last executing test programs:

1m43.349560987s ago: executing program 32 (id=204):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0feffff", @ANYRES16=r1, @ANYBLOB="25012dbd70009cd7c70000004000"/27], 0x14}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000000)=0x3, 0x4)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
setfsgid(0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000340)='silent\x00', 0x0, 0x0)
r7 = add_key(&(0x7f0000000800)='id_legacy\x00', &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001022010027bd700402d4df2500000000", @ANYRES32=0x0, @ANYBLOB="d80e0600416a01002c001280110001006272696467655f736c617665000000001400058008000300060000000600020003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7)
fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000140)='posixacl\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x40080000, 0x2, 0xfd, 0x0, 0xa18, 0x0, 0x0, 0x10, 0x3}}, 0x50)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x82)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f0000000140)=0x1, 0x6, 0x2, 0x0, &(0x7f0000000100), 0x0)
write(r4, 0x0, 0x0)
socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0))

1m20.749804901s ago: executing program 33 (id=395):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000040)={[{@data_writeback}], [{@subj_type={'subj_type', 0x3d, '\\%:+#'}}]}, 0xff, 0x489, &(0x7f0000000a40)="$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")
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000240))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0xfffffffffffffff9, 0x80000000000000, 0xe, 0x4, 0x101000, 0x3, 0x11002, 0x3, 0x3, 0x83, 0x3, 0x6, 0x8bda, 0xfffebffffffffeff, 0x3fb, 0xffffffffffffffff], 0x24fff})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_connect$uac2(0x2, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000406307032040000102030109028b00030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d02008700200904010000010220000904010101010220000624020103be10240105c4033f8b35e40309000000cd0905010908"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x70, 0xa0, 0x8, {0xf400000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x298)
syz_emit_ethernet(0x1f, &(0x7f0000000600)=ANY=[@ANYBLOB="19e0ffffffff006c000000000011424203a8"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000000c0000000400000001000004010000000a0000000300000006000000000000000000000105000000200000000000000000000003000000000200000002000000000000000061002e2e61612e61005f00"], 0x0, 0x64}, 0x28)
connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180cc, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xff, 0x242, &(0x7f0000000300)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x10, &(0x7f0000000100)={[{@nomblk_io_submit}, {@i_version}, {@block_validity}]}, 0x5, 0x7e5, &(0x7f0000000fc0)="$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")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001880)={'sit0\x00', &(0x7f00000017c0)={'syztnl1\x00', 0x0, 0x20, 0x700, 0x101, 0x80000000, {{0x25, 0x4, 0x2, 0x12, 0x94, 0x68, 0x0, 0x40, 0x4, 0x0, @local, @private=0xa010101, {[@timestamp_prespec={0x44, 0x14, 0xef, 0x3, 0xa, [{@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x9, [{@empty, 0x401}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xfd, [@multicast2, @empty]}, @lsrr={0x83, 0x13, 0xc8, [@dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xa0, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0xeb}, {@empty, 0xea6d}, {@local, 0x1}, {@local, 0x1}, {@private=0xa010100, 0xfffffffb}, {@empty, 0x7}]}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001980)={'syztnl2\x00', &(0x7f0000001900)={'ip6gre0\x00', 0x0, 0x29, 0xb, 0x6, 0x0, 0x11, @mcast2, @private0, 0x80, 0x20, 0x7ff, 0xfffffff8}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000019c0)={0x0, @remote, @local}, &(0x7f0000001a00)=0xc)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001a40)={@private0}, &(0x7f0000001a80)=0x14)

1m12.73099793s ago: executing program 34 (id=482):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}}, &(0x7f00000001c0)=""/257, 0x26, 0x101, 0x6}, 0x28)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000008000071182b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x4, 0x1c, {0x1c, 0x4, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x12, &(0x7f0000000180)={@multicast, @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@generic={0x88ca}}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e001b"], 0x68}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000b00)=""/4110, 0x100e}], 0x1)

49.445456541s ago: executing program 7 (id=635):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r1 = epoll_create1(0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x0, 0x10b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0)
read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)

47.712403222s ago: executing program 7 (id=646):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20a1, &(0x7f0000000200)={[{@bsdgroups}, {@nodelalloc}, {@nogrpid}, {@noblock_validity}, {@dax_inode}, {@prjquota}]}, 0x1, 0x654, &(0x7f0000000ec0)="$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")

47.503912327s ago: executing program 7 (id=649):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

47.407520869s ago: executing program 7 (id=650):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00008000000024001280090001007866726d000000001400028008000100020000000800020004003000"/64], 0x58}}, 0x4048050)
setreuid(0xee01, 0xee01)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x40}, 0xc0004c5)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
wait4(r1, 0x0, 0x40000000, 0x0)
ptrace$cont(0x9, r1, 0x800007, 0x8000000000005)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000900)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1010066ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f29946222a35ae3cd83332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000007a00)="$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")
syz_clone(0x1000, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
setpriority(0x0, r1, 0x400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000000008a"], 0x0, 0x3c}, 0x28)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f00000002c0))
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='configfs\x00', 0xa0c802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800040000000000080000006b1198000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0)

46.95785429s ago: executing program 7 (id=654):
socketpair(0x1, 0x4, 0x4, &(0x7f00000001c0))
r0 = gettid()
time(&(0x7f00000000c0))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff020000004304b9c3374691b3776fa9332ad3a77da12609474f01e060cde8998dcdc9eadf6d4fc31cf0b9ce276d5d7a2abc643ba18bd3c330d830afc43374c73914ff716ccd6f64744c452580176c73be62050fa56fe3764e8cebe960fcb287160c03cfb21fbbcaa21e444d30f199d0c87eafb1d040084496a0c8d3d8faf7a58e2542b8715f99781760c1068b063e63fddde3b8f8a9a77e4e333da6e78438c8922aae7359774fcb0cdc06695f707c6b9c8456f4402793ea4c498d56de7d88435d8fe995658e6d9a0aa268d78433e819"], 0x20}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0xffffffffffffffc1, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x4000)

46.805894434s ago: executing program 7 (id=657):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r1 = epoll_create1(0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x0, 0x10b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0)
read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)

46.805676383s ago: executing program 35 (id=657):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r1 = epoll_create1(0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x0, 0x10b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0)
read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)

30.758566443s ago: executing program 6 (id=809):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x10068ad, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r2 = getpgid(r1)
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000000)=0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

30.727074954s ago: executing program 0 (id=810):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5)
pwrite64(r0, &(0x7f0000000100)='\n', 0x1, 0x8000c5b)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c5b)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCNOTTY(r1, 0x5422)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x1, 0x401, 0x4e7205d3, 0x11520e34, 0x7, "04419208367800003800080100000000c2dd00", 0x14, 0x200})
fcntl$setstatus(r2, 0x4, 0x2000)
pselect6(0x40, &(0x7f0000000100)={0x8, 0x800000000000000, 0xffffff7ffffffffc, 0x10001, 0x5, 0xffffffffffffffff, 0x8100000}, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140))
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

30.148533437s ago: executing program 6 (id=816):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x94)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bb"], 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000840)={0x14, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0003ec000000ec037431976567e7780be969e7e88ac5fff49a0e47"]}, 0x0)

29.706699308s ago: executing program 0 (id=817):
open(&(0x7f0000000240)='./file0\x00', 0xc2bc1, 0xa7)
faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2)

29.444584044s ago: executing program 0 (id=819):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x4, 0xa, 0x8, 0x4, @private1, @rand_addr=' \x01\x00', 0x10, 0x1, 0x1, 0x8}})
sendto$packet(r0, &(0x7f0000000000)="0a25e078edc91e4028e00f2ab9e403b96b7595954ccbf6148006718531ecc5a7c234aeb96bf6e403dad229381be6976e5d3647fe0466fa0f", 0x38, 0x48800, &(0x7f0000000100)={0x11, 0x4, r1, 0x1, 0x2, 0x6, @broadcast}, 0x14)
sendto$packet(r0, &(0x7f0000000140)="a0eb303379f837f407f19db4b2438da4bacf4b1ce00dc9164349473fe86576b7045d2beb792e626d12ac0476a4cc24edb8dc90978c3f065469f5637b4ad421704dd01ae439602ba2b70a1eecf6230dc0732e5f20869d139f2edcd5736b8959abacc5afab039b1307a9127a690d35fdecedd82c10f92f7f62cf101f57d6c95c8830e5c789e77fd6e2d14830a5a6615525cfc5f9b9ad78d57e32a07dc1594d199ae9a122a219968d892c27d9719c179579894f6465333e861599a9cb490bcef77120d91502444b1f9790db1f60524f3af3196fb8b1d4e14b47bd50fd7d77d9f2582007462de6c581e131ca", 0xea, 0x8000, &(0x7f0000000240)={0x11, 0x11, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = dup3(0xffffffffffffffff, r0, 0x80000)
r4 = socket$inet6(0xa, 0x4, 0x6)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d, r1})
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000002c0)={0x28, 0x6})
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\x00'}}, {@directio}, {@ignoreqv}, {@privport}, {@posixacl}, {@uname={'uname', 0x3d, '^'}}, {@version_9p2000}], [{@flag='silent'}, {@fsname={'fsname', 0x3d, '\x00'}}]}})
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x600000, 0x0)
ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000000540)={&(0x7f0000000480)=[{0xf, 0xed4f, 0x4, 0x1}, {0xad3b, 0x7fff, 0x7fffffff, 0x7}, {0x80000000, 0x8, 0x6, 0x6}, {0x8000000000000000, 0x8001, 0x6, 0x9}, {0x670, 0xfff, 0x2, 0x8}, {0x40, 0x43f5, 0x4, 0x6}], 0x6, 0x20, 0x2, 0xffffffff})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl1\x00', <r6=>r1, 0x2f, 0x2, 0x5, 0x0, 0x40, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x40, 0xf89a, 0x8}})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000640))
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x5f, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x7c}}, 0x0)
fsetxattr$security_selinux(r2, &(0x7f0000000b00), &(0x7f0000000b40)='system_u:object_r:watchdog_device_t:s0\x00', 0x27, 0x3)

29.425056974s ago: executing program 0 (id=820):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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")
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8)
openat(r0, &(0x7f0000000180)='./file1\x00', 0xa0c42, 0x1db)
open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c)
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socket$nl_xfrm(0x10, 0x3, 0x6)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80080000)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

29.045981174s ago: executing program 0 (id=823):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20a1, &(0x7f0000000200)={[{@bsdgroups}, {@nodelalloc}, {@nogrpid}, {@noblock_validity}, {@dax_inode}, {@prjquota}]}, 0x1, 0x654, &(0x7f0000000ec0)="$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")

28.577906414s ago: executing program 0 (id=825):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20a1, &(0x7f0000000200)={[{@bsdgroups}, {@nodelalloc}, {@nogrpid}, {@noblock_validity}, {@dax_inode}, {@prjquota}]}, 0x1, 0x654, &(0x7f0000000ec0)="$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")
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x1)

28.577724934s ago: executing program 36 (id=825):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20a1, &(0x7f0000000200)={[{@bsdgroups}, {@nodelalloc}, {@nogrpid}, {@noblock_validity}, {@dax_inode}, {@prjquota}]}, 0x1, 0x654, &(0x7f0000000ec0)="$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")
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x1)

28.026646997s ago: executing program 9 (id=826):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00')
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x1, 0x0, 0x1, 0x6, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x800000000000009, 0x3]}})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
close_range(r3, 0xffffffffffffffff, 0x0)

27.889962831s ago: executing program 9 (id=833):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=")
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8)
openat(r0, &(0x7f0000000180)='./file1\x00', 0xa0c42, 0x1db)
open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c)
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socket$nl_xfrm(0x10, 0x3, 0x6)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80080000)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

27.799014893s ago: executing program 9 (id=835):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x46)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})

27.704456385s ago: executing program 6 (id=838):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="f1f700", 0x3}], 0x1}, 0x4004000)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x181000)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x1425c1)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x0, 0x5516, 0x2000000})
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="bb", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790038000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x600200, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f00000002c0))

27.629800387s ago: executing program 9 (id=839):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRES16, @ANYRES16], 0x9, 0x155d, &(0x7f0000002640)="$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")
open(0x0, 0xc2bc1, 0xa7)
faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2)

27.629690587s ago: executing program 37 (id=839):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRES16, @ANYRES16], 0x9, 0x155d, &(0x7f0000002640)="$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")
open(0x0, 0xc2bc1, 0xa7)
faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2)

26.826365516s ago: executing program 6 (id=847):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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")
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8)
openat(r0, &(0x7f0000000180)='./file1\x00', 0xa0c42, 0x1db)
open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c)
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socket$nl_xfrm(0x10, 0x3, 0x6)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80080000)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

26.745860618s ago: executing program 8 (id=848):
setpgid(0x0, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
timerfd_create(0x7, 0x800)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000280)="f5", 0x1)
setsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, 0x0)
dup(r6)
write$tun(r5, &(0x7f0000000040)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3b, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @private=0xa010901, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e24, 0x4e25, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x4, 0x0, 0x2}}}}}}}, 0x3a)

26.711202189s ago: executing program 6 (id=849):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x94)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

26.537880173s ago: executing program 6 (id=851):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402)
ioctl$USBDEVFS_CONTROL(r1, 0x8008550e, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
sync_file_range(r2, 0x0, 0x7, 0x6)
r3 = socket(0x11, 0x3, 0xff)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r5, @ANYRES64=r4, @ANYRES8=r6, @ANYRES16=r4, @ANYRES64=r4, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14ff, &(0x7f0000003ac0)="$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")
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="030abd428c"], 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
fchown(r7, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x11, {0x0, 0x63, 0x0, 0x0, 0x8, 0x3}})

26.537707043s ago: executing program 38 (id=851):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402)
ioctl$USBDEVFS_CONTROL(r1, 0x8008550e, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
sync_file_range(r2, 0x0, 0x7, 0x6)
r3 = socket(0x11, 0x3, 0xff)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r5, @ANYRES64=r4, @ANYRES8=r6, @ANYRES16=r4, @ANYRES64=r4, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14ff, &(0x7f0000003ac0)="$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")
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="030abd428c"], 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
fchown(r7, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x11, {0x0, 0x63, 0x0, 0x0, 0x8, 0x3}})

26.458918995s ago: executing program 8 (id=855):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback=r3, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)

26.381754926s ago: executing program 8 (id=856):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x6727, 0x2, 0x8, 0x93, 0x8, <r1=>0x0})
getpgrp(r1)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97<cAZR\n w\xe6\x1c\xf0(\x96H\x88\x00\xd3\x1c\x16cj\x10\xd8\x92\xc9ad\xc0aR\x12\xd3\xc2J\xcb\x9a\xa5\xce#{e\xd3\x11\xc5}\xb4F1\xfb\xe6\xd4T\v\x87\x04\xcf\b.\xcaO\x04\x0f\x062\xcaL\x81\xa6\xbbp\xd3\xc6$4t (W\x92nr\xbe,\b\xdb\x7f[', 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x40004046)
sendto$inet6(r0, 0x0, 0x0, 0x400adc0, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x62}}, 0x1c)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f00000000c0))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x2a8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x210, 0x1f0, 0x1f0, 0x210, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x81, 0x0, [0x4e24, 0x4e24, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@ip={@private=0xa010101, @remote, 0xff000000, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_team\x00', {}, {}, 0x73, 0x1, 0x7}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0xf, 0x26, 0x19, 0x2c, 0x1008, 0xe, 0x3e, 0x8, 0xa, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000003000000000000c300"/88], 0x58)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000002900000004000000620000e100000000"], 0x18}}], 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="680000001089500404000000030d002000000000412fafc1b422b9e2babd601f76fe8a675da062b5e212b7a80b998d314e8f3e890de78c5662b0881e0161c1e47b1334752ce3c9ac4a18b1c75a372c6c40b8babe3ad2d023a49460bfec0e3fe04ae90719c02cf00110fb4ccc1988da0b563c644306646b7fee248e1f074fe0f1616a7a1faa0e7a745da3ca4eec0a690fb67414dbabf1b56e81014a343a736d81fcbd5dc76c449d529ae70b0c41a99df924d9", @ANYRES32=0x0, @ANYBLOB="000200000000000034001280110001006272696467655f736c617665000000001c00058005001c000100000005001e000000000005001d0000000000140003006272696467655f736c6176655f300000"], 0x68}, 0x1, 0x0, 0x0, 0x440d0}, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)

25.253847153s ago: executing program 8 (id=859):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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")
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8)
openat(r0, &(0x7f0000000180)='./file1\x00', 0xa0c42, 0x1db)
open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c)
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socket$nl_xfrm(0x10, 0x3, 0x6)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80080000)
read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

25.014893778s ago: executing program 8 (id=860):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x80)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x31e, 0x1})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0xffffffffffffffff})
timerfd_create(0x9, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r6 = userfaultfd(0x80001)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x20e7c3, 0x0)
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x102100, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0)
ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000453000/0x3000)=nil, 0x3000}, 0x2})
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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")
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000004c0)={0x1000000, 0x10000002000003, 0x0, 0x30006, 0x1, 0x0, [{0xf, 0xd, 0x2, '\x00', 0x2001}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlockall(0x7)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0xfffffffffffffff2, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000bc0)={0x10, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000000))

24.821698053s ago: executing program 8 (id=862):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x10068ad, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r2 = getpgid(r1)
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000000)=0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

24.801075234s ago: executing program 39 (id=862):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x10068ad, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r2 = getpgid(r1)
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000000)=0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2.898138221s ago: executing program 1 (id=1035):
r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)

2.893784791s ago: executing program 2 (id=1036):
getpgrp(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ftruncate(0xffffffffffffffff, 0x8800000)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17)
read(r0, &(0x7f0000002fc0)=""/52, 0x34)

2.435055152s ago: executing program 4 (id=1054):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r0, &(0x7f00000003c0)="30aff57f", 0x4)

2.406281593s ago: executing program 4 (id=1055):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfdfff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="0fa437f3", 0x4}], 0x1}}], 0x1, 0x20040844)

2.357974194s ago: executing program 4 (id=1056):
setns(0xc9, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d0000080002000000000008000900"], 0x38}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c000280080001"], 0x38}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000041000103030000000000000003"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0)

2.357864414s ago: executing program 4 (id=1057):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5", 0x3a}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8", 0x94}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f", 0xe8}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e339dbd36b34c6a2b15fd03bc0e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da", 0x33}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090)
close(0x3)

2.353955694s ago: executing program 4 (id=1058):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)

2.326012895s ago: executing program 4 (id=1059):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0xc018480d, &(0x7f0000000080)={0x2, 0x1947})

2.162680789s ago: executing program 5 (id=1067):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="1400238006000200e3"], 0x30}, 0x1, 0x0, 0x0, 0xc044}, 0x0)

2.161545659s ago: executing program 5 (id=1069):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
unshare(0x20000400)
ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000003c0)={0x0, 0x0, 0x199, 0x1})

2.032576882s ago: executing program 5 (id=1071):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)

2.032531342s ago: executing program 5 (id=1072):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, 0x0, 0x0, 0x2000000, 0x9, 0xffffffff, 0x5, 0x6, 0x0})

1.997252143s ago: executing program 5 (id=1074):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xeaac6000)
close(0xffffffffffffffff)

1.993147613s ago: executing program 1 (id=1075):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)

1.935249814s ago: executing program 2 (id=1078):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)

1.891305045s ago: executing program 2 (id=1079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0)

1.829965487s ago: executing program 1 (id=1080):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4)

1.829853467s ago: executing program 1 (id=1081):
r0 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="01154e0001000011221e445588fb", 0xe, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14)

1.829778727s ago: executing program 1 (id=1082):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1.829680957s ago: executing program 1 (id=1083):
r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1.815715997s ago: executing program 2 (id=1084):
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@random="331801007f31", @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x8, 0x87, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@routing={0x3b, 0x0, 0x1, 0x5}]}}}}}, 0x0)

1.808169007s ago: executing program 2 (id=1085):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

1.721934179s ago: executing program 2 (id=1086):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000440), 0x4, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185)

395.422311ms ago: executing program 3 (id=1090):
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

313.889602ms ago: executing program 5 (id=1091):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

105.951627ms ago: executing program 3 (id=1092):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2013}, @NL80211_ATTR_PMKID={0x14, 0x55, "962ee81a611ffddd6a1a97ab170463ce"}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x80)

85.411178ms ago: executing program 3 (id=1093):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f", 0x10, 0x4004085, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xd, 0x0)

360.64µs ago: executing program 3 (id=1094):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00')
fchdir(r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1)

173.77µs ago: executing program 3 (id=1095):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x8, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @random="9e4338bf2d14", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0)
socket$inet6(0x10, 0x2, 0x4)

0s ago: executing program 3 (id=1096):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.859853][ T2331] R13: 00007f503d540038 R14: 00007f503d53ffa0 R15: 00007ffec3630578
[  113.883541][ T1100] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor
[  113.891740][ T1100] usb 6-1: 1:1 : sample bitwidth 190 in over sample bytes 3
[  113.905081][ T1100] usb 6-1: 1:1 : unsupported format bits 0xc86b167e
[  113.912191][ T1100] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  113.953495][ T1100] usb 6-1: unit 2 not found!
[  113.957733][ T2336] kvm: pic: non byte write
[  113.958156][ T1100] usb 6-1: unit 0 not found!
[  114.025080][ T1100] usb 6-1: USB disconnect, device number 7
[  114.055029][ T2343] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  114.074592][ T2343] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  114.087993][ T2343] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  114.136367][    T5] usb 8-1: USB disconnect, device number 3
[  114.164651][ T2343] fuse: Bad value for 'fd'
[  114.205051][ T2347] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  114.214567][ T2349] mmap: syz.7.600 (2349): VmData 167424000 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  114.218574][ T2306] udevd[2306]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory
[  114.233352][ T2347] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  114.291545][ T2347] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  114.343692][ T2355] EXT4-fs (loop2): Ignoring removed orlov option
[  114.374729][ T2358] EXT4-fs (loop7): Unrecognized mount option "subj_type=\%:+#" or missing value
[  114.397787][ T2355] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue
[  114.411994][ T2355] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.434456][ T2353] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  114.469792][ T2353] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  114.478933][ T2353] F2FS-fs (loop5): invalid crc value
[  114.486246][ T2353] F2FS-fs (loop5): Found nat_bits in checkpoint
[  114.508255][ T2353] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  114.515889][ T2353] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  114.633738][ T2364] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  114.886808][ T2364] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  115.395892][ T2353] attempt to access beyond end of device
[  115.395892][ T2353] loop5: rw=2049, want=45104, limit=40427
[  115.413191][ T2364] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  115.436633][ T2353] attempt to access beyond end of device
[  115.436633][ T2353] loop5: rw=2049, want=40968, limit=40427
[  115.481708][  T287] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  115.491449][ T2380] kvm: pic: non byte write
[  115.550240][ T2386] netlink: 200 bytes leftover after parsing attributes in process `syz.2.610'.
[  115.628317][ T2390] fuse: Bad value for 'fd'
[  115.643702][   T24] kauditd_printk_skb: 21 callbacks suppressed
[  115.643711][   T24] audit: type=1400 audit(1788429820.662:1170): avc:  denied  { read write } for  pid=2391 comm="syz.6.612" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  115.685237][ T2392] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.733646][   T24] audit: type=1400 audit(1788429820.682:1171): avc:  denied  { open } for  pid=2391 comm="syz.6.612" path="/33/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  115.736331][ T2392] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  115.757271][   T24] audit: type=1400 audit(1788429820.692:1172): avc:  denied  { ioctl } for  pid=2391 comm="syz.6.612" path="/33/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  115.796847][ T2392] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  115.844838][   T24] audit: type=1400 audit(1788429820.862:1173): avc:  denied  { ioctl } for  pid=2391 comm="syz.6.612" path="/33/bus/file1" dev="loop6" ino=1048686 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  115.882918][ T2386] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  115.893574][ T2386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  115.913514][  T287] usb 8-1: unable to get BOS descriptor or descriptor too short
[  115.931380][ T2386] F2FS-fs (loop2): fault_injection options not supported
[  115.953912][  T287] usb 8-1: not running at top speed; connect to a high speed hub
[  116.023923][ T2386] F2FS-fs (loop2): invalid crc value
[  116.063078][ T2386] F2FS-fs (loop2): Found nat_bits in checkpoint
[  116.073542][  T287] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.088392][  T287] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  116.100236][  T287] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  116.138721][ T2386] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  116.145772][ T2386] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  116.152857][ T2386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  116.174041][ T2410] EXT4-fs (loop6): Ignoring removed orlov option
[  116.205046][ T2410] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue
[  116.218996][ T2410] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.283879][  T287] usb 8-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  116.293075][  T287] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.301989][  T287] usb 8-1: Product: syz
[  116.306580][  T287] usb 8-1: Manufacturer: syz
[  116.311430][  T287] usb 8-1: SerialNumber: syz
[  116.373489][  T386] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  116.409335][ T2416] EXT4-fs (loop6): Unrecognized mount option "subj_type=\%:+#" or missing value
[  116.593865][ T2423] fuse: Bad value for 'fd'
[  116.629614][ T2423] kvm [2422]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0
[  116.638722][ T2423] kvm [2422]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0
[  116.649444][ T2423] kvm [2422]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111
[  116.733504][  T386] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  116.743932][ T2420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  116.753817][  T386] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  116.762981][  T386] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 12336, setting to 64
[  116.852961][ T2432] SELinux: security policydb version 15 (MLS) not backwards compatible
[  116.871406][ T2432] SELinux: failed to load policy
[  116.879099][ T2429] kvm: pic: non byte write
[  116.943541][  T386] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  116.944050][ T2436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.621'.
[  116.961838][  T386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.973593][  T287] usb 8-1: 1:1 : no or invalid class specific endpoint descriptor
[  116.991617][  T386] usb 6-1: Product: syz
[  116.995963][  T287] usb 8-1: 1:1 : sample bitwidth 190 in over sample bytes 3
[  117.009934][  T386] usb 6-1: Manufacturer: syz
[  117.019632][  T386] usb 6-1: SerialNumber: syz
[  117.024442][  T287] usb 8-1: 1:1 : unsupported format bits 0xc86b167e
[  117.042420][  T287] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  117.115980][  T287] usb 8-1: unit 2 not found!
[  117.121405][  T287] usb 8-1: unit 0 not found!
[  117.177725][  T287] usb 8-1: USB disconnect, device number 4
[  117.221383][   T24] audit: type=1400 audit(1788429822.232:1174): avc:  denied  { write } for  pid=2451 comm="syz.2.630" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  117.222993][ T2452] à‹
[  117.427328][ T2408] EXT4-fs (loop5): Test dummy encryption mode enabled
[  117.440074][ T2408] EXT4-fs (loop5): Test dummy encryption mode enabled
[  117.453150][  T537] attempt to access beyond end of device
[  117.453150][  T537] loop7: rw=1, want=7992, limit=512
[  117.474075][ T2408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002]
[  117.480940][  T537] attempt to access beyond end of device
[  117.480940][  T537] loop7: rw=1, want=13616, limit=512
[  117.482164][ T2408] System zones: 1-12
[  117.501671][ T2408] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug,minixdf,jqfmt=vfsv1,prjquota,nombcache,min_batch_time=0x0000000000000005,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,
[  117.541493][  T537] attempt to access beyond end of device
[  117.541493][  T537] loop7: rw=1, want=16464, limit=512
[  117.603688][ T2408] EXT4-fs error (device loop5): htree_dirblock_to_tree:1063: inode #2: comm syz.5.614: Directory hole found for htree leaf block 0
[  117.660689][ T2408] EXT4-fs (loop5): Remounting filesystem read-only
[  117.724809][ T2408] udc-core: couldn't find an available UDC or it's busy
[  117.731874][ T2408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  117.764547][ T2464] kvm: pic: non byte write
[  118.063473][    T5] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  118.125552][ T2476] EXT4-fs (loop6): Unrecognized mount option "subj_type=\%:+#" or missing value
[  118.383477][    T5] usb 1-1: not running at top speed; connect to a high speed hub
[  118.463609][    T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.475448][    T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.495326][    T5] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00
[  118.504417][    T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.563927][    T5] hub 1-1:1.0: USB hub found
[  119.603619][    T5] hub 1-1:1.0: config failed, can't read hub descriptor (err -22)
[  119.616563][ T2499] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,barrier=0x0000000000010001,,errors=continue
[  119.628526][ T2499] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.639902][    T5] usb 1-1: USB disconnect, device number 16
[  119.703479][  T386] usb 6-1: 0:2 : does not exist
[  119.724569][  T386] usb 6-1: USB disconnect, device number 8
[  119.782684][ T2511] EXT4-fs (loop5): Unrecognized mount option "subj_type=\%:+#" or missing value
[  119.793656][ T2515] overlayfs: failed to resolve './bus': -2
[  119.839416][ T2515] EXT4-fs error (device loop6): ext4_remount:5882: Abort forced by user
[  119.871817][ T2515] EXT4-fs (loop6): Remounting filesystem read-only
[  119.880098][ T2517] netlink: 20 bytes leftover after parsing attributes in process `syz.7.650'.
[  119.889977][ T2515] EXT4-fs (loop6): re-mounted. Opts: (null)
[  119.923890][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  120.064016][ T2507] F2FS-fs (loop2): invalid crc value
[  120.098548][ T2507] F2FS-fs (loop2): Found nat_bits in checkpoint
[  120.119416][ T2507] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  120.126388][ T2520] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  120.136388][ T2520] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  120.141143][ T2529] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d)
[  120.144645][ T2507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  120.159448][ T2520] F2FS-fs (loop7): Found nat_bits in checkpoint
[  120.197926][ T2520] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  120.205175][ T2520] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  120.296562][ T2537] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  120.308483][ T2537] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  120.488521][ T2547] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  120.501881][ T2547] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  120.502395][ T2549] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.517515][    T5] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  120.519271][ T2547] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  120.529985][ T2549] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.550934][ T2549] device bridge_slave_0 entered promiscuous mode
[  120.567679][ T2549] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.574990][ T2549] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.582394][ T2549] device bridge_slave_1 entered promiscuous mode
[  120.895306][ T2549] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.902397][ T2549] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.909678][ T2549] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.916710][ T2549] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.244472][ T2558] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  121.580247][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.593982][ T2558] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  121.602478][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.623111][ T2558] F2FS-fs (loop5): invalid crc value
[  121.646815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  121.654616][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  121.676294][ T2558] F2FS-fs (loop5): Found nat_bits in checkpoint
[  121.691892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  121.714229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.722473][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.728102][ T2558] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  121.729528][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.743707][ T2558] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  121.751455][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  121.759890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.768164][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.775247][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.782610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.791017][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.791591][ T2566] EXT4-fs (loop6): Unrecognized mount option "subj_type=\%:+#" or missing value
[  121.806788][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.816334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.818738][ T2558] attempt to access beyond end of device
[  121.818738][ T2558] loop5: rw=2049, want=45104, limit=40427
[  121.824447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  121.844000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.854448][ T2549] device veth0_vlan entered promiscuous mode
[  121.863506][    T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.876320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.877575][    T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.885947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.901272][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.909136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.909824][ T2558] attempt to access beyond end of device
[  121.909824][ T2558] loop5: rw=2049, want=40968, limit=40427
[  121.919206][ T2549] device veth1_macvtap entered promiscuous mode
[  121.939353][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.947651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.956039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  121.968804][ T2572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'.
[  121.998914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.012176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.020730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.029611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.055365][    T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  122.073621][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.082085][  T537] device bridge_slave_1 left promiscuous mode
[  122.088382][  T537] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.092237][    T5] usb 1-1: Product: syz
[  122.099732][    T5] usb 1-1: Manufacturer: syz
[  122.105421][  T537] device bridge_slave_0 left promiscuous mode
[  122.111661][  T537] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.118826][    T5] usb 1-1: SerialNumber: syz
[  122.124303][  T537] device veth1_macvtap left promiscuous mode
[  122.130545][  T537] device veth0_vlan left promiscuous mode
[  122.146821][ T2577] erofs: (device loop8): mounted with root inode @ nid 36.
[  122.148473][ T2580] x_tables: duplicate underflow at hook 1
[  122.238235][ T2582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.666'.
[  122.250309][ T2583] netlink: 27 bytes leftover after parsing attributes in process `syz.2.664'.
[  122.274906][ T2572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1810 sclass=netlink_route_socket pid=2572 comm=syz.2.664
[  122.344761][ T2585] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,barrier=0x0000000000010001,,errors=continue
[  122.356716][ T2585] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.453563][    T5] usb 1-1: 0:2 : does not exist
[  122.464237][    T5] usb 1-1: USB disconnect, device number 17
[  122.512841][ T2605] overlayfs: failed to resolve './bus': -2
[  122.523707][ T2605] EXT4-fs error (device loop6): ext4_remount:5882: Abort forced by user
[  122.532097][ T2605] EXT4-fs (loop6): Remounting filesystem read-only
[  122.539128][ T2605] EXT4-fs (loop6): re-mounted. Opts: (null)
[  122.754799][ T2606] EXT4-fs (loop8): Ignoring removed orlov option
[  122.845829][ T2606] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue
[  122.860142][ T2606] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.893805][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  122.964089][ T2603] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  122.979034][ T2603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  123.000921][ T2603] F2FS-fs (loop2): invalid crc value
[  123.008725][ T2603] F2FS-fs (loop2): Found nat_bits in checkpoint
[  123.032403][ T2603] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  123.039532][ T2603] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  123.067072][ T2618] EXT4-fs (loop6): Unrecognized mount option "subj_type=\%:+#" or missing value
[  123.080401][ T2603] attempt to access beyond end of device
[  123.080401][ T2603] loop2: rw=2049, want=45104, limit=40427
[  123.093204][ T2603] attempt to access beyond end of device
[  123.093204][ T2603] loop2: rw=2049, want=40968, limit=40427
[  123.335183][ T2629] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  123.344229][    T5] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  124.126446][ T2660] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d)
[  124.153736][    T5] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  124.161797][    T5] usb 9-1: config 0 has no interface number 0
[  124.169320][    T5] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  124.185230][    T5] usb 9-1: config 0 interface 2 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  124.195999][    T5] usb 9-1: config 0 interface 2 has no altsetting 0
[  124.294077][ T2667] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  124.301899][ T2667] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  124.319328][ T2667] F2FS-fs (loop0): invalid crc value
[  124.333143][ T2667] F2FS-fs (loop0): Found nat_bits in checkpoint
[  124.353677][    T5] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  124.365319][    T5] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.375887][ T2667] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  124.383066][ T2667] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  124.383538][    T5] usb 9-1: Product: syz
[  124.408356][    T5] usb 9-1: Manufacturer: syz
[  124.408642][ T2667] attempt to access beyond end of device
[  124.408642][ T2667] loop0: rw=2049, want=45104, limit=40427
[  124.413060][    T5] usb 9-1: SerialNumber: syz
[  124.433870][    T5] usb 9-1: config 0 descriptor??
[  124.441258][ T2667] attempt to access beyond end of device
[  124.441258][ T2667] loop0: rw=2049, want=40968, limit=40427
[  124.453450][  T386] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  124.457014][ T2625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  124.861251][ T2690] EXT4-fs (loop0): Unrecognized mount option "subj_type=\%:+#" or missing value
[  124.873688][    T5] usb 9-1: invalid MIDI in EP 0
[  124.879147][    T5] snd-usb-audio: probe of 9-1:0.2 failed with error -22
[  125.066522][  T386] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.100667][  T386] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.170378][ T1100] usb 9-1: USB disconnect, device number 2
[  125.247571][ T2698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  125.283541][  T386] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  125.292861][  T386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.301092][  T386] usb 6-1: Product: syz
[  125.305494][  T386] usb 6-1: Manufacturer: syz
[  125.310407][  T386] usb 6-1: SerialNumber: syz
[  125.432594][ T2705] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  125.444768][ T2705] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  125.554669][   T24] audit: type=1326 audit(1788429830.572:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  125.581012][   T24] audit: type=1326 audit(1788429830.572:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  125.606073][   T24] audit: type=1326 audit(1788429830.582:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  125.631063][   T24] audit: type=1326 audit(1788429830.582:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  125.656042][   T24] audit: type=1326 audit(1788429830.582:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  125.673555][  T386] usb 6-1: 0:2 : does not exist
[  125.681213][   T24] audit: type=1326 audit(1788429830.582:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  125.700080][  T386] usb 6-1: USB disconnect, device number 9
[  125.770342][ T2719] hub 7-0:1.0: USB hub found
[  125.775586][ T2719] hub 7-0:1.0: 1 port detected
[  126.009888][   T24] audit: type=1326 audit(1788429830.582:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  126.042585][   T24] audit: type=1326 audit(1788429830.582:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  126.071965][   T24] audit: type=1326 audit(1788429830.582:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  126.096890][   T24] audit: type=1326 audit(1788429830.582:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.2.701" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  126.140501][ T2728] EXT4-fs (loop6): Unrecognized mount option "subj_type=\%:+#" or missing value
[  126.153954][ T1100] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  126.204102][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  126.334531][ T2738] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  126.349908][ T2738] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  127.323483][ T1100] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  127.365276][ T1100] usb 1-1: config 0 has no interface number 0
[  127.371733][ T1100] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  127.382660][ T1100] usb 1-1: config 0 interface 2 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  127.410051][ T1100] usb 1-1: config 0 interface 2 has no altsetting 0
[  127.473620][    T5] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  127.527333][ T2769] EXT4-fs (loop6): Unrecognized mount option "subj_type=\%:+#" or missing value
[  127.593584][ T1100] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  127.602706][ T1100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.611118][ T1100] usb 1-1: Product: syz
[  127.615346][ T1100] usb 1-1: Manufacturer: syz
[  127.619947][ T1100] usb 1-1: SerialNumber: syz
[  127.625094][ T1100] usb 1-1: config 0 descriptor??
[  127.634001][ T2772] EXT4-fs (loop2): Ignoring removed orlov option
[  127.643631][ T2715] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  127.644894][ T2772] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  127.693060][ T2779] netlink: 'syz.8.725': attribute type 7 has an invalid length.
[  127.700836][ T2779] netlink: 'syz.8.725': attribute type 5 has an invalid length.
[  127.708773][ T2779] netlink: 17 bytes leftover after parsing attributes in process `syz.8.725'.
[  127.817586][ T2787] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  127.829612][ T2787] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  127.862107][    T5] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  127.880177][    T5] usb 6-1: config 0 has no interface number 0
[  127.887290][    T5] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  127.900478][    T5] usb 6-1: config 0 interface 2 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  127.922744][    T5] usb 6-1: config 0 interface 2 has no altsetting 0
[  127.933840][ T1100] usb 1-1: invalid MIDI in EP 0
[  127.977077][ T1100] snd-usb-audio: probe of 1-1:0.2 failed with error -22
[  128.083529][    T5] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  128.097800][    T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.298157][    T5] usb 6-1: Product: syz
[  128.305501][    T5] usb 6-1: Manufacturer: syz
[  128.308967][   T20] usb 1-1: USB disconnect, device number 18
[  128.348088][    T5] usb 6-1: SerialNumber: syz
[  128.382706][    T5] usb 6-1: config 0 descriptor??
[  128.403493][ T2748] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  128.803567][    T5] usb 6-1: invalid MIDI in EP 0
[  128.808865][    T5] snd-usb-audio: probe of 6-1:0.2 failed with error -22
[  128.867341][    T5] usb 6-1: USB disconnect, device number 10
[  128.874823][ T2811] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  128.891480][ T2811] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  128.900684][ T2811] F2FS-fs (loop8): invalid crc value
[  128.917544][ T2811] F2FS-fs (loop8): Found nat_bits in checkpoint
[  128.981325][ T2811] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  128.988598][ T2811] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  129.052514][ T2811] attempt to access beyond end of device
[  129.052514][ T2811] loop8: rw=2049, want=45104, limit=40427
[  129.065615][ T2811] attempt to access beyond end of device
[  129.065615][ T2811] loop8: rw=2049, want=40968, limit=40427
[  129.410369][ T2827] EXT4-fs (loop6): Unrecognized mount option "subj_type=\%:+#" or missing value
[  129.584483][ T2842] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  129.623874][ T2842] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  129.668674][ T2852] hub 7-0:1.0: USB hub found
[  129.693262][ T2852] hub 7-0:1.0: 1 port detected
[  129.877651][ T2857] hub 7-0:1.0: USB hub found
[  129.882959][ T2857] hub 7-0:1.0: 1 port detected
[  130.685516][   T24] kauditd_printk_skb: 94 callbacks suppressed
[  130.685528][   T24] audit: type=1326 audit(1788429835.692:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2854 comm="syz.6.748" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef492159 code=0x7ffc0000
[  130.730821][   T24] audit: type=1326 audit(1788429835.692:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2854 comm="syz.6.748" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef492159 code=0x7ffc0000
[  130.771773][ T2860] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  130.784527][ T2860] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  130.807286][ T2860] F2FS-fs (loop0): invalid crc value
[  130.839951][ T2860] F2FS-fs (loop0): Found nat_bits in checkpoint
[  130.906048][ T2860] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  130.916211][ T2860] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  130.957090][ T2860] attempt to access beyond end of device
[  130.957090][ T2860] loop0: rw=2049, want=45104, limit=40427
[  130.981989][ T2860] attempt to access beyond end of device
[  130.981989][ T2860] loop0: rw=2049, want=40968, limit=40427
[  131.061631][   T24] audit: type=1326 audit(1788429836.072:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz.2.747" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  131.083464][   T20] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  131.094196][   T24] audit: type=1326 audit(1788429836.072:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz.2.747" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  131.374039][ T2887] EXT4-fs (loop5): Unrecognized mount option "subj_type=\%:+#" or missing value
[  131.453508][   T20] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  131.461598][   T20] usb 7-1: config 0 has no interface number 0
[  131.467750][   T20] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  131.473515][ T1100] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  131.478512][   T20] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  131.501299][   T20] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  131.511218][   T20] usb 7-1: config 0 interface 2 has no altsetting 0
[  131.615441][ T2892] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  131.627311][ T2892] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  131.693543][   T20] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  131.702660][   T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.710929][   T20] usb 7-1: Product: syz
[  131.715228][   T20] usb 7-1: Manufacturer: syz
[  131.719829][   T20] usb 7-1: SerialNumber: syz
[  131.725525][   T20] usb 7-1: config 0 descriptor??
[  131.743518][ T2870] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  131.808818][   T24] audit: type=1326 audit(1788429836.822:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2900 comm="syz.5.762" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  131.833720][   T24] audit: type=1326 audit(1788429836.822:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2900 comm="syz.5.762" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  131.859102][   T24] audit: type=1326 audit(1788429836.822:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2900 comm="syz.5.762" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  131.884331][ T1100] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.884439][   T24] audit: type=1326 audit(1788429836.822:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2900 comm="syz.5.762" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  131.894568][ T1100] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.919540][   T24] audit: type=1326 audit(1788429836.822:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2900 comm="syz.5.762" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  131.953029][   T24] audit: type=1326 audit(1788429836.822:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2900 comm="syz.5.762" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  132.053979][   T20] snd-usb-audio: probe of 7-1:0.2 failed with error -12
[  132.164871][ T2910] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,barrier=0x0000000000010001,,errors=continue
[  132.177297][ T2910] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.203552][   T20] usb 7-1: USB disconnect, device number 6
[  132.213560][ T1100] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.222628][ T1100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.240712][ T1100] usb 1-1: Product: syz
[  132.245135][ T1100] usb 1-1: Manufacturer: syz
[  132.249758][ T1100] usb 1-1: SerialNumber: syz
[  132.265023][ T2917] EXT4-fs error (device loop5): ext4_remount:5882: Abort forced by user
[  132.273688][ T2917] EXT4-fs (loop5): Remounting filesystem read-only
[  132.282614][ T2907] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  132.294072][ T2907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  132.304110][ T2917] EXT4-fs (loop5): re-mounted. Opts: (null)
[  132.315424][ T2919] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[  132.322335][ T2907] F2FS-fs (loop2): invalid crc value
[  132.331444][ T2907] F2FS-fs (loop2): Found nat_bits in checkpoint
[  132.366317][ T2907] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  132.373492][ T2907] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  132.409424][ T2907] attempt to access beyond end of device
[  132.409424][ T2907] loop2: rw=2049, want=45104, limit=40427
[  132.423169][ T2907] attempt to access beyond end of device
[  132.423169][ T2907] loop2: rw=2049, want=40968, limit=40427
[  132.573714][ T1100] usb 1-1: 0:2 : does not exist
[  132.586690][ T1100] usb 1-1: USB disconnect, device number 19
[  132.595280][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  132.621851][ T2928] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  132.633786][ T2928] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  132.668735][ T2931] EXT4-fs (loop8): Unrecognized mount option "subj_type=\%:+#" or missing value
[  132.794462][ T2939] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  132.806619][ T2939] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  133.149963][ T2947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'.
[  133.424893][ T2960] EXT4-fs (loop0): Ignoring removed orlov option
[  133.427525][ T2938] F2FS-fs (loop6): invalid crc value
[  133.437990][ T2938] F2FS-fs (loop6): Found nat_bits in checkpoint
[  133.457501][ T2960] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  133.465766][ T2938] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[  133.488882][ T2938] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  133.496410][ T2958] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  133.496427][ T2958] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  133.515380][ T2958] F2FS-fs (loop2): invalid crc value
[  133.528070][ T2958] F2FS-fs (loop2): Found nat_bits in checkpoint
[  133.600016][ T2958] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  133.607179][ T2958] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  133.629044][ T2958] attempt to access beyond end of device
[  133.629044][ T2958] loop2: rw=2049, want=45104, limit=40427
[  133.641843][ T2958] attempt to access beyond end of device
[  133.641843][ T2958] loop2: rw=2049, want=40968, limit=40427
[  133.655508][ T2979] exfat: Deprecated parameter 'namecase'
[  133.661181][ T2979] exfat: Deprecated parameter 'utf8'
[  133.696632][ T2979] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  133.833923][ T2988] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  133.854119][ T2988] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  133.893509][   T20] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  134.036392][ T3002] hub 7-0:1.0: USB hub found
[  134.041352][ T3002] hub 7-0:1.0: 1 port detected
[  134.263802][   T20] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  134.266033][   T15] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  134.282085][   T20] usb 1-1: config 0 has no interface number 0
[  134.312398][   T20] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  134.323671][   T20] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  134.335053][   T20] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  134.336923][ T3008] EXT4-fs (loop6): Ignoring removed orlov option
[  134.344862][   T20] usb 1-1: config 0 interface 2 has no altsetting 0
[  134.366731][ T3008] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue
[  134.380666][ T3008] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.543533][   T20] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  134.552685][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.561247][ T3015] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  134.569207][   T20] usb 1-1: Product: syz
[  134.573462][ T3015] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  134.581755][   T20] usb 1-1: Manufacturer: syz
[  134.586662][   T20] usb 1-1: SerialNumber: syz
[  134.597426][ T3015] F2FS-fs (loop2): invalid crc value
[  134.604836][   T20] usb 1-1: config 0 descriptor??
[  134.619823][ T3015] F2FS-fs (loop2): Found nat_bits in checkpoint
[  135.050183][ T2980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  135.192775][ T3025] exfat: Deprecated parameter 'namecase'
[  135.216381][ T3015] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  135.223905][ T3025] exfat: Deprecated parameter 'utf8'
[  135.229374][ T3015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  135.261932][ T3025] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  135.439205][ T3015] attempt to access beyond end of device
[  135.439205][ T3015] loop2: rw=2049, want=45104, limit=40427
[  135.451785][ T3015] attempt to access beyond end of device
[  135.451785][ T3015] loop2: rw=2049, want=40968, limit=40427
[  135.474023][   T20] snd-usb-audio: probe of 1-1:0.2 failed with error -12
[  135.503529][   T15] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.514262][   T15] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.636047][    T5] usb 1-1: USB disconnect, device number 20
[  135.683541][   T15] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.702779][   T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.711325][   T15] usb 6-1: Product: syz
[  135.715559][   T15] usb 6-1: Manufacturer: syz
[  135.720205][   T15] usb 6-1: SerialNumber: syz
[  135.756528][ T3038] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,dioread_lock,nobarrier,,errors=continue
[  135.772104][ T3038] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  136.036781][ T3029] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[  136.047286][ T3029] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  136.056485][ T3029] F2FS-fs (loop6): invalid crc value
[  136.071876][ T3029] F2FS-fs (loop6): Found nat_bits in checkpoint
[  136.090129][ T3048] EXT4-fs (loop8): Ignoring removed orlov option
[  136.103506][   T15] usb 6-1: 0:2 : does not exist
[  136.110678][   T15] usb 6-1: USB disconnect, device number 11
[  136.118404][   T24] kauditd_printk_skb: 62 callbacks suppressed
[  136.118415][   T24] audit: type=1326 audit(1788429841.132:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.141365][ T3029] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  136.159088][ T3029] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  136.159264][ T3048] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  136.269465][ T3065] hub 7-0:1.0: USB hub found
[  136.274764][ T3065] hub 7-0:1.0: 1 port detected
[  136.385617][   T24] audit: type=1326 audit(1788429841.132:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.465850][   T24] audit: type=1326 audit(1788429841.142:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.498956][   T24] audit: type=1326 audit(1788429841.142:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.530999][   T24] audit: type=1326 audit(1788429841.142:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.555893][   T24] audit: type=1326 audit(1788429841.142:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.580665][   T24] audit: type=1326 audit(1788429841.142:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.581690][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  136.607674][   T24] audit: type=1326 audit(1788429841.142:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.654779][   T24] audit: type=1326 audit(1788429841.142:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.684490][   T24] audit: type=1326 audit(1788429841.142:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.2.805" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e61e7159 code=0x7ffc0000
[  136.905364][ T3076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=3076 comm=syz.8.811
[  137.150772][ T3069] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  137.162619][ T3069] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  137.193606][ T3069] F2FS-fs (loop0): invalid crc value
[  137.200239][ T3069] F2FS-fs (loop0): Found nat_bits in checkpoint
[  137.242191][ T3069] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  137.249985][ T3069] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  137.290768][ T3069] attempt to access beyond end of device
[  137.290768][ T3069] loop0: rw=2049, want=45104, limit=40427
[  137.374929][ T3095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=3095 comm=syz.2.815
[  137.407207][ T3069] attempt to access beyond end of device
[  137.407207][ T3069] loop0: rw=2049, want=40968, limit=40427
[  137.573620][  T386] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  137.640712][ T3093] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.646162][ T3098] EXT4-fs (loop8): Unrecognized mount option "subj_type=\%:+#" or missing value
[  137.953616][  T386] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  137.961683][  T386] usb 7-1: config 0 has no interface number 0
[  137.998417][  T386] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  138.019495][  T386] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  138.024342][ T3106] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  138.031104][  T386] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  138.073600][ T3106] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.082451][  T386] usb 7-1: config 0 interface 2 has no altsetting 0
[  138.157768][ T3112] EXT4-fs (loop2): Ignoring removed orlov option
[  138.169013][ T3106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'.
[  138.184707][ T3112] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  138.210006][  T281] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  138.235210][  T281] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  138.273995][  T386] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  138.283133][  T386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.296183][  T386] usb 7-1: Product: syz
[  138.300811][  T386] usb 7-1: Manufacturer: syz
[  138.308052][  T386] usb 7-1: SerialNumber: syz
[  138.313603][  T386] usb 7-1: config 0 descriptor??
[  138.333515][ T3087] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  138.602211][   T15] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  138.747958][ T3124] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.755305][ T3124] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.762591][ T3124] device bridge_slave_0 entered promiscuous mode
[  138.769442][ T3124] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.776598][ T3124] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.784193][ T3124] device bridge_slave_1 entered promiscuous mode
[  138.840304][ T3124] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.847395][ T3124] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.854669][ T3124] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.861687][ T3124] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.863779][  T386] snd-usb-audio: probe of 7-1:0.2 failed with error -12
[  138.892407][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.900505][  T540] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.908014][  T540] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.927018][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  138.935186][  T540] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.942195][  T540] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.949668][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  138.957923][  T540] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.960785][ T3129] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  138.964967][  T540] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.965570][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  138.987807][ T3129] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  138.989114][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  138.996288][   T15] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.014507][ T3124] device veth0_vlan entered promiscuous mode
[  139.022108][ T3129] F2FS-fs (loop5): invalid crc value
[  139.022639][   T15] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.029060][ T3129] F2FS-fs (loop5): Found nat_bits in checkpoint
[  139.036633][  T902] usb 7-1: USB disconnect, device number 7
[  139.053576][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  139.062035][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.070106][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.073865][ T3129] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  139.078164][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.084423][ T3129] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  139.097630][ T3124] device veth1_macvtap entered promiscuous mode
[  139.106276][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.119187][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  139.122519][ T3129] attempt to access beyond end of device
[  139.122519][ T3129] loop5: rw=2049, want=45104, limit=40427
[  139.141881][ T3129] attempt to access beyond end of device
[  139.141881][ T3129] loop5: rw=2049, want=40968, limit=40427
[  139.171596][  T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  139.193518][   T15] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  139.202564][   T15] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.213765][   T15] usb 9-1: Product: syz
[  139.217939][   T15] usb 9-1: Manufacturer: syz
[  139.222515][   T15] usb 9-1: SerialNumber: syz
[  139.254454][  T537] device bridge_slave_1 left promiscuous mode
[  139.260727][  T537] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.268699][  T537] device bridge_slave_0 left promiscuous mode
[  139.285262][  T537] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.294146][  T537] device veth1_macvtap left promiscuous mode
[  139.300156][  T537] device veth0_vlan left promiscuous mode
[  139.396933][ T3147] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[  139.406044][ T3147] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.422553][ T3147] netlink: 8 bytes leftover after parsing attributes in process `syz.9.833'.
[  139.439284][ T3124] EXT4-fs error (device loop9): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  139.458289][ T3124] EXT4-fs error (device loop9): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  139.488473][ T3157] EXT4-fs (loop2): Ignoring removed orlov option
[  139.514807][ T3157] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  139.553654][   T15] usb 9-1: 0:2 : does not exist
[  139.561543][   T15] usb 9-1: USB disconnect, device number 3
[  139.717419][ T3174] hub 7-0:1.0: USB hub found
[  139.722166][ T3174] hub 7-0:1.0: 1 port detected
[  139.745592][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.752699][ T3172] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.760432][ T3172] device bridge_slave_0 entered promiscuous mode
[  139.771305][ T3164] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  139.798219][ T3164] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  139.814794][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.822147][ T3172] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.822790][ T3164] F2FS-fs (loop5): invalid crc value
[  139.829688][ T3172] device bridge_slave_1 entered promiscuous mode
[  139.843976][ T3164] F2FS-fs (loop5): Found nat_bits in checkpoint
[  139.889959][ T3164] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  139.897298][ T3164] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  139.901218][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.911822][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.919114][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.922543][ T3164] attempt to access beyond end of device
[  139.922543][ T3164] loop5: rw=2049, want=45104, limit=40427
[  139.926151][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.940454][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.954281][  T537] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.962115][  T537] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.195948][ T3172] device veth0_vlan entered promiscuous mode
[  140.208007][ T3172] device veth1_macvtap entered promiscuous mode
[  140.222001][ T3164] attempt to access beyond end of device
[  140.222001][ T3164] loop5: rw=2049, want=40968, limit=40427
[  140.239915][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.249334][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.258608][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.267634][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  140.276233][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  140.283857][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  140.284105][ T3192] EXT4-fs (loop8): Ignoring removed orlov option
[  140.291407][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  140.306605][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.314948][  T537] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.316386][ T3192] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue
[  140.321984][  T537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.322375][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.336002][ T3192] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.343601][  T537] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.368335][  T537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.376073][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.384266][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.468150][ T3198] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  140.477210][ T3198] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.516193][ T3203] erofs: (device loop5): mounted with root inode @ nid 36.
[  140.529431][ T3198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.847'.
[  140.547692][ T1675] EXT4-fs error (device loop6): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  140.566073][ T1675] EXT4-fs error (device loop6): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  140.681257][ T3213] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.692233][ T3213] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  140.702886][ T3213] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  140.957227][    T9] device bridge_slave_1 left promiscuous mode
[  140.963728][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.972317][    T9] device bridge_slave_0 left promiscuous mode
[  140.978781][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.988963][    T9] device veth1_macvtap left promiscuous mode
[  141.788814][ T3228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=3228 comm=syz.8.856
[  141.824613][    T9] device veth0_vlan left promiscuous mode
[  141.840790][   T24] kauditd_printk_skb: 81 callbacks suppressed
[  141.840801][   T24] audit: type=1326 audit(1788429846.852:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  141.935973][ T3232] hub 7-0:1.0: USB hub found
[  141.940689][ T3232] hub 7-0:1.0: 1 port detected
[  141.964021][   T24] audit: type=1326 audit(1788429846.852:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  141.965179][  T302] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  141.992614][   T24] audit: type=1326 audit(1788429846.852:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  142.021985][   T24] audit: type=1326 audit(1788429846.852:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  142.047134][   T24] audit: type=1326 audit(1788429846.852:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  142.054922][ T3234] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[  142.072526][   T24] audit: type=1326 audit(1788429846.852:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  142.106962][   T24] audit: type=1326 audit(1788429846.852:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  142.118789][ T3234] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.131919][   T24] audit: type=1326 audit(1788429846.852:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  142.168461][   T24] audit: type=1326 audit(1788429846.852:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  142.182023][ T3224] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.200199][ T3234] netlink: 8 bytes leftover after parsing attributes in process `syz.8.859'.
[  142.200461][ T3224] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.217092][ T3224] device bridge_slave_0 entered promiscuous mode
[  142.218440][ T2549] EXT4-fs error (device loop8): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  142.225063][ T3224] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.241825][   T24] audit: type=1326 audit(1788429846.852:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.3.857" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0365305159 code=0x7ffc0000
[  142.248898][ T3224] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.277441][ T3242] EXT4-fs (loop5): Ignoring removed orlov option
[  142.284040][ T2549] EXT4-fs error (device loop8): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  142.305454][ T3224] device bridge_slave_1 entered promiscuous mode
[  142.319284][ T3242] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue
[  142.333120][ T3242] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.387203][ T3224] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.394271][ T3224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.401553][ T3224] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.408595][ T3224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.416137][  T302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.433136][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.440311][  T302] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.449299][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.461309][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  142.470117][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  142.496098][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  142.507755][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.514839][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.524434][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  142.532881][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.539930][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.554049][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.562056][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.603695][  T302] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  142.608671][ T3250] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.619973][  T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.620215][ T3250] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.635370][  T302] usb 3-1: Product: syz
[  142.636064][ T3250] device bridge_slave_0 entered promiscuous mode
[  142.639539][  T302] usb 3-1: Manufacturer: syz
[  142.639554][  T302] usb 3-1: SerialNumber: syz
[  142.647064][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  142.668416][ T3250] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.688273][ T3250] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.695833][ T3250] device bridge_slave_1 entered promiscuous mode
[  142.712370][ T3224] device veth0_vlan entered promiscuous mode
[  142.721292][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.722398][ T3261] EXT4-fs (loop5): Unrecognized mount option "subj_type=\%:+#" or missing value
[  142.730377][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.745941][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.769761][ T3224] device veth1_macvtap entered promiscuous mode
[  142.785801][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.828641][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.842102][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.872062][ T3266] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  142.883630][ T3266] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  142.893894][ T3266] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  142.998036][ T3250] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.005087][ T3250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.012311][ T3250] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.013511][  T302] usb 3-1: 0:2 : does not exist
[  143.019348][ T3250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.029960][  T302] usb 3-1: USB disconnect, device number 16
[  143.058295][ T3269] EXT4-fs (loop4): Ignoring removed orlov option
[  143.096842][ T3275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=3275 comm=syz.5.868
[  143.263145][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.279400][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.283983][ T3269] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  143.321632][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.332146][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.354117][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.362574][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.370830][  T537] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.377905][  T537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.386048][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.394988][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.403244][  T537] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.410296][  T537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.429240][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  143.437375][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  143.457703][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  143.474296][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  143.476491][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  143.511249][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.520627][ T3280] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,barrier=0x0000000000010001,,errors=continue
[  143.535156][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.545542][ T3280] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.578513][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  143.591670][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  143.600074][ T3280] EXT4-fs error (device loop4): ext4_remount:5882: Abort forced by user
[  143.609581][ T3250] device veth0_vlan entered promiscuous mode
[  143.616656][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  143.647451][ T3280] EXT4-fs (loop4): Remounting filesystem read-only
[  143.656653][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  143.668842][ T3280] EXT4-fs (loop4): re-mounted. Opts: (null)
[  143.695526][ T3250] device veth1_macvtap entered promiscuous mode
[  143.712423][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  143.728083][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  143.741260][  T537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  143.793745][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.802018][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.827123][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.838282][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.894519][    T9] device bridge_slave_1 left promiscuous mode
[  143.901880][ T3298] hub 7-0:1.0: USB hub found
[  143.907997][ T3298] hub 7-0:1.0: 1 port detected
[  143.921633][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.941520][    T9] device bridge_slave_0 left promiscuous mode
[  143.954994][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.968891][    T9] device bridge_slave_1 left promiscuous mode
[  143.975856][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.984309][ T3304] EXT4-fs (loop4): Unrecognized mount option "subj_type=\%:+#" or missing value
[  143.993196][    T9] device bridge_slave_0 left promiscuous mode
[  144.013241][ T3307] EXT4-fs (loop1): Unrecognized mount option "subj_type=\%:+#" or missing value
[  144.022619][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.031329][    T9] device veth1_macvtap left promiscuous mode
[  144.038316][    T9] device veth0_vlan left promiscuous mode
[  144.044292][    T9] device veth1_macvtap left promiscuous mode
[  144.050395][    T9] device veth0_vlan left promiscuous mode
[  144.613505][ T1100] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  144.686203][ T3321] EXT4-fs (loop3): Ignoring removed orlov option
[  144.727714][ T3321] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  145.054044][ T3332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=3332 comm=syz.2.882
[  145.516082][ T1100] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.526570][ T1100] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  145.858269][ T3346] FAULT_INJECTION: forcing a failure.
[  145.858269][ T3346] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.898703][ T3345] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.939311][ T3346] CPU: 0 PID: 3346 Comm: syz.4.887 Not tainted syzkaller #0
[  145.946636][ T3346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  145.956689][ T3346] Call Trace:
[  145.960001][ T3346]  __dump_stack+0x21/0x24
[  145.964347][ T3346]  dump_stack_lvl+0x1a7/0x208
[  145.969032][ T3346]  ? show_regs_print_info+0x18/0x18
[  145.974238][ T3346]  dump_stack+0x15/0x1c
[  145.974500][ T3345] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  145.978390][ T3346]  should_fail+0x3ab/0x500
[  145.978400][ T3346]  should_fail_usercopy+0x1a/0x20
[  145.978418][ T3346]  _copy_from_iter_full+0x1ac/0x750
[  146.001398][ T3346]  bcm_sendmsg+0x152/0x690
[  146.002409][ T3345] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  146.005834][ T3346]  ? sysvec_reschedule_ipi+0x69/0x70
[  146.005846][ T3346]  ? bcm_sock_no_ioctlcmd+0x10/0x10
[  146.005858][ T3346]  ? security_socket_sendmsg+0x82/0xa0
[  146.005865][ T3346]  ? bcm_sock_no_ioctlcmd+0x10/0x10
[  146.005876][ T3346]  ____sys_sendmsg+0x5be/0x8f0
[  146.005885][ T3346]  ? __sys_sendmsg_sock+0x40/0x40
[  146.005895][ T3346]  ? import_iovec+0x7c/0xb0
[  146.005912][ T3346]  ___sys_sendmsg+0x236/0x2e0
[  146.057804][ T3346]  ? __sys_sendmsg+0x280/0x280
[  146.062549][ T3346]  ? rw_verify_area+0x1c0/0x360
[  146.067381][ T3346]  ? __fdget+0x1a1/0x230
[  146.071610][ T3346]  __x64_sys_sendmsg+0x201/0x2d0
[  146.076539][ T3346]  ? __kasan_check_write+0x14/0x20
[  146.081644][ T3346]  ? ___sys_sendmsg+0x2e0/0x2e0
[  146.086483][ T3346]  ? __kasan_check_read+0x11/0x20
[  146.091496][ T3346]  ? exit_to_user_mode_prepare+0x9a/0xa0
[  146.097109][ T3346]  do_syscall_64+0x31/0x40
[  146.101509][ T3346]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  146.107463][ T3346] RIP: 0033:0x7fdc10775159
[  146.111855][ T3346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.131447][ T3346] RSP: 002b:00007fdc0f1ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.139931][ T3346] RAX: ffffffffffffffda RBX: 00007fdc109fcfa0 RCX: 00007fdc10775159
[  146.147887][ T3346] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008
[  146.155839][ T3346] RBP: 00007fdc0f1ce090 R08: 0000000000000000 R09: 0000000000000000
[  146.163790][ T3346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.171740][ T3346] R13: 00007fdc109fd038 R14: 00007fdc109fcfa0 R15: 00007ffeb6156218
[  146.194281][ T1100] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.211140][ T1100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.219182][ T1100] usb 6-1: Product: syz
[  146.223431][ T1100] usb 6-1: Manufacturer: syz
[  146.228022][ T1100] usb 6-1: SerialNumber: syz
[  146.275958][ T3353] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue
[  146.287094][ T3353] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  146.564290][ T1100] usb 6-1: 0:2 : does not exist
[  146.603627][ T1100] usb 6-1: USB disconnect, device number 12
[  146.689582][ T3369] hub 7-0:1.0: USB hub found
[  146.694425][ T3369] hub 7-0:1.0: 1 port detected
[  146.758790][ T3373] EXT4-fs (loop4): Ignoring removed orlov option
[  146.777506][ T3373] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  146.928667][ T3379] 9pnet: Insufficient options for proto=fd
[  147.303330][ T3391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=3391 comm=syz.4.898
[  147.784305][ T3405] EXT4-fs (loop2): Ignoring removed orlov option
[  147.819666][ T3405] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue
[  147.856093][ T3405] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.993299][ T3403] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  148.001570][ T3410] EXT4-fs (loop1): Ignoring removed orlov option
[  148.013584][ T3403] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  148.075584][ T3403] F2FS-fs (loop5): invalid crc value
[  148.098113][ T3410] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  148.124222][ T3403] F2FS-fs (loop5): Found nat_bits in checkpoint
[  148.209943][ T3426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=3426 comm=syz.4.907
[  148.314214][ T3403] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  148.331456][ T3403] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  148.383480][ T1100] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  148.386005][ T3403] attempt to access beyond end of device
[  148.386005][ T3403] loop5: rw=2049, want=45104, limit=40427
[  148.413023][ T3403] attempt to access beyond end of device
[  148.413023][ T3403] loop5: rw=2049, want=40968, limit=40427
[  148.784098][ T1100] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.798559][ T1100] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.927673][   T24] kauditd_printk_skb: 98 callbacks suppressed
[  148.927693][   T24] audit: type=1326 audit(1788429853.932:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.035732][   T24] audit: type=1326 audit(1788429854.042:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.062593][   T24] audit: type=1326 audit(1788429854.052:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.087829][   T24] audit: type=1326 audit(1788429854.052:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.093603][ T1100] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  149.113037][   T24] audit: type=1326 audit(1788429854.052:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.145267][ T1100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.148907][ T3440] hub 7-0:1.0: USB hub found
[  149.159286][ T3440] hub 7-0:1.0: 1 port detected
[  149.164617][ T1100] usb 4-1: Product: syz
[  149.165485][   T24] audit: type=1326 audit(1788429854.052:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.183440][ T1100] usb 4-1: Manufacturer: syz
[  149.210921][ T1100] usb 4-1: SerialNumber: syz
[  149.219986][   T24] audit: type=1326 audit(1788429854.052:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.249101][   T24] audit: type=1326 audit(1788429854.052:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.274243][   T24] audit: type=1326 audit(1788429854.052:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.299473][   T24] audit: type=1326 audit(1788429854.052:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3436 comm="syz.5.910" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  149.623833][ T1100] usb 4-1: 0:2 : does not exist
[  149.639419][ T3454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=3454 comm=syz.4.917
[  149.670953][ T1100] usb 4-1: USB disconnect, device number 9
[  149.677017][  T902] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  149.836330][ T3458] EXT4-fs (loop2): Ignoring removed orlov option
[  149.864127][ T3458] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000002,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,data_err=ignore,grpjquota=,,errors=continue
[  149.903162][ T3467] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.914056][ T3467] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  149.924679][ T3467] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  149.969754][ T3470] erofs: (device loop2): mounted with root inode @ nid 36.
[  150.020575][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  151.009569][ T3479] EXT4-fs (loop4): Unrecognized mount option "subj_type=\%:+#" or missing value
[  151.099309][ T3486] hub 7-0:1.0: USB hub found
[  151.104835][ T3486] hub 7-0:1.0: 1 port detected
[  151.288257][  T902] usb 2-1: unable to get BOS descriptor or descriptor too short
[  151.344889][ T3489] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,barrier=0x0000000000010001,,errors=continue
[  151.356799][ T3489] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.383538][  T902] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt
[  151.395353][  T902] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt
[  151.407086][  T902] usb 2-1: config 1 interface 0 has no altsetting 0
[  151.408293][ T3489] EXT4-fs error (device loop5): ext4_remount:5882: Abort forced by user
[  151.422515][ T3489] EXT4-fs (loop5): Remounting filesystem read-only
[  151.431990][ T3489] EXT4-fs (loop5): re-mounted. Opts: (null)
[  151.489526][ T3497] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  151.576480][ T3506] EXT4-fs (loop3): Unrecognized mount option "subj_type=\%:+#" or missing value
[  151.653533][  T902] usb 2-1: string descriptor 0 read error: -22
[  151.659936][  T902] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  151.669054][  T902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.693510][ T3450] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  151.700551][ T3450] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  151.793530][ T1100] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  151.915305][  T302] usb 2-1: USB disconnect, device number 14
[  151.953487][  T439] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  152.053484][  T902] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  152.063562][ T1100] usb 6-1: device descriptor read/64, error -71
[  152.353571][  T439] usb 4-1: unable to get BOS descriptor or descriptor too short
[  152.393537][  T439] usb 4-1: not running at top speed; connect to a high speed hub
[  152.413544][  T902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.423712][  T902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  152.453500][ T1100] usb 6-1: device descriptor read/64, error -71
[  152.473478][  T439] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.483828][  T439] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  152.493039][  T439] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  152.878755][ T3529] EXT4-fs (loop2): Unrecognized mount option "subj_type=\%:+#" or missing value
[  153.395834][  T902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.405114][  T902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.413099][  T902] usb 5-1: Product: syz
[  153.417297][  T902] usb 5-1: Manufacturer: syz
[  153.421882][  T902] usb 5-1: SerialNumber: syz
[  153.483615][  T439] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  153.492819][  T439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.500824][  T439] usb 4-1: Product: syz
[  153.505017][  T439] usb 4-1: Manufacturer: syz
[  153.509587][  T439] usb 4-1: SerialNumber: syz
[  153.553763][ T1100] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  153.564141][ T3534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  153.971819][  T902] usb 5-1: 0:2 : does not exist
[  153.978202][  T902] usb 5-1: USB disconnect, device number 9
[  154.043543][ T1100] usb 6-1: device descriptor read/64, error -71
[  154.370366][   T24] kauditd_printk_skb: 65 callbacks suppressed
[  154.370378][   T24] audit: type=1326 audit(1788429859.382:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.391947][  T439] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[  154.404205][   T24] audit: type=1326 audit(1788429859.382:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.410637][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  154.449828][  T439] usb 4-1: 1:1 : sample bitwidth 190 in over sample bytes 3
[  154.457191][  T439] usb 4-1: 1:1 : unsupported format bits 0xc86b167e
[  154.463992][   T24] audit: type=1326 audit(1788429859.382:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.464169][  T439] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  154.490134][   T24] audit: type=1326 audit(1788429859.382:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.523721][ T3552] hub 7-0:1.0: USB hub found
[  154.528678][ T3552] hub 7-0:1.0: 1 port detected
[  154.533896][  T439] usb 4-1: unit 2 not found!
[  154.538514][  T439] usb 4-1: unit 0 not found!
[  154.554787][   T24] audit: type=1326 audit(1788429859.382:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.580342][   T24] audit: type=1326 audit(1788429859.382:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.605872][   T24] audit: type=1326 audit(1788429859.382:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.808502][   T24] audit: type=1326 audit(1788429859.382:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.826344][  T439] usb 4-1: USB disconnect, device number 10
[  154.847879][   T24] audit: type=1326 audit(1788429859.382:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  154.872967][   T24] audit: type=1326 audit(1788429859.382:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.4.947" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc10775159 code=0x7ffc0000
[  155.845331][ T3580] FAULT_INJECTION: forcing a failure.
[  155.845331][ T3580] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.921750][ T3575] EXT4-fs (loop4): Unrecognized mount option "subj_type=\%:+#" or missing value
[  155.939675][ T3580] CPU: 1 PID: 3580 Comm: syz.5.955 Not tainted syzkaller #0
[  155.946978][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.957024][ T3580] Call Trace:
[  155.960305][ T3580]  __dump_stack+0x21/0x24
[  155.964627][ T3580]  dump_stack_lvl+0x1a7/0x208
[  155.969301][ T3580]  ? show_regs_print_info+0x18/0x18
[  155.974494][ T3580]  dump_stack+0x15/0x1c
[  155.978652][ T3580]  should_fail+0x3ab/0x500
[  155.983060][ T3580]  should_fail_usercopy+0x1a/0x20
[  155.988074][ T3580]  _copy_from_user+0x20/0xd0
[  155.992653][ T3580]  __copy_msghdr_from_user+0xc9/0x630
[  155.998014][ T3580]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[  156.003292][ T3580]  ___sys_sendmsg+0x19a/0x2e0
[  156.007965][ T3580]  ? __sys_sendmsg+0x280/0x280
[  156.012717][ T3580]  ? __fdget+0x1a1/0x230
[  156.016938][ T3580]  __x64_sys_sendmsg+0x201/0x2d0
[  156.021845][ T3580]  ? ___sys_sendmsg+0x2e0/0x2e0
[  156.026674][ T3580]  do_syscall_64+0x31/0x40
[  156.031066][ T3580]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  156.036929][ T3580] RIP: 0033:0x7f503d2b8159
[  156.041316][ T3580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.060910][ T3580] RSP: 002b:00007f503bd11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.069298][ T3580] RAX: ffffffffffffffda RBX: 00007f503d53ffa0 RCX: 00007f503d2b8159
[  156.077249][ T3580] RDX: 0000000000004040 RSI: 00002000000000c0 RDI: 0000000000000003
[  156.085212][ T3580] RBP: 00007f503bd11090 R08: 0000000000000000 R09: 0000000000000000
[  156.093165][ T3580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.101135][ T3580] R13: 00007f503d540038 R14: 00007f503d53ffa0 R15: 00007ffec3630578
[  156.143470][  T439] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  156.211004][ T3583] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  156.221859][ T3583] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  156.235417][ T3583] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  156.253534][  T302] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  156.512157][ T3591] EXT4-fs (loop4): Unrecognized mount option "subj_type=\%:+#" or missing value
[  156.643578][  T302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.702078][  T302] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  157.283524][  T302] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  157.294970][ T3598] xt_hashlimit: size too large, truncated to 1048576
[  157.302807][  T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.323014][  T302] usb 3-1: Product: syz
[  157.327841][  T302] usb 3-1: Manufacturer: syz
[  157.338231][  T302] usb 3-1: SerialNumber: syz
[  157.353949][ T3599] SELinux:  Context system_u:object_r:semanage_read_lock_t:s0 is not valid (left unmapped).
[  157.553458][  T654] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  157.703689][  T302] usb 3-1: 0:2 : does not exist
[  157.723437][   T20] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  157.747053][  T302] usb 3-1: USB disconnect, device number 17
[  157.786007][  T439] usb 4-1: unable to get BOS descriptor or descriptor too short
[  157.903548][  T439] usb 4-1: unable to read config index 0 descriptor/all
[  157.904082][ T3612] erofs: (device loop3): mounted with root inode @ nid 36.
[  157.913936][  T439] usb 4-1: can't read configurations, error -71
[  157.953811][  T654] usb 5-1: unable to get BOS descriptor or descriptor too short
[  157.993743][  T654] usb 5-1: not running at top speed; connect to a high speed hub
[  158.067804][ T3617] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  158.076925][  T654] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.087693][  T654] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  158.096787][  T654] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  158.153479][   T20] usb 2-1: unable to get BOS descriptor or descriptor too short
[  158.233606][   T20] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt
[  158.243615][   T20] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt
[  158.254847][ T3622] EXT4-fs (loop2): Unrecognized mount option "subj_type=\%:+#" or missing value
[  158.265076][  T654] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  158.282116][   T20] usb 2-1: config 1 interface 0 has no altsetting 0
[  158.288967][  T654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.297575][  T654] usb 5-1: Product: syz
[  158.301801][  T654] usb 5-1: Manufacturer: syz
[  158.306512][  T654] usb 5-1: SerialNumber: syz
[  158.553643][   T20] usb 2-1: string descriptor 0 read error: -22
[  158.564206][   T20] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  158.574545][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.613646][ T3602] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  158.652302][ T3602] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  158.824021][ T3640] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  158.830457][ T3640] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  158.839521][ T3640] F2FS-fs (loop2): invalid crc value
[  158.846160][ T3640] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  158.857405][  T654] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor
[  158.865262][  T654] usb 5-1: 1:1 : sample bitwidth 190 in over sample bytes 3
[  158.872625][  T654] usb 5-1: 1:1 : unsupported format bits 0xc86b167e
[  158.885822][  T654] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  158.889749][ T3640] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  158.895793][   T20] usb 2-1: USB disconnect, device number 15
[  158.902607][ T3640] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  158.933502][  T654] usb 5-1: unit 2 not found!
[  158.938180][  T654] usb 5-1: unit 0 not found!
[  158.981821][  T654] usb 5-1: USB disconnect, device number 10
[  158.993460][  T439] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  159.036933][ T3640] attempt to access beyond end of device
[  159.036933][ T3640] loop2: rw=2049, want=53256, limit=40427
[  159.054119][  T282] attempt to access beyond end of device
[  159.054119][  T282] loop2: rw=2049, want=40992, limit=40427
[  159.164309][ T3647] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  159.184591][ T3647] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[  159.384900][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.976'.
[  159.403565][  T439] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  159.411880][  T439] usb 4-1: config 0 has no interface number 0
[  159.420775][   T24] kauditd_printk_skb: 69 callbacks suppressed
[  159.420787][   T24] audit: type=1400 audit(1788429864.432:1704): avc:  denied  { setattr } for  pid=3646 comm="syz.2.974" path="socket:[31442]" dev="sockfs" ino=31442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  159.423765][  T439] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  159.461176][  T439] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  159.472229][  T439] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  159.483061][  T439] usb 4-1: config 0 interface 2 has no altsetting 0
[  159.589747][ T3663] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  159.598751][  T654] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  159.612071][   T24] audit: type=1326 audit(1788429864.622:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.638421][   T24] audit: type=1326 audit(1788429864.642:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.643578][  T439] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  159.663718][   T24] audit: type=1326 audit(1788429864.642:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.697456][   T24] audit: type=1326 audit(1788429864.642:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.722738][   T24] audit: type=1326 audit(1788429864.642:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.769802][   T24] audit: type=1326 audit(1788429864.642:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.877761][   T24] audit: type=1326 audit(1788429864.642:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.881696][  T439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.902878][   T24] audit: type=1326 audit(1788429864.642:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.935456][  T439] usb 4-1: Product: syz
[  159.939749][  T439] usb 4-1: Manufacturer: syz
[  159.942271][   T24] audit: type=1326 audit(1788429864.642:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.1.981" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0613e90159 code=0x7ffc0000
[  159.944641][  T439] usb 4-1: SerialNumber: syz
[  159.975445][  T439] usb 4-1: config 0 descriptor??
[  159.993491][ T3627] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  160.001238][ T3627] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  160.113520][  T654] usb 5-1: unable to get BOS descriptor or descriptor too short
[  160.169019][ T3674] EXT4-fs (loop2): Unrecognized mount option "subj_type=\%:+#" or missing value
[  160.193551][  T654] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt
[  160.205497][  T654] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt
[  160.215453][  T654] usb 5-1: config 1 interface 0 has no altsetting 0
[  160.294178][ T3679] EXT4-fs (loop5): Ignoring removed bh option
[  160.300538][ T3679] EXT4-fs (loop5): Unrecognized mount option "measure" or missing value
[  160.310819][  T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  160.328803][  T439] usb 4-1: USB disconnect, device number 12
[  160.337654][  T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  160.524744][  T654] usb 5-1: string descriptor 0 read error: -22
[  160.530992][  T654] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  160.540371][  T654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.555838][ T3700] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  160.573519][ T3654] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  160.580662][ T3654] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  160.667744][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  160.762081][  T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  160.881035][  T654] usb 5-1: USB disconnect, device number 11
[  161.391096][ T3711] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  161.448974][ T3714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  161.457091][ T3711] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  161.477237][ T3714] System zones: 1-3, 19-19, 35-36
[  161.482710][ T3714] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue
[  161.495637][ T3711] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  161.506967][ T3714] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  161.563506][ T1100] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  161.628586][ T3714] overlayfs: Failed to create volatile/dirty file.
[  161.648285][ T3718] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  162.586907][ T3723] EXT4-fs (loop4): Unrecognized mount option "subj_type=\%:+#" or missing value
[  163.713512][ T1100] usb 6-1: device descriptor read/all, error -71
[  163.854427][ T3759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  163.926310][ T3755] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  163.934113][ T3755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  163.942837][ T3755] F2FS-fs (loop3): invalid crc value
[  163.949333][ T3755] F2FS-fs (loop3): Found nat_bits in checkpoint
[  164.031035][ T3784] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1018'.
[  164.038580][ T3780] device syzkaller0 entered promiscuous mode
[  164.052079][ T3755] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  164.069227][ T3755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  164.117718][ T3755] attempt to access beyond end of device
[  164.117718][ T3755] loop3: rw=2049, want=45104, limit=40427
[  164.150129][ T3798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1024'.
[  164.165146][ T3755] attempt to access beyond end of device
[  164.165146][ T3755] loop3: rw=2049, want=40968, limit=40427
[  164.199813][ T3803] usb usb1: usbfs: process 3803 (syz.1.1026) did not claim interface 0 before use
[  164.424160][ T3824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=3824 comm=syz.4.1037
[  164.601917][   T24] kauditd_printk_skb: 67 callbacks suppressed
[  164.601937][   T24] audit: type=1400 audit(1788429869.612:1781): avc:  denied  { bind } for  pid=3827 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  164.628847][   T24] audit: type=1400 audit(1788429869.642:1782): avc:  denied  { read } for  pid=3827 comm="syz.2.1036" path="socket:[32973]" dev="sockfs" ino=32973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  164.998431][ T3882] tipc: Started in network mode
[  165.003739][ T3882] tipc: Own node identity 4, cluster identity 4711
[  165.010264][ T3882] tipc: 32-bit node address hash set to 4
[  165.070522][   T24] audit: type=1400 audit(1788429870.082:1783): avc:  denied  { create } for  pid=3889 comm="syz.3.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  165.096574][   T24] audit: type=1400 audit(1788429870.082:1784): avc:  denied  { write } for  pid=3889 comm="syz.3.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  165.119559][   T24] audit: type=1326 audit(1788429870.132:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.5.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  165.144733][ T3896] binder: 3894:3896 ioctl c0306201 200000000180 returned -14
[  165.144802][   T24] audit: type=1326 audit(1788429870.132:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.5.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  165.182504][   T24] audit: type=1326 audit(1788429870.142:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.5.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  165.214149][  T386] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  165.219748][ T3902] usb usb7: usbfs: process 3902 (syz.5.1072) did not claim interface 0 before use
[  165.226424][   T24] audit: type=1326 audit(1788429870.142:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.5.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  165.302737][   T24] audit: type=1326 audit(1788429870.142:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.5.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  165.331615][   T24] audit: type=1326 audit(1788429870.142:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3893 comm="syz.5.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d2b8159 code=0x7ffc0000
[  165.450597][ T3929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'.
[  165.553501][   T20] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  165.573503][  T902] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  165.623500][  T386] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  165.634083][  T386] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  165.646962][  T386] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  165.655991][  T386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.664713][  T386] usb 5-1: config 0 descriptor??
[  165.683453][ T1100] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  165.683552][ T3876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  165.703957][  T386] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  165.773519][  T654] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  165.953527][  T902] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  165.961700][  T902] usb 4-1: config 0 has no interface number 0
[  165.967820][  T902] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  165.978549][  T902] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  165.989148][  T902] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  165.999787][  T902] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  166.012749][  T902] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  166.021873][  T902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.030602][  T902] usb 4-1: config 0 descriptor??
[  166.033437][  T654] usb 3-1: Using ep0 maxpacket: 16
[  166.053539][ T3912] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  166.060512][ T3912] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  166.093503][ T1100] usb 2-1: unable to get BOS descriptor or descriptor too short
[  166.113567][   T20] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  166.122753][   T20] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  166.130842][   T20] usb 6-1: Product: syz
[  166.133528][ T1100] usb 2-1: not running at top speed; connect to a high speed hub
[  166.135046][   T20] usb 6-1: Manufacturer: syz
[  166.147302][   T20] usb 6-1: SerialNumber: syz
[  166.153509][  T654] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  166.164346][  T654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.175207][  T654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.186416][  T654] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  166.199466][  T654] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  166.208500][  T654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.213610][ T1100] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[  166.217255][  T654] usb 3-1: config 0 descriptor??
[  166.229942][ T1100] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[  166.238352][ T1100] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  166.248777][ T1100] usb 2-1: config 14 has no interface number 0
[  166.254941][ T1100] usb 2-1: config 14 has no interface number 1
[  166.261198][ T1100] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  166.272030][ T1100] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping
[  166.276900][   T20] usb 4-1: USB disconnect, device number 13
[  166.283564][ T1100] usb 2-1: config 14 interface 57 has no altsetting 0
[  166.295496][ T1100] usb 2-1: config 14 interface 228 has no altsetting 0
[  166.388670][  T386] usb 6-1: USB disconnect, device number 17
[  166.453530][ T1100] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  166.462664][ T1100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.470778][ T1100] usb 2-1: Product: syz
[  166.474993][ T1100] usb 2-1: Manufacturer: syz
[  166.479566][ T1100] usb 2-1: SerialNumber: syz
[  166.695046][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.701786][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.708558][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.715301][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.721994][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.728746][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.735499][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.742191][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.748925][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.755708][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.762397][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.769172][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.775882][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.782584][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.789534][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.797628][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.804379][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.811098][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.818039][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.824942][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.831642][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.838384][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.845138][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.852163][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.859080][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.865911][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.872600][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.879323][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.886018][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.892698][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.899410][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.906125][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.912812][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.919531][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.926395][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.933102][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.953461][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.960181][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.966905][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.973603][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.980291][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.987121][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  166.994022][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.000714][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.007439][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.014151][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.020851][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.027588][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.034297][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.040994][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.047705][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.054431][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.061112][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.067821][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.074523][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.081202][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.087923][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.094648][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.101328][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.108040][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.114753][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.121453][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.128175][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.134890][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.141580][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.148504][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.155447][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.162152][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.169070][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.175975][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.182680][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.185209][  T439] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  167.189407][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.206300][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.213014][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.219743][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.226457][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.233140][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.240316][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.247119][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.254125][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.261008][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.267943][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.272394][ T3954] ==================================================================
[  167.274718][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.282681][ T3954] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3160
[  167.282692][ T3954] Read of size 8 at addr ffff8881339922d8 by task syz.3.1096/3954
[  167.282695][ T3954] 
[  167.282714][ T3954] CPU: 0 PID: 3954 Comm: syz.3.1096 Not tainted syzkaller #0
[  167.289515][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.297491][ T3954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  167.297495][ T3954] Call Trace:
[  167.297514][ T3954]  __dump_stack+0x21/0x24
[  167.297522][ T3954]  dump_stack_lvl+0x1a7/0x208
[  167.297576][ T3954]  ? show_regs_print_info+0x18/0x18
[  167.305490][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.307643][ T3954]  ? thaw_kernel_threads+0x220/0x220
[  167.307662][ T3954]  print_address_description+0x7f/0x2c0
[  167.315145][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.321648][ T3954]  ? tc_setup_flow_action+0x88e/0x3160
[  167.321659][ T3954]  kasan_report+0x100/0x140
[  167.321678][ T3954]  ? flow_action_cookie_create+0x28/0x90
[  167.331834][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.334972][ T3954]  ? tc_setup_flow_action+0x88e/0x3160
[  167.334984][ T3954]  __asan_report_load8_noabort+0x14/0x20
[  167.335000][ T3954]  tc_setup_flow_action+0x88e/0x3160
[  167.339331][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.343972][ T3954]  mall_replace_hw_filter+0x2db/0x8c0
[  167.343986][ T3954]  ? pcpu_block_update_hint_alloc+0x8b7/0xc50
[  167.343997][ T3954]  ? mall_set_parms+0x450/0x450
[  167.344012][ T3954]  ? tcf_exts_destroy+0xb0/0xb0
[  167.349270][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.355830][ T3954]  ? pcpu_alloc+0xf8d/0x16c0
[  167.355843][ T3954]  ? mall_set_parms+0x1a0/0x450
[  167.355852][ T3954]  mall_change+0x546/0x770
[  167.355869][ T3954]  ? __kasan_check_write+0x14/0x20
[  167.361256][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.366683][ T3954]  ? mall_get+0xa0/0xa0
[  167.366696][ T3954]  ? tcf_chain_tp_insert_unique+0x946/0xa70
[  167.366707][ T3954]  tc_new_tfilter+0x1487/0x1ab0
[  167.366717][ T3954]  ? mall_get+0xa0/0xa0
[  167.366726][ T3954]  ? tcf_gate_entry_destructor+0x20/0x20
[  167.366733][ T3954]  ? 0xffffffffa002c000
[  167.366746][ T3954]  ? security_capable+0x87/0xb0
[  167.366757][ T3954]  ? ns_capable+0x8c/0xf0
[  167.366766][ T3954]  ? netlink_net_capable+0x125/0x160
[  167.366776][ T3954]  ? tcf_gate_entry_destructor+0x20/0x20
[  167.366784][ T3954]  rtnetlink_rcv_msg+0x811/0xca0
[  167.366805][ T3954]  ? unwind_get_return_address+0x4d/0x90
[  167.373617][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.378908][ T3954]  ? rtnetlink_bind+0x80/0x80
[  167.378928][ T3954]  ? stack_trace_save+0xa6/0xf0
[  167.383457][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.389027][ T3954]  ? stack_trace_snprint+0xe0/0xe0
[  167.389040][ T3954]  ? avc_has_perm+0x168/0x3d0
[  167.389051][ T3954]  ? memcpy+0x56/0x70
[  167.389067][ T3954]  ? avc_has_perm+0x27f/0x3d0
[  167.395822][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.401150][ T3954]  ? __kasan_slab_alloc+0xc9/0xe0
[  167.401168][ T3954]  ? avc_has_perm_noaudit+0x260/0x260
[  167.406885][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.412043][ T3954]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  167.412062][ T3954]  ? selinux_nlmsg_lookup+0x398/0x430
[  167.419225][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.424064][ T3954]  netlink_rcv_skb+0x1e9/0x430
[  167.424075][ T3954]  ? rtnetlink_bind+0x80/0x80
[  167.424085][ T3954]  ? netlink_ack+0xb30/0xb30
[  167.424095][ T3954]  ? __netlink_lookup+0x387/0x3b0
[  167.424104][ T3954]  rtnetlink_rcv+0x1c/0x20
[  167.424113][ T3954]  netlink_unicast+0x86c/0xa30
[  167.424123][ T3954]  netlink_sendmsg+0x949/0xb70
[  167.424141][ T3954]  ? netlink_getsockopt+0x530/0x530
[  167.430358][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.435015][ T3954]  ? security_socket_sendmsg+0x82/0xa0
[  167.435025][ T3954]  ? netlink_getsockopt+0x530/0x530
[  167.435037][ T3954]  ____sys_sendmsg+0x5be/0x8f0
[  167.435054][ T3954]  ? __sys_sendmsg_sock+0x40/0x40
[  167.439950][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.446878][ T3954]  ? import_iovec+0x7c/0xb0
[  167.446889][ T3954]  ___sys_sendmsg+0x236/0x2e0
[  167.446900][ T3954]  ? __sys_sendmsg+0x280/0x280
[  167.446914][ T3954]  ? alloc_file+0x82/0x580
[  167.446932][ T3954]  ? __fdget+0x1a1/0x230
[  167.451624][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.456337][ T3954]  __x64_sys_sendmsg+0x201/0x2d0
[  167.456350][ T3954]  ? __kasan_check_write+0x14/0x20
[  167.456359][ T3954]  ? ___sys_sendmsg+0x2e0/0x2e0
[  167.456371][ T3954]  ? __kasan_check_read+0x11/0x20
[  167.456382][ T3954]  ? exit_to_user_mode_prepare+0x9a/0xa0
[  167.456402][ T3954]  do_syscall_64+0x31/0x40
[  167.460899][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.465982][ T3954]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  167.465993][ T3954] RIP: 0033:0x7f0365305159
[  167.466005][ T3954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.466012][ T3954] RSP: 002b:00007f0363d5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.466025][ T3954] RAX: ffffffffffffffda RBX: 00007f036558cfa0 RCX: 00007f0365305159
[  167.466040][ T3954] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000006
[  167.472858][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.476824][ T3954] RBP: 00007f036539c024 R08: 0000000000000000 R09: 0000000000000000
[  167.476831][ T3954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.476838][ T3954] R13: 00007f036558d038 R14: 00007f036558cfa0 R15: 00007ffc7c011ec8
[  167.476845][ T3954] 
[  167.476852][ T3954] Allocated by task 3954:
[  167.476878][ T3954]  __kasan_kmalloc+0xd4/0x100
[  167.482899][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.487578][ T3954]  __kmalloc+0x19f/0x330
[  167.487588][ T3954]  tcf_idr_create+0x5f/0x790
[  167.487597][ T3954]  tcf_idr_create_from_flags+0x61/0x70
[  167.487614][ T3954]  tcf_gact_init+0x2e6/0x560
[  167.491810][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.497349][ T3954]  tcf_action_init_1+0x443/0x6d0
[  167.497358][ T3954]  tcf_action_init+0x227/0x780
[  167.497366][ T3954]  tcf_exts_validate+0x23c/0x540
[  167.497375][ T3954]  mall_set_parms+0x4a/0x450
[  167.497383][ T3954]  mall_change+0x47a/0x770
[  167.497392][ T3954]  tc_new_tfilter+0x1487/0x1ab0
[  167.497399][ T3954]  rtnetlink_rcv_msg+0x811/0xca0
[  167.497414][ T3954]  netlink_rcv_skb+0x1e9/0x430
[  167.501660][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.506365][ T3954]  rtnetlink_rcv+0x1c/0x20
[  167.506373][ T3954]  netlink_unicast+0x86c/0xa30
[  167.506381][ T3954]  netlink_sendmsg+0x949/0xb70
[  167.506390][ T3954]  ____sys_sendmsg+0x5be/0x8f0
[  167.506405][ T3954]  ___sys_sendmsg+0x236/0x2e0
[  167.510752][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.515968][ T3954]  __x64_sys_sendmsg+0x201/0x2d0
[  167.515978][ T3954]  do_syscall_64+0x31/0x40
[  167.515988][ T3954]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  167.515992][ T3954] 
[  167.515996][ T3954] Last potentially related work creation:
[  167.516006][ T3954]  kasan_save_stack+0x3a/0x60
[  167.516023][ T3954]  __kasan_record_aux_stack+0xd2/0x100
[  167.521733][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.526569][ T3954]  kasan_record_aux_stack_noalloc+0xb/0x10
[  167.526580][ T3954]  call_rcu+0x11a/0x1090
[  167.526589][ T3954]  free_fib_info+0x57/0x90
[  167.526604][ T3954]  fib_create_info+0x12ad/0x1ed0
[  167.532355][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.538888][ T3954]  fib_table_insert+0xc2/0x1d60
[  167.538896][ T3954]  fib_add_ifaddr+0xbe3/0xf90
[  167.538905][ T3954]  fib_netdev_event+0x22e/0x5b0
[  167.538915][ T3954]  raw_notifier_call_chain+0x90/0x100
[  167.538933][ T3954]  __dev_notify_flags+0x2f4/0x5b0
[  167.543715][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.548432][ T3954]  dev_change_flags+0xe3/0x1a0
[  167.548442][ T3954]  vlan_device_event+0x3e6/0x1d40
[  167.548465][ T3954]  raw_notifier_call_chain+0x90/0x100
[  167.555265][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.560222][ T3954]  __dev_notify_flags+0x2f4/0x5b0
[  167.560231][ T3954]  dev_change_flags+0xe3/0x1a0
[  167.560245][ T3954]  do_setlink+0xb19/0x29a0
[  167.564982][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.568845][ T3954]  rtnl_newlink+0xf1c/0x1830
[  167.568854][ T3954]  rtnetlink_rcv_msg+0x9e9/0xca0
[  167.568864][ T3954]  netlink_rcv_skb+0x1e9/0x430
[  167.568878][ T3954]  rtnetlink_rcv+0x1c/0x20
[  167.573641][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.580174][ T3954]  netlink_unicast+0x86c/0xa30
[  167.580183][ T3954]  netlink_sendmsg+0x949/0xb70
[  167.580199][ T3954]  ____sys_sendmsg+0x5be/0x8f0
[  167.585360][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.590539][ T3954]  ___sys_sendmsg+0x236/0x2e0
[  167.590547][ T3954]  __x64_sys_sendmsg+0x201/0x2d0
[  167.590565][ T3954]  do_syscall_64+0x31/0x40
[  167.597353][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.603263][ T3954]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  167.603272][ T3954] 
[  167.608765][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.615275][ T3954] The buggy address belongs to the object at ffff888133992200
[  167.615275][ T3954]  which belongs to the cache kmalloc-256 of size 256
[  167.615286][ T3954] The buggy address is located 216 bytes inside of
[  167.615286][ T3954]  256-byte region [ffff888133992200, ffff888133992300)
[  167.615296][ T3954] The buggy address belongs to the page:
[  167.620184][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.624737][ T3954] page:ffffea0004ce6480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133992
[  167.624744][ T3954] head:ffffea0004ce6480 order:1 compound_mapcount:0
[  167.624765][ T3954] flags: 0x4000000000010200(slab|head)
[  167.629382][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.634330][ T3954] raw: 4000000000010200 ffffea00042efc80 0000000400000004 ffff888100043200
[  167.634343][ T3954] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  167.634348][ T3954] page dumped because: kasan: bad access detected
[  167.634360][ T3954] page_owner tracks the page as allocated
[  167.634377][ T3954] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2084, ts 100361466660, free_ts 100291296879
[  167.634389][ T3954]  prep_new_page+0x176/0x190
[  167.634399][ T3954]  get_page_from_freelist+0x225f/0x23f0
[  167.634406][ T3954]  __alloc_pages_nodemask+0x29a/0x640
[  167.634414][ T3954]  new_slab+0x84/0x3f0
[  167.634424][ T3954]  ___slab_alloc+0x2f8/0x4c0
[  167.634431][ T3954]  __slab_alloc+0x63/0xa0
[  167.634440][ T3954]  __kmalloc+0x1f9/0x330
[  167.634450][ T3954]  fib_create_info+0x8eb/0x1ed0
[  167.634459][ T3954]  fib_table_insert+0xc2/0x1d60
[  167.634467][ T3954]  fib_add_ifaddr+0x892/0xf90
[  167.634476][ T3954]  fib_netdev_event+0x22e/0x5b0
[  167.634487][ T3954]  raw_notifier_call_chain+0x90/0x100
[  167.634498][ T3954]  __dev_notify_flags+0x2f4/0x5b0
[  167.634509][ T3954]  dev_change_flags+0xe3/0x1a0
[  167.634518][ T3954]  do_setlink+0xb19/0x29a0
[  167.634529][ T3954]  rtnl_newlink+0xf1c/0x1830
[  167.634532][ T3954] page last free stack trace:
[  167.634543][ T3954]  free_unref_page_prepare+0x2b7/0x2d0
[  167.634552][ T3954]  __free_pages+0x146/0x390
[  167.634560][ T3954]  __vunmap+0x801/0x980
[  167.634568][ T3954]  vfree+0x61/0x90
[  167.634577][ T3954]  kcov_mmap+0x8f/0x130
[  167.634588][ T3954]  mmap_file+0x60/0xb0
[  167.634596][ T3954]  mmap_region+0x11fd/0x19c0
[  167.634604][ T3954]  do_mmap+0x85f/0xf50
[  167.634613][ T3954]  vm_mmap_pgoff+0x1f4/0x350
[  167.634621][ T3954]  ksys_mmap_pgoff+0x16f/0x1e0
[  167.634630][ T3954]  __x64_sys_mmap+0xfa/0x110
[  167.634640][ T3954]  do_syscall_64+0x31/0x40
[  167.634651][ T3954]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  167.634654][ T3954] 
[  167.634659][ T3954] Memory state around the buggy address:
[  167.634669][ T3954]  ffff888133992180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  167.634677][ T3954]  ffff888133992200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  167.634686][ T3954] >ffff888133992280: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[  167.634691][ T3954]                                                     ^
[  167.634700][ T3954]  ffff888133992300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  167.634709][ T3954]  ffff888133992380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  167.634713][ T3954] ==================================================================
[  167.634717][ T3954] Disabling lock debugging due to kernel taint
[  167.793448][  T439] usb 6-1: Using ep0 maxpacket: 8
[  167.800089][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.933523][  T439] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  167.936290][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.953993][  T439] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  167.957248][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.962077][  T439] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  167.966472][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.966494][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.972742][  T439] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.974706][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.980631][  T439] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  167.985202][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  167.990725][  T439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.997329][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.004135][ T1100] usb 5-1: USB disconnect, device number 12
[  168.007639][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.636805][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.643532][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.650220][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.656945][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.663675][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.670352][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.677086][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.683843][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.690524][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.697329][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.704040][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.710718][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.717653][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.724530][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.731683][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.738441][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.745576][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.752318][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.759054][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.765752][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.772435][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.779281][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.786031][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.792725][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.799444][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.806239][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.812943][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.819704][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.826429][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.833119][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.839879][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.846600][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.853290][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.860009][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.866734][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.873464][  T654] kye 0003:0458:5013.0002: unknown main item tag 0x0
[  168.881619][  T654] kye 0003:0458:5013.0002: hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0
[  168.892622][  T654] kye 0003:0458:5013.0002: tablet-enabling feature report not found
[  168.900654][  T654] kye 0003:0458:5013.0002: tablet enabling failed
[  168.910156][  T654] usb 3-1: USB disconnect, device number 18
[  168.941840][ T3959] fido_id[3959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  169.368343][  T654] usb 2-1: USB disconnect, device number 16
[  169.914338][  T654] usb 6-1: USB disconnect, device number 18