last executing test programs:

36.850583602s ago: executing program 3 (id=88):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18)
connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r1, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

36.279859166s ago: executing program 3 (id=95):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x30, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80)
syz_emit_ethernet(0xadf, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4186dd6535eacc0aa93200fe800000000000000000000ad10000bb00000000000000000000ff"], 0x0)

36.267109377s ago: executing program 3 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getresuid(&(0x7f0000000180), 0xfffffffffffffffd, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000040)="3e0f01c3f30f09b9800000c00f3235000100000f302e0f01cb0f01cbb9af0b00000f3264da7c6900650f01c5b9800000c00f3235004000000f30650fc718", 0x3e}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

36.159800019s ago: executing program 3 (id=98):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x201008, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x2, 0xe3, 0x8}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
r5 = socket(0xa, 0x2, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000780))
write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file1'}, 0xb)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r6=>0x0})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="4c000000100001042dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="136f0200000000002400128009000100766c616e000000001400028006000100020000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB="2404fd91d628fee1107529ee428fb74f10b371b3806e8e965eba74a559530fb358ab705a854cbe27283b"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

35.934561815s ago: executing program 3 (id=101):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000830007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48)

35.799554378s ago: executing program 3 (id=103):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0x4000}]})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x249, &(0x7f0000000bc0)="$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")
syz_emit_ethernet(0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
getpgrp(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r4, 0x5421, &(0x7f00000004c0)=0x5)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r4)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x40, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$eJzs3V1oXGkZAOD3TH5q29hUEcFepVgwaJ00P5YGFFuvhFqpraCoWGMy+SGTTEwm0ASkahEKCu2FqCAWcqGCKAQU7wT1yp8L/9iLdpdCFxZ2C6FLt7AXe5HlTGbS6WaaNJs0Z+k8D5z2+76Zk+898/Y9nfP1dCaAptWV/pKL+EhE3EgiOusea43qg11rz1vqXx5PtyRWVy/eTyJJ9+lfHq89P6n+frC6W3dE/O2HEWfbN847t7A4OVQsFmar/Z7y1EzP3MLiJyemhsYKY4XpvoETg4ODA/2DJ3btWH/2u1+//vGvfO5/V39w9vcr/7j6zSROR0f1sfrj2C1d0VV9TdridP0DScTJ3Z4sY7msA2DbTvYcO95SrfO2SM8BndFSrfrSL7/xoDP+eftJ+y6/efO1vYwV2H1XImIVaFKJ+ocmVXsfkF7/1ra9eu/xmx/v1Uw8ycqZtQvAG9W1naX1/LeurQ3F+yrXhgfeSKpXhmuS2trRDtzKpz/j/gf/k//zn9ItntE6DO9Nyy9nHQFZah/IOgKydORLWUdAlv59LesIyNL/V7KOgCxduJh1BGTpi8/bP4KzLb+4n3UE/OVMRBxvtP6XW1//iQbrPwcjYqd35vzxSERXvPDz+rGN6z+5ezuchk2snIn4dN29XUt1+a863FLtvT/tRFsyOlEspLk/FBHd0bYv7fduMseLx/7++UbjX72b5v/mhdr6X7ql89fWAqtx3Gvd9/h+I0PloZ0eN2tWvh9xpLVR/pP1+k8a1H/65+H8U85Rul663mj80K00/7+6unn+eZZWlyI+1rD+k/XnJJvfn9lTOR/01M4KG1347ytzjcZPHU3z/+BT8p+dtP4PbJ7/yvl//X7dhpnc3GfHOm80Gr/7ozT/b3373Zz/25MvVwKs3Vp8eahcnu2NaE++sHG8b/sxP69qr0ft9Urz3/3Rxn//b3b+3x8R33rKOf/63buvNhr/2mSa/399Xf1nJ83/yBb1nzxW/9tvnP/M0SuN5v7waJr/U/u3rv+BSjDd1RHv/7b2tAnKOk4AAAAAAAAAAAAAAAAAAAAAAIBmk4uIjkhy+fV2LpfPr32+74fiQK5Ymit/YrQ0Pz0Sle/KPhxtudonPXbWfR5sb6X9qN/3jn5/RHwgIq617K/088Ol4kjWBw9NqiPizh++M9zgm/kBAAAAAAAAAAAAAAAAAICsHHzC//9PvdSSdXTAs9ARcWf0Jy3fS9sP1Tk0lbT+f/tw6myof2g66h+al/qH5qX+oXmpf2he6h+al/qH5qX+oXmpf2he9fUPAAAAADyfzp87l26rS/3L42l/ujQ2MTk+M9h3Ij81P5wfLs3O5MdKpbHKN/ZPbf3ziqXSTG9fzF/uKRfmyj1zC4uXpkrz0+VLE1NDY4VLhbY9OCZga7d/OjCedQwAAAAAAAAAAAAAAAAAAMAjcwuLk0PFYmFWQ0NDY72R9ZkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB55OwAA//8t2VDh")
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0x180000, &(0x7f0000001640)=ANY=[@ANYRESDEC=r0], 0x81, 0x2ac, &(0x7f0000000f00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="120000000400000100010000000000000008000093a6dd19273770857d54213d21ebed06baeb77f0bbf627aec82eb6289fa5726d29a20e433be45b333d8c191f3feca41581316192a6edbd1cbeda6e78c8953b8a76d35493175dd851c236e43ff8ff83464f9c156dcf84fefb2e6d09fa28030dc7e0d30c40544057f4a2a7df866e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

35.746545979s ago: executing program 32 (id=103):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0x4000}]})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x249, &(0x7f0000000bc0)="$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")
syz_emit_ethernet(0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
getpgrp(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r4, 0x5421, &(0x7f00000004c0)=0x5)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r4)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x40, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$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")
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0x180000, &(0x7f0000001640)=ANY=[@ANYRESDEC=r0], 0x81, 0x2ac, &(0x7f0000000f00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="120000000400000100010000000000000008000093a6dd19273770857d54213d21ebed06baeb77f0bbf627aec82eb6289fa5726d29a20e433be45b333d8c191f3feca41581316192a6edbd1cbeda6e78c8953b8a76d35493175dd851c236e43ff8ff83464f9c156dcf84fefb2e6d09fa28030dc7e0d30c40544057f4a2a7df866e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

10.251127681s ago: executing program 2 (id=282):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYRES64=0x0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffff450000200000007d2a801378000000000000000000004e20000c9078010000000000000000"], 0x0) (async)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffff450000200000007d2a801378000000000000000000004e20000c9078010000000000000000"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)
r2 = syz_open_procfs(0x0, &(0x7f0000000580)='stack\x00')
read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x3, 0x4}}}}}]}}]}}, 0x0)

9.725394674s ago: executing program 5 (id=291):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000007000fffff03000000000000080100000000000000000000020200000000002e2e2e"], 0x0, 0x44}, 0x20)

9.676227295s ago: executing program 5 (id=292):
r0 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x98d})
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140)=0x40, 0x4)
timer_create(0x1, 0x0, &(0x7f0000000200))
timer_getoverrun(0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0x4, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabe}, 0x1c)
close(0x3)
socket$packet(0x11, 0x2, 0x300) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x98d}) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140)=0x40, 0x4) (async)
timer_create(0x1, 0x0, &(0x7f0000000200)) (async)
timer_getoverrun(0x0) (async)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0x4, 0x4) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabe}, 0x1c) (async)
close(0x3) (async)

9.674942495s ago: executing program 5 (id=293):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000731109000000000085100000020000008500000000000018950000000000001b9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)

9.616084716s ago: executing program 5 (id=294):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="696f636861727365743d63703836322c666c7573682c73686f72746e616d653d6d697865642c636f6465706167653d313235302c757466383d312c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c646d61736b3d30303030303030303030303030303030303135353534302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d6c6f7765722c002c67f45d38e113e045adef3cdf5f62da6ba1efa4513ced37e3667fec1737130fe7115d032c06ca2e78052af37dc1599262d32be9510bef1abf7f66fcdce775bcacf5dbfd5744a92efc4eb1b09ed7d6f01cd472ff6fcb2c46b0ad64020af7916d51d40d4df1282171812358ba4a65f6436d60de01be03070f1f8a2eef4cb6e52b3657c8a9230d7048335758f4af24371dab00b43aa187260037dee067e4"], 0xfd, 0x2a8, &(0x7f0000000240)="$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")
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
setrlimit(0x0, &(0x7f0000000000)={0x8, 0x8})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x808, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
syz_mount_image$fuse(0x0, 0x0, 0x3000042, 0x0, 0x1, 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000380)={0x0})
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0})
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x80000000)

8.796141616s ago: executing program 5 (id=298):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f00000000000000000000000100090000000000030006006c0000000200000000000000000000000000000002000100002000000002060b00000600030005000000000002000000000000000000000000000000040003"], 0x78}, 0x1, 0x7}, 0x0)

8.580974902s ago: executing program 5 (id=299):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0xbec75000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000600000006000000002000000000000000000000d0a0000000000540000000006040000000000000005000004fd"], &(0x7f0000000f40)=""/4089, 0x7a, 0xff9, 0x1}, 0x28)

8.548649922s ago: executing program 33 (id=299):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0xbec75000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000600000006000000002000000000000000000000d0a0000000000540000000006040000000000000005000004fd"], &(0x7f0000000f40)=""/4089, 0x7a, 0xff9, 0x1}, 0x28)

7.234502764s ago: executing program 2 (id=311):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="001614"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x6, "6e5ef0f64456"}, 0x0})

6.040113493s ago: executing program 0 (id=317):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
readv(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = fsopen(&(0x7f00000006c0)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)

6.039923213s ago: executing program 6 (id=318):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x82, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.932372455s ago: executing program 4 (id=320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0)

5.834701048s ago: executing program 6 (id=321):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchdir(0xffffffffffffffff)
setpriority(0x0, 0x0, 0x200002a14b56)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_mixed}, {@utf8}, {@fat=@tz_utc}, {@uni_xlateno}, {@fat=@flush}, {@rodir}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_mixed}, {@rodir}, {@utf8}, {@fat=@discard}, {@utf8no}, {@rodir}]}, 0x1, 0x28e, &(0x7f0000001500)="$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")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0xfd, 0x6, 0xfffffffc, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @remote, 0x8000, 0xba08, 0x2, 0x4}})

5.004075839s ago: executing program 0 (id=322):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
sendto$inet6(r0, &(0x7f0000000700)="f3eb0aca", 0x4, 0x4010, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000801)

4.878341992s ago: executing program 6 (id=323):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x65a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ef"})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000)
close(0x3)
r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0x0)
add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000300)="9ed7276cfdf310dc06722e9eacdcfb373d35b837f9669fe8c59c63ce0da450dcb8a94d27b81a9a62410516b394d4841acf7518c99e9dae787c9f437ea90aa71666039cc6806a3c8bc412", 0x4a, r6)
r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
gettid()
timer_create(0x3, 0x0, &(0x7f0000044000))
request_key(&(0x7f00000005c0)='id_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='%\x89]', r6)
dup2(r7, r5)

4.688114376s ago: executing program 1 (id=325):
flock(0xffffffffffffffff, 0x5)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xcd, 0x40, 0xfd, 0x10, 0x4e6, 0xa, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0xd0, 0x7, "", [{{0x9, 0x4, 0xfb, 0x5, 0x0, 0x7d, 0xbb, 0x2b, 0x4}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

4.687829346s ago: executing program 0 (id=326):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unlink(0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r6 = dup(r5)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
write$vga_arbiter(r6, &(0x7f0000000280)=@unlock_all, 0xb)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@barrier}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")

3.951794074s ago: executing program 6 (id=327):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setgroups(0x700, &(0x7f0000000280))

3.886303526s ago: executing program 2 (id=328):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
ioctl$RTC_AIE_ON(r4, 0x7001)

3.369333338s ago: executing program 0 (id=329):
socket$inet_tcp(0x2, 0x1, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
unshare(0x6000080)

3.369100458s ago: executing program 4 (id=330):
r0 = socket$inet6(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
preadv(r4, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000000c0), 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x8, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @random="9e4338bf2d14", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

2.443992511s ago: executing program 2 (id=331):
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {}, {@sysvgroups}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x1, 0x577, &(0x7f0000000640)="$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")
syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzszy3OwkAUhtF3vh9GYFB4dgIeW0WCRrKESiyLwLAxllHSQhs2QAjJOWJyc/OMuOGjStbT/DMO+/P/a1P7Z9iUdty1Odak/V2VkmWd0s0il1n/o8vuUJJt91CSzIfi1jzTU/1Lc33nbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwLe4BAAD//zujEGQ=")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

2.443758271s ago: executing program 6 (id=332):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r6, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

2.146865058s ago: executing program 0 (id=333):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.483677084s ago: executing program 2 (id=334):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
preadv2(r0, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1, 0x4, 0x3ff, 0x0)

1.295998299s ago: executing program 1 (id=335):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe})
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x8001, 0x0)

1.162306492s ago: executing program 4 (id=336):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0)
write(r0, &(0x7f00000006c0)='10', 0x2)

1.130245143s ago: executing program 4 (id=337):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80000)
futex(&(0x7f0000000000), 0x5, 0x2, 0x0, 0x0, 0xc6fffffd)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0xc)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

1.028066666s ago: executing program 1 (id=338):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB='g'], 0x20)

960.107077ms ago: executing program 1 (id=339):
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}])

603.920045ms ago: executing program 6 (id=340):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x44080)

512.681338ms ago: executing program 2 (id=341):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

410.710991ms ago: executing program 0 (id=342):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

184.004366ms ago: executing program 4 (id=343):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x800}}], 0x18}, 0x0)

172.036866ms ago: executing program 4 (id=344):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
fallocate(r4, 0x11, 0x0, 0x5345)
r6 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)

140.352867ms ago: executing program 1 (id=345):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x53}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000640)=""/73}, 0x20)

0s ago: executing program 1 (id=346):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86cd600a843500022f00fe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts.
[   22.423197][   T24] audit: type=1400 audit(1788582369.090:64): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.426421][  T271] cgroup: Unknown subsys name 'net'
[   22.445967][   T24] audit: type=1400 audit(1788582369.090:65): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.473228][   T24] audit: type=1400 audit(1788582369.130:66): avc:  denied  { unmount } for  pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.473827][  T271] cgroup: Unknown subsys name 'devices'
[   22.651313][  T271] cgroup: Unknown subsys name 'hugetlb'
[   22.656943][  T271] cgroup: Unknown subsys name 'rlimit'
[   22.827554][   T24] audit: type=1400 audit(1788582369.490:67): avc:  denied  { setattr } for  pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.850782][   T24] audit: type=1400 audit(1788582369.490:68): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.875522][   T24] audit: type=1400 audit(1788582369.490:69): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.893363][  T273] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.907561][   T24] audit: type=1400 audit(1788582369.570:70): avc:  denied  { relabelto } for  pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.933022][   T24] audit: type=1400 audit(1788582369.570:71): avc:  denied  { write } for  pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.960428][   T24] audit: type=1400 audit(1788582369.630:72): avc:  denied  { read } for  pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.985953][   T24] audit: type=1400 audit(1788582369.630:73): avc:  denied  { open } for  pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.985965][  T271] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.641723][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.648820][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.656341][  T279] device bridge_slave_0 entered promiscuous mode
[   23.664302][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.671564][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.678903][  T279] device bridge_slave_1 entered promiscuous mode
[   23.756597][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.763780][  T282] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.771312][  T282] device bridge_slave_0 entered promiscuous mode
[   23.778151][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.785352][  T282] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.792861][  T282] device bridge_slave_1 entered promiscuous mode
[   23.799455][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.806506][  T280] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.813903][  T280] device bridge_slave_0 entered promiscuous mode
[   23.822104][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.829156][  T280] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.836655][  T280] device bridge_slave_1 entered promiscuous mode
[   23.917453][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.924748][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.932344][  T281] device bridge_slave_0 entered promiscuous mode
[   23.949896][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.956960][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.964690][  T281] device bridge_slave_1 entered promiscuous mode
[   23.998231][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.005343][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.012657][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.019721][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.058136][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.065407][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.073276][  T283] device bridge_slave_0 entered promiscuous mode
[   24.082976][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.090089][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.097431][  T283] device bridge_slave_1 entered promiscuous mode
[   24.151132][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.158214][  T280] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.165542][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.172620][  T280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.211490][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.218565][  T281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.225848][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.233037][  T281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.242052][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.249109][  T282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.256420][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.263692][  T282] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.290276][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.297345][  T283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.304656][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.311738][  T283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.323352][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.330596][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.337753][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.345088][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.352771][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.360170][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.367622][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.375088][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.382296][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.389677][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.397116][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.404753][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.432855][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.440579][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.448111][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.456745][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.463841][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.471831][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.480175][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.487214][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.494648][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.503184][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.510263][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.519297][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.554116][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.561574][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.569821][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.576859][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.585178][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.593588][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.600660][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.608005][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.616235][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.623278][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.630756][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.638664][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.646762][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.654701][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.662821][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.671160][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.678180][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.685722][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.693946][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.701027][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.708433][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.729467][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.736959][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.745169][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   24.754193][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.762390][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.769452][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.776912][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.785443][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.793548][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   24.801964][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.810202][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.817224][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.824721][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.833216][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.851918][  T282] device veth0_vlan entered promiscuous mode
[   24.858822][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.867096][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.875292][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.884304][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.892797][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.900845][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.908882][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.916370][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.929677][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.937782][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.951266][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.959656][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.968045][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.976337][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.990956][  T282] device veth1_macvtap entered promiscuous mode
[   24.998286][  T280] device veth0_vlan entered promiscuous mode
[   25.004534][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.012273][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.019751][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.027850][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.036229][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.047066][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.055421][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.073123][  T279] device veth0_vlan entered promiscuous mode
[   25.082525][  T281] device veth0_vlan entered promiscuous mode
[   25.090441][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.098797][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.107426][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.115841][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.124227][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.132126][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.140224][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.148032][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.156157][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.164526][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.173008][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.180556][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.187935][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.195596][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.211660][  T283] device veth0_vlan entered promiscuous mode
[   25.219340][  T279] device veth1_macvtap entered promiscuous mode
[   25.226998][  T280] device veth1_macvtap entered promiscuous mode
[   25.233714][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.242944][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.251157][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.258700][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.266954][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.275210][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.282855][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.291019][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.299031][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.307372][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.315772][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.323436][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.334103][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.342683][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.363511][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.372132][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.381107][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.390329][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.398571][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.407378][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.415870][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.424430][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.435680][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.444100][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.458077][  T281] device veth1_macvtap entered promiscuous mode
[   25.465341][  T282] request_module fs-gadgetfs succeeded, but still no fs?
[   25.476695][  T283] device veth1_macvtap entered promiscuous mode
[   25.487589][  T282] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   25.502934][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.514100][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.527582][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.537138][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.546691][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.558244][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.567061][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.597557][  T303] EXT4-fs (loop2): Ignoring removed bh option
[   25.614289][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.627489][  T315] EXT4-fs (loop3): Test dummy encryption mode enabled
[   25.636896][  T303] EXT4-fs (loop2): Test dummy encryption mode enabled
[   25.644785][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.653820][  T315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   25.677893][  T321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   25.687088][  T303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3: inode #1: comm syz.2.3: iget: illegal inode #
[   25.694443][  T315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   25.708679][  T303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3: error while reading EA inode 1 err=-117
[   25.722357][  T303] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   25.736082][  T303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.3: inode #1: comm syz.2.3: iget: illegal inode #
[   25.749671][  T303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3: error while reading EA inode 1 err=-117
[   25.761999][  T303] EXT4-fs (loop2): 1 orphan inode deleted
[   25.772621][  T315] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.4: bad orphan inode 131072
[   25.782956][  T303] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,bh,norecovery,noauto_da_alloc,usrjquota=,debug_want_extra_isize=0x000000000000005c,nogrpid,dioread_lock,test_dummy_encryption,noquota,,errors=continue
[   25.832644][  T321] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   25.864098][  T315] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,inode_readahead_blks=0x0000000000000004,norecovery,,errors=continue
[   25.882339][  T321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.902899][  T336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6'.
[   25.989471][  T345] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8'.
[   25.999523][  T324] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.239438][  T324] usb 1-1: Using ep0 maxpacket: 16
[   26.249435][  T301] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   26.359493][  T324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   26.373299][  T324] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[   26.399438][  T324] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   26.408515][  T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.426569][  T324] usb 1-1: config 0 descriptor??
[   26.471532][  T324] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   26.499492][  T301] usb 3-1: Using ep0 maxpacket: 32
[   26.556648][  T349] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   26.659581][  T301] usb 3-1: unable to get BOS descriptor or descriptor too short
[   26.734142][  T354] xt_hashlimit: size too large, truncated to 1048576
[   26.899529][  T301] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   26.914083][  T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.929429][  T301] usb 3-1: Product: syz
[   26.939787][  T301] usb 3-1: Manufacturer: syz
[   26.948752][  T301] usb 3-1: SerialNumber: syz
[   27.120898][  T357] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   27.135335][  T357] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002]
[   27.144154][  T357] EXT4-fs (loop4): orphan cleanup on readonly fs
[   27.151016][  T357] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.12: Bad quota inum: 3, type: 1
[   27.162050][  T357] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[   27.177032][  T357] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   27.184424][  T357] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,stripe=0x0000000000000008,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue
[   27.211486][  T357] EXT4-fs error (device loop4): ext4_lookup:1830: inode #15: comm syz.4.12: iget: bad i_size value: 360287970189639690
[   27.731155][  T382]  loop4: p1 p3 < >
[   27.816660][  T301] usb 3-1: unit 0 not found!
[   27.911763][  T387] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   27.920814][  T387] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   28.153221][  T397] usb usb7: check_ctrlrecip: process 397 (syz.3.19) requesting ep 01 but needs 81
[   28.162564][  T397] usb usb7: usbfs: process 397 (syz.3.19) did not claim interface 0 before use
[   28.173061][  T397] Zero length message leads to an empty skb
[   28.437523][   T24] kauditd_printk_skb: 61 callbacks suppressed
[   28.437537][   T24] audit: type=1326 audit(1788582375.100:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.468954][   T24] audit: type=1326 audit(1788582375.140:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.494737][   T24] audit: type=1326 audit(1788582375.170:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.519711][   T24] audit: type=1326 audit(1788582375.170:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.542362][  T401] cgroup: syz.4.22 (401) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   28.547798][   T24] audit: type=1326 audit(1788582375.170:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.561812][  T401] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   28.586611][   T24] audit: type=1326 audit(1788582375.170:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.617758][   T24] audit: type=1326 audit(1788582375.170:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.642722][   T24] audit: type=1326 audit(1788582375.170:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.646990][  T399] ======================================================
[   28.646990][  T399] WARNING: the mand mount option is being deprecated and
[   28.646990][  T399]          will be removed in v5.15!
[   28.646990][  T399] ======================================================
[   28.694273][  T399] EXT4-fs (loop1): Test dummy encryption mode enabled
[   28.702612][   T24] audit: type=1326 audit(1788582375.170:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   28.728113][  T399] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue
[   28.739989][    T5] usb 1-1: USB disconnect, device number 2
[   28.743012][  T399] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   28.753667][   T24] audit: type=1326 audit(1788582375.170:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=398 comm="syz.1.21" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd94a0bcec2 code=0x7ffc0000
[   28.794171][  T406] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[   28.818044][  T409] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   28.916696][  T409] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002]
[   28.927807][  T409] EXT4-fs (loop0): orphan cleanup on readonly fs
[   28.938571][  T409] EXT4-fs error (device loop0): ext4_quota_enable:6447: comm syz.0.24: Bad quota inum: 3, type: 1
[   28.950859][  T409] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[   28.958642][  T406] device syzkaller0 entered promiscuous mode
[   28.966881][  T409] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   29.010716][  T409] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,stripe=0x0000000000000008,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue
[   29.282530][  T409] EXT4-fs error (device loop0): ext4_lookup:1830: inode #15: comm syz.0.24: iget: bad i_size value: 360287970189639690
[   29.296548][  T413] FAT-fs (loop3): Directory bread(block 64) failed
[   29.316098][  T413] FAT-fs (loop3): Directory bread(block 65) failed
[   29.327198][  T411] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[   29.329768][  T413] FAT-fs (loop3): Directory bread(block 66) failed
[   29.347684][  T301] usb 3-1: USB disconnect, device number 2
[   29.357120][  T413] FAT-fs (loop3): Directory bread(block 67) failed
[   29.367566][  T413] FAT-fs (loop3): Directory bread(block 68) failed
[   29.374629][  T413] FAT-fs (loop3): Directory bread(block 69) failed
[   29.382460][  T413] FAT-fs (loop3): Directory bread(block 70) failed
[   29.389863][  T420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   29.399166][  T413] FAT-fs (loop3): Directory bread(block 71) failed
[   29.405898][  T413] FAT-fs (loop3): Directory bread(block 72) failed
[   29.412556][  T413] FAT-fs (loop3): Directory bread(block 73) failed
[   29.580592][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   30.649393][    C0] sched: RT throttling activated
[   30.656901][  T432] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   30.671707][  T432] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   30.783596][  T435] capability: warning: `syz.1.29' uses 32-bit capabilities (legacy support in use)
[   31.017581][  T461] 9pnet: Insufficient options for proto=fd
[   31.120968][  T455] EXT4-fs (loop0): Test dummy encryption mode enabled
[   31.150377][  T455] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue
[   31.224315][  T455] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   31.456642][  T413] attempt to access beyond end of device
[   31.456642][  T413] loop3: rw=2049, want=1832, limit=256
[   31.476681][  T413] attempt to access beyond end of device
[   31.476681][  T413] loop3: rw=2049, want=14160, limit=256
[   31.932814][  T471] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   31.941882][  T471] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.155686][  T481] EXT4-fs (loop1): Test dummy encryption mode enabled
[   32.165949][  T481] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue
[   32.180668][  T481] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   32.254868][  T459] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[   32.264123][  T459] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   32.273245][  T459] F2FS-fs (loop4): invalid crc value
[   32.300951][  T459] F2FS-fs (loop4): Found nat_bits in checkpoint
[   32.350446][  T459] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   32.357540][  T459] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   32.386550][  T495] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   32.454793][  T510] usb usb7: check_ctrlrecip: process 510 (syz.3.47) requesting ep 01 but needs 81
[   32.464136][  T510] usb usb7: usbfs: process 510 (syz.3.47) did not claim interface 0 before use
[   32.520805][  T495] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   32.735056][  T514] fuse: Bad value for 'fd'
[   33.609647][  T559] erofs: (device loop4): mounted with root inode @ nid 36.
[   33.653356][   T24] kauditd_printk_skb: 316 callbacks suppressed
[   33.653378][   T24] audit: type=1400 audit(1788582380.320:461): avc:  denied  { mount } for  pid=558 comm="syz.4.65" name="/" dev="loop4" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.825876][   T24] audit: type=1400 audit(1788582380.380:462): avc:  denied  { ioctl } for  pid=558 comm="syz.4.65" path="/11/bus/file0/file0" dev="overlay" ino=49 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.879470][   T24] audit: type=1400 audit(1788582380.470:463): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   34.014620][  T562] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   34.023799][  T562] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   34.214668][  T575] EXT4-fs (loop1): Test dummy encryption mode enabled
[   34.231441][  T575] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue
[   34.259676][  T575] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   34.275727][   T24] audit: type=1400 audit(1788582380.940:464): avc:  denied  { read append open } for  pid=574 comm="syz.1.70" path="/15/file1/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.306924][  T575] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[   34.435550][  T546] F2FS-fs (loop2): invalid crc value
[   34.442913][  T546] F2FS-fs (loop2): Found nat_bits in checkpoint
[   34.479601][   T24] audit: type=1400 audit(1788582381.150:465): avc:  denied  { create } for  pid=578 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   34.485907][  T546] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   34.579730][  T546] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   35.004260][   T24] audit: type=1400 audit(1788582381.670:466): avc:  denied  { rename } for  pid=545 comm="syz.2.62" name="file0" dev="loop2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.009607][    T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   35.037127][   T24] audit: type=1400 audit(1788582381.670:467): avc:  denied  { rename } for  pid=545 comm="syz.2.62" name="file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   35.117438][  T603] udc-core: couldn't find an available UDC or it's busy
[   35.124841][  T603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   35.329431][   T24] audit: type=1400 audit(1788582381.990:468): avc:  denied  { read } for  pid=606 comm="syz.1.79" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   35.379543][  T333] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   35.495578][   T24] audit: type=1400 audit(1788582381.990:469): avc:  denied  { open } for  pid=606 comm="syz.1.79" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   35.655814][   T24] audit: type=1326 audit(1788582382.320:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.2.77" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe908c79159 code=0x7ffc0000
[   35.680751][  T333] usb 5-1: Using ep0 maxpacket: 32
[   35.758282][  T614] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   35.771845][  T614] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   35.819525][  T333] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   35.833960][  T333] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[   35.891864][  T614] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option
[   35.902260][  T614] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring
[   35.912968][  T614] EXT4-fs (loop2): re-mounted. Opts: journal_checksum,journal_ioprio=0x0000000000000001,user_xattr,grpjquota=,data=writeback,noblock_validity,minixdf,journal_checksum,
[   35.949514][    T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.964076][    T5] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   35.981474][    T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7
[   36.019543][  T333] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   36.033628][  T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.049421][  T333] usb 5-1: Product: ࠬ
[   36.059661][  T333] usb 5-1: Manufacturer: 
[   36.069575][  T333] usb 5-1: SerialNumber: І
[   36.159649][    T5] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[   36.176390][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.195422][    T5] usb 4-1: Product: syz
[   36.204003][    T5] usb 4-1: Manufacturer: syz
[   36.214058][    T5] usb 4-1: SerialNumber: syz
[   36.231651][  T605] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   36.267766][  T605] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   36.282210][  T605] F2FS-fs (loop0): invalid crc value
[   36.305332][  T605] F2FS-fs (loop0): Found nat_bits in checkpoint
[   36.341278][  T614] EXT4-fs (loop2): re-mounted. Opts: (null)
[   36.350349][  T605] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   36.357432][  T605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   36.399585][  T333] cdc_ncm 5-1:1.0: bind() failure
[   36.405810][  T623] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   36.426446][  T333] cdc_ncm 5-1:1.1: bind() failure
[   36.435103][  T623] EXT4-fs (loop1): 1 truncate cleaned up
[   36.445615][  T333] usb 5-1: USB disconnect, device number 2
[   36.449618][  T623] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue
[   36.570125][  T623] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.577952][  T623] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.662362][  T582] F2FS-fs (loop3): invalid crc value
[   36.681684][  T582] F2FS-fs (loop3): Found nat_bits in checkpoint
[   36.734258][  T582] F2FS-fs (loop3): Start checkpoint disabled!
[   36.741111][  T582] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   36.756954][  T582] attempt to access beyond end of device
[   36.756954][  T582] loop3: rw=2049, want=45104, limit=40427
[   36.768684][  T582] netlink: 72 bytes leftover after parsing attributes in process `syz.3.73'.
[   36.901161][  T642] EXT4-fs (loop4): Test dummy encryption mode enabled
[   36.915942][  T642] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue
[   36.930746][  T642] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   36.941051][  T324] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   37.212479][  T324] usb 3-1: Using ep0 maxpacket: 16
[   37.339748][  T324] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.393766][  T324] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[   37.412079][  T324] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[   37.443204][  T324] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   37.459720][    T5] usb 4-1: Can't get UAC3 power state for id 10
[   37.529486][  T324] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   37.529842][    T5] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[   37.550587][  T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   37.576982][  T324] usb 3-1: SerialNumber: syz
[   37.609756][    T5] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[   37.629526][  T638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   37.705277][  T638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   37.747091][    T5] usb 4-1: USB disconnect, device number 2
[   37.807092][  T660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   37.816525][  T660] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   37.848253][  T324] hub 3-1:1.0: bad descriptor, ignoring hub
[   37.855265][  T324] hub: probe of 3-1:1.0 failed with error -5
[   37.956745][  T678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.012361][  T695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'.
[   38.049716][  T638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   38.058708][  T638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   38.070404][  T442] udevd[442]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   38.103157][  T695] process 'syz.3.98' launched '" ' with NULL argv: empty string added
[   38.160941][  T697] EXT4-fs (loop4): Ignoring removed oldalloc option
[   38.171487][  T697] EXT4-fs (loop4): Ignoring removed oldalloc option
[   38.178375][  T697] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   38.200903][  T697] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,journal_dev=0x0000000000000000,norecovery,,errors=continue
[   38.201459][  T695] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue
[   38.231434][   T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   38.239698][  T695] ext4 filesystem being mounted at /14/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.390962][  T707] EXT4-fs (loop4): Test dummy encryption mode enabled
[   38.407030][  T707] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue
[   38.421874][  T707] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   38.509562][   T25] usb 1-1: device descriptor read/64, error -71
[   38.521518][  T324] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[   38.647558][  T711] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.667098][  T711] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.695922][  T711] device bridge_slave_0 entered promiscuous mode
[   38.757688][  T711] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.773795][  T711] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.790976][  T711] device bridge_slave_1 entered promiscuous mode
[   38.804505][   T24] kauditd_printk_skb: 41 callbacks suppressed
[   38.804518][   T24] audit: type=1400 audit(1788582385.470:512): avc:  denied  { write } for  pid=715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   38.811330][  T735] EXT4-fs (loop1): Ignoring removed orlov option
[   38.840524][  T735] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   38.855231][   T24] audit: type=1400 audit(1788582385.470:513): avc:  denied  { add_name } for  pid=715 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   38.878282][   T24] audit: type=1400 audit(1788582385.470:514): avc:  denied  { create } for  pid=715 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   38.900702][   T24] audit: type=1400 audit(1788582385.470:515): avc:  denied  { write } for  pid=715 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=1297 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   38.926936][   T24] audit: type=1400 audit(1788582385.470:516): avc:  denied  { append } for  pid=715 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=1297 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   38.985208][   T25] usb 1-1: device descriptor read/64, error -71
[   39.018876][   T24] audit: type=1400 audit(1788582385.680:517): avc:  denied  { remove_name } for  pid=741 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1297 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   39.051925][  T735] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.108: bad orphan inode 16
[   39.062080][  T735] ext4_test_bit(bit=15, block=18) = 1
[   39.064493][   T24] audit: type=1400 audit(1788582385.680:518): avc:  denied  { unlink } for  pid=741 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1297 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   39.067469][  T735] is_bad_inode(inode)=0
[   39.067475][  T735] NEXT_ORPHAN(inode)=83886080
[   39.067479][  T735] max_ino=32
[   39.067493][  T735] i_nlink=0
[   39.108882][  T735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   39.117881][  T735] ext4 filesystem being mounted at /24/myconfig supports timestamps until 2038-01-19 (0x7fffffff)
[   39.136652][   T24] audit: type=1400 audit(1788582385.800:519): avc:  denied  { ioctl } for  pid=734 comm="syz.1.108" path="socket:[17235]" dev="sockfs" ino=17235 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.167092][  T711] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.174214][  T711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.181511][  T711] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.188554][  T711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.277417][   T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   39.329062][    T9] device bridge_slave_1 left promiscuous mode
[   39.337778][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.345240][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   39.377977][    T9] device bridge_slave_0 left promiscuous mode
[   39.389528][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.407856][    T9] device veth1_macvtap left promiscuous mode
[   39.416955][    T9] device veth0_vlan left promiscuous mode
[   39.429424][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   39.445742][  T753] udc-core: couldn't find an available UDC or it's busy
[   39.460216][  T753] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   39.489317][   T24] audit: type=1400 audit(1788582386.150:520): avc:  denied  { ioctl } for  pid=637 comm="syz.2.84" path="socket:[17265]" dev="sockfs" ino=17265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.516089][  T753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'.
[   39.549458][   T25] usb 1-1: device descriptor read/64, error -71
[   39.574982][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.582477][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.601652][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.609236][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.619094][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.627726][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.636321][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.643422][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.653140][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   39.661985][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.670483][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.677655][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.694068][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   39.702620][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.722222][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   39.731116][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.739114][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   39.748830][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.761639][  T711] device veth0_vlan entered promiscuous mode
[   39.768891][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   39.779660][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   39.787769][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   39.795809][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   39.809668][  T711] device veth1_macvtap entered promiscuous mode
[   39.819184][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   39.834030][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.843131][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   39.860633][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.869137][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.882891][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.894291][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.905640][   T24] audit: type=1400 audit(1788582386.570:521): avc:  denied  { mounton } for  pid=711 comm="syz-executor" path="/root/syzkaller.ewXteh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.942131][   T25] usb 1-1: device descriptor read/64, error -71
[   39.970388][  T784] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   39.981340][  T784] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   39.991259][  T784] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   40.377078][  T786] 9pnet: Insufficient options for proto=fd
[   40.415377][  T784] device vlan2 entered promiscuous mode
[   40.423050][   T25] usb usb1-port1: attempt power cycle
[   40.439849][  T784] device bridge0 entered promiscuous mode
[   40.564260][  T796] EXT4-fs (loop4): Test dummy encryption mode enabled
[   40.573478][  T796] EXT4-fs (loop4): Ignoring removed oldalloc option
[   40.580616][  T796] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   40.617885][  T796] EXT4-fs (loop4): Test dummy encryption mode enabled
[   40.625565][  T796] EXT4-fs (loop4): Ignoring removed oldalloc option
[   40.632599][  T796] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   40.643053][  T649] usb 3-1: USB disconnect, device number 3
[   40.649769][  T649] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[   40.661316][  T811] FAT-fs (loop1): Unrecognized mount option "00000000000000000000" or missing value
[   40.829460][   T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   40.876623][  T814] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[   40.876623][  T814] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   40.876623][  T814] 
[   40.937677][  T814] EXT4-fs (loop2): Ignoring removed orlov option
[   40.949098][  T814] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[   40.949098][  T814] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   40.949098][  T814] 
[   40.988033][  T814] EXT4-fs (loop2): Unrecognized mount option "mask=MAY_EXEC" or missing value
[   40.989770][   T25] usb 1-1: device descriptor read/8, error -71
[   41.008145][  T817] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   41.049973][  T826] EXT4-fs (loop4): Ignoring removed bh option
[   41.172645][  T826] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,
[   41.204065][  T817] EXT4-fs (loop5): shut down requested (1)
[   41.587630][  T817] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop5 ino=16
[   41.642043][  T843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.125: iget: bad extra_isize 58 (inode size 256)
[   41.656024][  T843] EXT4-fs (loop0): Remounting filesystem read-only
[   41.662865][  T843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.125: error while reading EA inode 18 err=-117
[   41.676318][  T843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.125: iget: bad extra_isize 58 (inode size 256)
[   41.690818][  T843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.125: error while reading EA inode 11 err=-117
[   41.704515][  T843] EXT4-fs (loop0): 1 orphan inode deleted
[   41.710351][  T843] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrquota,errors=remount-ro,nouid32,nojournal_checksum,debug_want_extra_isize=0x000000000000003a,dioread_lock,
[   41.805168][  T826] EXT4-fs (loop4): re-mounted. Opts: (null)
[   42.389613][   T25] usb 1-1: device descriptor read/8, error -71
[   42.440557][  T849] SELinux:  Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped).
[   42.546479][  T811] F2FS-fs (loop1): invalid crc value
[   42.596209][  T811] F2FS-fs (loop1): Found nat_bits in checkpoint
[   42.651562][  T811] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[   42.664985][  T811] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   42.820244][  T884] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   42.840768][  T884] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[   42.898081][  T895] EXT4-fs (loop5): bad s_want_extra_isize: 1536
[   42.927236][  T884] overlayfs: invalid origin (00000079007265616461686561645f626c6b733d3078303030303030303030303030303030312c62736467726f7570732c6e6f626c6f636b5f76616c69646974)
[   42.961914][  T895] EXT4-fs (loop5): bad s_want_extra_isize: 12079
[   43.029505][  T649] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   43.093589][  T895] EXT4-fs (loop5): bad s_want_extra_isize: 12079
[   43.172083][  T895] EXT4-fs (loop5): bad s_want_extra_isize: 12079
[   43.279472][  T649] usb 3-1: Using ep0 maxpacket: 8
[   43.409515][  T775] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   43.495665][  T895] EXT4-fs (loop5): bad s_want_extra_isize: 12079
[   43.548973][  T915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.144: iget: bad extra_isize 58 (inode size 256)
[   43.563150][  T915] EXT4-fs (loop4): Remounting filesystem read-only
[   43.570051][  T915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.144: error while reading EA inode 18 err=-117
[   43.592985][  T915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.144: iget: bad extra_isize 58 (inode size 256)
[   43.607344][  T915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.144: error while reading EA inode 11 err=-117
[   43.621429][  T915] EXT4-fs (loop4): 1 orphan inode deleted
[   43.627231][  T915] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrquota,errors=remount-ro,nouid32,nojournal_checksum,debug_want_extra_isize=0x000000000000003a,dioread_lock,
[   43.849636][  T775] usb 2-1: config 14 has an invalid interface number: 217 but max is 0
[   43.892414][  T775] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping
[   44.322856][  T775] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[   44.368933][  T775] usb 2-1: config 14 has 2 interfaces, different from the descriptor's value: 1
[   44.416117][  T919] EXT4-fs (loop5): Ignoring removed bh option
[   44.428387][  T775] usb 2-1: config 14 has no interface number 1
[   44.437049][  T775] usb 2-1: config 14 interface 217 has no altsetting 0
[   44.450374][  T919] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,
[   44.493086][  T919] EXT4-fs (loop5): re-mounted. Opts: (null)
[   44.593336][  T928] fuse: blksize only supported for fuseblk
[   44.600480][   T24] kauditd_printk_skb: 28 callbacks suppressed
[   44.600492][   T24] audit: type=1400 audit(1788582391.270:550): avc:  denied  { create } for  pid=927 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   44.609781][  T649] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.657041][  T932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'.
[   44.679780][  T775] usb 2-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=46.26
[   44.845323][  T775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.028047][  T775] usb 2-1: Product: syz
[   45.046738][   T24] audit: type=1400 audit(1788582391.310:551): avc:  denied  { relabelfrom } for  pid=929 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   45.088266][  T775] usb 2-1: Manufacturer: syz
[   45.128734][  T775] usb 2-1: SerialNumber: syz
[   45.305670][   T24] audit: type=1400 audit(1788582391.310:552): avc:  denied  { relabelto } for  pid=929 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   45.349182][   T24] audit: type=1400 audit(1788582391.310:553): avc:  denied  { setattr } for  pid=927 comm="syz.4.146" name="IEEE-802.15.4-MAC" dev="sockfs" ino=18619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   45.429440][   T24] audit: type=1400 audit(1788582392.060:554): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   45.492179][   T24] audit: type=1400 audit(1788582392.160:555): avc:  denied  { mounton } for  pid=903 comm="syz.1.142" path="/35/file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   45.555683][  T952] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   45.565496][  T952] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.153: iget: bad i_size value: 360287970189639680
[   45.580940][  T952] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.153: couldn't read orphan inode 15 (err -117)
[   45.593383][  T952] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue
[   45.640303][  T952] EXT4-fs (loop0): shut down requested (1)
[   45.647167][  T952] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   45.649759][  T649] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   45.657744][  T952] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   45.678395][   T24] audit: type=1400 audit(1788582392.340:556): avc:  denied  { setattr } for  pid=951 comm="syz.0.153" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.700536][   T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   45.839517][  T649] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[   45.848718][  T649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.864792][  T957] EXT4-fs (loop5): Ignoring removed oldalloc option
[   45.879447][  T957] EXT4-fs (loop5): Ignoring removed oldalloc option
[   45.915050][  T957] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   45.939471][  T649] usb 3-1: can't set config #1, error -71
[   45.948958][  T649] usb 3-1: USB disconnect, device number 4
[   45.971118][  T957] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,journal_dev=0x0000000000000000,norecovery,,errors=continue
[   46.089517][   T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   46.099464][   T53] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   46.142479][  T971] EXT4-fs (loop2): Ignoring removed bh option
[   46.163703][  T971] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,
[   46.197724][  T971] EXT4-fs (loop2): re-mounted. Opts: (null)
[   46.299510][   T53] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   46.308700][   T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.317213][   T53] usb 5-1: Product: syz
[   46.321689][   T53] usb 5-1: Manufacturer: syz
[   46.326374][   T53] usb 5-1: SerialNumber: syz
[   46.371611][   T53] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[   46.379850][   T53] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   46.379850][   T53]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   46.439485][    T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   46.479518][   T15] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   46.679432][    T5] usb 6-1: Using ep0 maxpacket: 16
[   46.719488][   T15] usb 3-1: Using ep0 maxpacket: 16
[   46.799562][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.811033][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.821030][    T5] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   46.834414][  T775] rndis_host 2-1:14.217: skipping garbage
[   46.840960][   T53] ums-sddr09: probe of 5-1:1.0 failed with error -5
[   46.847642][  T775] usb 2-1: bad CDC descriptors
[   46.852676][   T15] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   46.863649][  T984] EXT4-fs (loop1): Test dummy encryption mode enabled
[   46.870758][    T5] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   46.881261][   T15] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   46.896658][  T984] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue
[   46.898447][  T775] cdc_acm 2-1:14.217: skipping garbage
[   46.916858][  T984] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   46.927246][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.935384][   T15] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   46.949340][    T5] usb 6-1: config 0 descriptor??
[   46.995407][  T775] usb 2-1: USB disconnect, device number 2
[   47.007522][   T53] usb 5-1: USB disconnect, device number 3
[   47.351749][   T15] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   47.360973][   T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.368985][   T15] usb 3-1: Product: syz
[   47.373566][   T15] usb 3-1: Manufacturer: syz
[   47.378222][   T15] usb 3-1: SerialNumber: syz
[   47.420206][   T15] cdc_ncm 3-1:1.0: bind() failure
[   47.510453][    T5] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   47.517790][    T5] microsoft 0003:045E:07DA.0001: item fetching failed at offset 13/34
[   47.526209][    T5] microsoft 0003:045E:07DA.0001: parse failed
[   47.532404][    T5] microsoft: probe of 0003:045E:07DA.0001 failed with error -22
[   47.540119][  T772] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   47.602427][  T999] EXT4-fs (loop4): Ignoring removed bh option
[   47.660666][  T999] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,
[   47.709678][  T999] EXT4-fs (loop4): re-mounted. Opts: (null)
[   47.742455][  T974] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[   48.959665][  T772] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.134778][  T772] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.175616][  T772] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   49.175633][  T772] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   49.175651][  T772] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   49.188814][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   49.189072][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.189357][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   49.189703][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   49.189927][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.190666][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.190915][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   49.191216][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.331478][  T772] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   49.331495][  T772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.331505][  T772] usb 1-1: Product: syz
[   49.331515][  T772] usb 1-1: Manufacturer: syz
[   49.331525][  T772] usb 1-1: SerialNumber: syz
[   49.371987][  T772] cdc_mbim 1-1:1.0: skipping garbage
[   49.412220][   T53] usb 6-1: USB disconnect, device number 2
[   49.716021][ T1019] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   49.717403][ T1021] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   49.732405][ T1019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   49.744218][   T24] audit: type=1400 audit(1788582396.410:557): avc:  denied  { write } for  pid=1020 comm="syz.4.172" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   49.744238][   T24] audit: type=1400 audit(1788582396.410:558): avc:  denied  { add_name } for  pid=1020 comm="syz.4.172" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   49.744253][   T24] audit: type=1400 audit(1788582396.410:559): avc:  denied  { associate } for  pid=1020 comm="syz.4.172" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   49.744269][   T24] audit: type=1400 audit(1788582396.410:560): avc:  denied  { read write } for  pid=1020 comm="syz.4.172" name="file1" dev="loop4" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   49.744311][   T24] audit: type=1400 audit(1788582396.410:561): avc:  denied  { open } for  pid=1020 comm="syz.4.172" path="/35/file1/file1" dev="loop4" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   49.906032][   T53] usb 3-1: USB disconnect, device number 5
[   49.920098][   T24] audit: type=1400 audit(1788582396.530:562): avc:  denied  { map } for  pid=1020 comm="syz.4.172" path="/35/file1/file1" dev="loop4" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   49.922489][ T1019] F2FS-fs (loop1): Found nat_bits in checkpoint
[   49.997532][ T1019] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   50.005562][ T1019] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   50.038983][ T1035] netlink: 24 bytes leftover after parsing attributes in process `syz.5.174'.
[   50.135156][ T1048] batadv_slave_0: Caught tx_queue_len zero misconfig
[   50.145224][  T996] udc-core: couldn't find an available UDC or it's busy
[   50.159625][  T996] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   50.429811][   T24] audit: type=1400 audit(1788582397.030:563): avc:  denied  { bind } for  pid=1018 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.515396][   T24] audit: type=1400 audit(1788582397.040:564): avc:  denied  { listen } for  pid=1018 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.536036][   T24] audit: type=1400 audit(1788582397.040:565): avc:  denied  { connect } for  pid=1018 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.557482][   T24] audit: type=1400 audit(1788582397.050:566): avc:  denied  { shutdown } for  pid=1018 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.632946][ T1064] capability: warning: `syz.2.182' uses deprecated v2 capabilities in a way that may be insecure
[   50.789524][  T772] cdc_mbim 1-1:1.0: bind() failure
[   50.794218][ T1069] EXT4-fs (loop1): Test dummy encryption mode enabled
[   50.806606][ T1069] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue
[   50.821434][  T772] cdc_ncm: probe of 1-1:1.1 failed with error -71
[   50.821511][ T1069] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   50.839487][  T772] cdc_mbim: probe of 1-1:1.1 failed with error -71
[   50.853381][  T772] usb 1-1: USB disconnect, device number 7
[   50.909452][   T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   51.260359][   T25] usb 3-1: device descriptor read/64, error -71
[   51.343871][ T1074] kvm: pic: single mode not supported
[   51.345174][ T1074] kvm: pic: level sensitive irq not supported
[   51.503538][ T1080] EXT4-fs (loop0): Ignoring removed bh option
[   51.551456][ T1087] EXT4-fs (loop5): too many log groups per flexible block group
[   51.560001][ T1087] EXT4-fs (loop5): failed to initialize mballoc (-12)
[   51.567040][ T1087] EXT4-fs (loop5): mount failed
[   51.573300][ T1080] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,
[   51.654796][ T1085] netlink: 'syz.4.187': attribute type 11 has an invalid length.
[   51.707758][   T25] usb 3-1: device descriptor read/64, error -71
[   51.721170][ T1080] EXT4-fs (loop0): re-mounted. Opts: (null)
[   52.039467][  T771] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   52.119521][  T772] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   52.299751][  T771] usb 6-1: Using ep0 maxpacket: 32
[   52.419532][  T771] usb 6-1: config 250 has an invalid interface number: 124 but max is 0
[   52.433535][  T771] usb 6-1: config 250 has an invalid descriptor of length 47, skipping remainder of the config
[   52.444357][  T771] usb 6-1: config 250 has no interface number 0
[   52.450782][  T772] usb 2-1: Using ep0 maxpacket: 16
[   52.456119][  T771] usb 6-1: config 250 interface 124 altsetting 169 endpoint 0xC has invalid maxpacket 991, setting to 64
[   52.467936][  T771] usb 6-1: config 250 interface 124 altsetting 169 endpoint 0xA has invalid maxpacket 1024, setting to 64
[   52.479683][  T771] usb 6-1: config 250 interface 124 altsetting 169 has a duplicate endpoint with address 0x4, skipping
[   52.491192][  T771] usb 6-1: config 250 interface 124 altsetting 169 bulk endpoint 0xF has invalid maxpacket 1023
[   52.501869][  T771] usb 6-1: config 250 interface 124 altsetting 169 has an invalid endpoint with address 0x4F, skipping
[   52.513298][  T771] usb 6-1: config 250 interface 124 has no altsetting 0
[   52.569859][  T772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.583406][  T772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.593752][  T772] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   52.606930][  T772] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   52.616263][  T772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.628248][  T772] usb 2-1: config 0 descriptor??
[   52.662222][ T1105] EXT4-fs (loop4): Ignoring removed oldalloc option
[   52.668979][ T1105] EXT4-fs (loop4): Ignoring removed oldalloc option
[   52.677191][ T1105] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   52.689560][  T771] usb 6-1: New USB device found, idVendor=1737, idProduct=0077, bcdDevice= c.ac
[   52.698614][  T771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.707244][  T771] usb 6-1: Product: syz
[   52.711831][  T771] usb 6-1: Manufacturer: syz
[   52.716452][  T771] usb 6-1: SerialNumber: syz
[   52.722911][ T1105] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,journal_dev=0x0000000000000000,norecovery,,errors=continue
[   52.763560][ T1087] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   52.829522][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   52.873783][ T1112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=1112 comm=syz.0.194
[   52.886369][ T1112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1112 comm=syz.0.194
[   52.899047][ T1112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1112 comm=syz.0.194
[   52.911636][ T1112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=1112 comm=syz.0.194
[   52.925671][ T1112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'.
[   52.984292][ T1087] udc-core: couldn't find an available UDC or it's busy
[   52.991355][ T1087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   53.130332][  T772] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   53.143191][  T772] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max
[   53.144565][   T25] usb 3-1: device descriptor read/64, error -71
[   53.179115][  T772] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input4
[   53.211615][  T771] usb 6-1: USB disconnect, device number 3
[   53.315458][  T772] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   53.318491][ T1126] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.330091][ T1095] udc-core: couldn't find an available UDC or it's busy
[   53.338695][ T1126] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   53.362678][ T1126] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   53.397213][ T1095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   53.435199][  T772] usb 2-1: USB disconnect, device number 3
[   53.461884][ T1131] fido_id[1131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   53.579445][   T25] usb 3-1: device descriptor read/64, error -71
[   53.699662][   T25] usb usb3-port1: attempt power cycle
[   54.020225][ T1146] EXT4-fs (loop2): Ignoring removed bh option
[   54.041715][ T1146] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,
[   54.083871][ T1146] EXT4-fs (loop2): re-mounted. Opts: (null)
[   54.192252][ T1156] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   54.203115][ T1156] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   54.219150][ T1156] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   54.667620][ T1156] device vlan2 entered promiscuous mode
[   54.713430][ T1156] device bridge0 entered promiscuous mode
[   54.774832][ T1163] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[   54.870596][   T24] kauditd_printk_skb: 17 callbacks suppressed
[   54.870611][   T24] audit: type=1400 audit(1788582401.540:584): avc:  denied  { setattr } for  pid=1166 comm="syz.0.211" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   55.559547][ T1172] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.212: iget: bad extra_isize 58 (inode size 256)
[   55.573672][ T1172] EXT4-fs (loop4): Remounting filesystem read-only
[   55.580515][ T1172] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.212: error while reading EA inode 18 err=-117
[   55.595038][ T1172] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.212: iget: bad extra_isize 58 (inode size 256)
[   55.609329][ T1172] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.212: error while reading EA inode 11 err=-117
[   55.628639][ T1172] EXT4-fs (loop4): 1 orphan inode deleted
[   55.634504][ T1172] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrquota,errors=remount-ro,nouid32,nojournal_checksum,debug_want_extra_isize=0x000000000000003a,dioread_lock,
[   55.711401][   T24] audit: type=1400 audit(1788582402.370:585): avc:  denied  { search } for  pid=1168 comm="syz.4.212" name="/" dev="configfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   55.795475][ T1167] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   56.153606][   T24] audit: type=1400 audit(1788582402.370:586): avc:  denied  { read } for  pid=1168 comm="syz.4.212" name="/" dev="configfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   56.176538][ T1167] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.187211][   T24] audit: type=1400 audit(1788582402.370:587): avc:  denied  { open } for  pid=1168 comm="syz.4.212" path="/" dev="configfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   56.288567][   T24] audit: type=1400 audit(1788582402.410:588): avc:  denied  { mounton } for  pid=1159 comm="syz.5.209" path="/13/bus/dev" dev="loop5" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   56.312835][   T24] audit: type=1400 audit(1788582402.410:589): avc:  denied  { mount } for  pid=1159 comm="syz.5.209" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   56.343722][   T24] audit: type=1400 audit(1788582402.410:590): avc:  denied  { mounton } for  pid=1159 comm="syz.5.209" path="/13/bus/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   56.367069][   T24] audit: type=1400 audit(1788582402.890:591): avc:  denied  { mounton } for  pid=1159 comm="syz.5.209" path="/13/bus/mnt/bus" dev="loop5" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   56.369743][ T1167] fs-verity: sha512 using implementation "sha512-avx2"
[   56.480099][  T772] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   56.890924][   T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   57.197149][ T1197] netlink: 'syz.4.217': attribute type 2 has an invalid length.
[   57.209857][ T1167] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 32
[   57.235353][ T1167] fs-verity (loop0, inode 13): Error -28 building Merkle tree
[   57.269505][   T25] usb 6-1: device descriptor read/all, error -61
[   57.299437][  T649] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   57.383413][ T1202] erofs: (device loop2): mounted with root inode @ nid 36.
[   57.419451][   T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   57.447296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   57.456249][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.465176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   57.475833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.484297][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.493389][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.502094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.509567][  T772] usb 2-1: Invalid ep0 maxpacket: 64
[   57.512218][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.569529][  T649] usb 1-1: Using ep0 maxpacket: 16
[   57.639897][ T1207] mtrr: base(0x69662f2e000) is not aligned on a size(0x30656c000) boundary
[   57.659745][  T772] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   57.689523][   T25] usb 6-1: device descriptor read/64, error -71
[   57.708866][   T24] audit: type=1400 audit(1788582404.370:592): avc:  denied  { create } for  pid=1206 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   57.728284][   T24] audit: type=1400 audit(1788582404.370:593): avc:  denied  { connect } for  pid=1206 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   57.824471][  T711] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[   57.832498][  T711] FAT-fs (loop5): Filesystem has been set read-only
[   57.889994][  T649] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[   57.899510][  T772] usb 2-1: Invalid ep0 maxpacket: 64
[   57.900531][  T649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.905189][  T772] usb usb2-port1: attempt power cycle
[   57.913048][  T649] usb 1-1: Product: syz
[   57.929132][  T649] usb 1-1: Manufacturer: syz
[   57.933866][  T649] usb 1-1: SerialNumber: syz
[   57.941472][  T649] usb 1-1: config 0 descriptor??
[   57.991373][  T649] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[   58.075703][   T53] usb 1-1: USB disconnect, device number 8
[   58.090599][ T1218] EXT4-fs (loop5): Test dummy encryption mode enabled
[   58.097829][ T1218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   58.110544][ T1218] EXT4-fs (loop5): 1 truncate cleaned up
[   58.116290][ T1218] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,grpquota,,errors=continue
[   58.132233][ T1219] EXT4-fs (loop4): Ignoring removed bh option
[   58.141198][ T1219] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,
[   58.164438][ T1223] EXT4-fs (loop2): Test dummy encryption mode enabled
[   58.172898][ T1223] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue
[   58.187823][ T1223] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   58.201001][ T1218] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.225: Siphash requires key
[   58.219160][ T1218] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.225: Siphash requires key
[   58.232032][ T1218] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.225: Siphash requires key
[   58.269614][ T1218] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.225: Siphash requires key
[   58.281373][ T1218] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.225: Siphash requires key
[   58.292762][ T1218] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.225: Siphash requires key
[   58.304817][ T1219] EXT4-fs (loop4): re-mounted. Opts: (null)
[   58.312231][ T1218] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.225: Siphash requires key
[   58.339460][  T772] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[   58.351183][ T1218] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.225: Siphash requires key
[   58.370397][ T1218] EXT4-fs warning (device loop5): dx_probe:818: inode #2: comm syz.5.225: Hash code is SIPHASH, but hash not in dirent
[   58.387675][ T1218] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.225: Corrupt directory, running e2fsck is recommended
[   58.961789][ T1253] EXT4-fs (loop5): Ignoring removed oldalloc option
[   58.976114][ T1253] EXT4-fs (loop5): Ignoring removed oldalloc option
[   58.992677][ T1253] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   59.451339][ T1253] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,journal_dev=0x0000000000000000,norecovery,,errors=continue
[   59.459683][  T772] usb 2-1: device descriptor read/8, error -71
[   59.479835][ T1258]  loop1: p1 p3 < >
[   59.689592][  T772] usb 2-1: device descriptor read/8, error -71
[   59.768196][ T1268] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   59.809240][ T1279] EXT4-fs (loop4): Ignoring removed bh option
[   59.845841][  T326] udevd[326]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   59.845846][  T441] udevd[441]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   59.866713][ T1279] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,
[   59.944475][ T1279] EXT4-fs (loop4): re-mounted. Opts: (null)
[   59.949363][ T1296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.241'.
[   59.986276][ T1290] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   59.995748][ T1290] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.011895][   T24] kauditd_printk_skb: 8 callbacks suppressed
[   60.011908][   T24] audit: type=1400 audit(1788582406.680:602): avc:  denied  { accept } for  pid=1281 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   60.873282][   T24] audit: type=1400 audit(1788582407.540:603): avc:  denied  { create } for  pid=1310 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   60.876231][ T1311] netlink: 68 bytes leftover after parsing attributes in process `syz.4.250'.
[   60.944701][   T24] audit: type=1400 audit(1788582407.610:604): avc:  denied  { create } for  pid=1329 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   60.948092][ T1330] netlink: 32 bytes leftover after parsing attributes in process `syz.4.257'.
[   60.982760][ T1330] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   60.993260][   T24] audit: type=1400 audit(1788582407.650:605): avc:  denied  { read write } for  pid=1329 comm="syz.4.257" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   61.029839][   T24] audit: type=1400 audit(1788582407.650:606): avc:  denied  { open } for  pid=1329 comm="syz.4.257" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   61.119459][  T771] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   61.149948][ T1331]  loop0: p1 p3 < >
[   61.291454][ T1335] EXT4-fs (loop1): orphan cleanup on readonly fs
[   61.298163][ T1335] EXT4-fs error (device loop1): ext4_find_extent:928: inode #4: comm syz.1.258: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[   61.315351][ T1335] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117
[   61.325082][ T1335] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   61.339997][ T1335] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   61.346681][ T1335] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,journal_ioprio=0x0000000000000000,,errors=continue
[   61.369455][  T771] usb 6-1: Using ep0 maxpacket: 32
[   61.499489][  T771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.510483][  T771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.520331][  T771] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   61.529681][  T771] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.548714][ T1345] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.552008][  T771] usb 6-1: config 0 descriptor??
[   61.567394][ T1345] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   61.578374][ T1345] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   61.594391][ T1345] device vlan2 entered promiscuous mode
[   61.600269][ T1345] device bridge0 entered promiscuous mode
[   61.610094][  T771] hub 6-1:0.0: USB hub found
[   61.819456][  T771] hub 6-1:0.0: 1 port detected
[   61.839287][   T24] audit: type=1400 audit(1788582408.500:607): avc:  denied  { create } for  pid=1351 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.859011][   T24] audit: type=1400 audit(1788582408.500:608): avc:  denied  { getopt } for  pid=1351 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.878701][   T24] audit: type=1400 audit(1788582408.500:609): avc:  denied  { bind } for  pid=1351 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   61.898254][   T24] audit: type=1400 audit(1788582408.530:610): avc:  denied  { bind } for  pid=1351 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   62.019427][   T53] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   62.379532][   T53] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[   62.389593][   T53] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   62.459727][  T771] hub 6-1:0.0: activate --> -90
[   62.479590][   T53] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   62.488715][   T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   62.496925][   T53] usb 3-1: SerialNumber: syz
[   62.519508][ T1354] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   62.612032][ T1368] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   62.753518][ T1354] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   62.920062][   T15] usb 6-1: USB disconnect, device number 6
[   63.029566][   T53] cdc_ether: probe of 3-1:1.0 failed with error -71
[   63.037081][   T53] usb 3-1: USB disconnect, device number 9
[   63.119474][    T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   63.359473][    T5] usb 5-1: Using ep0 maxpacket: 8
[   63.479517][    T5] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[   63.487654][    T5] usb 5-1: config 0 has no interface number 0
[   63.555755][ T1383] EXT4-fs (loop5): Ignoring removed oldalloc option
[   63.562672][ T1383] EXT4-fs (loop5): Ignoring removed oldalloc option
[   63.569841][ T1383] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   63.587742][ T1386] EXT4-fs (loop2): Unrecognized mount option "." or missing value
[   63.600873][ T1383] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,journal_dev=0x0000000000000000,norecovery,,errors=continue
[   63.659541][    T5] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   63.669027][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.677839][    T5] usb 5-1: Product: syz
[   63.682223][    T5] usb 5-1: Manufacturer: syz
[   63.686843][    T5] usb 5-1: SerialNumber: syz
[   63.692025][    T5] usb 5-1: config 0 descriptor??
[   63.771250][ T1396] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   63.786157][ T1396] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   63.799213][ T1396] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   63.822150][ T1396] device vlan1 entered promiscuous mode
[   63.827757][ T1396] device bridge0 entered promiscuous mode
[   63.980202][    T5] usb 5-1: USB disconnect, device number 4
[   64.171906][ T1440] kvm [1438]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0xffffffffffffffff
[   64.279422][   T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   64.519434][   T25] usb 3-1: Using ep0 maxpacket: 16
[   64.653131][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   64.666945][   T25] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[   64.676493][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.685793][   T25] usb 3-1: config 0 descriptor??
[   64.780769][ T1473] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[   64.788684][ T1473] FAT-fs (loop5): Filesystem has been set read-only
[   65.105575][ T1480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'.
[   65.116330][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'.
[   65.132628][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.143365][ T1480] device bridge_slave_1 left promiscuous mode
[   65.150019][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.404683][  T711] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   65.412636][  T711] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   65.459579][   T15] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   65.677432][   T24] kauditd_printk_skb: 43 callbacks suppressed
[   65.677447][   T24] audit: type=1326 audit(1788582412.340:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.1.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   65.708711][   T15] usb 5-1: Using ep0 maxpacket: 32
[   65.718812][   T24] audit: type=1326 audit(1788582412.380:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.1.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   65.743892][   T24] audit: type=1326 audit(1788582412.380:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.1.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd94a0bd159 code=0x7ffc0000
[   65.773733][ T1491] erofs: (device loop0): mounted with root inode @ nid 36.
[   65.787216][ T1491] FAULT_INJECTION: forcing a failure.
[   65.787216][ T1491] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   65.800560][ T1491] CPU: 1 PID: 1491 Comm: syz.0.301 Not tainted syzkaller #0
[   65.807873][ T1491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   65.817936][ T1491] Call Trace:
[   65.821243][ T1491]  __dump_stack+0x21/0x24
[   65.825591][ T1491]  dump_stack_lvl+0x1a7/0x208
[   65.830291][ T1491]  ? thaw_kernel_threads+0x220/0x220
[   65.835604][ T1491]  ? vsnprintf+0x189d/0x1990
[   65.840211][ T1491]  ? show_regs_print_info+0x18/0x18
[   65.845422][ T1491]  dump_stack+0x15/0x1c
[   65.849589][ T1491]  should_fail+0x3ab/0x500
[   65.854012][ T1491]  should_fail_usercopy+0x1a/0x20
[   65.859040][ T1491]  _copy_to_user+0x20/0x90
[   65.863462][ T1491]  simple_read_from_buffer+0xe9/0x160
[   65.868839][ T1491]  proc_fail_nth_read+0x1a6/0x220
[   65.873866][ T1491]  ? proc_fault_inject_write+0x310/0x310
[   65.879502][ T1491]  ? rw_verify_area+0x1c0/0x360
[   65.884358][ T1491]  ? proc_fault_inject_write+0x310/0x310
[   65.889992][ T1491]  vfs_read+0x209/0xa50
[   65.894155][ T1491]  ? kernel_read+0x70/0x70
[   65.898580][ T1491]  ? __kasan_check_write+0x14/0x20
[   65.903700][ T1491]  ? mutex_lock+0x92/0xf0
[   65.908038][ T1491]  ? mutex_trylock+0xb0/0xb0
[   65.912636][ T1491]  ? __fget_files+0x2e1/0x340
[   65.917322][ T1491]  ? __fdget_pos+0x2d2/0x380
[   65.921921][ T1491]  ? ksys_read+0x70/0x260
[   65.926258][ T1491]  ksys_read+0x14a/0x260
[   65.930511][ T1491]  ? vfs_write+0xd70/0xd70
[   65.934932][ T1491]  ? debug_smp_processor_id+0x17/0x20
[   65.940317][ T1491]  __x64_sys_read+0x7b/0x90
[   65.944836][ T1491]  do_syscall_64+0x31/0x40
[   65.949265][ T1491]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   65.955169][ T1491] RIP: 0033:0x7f35e962698e
[   65.959590][ T1491] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   65.979199][ T1491] RSP: 002b:00007f35e80befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   65.987619][ T1491] RAX: ffffffffffffffda RBX: 00007f35e80bf6c0 RCX: 00007f35e962698e
[   65.995602][ T1491] RDX: 000000000000000f RSI: 00007f35e80bf0a0 RDI: 0000000000000005
[   66.003583][ T1491] RBP: 00007f35e80bf090 R08: 0000000000000000 R09: 0000000000000000
[   66.011586][ T1491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.019568][ T1491] R13: 00007f35e98ee038 R14: 00007f35e98edfa0 R15: 00007ffef399bb18
[   66.033062][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.044172][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[   66.055388][   T15] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   66.064557][   T24] audit: type=1400 audit(1788582412.730:657): avc:  denied  { create } for  pid=1495 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   66.084422][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.093135][   T15] usb 5-1: config 0 descriptor??
[   66.109503][ T1483] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   66.130121][   T15] hub 5-1:0.0: USB hub found
[   66.146107][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.153450][ T1494] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.161000][ T1494] device bridge_slave_0 entered promiscuous mode
[   66.167850][ T1494] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.174941][ T1494] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.182733][ T1494] device bridge_slave_1 entered promiscuous mode
[   66.189362][ T1500] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.305: casefold flag without casefold feature
[   66.205346][ T1500] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.305: couldn't read orphan inode 15 (err -117)
[   66.217721][ T1500] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,,errors=continue
[   66.233757][ T1499] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   66.258941][   T24] audit: type=1400 audit(1788582412.920:658): avc:  denied  { create } for  pid=1498 comm="syz.1.305" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   66.286045][ T1499] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.304: iget: bad i_size value: 360287970189639680
[   66.301469][ T1499] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.304: couldn't read orphan inode 15 (err -117)
[   66.313551][ T1499] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue
[   66.332193][ T1494] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.339422][ T1494] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.346729][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.349775][   T15] hub 5-1:0.0: 1 port detected
[   66.354005][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.378171][ T1499] EXT4-fs (loop0): shut down requested (1)
[   66.417609][ T1494] device veth0_vlan entered promiscuous mode
[   66.432103][ T1494] device veth1_macvtap entered promiscuous mode
[   66.440079][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.448007][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.458551][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.468061][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.477620][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.486313][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.495113][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.503505][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.511481][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.519133][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.532911][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.542993][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.574161][  T331] device bridge_slave_1 left promiscuous mode
[   66.597119][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.615223][  T331] device bridge_slave_0 left promiscuous mode
[   66.636495][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.688755][  T331] device veth1_macvtap left promiscuous mode
[   66.694983][  T331] device veth0_vlan left promiscuous mode
[   66.816547][ T1517] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   67.225543][   T25] usbhid 3-1:0.0: can't add hid device: -71
[   67.239898][   T25] usbhid: probe of 3-1:0.0 failed with error -71
[   67.247767][   T25] usb 3-1: USB disconnect, device number 10
[   67.343830][ T1537] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   67.364198][ T1537] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue
[   67.386373][   T24] audit: type=1400 audit(1788582414.050:659): avc:  denied  { map } for  pid=1536 comm="syz.1.314" path="/63/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   67.619459][   T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   67.742337][  T287] usb 5-1: USB disconnect, device number 5
[   67.923413][ T1547] netlink: 'syz.1.315': attribute type 5 has an invalid length.
[   68.009772][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   68.020947][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   68.030773][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.572082][   T25] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0
[   68.865154][   T25] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C222.0003/input/input5
[   69.080047][   T25] lg-g15 0003:046D:C222.0003: Error getting LED brightness: -32
[   69.340915][   T25] lg-g15 0003:046D:C222.0003: Error getting LED brightness: -71
[   69.369513][   T25] lg-g15 0003:046D:C222.0003: Error getting LED brightness: -71
[   69.402865][   T24] audit: type=1400 audit(1788582416.070:660): avc:  denied  { mount } for  pid=1574 comm="syz.1.324" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   69.431536][ T1578] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   69.455330][   T25] lg-g15 0003:046D:C222.0003: Error getting LED brightness: -71
[   69.489827][   T25] lg-g15 0003:046D:C222.0003: Error getting LED brightness: -71
[   69.570083][ T1578] binder: 1573:1578 ioctl c0306201 0 returned -14
[   69.577602][   T24] audit: type=1400 audit(1788582416.140:661): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   69.621600][   T25] usb 3-1: USB disconnect, device number 11
[   69.653192][ T1586] fido_id[1586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[   69.707685][ T1584] binder: 1573:1584 ioctl c0306201 0 returned -14
[   69.806574][   T24] audit: type=1400 audit(1788582416.230:662): avc:  denied  { read } for  pid=1573 comm="syz.6.323" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   69.899602][  T287] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   69.939102][ T1587] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.326: lblock 2 mapped to illegal pblock 2 (length 1)
[   69.954689][ T1587] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   69.963122][ T1587] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.326: lblock 0 mapped to illegal pblock 48 (length 1)
[   69.978341][ T1587] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.326: Failed to acquire dquot type 0
[   69.990695][ T1587] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   70.002315][ T1587] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.326: mark_inode_dirty error
[   70.015486][ T1587] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[   70.025963][ T1587] EXT4-fs (loop0): 1 orphan inode deleted
[   70.031935][ T1587] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue
[   70.101637][    T7] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   70.326554][    T7] EXT4-fs error (device loop0): ext4_release_dquot:6266: comm kworker/u4:0: Failed to release dquot type 0
[   70.816719][  T287] usb 2-1: Using ep0 maxpacket: 16
[   71.390452][   T24] kauditd_printk_skb: 5 callbacks suppressed
[   71.390573][   T24] audit: type=1400 audit(1788582418.050:666): avc:  denied  { read write } for  pid=1594 comm="syz.2.328" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   71.422682][  T279] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0
[   71.459741][  T287] usb 2-1: unable to get BOS descriptor or descriptor too short
[   71.474161][  T279] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   71.538312][  T279] EXT4-fs error (device loop0): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error
[   71.550247][  T287] usb 2-1: config 4 has an invalid interface number: 251 but max is 0
[   71.558546][  T287] usb 2-1: config 4 has no interface number 0
[   71.566715][  T287] usb 2-1: config 4 interface 251 has no altsetting 0
[   71.597634][   T24] audit: type=1400 audit(1788582418.050:667): avc:  denied  { open } for  pid=1594 comm="syz.2.328" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   71.682008][   T24] audit: type=1400 audit(1788582418.050:668): avc:  denied  { ioctl } for  pid=1594 comm="syz.2.328" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   71.757618][ T1600] FAULT_INJECTION: forcing a failure.
[   71.757618][ T1600] name fail_futex, interval 1, probability 0, space 0, times 1
[   71.789833][ T1600] CPU: 1 PID: 1600 Comm: syz.0.329 Not tainted syzkaller #0
[   71.797249][ T1600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   71.807354][ T1600] Call Trace:
[   71.810675][ T1600]  __dump_stack+0x21/0x24
[   71.815051][ T1600]  dump_stack_lvl+0x1a7/0x208
[   71.819757][ T1600]  ? thaw_kernel_threads+0x220/0x220
[   71.825060][ T1600]  ? show_regs_print_info+0x18/0x18
[   71.830283][ T1600]  dump_stack+0x15/0x1c
[   71.834460][ T1600]  should_fail+0x3ab/0x500
[   71.838904][ T1600]  get_futex_key+0x13f/0xc30
[   71.843515][ T1600]  ? yield_to_task_fair+0x150/0x150
[   71.848735][ T1600]  ? futex_wait_restart+0x240/0x240
[   71.853958][ T1600]  ? __this_cpu_preempt_check+0x13/0x20
[   71.859531][ T1600]  ? tracing_record_taskinfo+0x7c/0x220
[   71.865106][ T1600]  futex_wait_setup+0x52/0x510
[   71.869890][ T1600]  ? ttwu_do_wakeup+0x3a2/0x3d0
[   71.874760][ T1600]  futex_wait+0x242/0x6f0
[   71.879141][ T1600]  ? do_futex+0x1270/0x1270
[   71.883676][ T1600]  ? debug_smp_processor_id+0x17/0x20
[   71.889062][ T1600]  do_futex+0xfe9/0x1270
[   71.893360][ T1600]  ? slab_free_freelist_hook+0xc5/0x190
[   71.898944][ T1600]  ? create_new_namespaces+0x5c8/0x650
[   71.904423][ T1600]  ? kmem_cache_free+0x100/0x2d0
[   71.909384][ T1600]  ? futex_exit_release+0x1e0/0x1e0
[   71.914601][ T1600]  ? create_new_namespaces+0x5c8/0x650
[   71.920079][ T1600]  __se_sys_futex+0x2ba/0x370
[   71.924779][ T1600]  ? __x64_sys_futex+0x100/0x100
[   71.929743][ T1600]  __x64_sys_futex+0xe5/0x100
[   71.934532][ T1600]  do_syscall_64+0x31/0x40
[   71.938970][ T1600]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   71.944967][ T1600] RIP: 0033:0x7f35e9666159
[   71.949402][ T1600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.969029][ T1600] RSP: 002b:00007f35e80bf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   71.977468][ T1600] RAX: ffffffffffffffda RBX: 00007f35e98edfa8 RCX: 00007f35e9666159
[   71.985460][ T1600] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f35e98edfa8
[   71.993476][ T1600] RBP: 00007f35e98edfa0 R08: 0000000000000000 R09: 0000000000000000
[   72.001501][ T1600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.009596][ T1600] R13: 00007f35e98ee038 R14: 00007ffef399ba30 R15: 00007ffef399bb18
[   72.018418][  T287] usb 2-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00
[   72.044898][  T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.069432][  T287] usb 2-1: Product: syz
[   72.079661][  T287] usb 2-1: Manufacturer: syz
[   72.084317][  T287] usb 2-1: SerialNumber: syz
[   72.430877][  T287] usb-storage 2-1:4.251: USB Mass Storage device detected
[   72.556443][ T1608] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,bsddf,sysvgroups,acl,debug_want_extra_isize=0x0000000000000080,grpquota,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[   72.641822][  T287] usb 2-1: USB disconnect, device number 8
[   73.271885][ T1632] usb usb7: check_ctrlrecip: process 1632 (syz.4.337) requesting ep 01 but needs 81
[   73.281424][ T1632] usb usb7: usbfs: process 1632 (syz.4.337) did not claim interface 0 before use
[   73.359475][   T24] audit: type=1326 audit(1788582419.930:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1628 comm="syz.1.339" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd94a0bd159 code=0x0
[   73.518336][   T24] audit: type=1400 audit(1788582420.180:670): avc:  denied  { map } for  pid=1613 comm="syz.6.332" path="socket:[20469]" dev="sockfs" ino=20469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   73.566049][   T24] audit: type=1400 audit(1788582420.180:671): avc:  denied  { read } for  pid=1613 comm="syz.6.332" path="socket:[20469]" dev="sockfs" ino=20469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.177672][   T24] audit: type=1400 audit(1788582420.840:672): avc:  denied  { setopt } for  pid=1653 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   74.343253][ T1658] ==================================================================
[   74.351396][ T1658] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3160
[   74.359562][ T1658] Read of size 8 at addr ffff888119f876d8 by task syz.1.346/1658
[   74.367360][ T1658] 
[   74.369704][ T1658] CPU: 1 PID: 1658 Comm: syz.1.346 Not tainted syzkaller #0
[   74.377142][ T1658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   74.387215][ T1658] Call Trace:
[   74.390536][ T1658]  __dump_stack+0x21/0x24
[   74.394879][ T1658]  dump_stack_lvl+0x1a7/0x208
[   74.399565][ T1658]  ? show_regs_print_info+0x18/0x18
[   74.404781][ T1658]  ? thaw_kernel_threads+0x220/0x220
[   74.410096][ T1658]  print_address_description+0x7f/0x2c0
[   74.415661][ T1658]  ? tc_setup_flow_action+0x88e/0x3160
[   74.421131][ T1658]  kasan_report+0x100/0x140
[   74.425646][ T1658]  ? flow_action_cookie_create+0x28/0x90
[   74.431286][ T1658]  ? tc_setup_flow_action+0x88e/0x3160
[   74.436757][ T1658]  __asan_report_load8_noabort+0x14/0x20
[   74.442488][ T1658]  tc_setup_flow_action+0x88e/0x3160
[   74.447904][ T1658]  mall_replace_hw_filter+0x2db/0x8c0
[   74.453314][ T1658]  ? pcpu_block_update_hint_alloc+0x8b7/0xc50
[   74.459416][ T1658]  ? mall_set_parms+0x450/0x450
[   74.464272][ T1658]  ? tcf_exts_destroy+0xb0/0xb0
[   74.469127][ T1658]  ? pcpu_alloc+0xf8d/0x16c0
[   74.473725][ T1658]  ? mall_set_parms+0x1a0/0x450
[   74.478584][ T1658]  mall_change+0x546/0x770
[   74.483047][ T1658]  ? __kasan_check_write+0x14/0x20
[   74.488189][ T1658]  ? mall_get+0xa0/0xa0
[   74.492351][ T1658]  ? tcf_chain_tp_insert_unique+0x946/0xa70
[   74.498250][ T1658]  tc_new_tfilter+0x1487/0x1ab0
[   74.503113][ T1658]  ? mall_get+0xa0/0xa0
[   74.507282][ T1658]  ? tcf_gate_entry_destructor+0x20/0x20
[   74.513042][ T1658]  ? 0xffffffffa002c000
[   74.517213][ T1658]  ? security_capable+0x87/0xb0
[   74.522171][ T1658]  ? ns_capable+0x8c/0xf0
[   74.526548][ T1658]  ? netlink_net_capable+0x125/0x160
[   74.531848][ T1658]  ? tcf_gate_entry_destructor+0x20/0x20
[   74.537486][ T1658]  rtnetlink_rcv_msg+0x811/0xca0
[   74.542453][ T1658]  ? unwind_get_return_address+0x4d/0x90
[   74.548105][ T1658]  ? rtnetlink_bind+0x80/0x80
[   74.552893][ T1658]  ? stack_trace_save+0xa6/0xf0
[   74.558210][ T1658]  ? stack_trace_snprint+0xe0/0xe0
[   74.563331][ T1658]  ? avc_has_perm+0x168/0x3d0
[   74.568045][ T1658]  ? memcpy+0x56/0x70
[   74.572124][ T1658]  ? avc_has_perm+0x27f/0x3d0
[   74.576809][ T1658]  ? __kasan_slab_alloc+0xc9/0xe0
[   74.581837][ T1658]  ? avc_has_perm_noaudit+0x260/0x260
[   74.587225][ T1658]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   74.593325][ T1658]  ? selinux_nlmsg_lookup+0x398/0x430
[   74.598707][ T1658]  netlink_rcv_skb+0x1e9/0x430
[   74.603499][ T1658]  ? rtnetlink_bind+0x80/0x80
[   74.608180][ T1658]  ? netlink_ack+0xb30/0xb30
[   74.612774][ T1658]  ? __netlink_lookup+0x387/0x3b0
[   74.617797][ T1658]  rtnetlink_rcv+0x1c/0x20
[   74.622227][ T1658]  netlink_unicast+0x86c/0xa30
[   74.626992][ T1658]  netlink_sendmsg+0x949/0xb70
[   74.631759][ T1658]  ? netlink_getsockopt+0x530/0x530
[   74.636998][ T1658]  ? security_socket_sendmsg+0x82/0xa0
[   74.642560][ T1658]  ? netlink_getsockopt+0x530/0x530
[   74.647774][ T1658]  ____sys_sendmsg+0x5be/0x8f0
[   74.652549][ T1658]  ? __sys_sendmsg_sock+0x40/0x40
[   74.657576][ T1658]  ? import_iovec+0x7c/0xb0
[   74.662106][ T1658]  ___sys_sendmsg+0x236/0x2e0
[   74.666817][ T1658]  ? __sys_sendmsg+0x280/0x280
[   74.671592][ T1658]  ? alloc_file+0x82/0x580
[   74.676022][ T1658]  ? __fdget+0x1a1/0x230
[   74.680290][ T1658]  __x64_sys_sendmsg+0x201/0x2d0
[   74.685232][ T1658]  ? __kasan_check_write+0x14/0x20
[   74.690347][ T1658]  ? ___sys_sendmsg+0x2e0/0x2e0
[   74.695211][ T1658]  ? __kasan_check_read+0x11/0x20
[   74.700240][ T1658]  ? exit_to_user_mode_prepare+0x9a/0xa0
[   74.705878][ T1658]  do_syscall_64+0x31/0x40
[   74.710309][ T1658]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   74.716203][ T1658] RIP: 0033:0x7fd94a0bd159
[   74.720628][ T1658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.740327][ T1658] RSP: 002b:00007fd948af5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.748753][ T1658] RAX: ffffffffffffffda RBX: 00007fd94a345090 RCX: 00007fd94a0bd159
[   74.756948][ T1658] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000009
[   74.765037][ T1658] RBP: 00007fd94a154024 R08: 0000000000000000 R09: 0000000000000000
[   74.773023][ T1658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.781043][ T1658] R13: 00007fd94a345128 R14: 00007fd94a345090 R15: 00007ffc2d469258
[   74.789118][ T1658] 
[   74.791480][ T1658] Allocated by task 1658:
[   74.795854][ T1658]  __kasan_kmalloc+0xd4/0x100
[   74.800546][ T1658]  __kmalloc+0x19f/0x330
[   74.804796][ T1658]  tcf_idr_create+0x5f/0x790
[   74.809417][ T1658]  tcf_idr_create_from_flags+0x61/0x70
[   74.814902][ T1658]  tcf_gact_init+0x2e6/0x560
[   74.819509][ T1658]  tcf_action_init_1+0x443/0x6d0
[   74.824578][ T1658]  tcf_action_init+0x227/0x780
[   74.829353][ T1658]  tcf_exts_validate+0x23c/0x540
[   74.834295][ T1658]  mall_set_parms+0x4a/0x450
[   74.838915][ T1658]  mall_change+0x47a/0x770
[   74.843333][ T1658]  tc_new_tfilter+0x1487/0x1ab0
[   74.848184][ T1658]  rtnetlink_rcv_msg+0x811/0xca0
[   74.853121][ T1658]  netlink_rcv_skb+0x1e9/0x430
[   74.857893][ T1658]  rtnetlink_rcv+0x1c/0x20
[   74.862309][ T1658]  netlink_unicast+0x86c/0xa30
[   74.867077][ T1658]  netlink_sendmsg+0x949/0xb70
[   74.871848][ T1658]  ____sys_sendmsg+0x5be/0x8f0
[   74.876634][ T1658]  ___sys_sendmsg+0x236/0x2e0
[   74.881319][ T1658]  __x64_sys_sendmsg+0x201/0x2d0
[   74.886263][ T1658]  do_syscall_64+0x31/0x40
[   74.890689][ T1658]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   74.896661][ T1658] 
[   74.898999][ T1658] Last potentially related work creation:
[   74.904812][ T1658]  kasan_save_stack+0x3a/0x60
[   74.909493][ T1658]  __kasan_record_aux_stack+0xd2/0x100
[   74.914956][ T1658]  kasan_record_aux_stack_noalloc+0xb/0x10
[   74.920769][ T1658]  call_rcu+0x11a/0x1090
[   74.925016][ T1658]  free_fib_info+0x57/0x90
[   74.929435][ T1658]  fib_create_info+0x12ad/0x1ed0
[   74.934484][ T1658]  fib_table_insert+0xc2/0x1d60
[   74.939336][ T1658]  fib_add_ifaddr+0x892/0xf90
[   74.944012][ T1658]  fib_netdev_event+0x22e/0x5b0
[   74.948869][ T1658]  raw_notifier_call_chain+0x90/0x100
[   74.954253][ T1658]  __dev_notify_flags+0x2f4/0x5b0
[   74.959285][ T1658]  dev_change_flags+0xe3/0x1a0
[   74.964055][ T1658]  devinet_ioctl+0x69e/0x19f0
[   74.968734][ T1658]  inet_ioctl+0x313/0x490
[   74.973068][ T1658]  sock_do_ioctl+0xda/0x380
[   74.977579][ T1658]  sock_ioctl+0x472/0x740
[   74.981911][ T1658]  __se_sys_ioctl+0x121/0x1a0
[   74.986589][ T1658]  __x64_sys_ioctl+0x7b/0x90
[   74.991204][ T1658]  do_syscall_64+0x31/0x40
[   74.995640][ T1658]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   75.001527][ T1658] 
[   75.003874][ T1658] The buggy address belongs to the object at ffff888119f87600
[   75.003874][ T1658]  which belongs to the cache kmalloc-256 of size 256
[   75.017931][ T1658] The buggy address is located 216 bytes inside of
[   75.017931][ T1658]  256-byte region [ffff888119f87600, ffff888119f87700)
[   75.031202][ T1658] The buggy address belongs to the page:
[   75.036858][ T1658] page:ffffea000467e180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119f86
[   75.047091][ T1658] head:ffffea000467e180 order:1 compound_mapcount:0
[   75.053693][ T1658] flags: 0x4000000000010200(slab|head)
[   75.059179][ T1658] raw: 4000000000010200 ffffea00043a2100 0000000700000007 ffff888100043200
[   75.067769][ T1658] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[   75.076357][ T1658] page dumped because: kasan: bad access detected
[   75.082767][ T1658] page_owner tracks the page as allocated
[   75.088495][ T1658] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 124, ts 6496109551, free_ts 0
[   75.105790][ T1658]  prep_new_page+0x176/0x190
[   75.110389][ T1658]  get_page_from_freelist+0x225f/0x23f0
[   75.115934][ T1658]  __alloc_pages_nodemask+0x29a/0x640
[   75.121312][ T1658]  new_slab+0x84/0x3f0
[   75.125390][ T1658]  ___slab_alloc+0x2f8/0x4c0
[   75.129984][ T1658]  __slab_alloc+0x63/0xa0
[   75.134404][ T1658]  kmem_cache_alloc_trace+0x1a8/0x2e0
[   75.139792][ T1658]  inode_doinit_use_xattr+0x5d/0x400
[   75.145079][ T1658]  inode_doinit_with_dentry+0x82c/0xd70
[   75.150632][ T1658]  selinux_d_instantiate+0x27/0x40
[   75.155752][ T1658]  security_d_instantiate+0x9e/0xf0
[   75.160954][ T1658]  d_splice_alias+0x6d/0x390
[   75.165554][ T1658]  ext4_lookup+0x4aa/0x8c0
[   75.169976][ T1658]  path_openat+0x145d/0x3040
[   75.174565][ T1658]  do_filp_open+0x1df/0x400
[   75.179069][ T1658]  do_open_execat+0x162/0x990
[   75.183745][ T1658] page_owner free stack trace missing
[   75.189116][ T1658] 
[   75.191444][ T1658] Memory state around the buggy address:
[   75.197104][ T1658]  ffff888119f87580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   75.205175][ T1658]  ffff888119f87600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   75.213241][ T1658] >ffff888119f87680: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[   75.221307][ T1658]                                                     ^
[   75.228241][ T1658]  ffff888119f87700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   75.236316][ T1658]  ffff888119f87780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   75.244397][ T1658] ==================================================================
[   75.252565][ T1658] Disabling lock debugging due to kernel taint