8, idProduct=0000, bcdDevice= 0.00
[  227.084934][ T2648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.094934][ T3261] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  227.102865][    T6] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  227.110433][ T3261] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  227.121112][ T3261] F2FS-fs (loop5): Found nat_bits in checkpoint
[  227.143193][ T3261] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  227.150380][ T3261] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  227.166908][ T3261] attempt to access beyond end of device
[  227.166908][ T3261] loop5: rw=2049, want=45104, limit=40427
[  227.179133][ T3261] attempt to access beyond end of device
[  227.179133][ T3261] loop5: rw=2049, want=77960, limit=40427
[  227.185653][  T351] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  227.293634][ T3267] loop5: detected capacity change from 0 to 512
[  227.335653][   T26] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  227.350222][ T3267] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  227.362559][ T3267] EXT4-fs (loop5): 1 truncate cleaned up
[  227.368749][ T3267] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  227.448090][    T6] usb 2-1: too many configurations: 253, using maximum allowed: 8
[  227.545717][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.561186][    T6] usb 2-1: config 0 has no interfaces?
[  227.562791][  T351] usb 10-1: device descriptor read/64, error -71
[  227.575610][   T26] usb 3-1: device descriptor read/8, error -71
[  227.655687][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.675567][    T6] usb 2-1: config 0 has no interfaces?
[  227.692245][ T3273] loop2: detected capacity change from 0 to 40427
[  227.729617][ T3273] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  227.730084][ T3276] loop5: detected capacity change from 0 to 512
[  227.737344][ T3273] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  227.754390][ T3276] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  227.765617][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.776696][    T6] usb 2-1: config 0 has no interfaces?
[  227.776744][ T3273] F2FS-fs (loop2): invalid crc value
[  227.777682][ T3276] EXT4-fs (loop5): 1 truncate cleaned up
[  227.787860][   T26] usb 3-1: device descriptor read/8, error -71
[  227.796709][ T3276] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  227.819804][ T3273] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  227.885655][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.906815][ T3273] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  227.914847][ T3273] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  227.923303][    T6] usb 2-1: config 0 has no interfaces?
[  228.017063][  T351] usb 10-1: device descriptor read/64, error -71
[  228.035675][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.046990][    T6] usb 2-1: config 0 has no interfaces?
[  228.135639][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.146977][    T6] usb 2-1: config 0 has no interfaces?
[  228.209970][ T3287] xt_hashlimit: size too large, truncated to 1048576
[  228.225774][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.236138][    T6] usb 2-1: config 0 has no interfaces?
[  228.285568][  T351] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  228.325627][    T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.336142][    T6] usb 2-1: config 0 has no interfaces?
[  228.341688][    T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  228.351030][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.363976][    T6] usb 2-1: config 0 descriptor??
[  228.499269][ T3295] device syzkaller0 entered promiscuous mode
[  228.551245][ T3298] loop2: detected capacity change from 0 to 4096
[  228.555570][  T351] usb 10-1: device descriptor read/64, error -71
[  228.606573][ T3298] EXT4-fs (loop2): Test dummy encryption mode enabled
[  228.613877][ T3298] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  228.638495][ T3298] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  228.645898][ T3254] netlink: 'syz.1.791': attribute type 1 has an invalid length.
[  228.651047][ T3298] System zones: 0-5
[  228.656147][  T432] usb 2-1: USB disconnect, device number 12
[  228.675721][ T3298] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  228.790255][ T3307] xt_hashlimit: size too large, truncated to 1048576
[  228.861168][ T3305] loop5: detected capacity change from 0 to 40427
[  228.889053][ T3305] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  228.895703][ T3305] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  228.926005][ T3305] F2FS-fs (loop5): invalid crc value
[  228.945660][  T351] usb 10-1: device descriptor read/64, error -71
[  228.963674][ T3305] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  229.000321][ T3305] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  229.008283][ T3305] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  229.065642][  T351] usb usb10-port1: attempt power cycle
[  229.155626][   T26] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  229.216790][ T3317] loop5: detected capacity change from 0 to 512
[  229.256546][ T3317] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  229.275432][ T3317] EXT4-fs (loop5): 1 truncate cleaned up
[  229.281743][ T3317] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  229.480783][   T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.491126][   T26] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 149
[  229.501076][   T26] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  229.513911][ T2648] usb 4-1: string descriptor 0 read error: -71
[  229.515926][ T3324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  229.521275][ T2648] usb 4-1: USB disconnect, device number 12
[  229.545584][ T3324] EXT4-fs (loop3): 1 truncate cleaned up
[  229.551247][ T3324] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  229.553042][ T3321] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.809: iget: bad i_size value: 38620345925642
[  229.570867][  T351] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  229.591296][ T3321] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.809: couldn't read orphan inode 15 (err -117)
[  229.603355][ T3321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  229.621500][ T3321] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.809: bg 0: block 5: invalid block bitmap
[  229.634132][ T3321] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  229.652880][ T3321] EXT4-fs (loop1): This should not happen!! Data will be lost
[  229.652880][ T3321] 
[  229.662985][ T3321] EXT4-fs (loop1): Total free blocks count 0
[  229.679901][ T3321] EXT4-fs (loop1): Free/Dirty block details
[  229.681890][ T3328] overlayfs: failed to set xattr on upper
[  229.686660][ T3321] EXT4-fs (loop1): free_blocks=0
[  229.699094][ T3328] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3328 comm=syz.1.809
[  229.708284][ T3321] EXT4-fs (loop1): dirty_blocks=1
[  229.717089][ T3321] EXT4-fs (loop1): Block reservation details
[  229.723351][ T3321] EXT4-fs (loop1): i_reserved_data_blocks=1
[  229.796048][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  229.796066][   T30] audit: type=1400 audit(1786150831.601:310): avc:  denied  { block_suspend } for  pid=3329 comm="syz.5.811" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  229.830195][ T3330] EXT4-fs (loop5): Test dummy encryption mode enabled
[  229.837232][ T3330] EXT4-fs (loop5): Ignoring removed oldalloc option
[  229.844730][ T3330] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[  229.853026][ T3330] System zones: 0-5
[  229.855926][   T26] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  229.858606][ T3330] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,journal_dev=0x0000000000000006,noinit_itable,nombcache,minixdf,nodioread_nolock,errors=remount-ro,oldalloc,nolazytime,max_dir_size_kb=0x0000000000000001,. Quota mode: writeback.
[  229.866240][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.916255][   T26] usb 3-1: Product: syz
[  229.921008][   T26] usb 3-1: Manufacturer: syz
[  229.934194][   T26] usb 3-1: SerialNumber: syz
[  229.945664][  T351] usb 10-1: device descriptor read/8, error -71
[  229.955635][ T3308] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  229.985841][   T26] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  230.006259][   T26] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  230.044349][ T3341] EXT4-fs (loop3): Test dummy encryption mode enabled
[  230.051769][ T3341] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  230.061981][   T26] usbserial_generic 3-1:1.0: generic converter detected
[  230.082971][   T26] usb 3-1: generic converter now attached to ttyUSB0
[  230.083448][ T3341] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  230.106299][ T3341] System zones: 0-5
[  230.111011][ T3341] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  230.165611][  T351] usb 10-1: device descriptor read/8, error -71
[  230.166947][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.179622][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.187621][ T3339] device bridge_slave_0 entered promiscuous mode
[  230.211011][ T3351] FAULT_INJECTION: forcing a failure.
[  230.211011][ T3351] name failslab, interval 1, probability 0, space 0, times 0
[  230.223708][ T3351] CPU: 0 PID: 3351 Comm: syz.9.820 Not tainted syzkaller #0
[  230.224375][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.231002][ T3351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  230.231014][ T3351] Call Trace:
[  230.231019][ T3351]  <TASK>
[  230.231025][ T3351]  __dump_stack+0x21/0x30
[  230.231046][ T3351]  dump_stack_lvl+0x110/0x170
[  230.231060][ T3351]  ? show_regs_print_info+0x20/0x20
[  230.231074][ T3351]  ? 0xffffffffa002a000
[  230.231086][ T3351]  ? rtnetlink_bind+0x80/0x80
[  230.231103][ T3351]  dump_stack+0x15/0x20
[  230.238218][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.248258][ T3351]  should_fail+0x3ab/0x500
[  230.248279][ T3351]  __should_failslab+0xa4/0xe0
[  230.248295][ T3351]  should_failslab+0x9/0x20
[  230.248311][ T3351]  slab_pre_alloc_hook+0x39/0xd0
[  230.252452][ T3339] device bridge_slave_1 entered promiscuous mode
[  230.254494][ T3351]  ? __alloc_skb+0xe4/0x730
[  230.317942][ T3351]  kmem_cache_alloc+0x44/0x260
[  230.322700][ T3351]  __alloc_skb+0xe4/0x730
[  230.327022][ T3351]  netlink_ack+0x35c/0xb10
[  230.331422][ T3351]  ? selinux_nlmsg_lookup+0x3a4/0x440
[  230.336776][ T3351]  ? netlink_dump+0xd80/0xd80
[  230.341437][ T3351]  netlink_rcv_skb+0x267/0x430
[  230.346365][ T3351]  ? rtnetlink_bind+0x80/0x80
[  230.351025][ T3351]  ? netlink_ack+0xb10/0xb10
[  230.355599][ T3351]  ? _copy_from_iter+0x4a4/0x10a0
[  230.360697][ T3351]  ? __netlink_lookup+0x387/0x3b0
[  230.365707][ T3351]  rtnetlink_rcv+0x1c/0x20
[  230.370113][ T3351]  netlink_unicast+0x86c/0xa30
[  230.374880][ T3351]  netlink_sendmsg+0x879/0xb80
[  230.379647][ T3351]  ? netlink_getsockopt+0x530/0x530
[  230.384845][ T3351]  ? kasan_set_track+0x4a/0x70
[  230.389591][ T3351]  ? security_socket_sendmsg+0x82/0xa0
[  230.395051][ T3351]  ? netlink_getsockopt+0x530/0x530
[  230.400232][ T3351]  ____sys_sendmsg+0x5be/0x8f0
[  230.404982][ T3351]  ? __sys_sendmsg_sock+0x40/0x40
[  230.409991][ T3351]  ? import_iovec+0x7c/0xb0
[  230.414480][ T3351]  ___sys_sendmsg+0x236/0x2e0
[  230.419138][ T3351]  ? __sys_sendmsg+0x280/0x280
[  230.423907][ T3351]  ? __fdget+0x1a1/0x230
[  230.428134][ T3351]  __x64_sys_sendmsg+0x201/0x2d0
[  230.433064][ T3351]  ? ___sys_sendmsg+0x2e0/0x2e0
[  230.437893][ T3351]  ? ksys_write+0x1fa/0x260
[  230.442387][ T3351]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  230.448644][ T3351]  x64_sys_call+0x4b/0x9a0
[  230.453045][ T3351]  do_syscall_64+0x4c/0xa0
[  230.457462][ T3351]  ? clear_bhb_loop+0x50/0xa0
[  230.462122][ T3351]  ? clear_bhb_loop+0x50/0xa0
[  230.466781][ T3351]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  230.472654][ T3351] RIP: 0033:0x7fc01ca310d9
[  230.477051][ T3351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.496735][ T3351] RSP: 002b:00007fc01b48a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.505220][ T3351] RAX: ffffffffffffffda RBX: 00007fc01ccb8fa0 RCX: 00007fc01ca310d9
[  230.513177][ T3351] RDX: 000000000004c804 RSI: 0000200000000600 RDI: 0000000000000004
[  230.521129][ T3351] RBP: 00007fc01b48a090 R08: 0000000000000000 R09: 0000000000000000
[  230.529092][ T3351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.537045][ T3351] R13: 00007fc01ccb9038 R14: 00007fc01ccb8fa0 R15: 00007fffa74e8aa8
[  230.545008][ T3351]  </TASK>
[  230.582083][ T3308] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  230.593654][ T3358] UDC core: couldn't find an available UDC or it's busy: -16
[  230.603894][ T3358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  230.613311][ T3355] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  230.626813][   T30] audit: type=1400 audit(1786150832.461:311): avc:  denied  { add_name } for  pid=3354 comm="syz.9.821" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  230.633817][   T30] audit: type=1400 audit(1786150832.461:312): avc:  denied  { associate } for  pid=3354 comm="syz.9.821" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  230.634445][   T30] audit: type=1400 audit(1786150832.461:313): avc:  denied  { write open } for  pid=3354 comm="syz.9.821" path="/95/file0/file1" dev="loop9" ino=1048684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  230.637313][   T30] audit: type=1400 audit(1786150832.471:314): avc:  denied  { read } for  pid=3354 comm="syz.9.821" path="/95/file0/bus" dev="loop9" ino=1048685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  230.641131][ T3308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102]
[  230.682174][   T30] audit: type=1400 audit(1786150832.511:315): avc:  denied  { map } for  pid=3359 comm="syz.3.819" path="pipe:[25709]" dev="pipefs" ino=25709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  230.709631][ T3308] System zones: 
[  230.799032][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.809686][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.816999][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.824140][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.832657][   T30] audit: type=1400 audit(1786150832.511:316): avc:  denied  { execute } for  pid=3359 comm="syz.3.819" path="pipe:[25709]" dev="pipefs" ino=25709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  230.839435][ T3308] 0-1
[  230.856447][ T3360] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  230.865437][ T3360] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  230.870664][ T3308] , 3-12
[  230.875581][   T26] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  230.878409][ T3360] F2FS-fs (loop3): invalid crc value
[  230.886125][ T3308] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none.
[  230.918008][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.925980][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.946784][ T3360] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  230.963986][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  230.972520][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  230.980803][  T823] device bridge_slave_1 left promiscuous mode
[  230.980807][ T3360] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  230.987519][  T823] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.994308][ T3360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  231.020448][  T823] device bridge_slave_0 left promiscuous mode
[  231.026728][  T823] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.034958][  T823] device veth1_macvtap left promiscuous mode
[  231.046576][  T823] device veth0_vlan left promiscuous mode
[  231.139692][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  231.153483][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  231.176745][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.183850][  T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.216890][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  231.226313][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  231.234656][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.241728][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.250161][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  231.258856][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  231.277341][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  231.285777][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  231.294085][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  231.295641][   T26] usb 6-1: unable to get BOS descriptor or descriptor too short
[  231.302494][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  231.330771][ T3339] device veth0_vlan entered promiscuous mode
[  231.337501][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  231.346044][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  231.362157][ T3339] device veth1_macvtap entered promiscuous mode
[  231.369292][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  231.377368][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.384931][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.395647][   T26] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  231.416038][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.424637][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.459987][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  231.486946][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  231.508554][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  231.529985][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  231.575634][   T26] usb 6-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice= 0.40
[  231.586827][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.626692][   T26] usb 6-1: Product: syz
[  231.630882][   T26] usb 6-1: Manufacturer: syz
[  231.636006][   T26] usb 6-1: SerialNumber: syz
[  231.761519][ T3378] set_capacity_and_notify: 8 callbacks suppressed
[  231.761543][ T3378] loop6: detected capacity change from 0 to 16
[  231.808107][ T3378] erofs: (device loop6): mounted with root inode @ nid 36.
[  231.925727][ T2648] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  231.996892][   T26] snd-usb-audio: probe of 6-1:1.0 failed with error -2
[  232.076480][   T39] usb 3-1: USB disconnect, device number 10
[  232.086832][   T26] snd-usb-audio: probe of 6-1:1.1 failed with error -2
[  232.110385][   T39] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  232.138491][   T39] usbserial_generic 3-1:1.0: device disconnected
[  232.167174][   T26] snd-usb-audio: probe of 6-1:1.2 failed with error -2
[  232.212250][   T26] usb 6-1: USB disconnect, device number 8
[  232.218453][ T2648] usb 10-1: Using ep0 maxpacket: 8
[  232.335920][ T2648] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30
[  232.347233][ T2648] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98
[  232.361541][ T2648] usb 10-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[  232.372187][ T2648] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.505047][ T3383] loop5: detected capacity change from 0 to 4096
[  232.526444][ T3383] EXT4-fs (loop5): Test dummy encryption mode enabled
[  232.543479][ T3383] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  232.552608][ T2648] usb 10-1: config 0 descriptor??
[  232.562946][ T3383] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  232.572835][ T3383] System zones: 0-5
[  232.597878][ T2648] ums-jumpshot 10-1:0.0: USB Mass Storage device detected
[  232.601594][ T3383] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  232.604746][ T3388] loop2: detected capacity change from 0 to 512
[  232.611798][   T20] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  232.645829][ T2648] ums-jumpshot 10-1:0.0: Quirks match for vid 05dc pid 0001: 2
[  232.662127][ T3387] loop6: detected capacity change from 0 to 256
[  232.669844][ T3388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  232.680571][ T3387] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.686885][ T3388] EXT4-fs (loop2): 1 truncate cleaned up
[  232.695763][ T3387] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  232.699615][ T3388] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  232.711466][ T3387] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  232.779059][ T3387] incfs: ino conflict with backing FS 1
[  232.786429][ T3387] exFAT-fs (loop6): error, found bogus dentry(18) beyond unused empty group(3) (start_clu : 5, cur_clu : 5)
[  232.787641][   T30] audit: type=1400 audit(1786150834.611:317): avc:  denied  { mounton } for  pid=3386 comm="syz.6.829" path="/1/bus/bus" dev="loop6" ino=1048690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  232.804453][ T3387] exFAT-fs (loop6): Filesystem has been set read-only
[  232.832355][ T3376] UDC core: couldn't find an available UDC or it's busy: -16
[  232.839778][ T3376] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  232.847682][   T30] audit: type=1326 audit(1786150834.681:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.6.829" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb838d820d9 code=0x7ffc0000
[  232.872578][   T30] audit: type=1326 audit(1786150834.681:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.6.829" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb838d820d9 code=0x7ffc0000
[  233.106773][   T20] usb 4-1: device descriptor read/64, error -71
[  233.738087][  T315] device bridge_slave_1 left promiscuous mode
[  233.754953][  T315] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.829011][  T315] device bridge_slave_0 left promiscuous mode
[  233.904015][ T3396] loop5: detected capacity change from 0 to 40427
[  233.920524][  T315] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.052169][ T3396] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  234.087571][  T315] device veth1_macvtap left promiscuous mode
[  234.140358][ T3396] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  234.165730][  T315] device veth0_vlan left promiscuous mode
[  234.206248][ T3396] F2FS-fs (loop5): invalid crc value
[  234.220884][ T3396] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  234.242695][ T3413] loop2: detected capacity change from 0 to 512
[  234.251531][ T3413] EXT4-fs (loop2): Unrecognized mount option "fowner<00000000000000000000" or missing value
[  234.266334][   T20] usb 4-1: device descriptor read/64, error -71
[  234.284843][ T3396] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  234.292129][ T3396] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  234.339428][ T3413] capability: warning: `syz.2.837' uses 32-bit capabilities (legacy support in use)
[  234.368538][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.376222][ T3411] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.386593][ T3411] device bridge_slave_0 entered promiscuous mode
[  234.394858][ T3411] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.402187][ T3411] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.409825][ T3411] device bridge_slave_1 entered promiscuous mode
[  234.455325][ T3422] loop2: detected capacity change from 0 to 4096
[  234.481340][ T3428] loop5: detected capacity change from 0 to 2048
[  234.482715][ T3411] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.494912][ T3411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.502181][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.509215][ T3411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.531293][ T3428] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  234.531759][ T3422] EXT4-fs (loop2): Test dummy encryption mode enabled
[  234.545835][   T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  234.553898][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  234.554456][ T3422] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  234.568508][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  234.579654][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  234.587113][ T3422] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  234.589464][ T3428] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback.
[  234.596263][ T3422] System zones: 0-5
[  234.623770][ T3422] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  234.660296][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  234.685219][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  234.694277][ T3422] overlayfs: missing 'lowerdir'
[  234.702904][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  234.715669][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  234.727581][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  234.735287][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  234.743190][ T3438] loop5: detected capacity change from 0 to 512
[  234.750295][ T3411] device veth0_vlan entered promiscuous mode
[  234.766826][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  234.776325][ T3411] device veth1_macvtap entered promiscuous mode
[  234.791392][ T3438] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  234.796932][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  234.808004][ T3438] EXT4-fs (loop5): 1 truncate cleaned up
[  234.820038][ T3438] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  234.844279][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  234.909879][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  234.909893][   T30] audit: type=1400 audit(1786150836.741:357): avc:  denied  { ioctl } for  pid=3449 comm="syz.2.848" path="/29/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  234.917174][ T3452] loop0: detected capacity change from 0 to 512
[  234.967386][ T3457] FAULT_INJECTION: forcing a failure.
[  234.967386][ T3457] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.977320][ T3452] EXT4-fs (loop0): Ignoring removed oldalloc option
[  234.981067][ T3457] CPU: 1 PID: 3457 Comm: syz.2.850 Not tainted syzkaller #0
[  234.994627][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  235.003082][ T3452] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  235.004676][ T3457] Call Trace:
[  235.004685][ T3457]  <TASK>
[  235.004692][ T3457]  __dump_stack+0x21/0x30
[  235.016403][ T3452] EXT4-fs (loop0): 1 truncate cleaned up
[  235.017730][ T3457]  dump_stack_lvl+0x110/0x170
[  235.017770][ T3457]  ? show_regs_print_info+0x20/0x20
[  235.020845][ T3452] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000c90,minixdf,auto_da_alloc,data=journal,lazytime,oldalloc,max_batch_time=0x000000007fffffff,auto_da_alloc,,errors=continue. Quota mode: none.
[  235.025073][ T3457]  dump_stack+0x15/0x20
[  235.025092][ T3457]  should_fail+0x3ab/0x500
[  235.025109][ T3457]  should_fail_usercopy+0x1a/0x20
[  235.030950][   T20] usb 4-1: device descriptor read/64, error -71
[  235.035453][ T3457]  _copy_to_user+0x20/0x90
[  235.035474][ T3457]  simple_read_from_buffer+0xe9/0x160
[  235.093501][ T3457]  proc_fail_nth_read+0x1a6/0x220
[  235.098526][ T3457]  ? proc_fault_inject_write+0x310/0x310
[  235.104269][ T3457]  ? security_file_permission+0x83/0xa0
[  235.109805][ T3457]  ? proc_fault_inject_write+0x310/0x310
[  235.115434][ T3457]  vfs_read+0x28c/0xc20
[  235.119576][ T3457]  ? kernel_read+0x1f0/0x1f0
[  235.124148][ T3457]  ? __kasan_check_write+0x14/0x20
[  235.129416][ T3457]  ? mutex_lock+0x9b/0x1c0
[  235.133817][ T3457]  ? wait_for_completion_killable_timeout+0x10/0x10
[  235.140474][ T3457]  ? __fget_files+0x2e1/0x340
[  235.145137][ T3457]  ? __fdget_pos+0x2d2/0x380
[  235.149796][ T3457]  ? ksys_read+0x70/0x260
[  235.154111][ T3457]  ksys_read+0x14a/0x260
[  235.158424][ T3457]  ? vfs_write+0xfd0/0xfd0
[  235.162937][ T3457]  ? debug_smp_processor_id+0x17/0x20
[  235.168321][ T3457]  __x64_sys_read+0x7b/0x90
[  235.172830][ T3457]  x64_sys_call+0x96d/0x9a0
[  235.177324][ T3457]  do_syscall_64+0x4c/0xa0
[  235.181813][ T3457]  ? clear_bhb_loop+0x50/0xa0
[  235.186502][ T3457]  ? clear_bhb_loop+0x50/0xa0
[  235.191256][ T3457]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  235.197246][ T3457] RIP: 0033:0x7fb9401c790e
[  235.201731][ T3457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  235.221404][ T3457] RSP: 002b:00007fb93ec5ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  235.230089][ T3457] RAX: ffffffffffffffda RBX: 00007fb93ec606c0 RCX: 00007fb9401c790e
[  235.238056][ T3457] RDX: 000000000000000f RSI: 00007fb93ec600a0 RDI: 0000000000000005
[  235.246017][ T3457] RBP: 00007fb93ec60090 R08: 0000000000000000 R09: 0000000000000000
[  235.253975][ T3457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.261929][ T3457] R13: 00007fb94048f038 R14: 00007fb94048efa0 R15: 00007ffd3565f878
[  235.269893][ T3457]  </TASK>
[  235.317936][   T30] audit: type=1400 audit(1786150837.131:358): avc:  denied  { create } for  pid=3461 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  235.342257][ T2648] usb 10-1: USB disconnect, device number 13
[  235.349713][   T30] audit: type=1400 audit(1786150837.131:359): avc:  denied  { create } for  pid=3461 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  235.369900][   T30] audit: type=1400 audit(1786150837.131:360): avc:  denied  { read } for  pid=3461 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  235.457190][ T3467] EXT4-fs (loop0): Test dummy encryption mode enabled
[  235.465520][ T3467] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.853: corrupted xattr block 95
[  235.478374][ T3467] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.853: bg 0: block 7: invalid block bitmap
[  235.490847][ T3467] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  235.499838][ T3467] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.853: corrupted xattr block 95
[  235.512230][ T3467] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117)
[  235.521578][ T3467] EXT4-fs (loop0): 1 orphan inode deleted
[  235.527417][ T3467] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[  235.535581][   T20] usb 4-1: Using ep0 maxpacket: 16
[  235.815624][ T2648] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  235.822804][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.856407][   T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  235.869392][   T20] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  235.878583][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.888858][   T20] usb 4-1: config 0 descriptor??
[  236.008314][ T3472] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  236.014945][ T3472] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  236.024988][ T3472] F2FS-fs (loop5): invalid crc value
[  236.032109][ T3472] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  236.053826][ T3472] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  236.061251][ T3472] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  236.095610][ T2648] usb 10-1: device descriptor read/64, error -71
[  236.178844][ T3478] EXT4-fs (loop5): Test dummy encryption mode enabled
[  236.186500][ T3478] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  236.201996][ T3478] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  236.210508][ T3478] System zones: 0-5
[  236.215161][ T3478] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  236.248156][ T3478] overlayfs: missing 'lowerdir'
[  237.812530][   T20] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max
[  237.854948][   T30] audit: type=1400 audit(1786150839.681:361): avc:  denied  { write } for  pid=3491 comm="syz.3.859" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  237.911429][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  237.918977][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  237.928371][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  237.935692][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  237.938733][ T3496] set_capacity_and_notify: 4 callbacks suppressed
[  237.938748][ T3496] loop2: detected capacity change from 0 to 256
[  237.944282][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  237.963942][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  237.973024][ T3498] loop3: detected capacity change from 0 to 256
[  237.976637][ T3496] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  237.979603][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  237.992176][ T2648] usb 10-1: device descriptor read/64, error -71
[  237.999332][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  238.012944][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  238.020534][   T20] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  238.030994][   T20] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input5
[  238.043512][   T30] audit: type=1400 audit(1786150839.871:362): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=2330 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  238.045314][   T20] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  238.066105][   T30] audit: type=1400 audit(1786150839.871:363): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2330 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  238.080783][   T20] usb 4-1: USB disconnect, device number 14
[  238.111176][   T30] audit: type=1400 audit(1786150839.941:364): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2330 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  238.120468][ T3503] loop0: detected capacity change from 0 to 512
[  238.169549][ T3498] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  238.182134][   T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  238.190538][ T3503] EXT4-fs (loop0): Test dummy encryption mode enabled
[  238.199018][ T3503] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.863: corrupted xattr block 95
[  238.216738][ T3503] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.863: bg 0: block 7: invalid block bitmap
[  238.224351][ T3507] loop2: detected capacity change from 0 to 512
[  238.229448][ T3503] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  238.246101][ T3503] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.863: corrupted xattr block 95
[  238.258208][ T3509] fido_id[3509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  238.260637][ T3507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  238.285651][ T2648] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  238.294841][ T3503] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117)
[  238.304401][ T3503] EXT4-fs (loop0): 1 orphan inode deleted
[  238.310262][ T3503] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[  238.343359][ T3507] EXT4-fs (loop2): 1 truncate cleaned up
[  238.349356][ T3507] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  238.954947][   T39] usb 6-1: Using ep0 maxpacket: 32
[  238.968077][ T3520] loop3: detected capacity change from 0 to 512
[  239.006293][ T3518] loop9: detected capacity change from 0 to 4096
[  239.026586][ T3518] EXT4-fs (loop9): Test dummy encryption mode enabled
[  239.033592][ T3518] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  239.044314][ T3518] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ee1a8, mo2=0003]
[  239.052929][ T3518] System zones: 0-5
[  239.058230][ T3518] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nouid32,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  239.074765][   T30] audit: type=1400 audit(1786150840.901:365): avc:  denied  { connect } for  pid=3527 comm="syz.0.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  239.095574][ T3520] EXT4-fs (loop3): Test dummy encryption mode enabled
[  239.102626][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.122691][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.132722][   T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  239.142056][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.150794][   T39] usb 6-1: config 0 descriptor??
[  239.163026][   T30] audit: type=1400 audit(1786150840.991:366): avc:  denied  { bind } for  pid=3531 comm="syz.0.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  239.192102][ T3520] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.3.865: corrupted xattr block 95
[  239.193013][ T3518] overlayfs: missing 'lowerdir'
[  239.205218][ T3532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'.
[  239.210285][   T39] hub 6-1:0.0: USB hub found
[  239.219545][ T3520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.865: bg 0: block 7: invalid block bitmap
[  239.265509][ T3520] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  239.276978][ T3541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.876'.
[  239.287677][ T3520] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #11: comm syz.3.865: corrupted xattr block 95
[  239.302264][ T3545] netlink: 'syz.0.879': attribute type 27 has an invalid length.
[  239.305306][ T3520] EXT4-fs warning (device loop3): ext4_evict_inode:305: xattr delete (err -117)
[  239.320286][ T3520] EXT4-fs (loop3): 1 orphan inode deleted
[  239.326131][ T3520] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[  239.415639][   T39] hub 6-1:0.0: 1 port detected
[  239.514150][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.581430][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.628429][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'.
[  239.874964][ T3655] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  240.025379][ T3679] xt_hashlimit: size too large, truncated to 1048576
[  240.066000][ T2648] hub 6-1:0.0: activate --> -90
[  240.077730][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  240.077745][   T30] audit: type=1400 audit(1786150841.911:379): avc:  denied  { write } for  pid=3684 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  240.134035][ T3698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  240.146242][   T30] audit: type=1400 audit(1786150841.951:380): avc:  denied  { write } for  pid=3695 comm="syz.0.950" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  240.173248][   T30] audit: type=1400 audit(1786150841.951:381): avc:  denied  { open } for  pid=3695 comm="syz.0.950" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  240.345078][ T3718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'.
[  240.376891][ T3494] UDC core: couldn't find an available UDC or it's busy: -16
[  240.395159][ T3725] device syzkaller0 entered promiscuous mode
[  240.402022][ T3494] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  240.423768][  T296] usb 6-1: USB disconnect, device number 9
[  240.429927][ T3730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'.
[  240.439022][ T2648] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[  240.452704][ T3730] netlink: 64 bytes leftover after parsing attributes in process `syz.0.964'.
[  240.573984][ T3756] netlink: 'syz.9.978': attribute type 13 has an invalid length.
[  240.588763][ T3758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.979'.
[  240.603318][   T30] audit: type=1400 audit(1786150842.431:382): avc:  denied  { create } for  pid=3745 comm="syz.0.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  240.645072][   T30] audit: type=1400 audit(1786150842.471:383): avc:  denied  { read } for  pid=3762 comm="syz.2.981" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  240.683952][   T30] audit: type=1400 audit(1786150842.471:384): avc:  denied  { ioctl } for  pid=3762 comm="syz.2.981" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  240.734570][   T30] audit: type=1400 audit(1786150842.561:385): avc:  denied  { create } for  pid=3775 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  240.754910][ T3772] device veth0 entered promiscuous mode
[  240.755103][   T30] audit: type=1400 audit(1786150842.561:386): avc:  denied  { getopt } for  pid=3775 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  240.762301][ T3771] device veth0 left promiscuous mode
[  240.792596][   T30] audit: type=1400 audit(1786150842.621:387): avc:  denied  { getopt } for  pid=3777 comm="syz.2.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  240.836746][   T30] audit: type=1400 audit(1786150842.651:388): avc:  denied  { write } for  pid=3781 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  241.106584][ T3837] device syzkaller0 entered promiscuous mode
[  241.239431][ T3863] netlink: 2136 bytes leftover after parsing attributes in process `syz.2.1030'.
[  241.366195][ T3893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1045'.
[  241.377667][ T3879] netlink: 'syz.3.1037': attribute type 12 has an invalid length.
[  241.874281][ T4003] device ip6gre1 entered promiscuous mode
[  241.958911][ T4017] Illegal XDP return value 4294967294, expect packet loss!
[  241.991709][ T4023] xt_hashlimit: size too large, truncated to 1048576
[  242.773580][ T4117] syz.9.1151 (4117) used greatest stack depth: 20576 bytes left
[  242.882396][ T4147] x_tables: duplicate entry at hook 2
[  243.122244][ T4179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=4179 comm=syz.3.1181
[  243.501887][ T4228] ==================================================================
[  243.510105][ T4228] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x635/0x6e0
[  243.519413][ T4228] Read of size 1 at addr ffff888128f953f8 by task syz.3.1204/4228
[  243.527217][ T4228] 
[  243.529541][ T4228] CPU: 1 PID: 4228 Comm: syz.3.1204 Not tainted syzkaller #0
[  243.536914][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.546980][ T4228] Call Trace:
[  243.550257][ T4228]  <TASK>
[  243.553187][ T4228]  __dump_stack+0x21/0x30
[  243.557519][ T4228]  dump_stack_lvl+0x110/0x170
[  243.562200][ T4228]  ? show_regs_print_info+0x20/0x20
[  243.567534][ T4228]  ? load_image+0x3f0/0x3f0
[  243.572093][ T4228]  ? unwind_get_return_address+0x4d/0x90
[  243.577826][ T4228]  ? stack_trace_save+0xf0/0xf0
[  243.582688][ T4228]  print_address_description+0x7f/0x2c0
[  243.588246][ T4228]  ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0
[  243.594767][ T4228]  kasan_report+0x10f/0x150
[  243.599285][ T4228]  ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0
[  243.605796][ T4228]  __asan_report_load1_noabort+0x14/0x20
[  243.611431][ T4228]  xfrm_policy_inexact_list_reinsert+0x635/0x6e0
[  243.617776][ T4228]  xfrm_policy_inexact_insert_node+0x954/0xb60
[  243.623945][ T4228]  ? xfrm_netlink_rcv+0x72/0x90
[  243.628805][ T4228]  ? netlink_unicast+0x86c/0xa30
[  243.633747][ T4228]  ? ____sys_sendmsg+0x5be/0x8f0
[  243.638682][ T4228]  ? ___sys_sendmsg+0x236/0x2e0
[  243.643537][ T4228]  xfrm_policy_inexact_alloc_chain+0x540/0xb40
[  243.649693][ T4228]  xfrm_policy_inexact_insert+0x6a/0x1190
[  243.655404][ T4228]  ? __kasan_check_write+0x14/0x20
[  243.660499][ T4228]  ? _raw_spin_lock_bh+0x94/0xf0
[  243.665421][ T4228]  xfrm_policy_insert+0x12c/0x9c0
[  243.670440][ T4228]  xfrm_add_policy+0x4e1/0x840
[  243.675198][ T4228]  ? xfrm_dump_sa_done+0xc0/0xc0
[  243.680390][ T4228]  xfrm_user_rcv_msg+0x559/0x7f0
[  243.685411][ T4228]  ? xfrm_netlink_rcv+0x90/0x90
[  243.690253][ T4228]  ? avc_has_perm_noaudit+0x490/0x490
[  243.695620][ T4228]  ? x64_sys_call+0x4b/0x9a0
[  243.700247][ T4228]  ? selinux_nlmsg_lookup+0x233/0x440
[  243.705695][ T4228]  netlink_rcv_skb+0x1e9/0x430
[  243.710545][ T4228]  ? xfrm_netlink_rcv+0x90/0x90
[  243.715466][ T4228]  ? netlink_ack+0xb10/0xb10
[  243.720045][ T4228]  ? wait_for_completion_killable_timeout+0x10/0x10
[  243.726881][ T4228]  ? __netlink_lookup+0x387/0x3b0
[  243.731903][ T4228]  xfrm_netlink_rcv+0x72/0x90
[  243.736828][ T4228]  netlink_unicast+0x86c/0xa30
[  243.741613][ T4228]  netlink_sendmsg+0x879/0xb80
[  243.746456][ T4228]  ? netlink_getsockopt+0x530/0x530
[  243.751648][ T4228]  ? alloc_file+0x59/0x580
[  243.756063][ T4228]  ? security_socket_sendmsg+0x82/0xa0
[  243.761512][ T4228]  ? netlink_getsockopt+0x530/0x530
[  243.766706][ T4228]  ____sys_sendmsg+0x5be/0x8f0
[  243.771559][ T4228]  ? __sys_sendmsg_sock+0x40/0x40
[  243.776660][ T4228]  ? import_iovec+0x7c/0xb0
[  243.781152][ T4228]  ___sys_sendmsg+0x236/0x2e0
[  243.785827][ T4228]  ? __sys_sendmsg+0x280/0x280
[  243.790678][ T4228]  ? percpu_counter_add_batch+0x13c/0x160
[  243.796486][ T4228]  ? __fdget+0x1a1/0x230
[  243.800814][ T4228]  __x64_sys_sendmsg+0x201/0x2d0
[  243.805831][ T4228]  ? ___sys_sendmsg+0x2e0/0x2e0
[  243.810681][ T4228]  ? __kasan_check_write+0x14/0x20
[  243.816496][ T4228]  ? switch_fpu_return+0x15d/0x2c0
[  243.821632][ T4228]  x64_sys_call+0x4b/0x9a0
[  243.826147][ T4228]  do_syscall_64+0x4c/0xa0
[  243.830824][ T4228]  ? clear_bhb_loop+0x50/0xa0
[  243.835692][ T4228]  ? clear_bhb_loop+0x50/0xa0
[  243.840553][ T4228]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  243.846438][ T4228] RIP: 0033:0x7fc15476b0d9
[  243.851019][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.870723][ T4228] RSP: 002b:00007fc1531c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.879392][ T4228] RAX: ffffffffffffffda RBX: 00007fc1549f2fa0 RCX: 00007fc15476b0d9
[  243.887383][ T4228] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007
[  243.895441][ T4228] RBP: 00007fc154802024 R08: 0000000000000000 R09: 0000000000000000
[  243.903397][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.911354][ T4228] R13: 00007fc1549f3038 R14: 00007fc1549f2fa0 R15: 00007fff135f9e18
[  243.919313][ T4228]  </TASK>
[  243.922317][ T4228] 
[  243.924620][ T4228] Allocated by task 4228:
[  243.928924][ T4228]  __kasan_kmalloc+0xd4/0x100
[  243.933594][ T4228]  __kmalloc+0x13d/0x2c0
[  243.937815][ T4228]  sk_prot_alloc+0xed/0x320
[  243.942296][ T4228]  sk_alloc+0x38/0x430
[  243.946350][ T4228]  pfkey_create+0x12a/0x650
[  243.950844][ T4228]  __sock_create+0x38d/0x7a0
[  243.955434][ T4228]  __sys_socket+0xec/0x190
[  243.959852][ T4228]  __x64_sys_socket+0x7a/0x90
[  243.964524][ T4228]  x64_sys_call+0x8c5/0x9a0
[  243.969013][ T4228]  do_syscall_64+0x4c/0xa0
[  243.973417][ T4228]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  243.979320][ T4228] 
[  243.981722][ T4228] The buggy address belongs to the object at ffff888128f95000
[  243.981722][ T4228]  which belongs to the cache kmalloc-1k of size 1024
[  243.995756][ T4228] The buggy address is located 1016 bytes inside of
[  243.995756][ T4228]  1024-byte region [ffff888128f95000, ffff888128f95400)
[  244.009189][ T4228] The buggy address belongs to the page:
[  244.014810][ T4228] page:ffffea0004a3e400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888128f92000 pfn:0x128f90
[  244.026337][ T4228] head:ffffea0004a3e400 order:3 compound_mapcount:0 compound_pincount:0
[  244.034640][ T4228] flags: 0x4000000000010200(slab|head|zone=1)
[  244.040692][ T4228] raw: 4000000000010200 ffffea00045a7808 ffffea0004c28e08 ffff888100043080
[  244.049255][ T4228] raw: ffff888128f92000 000000000010000a 00000001ffffffff 0000000000000000
[  244.057821][ T4228] page dumped because: kasan: bad access detected
[  244.064214][ T4228] page_owner tracks the page as allocated
[  244.069906][ T4228] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, ts 22468896805, free_ts 0
[  244.087427][ T4228]  post_alloc_hook+0x192/0x1b0
[  244.092180][ T4228]  prep_new_page+0x1c/0x110
[  244.096662][ T4228]  get_page_from_freelist+0x2c3a/0x2cd0
[  244.102191][ T4228]  __alloc_pages+0x1a2/0x460
[  244.106760][ T4228]  new_slab+0xa0/0x4d0
[  244.110806][ T4228]  ___slab_alloc+0x3ac/0x840
[  244.115395][ T4228]  __slab_alloc+0x49/0x90
[  244.119717][ T4228]  __kmalloc_track_caller+0x169/0x2c0
[  244.125077][ T4228]  __alloc_skb+0x210/0x730
[  244.129496][ T4228]  inet6_rt_notify+0x293/0x480
[  244.134461][ T4228]  fib6_add+0x223f/0x3d70
[  244.138776][ T4228]  ip6_route_add+0x89/0x130
[  244.143356][ T4228]  addrconf_add_dev+0x385/0x4c0
[  244.148202][ T4228]  addrconf_init_auto_addrs+0x7ae/0xbd0
[  244.153732][ T4228]  addrconf_notify+0x95d/0xe00
[  244.158479][ T4228]  raw_notifier_call_chain+0x90/0x100
[  244.163836][ T4228] page_owner free stack trace missing
[  244.169211][ T4228] 
[  244.171522][ T4228] Memory state around the buggy address:
[  244.177157][ T4228]  ffff888128f95280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  244.185213][ T4228]  ffff888128f95300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  244.193292][ T4228] >ffff888128f95380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  244.201338][ T4228]                                                                 ^
[  244.209294][ T4228]  ffff888128f95400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  244.217337][ T4228]  ffff888128f95480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  244.225483][ T4228] ==================================================================
[  244.233523][ T4228] Disabling lock debugging due to kernel taint