last executing test programs:

38.706355203s ago: executing program 32 (id=57):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000440), &(0x7f0000000740)}, 0x20)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

36.362519233s ago: executing program 0 (id=97):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r1=>0x0})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000580)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10)

35.519196253s ago: executing program 0 (id=102):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, r2, 0x25, 0x0, @val=@tcx}, 0x1c)

35.419830717s ago: executing program 33 (id=102):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, r2, 0x25, 0x0, @val=@tcx}, 0x1c)

27.888476201s ago: executing program 34 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xa4)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000300)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x130)
pwrite64(r0, &(0x7f0000000540)='2', 0x1, 0x8080c61)
lseek(r0, 0x2, 0x4)

20.826471372s ago: executing program 35 (id=99):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}], 0x2}}], 0x1, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0xa, 0xa, 0x209, 0x40, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r1}, 0x38)

19.194968569s ago: executing program 36 (id=177):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

18.772668879s ago: executing program 6 (id=185):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18.653708734s ago: executing program 6 (id=187):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x800}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @random="c59a1b746cda", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x1d, 0xff, @remote, @local}}}}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0)

18.545877959s ago: executing program 6 (id=188):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0x9, 0xa0, 0x1, 0xe8, 0x8})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @random="a63e70d2e92d", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x33, 0x0, 0xc, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0)

18.496194952s ago: executing program 6 (id=190):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="150200000000000000", @ANYBLOB], 0x48)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='-cpu +pids'], 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c)

18.447474754s ago: executing program 6 (id=192):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0)

18.377220117s ago: executing program 3 (id=193):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d3)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)

18.356569138s ago: executing program 6 (id=194):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000002c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b801ba0000000001d90f300fc79d53bf0000c4e16dd3010f2202", 0x62}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18.31641974s ago: executing program 3 (id=196):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x70bd28, 0x25dfdc01, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x0, 0x4e25, 0x0, 0x2, 0x20, 0x20, 0xc6}, {0x20000, 0x7, 0x0, 0xfffffffffffffffc, 0x7, 0x2}, {0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0)
r1 = socket(0x2, 0x3, 0x6)
bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
sendto$inet(r1, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)

18.274996152s ago: executing program 3 (id=197):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00')

18.190110936s ago: executing program 3 (id=198):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d000101008032090400000203"], 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@utf8}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {}, {@namecase}, {@discard}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0x8}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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")
stat(0x0, 0x0)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2210089, &(0x7f0000000180)='\'\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000280), 0x1000000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}})

16.274797816s ago: executing program 3 (id=220):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.118507893s ago: executing program 37 (id=224):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10)

15.96257636s ago: executing program 3 (id=230):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
ioctl$int_in(r0, 0x5452, &(0x7f0000000540)=0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/211, 0xd3}, 0x400}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000600)=""/17, 0x11}], 0x2}, 0xb}], 0x2, 0x2, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000002c0)=0x4, 0x4)

15.910431993s ago: executing program 38 (id=230):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
ioctl$int_in(r0, 0x5452, &(0x7f0000000540)=0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/211, 0xd3}, 0x400}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000600)=""/17, 0x11}], 0x2}, 0xb}], 0x2, 0x2, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000002c0)=0x4, 0x4)

14.758796227s ago: executing program 0 (id=232):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
readv(r0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1)
shutdown(r0, 0x0)

14.591263985s ago: executing program 0 (id=243):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x54a, &(0x7f00000005c0)="$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")
gettid()
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)

14.447310341s ago: executing program 0 (id=247):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x6)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr=0x64010112}, {0x6, @multicast}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 'wg2\x00'})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0)

14.350980556s ago: executing program 9 (id=248):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffe}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14.250403621s ago: executing program 0 (id=250):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e06, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x20000800)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)

14.250314141s ago: executing program 39 (id=250):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e06, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x20000800)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)

13.83839865s ago: executing program 9 (id=254):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x290, 0x2b8, 0xb0000000, 0x0, 0x0, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x4, 0x9, 0x800, 'snmp\x00', 'syz0\x00', {0xe}}}}, {{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0xbf53864900e84eef, 0x0, 0xff000000, 0xffffffff], 'virt_wifi0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
socket$tipc(0x1e, 0x5, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
r2 = dup3(r0, r1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180))

13.752719984s ago: executing program 9 (id=255):
unshare(0x62020600)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

13.171033521s ago: executing program 9 (id=259):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$eJzs3c9vFOUbAPBnpttSCt9vF+NBjAk1HiAxbFtAQeIBPKoHE0nQE679QRoWUFoTS0gsNxMvavDkyZOa6NGrIUaNBw9GT/wHhqQxhT+gZmZny9ruthS2TFM+n2R233delvcZkmffd3beYQJ4bI1kL2nE/oj4NIkYLvanETGQlwYjFpp/7u7StYlsS2J5+c1/kkgi4s7StYnW35UU73uyl0r+yfjzp4gn+tb2Ozt/9UK90Zi6UtRH5y6+Nzo7f/XwzMX6+anzU5eOvDh2dPylYydeOHbvQ4MPd6zzx9NP/nj1lW9unPvy9+9PPPNxEqdib9HWfhy9MhIjK/8m7SoR8XavOytJX3E8nY4TAIDtJ22bw+2P4ejLS03DUZspNTgAAACgJz6KiGUAAABgh0uc/wMAAMAO11oHcGfp2kRrK3dFAvCoLJ6OiGoz/1v39zdbKrGQvw9Gf0QM3U3a7gxq3u9d7UH/IxHx3RfHD2RbbNF9+EBnC9cj4qlO43+S53+1+E83Vud/GhFjPeh/ZFVd/sOj0yn/m+cFG+f/qR70L/8BAAAAAACgd26ebl7IX3v9P11Z/xMdrv/1dbh29yA2vv6X3u5BN0AHi6cjXm57ts/dtvwvVPuK2v/y9QD9yfRMY2osIv4fEYeif1dWH1+nj69/OPlXt7b29X/ZlvXfWgtYxHG7suu/n5msz9Uf5piBpsXrEU9XOuV/sjL+J6vG/4Fi/e8b99nHL2d/nO7WtnH+A1tl+auIgx3H/3tPdEvWfz7faD4fGG3NCtY6++zP33brX/5DebLxf2j9/K8m7c/rnN18H2NDh893a3vQ+f9AciZ/quhAse/D+tzclfGIgeT1tfuPbD5m2Ila+dDKlyz/Dz3X+fy/2/w/it//3im+JdKIqBfvWf3dVX3uOvfrZ93iMf5DeRbfj5jc1Pi/+cLnby2d6db//Y3/x/Ix/VCxx+9/sL77TdCy4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDtJI2IvZGktZVymtZqEXsi4skYShuXZ+een778waXJrC2iGv3p9Exjaiwihpv1JKuP5+V79SOr6kcjYl9E3BjenddrE5cbk2UfPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv2RMTeSNJaRKR5OU1rtWbb38NlRwcAAAD0TLXsAAAAAIAt5/wfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIe078DNW0lELJzcnW+ZgaKtv9TIgK2WRsRvZQcBlKKv7ACA0lTKDgAojXN8INmgfbBrixkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPk4P6bt5KIWDi5O98yA0Vbf6mRAVstLTsAoDR9ZQcAlKZSdgBAaZzjA8kG7YNdWzrMIEwqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHas2fmrF+qNxtQVhXULlYjYBmH0ovBaui3CUNjehbK/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjJ/g0AAP//hpr+QQ==")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x21)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
lseek(r0, 0x100, 0x1)
getdents64(r0, 0x0, 0x4f)

12.860554276s ago: executing program 9 (id=263):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munmap(&(0x7f00003fe000/0x1000)=nil, 0x1000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='4', 0x1)

12.34236077s ago: executing program 9 (id=267):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x3, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x1d, 0x3, 0x2e, 0x4, '\x00', 0xf, 0xffffffffffffff7d})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.316994182s ago: executing program 40 (id=267):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x3, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x1d, 0x3, 0x2e, 0x4, '\x00', 0xf, 0xffffffffffffff7d})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.315255667s ago: executing program 7 (id=339):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x34080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x804)

7.23891077s ago: executing program 7 (id=341):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "d1eccca3c1b5361c375c29237e02435bef1ddad8f3c4ba51f19636f3acacf78b", 0xe, 0xb, 0x2, 0x3}, 0x3c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe)

7.050415509s ago: executing program 7 (id=342):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0xc, 0x0, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x4, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0xc4, 0x9, 0xfc}, {0x60000, 0x9000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x2, 0x2, 0xa, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3, 0xff}, {0xeeee0000, 0x41000, 0xc, 0x0, 0xb, 0x7, 0x8, 0x40, 0x26, 0x0, 0x3, 0x2}, {0xdddd0000, 0x3}, {0x10000, 0xfffe}, 0xddf8ffe3, 0x0, 0x0, 0x78, 0x0, 0x0, 0xd000, [0x7, 0x0, 0x40000000001]})

7.005340681s ago: executing program 7 (id=343):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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")
mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
syz_emit_ethernet(0x16, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x3}}, {@generic={0x8906}}}, 0x0)
r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0))

6.774442452s ago: executing program 7 (id=345):
r0 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xffb, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6.60184005s ago: executing program 7 (id=348):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x2000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040)

6.60155749s ago: executing program 41 (id=348):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x2000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040)

3.282091616s ago: executing program 42 (id=194):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000002c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b801ba0000000001d90f300fc79d53bf0000c4e16dd3010f2202", 0x62}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.896072381s ago: executing program 8 (id=407):
socket$nl_generic(0x10, 0x3, 0x10)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000240)=""/164, 0x131, 0x131)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)

1.851702133s ago: executing program 8 (id=408):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x250, &(0x7f0000000300)="$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")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="0f01c82e3e66400f1bb00c0000000f20c035200000000f22c0470fc75e05c46169db2d00280000c4a3257c13023e3e650f01c4c4e1d97c6b83b9800000c00f3235000100000f3066baf80cb8f0664c85ef66bafc0ced", 0x56}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.404254944s ago: executing program 8 (id=410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xcf3941cd211c976b}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c040}, 0x800)

1.316227988s ago: executing program 8 (id=412):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4)

1.27654254s ago: executing program 8 (id=413):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x4a8e)

961.420855ms ago: executing program 4 (id=423):
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000002c0)=0x40000803, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000a00)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x26, 0x44, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x1f, 0x1b, [@multicast2, @dev={0xac, 0x14, 0x14, 0xf9}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x3f7, 0x4)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)

936.013806ms ago: executing program 4 (id=425):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000000})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000002c0)={0xa0000013})

903.178098ms ago: executing program 5 (id=428):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

891.594368ms ago: executing program 4 (id=429):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xd0fc5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

869.241269ms ago: executing program 1 (id=430):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
listen(0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

839.31503ms ago: executing program 5 (id=431):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x5000, 0xb, 0xd, 0x9, 0x9, 0x1, 0x1, 0x81, 0x7, 0x9, 0xeb}, {0x3000, 0xeeef0000, 0xc, 0xe, 0x5, 0x8, 0x4, 0x63, 0x5, 0x5, 0x0, 0x3}, {0x8000000, 0xdddd0000, 0x1e, 0x5, 0x9, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x2}, {0x60000, 0x6000, 0xb, 0x3, 0x7, 0x9, 0xc3, 0x0, 0x0, 0xfb, 0x80, 0x2e}, {0x2, 0x2220afff, 0xc, 0xff, 0xa, 0x8, 0x6, 0x92, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0xf, 0x1a, 0x6, 0x96, 0x52, 0x6, 0x5, 0x1, 0xd, 0xa}, {0x274ce07f509efca7, 0x16000, 0x0, 0x1, 0xa, 0x59, 0x4, 0x0, 0x1c, 0x14, 0x1, 0xd}, {0x9000, 0xb000, 0xa, 0x23, 0x2, 0x3, 0x9, 0x4a, 0x7, 0x31, 0x1, 0x3}, {0x4, 0x5}, {0xffff1000, 0xfffc}, 0x10000020, 0x0, 0xeeef0000, 0x152690, 0x8, 0x0, 0xeeee0c00, [0x5, 0x1004, 0x6, 0x1003]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @pic={0x0, 0x7, 0xc, 0x2, 0xa2, 0x3, 0x1, 0x80, 0xf5, 0x8, 0xff, 0x3, 0x7, 0xc9, 0x40, 0x5}})

814.146522ms ago: executing program 1 (id=432):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000840)={[{@nobh}, {@usrquota}, {@noblock_validity}, {@noacl}], [{@euid_gt}, {@uid_gt}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @pic={0xfd, 0x9, 0x6, 0x3, 0x4, 0x8, 0x7, 0x3, 0x8, 0x2, 0x2c, 0x0, 0xc, 0x11, 0x3e}})
socket$netlink(0x10, 0x3, 0x13)

795.494263ms ago: executing program 4 (id=433):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0x4, 0xd, 0x8, 0x9, 0x7, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xe000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x20, 0x3, 0x5, 0x0, 0x2}, {0xeeee8000, 0x8000000, 0xb, 0x0, 0x4, 0x9, 0x81, 0x7, 0x10, 0xfe, 0x2, 0x72}, {0x42000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x21, 0x0, 0x0, 0x4, 0x84, 0x12}, {0xf000, 0x60000, 0x10, 0xff, 0x1, 0xc, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xdddd1000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x5, 0x7, 0x7f}, {0x40000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x8, 0xe}, {0xffff1000, 0xd000, 0xa, 0x25, 0x5, 0x8, 0x8, 0xc7, 0x9e, 0x0, 0x41, 0xd}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"d28cbffc70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281beb44357aa96da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d383c178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401ad81bb6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e81d77bd8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa90d46235ddaa03f158dd78c219be7f0c53dddd4cea58ecac6cef53e7a5b347b0842bb163bd35e19d2ed1b67e63a7e04000000000000003949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d282cb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d57e1ebcc3b6cf7d1ba20e55d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5f21ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f1fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b"})

661.727499ms ago: executing program 4 (id=434):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0xc00000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x0)

576.659423ms ago: executing program 4 (id=435):
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x80, 0xb, 0x6, "04000004", "02012000"}}, 0x0}, 0x0)
r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x458}}, {0x0, 0x0}]})
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0x3, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0)

491.819246ms ago: executing program 1 (id=438):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x0, &(0x7f0000000000)=0x6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

485.681437ms ago: executing program 8 (id=439):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
write(r0, &(0x7f0000000200)="03dfffb889ba43e1c0aee0eb6adf88a65972471b2d4a0407a43034ad714dfe95042d6b840fbf14fee80d15443597e99973320275a8d9edb1ea947cba76ceb04396462b5459b7930bbd79e2ba724b8c8de5c69de362f337dbaf3d3dc5ee5756b6afb1ec13", 0x64)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)
ppoll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000001c0)={0x4, 0x4, 0xe3, 0x2, 0x8, "dd81c57a12d3f46cf3e9dffa8a465f3359d2b2", 0x697f, 0xf})

464.808408ms ago: executing program 5 (id=441):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f4c, 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000300)={[{0x6b91, 0x6, 0x2, 0x80, 0x6, 0x6, 0xa, 0x5, 0x9, 0x9, 0x2, 0x2, 0x3eb}, {0x3, 0x1, 0x4, 0x4, 0x7f, 0x3, 0x7, 0x5, 0x8, 0x8, 0x0, 0x10, 0x5}, {0x9, 0x6, 0xd, 0x5, 0x4, 0x0, 0xf, 0x7, 0x8, 0x0, 0x0, 0x7, 0x9}], 0x2})

398.427811ms ago: executing program 1 (id=443):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x6, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d00)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000500)=ANY=[], 0x0)

397.394421ms ago: executing program 1 (id=444):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x53a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

342.265833ms ago: executing program 5 (id=446):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

282.493267ms ago: executing program 5 (id=449):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
write$input_event(r1, &(0x7f00000001c0)={{}, 0x4, 0x9, 0x3}, 0x18)

162.799442ms ago: executing program 1 (id=452):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="20185d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xb, @string={0xb, 0x3, "407f58ca437739056f"}}}, &(0x7f0000000b40)={0x1c, &(0x7f0000000100)={0x0, 0x31, 0x4d, "946574a379de1f7060f118ec89804a496f1b8155d4aac965dbf93398316f06fcc1bc6452ce650e08938d2fe89659a647de4aedee54bdd64fb4bd629d0f8971c1da3136a116f878f513dbfd98b2"}, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

121.533724ms ago: executing program 2 (id=454):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

121.296244ms ago: executing program 2 (id=455):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0xc41, 0x20)
fallocate(r0, 0x20, 0x4000, 0x3000000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0x3, 0x4)

120.438714ms ago: executing program 2 (id=456):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$OCFS2_IOC_INFO(r1, 0x80106f05, &(0x7f0000008280)={&(0x7f00000080c0)=[0x0, 0x0, 0x0, &(0x7f0000003d80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x100000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000057c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000001}, [{0x8, 0x3}, {0x80000001, 0x2}, {0x2, 0x3}, {0xa, 0x1b115835}, {0xce5f, 0x77}, {0x7fffffffffffffff, 0x3}, {0x1, 0x5}, {0x8, 0xa160}, {0x10001, 0x10000}, {0xff, 0x5}, {0x7189, 0x7}, {0x9, 0x7}, {0x400, 0xa5}, {0xa000000, 0x10}, {0x80, 0x8}, {0xfff, 0x9}, {0x7fffffffffffffff, 0x7f}, {0x4, 0x8}, {0x401, 0x1000}, {0x10000, 0x9}, {0x573, 0x6}, {0x6, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x9, 0x9}, {0x3, 0xffff}, {0x1, 0x4}, {0x10, 0x5}, {0x2, 0x2}, {0x8, 0x6}, {0xc30, 0x8}, {0xb, 0xfffffffffffff800}, {0xa22, 0x4}, {0x2, 0x7}, {0x4b87, 0xc}, {0x1, 0x100000000}, {0x9, 0x6}, {0x81, 0xd}, {0x8, 0x200}, {0x10001, 0x4}, {0x1, 0xe000000}, {0x7, 0x6}, {0x401, 0x8}, {0xb662, 0x2}, {0x9448, 0x3}, {0x8000000000000000, 0xfffffffffffffffa}, {0x80, 0x7}, {0x8, 0x7}, {0x101}, {0xa4e, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0x81}, {0xfffffffffffffffd, 0x7fffffff}, {0x80, 0x4}, {0x4, 0x996}, {0xffffffff, 0x9b}, {0x7f, 0x10001}, {0xa, 0x8000000000000000}, {0x4, 0x9}, {0x5, 0x7}, {0x3091, 0x8}, {0x8, 0x1}, {0x81, 0x200}, {0x7, 0x3f2709da}, {0x9, 0x4}, {0x8, 0x3}, {0x4, 0xffffffffffffff44}, {0xfffffffffffffff7, 0x5}, {0xffffffff, 0x2}, {0x10, 0xa1}, {0xffff, 0x10001}, {0x3, 0x1}, {0x5, 0xa}, {0x6, 0x80}, {0x8, 0xfffffffffffffffe}, {0x6, 0x4}, {0x2800000000000, 0x6}, {0xe, 0x8}, {0x9, 0x7fff}, {0x8, 0x2}, {0xfffffffffffffffb, 0x1}, {0x7f, 0xffffffffffffffbf}, {0x7f, 0x100000000}, {0x2, 0x9}, {0x36, 0x600000}, {0xe56, 0x2}, {0x3, 0xffff}, {0xff, 0x7ff}, {0x5, 0x4}, {0x7, 0x1}, {0x4, 0x8}, {0x8000000000000000, 0x4}, {0xcd2, 0x37}, {0x9, 0x3}, {0x3, 0xfffffffffffffffe}, {0x7a897fa1, 0x9}, {0x2, 0x6}, {0xffff, 0x1948d974}, {0x5, 0x2}, {0x0, 0xa}, {0x81, 0x1000}, {0x81, 0x5}, {0x2a, 0x5}, {0x7, 0x9}, {0x2, 0x4}, {0xcdd, 0xff}, {0xffffffffffffffff, 0xb6}, {0x80000001, 0x2}, {0x8000000000000000, 0x7fffffffffffffff}, {0x48000000, 0x3}, {0x7, 0x9}, {0x1000, 0xca}, {0x4010000000000}, {0xffe00000, 0x24}, {0x1, 0xba8a}, {0x9, 0x80000001}, {0x3, 0x5}, {0x3, 0x4}, {0x3, 0x2}, {0x7, 0x4b}, {0x400, 0x1}, {0xd00ca82, 0x3}, {0x4, 0x8}, {0x2, 0xe}, {0xffffffff, 0x6}, {0x3bd, 0x6000000}, {0x693, 0xfb1}, {0x9, 0xa6}, {0x7f, 0x2}, {0x8, 0xfffffffffffffd52}, {0x0, 0x5}, {0x5, 0x47}, {0x4, 0x8b6}, {0xfff, 0x100000001}, {0xfffffffffffffff8, 0x8}, {0x0, 0x3}, {0xf2f, 0x6}, {0x1d, 0x1000000000000}, {0x3, 0x6}, {0xc5, 0x7f}, {0x1, 0xffffffffffffff01}, {0x448b, 0x5}, {0x7f, 0x1}, {0x9, 0x3}, {0x9c5, 0x3}, {0xf9, 0xd647}, {0x5, 0x802}, {0x2}, {0x7, 0x24}, {0x4, 0x1ff}, {0x5, 0x2}, {0x128, 0x3}, {0xe}, {0x7, 0x3}, {0xc70, 0x7}, {0x14, 0x3}, {0x2, 0xb}, {0x5, 0x7}, {0x1, 0x4fe}, {0x0, 0x1000}, {0x7, 0x100000000}, {0xa0}, {0x9d966e5, 0x8}, {0x6, 0x7}, {0xfffffffffffffffb, 0x7}, {0x3, 0xca}, {0x8, 0x4}, {0x9, 0xa}, {0x3}, {0x7f, 0x80}, {0x7, 0x2}, {0x1, 0x348}, {0x5, 0x9}, {0x3, 0xb}, {0x5c01, 0x8000000000000001}, {0x40, 0x86}, {0x9d, 0x9}, {0x8, 0x6}, {0x3a7, 0x3}, {0x9, 0x10}, {0x9, 0x8}, {0x8, 0x2}, {0x8, 0x6}, {0x4, 0x81}, {0x2, 0xb34e}, {0x3, 0x10}, {0x6, 0xd5}, {0x80000000, 0xa}, {0x9, 0x7}, {0x1, 0x6c}, {0x3de7, 0x100000000}, {0x4}, {0x6, 0x573}, {0x2, 0x9}, {0x8, 0x1}, {0x298, 0x5}, {0x5, 0x5}, {0x1cb5, 0x2}, {0x8, 0x6}, {0x4, 0x8}, {0x1, 0x8000000000000000}, {0xa0, 0x8}, {0xff, 0x16a9}, {0x3, 0x7}, {0x0, 0x2}, {0x1ff}, {0xd, 0x675f}, {0xc, 0x10001}, {0x9}, {0x4, 0x5}, {0xffffffffffffffff, 0x1000}, {0x6, 0x4}, {0x5, 0x81}, {0xe, 0x6}, {0x1, 0x8258}, {0xf, 0x7}, {0x400, 0x3}, {0x8001, 0x5c7}, {0x4bfa, 0x6}, {0xff, 0x100000000}, {0x2, 0x8}, {0x1, 0x4c6}, {0x5, 0x4}, {0x12, 0x5}, {0x8, 0x1}, {0x101, 0x4}, {0x2, 0x7}, {0x8, 0x207}, {0x3, 0x6}, {0x3c893034, 0xffffffffffffff80}, {0x4, 0xf}, {0xc2d, 0xfffffffffffffe00}, {0x10, 0x8000000000000001}, {0x3, 0x9510}, {0x8029, 0xe}, {0x2}, {0x9, 0x80000000}, {0x7fffffffffffffff, 0x27}, {0x0, 0xffffffffffffffff}, {0x5, 0x6a42dcfa}, {0x80000001, 0x10001}, {0x5, 0x6}, {0x80000001, 0x3}, {0x9, 0x4}, {0x4, 0x1}, {0x8, 0x8000}, {0xe71f, 0x100000000}, {0x5, 0x9c2}, {0x3, 0x2}, {0x4, 0x4}, {0xa1d, 0x8001}, {0x7, 0x5}, {0x6, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

97.323085ms ago: executing program 2 (id=457):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x4000)

96.246285ms ago: executing program 2 (id=458):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

84.325216ms ago: executing program 2 (id=459):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0)

0s ago: executing program 5 (id=460):
flistxattr(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df", 0x82, 0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)

kernel console output (not intermixed with test programs):

ddr+0xc2f/0x1330
[   61.673762][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   61.679196][  T480]  ? f2fs_get_block+0x140/0x140
[   61.684021][  T480]  ? __kasan_check_read+0x11/0x20
[   61.689041][  T480]  ? memset+0x35/0x40
[   61.693011][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   61.698116][  T480]  f2fs_readdir+0x457/0x970
[   61.702619][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   61.707806][  T480]  ? __kasan_check_write+0x14/0x20
[   61.712895][  T480]  iterate_dir+0x25c/0x560
[   61.717288][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   61.722470][  T480]  __se_sys_getdents64+0xf2/0x250
[   61.727477][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   61.732650][  T480]  ? filldir+0x660/0x660
[   61.736873][  T480]  ? debug_smp_processor_id+0x17/0x20
[   61.742237][  T480]  __x64_sys_getdents64+0x7b/0x90
[   61.747242][  T480]  do_syscall_64+0x31/0x40
[   61.751638][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   61.757508][  T480] RIP: 0033:0x7ff022cedaf3
[   61.761907][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   61.781494][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   61.789889][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   61.797862][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   61.805935][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   61.813891][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   61.821848][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   61.840179][   T24] audit: type=1400 audit(1789601214.789:230): avc:  denied  { setopt } for  pid=687 comm="syz.6.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.841450][  T668] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.862244][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   61.867554][  T668] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.872932][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   61.880309][  T668] device bridge_slave_0 entered promiscuous mode
[   61.886959][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   61.886963][  T480] Call Trace:
[   61.886980][  T480]  __dump_stack+0x21/0x24
[   61.886988][  T480]  dump_stack_lvl+0x1a7/0x208
[   61.886999][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   61.887007][  T480]  ? show_regs_print_info+0x18/0x18
[   61.887016][  T480]  ? mark_page_accessed+0x334/0x6c0
[   61.887025][  T480]  dump_stack+0x15/0x1c
[   61.887032][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   61.887042][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   61.887051][  T480]  ? f2fs_get_block+0x140/0x140
[   61.887061][  T480]  ? may_link+0x3de/0x560
[   61.887072][  T480]  ? may_create+0x7c0/0x7c0
[   61.887082][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   61.887091][  T480]  f2fs_empty_dir+0xa6/0x220
[   61.887102][  T480]  f2fs_rmdir+0x3f/0x70
[   61.887111][  T480]  vfs_rmdir+0x1ab/0x3c0
[   61.887119][  T480]  do_rmdir+0x232/0x630
[   61.887142][  T480]  ? d_delete_notify+0xd0/0xd0
[   61.894397][  T668] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.903488][  T480]  ? getname_flags+0x205/0x510
[   61.903500][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   61.903510][  T480]  do_syscall_64+0x31/0x40
[   61.903520][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   61.903536][  T480] RIP: 0033:0x7ff022cc4277
[   61.907884][  T668] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.911140][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.916424][  T668] device bridge_slave_1 entered promiscuous mode
[   61.921577][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207
[   61.969126][  T668] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.970538][  T480]  ORIG_RAX: 0000000000000107
[   61.974673][  T668] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.978884][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   61.978890][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   61.978895][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   61.978901][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   61.978907][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   61.979720][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   61.983127][  T668] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.987901][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   61.994850][  T668] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.999579][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   61.999582][  T480] Call Trace:
[   61.999597][  T480]  __dump_stack+0x21/0x24
[   61.999612][  T480]  dump_stack_lvl+0x1a7/0x208
[   62.166267][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   62.172069][  T480]  ? show_regs_print_info+0x18/0x18
[   62.177255][  T480]  ? mark_page_accessed+0x334/0x6c0
[   62.182432][  T480]  dump_stack+0x15/0x1c
[   62.186566][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   62.191918][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   62.197379][  T480]  ? f2fs_get_block+0x140/0x140
[   62.202219][  T480]  ? __kasan_check_read+0x11/0x20
[   62.207232][  T480]  ? memset+0x35/0x40
[   62.211197][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   62.216294][  T480]  f2fs_readdir+0x457/0x970
[   62.220778][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   62.225954][  T480]  ? __kasan_check_write+0x14/0x20
[   62.231038][  T480]  iterate_dir+0x25c/0x560
[   62.235427][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   62.240600][  T480]  __se_sys_getdents64+0xf2/0x250
[   62.245600][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   62.250782][  T480]  ? filldir+0x660/0x660
[   62.255002][  T480]  ? debug_smp_processor_id+0x17/0x20
[   62.260349][  T480]  __x64_sys_getdents64+0x7b/0x90
[   62.265384][  T480]  do_syscall_64+0x31/0x40
[   62.269786][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   62.275740][  T480] RIP: 0033:0x7ff022cedaf3
[   62.280134][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   62.299714][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   62.308110][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   62.316058][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   62.324006][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   62.331954][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   62.339988][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   62.349536][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   62.355610][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   62.363152][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   62.373204][  T480] Call Trace:
[   62.376507][  T480]  __dump_stack+0x21/0x24
[   62.377806][  T668] device veth0_vlan entered promiscuous mode
[   62.380835][  T480]  dump_stack_lvl+0x1a7/0x208
[   62.380847][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   62.380862][  T480]  ? show_regs_print_info+0x18/0x18
[   62.392541][  T668] device veth1_macvtap entered promiscuous mode
[   62.397281][  T480]  ? mark_page_accessed+0x334/0x6c0
[   62.397291][  T480]  dump_stack+0x15/0x1c
[   62.397301][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   62.397319][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   62.428802][  T480]  ? f2fs_get_block+0x140/0x140
[   62.433721][  T480]  ? may_link+0x3de/0x560
[   62.438033][  T480]  ? may_create+0x7c0/0x7c0
[   62.442700][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   62.448055][  T480]  f2fs_empty_dir+0xa6/0x220
[   62.452640][  T480]  f2fs_rmdir+0x3f/0x70
[   62.456778][  T480]  vfs_rmdir+0x1ab/0x3c0
[   62.461173][  T480]  do_rmdir+0x232/0x630
[   62.465315][  T480]  ? d_delete_notify+0xd0/0xd0
[   62.470052][  T480]  ? getname_flags+0x205/0x510
[   62.474796][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   62.479718][  T480]  do_syscall_64+0x31/0x40
[   62.484115][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   62.490102][  T480] RIP: 0033:0x7ff022cc4277
[   62.494518][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.514110][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   62.522516][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   62.531092][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   62.539050][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   62.547139][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   62.555118][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   62.572824][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   62.579571][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   62.582580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.587739][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   62.587743][  T480] Call Trace:
[   62.587760][  T480]  __dump_stack+0x21/0x24
[   62.587767][  T480]  dump_stack_lvl+0x1a7/0x208
[   62.587778][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   62.587786][  T480]  ? show_regs_print_info+0x18/0x18
[   62.587804][  T480]  ? mark_page_accessed+0x334/0x6c0
[   62.608751][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.612668][  T480]  dump_stack+0x15/0x1c
[   62.618116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.623112][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   62.658880][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   62.664349][  T480]  ? f2fs_get_block+0x140/0x140
[   62.669181][  T480]  ? __kasan_check_read+0x11/0x20
[   62.674189][  T480]  ? memset+0x35/0x40
[   62.678152][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   62.683332][  T480]  f2fs_readdir+0x457/0x970
[   62.687835][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   62.693026][  T480]  ? __kasan_check_write+0x14/0x20
[   62.698144][  T480]  iterate_dir+0x25c/0x560
[   62.702550][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   62.707891][  T480]  __se_sys_getdents64+0xf2/0x250
[   62.712926][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   62.720097][  T480]  ? filldir+0x660/0x660
[   62.724335][  T480]  ? debug_smp_processor_id+0x17/0x20
[   62.729691][  T480]  __x64_sys_getdents64+0x7b/0x90
[   62.734696][  T480]  do_syscall_64+0x31/0x40
[   62.739092][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   62.744962][  T480] RIP: 0033:0x7ff022cedaf3
[   62.749362][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   62.769759][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   62.778607][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   62.786579][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   62.794542][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   62.802496][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   62.810445][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   62.823081][   T24] audit: type=1400 audit(1789601215.589:231): avc:  denied  { append } for  pid=698 comm="syz.3.126" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   62.823096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.854341][   T24] audit: type=1400 audit(1789601215.779:232): avc:  denied  { create } for  pid=700 comm="syz.6.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.856416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.882477][   T24] audit: type=1400 audit(1789601215.829:233): avc:  denied  { connect } for  pid=700 comm="syz.6.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.902008][   T24] audit: type=1400 audit(1789601215.829:234): avc:  denied  { getopt } for  pid=700 comm="syz.6.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.926033][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   62.927200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.932080][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   62.932085][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   62.932089][  T480] Call Trace:
[   62.932107][  T480]  __dump_stack+0x21/0x24
[   62.932115][  T480]  dump_stack_lvl+0x1a7/0x208
[   62.932125][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   62.932133][  T480]  ? show_regs_print_info+0x18/0x18
[   62.932142][  T480]  ? mark_page_accessed+0x334/0x6c0
[   62.932149][  T480]  dump_stack+0x15/0x1c
[   62.932157][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   62.932166][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   62.932174][  T480]  ? f2fs_get_block+0x140/0x140
[   62.932184][  T480]  ? may_link+0x3de/0x560
[   62.932194][  T480]  ? may_create+0x7c0/0x7c0
[   62.932204][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   62.932213][  T480]  f2fs_empty_dir+0xa6/0x220
[   62.932223][  T480]  f2fs_rmdir+0x3f/0x70
[   62.932233][  T480]  vfs_rmdir+0x1ab/0x3c0
[   62.932242][  T480]  do_rmdir+0x232/0x630
[   62.932251][  T480]  ? d_delete_notify+0xd0/0xd0
[   62.932260][  T480]  ? getname_flags+0x205/0x510
[   62.932270][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   62.932280][  T480]  do_syscall_64+0x31/0x40
[   62.932289][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   62.932297][  T480] RIP: 0033:0x7ff022cc4277
[   62.932313][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.086194][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   63.094697][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   63.102736][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   63.111379][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   63.119415][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   63.127453][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   63.135778][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   63.141113][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.144362][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   63.150049][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.156928][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   63.156932][  T480] Call Trace:
[   63.156948][  T480]  __dump_stack+0x21/0x24
[   63.156957][  T480]  dump_stack_lvl+0x1a7/0x208
[   63.156968][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   63.156976][  T480]  ? show_regs_print_info+0x18/0x18
[   63.156985][  T480]  ? mark_page_accessed+0x334/0x6c0
[   63.156994][  T480]  dump_stack+0x15/0x1c
[   63.157002][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   63.157013][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   63.157021][  T480]  ? f2fs_get_block+0x140/0x140
[   63.157039][  T480]  ? __kasan_check_read+0x11/0x20
[   63.165453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.175129][  T480]  ? memset+0x35/0x40
[   63.175147][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   63.178811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.182720][  T480]  f2fs_readdir+0x457/0x970
[   63.182736][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   63.187638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.193174][  T480]  ? __kasan_check_write+0x14/0x20
[   63.193189][  T480]  iterate_dir+0x25c/0x560
[   63.199232][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.203559][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   63.203575][  T480]  __se_sys_getdents64+0xf2/0x250
[   63.296746][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   63.301921][  T480]  ? filldir+0x660/0x660
[   63.306166][  T480]  ? debug_smp_processor_id+0x17/0x20
[   63.311515][  T480]  __x64_sys_getdents64+0x7b/0x90
[   63.316519][  T480]  do_syscall_64+0x31/0x40
[   63.320947][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   63.326838][  T480] RIP: 0033:0x7ff022cedaf3
[   63.331239][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   63.350822][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   63.359215][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   63.367162][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   63.375110][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   63.383058][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   63.391009][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   63.402788][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   63.405571][  T713] device syzkaller0 entered promiscuous mode
[   63.409148][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   63.422190][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   63.432238][  T480] Call Trace:
[   63.435512][  T480]  __dump_stack+0x21/0x24
[   63.439853][  T480]  dump_stack_lvl+0x1a7/0x208
[   63.444522][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   63.450308][  T480]  ? show_regs_print_info+0x18/0x18
[   63.455485][  T480]  ? mark_page_accessed+0x334/0x6c0
[   63.460656][  T480]  dump_stack+0x15/0x1c
[   63.464785][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   63.470140][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   63.475575][  T480]  ? f2fs_get_block+0x140/0x140
[   63.480397][  T480]  ? may_link+0x3de/0x560
[   63.484699][  T480]  ? may_create+0x7c0/0x7c0
[   63.489179][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   63.494613][  T480]  f2fs_empty_dir+0xa6/0x220
[   63.499182][  T480]  f2fs_rmdir+0x3f/0x70
[   63.503312][  T480]  vfs_rmdir+0x1ab/0x3c0
[   63.507532][  T480]  do_rmdir+0x232/0x630
[   63.511667][  T480]  ? d_delete_notify+0xd0/0xd0
[   63.516407][  T480]  ? getname_flags+0x205/0x510
[   63.521149][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   63.525973][  T480]  do_syscall_64+0x31/0x40
[   63.530365][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   63.536241][  T480] RIP: 0033:0x7ff022cc4277
[   63.540632][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.560212][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   63.568602][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   63.576548][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   63.584497][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   63.592476][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   63.600425][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   63.628440][   T24] audit: type=1400 audit(1789601216.579:235): avc:  denied  { read write } for  pid=714 comm="syz.7.117" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   63.642924][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   63.657362][  T715] input: syz0 as /devices/virtual/input/input7
[   63.664616][   T24] audit: type=1400 audit(1789601216.609:236): avc:  denied  { open } for  pid=714 comm="syz.7.117" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   63.675332][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   63.695293][   T24] audit: type=1400 audit(1789601216.609:237): avc:  denied  { ioctl } for  pid=714 comm="syz.7.117" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   63.695400][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   63.695403][  T480] Call Trace:
[   63.695417][  T480]  __dump_stack+0x21/0x24
[   63.695425][  T480]  dump_stack_lvl+0x1a7/0x208
[   63.695436][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   63.695444][  T480]  ? show_regs_print_info+0x18/0x18
[   63.695454][  T480]  ? mark_page_accessed+0x334/0x6c0
[   63.695462][  T480]  dump_stack+0x15/0x1c
[   63.695469][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   63.695478][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   63.695486][  T480]  ? f2fs_get_block+0x140/0x140
[   63.695498][  T480]  ? __kasan_check_read+0x11/0x20
[   63.695506][  T480]  ? memset+0x35/0x40
[   63.695528][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   63.792699][  T480]  f2fs_readdir+0x457/0x970
[   63.797198][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   63.802378][  T480]  ? __kasan_check_write+0x14/0x20
[   63.807476][  T480]  iterate_dir+0x25c/0x560
[   63.811872][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   63.817053][  T480]  __se_sys_getdents64+0xf2/0x250
[   63.822078][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   63.827256][  T480]  ? filldir+0x660/0x660
[   63.831480][  T480]  ? debug_smp_processor_id+0x17/0x20
[   63.836836][  T480]  __x64_sys_getdents64+0x7b/0x90
[   63.841840][  T480]  do_syscall_64+0x31/0x40
[   63.846251][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   63.852126][  T480] RIP: 0033:0x7ff022cedaf3
[   63.856549][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   63.876221][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   63.884640][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   63.892590][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   63.900541][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   63.908527][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   63.916477][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   63.925115][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   63.951942][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   63.954162][  T724] netlink: 'syz.6.135': attribute type 1 has an invalid length.
[   63.959643][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   63.959647][  T480] Call Trace:
[   63.959666][  T480]  __dump_stack+0x21/0x24
[   63.959673][  T480]  dump_stack_lvl+0x1a7/0x208
[   63.959686][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   63.959694][  T480]  ? show_regs_print_info+0x18/0x18
[   63.959704][  T480]  ? mark_page_accessed+0x334/0x6c0
[   63.959713][  T480]  dump_stack+0x15/0x1c
[   63.959722][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   63.959733][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   63.959743][  T480]  ? f2fs_get_block+0x140/0x140
[   63.959753][  T480]  ? may_link+0x3de/0x560
[   63.959763][  T480]  ? may_create+0x7c0/0x7c0
[   63.959774][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   63.959784][  T480]  f2fs_empty_dir+0xa6/0x220
[   63.959795][  T480]  f2fs_rmdir+0x3f/0x70
[   63.959811][  T480]  vfs_rmdir+0x1ab/0x3c0
[   63.959821][  T480]  do_rmdir+0x232/0x630
[   63.959832][  T480]  ? d_delete_notify+0xd0/0xd0
[   63.959842][  T480]  ? getname_flags+0x205/0x510
[   63.959853][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   63.959864][  T480]  do_syscall_64+0x31/0x40
[   63.959875][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   63.959884][  T480] RIP: 0033:0x7ff022cc4277
[   63.959895][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.959902][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   63.959936][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   63.959943][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   63.959950][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   63.959957][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   63.959964][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   63.960299][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   64.162821][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   64.170269][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   64.180390][  T480] Call Trace:
[   64.183665][  T480]  __dump_stack+0x21/0x24
[   64.187970][  T480]  dump_stack_lvl+0x1a7/0x208
[   64.192638][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   64.198417][  T480]  ? show_regs_print_info+0x18/0x18
[   64.203590][  T480]  ? mark_page_accessed+0x334/0x6c0
[   64.208759][  T480]  dump_stack+0x15/0x1c
[   64.212909][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   64.218257][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   64.223698][  T480]  ? f2fs_get_block+0x140/0x140
[   64.228544][  T480]  ? __kasan_check_read+0x11/0x20
[   64.233547][  T480]  ? memset+0x35/0x40
[   64.237510][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   64.242599][  T480]  f2fs_readdir+0x457/0x970
[   64.247090][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   64.252265][  T480]  ? __kasan_check_write+0x14/0x20
[   64.257440][  T480]  iterate_dir+0x25c/0x560
[   64.261831][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   64.267003][  T480]  __se_sys_getdents64+0xf2/0x250
[   64.272001][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   64.277173][  T480]  ? filldir+0x660/0x660
[   64.281395][  T480]  ? debug_smp_processor_id+0x17/0x20
[   64.286830][  T480]  __x64_sys_getdents64+0x7b/0x90
[   64.291833][  T480]  do_syscall_64+0x31/0x40
[   64.296228][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   64.302094][  T480] RIP: 0033:0x7ff022cedaf3
[   64.306487][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   64.326098][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   64.334508][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   64.342471][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   64.350428][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   64.358380][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   64.366329][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   64.377321][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   64.384546][  T721] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   64.395466][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   64.403967][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   64.414016][  T480] Call Trace:
[   64.417304][  T480]  __dump_stack+0x21/0x24
[   64.421638][  T480]  dump_stack_lvl+0x1a7/0x208
[   64.422970][  T721] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 2: comm syz.1.134: lblock 2 mapped to illegal pblock 2 (length 1)
[   64.426309][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   64.426319][  T480]  ? show_regs_print_info+0x18/0x18
[   64.426329][  T480]  ? mark_page_accessed+0x334/0x6c0
[   64.426337][  T480]  dump_stack+0x15/0x1c
[   64.426354][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   64.440732][  T721] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.134: Invalid inode table block 1 in block_group 0
[   64.445926][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   64.445936][  T480]  ? f2fs_get_block+0x140/0x140
[   64.445946][  T480]  ? may_link+0x3de/0x560
[   64.445954][  T480]  ? may_create+0x7c0/0x7c0
[   64.445963][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   64.445972][  T480]  f2fs_empty_dir+0xa6/0x220
[   64.445982][  T480]  f2fs_rmdir+0x3f/0x70
[   64.445992][  T480]  vfs_rmdir+0x1ab/0x3c0
[   64.446001][  T480]  do_rmdir+0x232/0x630
[   64.446011][  T480]  ? d_delete_notify+0xd0/0xd0
[   64.446019][  T480]  ? getname_flags+0x205/0x510
[   64.446027][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   64.446038][  T480]  do_syscall_64+0x31/0x40
[   64.446048][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   64.446057][  T480] RIP: 0033:0x7ff022cc4277
[   64.446069][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.446075][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   64.446087][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   64.446093][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   64.446099][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   64.446105][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   64.446112][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   64.446520][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   64.479074][  T721] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   64.500818][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   64.504574][  T721] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #3: comm syz.1.134: mark_inode_dirty error
[   64.508036][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   64.508040][  T480] Call Trace:
[   64.508054][  T480]  __dump_stack+0x21/0x24
[   64.508062][  T480]  dump_stack_lvl+0x1a7/0x208
[   64.508073][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   64.508080][  T480]  ? show_regs_print_info+0x18/0x18
[   64.508089][  T480]  ? mark_page_accessed+0x334/0x6c0
[   64.508097][  T480]  dump_stack+0x15/0x1c
[   64.508105][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   64.508114][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   64.508122][  T480]  ? f2fs_get_block+0x140/0x140
[   64.508133][  T480]  ? __kasan_check_read+0x11/0x20
[   64.508142][  T480]  ? memset+0x35/0x40
[   64.508151][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   64.508160][  T480]  f2fs_readdir+0x457/0x970
[   64.508171][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   64.508181][  T480]  ? __kasan_check_write+0x14/0x20
[   64.508190][  T480]  iterate_dir+0x25c/0x560
[   64.508199][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   64.508207][  T480]  __se_sys_getdents64+0xf2/0x250
[   64.508216][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   64.508223][  T480]  ? filldir+0x660/0x660
[   64.508241][  T480]  ? debug_smp_processor_id+0x17/0x20
[   64.513474][  T721] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.134: Failed to acquire dquot type 0
[   64.516592][  T480]  __x64_sys_getdents64+0x7b/0x90
[   64.516609][  T480]  do_syscall_64+0x31/0x40
[   64.516619][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   64.516634][  T480] RIP: 0033:0x7ff022cedaf3
[   64.521092][  T721] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   64.525501][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   64.525507][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   64.525526][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   64.530555][  T721] EXT4-fs error (device loop1): ext4_evict_inode:285: inode #11: comm syz.1.134: mark_inode_dirty error
[   64.535089][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   64.535096][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   64.535102][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   64.535109][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   64.541095][  T730] bridge0: port 3(vlan2) entered blocking state
[   64.546468][  T721] EXT4-fs warning (device loop1): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[   64.554189][  T730] bridge0: port 3(vlan2) entered disabled state
[   64.569898][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   64.583840][  T721] EXT4-fs (loop1): 1 orphan inode deleted
[   64.586485][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   64.604895][    T9] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   64.610179][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   64.610182][  T480] Call Trace:
[   64.610197][  T480]  __dump_stack+0x21/0x24
[   64.610205][  T480]  dump_stack_lvl+0x1a7/0x208
[   64.610217][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   64.610226][  T480]  ? show_regs_print_info+0x18/0x18
[   64.610236][  T480]  ? mark_page_accessed+0x334/0x6c0
[   64.610246][  T480]  dump_stack+0x15/0x1c
[   64.610254][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   64.610265][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   64.610276][  T480]  ? f2fs_get_block+0x140/0x140
[   64.610286][  T480]  ? may_link+0x3de/0x560
[   64.610296][  T480]  ? may_create+0x7c0/0x7c0
[   64.610312][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   64.646618][  T721] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000008c9,inlinecrypt,dioread_nolock,,errors=continue
[   64.652006][  T480]  f2fs_empty_dir+0xa6/0x220
[   64.666128][  T730] device vlan2 entered promiscuous mode
[   64.669624][  T480]  f2fs_rmdir+0x3f/0x70
[   64.669636][  T480]  vfs_rmdir+0x1ab/0x3c0
[   64.669653][  T480]  do_rmdir+0x232/0x630
[   64.715907][    T9] __quota_error: 5 callbacks suppressed
[   64.715917][    T9] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   64.719156][  T480]  ? d_delete_notify+0xd0/0xd0
[   64.719166][  T480]  ? getname_flags+0x205/0x510
[   64.719177][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   64.719189][  T480]  do_syscall_64+0x31/0x40
[   64.719198][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   64.719213][  T480] RIP: 0033:0x7ff022cc4277
[   64.724329][    T9] EXT4-fs error (device loop1): ext4_release_dquot:6266: comm kworker/u4:1: Failed to release dquot type 0
[   64.728780][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.728786][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   64.728797][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   64.728802][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   64.728808][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   64.728814][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   64.728820][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   64.934143][   T24] audit: type=1400 audit(1789601217.889:241): avc:  denied  { remount } for  pid=720 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   64.963090][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   64.970027][  T721] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option
[   64.978758][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   65.015441][  T721] EXT4-fs (loop1): Cannot change journaled quota options when quota turned on
[   65.017797][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   65.017800][  T480] Call Trace:
[   65.017817][  T480]  __dump_stack+0x21/0x24
[   65.017834][  T480]  dump_stack_lvl+0x1a7/0x208
[   65.253969][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   65.259767][  T480]  ? show_regs_print_info+0x18/0x18
[   65.264958][  T480]  ? mark_page_accessed+0x334/0x6c0
[   65.270152][  T480]  dump_stack+0x15/0x1c
[   65.274299][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   65.279670][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   65.285127][  T480]  ? f2fs_get_block+0x140/0x140
[   65.289974][  T480]  ? __kasan_check_read+0x11/0x20
[   65.294995][  T480]  ? memset+0x35/0x40
[   65.298974][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   65.304082][  T480]  f2fs_readdir+0x457/0x970
[   65.308582][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   65.313773][  T480]  ? __kasan_check_write+0x14/0x20
[   65.318871][  T480]  iterate_dir+0x25c/0x560
[   65.323278][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   65.328470][  T480]  __se_sys_getdents64+0xf2/0x250
[   65.333484][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   65.338672][  T480]  ? filldir+0x660/0x660
[   65.342914][  T480]  ? debug_smp_processor_id+0x17/0x20
[   65.348279][  T480]  __x64_sys_getdents64+0x7b/0x90
[   65.353294][  T480]  do_syscall_64+0x31/0x40
[   65.357707][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   65.363768][  T480] RIP: 0033:0x7ff022cedaf3
[   65.368177][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   65.387777][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   65.396187][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   65.404154][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   65.412121][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   65.420083][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   65.428047][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   65.443232][   T24] audit: type=1400 audit(1789601218.389:242): avc:  denied  { write } for  pid=742 comm="syz.6.141" name="file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   65.487759][  T280] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0
[   65.516083][   T24] audit: type=1400 audit(1789601218.389:243): avc:  denied  { open } for  pid=742 comm="syz.6.141" path="/6/file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   65.545889][  T280] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   65.570746][  T280] EXT4-fs error (device loop1): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error
[   65.615566][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   65.621588][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   65.629038][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   65.639099][  T480] Call Trace:
[   65.642392][  T480]  __dump_stack+0x21/0x24
[   65.646726][  T480]  dump_stack_lvl+0x1a7/0x208
[   65.651402][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   65.657203][  T480]  ? show_regs_print_info+0x18/0x18
[   65.662391][  T480]  ? mark_page_accessed+0x334/0x6c0
[   65.667585][  T480]  dump_stack+0x15/0x1c
[   65.671736][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   65.677102][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   65.682553][  T480]  ? f2fs_get_block+0x140/0x140
[   65.687660][  T480]  ? may_link+0x3de/0x560
[   65.691983][  T480]  ? may_create+0x7c0/0x7c0
[   65.696477][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   65.701908][  T480]  f2fs_empty_dir+0xa6/0x220
[   65.706500][  T480]  f2fs_rmdir+0x3f/0x70
[   65.711338][  T480]  vfs_rmdir+0x1ab/0x3c0
[   65.715570][  T480]  do_rmdir+0x232/0x630
[   65.719716][  T480]  ? d_delete_notify+0xd0/0xd0
[   65.724521][  T480]  ? getname_flags+0x205/0x510
[   65.729290][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   65.734141][  T480]  do_syscall_64+0x31/0x40
[   65.738575][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   65.744461][  T480] RIP: 0033:0x7ff022cc4277
[   65.748876][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.768484][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   65.776897][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   65.784864][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   65.792835][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   65.800802][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   65.808773][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   65.818544][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   65.824545][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   65.831987][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   65.842035][  T480] Call Trace:
[   65.845327][  T480]  __dump_stack+0x21/0x24
[   65.849655][  T480]  dump_stack_lvl+0x1a7/0x208
[   65.854331][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   65.860146][  T480]  ? show_regs_print_info+0x18/0x18
[   65.865350][  T480]  ? mark_page_accessed+0x334/0x6c0
[   65.870545][  T480]  dump_stack+0x15/0x1c
[   65.874702][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   65.880079][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   65.885533][  T480]  ? f2fs_get_block+0x140/0x140
[   65.890375][  T480]  ? __kasan_check_read+0x11/0x20
[   65.895402][  T480]  ? memset+0x35/0x40
[   65.899379][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   65.904494][  T480]  f2fs_readdir+0x457/0x970
[   65.913032][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   65.918942][  T480]  ? __kasan_check_write+0x14/0x20
[   65.924493][  T480]  iterate_dir+0x25c/0x560
[   65.930398][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   65.935592][  T480]  __se_sys_getdents64+0xf2/0x250
[   65.940619][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   65.945811][  T480]  ? filldir+0x660/0x660
[   65.950047][  T480]  ? debug_smp_processor_id+0x17/0x20
[   65.955415][  T480]  __x64_sys_getdents64+0x7b/0x90
[   65.960436][  T480]  do_syscall_64+0x31/0x40
[   65.964844][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   65.970727][  T480] RIP: 0033:0x7ff022cedaf3
[   65.975145][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   65.994748][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   66.003154][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   66.011121][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   66.019106][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   66.027068][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   66.035066][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   66.045692][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   66.051732][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   66.059225][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   66.069282][  T480] Call Trace:
[   66.072574][  T480]  __dump_stack+0x21/0x24
[   66.076910][  T480]  dump_stack_lvl+0x1a7/0x208
[   66.081593][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   66.087395][  T480]  ? show_regs_print_info+0x18/0x18
[   66.092597][  T480]  ? mark_page_accessed+0x334/0x6c0
[   66.097795][  T480]  dump_stack+0x15/0x1c
[   66.101950][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   66.107316][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   66.112770][  T480]  ? f2fs_get_block+0x140/0x140
[   66.117613][  T480]  ? may_link+0x3de/0x560
[   66.121935][  T480]  ? may_create+0x7c0/0x7c0
[   66.126437][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   66.131807][  T480]  f2fs_empty_dir+0xa6/0x220
[   66.136401][  T480]  f2fs_rmdir+0x3f/0x70
[   66.140553][  T480]  vfs_rmdir+0x1ab/0x3c0
[   66.144788][  T480]  do_rmdir+0x232/0x630
[   66.148942][  T480]  ? d_delete_notify+0xd0/0xd0
[   66.153697][  T480]  ? getname_flags+0x205/0x510
[   66.158540][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   66.163396][  T480]  do_syscall_64+0x31/0x40
[   66.167813][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   66.173792][  T480] RIP: 0033:0x7ff022cc4277
[   66.178207][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.197808][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   66.206220][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   66.214186][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   66.215451][   T24] audit: type=1400 audit(1789601219.129:244): avc:  denied  { setopt } for  pid=754 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   66.222146][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   66.222153][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   66.222159][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   66.335905][   T24] audit: type=1400 audit(1789601219.259:245): avc:  denied  { write } for  pid=760 comm="syz.6.148" name="usb_gadget" dev="configfs" ino=12832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   66.359592][   T24] audit: type=1400 audit(1789601219.259:246): avc:  denied  { add_name } for  pid=760 comm="syz.6.148" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   66.389693][   T24] audit: type=1400 audit(1789601219.259:247): avc:  denied  { create } for  pid=760 comm="syz.6.148" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   66.428491][   T24] audit: type=1400 audit(1789601219.259:248): avc:  denied  { write } for  pid=760 comm="syz.6.148" name="UDC" dev="configfs" ino=18259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   66.470916][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   66.479261][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   66.481112][  T772] netlink: 'syz.6.152': attribute type 3 has an invalid length.
[   66.486733][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   66.486737][  T480] Call Trace:
[   66.486755][  T480]  __dump_stack+0x21/0x24
[   66.486762][  T480]  dump_stack_lvl+0x1a7/0x208
[   66.486774][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   66.486781][  T480]  ? show_regs_print_info+0x18/0x18
[   66.486791][  T480]  ? mark_page_accessed+0x334/0x6c0
[   66.486799][  T480]  dump_stack+0x15/0x1c
[   66.486816][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   66.504645][  T772] netlink: 'syz.6.152': attribute type 3 has an invalid length.
[   66.507824][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   66.507834][  T480]  ? f2fs_get_block+0x140/0x140
[   66.507845][  T480]  ? __kasan_check_read+0x11/0x20
[   66.507854][  T480]  ? memset+0x35/0x40
[   66.507862][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   66.507872][  T480]  f2fs_readdir+0x457/0x970
[   66.507883][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   66.507893][  T480]  ? __kasan_check_write+0x14/0x20
[   66.507901][  T480]  iterate_dir+0x25c/0x560
[   66.507916][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   66.507927][  T480]  __se_sys_getdents64+0xf2/0x250
[   66.507935][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   66.507942][  T480]  ? filldir+0x660/0x660
[   66.507955][  T480]  ? debug_smp_processor_id+0x17/0x20
[   66.507963][  T480]  __x64_sys_getdents64+0x7b/0x90
[   66.507979][  T480]  do_syscall_64+0x31/0x40
[   66.606848][   T24] audit: type=1400 audit(1789601219.259:249): avc:  denied  { open } for  pid=760 comm="syz.6.148" path="/9/config/usb_gadget/g1/UDC" dev="configfs" ino=18259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   66.609256][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   66.609272][  T480] RIP: 0033:0x7ff022cedaf3
[   66.663275][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   66.683706][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   66.692122][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   66.700095][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   66.708070][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   66.716041][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   66.724007][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   66.736070][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   66.757406][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   66.764898][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   66.774959][  T480] Call Trace:
[   66.778364][  T480]  __dump_stack+0x21/0x24
[   66.782699][  T480]  dump_stack_lvl+0x1a7/0x208
[   66.787823][  T480]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[   66.793449][  T480]  ? show_regs_print_info+0x18/0x18
[   66.798641][  T480]  dump_stack+0x15/0x1c
[   66.802796][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   66.808163][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   66.813629][  T480]  ? f2fs_get_block+0x140/0x140
[   66.818482][  T480]  ? may_link+0x3de/0x560
[   66.822808][  T480]  ? may_create+0x7c0/0x7c0
[   66.827354][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   66.832751][  T480]  f2fs_empty_dir+0xa6/0x220
[   66.837351][  T480]  f2fs_rmdir+0x3f/0x70
[   66.841529][  T480]  vfs_rmdir+0x1ab/0x3c0
[   66.845870][  T480]  do_rmdir+0x232/0x630
[   66.850030][  T480]  ? d_delete_notify+0xd0/0xd0
[   66.854807][  T480]  ? getname_flags+0x205/0x510
[   66.859588][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   66.864527][  T480]  do_syscall_64+0x31/0x40
[   66.868954][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   66.874838][  T480] RIP: 0033:0x7ff022cc4277
[   66.879246][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.898945][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   66.907452][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   66.915425][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   66.923392][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   66.931452][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   66.939893][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   66.949382][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   66.955452][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   66.962898][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   66.972953][  T480] Call Trace:
[   66.976251][  T480]  __dump_stack+0x21/0x24
[   66.981284][  T480]  dump_stack_lvl+0x1a7/0x208
[   66.985965][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   66.991774][  T480]  ? show_regs_print_info+0x18/0x18
[   66.996976][  T480]  ? mark_page_accessed+0x334/0x6c0
[   67.002170][  T480]  dump_stack+0x15/0x1c
[   67.006321][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   67.011685][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   67.017224][  T480]  ? f2fs_get_block+0x140/0x140
[   67.022070][  T480]  ? __kasan_check_read+0x11/0x20
[   67.027082][  T480]  ? memset+0x35/0x40
[   67.031060][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   67.036165][  T480]  f2fs_readdir+0x457/0x970
[   67.040662][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   67.045860][  T480]  ? __kasan_check_write+0x14/0x20
[   67.050971][  T480]  iterate_dir+0x25c/0x560
[   67.055376][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   67.060562][  T480]  __se_sys_getdents64+0xf2/0x250
[   67.065577][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   67.070766][  T480]  ? filldir+0x660/0x660
[   67.075018][  T480]  ? debug_smp_processor_id+0x17/0x20
[   67.080385][  T480]  __x64_sys_getdents64+0x7b/0x90
[   67.085396][  T480]  do_syscall_64+0x31/0x40
[   67.089811][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   67.095695][  T480] RIP: 0033:0x7ff022cedaf3
[   67.100105][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   67.119711][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   67.128121][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   67.136089][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   67.144055][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   67.152021][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   67.159995][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   67.173120][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   67.195601][  T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   67.203094][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   67.213147][  T480] Call Trace:
[   67.216435][  T480]  __dump_stack+0x21/0x24
[   67.220771][  T480]  dump_stack_lvl+0x1a7/0x208
[   67.225450][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   67.231249][  T480]  ? show_regs_print_info+0x18/0x18
[   67.236466][  T480]  ? mark_page_accessed+0x334/0x6c0
[   67.241643][  T480]  dump_stack+0x15/0x1c
[   67.245800][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   67.251152][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   67.256590][  T480]  ? f2fs_get_block+0x140/0x140
[   67.261425][  T480]  ? may_link+0x3de/0x560
[   67.265729][  T480]  ? may_create+0x7c0/0x7c0
[   67.270214][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   67.275561][  T480]  f2fs_empty_dir+0xa6/0x220
[   67.280135][  T480]  f2fs_rmdir+0x3f/0x70
[   67.284267][  T480]  vfs_rmdir+0x1ab/0x3c0
[   67.288488][  T480]  do_rmdir+0x232/0x630
[   67.292708][  T480]  ? d_delete_notify+0xd0/0xd0
[   67.297447][  T480]  ? getname_flags+0x205/0x510
[   67.302273][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   67.307099][  T480]  do_syscall_64+0x31/0x40
[   67.311499][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   67.317366][  T480] RIP: 0033:0x7ff022cc4277
[   67.321763][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.341618][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   67.350009][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   67.357960][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   67.365911][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   67.373878][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   67.382003][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   67.391364][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   67.397935][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   67.405390][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   67.415435][  T480] Call Trace:
[   67.418729][  T480]  __dump_stack+0x21/0x24
[   67.423048][  T480]  dump_stack_lvl+0x1a7/0x208
[   67.427719][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   67.433511][  T480]  ? show_regs_print_info+0x18/0x18
[   67.438722][  T480]  ? mark_page_accessed+0x334/0x6c0
[   67.443907][  T480]  dump_stack+0x15/0x1c
[   67.448056][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   67.453423][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   67.458870][  T480]  ? f2fs_get_block+0x140/0x140
[   67.463713][  T480]  ? __kasan_check_read+0x11/0x20
[   67.468736][  T480]  ? memset+0x35/0x40
[   67.472719][  T480]  f2fs_find_data_page+0x18f/0x3f0
[   67.477828][  T480]  f2fs_readdir+0x457/0x970
[   67.482333][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   67.487534][  T480]  ? __kasan_check_write+0x14/0x20
[   67.492670][  T480]  iterate_dir+0x25c/0x560
[   67.497082][  T480]  ? f2fs_fill_dentries+0xc90/0xc90
[   67.502281][  T480]  __se_sys_getdents64+0xf2/0x250
[   67.507304][  T480]  ? __x64_sys_getdents64+0x90/0x90
[   67.512506][  T480]  ? filldir+0x660/0x660
[   67.516756][  T480]  ? debug_smp_processor_id+0x17/0x20
[   67.522125][  T480]  __x64_sys_getdents64+0x7b/0x90
[   67.527193][  T480]  do_syscall_64+0x31/0x40
[   67.531618][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   67.537507][  T480] RIP: 0033:0x7ff022cedaf3
[   67.541922][  T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   67.561526][  T480] RSP: 002b:00007ffeefe99328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   67.569949][  T480] RAX: ffffffffffffffda RBX: 000055556b384950 RCX: 00007ff022cedaf3
[   67.577920][  T480] RDX: 0000000000008000 RSI: 000055556b384980 RDI: 0000000000000006
[   67.585878][  T480] RBP: 000055556b384980 R08: 00007ff022f19e20 R09: 0000000000000001
[   67.593829][  T480] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556b384954
[   67.601782][  T480] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffeefe9c6c0
[   67.611326][  T480] F2FS-fs (loop5): access invalid blkaddr:36
[   67.622498][  T783] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   67.636303][  T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0
[   67.640466][  T783] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.643776][  T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   67.643780][  T480] Call Trace:
[   67.643797][  T480]  __dump_stack+0x21/0x24
[   67.643814][  T480]  dump_stack_lvl+0x1a7/0x208
[   67.668723][  T783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   67.669213][  T480]  ? f2fs_get_next_page_offset+0x760/0x760
[   67.673551][  T783] System zones: 
[   67.678177][  T480]  ? show_regs_print_info+0x18/0x18
[   67.678188][  T480]  ? mark_page_accessed+0x334/0x6c0
[   67.678196][  T480]  dump_stack+0x15/0x1c
[   67.678206][  T480]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   67.678215][  T480]  f2fs_get_read_data_page+0x417/0x7a0
[   67.678239][  T480]  ? f2fs_get_block+0x140/0x140
[   67.686695][  T783] 0-1
[   67.692075][  T480]  ? may_link+0x3de/0x560
[   67.695904][  T783] , 3-36
[   67.700819][  T480]  ? may_create+0x7c0/0x7c0
[   67.700838][  T480]  f2fs_get_lock_data_page+0x59/0x230
[   67.706194][  T783] 
[   67.710144][  T480]  f2fs_empty_dir+0xa6/0x220
[   67.716405][  T783] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue
[   67.720937][  T480]  f2fs_rmdir+0x3f/0x70
[   67.773412][  T480]  vfs_rmdir+0x1ab/0x3c0
[   67.777669][  T480]  do_rmdir+0x232/0x630
[   67.781832][  T480]  ? d_delete_notify+0xd0/0xd0
[   67.786615][  T480]  ? getname_flags+0x205/0x510
[   67.791386][  T480]  __x64_sys_unlinkat+0xc7/0xf0
[   67.796255][  T480]  do_syscall_64+0x31/0x40
[   67.799802][  T792] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.800671][  T480]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   67.807860][  T792] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.814112][  T480] RIP: 0033:0x7ff022cc4277
[   67.821949][  T792] device bridge_slave_0 entered promiscuous mode
[   67.825642][  T480] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.825648][  T480] RSP: 002b:00007ffeefe99358 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   67.825667][  T480] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff022cc4277
[   67.832861][  T792] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.851645][  T480] RDX: 0000000000000200 RSI: 00007ffeefe9a500 RDI: 00000000ffffff9c
[   67.851651][  T480] RBP: 00007ff022d5b4bb R08: 0000000000018680 R09: 0000000000000001
[   67.851657][  T480] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffeefe9a500
[   67.851662][  T480] R13: 00007ff022d5b4bb R14: 000055556b3614e8 R15: 00007ffeefe9c6c0
[   67.925488][  T781] F2FS-fs (loop6): Invalid log blocks per segment (1)
[   67.932300][  T781] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   67.940296][  T792] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.948239][  T792] device bridge_slave_1 entered promiscuous mode
[   67.955072][  T781] F2FS-fs (loop6): fault_type options not supported
[   67.961904][  T781] F2FS-fs (loop6): fault_injection options not supported
[   67.969763][  T781] F2FS-fs (loop6): invalid crc value
[   68.020588][  T792] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.027686][  T792] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.034942][  T792] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.042014][  T792] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.051039][  T799] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[   68.061187][  T781] F2FS-fs (loop6): Found nat_bits in checkpoint
[   68.079944][    T7] device bridge_slave_1 left promiscuous mode
[   68.086293][  T799] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   68.086545][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.103922][    T7] device bridge_slave_0 left promiscuous mode
[   68.110815][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.118843][    T7] device veth1_macvtap left promiscuous mode
[   68.124873][    T7] device veth0_vlan left promiscuous mode
[   68.159581][  T799] syz.7.162 (pid 799) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   68.195644][  T781] F2FS-fs (loop6): Start checkpoint disabled!
[   68.225890][  T697] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.233478][  T781] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   68.235656][  T697] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.249610][  T781] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   68.259126][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.267006][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.277726][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.286107][  T697] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.293146][  T697] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.318995][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.352904][  T697] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.360011][  T697] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.397829][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.415694][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.440602][  T792] device veth0_vlan entered promiscuous mode
[   68.461079][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.480380][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.504036][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.522010][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.548395][  T792] device veth1_macvtap entered promiscuous mode
[   68.555313][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.587071][  T827] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   68.587140][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.603710][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.643503][  T827] EXT4-fs (loop3): orphan cleanup on readonly fs
[   68.698315][  T827] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.169: bg 0: block 10: padding at end of block bitmap is not set
[   68.748349][  T835] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[   68.755874][  T827] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.169: Failed to acquire dquot type 0
[   68.789558][  T835] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[   68.809920][  T827] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.169: Failed to acquire dquot type 0
[   68.852365][  T827] EXT4-fs error (device loop3): ext4_free_blocks:5690: comm syz.3.169: Freeing blocks not in datazone - block = 0, count = 4096
[   68.880468][  T835] EXT4-fs (loop8): 1 truncate cleaned up
[   68.886317][  T835] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue
[   68.926256][  T827] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.169: Failed to acquire dquot type 0
[   68.978628][  T827] EXT4-fs (loop3): 1 orphan inode deleted
[   69.008885][  T827] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   69.045563][  T792] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   69.111803][  T792] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[   69.126155][  T827] EXT4-fs error (device loop3): ext4_get_group_desc:277: comm syz.3.169: block_group >= groups_count - block_group = 1, groups_count = 1
[   69.144675][  T792] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[   69.171938][  T827] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4571: inode #40: comm syz.3.169: unable to read itable block
[   69.223317][  T781] attempt to access beyond end of device
[   69.223317][  T781] loop6: rw=2049, want=45104, limit=40427
[   69.245359][  T781] attempt to access beyond end of device
[   69.245359][  T781] loop6: rw=0, want=45104, limit=40427
[   69.307962][    T9] attempt to access beyond end of device
[   69.307962][    T9] loop6: rw=2049, want=40984, limit=40427
[   69.325101][  T844] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   69.376115][  T850] exfat: Bad value for 'uid'
[   69.386990][  T844] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.174: bad orphan inode 13
[   69.416622][  T844] ext4_test_bit(bit=12, block=18) = 1
[   69.441248][  T844] is_bad_inode(inode)=0
[   69.445580][  T844] NEXT_ORPHAN(inode)=0
[   69.454551][  T844] max_ino=32
[   69.465709][  T844] i_nlink=1
[   69.469904][  T844] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   69.498244][  T852] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.505300][  T852] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.516005][  T852] device bridge_slave_0 entered promiscuous mode
[   69.522679][  T844] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   69.547876][  T852] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.554943][  T852] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.562358][  T844] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.174: bg 0: block 248: padding at end of block bitmap is not set
[   69.585294][  T844] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.174: Failed to acquire dquot type 1
[   69.587800][  T852] device bridge_slave_1 entered promiscuous mode
[   69.610361][  T866] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.174: Failed to acquire dquot type 1
[   69.726990][  T697] __quota_error: 24 callbacks suppressed
[   69.727001][  T697] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6)
[   69.765556][  T697] EXT4-fs error (device loop3): ext4_release_dquot:6266: comm kworker/u4:6: Failed to release dquot type 1
[   69.805224][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.825780][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.856368][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.868458][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.877878][  T880] tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82
[   69.886253][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.893328][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.909789][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.924080][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.936103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.960085][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.967210][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.981246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.989902][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.998138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.007284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.034242][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.043936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.059075][  T852] device veth0_vlan entered promiscuous mode
[   70.068653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.077894][   T24] audit: type=1400 audit(1789601223.029:261): avc:  denied  { mount } for  pid=890 comm="syz.6.192" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   70.110277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.141660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.150342][   T24] audit: type=1400 audit(1789601223.089:262): avc:  denied  { watch watch_reads } for  pid=895 comm="syz.3.193" path="/46" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   70.183471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.200279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.215887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.225667][   T24] audit: type=1400 audit(1789601223.109:263): avc:  denied  { unmount } for  pid=620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   70.257510][    T7] device bridge_slave_1 left promiscuous mode
[   70.263666][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.286969][    T7] device bridge_slave_0 left promiscuous mode
[   70.293267][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.301322][   T24] audit: type=1400 audit(1789601223.169:264): avc:  denied  { write } for  pid=899 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   70.371013][   T24] audit: type=1400 audit(1789601223.169:265): avc:  denied  { nlmsg_write } for  pid=899 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   70.411737][    T7] device veth1_macvtap left promiscuous mode
[   70.434954][    T7] device veth0_vlan left promiscuous mode
[   70.452528][   T24] audit: type=1400 audit(1789601223.169:266): avc:  denied  { bind } for  pid=899 comm="syz.3.196" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.536764][   T24] audit: type=1400 audit(1789601223.169:267): avc:  denied  { name_bind } for  pid=899 comm="syz.3.196" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[   70.590820][   T24] audit: type=1400 audit(1789601223.169:268): avc:  denied  { node_bind } for  pid=899 comm="syz.3.196" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   70.613700][  T898] F2FS-fs (loop7): invalid crc value
[   70.613718][   T24] audit: type=1400 audit(1789601223.229:269): avc:  denied  { sys_admin } for  pid=901 comm="syz.3.197" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   70.639803][  T448] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   70.648417][  T898] F2FS-fs (loop7): Found nat_bits in checkpoint
[   70.799078][  T852] device veth1_macvtap entered promiscuous mode
[   70.820469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.846307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.854501][  T898] F2FS-fs (loop7): Start checkpoint disabled!
[   70.865703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.887656][  T898] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[   70.889651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.909298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.015457][  T448] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.041006][  T448] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   71.085544][  T448] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   71.114918][  T448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.176688][  T448] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[   71.269514][  T490] attempt to access beyond end of device
[   71.269514][  T490] loop7: rw=1, want=81752, limit=40427
[   71.309964][  T941] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   71.326448][  T490] attempt to access beyond end of device
[   71.326448][  T490] loop7: rw=1, want=81920, limit=40427
[   71.346563][  T941] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   71.364272][  T490] attempt to access beyond end of device
[   71.364272][  T490] loop7: rw=1, want=53248, limit=40427
[   71.369938][  T941] EXT4-fs (loop1): 1 truncate cleaned up
[   71.391183][  T941] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue
[   71.405237][  T894] x86/PAT: syz.6.192:894 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[   71.422588][  T490] attempt to access beyond end of device
[   71.422588][  T490] loop7: rw=1, want=57968, limit=40427
[   71.435590][  T906] exfat: Deprecated parameter 'utf8'
[   71.440914][  T906] exfat: Deprecated parameter 'namecase'
[   71.450458][  T490] attempt to access beyond end of device
[   71.450458][  T490] loop7: rw=2049, want=40976, limit=40427
[   71.465570][  T906] exfat: Deprecated parameter 'namecase'
[   71.512715][  T928] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[   71.533692][  T906] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   71.582531][  T928] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   71.652341][  T928] F2FS-fs (loop9): Found nat_bits in checkpoint
[   71.680326][  T906] fuseblk: Unknown parameter '''
[   71.696874][   T15] usb 4-1: USB disconnect, device number 3
[   71.740965][  T952] FAULT_INJECTION: forcing a failure.
[   71.740965][  T952] name failslab, interval 1, probability 0, space 0, times 0
[   71.754775][  T928] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[   71.774079][  T928] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   71.781843][  T952] CPU: 1 PID: 952 Comm: syz.1.212 Not tainted syzkaller #0
[   71.789159][  T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   71.799213][  T952] Call Trace:
[   71.802502][  T952]  __dump_stack+0x21/0x24
[   71.806839][  T952]  dump_stack_lvl+0x1a7/0x208
[   71.811526][  T952]  ? thaw_kernel_threads+0x220/0x220
[   71.816825][  T952]  ? _raw_write_unlock+0x2b/0x60
[   71.821776][  T952]  ? show_regs_print_info+0x18/0x18
[   71.826977][  T952]  dump_stack+0x15/0x1c
[   71.831131][  T952]  should_fail+0x3ab/0x500
[   71.835547][  T952]  ? vm_area_dup+0x26/0x250
[   71.840054][  T952]  __should_failslab+0xa4/0xe0
[   71.844820][  T952]  should_failslab+0x9/0x20
[   71.849325][  T952]  kmem_cache_alloc+0x3d/0x2d0
[   71.854088][  T952]  vm_area_dup+0x26/0x250
[   71.858412][  T952]  __split_vma+0xbd/0x420
[   71.862731][  T952]  ? find_vma+0x13b/0x150
[   71.867061][  T952]  __do_munmap+0x3c3/0x850
[   71.871473][  T952]  __se_sys_munmap+0x12c/0x1c0
[   71.876236][  T952]  ? __x64_sys_munmap+0x70/0x70
[   71.881085][  T952]  ? debug_smp_processor_id+0x17/0x20
[   71.886459][  T952]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   71.892527][  T952]  __x64_sys_munmap+0x5b/0x70
[   71.897203][  T952]  do_syscall_64+0x31/0x40
[   71.901622][  T952]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   71.907505][  T952] RIP: 0033:0x7fa44ba66f87
[   71.911915][  T952] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.931521][  T952] RSP: 002b:00007fa44a4bed18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[   71.939947][  T952] RAX: ffffffffffffffda RBX: 00007fa444000000 RCX: 00007fa44ba66f87
[   71.947923][  T952] RDX: 0000000000000000 RSI: 00000000024a0000 RDI: 00007fa448000000
[   71.956047][  T952] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[   71.964020][  T952] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[   71.971995][  T952] R13: 0000000000001000 R14: 00007fa448000000 R15: 0000000001b60000
[   72.040464][  T852] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[   72.040476][  T852] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[   72.048828][  T852] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[   72.060083][  T852] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[   72.072136][  T852] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[   72.079962][  T852] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[   72.087724][  T852] F2FS-fs (loop9): invalid namelen(0), ino:0, run fsck to fix.
[   72.503387][  T987] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.550405][  T995] device-mapper: ioctl: ioctl interface mismatch: kernel(4.44.0), user(0.0.0), cmd(3)
[   72.555420][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.567426][  T987] device bridge_slave_0 entered promiscuous mode
[   72.574492][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.581912][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.592535][  T995] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[   72.595775][  T987] device bridge_slave_1 entered promiscuous mode
[   72.707290][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.714466][  T987] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.721775][  T987] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.728829][  T987] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.772555][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.781209][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.788881][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.805512][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.812832][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.820602][ T1001] device bridge_slave_0 entered promiscuous mode
[   72.841864][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.850784][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.857850][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.866303][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.874477][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.881553][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.888946][  T302] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   72.896552][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.904483][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.913061][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.925455][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.932855][ T1001] device bridge_slave_1 entered promiscuous mode
[   72.960545][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.986671][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.006079][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.024869][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.038129][  T987] device veth0_vlan entered promiscuous mode
[   73.063254][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.080832][  T987] device veth1_macvtap entered promiscuous mode
[   73.101226][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.117659][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.126872][  T490] device bridge_slave_1 left promiscuous mode
[   73.133005][  T490] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.140891][  T490] device bridge_slave_0 left promiscuous mode
[   73.147315][  T490] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.155382][  T490] device veth1_macvtap left promiscuous mode
[   73.162115][  T490] device veth0_vlan left promiscuous mode
[   73.265541][  T302] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.280812][  T302] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   73.319495][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.328266][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.345875][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.354200][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.362694][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.369744][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.377516][ T1009] EXT4-fs (loop2): Ignoring removed oldalloc option
[   73.378032][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.392633][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.400952][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.408007][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.415747][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.423871][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.431992][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.440138][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.445535][  T302] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   73.455670][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.465023][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.466484][ T1009] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,,errors=continue
[   73.473461][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.489223][  T302] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.516024][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.525717][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.540176][ T1009] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   73.556691][  T302] usb 8-1: Product: syz
[   73.560921][  T302] usb 8-1: Manufacturer: syz
[   73.566340][  T302] usb 8-1: SerialNumber: syz
[   73.567538][ T1001] device veth0_vlan entered promiscuous mode
[   73.588035][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.609515][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.618644][  T302] cdc_mbim 8-1:1.0: skipping garbage
[   73.635875][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.647116][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.662747][ T1001] device veth1_macvtap entered promiscuous mode
[   73.678145][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.691205][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.700044][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.722575][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.738028][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.801158][ T1021] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   73.817900][  T998] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   73.974447][ T1035] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,
[   73.985143][ T1035] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.023601][ T1035] incfs: ino conflict with backing FS 2
[   74.034702][ T1038] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,
[   74.038768][ T1001] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 7: comm syz-executor: path /1/file1/lost+ound: bad entry in directory: inode out of bounds - offset=0, inode=385875968, rec_len=2048, size=2048 fake=0
[   74.095538][ T1001] EXT4-fs (loop0): Remounting filesystem read-only
[   74.102685][ T1001] EXT4-fs error (device loop0): ext4_lookup:1830: inode #17: comm syz-executor: iget: bad i_size value: 8796093022308
[   74.116180][ T1001] EXT4-fs error (device loop0): ext4_lookup:1830: inode #17: comm syz-executor: iget: bad i_size value: 8796093022308
[   74.269097][ T1053] kvm [1052]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0
[   74.292111][ T1053] kvm [1052]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0
[   74.311041][ T1053] kvm [1052]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111
[   74.362521][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.395834][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.403313][ T1057] device bridge_slave_0 entered promiscuous mode
[   74.411189][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.418412][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.426056][ T1057] device bridge_slave_1 entered promiscuous mode
[   74.505682][  T998] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   74.518077][ T1065] EXT4-fs error (device loop2): ext4_quota_enable:6451: comm syz.2.253: inode #262144: comm syz.2.253: iget: illegal inode #
[   74.531206][  T302] cdc_mbim 8-1:1.0: setting tx_max = 16384
[   74.533266][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.544066][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.551343][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.558364][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.568489][  T302] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device
[   74.576441][ T1065] EXT4-fs error (device loop2): ext4_quota_enable:6454: comm syz.2.253: Bad quota inode: 262144, type: 2
[   74.588610][ T1065] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix.
[   74.588801][  T302] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, aa:c9:3c:a8:63:b5
[   74.604473][ T1065] EXT4-fs (loop2): mount failed
[   74.668445][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.677500][  T697] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.694010][  T697] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.720525][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.743328][  T697] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.750423][  T697] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.794910][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.806896][  T697] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.813966][  T697] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.822364][   T24] kauditd_printk_skb: 41 callbacks suppressed
[   74.822375][   T24] audit: type=1400 audit(1789601227.779:311): avc:  denied  { bind } for  pid=1079 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.903142][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.918160][  T309] usb 8-1: USB disconnect, device number 2
[   74.924643][  T309] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM
[   74.953182][   T24] audit: type=1400 audit(1789601227.789:312): avc:  denied  { write } for  pid=1069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.982843][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.010720][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.023388][   T24] audit: type=1400 audit(1789601227.789:313): avc:  denied  { add_name } for  pid=1069 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.063855][   T24] audit: type=1400 audit(1789601227.789:314): avc:  denied  { create } for  pid=1069 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.064128][  T134] 8021q: adding VLAN 0 to HW filter on device wwan0
[   75.128142][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.144145][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.159079][   T24] audit: type=1400 audit(1789601227.789:315): avc:  denied  { write } for  pid=1069 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wwan0.link" dev="tmpfs" ino=2055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.166469][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.217326][ T1057] device veth0_vlan entered promiscuous mode
[   75.219857][   T24] audit: type=1400 audit(1789601227.789:316): avc:  denied  { append } for  pid=1069 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" dev="tmpfs" ino=2055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.244437][ T1057] device veth1_macvtap entered promiscuous mode
[   75.274968][   T24] audit: type=1400 audit(1789601227.839:317): avc:  denied  { remove_name } for  pid=1087 comm="rm" name="resolv.conf.wwan0.link" dev="tmpfs" ino=2055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.298847][   T24] audit: type=1400 audit(1789601227.839:318): avc:  denied  { unlink } for  pid=1087 comm="rm" name="resolv.conf.wwan0.link" dev="tmpfs" ino=2055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.323711][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.340893][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.351043][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.361074][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.362195][ T1095] attempt to access beyond end of device
[   75.362195][ T1095] loop2: rw=2049, want=224, limit=128
[   75.383851][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.445660][    T7] device bridge_slave_1 left promiscuous mode
[   75.451824][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.476040][ T1099] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[   75.490906][ T1094] attempt to access beyond end of device
[   75.490906][ T1094] loop2: rw=524288, want=224, limit=128
[   75.509940][    T7] device bridge_slave_0 left promiscuous mode
[   75.545215][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.556346][ T1095] attempt to access beyond end of device
[   75.556346][ T1095] loop2: rw=0, want=153, limit=128
[   75.568061][ T1099] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue
[   75.585863][   T24] audit: type=1400 audit(1789601228.539:319): avc:  denied  { search } for  pid=1114 comm="syz.7.261" name="/" dev="configfs" ino=12831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   75.591007][ T1095] attempt to access beyond end of device
[   75.591007][ T1095] loop2: rw=0, want=153, limit=128
[   75.649158][    T7] device veth1_macvtap left promiscuous mode
[   75.655211][    T7] device veth0_vlan left promiscuous mode
[   75.662828][  T852] EXT4-fs error (device loop9): ext4_lookup:1830: inode #17: comm syz-executor: iget: bogus i_mode (70755)
[   75.705007][  T852] EXT4-fs error (device loop9): ext4_lookup:1830: inode #17: comm syz-executor: iget: bogus i_mode (70755)
[   75.728294][ T1120] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[   75.794101][ T1120] EXT4-fs (loop7): revision level too high, forcing read-only mode
[   75.835730][ T1120] EXT4-fs (loop7): orphan cleanup on readonly fs
[   75.852318][ T1120] Quota error (device loop7): v2_read_file_info: Free block number too big (0 >= 0).
[   75.882190][ T1120] EXT4-fs warning (device loop7): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   75.915437][ T1120] EXT4-fs (loop7): Cannot turn on quotas: error -117
[   75.952720][ T1120] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.262: bg 0: block 40: padding at end of block bitmap is not set
[   75.998774][ T1120] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   76.035219][ T1120] EXT4-fs (loop7): 1 truncate cleaned up
[   76.055438][ T1120] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,commit=0x0000000000000000,minixdf,,errors=continue
[   76.306359][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.336369][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.351354][ T1138] device bridge_slave_0 entered promiscuous mode
[   76.375988][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.390299][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.409778][ T1138] device bridge_slave_1 entered promiscuous mode
[   76.552430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.560517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.574674][ T1147] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2751: inode #11: comm syz.7.270: corrupted xattr block 95
[   76.595893][ T1147] EXT4-fs (loop7): Remounting filesystem read-only
[   76.602510][ T1147] EXT4-fs error (device loop7): ext4_evict_inode:296: comm syz.7.270: couldn't truncate inode 11 (err -30)
[   76.614512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.615068][ T1147] EXT4-fs (loop7): 1 orphan inode deleted
[   76.623236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.637932][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.642561][ T1147] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,
[   76.645268][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.645859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.671705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.679899][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.686994][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.694363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.718811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.728197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.736610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.754019][ T1138] device veth0_vlan entered promiscuous mode
[   76.760736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.769572][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.777676][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.794772][ T1138] device veth1_macvtap entered promiscuous mode
[   76.801899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.814193][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.825535][  T521] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.840831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.923631][    T7] device bridge_slave_1 left promiscuous mode
[   76.931075][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.952769][    T7] device bridge_slave_0 left promiscuous mode
[   76.959018][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.967088][    T7] device veth1_macvtap left promiscuous mode
[   76.975599][    T7] device veth0_vlan left promiscuous mode
[   76.995534][ T1162] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d)
[   77.029337][ T1162] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   77.075467][  T521] usb 3-1: Using ep0 maxpacket: 8
[   77.172852][ T1169] FAT-fs (loop4): bogus number of FAT sectors
[   77.198858][ T1169] FAT-fs (loop4): Can't find a valid FAT filesystem
[   77.215454][  T521] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   77.237615][  T521] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.250478][  T521] usb 3-1: config 0 interface 0 has no altsetting 0
[   77.257119][  T521] usb 3-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00
[   77.266210][  T521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.279329][  T521] usb 3-1: config 0 descriptor??
[   77.329439][ T1167] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   77.353990][ T1167] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   77.367769][ T1192] netlink: 96 bytes leftover after parsing attributes in process `syz.4.283'.
[   77.373401][ T1167] F2FS-fs (loop7): invalid crc value
[   77.384940][ T1167] F2FS-fs (loop7): Found nat_bits in checkpoint
[   77.436131][ T1167] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   77.443192][ T1167] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   77.651557][  T668] attempt to access beyond end of device
[   77.651557][  T668] loop7: rw=2049, want=40968, limit=40427
[   77.695510][ T1184] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   77.767009][  T521] input: HID 0518:0002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0518:0002.0004/input/input8
[   77.847569][  T521] ezkey 0003:0518:0002.0004: input,hiddev96,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.2-1/input0
[   78.055490][ T1184] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   78.080113][ T1184] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   78.099515][ T1184] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   78.169199][ T1222] xt_hashlimit: size too large, truncated to 1048576
[   78.268308][ T1184] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.280685][ T1184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.288915][ T1184] usb 5-1: Product: syz
[   78.293123][ T1184] usb 5-1: Manufacturer: syz
[   78.297796][ T1184] usb 5-1: SerialNumber: syz
[   78.325502][ T1197] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   78.367165][  T521] usb 3-1: USB disconnect, device number 2
[   78.549061][ T1197] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   78.653373][ T1236] tipc: Started in network mode
[   78.658552][ T1236] tipc: Own node identity 4a50f65f6b88, cluster identity 4711
[   78.669924][ T1236] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   78.678448][ T1235] tipc: Resetting bearer <eth:syzkaller0>
[   78.687589][ T1235] tipc: Disabling bearer <eth:syzkaller0>
[   79.205769][ T1197] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   79.222997][ T1281] Disabled LAPIC found during irq injection
[   79.445460][ T1184] cdc_ncm 5-1:1.0: bind() failure
[   79.475518][ T1184] cdc_ncm: probe of 5-1:1.1 failed with error -71
[   79.495469][ T1184] cdc_mbim: probe of 5-1:1.1 failed with error -71
[   79.508200][ T1184] usb 5-1: USB disconnect, device number 3
[   79.600804][ T1279] F2FS-fs (loop7): Test dummy encryption mode enabled
[   79.621976][ T1279] F2FS-fs (loop7): invalid crc value
[   79.629467][ T1279] F2FS-fs (loop7): Found nat_bits in checkpoint
[   79.664117][ T1279] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   79.887059][ T1291] kvm [1290]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0
[   79.905766][ T1291] kvm [1290]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0
[   79.928845][ T1291] kvm [1290]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111
[   80.353740][   T24] kauditd_printk_skb: 12 callbacks suppressed
[   80.353753][   T24] audit: type=1400 audit(1789601233.299:332): avc:  denied  { getopt } for  pid=1314 comm="syz.5.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   80.407003][ T1184] kernel write not supported for file /input/event2 (pid: 1184 comm: kworker/1:10)
[   80.456447][   T24] audit: type=1400 audit(1789601233.299:333): avc:  denied  { create } for  pid=1314 comm="syz.5.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   80.568802][ T1321] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   80.768297][ T1344] kvm [1341]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0
[   80.786489][ T1344] kvm [1341]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0
[   80.807193][ T1344] kvm [1341]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111
[   80.997404][ T1351] fuse: root generation should be zero
[   81.054503][   T24] audit: type=1400 audit(1789601233.999:334): avc:  denied  { read } for  pid=1355 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   81.184691][ T1364] netlink: 12 bytes leftover after parsing attributes in process `syz.7.339'.
[   81.316022][ T1366] EXT4-fs (loop2): Test dummy encryption mode enabled
[   81.335652][ T1366] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.340: inode has both inline data and extents flags
[   81.357616][ T1366] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.340: couldn't read orphan inode 15 (err -117)
[   81.382460][ T1366] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[   81.493421][ T1366] syz.2.340 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   81.568088][ T1376] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[   81.584523][ T1376] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   81.603745][ T1376] EXT4-fs (loop7): 1 truncate cleaned up
[   81.610207][ T1376] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue
[   81.675576][  T668] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   81.702238][  T668] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[   81.735203][  T668] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[   81.736896][   T24] audit: type=1400 audit(1789601234.679:335): avc:  denied  { ioctl } for  pid=1385 comm="syz.4.346" path="socket:[21992]" dev="sockfs" ino=21992 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.803330][   T24] audit: type=1400 audit(1789601234.749:336): avc:  denied  { mounton } for  pid=1387 comm="syz.4.347" path="/14/file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   81.851333][  T697] tipc: Left network mode
[   81.948494][ T1394] kvm [1393]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0
[   81.975557][ T1394] kvm [1393]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0
[   81.996243][ T1394] kvm [1393]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111
[   82.095111][ T1400] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.102421][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.109912][ T1400] device bridge_slave_0 entered promiscuous mode
[   82.118767][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.136112][ T1404] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[   82.138770][ T1400] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.145683][ T1404] EXT4-fs (loop5): Test dummy encryption mode enabled
[   82.172110][ T1400] device bridge_slave_1 entered promiscuous mode
[   82.175517][ T1404] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue
[   82.303003][ T1411] attempt to access beyond end of device
[   82.303003][ T1411] loop4: rw=2049, want=224, limit=128
[   82.355644][ T1410] attempt to access beyond end of device
[   82.355644][ T1410] loop4: rw=524288, want=224, limit=128
[   82.390792][ T1411] attempt to access beyond end of device
[   82.390792][ T1411] loop4: rw=0, want=153, limit=128
[   82.414440][ T1411] attempt to access beyond end of device
[   82.414440][ T1411] loop4: rw=0, want=153, limit=128
[   82.446336][  T697] device bridge_slave_1 left promiscuous mode
[   82.455750][  T697] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.485264][  T697] device bridge_slave_0 left promiscuous mode
[   82.506518][  T697] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.514633][  T697] device veth1_macvtap left promiscuous mode
[   82.525812][  T697] device veth0_vlan left promiscuous mode
[   82.608021][ T1421] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   82.638596][ T1421] exFAT-fs (loop4): hint_cluster is invalid (17)
[   82.654352][ T1421] exFAT-fs (loop4): error, broken FAT chain.
[   82.684004][ T1421] exFAT-fs (loop4): Filesystem has been set read-only
[   82.703006][ T1421] exFAT-fs (loop4): error, failed to bmap (inode : ffff888129d0a5f0 iblock : 24, err : -5)
[   82.718973][ T1421] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[   82.852660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.860439][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.877167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.888917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.905819][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.912880][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.935546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.952687][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.968589][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.986595][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.993675][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.029782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.044758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.067983][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.095166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.106099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.121194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.138128][ T1400] device veth0_vlan entered promiscuous mode
[   83.167210][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.179709][ T1400] device veth1_macvtap entered promiscuous mode
[   83.209695][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.221278][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.240188][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.254936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.585495][  T309] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   83.985484][  T309] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[   83.994762][  T309] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[   84.005113][  T309] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[   84.015598][  T309] usb 6-1: config 1 interface 0 has no altsetting 0
[   84.022209][  T309] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[   84.031545][  T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.086719][  T309] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[   84.306066][  T309] scsi host1: usb-storage 6-1:1.0
[   84.316095][ T1462] exfat: Bad value for 'uid'
[   84.996128][    T5] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   85.280514][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.287570][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.294851][ T1498] device bridge_slave_0 entered promiscuous mode
[   85.301799][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.309356][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.316956][ T1498] device bridge_slave_1 entered promiscuous mode
[   85.353063][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.360300][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.367569][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.374583][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.382018][    T5] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.392255][    T5] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.401189][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.408926][  T309] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[   85.418042][  T697] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.427152][  T697] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.438800][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.447135][  T697] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.454160][  T697] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.477684][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.485882][    T5] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   85.495693][  T697] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.502758][  T697] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.510493][    T5] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   85.519030][    T5] usb 9-1: SerialNumber: syz
[   85.523876][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.535247][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.546606][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.561302][ T1498] device veth0_vlan entered promiscuous mode
[   85.567934][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.576209][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.583739][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.598082][ T1498] device veth1_macvtap entered promiscuous mode
[   85.604910][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.618676][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.637453][  T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.666749][  T290] usb 6-1: USB disconnect, device number 2
[   85.670802][   T24] audit: type=1400 audit(1789601238.619:337): avc:  denied  { connect } for  pid=1512 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   85.693097][ T1468] sddr09: could not read card info
[   85.700846][  T490] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[   85.709991][  T490] sd 1:0:0:0: [sdb] 0-byte physical blocks
[   85.717678][  T490] sd 1:0:0:0: [sdb] Write Protect is off
[   85.720527][   T24] audit: type=1400 audit(1789601238.669:338): avc:  denied  { write } for  pid=1514 comm="syz.1.393" name="functions" dev="configfs" ino=18255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   85.746401][  T490] sd 1:0:0:0: [sdb] Asking for cache data failed
[   85.749370][   T24] audit: type=1400 audit(1789601238.679:339): avc:  denied  { add_name } for  pid=1514 comm="syz.1.393" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   85.755216][  T490] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[   85.784710][   T24] audit: type=1326 audit(1789601238.739:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.2.394" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15957a8159 code=0x0
[   85.806082][    T5] usb 9-1: 0:2 : does not exist
[   85.817337][  T490] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[   85.830431][    T5] usb 9-1: USB disconnect, device number 2
[   85.975881][    T9] device bridge_slave_1 left promiscuous mode
[   85.982187][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.989960][    T9] device bridge_slave_0 left promiscuous mode
[   85.996495][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.004807][    T9] device veth1_macvtap left promiscuous mode
[   86.011992][    T9] device veth0_vlan left promiscuous mode
[   86.131476][ T1519] F2FS-fs (loop1): Test dummy encryption mode enabled
[   86.150647][ T1519] F2FS-fs (loop1): invalid crc value
[   86.174888][ T1519] F2FS-fs (loop1): Found nat_bits in checkpoint
[   86.227125][   T24] audit: type=1400 audit(1789601239.179:341): avc:  denied  { map } for  pid=1533 comm="syz.5.399" path="socket:[23272]" dev="sockfs" ino=23272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   86.237118][  T422] udevd[422]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[   86.259374][ T1519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   86.289802][ T1537] tipc: Started in network mode
[   86.300190][ T1537] tipc: Own node identity 72b73b00e3d, cluster identity 4711
[   86.318978][ T1537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.357461][ T1536] tipc: Disabling bearer <eth:syzkaller0>
[   86.451636][ T1546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.403'.
[   86.477344][ T1546] device bridge1 entered promiscuous mode
[   86.494511][ T1545] device bridge1 left promiscuous mode
[   86.537904][   T24] audit: type=1400 audit(1789601239.489:342): avc:  denied  { search } for  pid=1548 comm="syz.8.404" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   86.566107][ T1551] FAULT_INJECTION: forcing a failure.
[   86.566107][ T1551] name failslab, interval 1, probability 0, space 0, times 0
[   86.651855][ T1551] CPU: 0 PID: 1551 Comm: syz.5.405 Not tainted syzkaller #0
[   86.659169][ T1551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   86.669229][ T1551] Call Trace:
[   86.672522][ T1551]  __dump_stack+0x21/0x24
[   86.676894][ T1551]  dump_stack_lvl+0x1a7/0x208
[   86.681587][ T1551]  ? thaw_kernel_threads+0x220/0x220
[   86.686872][ T1551]  ? show_regs_print_info+0x18/0x18
[   86.692074][ T1551]  ? ____kasan_slab_free+0x130/0x160
[   86.697355][ T1551]  dump_stack+0x15/0x1c
[   86.701510][ T1551]  should_fail+0x3ab/0x500
[   86.705932][ T1551]  ? do_check+0x2b0b/0xe3b0
[   86.710451][ T1551]  __should_failslab+0xa4/0xe0
[   86.712350][   T24] audit: type=1400 audit(1789601239.519:343): avc:  denied  { read } for  pid=1548 comm="syz.8.404" name="trace_pipe_raw" dev="tracefs" ino=12694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   86.715224][ T1551]  should_failslab+0x9/0x20
[   86.742621][ T1551]  __kmalloc_track_caller+0x5f/0x310
[   86.747915][ T1551]  ? prepare_func_exit+0x49b/0x720
[   86.753033][ T1551]  krealloc+0x6a/0x110
[   86.757104][ T1551]  do_check+0x2b0b/0xe3b0
[   86.761433][ T1551]  ? __se_sys_bpf+0x49a/0x740
[   86.766128][ T1551]  ? mark_reg_unknown+0x5a0/0x5a0
[   86.771155][ T1551]  ? memset+0x35/0x40
[   86.775142][ T1551]  do_check_common+0x94e/0x1190
[   86.780000][ T1551]  bpf_check+0x97ea/0xdce0
[   86.784589][ T1551]  ? sysvec_call_function_single+0xc8/0xd0
[   86.790409][ T1551]  ? bpf_get_btf_vmlinux+0x60/0x60
[   86.795363][   T24] audit: type=1400 audit(1789601239.519:344): avc:  denied  { open } for  pid=1548 comm="syz.8.404" path="/10/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=12694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   86.820576][ T1551]  ? 0xffffffffa002a3b0
[   86.820591][ T1551]  ? is_bpf_text_address+0x177/0x190
[   86.820603][ T1551]  ? selinux_bpf_prog_alloc+0x51/0x140
[   86.820613][ T1551]  ? __kernel_text_address+0xa0/0x100
[   86.820632][ T1551]  ? unwind_get_return_address+0x4d/0x90
[   86.846435][ T1551]  ? stack_trace_save+0xf0/0xf0
[   86.851266][ T1551]  ? arch_stack_walk+0xee/0x140
[   86.856098][ T1551]  ? stack_trace_save+0xa6/0xf0
[   86.860924][ T1551]  ? stack_trace_snprint+0xe0/0xe0
[   86.866017][ T1551]  ? selinux_bpf_prog_alloc+0x51/0x140
[   86.871461][ T1551]  ? kvm_sched_clock_read+0x18/0x40
[   86.876639][ T1551]  ? sched_clock+0x3a/0x40
[   86.881037][ T1551]  ? sched_clock_cpu+0x1b/0x3d0
[   86.885875][ T1551]  ? sched_clock+0x3a/0x40
[   86.890272][ T1551]  ? sched_clock_cpu+0x1b/0x3d0
[   86.895107][ T1551]  ? __irq_exit_rcu+0x40/0x150
[   86.899961][ T1551]  ? irq_exit_rcu+0x9/0x10
[   86.904376][ T1551]  ? sysvec_call_function_single+0xc8/0xd0
[   86.910171][ T1551]  ? asm_sysvec_call_function_single+0x12/0x20
[   86.916312][ T1551]  ? memset+0x35/0x40
[   86.920288][ T1551]  ? bpf_obj_name_cpy+0x193/0x1e0
[   86.925295][ T1551]  bpf_prog_load+0x1004/0x14e0
[   86.930039][ T1551]  ? map_freeze+0x330/0x330
[   86.934521][ T1551]  ? vfs_write+0xae4/0xd70
[   86.938937][ T1551]  ? selinux_bpf+0xc7/0xf0
[   86.943335][ T1551]  ? security_bpf+0x82/0xa0
[   86.947821][ T1551]  __se_sys_bpf+0x49a/0x740
[   86.952304][ T1551]  ? __x64_sys_bpf+0x90/0x90
[   86.956877][ T1551]  ? __kasan_check_read+0x11/0x20
[   86.961881][ T1551]  __x64_sys_bpf+0x7b/0x90
[   86.966282][ T1551]  do_syscall_64+0x31/0x40
[   86.970682][ T1551]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   86.976554][ T1551] RIP: 0033:0x7f6bd542c159
[   86.980949][ T1551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.000537][ T1551] RSP: 002b:00007f6bd3e85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   87.008934][ T1551] RAX: ffffffffffffffda RBX: 00007f6bd56b3fa0 RCX: 00007f6bd542c159
[   87.016884][ T1551] RDX: 0000000000000078 RSI: 0000200000000240 RDI: 0000000000000005
[   87.024849][ T1551] RBP: 00007f6bd54c306b R08: 0000000000000000 R09: 0000000000000000
[   87.032799][ T1551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.040748][ T1551] R13: 00007f6bd56b4038 R14: 00007f6bd56b3fa0 R15: 00007ffe5e47deb8
[   87.286481][   T24] audit: type=1400 audit(1789601240.239:345): avc:  denied  { map } for  pid=1573 comm="syz.5.416" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   87.349759][   T24] audit: type=1400 audit(1789601240.269:346): avc:  denied  { ioctl } for  pid=1572 comm="syz.4.415" path="socket:[23321]" dev="sockfs" ino=23321 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   87.629475][ T1602] overlayfs: maximum fs stacking depth exceeded
[   87.652687][ T1603] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   87.719538][ T1609] EXT4-fs (loop1): Ignoring removed nobh option
[   87.727089][ T1609] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5
[   87.727089][ T1609] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   87.727089][ T1609] 
[   87.758812][ T1609] EXT4-fs (loop1): Unrecognized mount option "euid>00000000000000000000" or missing value
[   87.801963][ T1613] APIC base relocation is unsupported by KVM
[   87.806130][ T1611] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   87.831285][ T1611] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   88.104007][ T1647] xt_hashlimit: size too large, truncated to 1048576
[   88.122217][ T1644] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[   88.190409][ T1655] fuse: Bad value for 'fd'
[   88.235590][    T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   88.364563][ T1659] F2FS-fs (loop5): invalid crc value
[   88.380791][ T1659] F2FS-fs (loop5): Found nat_bits in checkpoint
[   88.415212][ T1659] F2FS-fs (loop5): Start checkpoint disabled!
[   88.422101][ T1659] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   88.438102][ T1659] attempt to access beyond end of device
[   88.438102][ T1659] loop5: rw=10241, want=45232, limit=40427
[   88.475425][    T5] usb 5-1: Using ep0 maxpacket: 16
[   88.527733][ T1687] xt_hashlimit: size too large, truncated to 1048576
[   88.552855][  T490] ==================================================================
[   88.560967][  T490] BUG: KASAN: use-after-free in l2tp_tunnel_del_work+0xcd/0x3d0
[   88.568629][  T490] Read of size 8 at addr ffff888127fe6480 by task kworker/u4:4/490
[   88.576506][  T490] 
[   88.578839][  T490] CPU: 0 PID: 490 Comm: kworker/u4:4 Not tainted syzkaller #0
[   88.586281][  T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   88.596337][  T490] Workqueue: l2tp l2tp_tunnel_del_work
[   88.601786][  T490] Call Trace:
[   88.605065][  T490]  __dump_stack+0x21/0x24
[   88.609414][  T490]  dump_stack_lvl+0x1a7/0x208
[   88.614076][  T490]  ? show_regs_print_info+0x18/0x18
[   88.619273][  T490]  ? thaw_kernel_threads+0x220/0x220
[   88.624551][  T490]  print_address_description+0x7f/0x2c0
[   88.630092][  T490]  ? l2tp_tunnel_del_work+0xcd/0x3d0
[   88.635364][  T490]  kasan_report+0x100/0x140
[   88.639858][  T490]  ? __switch_to_asm+0x3a/0x60
[   88.644613][  T490]  ? l2tp_tunnel_del_work+0xcd/0x3d0
[   88.649896][  T490]  __asan_report_load8_noabort+0x14/0x20
[   88.655523][  T490]  l2tp_tunnel_del_work+0xcd/0x3d0
[   88.660748][  T490]  process_one_work+0x6fd/0xbc0
[   88.665605][  T490]  worker_thread+0xa8e/0x13c0
[   88.670284][  T490]  kthread+0x324/0x3b0
[   88.674355][  T490]  ? worker_clr_flags+0x190/0x190
[   88.679404][  T490]  ? kthread_blkcg+0xd0/0xd0
[   88.684001][  T490]  ret_from_fork+0x1f/0x30
[   88.688404][  T490] 
[   88.690837][  T490] Allocated by task 1678:
[   88.695162][  T490]  __kasan_kmalloc+0xd4/0x100
[   88.698974][ T1679] ------------[ cut here ]------------
[   88.699832][  T490]  __kmalloc+0x19f/0x330
[   88.705333][ T1679] WARNING: CPU: 1 PID: 1679 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[   88.709485][  T490]  l2tp_session_create+0x39/0xb60
[   88.709492][  T490]  pppol2tp_connect+0xbf5/0x1640
[   88.709500][  T490]  __sys_connect+0x3ce/0x450
[   88.709507][  T490]  __x64_sys_connect+0x7a/0x90
[   88.709517][  T490]  do_syscall_64+0x31/0x40
[   88.709525][  T490]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   88.709527][  T490] 
[   88.709532][  T490] Freed by task 1678:
[   88.709540][  T490]  kasan_set_track+0x4a/0x70
[   88.709548][  T490]  kasan_set_free_info+0x23/0x40
[   88.709556][  T490]  ____kasan_slab_free+0x125/0x160
[   88.709563][  T490]  __kasan_slab_free+0x11/0x20
[   88.709570][  T490]  slab_free_freelist_hook+0xc5/0x190
[   88.709577][  T490]  kfree+0xc0/0x270
[   88.709584][  T490]  l2tp_session_put+0xb2/0x1a0
[   88.709598][  T490]  pppol2tp_ioctl+0x748/0x960
[   88.709607][  T490]  pppox_ioctl+0x1e4/0x320
[   88.709616][  T490]  sock_do_ioctl+0xda/0x380
[   88.709623][  T490]  sock_ioctl+0x472/0x740
[   88.709630][  T490]  __se_sys_ioctl+0x121/0x1a0
[   88.709644][  T490]  __x64_sys_ioctl+0x7b/0x90
[   88.721540][ T1679] Modules linked in:
[   88.724681][  T490]  do_syscall_64+0x31/0x40
[   88.724696][  T490]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   88.729772][ T1679] 
[   88.734158][  T490] 
[   88.734162][  T490] Last potentially related work creation:
[   88.734173][  T490]  kasan_save_stack+0x3a/0x60
[   88.734188][  T490]  __kasan_record_aux_stack+0xd2/0x100
[   88.739148][ T1679] CPU: 1 PID: 1679 Comm: syz.2.457 Not tainted syzkaller #0
[   88.743307][  T490]  kasan_record_aux_stack_noalloc+0xb/0x10
[   88.743315][  T490]  kvfree_call_rcu+0x117/0x670
[   88.743331][  T490]  drop_sysctl_table+0x2f5/0x430
[   88.749384][ T1679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   88.751496][  T490]  drop_sysctl_table+0x2e4/0x430
[   88.751504][  T490]  unregister_sysctl_table+0x75/0x120
[   88.751521][  T490]  unregister_net_sysctl_table+0x15/0x20
[   88.755855][ T1679] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[   88.760034][  T490]  inetdev_event+0x788/0x1010
[   88.760044][  T490]  raw_notifier_call_chain+0x90/0x100
[   88.760061][  T490]  unregister_netdevice_many+0x100e/0x19f0
[   88.765004][ T1679] Code: 5d c3 e8 2c 5a 35 fd be 02 00 00 00 eb 0a e8 20 5a 35 fd be 01 00 00 00 4c 89 f7 e8 63 ca 0e fe e9 0f ff ff ff e8 09 5a 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 f8 59 35 fd 4c 89 f7 be 03
[   88.770054][  T490]  default_device_exit_batch+0x35e/0x3c0
[   88.770063][  T490]  cleanup_net+0x5fe/0xb80
[   88.770072][  T490]  process_one_work+0x6fd/0xbc0
[   88.770079][  T490]  worker_thread+0xa8e/0x13c0
[   88.770099][  T490]  kthread+0x324/0x3b0
[   88.775658][ T1679] RSP: 0018:ffffc90000d47c40 EFLAGS: 00010293
[   88.780185][  T490]  ret_from_fork+0x1f/0x30
[   88.780189][  T490] 
[   88.780203][  T490] The buggy address belongs to the object at ffff888127fe6400
[   88.780203][  T490]  which belongs to the cache kmalloc-512 of size 512
[   88.784019][ T1679] 
[   88.788729][  T490] The buggy address is located 128 bytes inside of
[   88.788729][  T490]  512-byte region [ffff888127fe6400, ffff888127fe6600)
[   88.788733][  T490] The buggy address belongs to the page:
[   88.788761][  T490] page:ffffea00049ff900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127fe4
[   88.793764][ T1679] RAX: ffffffff842f5aa7 RBX: ffff88811363d800 RCX: ffff888117300000
[   88.797794][  T490] head:ffffea00049ff900 order:2 compound_mapcount:0 compound_pincount:0
[   88.797812][  T490] flags: 0x4000000000010200(slab|head)
[   88.797825][  T490] raw: 4000000000010200 0000000000000000 0000000e00000001 ffff888100043080
[   88.802469][ T1679] RDX: 0000000000000000 RSI: 0000000033558f00 RDI: 000000000c04eb7d
[   88.806607][  T490] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   88.806611][  T490] page dumped because: kasan: bad access detected
[   88.806616][  T490] page_owner tracks the page as allocated
[   88.806630][  T490] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 49, ts 45169444630, free_ts 0
[   88.806642][  T490]  prep_new_page+0x176/0x190
[   88.806656][  T490]  get_page_from_freelist+0x225f/0x23f0
[   88.812616][ T1679] RBP: ffffc90000d47c60 R08: ffff88811363d883 R09: 1ffff110226c7b10
[   88.815869][  T490]  __alloc_pages_nodemask+0x29a/0x640
[   88.815877][  T490]  new_slab+0x84/0x3f0
[   88.815887][  T490]  ___slab_alloc+0x2f8/0x4c0
[   88.815901][  T490]  __slab_alloc+0x63/0xa0
[   88.819991][ T1679] R10: dffffc0000000000 R11: ffffed10226c7b11 R12: dffffc0000000000
[   88.824170][  T490]  kmem_cache_alloc_trace+0x1a8/0x2e0
[   88.824178][  T490]  ipv6_add_addr+0x408/0xd90
[   88.824191][  T490]  addrconf_add_linklocal+0x209/0x660
[   88.830252][ T1679] R13: dffffc0000000000 R14: 0000000033558f00 R15: ffff888127fe6400
[   88.832353][  T490]  addrconf_addr_gen+0x53f/0x6a0
[   88.832361][  T490]  addrconf_dev_config+0x299/0x510
[   88.832374][  T490]  addrconf_notify+0x9d8/0xea0
[   88.834696][ T1679] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   88.840372][  T490]  raw_notifier_call_chain+0x90/0x100
[   88.840381][  T490]  netdev_state_change+0x175/0x230
[   88.840389][  T490]  linkwatch_do_dev+0x102/0x140
[   88.840404][  T490]  __linkwatch_run_queue+0x4b1/0x7c0
[   88.845561][ T1679] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   88.850682][  T490] page_owner free stack trace missing
[   88.850687][  T490] 
[   88.850690][  T490] Memory state around the buggy address:
[   88.850700][  T490]  ffff888127fe6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   88.850716][  T490]  ffff888127fe6400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.850731][  T490] >ffff888127fe6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.858502][ T1679] CR2: 00007f6bd56b5dac CR3: 000000011835c000 CR4: 00000000003506a0
[   88.863782][  T490]                    ^
[   88.863791][  T490]  ffff888127fe6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.863805][  T490]  ffff888127fe6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.868953][ T1679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   88.873451][  T490] ==================================================================
[   88.873455][  T490] Disabling lock debugging due to kernel taint
[   88.899691][   T15] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   88.922558][ T1679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   88.957550][  T490] ------------[ cut here ]------------
[   88.962183][ T1679] Call Trace:
[   88.966146][  T490] refcount_t: underflow; use-after-free.
[   88.972516][ T1679]  pppol2tp_release+0x150/0x2b0
[   88.976792][  T490] WARNING: CPU: 0 PID: 490 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[   88.979424][ T1679]  sock_close+0xb8/0x200
[   88.993672][    T5] usb 5-1: unable to get BOS descriptor or descriptor too short
[   88.995757][ T1679]  ? sock_mmap+0xa0/0xa0
[   89.008810][  T490] Modules linked in:
[   89.014641][ T1679]  __fput+0x2dc/0x730
[   89.024671][  T490] 
[   89.032988][ T1679]  ____fput+0x15/0x20
[   89.041086][  T490] CPU: 0 PID: 490 Comm: kworker/u4:4 Tainted: G    B             syzkaller #0
[   89.046750][ T1679]  task_work_run+0x127/0x190
[   89.055167][  T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.063352][ T1679]  do_exit+0xa7c/0x24e0
[   89.072171][  T490] Workqueue: l2tp l2tp_tunnel_del_work
[   89.078355][ T1679]  ? __kasan_check_write+0x14/0x20
[   89.084144][  T490] 
[   89.102148][ T1679]  ? switch_fpu_return+0x19c/0x330
[   89.106898][    T5] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   89.112349][ T1679]  ? put_task_struct+0x90/0x90
[   89.120644][  T490] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[   89.125782][ T1679]  ? fpu__clear_all+0x20/0x20
[   89.129989][  T490] Code: 04 01 48 c7 c7 40 53 40 85 e8 bc 60 3b 02 0f 0b eb c3 e8 a3 8e 26 ff c6 05 52 73 82 04 01 48 c7 c7 a0 53 40 85 e8 a0 60 3b 02 <0f> 0b eb a7 e8 87 8e 26 ff c6 05 33 73 82 04 01 48 c7 c7 c0 52 40
[   89.134399][ T1679]  ? __kasan_check_read+0x11/0x20
[   89.138906][  T490] RSP: 0018:ffffc90000d67c58 EFLAGS: 00010246
[   89.147098][ T1679]  __x64_sys_exit+0x40/0x40
[   89.152491][  T490] 
[   89.157043][ T1679]  do_syscall_64+0x31/0x40
[   89.162193][  T490] RAX: 2c28e17fa97fb800 RBX: 0000000000000003 RCX: ffff888116226400
[   89.162207][  T490] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   89.170466][ T1679]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   89.175313][  T490] RBP: ffffc90000d67c68 R08: 0000000000000003 R09: fffff520001acef0
[   89.180484][ T1679] RIP: 0033:0x7f15957a8159
[   89.185082][  T490] R10: dffffc0000000000 R11: fffff520001aced0 R12: ffff888127fe4420
[   89.185096][  T490] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000
[   89.194271][ T1679] Code: Unable to access opcode bytes at RIP 0x7f15957a812f.
[   89.199600][  T490] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   89.204700][ T1679] RSP: 002b:00007f1594200ef8 EFLAGS: 00000246
[   89.209503][  T490] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   89.214828][ T1679]  ORIG_RAX: 000000000000003c
[   89.221389][  T490] CR2: 00007fb91f13c000 CR3: 000000011371a000 CR4: 00000000003506b0
[   89.226818][ T1679] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f15957a8159
[   89.229887][  T490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   89.234714][ T1679] RDX: 00007f15942019c8 RSI: 0000000000000000 RDI: 0000000000000000
[   89.242827][  T490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   89.255761][ T1679] RBP: 00007f159583f06b R08: 0000000000000000 R09: 0000000000000058
[   89.261164][  T490] Call Trace:
[   89.267228][ T1679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.271096][  T490]  l2tp_session_put+0xcb/0x1a0
[   89.271111][  T490]  l2tp_session_delete+0x3a9/0x4a0
[   89.279380][ T1679] R13: 00007f1595a30038 R14: 00007f1595a2ffa0 R15: 00007ffcbc89f3d8
[   89.287422][  T490]  l2tp_tunnel_del_work+0x180/0x3d0
[   89.295539][ T1679] ---[ end trace 07fce053a0aa87fa ]---
[   89.303656][  T490]  process_one_work+0x6fd/0xbc0
[   89.674371][  T490]  worker_thread+0xa8e/0x13c0
[   89.679246][  T490]  kthread+0x324/0x3b0
[   89.683343][  T490]  ? worker_clr_flags+0x190/0x190
[   89.688443][  T490]  ? kthread_blkcg+0xd0/0xd0
[   89.693023][  T490]  ret_from_fork+0x1f/0x30
[   89.697502][  T490] ---[ end trace 07fce053a0aa87fb ]---
[   89.705680][   T15] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   89.715436][   T15] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   89.825574][    T5] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   89.834692][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.842809][    T5] usb 5-1: Product: syz
[   89.846990][    T5] usb 5-1: SerialNumber: syz
[   89.875571][   T15] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   89.884714][   T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.892828][   T15] usb 2-1: Product: syz
[   89.896990][   T15] usb 2-1: Manufacturer: syz
[   89.901561][   T15] usb 2-1: SerialNumber: syz
[   89.907060][   T15] usb 2-1: config 0 descriptor??
[   89.925476][ T1666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   89.932449][ T1666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   90.105992][    T5] usb 5-1: Audio class v2/v3 interfaces need an interface association
[   90.114247][    T5] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[   90.146343][ T1666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   90.153335][ T1666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   90.535724][    T5] usb 5-1: 2:1 : bogus bTerminalLink 6
[   90.605533][   T15] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[   90.757611][    T5] usb 5-1: USB disconnect, device number 4
[   90.965750][  T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   91.375483][   T15] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[   91.385839][   T15] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 96:3c:37:33:18:dc
[   91.399770][   T15] usb 2-1: USB disconnect, device number 3
[   91.406011][   T15] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet