last executing test programs:

2m0.655402094s ago: executing program 32 (id=30):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4)
bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m57.457406696s ago: executing program 33 (id=80):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x80, 0x80800)

1m44.696161226s ago: executing program 34 (id=254):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)={[{@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uni_xlateno}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@utf8}, {@shortname_lower}, {@utf8no}]}, 0x1, 0x31f, &(0x7f0000000980)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x12, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000001300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001340)=0x4f)
sendmsg$nl_route(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80)
r3 = socket$inet(0x2, 0x3, 0x3)
sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f00000014c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)

1m38.559405884s ago: executing program 35 (id=345):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000001c0)=0x3)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x21, 0x4, 0x3)
listen(0xffffffffffffffff, 0x0)

1m37.280004807s ago: executing program 8 (id=361):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000007ac0)={&(0x7f0000007900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

1m36.169270776s ago: executing program 8 (id=372):
r0 = epoll_create1(0x80000)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c})
r2 = creat(0x0, 0x20)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xfdef, 0x0)
r3 = gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r3}, &(0x7f0000000140)=<r4=>0x0)
timer_settime(r4, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)

1m36.076094698s ago: executing program 8 (id=373):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x5}, {0xe, 0x2}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x400c004)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x684200, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @loopback, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1m35.651806669s ago: executing program 8 (id=377):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setrlimit(0x0, &(0x7f0000000280)={0x7, 0xfdffffffffffffff})

1m35.355016747s ago: executing program 8 (id=381):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000340)=@isdn, 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_clone3(&(0x7f0000003240)={0x8004000, 0x0, 0x0, 0xfffffffffffffffd, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m35.321118488s ago: executing program 8 (id=383):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket(0x1, 0x5, 0x0)
close(r2)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0xe000200c})
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m21.849251506s ago: executing program 36 (id=541):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = getpgrp(0x0)
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x0, 0x0, 0x0)

1m20.253742676s ago: executing program 37 (id=383):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket(0x1, 0x5, 0x0)
close(r2)
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0xe000200c})
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m12.508641436s ago: executing program 3 (id=675):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x15, r1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000003c0)="b9ff03076044238c9e9e15f088a84cb688", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f00000001c0)})
r3 = socket(0xa, 0x1, 0x0)
ioctl(r3, 0x8916, &(0x7f0000000000))
ioctl(r3, 0x8936, &(0x7f0000000000))

1m12.493005927s ago: executing program 3 (id=677):
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="020409fcc9fb4802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

1m12.464611097s ago: executing program 3 (id=678):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x27, &(0x7f0000000040)=""/52, &(0x7f00000000c0)=0x34)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)

1m12.425755938s ago: executing program 3 (id=680):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x4, 0x4, 0x3d8, 0xffffffff, 0x238, 0x238, 0x118, 0xfeffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xaf7, 0x241, 0xfffc, 0x0, "9cc82cf0d8d50ba1ddac6fc4b8610ea5326f91ea2065aadf7c1ee95a416eff6fdb04e1976a71f996a05bd168f4baf65b670c0e8c7a054fe6c19e0fd46e11fc41"}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff000000, 0xff, 0xffffffff, 0xff], [0xff000000, 0xffffffff, 0xff, 0xffffffff], 'dvmrp1\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x3b, 0x25, 0x4, 0x30}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@ipv6header={{0x28}, {0x91591cded2fa7045, 0x15}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r3, &(0x7f0000000180)='6', 0x32)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

1m11.960871201s ago: executing program 3 (id=683):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

1m11.831582114s ago: executing program 3 (id=684):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x109000)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file3\x00', 0x22074, 0x118)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001700)={0x20, 0x182, &(0x7f0000000700)="484f3a1ca82edfe7f9205711f9d16acb3c1b0e8c1e4f009e931498e6b156d0e569c0d51debf486c73e75ea8d962933abc668d2fc24f09d22b6de9bb14e071d633b9b2852e4567450d19bcecb80af93698837bc12d5813959fa60039d43e3f578004ff01a966ff2e2b3bae680b59706e652461dfb552c8c09116078267e80b1a9f73b6491cd008c55c49de7931ffc65d97c8a318da2edf293bbf172be07b95d88a1ae1b4d83bf0c93eba1adca063e2f7313733af4d2a9f5f52d85ab0ba3b00380482ab910153bbb8c38d648b08521a8f309e88d15049c061669e01371d7200104e8c1901a73c2c7ec9edd5e33fc719412077b3b99b6c87a1cc93c0e95ebe523a9d10b8050e96f98d2e618edf7958dd7b379102b462527ecac4cfe6f79b3e3be9b4e33f8ea0f86332f4120630d96fc1e48db279fb71a05f459a38db4f573618f7f030e0377a067af73ce7eef05998a55683c0a98d184ebc3b46c5bfbbe3434c3f4c36e1ada283a955525f7655f0efcf85c2a7afa18a4639f1ce4cd948f254dfb8e748b"})
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x400000000000000}, 0x40810)
ioctl(r0, 0x404c4701, &(0x7f0000000100))

1m11.831406634s ago: executing program 38 (id=684):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x109000)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file3\x00', 0x22074, 0x118)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001700)={0x20, 0x182, &(0x7f0000000700)="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"})
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x400000000000000}, 0x40810)
ioctl(r0, 0x404c4701, &(0x7f0000000100))

1m6.58335514s ago: executing program 6 (id=748):
getpgid(0x0)
ustat(0x7, 0x0)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r2, 0x100, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

1m6.503699562s ago: executing program 6 (id=753):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = dup3(r1, r2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0x20000002})
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x20000001})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000100)={0xa0002000})

1m6.437926163s ago: executing program 6 (id=755):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3}, 0x50)

1m6.18184109s ago: executing program 6 (id=757):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x9)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0xc, 0x0, 0x7}, {0xf000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfb}, {0x2, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x80a0000, 0xffff1000, 0x3, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0x25000, 0xf, 0x6, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x9, 0x4}, {0x4000, 0x1000, 0xb, 0xfc, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x2fff, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x5000, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x9000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x48, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]})
ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50})

1m6.102430502s ago: executing program 6 (id=758):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x6)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m6.066543893s ago: executing program 6 (id=759):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
unshare(0x22020400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001"], 0xf4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)

51.04811799s ago: executing program 39 (id=759):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
unshare(0x22020400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001"], 0xf4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)

46.224712325s ago: executing program 2 (id=1004):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x800)
sendmsg$nl_route(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f00000000c0)="$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")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10)
fchmodat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000380)={@random="5bb65d3f2511", @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xe, 0x60, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @multicast1, {[@end]}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "78b451ed535f9639fed265c7dedd968d73d5359a2dd49491", "eaf17e59363d54632156e017d2209e625284c77b36c3fbbe430402000000665e"}}}}}}, 0x0)

46.04757601s ago: executing program 2 (id=1005):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000cbb60000000000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r2, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}, 0xc)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

45.534762552s ago: executing program 2 (id=1012):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
statfs(0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)

45.503818753s ago: executing program 2 (id=1013):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

45.453186334s ago: executing program 2 (id=1014):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, 0x0, 0x0)
prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0))
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
syz_clone(0x1000, &(0x7f0000000200)="a398d475ed119731b31eea5f4f3f885e8a0b2a8d96aca6fa15187d53f0cae31312ecde96f6ef0ad5715ec37c805f94056c5def1c984c33cca0a658930592cb067f62bbe68ebed74a82052a695c7aabf351887ea45549e5d7a01ee1a7ab4c191bd43b3ff1bc416b99d0e65668ffc077d46a01fed10c62da2b13b317255031f53a7f27a1867e1bcee9f45be6ceec1f3105d5018113227aab83679b48cb6f8edb1869129394ce31ec933f554e9682f167cf17d32c4dc05098d9719875fdf99fc27502a75ec8a6565e5146", 0xc9, &(0x7f0000000300), &(0x7f0000000340), 0x0)
memfd_create(&(0x7f0000000040)='%\x00', 0x3)

44.954012347s ago: executing program 2 (id=1020):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f00000062c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000006300)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000006340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
inotify_init1(0x80000)
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r2, 0x0, 0x0, 0x8000c61)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffa)
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x1)
futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc)

29.919811526s ago: executing program 40 (id=1020):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f00000062c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000006300)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000006340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
inotify_init1(0x80000)
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r2, 0x0, 0x0, 0x8000c61)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffa)
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x1)
futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc)

26.799597445s ago: executing program 0 (id=1216):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0xb0000004})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0xffffffff)

25.481595998s ago: executing program 0 (id=1224):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)

25.427574459s ago: executing program 0 (id=1226):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e)

23.388103911s ago: executing program 0 (id=1238):
syz_open_procfs(0xffffffffffffffff, 0x0)
unshare(0x2c020400)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)

22.494526363s ago: executing program 0 (id=1246):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESOCT, @ANYBLOB="000000000000000000000000000010"], 0x50)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x25dfdbfb, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc)

22.460981914s ago: executing program 0 (id=1247):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x101}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000005c0)={0x0, "01000004000000008899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112200080000778899aabbccddeeff00aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000001180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000001240), 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000019780)={@local, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000197c0)=0x1, 0x4)
sendmsg$inet6(r1, &(0x7f0000019800)={&(0x7f0000019840)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r1], 0x18}, 0x2000c8d0)

7.046707852s ago: executing program 41 (id=1247):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x101}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000005c0)={0x0, "01000004000000008899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112200080000778899aabbccddeeff00aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000001180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000001240), 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000019780)={@local, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000197c0)=0x1, 0x4)
sendmsg$inet6(r1, &(0x7f0000019800)={&(0x7f0000019840)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r1], 0x18}, 0x2000c8d0)

6.984410684s ago: executing program 9 (id=1258):
syz_open_procfs(0xffffffffffffffff, 0x0)
unshare(0x2c020400)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)

6.291389192s ago: executing program 9 (id=1263):
unshare(0x62020600)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="12014103000000088205820540000102030109026e000301809006080b0202810030080904000000010130000a2401090a000200000009040100000102300009040101010102300009050109ff037609090a2525060000008100020904020000010230000904020101010230000905820900020406070a252508"], &(0x7f0000000100)={0x0, 0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="050f05"]})
socket$inet6(0xa, 0x3, 0xff)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x20000000)
getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

5.15417239s ago: executing program 4 (id=1272):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210000, &(0x7f0000000200), 0xfc, 0x56f, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r0 = open(&(0x7f0000000f00)='./file1\x00', 0x4827e, 0x20)
lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0)
fallocate(r0, 0x0, 0x0, 0x8800000)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0), 0xfdef)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x2200002, &(0x7f0000000740)={[{@nodiscard}, {}, {@barrier}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000001580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./proc\x00', 0x180)
mount$overlay(0x0, &(0x7f0000001600)='./bus\x00', &(0x7f0000001640), 0x8, &(0x7f0000001680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]})

5.029670624s ago: executing program 7 (id=1273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x13ff}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x2000c050)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040)

4.955818785s ago: executing program 7 (id=1274):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='+p', 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
ioctl(r1, 0x8914, &(0x7f0000000140)="7573623000000000000000000000000003")
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4.338062271s ago: executing program 9 (id=1277):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x4000087, 0x2, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000001, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x12100ca, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

3.853463023s ago: executing program 1 (id=1279):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x2, @remote, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x3, 0x0, 0x54000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0)

3.502502752s ago: executing program 1 (id=1280):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\x00', &(0x7f0000000540)='~', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG<v\xb8\x18\x80\xe1Kf\xf8R\xdd\x06\xe8\xfbl\v\xb0\xdd\x05\x05\xd8\xdb\xfd`\xf9\xf8\x915\b\x8c\xad\xc8\x9d=\xfeN\x8b\x1eR\x1e\xf8\x9dn\x19H\xd2aE\xa0\x06\xb0Yv\xf9^\x8c\x8f\xc3\xa5\x985\x85U\x8cZ/\'\xbd\xe2\xdc\xe3\xb9\x8e$Z\xef\xa8\xe5(Mt\xd3\xd9\xf6X\x1a\x9b\t$N\xd0U\xe2z\xeb\x01\x80!0\xe8\xc3\xce\xf8\x03\xde\x92s\xf9', &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\x00@\x00\x04\xe1\xc2\b\b\x88O\"\xe1\x10\x84\xbc\x90\x13\xe1\a6\xbe`\xdb\x00\xbd\xe3\xe1\x9e\xf4W[(X\x98)\x19\x86k\x9a1\x1d\xd6\xfbO\xf4\xa7~I(f\x9f^_\x89Z5H\x91\xce\x8d\xa9\x80\xd7\xfd\xefw\xa7:[V\xa2\x13\x90[F\x90\xda\xe9\x11W\xac\x83\xc8G\xbay\xc5\x0e\x94\xaf1\x15\xff\xa3\xc3\tG\xa1\xc6\v\xfa\xfa\x03q\x01\x1c\xc0\xbd=@\xe7k6\nM\xce\xf0X', &(0x7f00000002c0)='\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000d00)='\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', &(0x7f0000000340)="0f", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(\xed\xef(\x05\x00\x00\x00]\x00', &(0x7f0000000100)='\xfcV\x00E\x9a\x90\x057g\n\x94\xb7\x11\xc9\x90\xaeE\x85\xf4\xf0\xba\xb0\xb0\x06\x00\x00\x01\x03\b\xdaP\x83*\xe2p\x7fk\xfe\xd9\x89L\xdb\x01\b\x00\x00\x9d\x95K\x17\xc8E\xbb', 0x0)
read(r0, 0x0, 0xfffffea1)
close(r0)

3.486148002s ago: executing program 1 (id=1281):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x6}, 0x4f, r3})
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.470760303s ago: executing program 9 (id=1282):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)

3.459207633s ago: executing program 4 (id=1283):
openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x40042, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x40, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000300)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x16c)
renameat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0)
openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0)

3.426820854s ago: executing program 4 (id=1284):
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000340)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000380)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x14000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000480)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup\x00', 0x0, 0x11)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)

3.357805346s ago: executing program 1 (id=1285):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x8003}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000440)='./file1\x00', 0x804010, &(0x7f0000000480), 0x4, 0x3d0, &(0x7f00000004c0)="$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")

3.315243107s ago: executing program 4 (id=1286):
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2100, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
close(0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001400)}}], 0x1, 0x40002002, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xffc1)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x823e})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)

3.254465028s ago: executing program 5 (id=1288):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
write(r2, &(0x7f00000006c0), 0x0)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0)

3.18334105s ago: executing program 5 (id=1289):
syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x24020400)
setpriority(0x0, 0x0, 0x200002a14b56)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

3.015843484s ago: executing program 9 (id=1290):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000440), 0x11000)
io_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x0, 0x0, 0x0, 0x8000e3})

2.862909538s ago: executing program 7 (id=1291):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

2.832293819s ago: executing program 5 (id=1292):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x2, 0x4, 0x8}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

2.742302581s ago: executing program 5 (id=1293):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x4000000, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)

2.249149523s ago: executing program 1 (id=1294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x15)

2.120022227s ago: executing program 7 (id=1295):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='3', 0x1)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000380)="01005e00001652540012345608004600002c000100000102830bc0a80101e00000169404000022002aee0000000101000001ef010101c0a80164", 0x3a, 0x0, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'bridge_slave_0\x00'})

1.498158402s ago: executing program 5 (id=1296):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x7fffffff)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000600), 0x0)

1.465283873s ago: executing program 7 (id=1297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x3f)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

947.187706ms ago: executing program 1 (id=1298):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
fcntl$setlease(r1, 0x400, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00')
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

756.002081ms ago: executing program 4 (id=1299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x40000401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4044c40)

538.410667ms ago: executing program 4 (id=1300):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x11)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r2, 0x0, 0xf, 0x8)
pipe2$9p(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb)
tee(r3, r2, 0x9, 0x8)

468.973138ms ago: executing program 9 (id=1301):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3fd})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff)
fcntl$setlease(r2, 0x400, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc000, 0xd)
open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

181.166826ms ago: executing program 7 (id=1302):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x20008, 0x0, 0x0, 0x40, 0x4000000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000002380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004440)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004480)='./file0\x00', 0x101001, 0x12)
mount$bpf(0x0, 0x0, 0x0, 0x80, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
flock(r2, 0x5)

0s ago: executing program 5 (id=1303):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e21, @empty}})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

kernel console output (not intermixed with test programs):

 (device loop6): ext4_readdir:263: inode #2: block 13: comm syz.6.476: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   59.154657][ T1663] device syzkaller0 entered promiscuous mode
[   59.166518][ T1661] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #2: block 18: comm syz.6.476: lblock 23 mapped to illegal pblock 18 (length 1)
[   59.207965][ T1645] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 14: comm syz.6.476: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   59.306895][ T1645] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 15: comm syz.6.476: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   59.357659][ T1645] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz.6.476: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   59.422680][ T1672] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   59.483840][ T1645] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 17: comm syz.6.476: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   59.528738][ T1645] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #2: block 18: comm syz.6.476: lblock 23 mapped to illegal pblock 18 (length 1)
[   59.543341][ T1645] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 19: comm syz.6.476: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   59.608147][ T1677] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   59.797720][ T1685] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   59.809839][ T1685] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   59.948767][ T1694] tipc: Failed to remove local publication {66,0,4294967293}/2052220702
[   60.259576][ T1699] F2FS-fs (loop7): invalid crc value
[   60.282044][ T1699] F2FS-fs (loop7): Found nat_bits in checkpoint
[   60.326434][ T1699] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   60.360117][   T24] kauditd_printk_skb: 6 callbacks suppressed
[   60.360132][   T24] audit: type=1400 audit(1791924866.910:399): avc:  denied  { lock } for  pid=1698 comm="syz.7.492" path="/39/file0/cpuset.effective_cpus" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   60.397765][  T418] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   60.421377][ T1010] attempt to access beyond end of device
[   60.421377][ T1010] loop7: rw=2049, want=45104, limit=40427
[   60.718178][   T24] audit: type=1400 audit(1791924867.270:400): avc:  denied  { shutdown } for  pid=1719 comm="syz.7.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   60.847524][  T418] usb 7-1: unable to get BOS descriptor or descriptor too short
[   60.878981][ T1715] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   60.886779][ T1715] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   60.917794][ T1715] F2FS-fs (loop2): invalid crc value
[   60.939153][ T1715] F2FS-fs (loop2): Found nat_bits in checkpoint
[   60.947938][  T418] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.037663][ T1715] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   61.049921][ T1715] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   61.159121][ T1715] attempt to access beyond end of device
[   61.159121][ T1715] loop2: rw=2049, want=45104, limit=40427
[   61.208439][  T112] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   61.217679][  T418] usb 7-1: string descriptor 0 read error: -22
[   61.223923][  T418] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   61.243572][  T112] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   61.252742][  T418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   61.318280][  T418] uvcvideo: Found UVC 1.00 device <unnamed> (8086:0ad2)
[   61.754904][ T1756] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   61.793965][   T24] audit: type=1400 audit(1791924868.340:401): avc:  denied  { listen } for  pid=1757 comm="syz.7.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.817540][  T415] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   61.826643][   T24] audit: type=1400 audit(1791924868.340:402): avc:  denied  { accept } for  pid=1757 comm="syz.7.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.857841][ T1754] SELinux:  Context system_u:object_r:dhcpd_var_run_t:s0 is not valid (left unmapped).
[   61.882344][   T24] audit: type=1400 audit(1791924868.420:403): avc:  denied  { relabelto } for  pid=1753 comm="syz.5.510" name="memory.events.local" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0"
[   61.934006][   T24] audit: type=1400 audit(1791924868.460:404): avc:  denied  { associate } for  pid=1753 comm="syz.5.510" name="memory.events.local" dev="tmpfs" ino=651 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_var_run_t:s0"
[   61.977540][  T418] uvcvideo: Failed to set UVC probe control : -71 (exp. 26).
[   62.004236][   T24] audit: type=1400 audit(1791924868.470:405): avc:  denied  { unlink } for  pid=387 comm="syz-executor" name="memory.events.local" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0"
[   62.007599][  T418] uvcvideo: Failed to query (129) UVC probe control : -71 (exp. 26).
[   62.044563][  T418] uvcvideo: Failed to initialize the device (-5).
[   62.058714][  T418] usb 7-1: USB disconnect, device number 5
[   62.097455][  T415] usb 3-1: Using ep0 maxpacket: 8
[   62.107361][   T24] audit: type=1400 audit(1791924868.650:406): avc:  denied  { mounton } for  pid=1762 comm="syz.5.514" path="/113/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   62.297496][  T415] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.307939][  T415] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   62.317006][  T415] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   62.497597][  T415] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   62.512218][  T415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.529252][  T415] usb 3-1: Product: syz
[   62.538972][  T415] usb 3-1: Manufacturer: syz
[   62.547581][  T415] usb 3-1: SerialNumber: syz
[   62.593550][   T24] audit: type=1400 audit(1791924869.140:407): avc:  denied  { read } for  pid=1765 comm="syz.6.515" path="socket:[22666]" dev="sockfs" ino=22666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   62.642955][   T24] audit: type=1400 audit(1791924869.190:408): avc:  denied  { sys_module } for  pid=1768 comm="syz.7.516" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   62.664802][ T1769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.516'.
[   62.749057][ T1774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.518'.
[   62.812619][ T1783] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.824584][ T1783] device bridge_slave_0 left promiscuous mode
[   62.831111][ T1783] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.848676][  T415] cdc_ncm 3-1:1.0: bind() failure
[   62.864097][  T415] usb 3-1: USB disconnect, device number 4
[   63.596311][ T1790] F2FS-fs (loop6): invalid crc value
[   63.648692][ T1790] F2FS-fs (loop6): Found nat_bits in checkpoint
[   63.718859][ T1790] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[   63.725945][ T1790] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[   64.213978][ T1811] printk: console [ttyS0] disabled
[   64.248344][ T1811] printk: console [ttyS0] enabled
[   64.469772][ T1821] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5
[   64.469772][ T1821] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   64.469772][ T1821] 
[   64.499639][ T1821] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled
[   64.525968][ T1821] EXT4-fs (loop7): Ignoring removed orlov option
[   64.536800][ T1821] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5
[   64.536800][ T1821] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   64.536800][ T1821] 
[   64.579991][ T1821] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/,orlov,nouser_xattr,,errors=continue
[   64.690180][ T1010] EXT4-fs error (device loop7): ext4_lookup:1830: inode #11: comm syz-executor: iget: bad extra_isize 2336 (inode size 256)
[   64.713868][ T1010] EXT4-fs error (device loop7): ext4_lookup:1830: inode #11: comm syz-executor: iget: bad extra_isize 2336 (inode size 256)
[   65.075696][ T1840] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.091403][ T1840] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.099205][ T1840] device bridge_slave_0 entered promiscuous mode
[   65.106390][ T1840] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.113528][ T1840] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.121166][ T1840] device bridge_slave_1 entered promiscuous mode
[   65.222567][ T1840] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.229669][ T1840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.236977][ T1840] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.244082][ T1840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.299674][ T1856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'.
[   65.317480][ T1856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'.
[   65.342211][ T1855] EXT4-fs (loop6): Test dummy encryption mode enabled
[   65.368329][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.387613][ T1855] EXT4-fs (loop6): Test dummy encryption mode enabled
[   65.396113][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.422432][ T1855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002]
[   65.432845][ T1861] binder: 1860:1861 ioctl c0306201 200000000580 returned -22
[   65.455599][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.468151][ T1855] System zones: 1-12
[   65.472709][ T1855] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,debug,minixdf,jqfmt=vfsv1,prjquota,nombcache,min_batch_time=0x0000000000000005,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,
[   65.498283][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.537692][ T1863] netlink: 9 bytes leftover after parsing attributes in process `syz.5.551'.
[   65.547622][ T1863] device gretap0 entered promiscuous mode
[   65.570276][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.579282][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.601543][ T1855] EXT4-fs (loop6): shut down requested (2)
[   65.607950][   T24] kauditd_printk_skb: 13 callbacks suppressed
[   65.607963][   T24] audit: type=1400 audit(1791925128.163:422): avc:  denied  { read } for  pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   65.610509][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.615311][   T24] audit: type=1400 audit(1791925128.163:423): avc:  denied  { search } for  pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.635878][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.686109][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.713010][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.739628][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.746724][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.752518][   T24] audit: type=1400 audit(1791925128.163:424): avc:  denied  { write } for  pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.787547][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.805414][   T24] audit: type=1400 audit(1791925128.163:425): avc:  denied  { add_name } for  pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.814091][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.848651][   T24] audit: type=1400 audit(1791925128.163:426): avc:  denied  { create } for  pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.887620][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.896423][   T24] audit: type=1400 audit(1791925128.163:427): avc:  denied  { append open } for  pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.908087][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.951041][   T24] audit: type=1400 audit(1791925128.163:428): avc:  denied  { getattr } for  pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.970994][ T1863] netlink: 5 bytes leftover after parsing attributes in process `syz.5.551'.
[   65.987527][ T1863] 0ªî{X¹¦: renamed from gretap0
[   66.008468][ T1863] device 
30ªî{X¹¦ left promiscuous mode
[   66.038425][ T1863] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   66.082241][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.092132][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.132839][ T1840] device veth0_vlan entered promiscuous mode
[   66.139620][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.148680][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.157909][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.186199][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.215772][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.227848][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.250105][ T1840] device veth1_macvtap entered promiscuous mode
[   66.275026][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.304804][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.326738][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.363287][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.389989][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.628264][ T1883] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.557: iget: bad i_size value: 38620345925642
[   66.643772][ T1883] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.557: couldn't read orphan inode 15 (err -117)
[   66.676115][ T1883] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   66.756852][ T1897] overlayfs: statfs failed on './file0'
[   66.766224][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.767898][ T1898] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.557: bg 0: block 5: invalid block bitmap
[   66.773597][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.800979][ T1890] device bridge_slave_0 entered promiscuous mode
[   66.815363][ T1898] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1236 with error 28
[   66.829315][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.850113][ T1890] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.858239][ T1890] device bridge_slave_1 entered promiscuous mode
[   66.859609][ T1898] EXT4-fs (loop6): This should not happen!! Data will be lost
[   66.859609][ T1898] 
[   66.926297][ T1898] EXT4-fs (loop6): Total free blocks count 0
[   66.952029][ T1898] EXT4-fs (loop6): Free/Dirty block details
[   66.979425][ T1898] EXT4-fs (loop6): free_blocks=0
[   66.992970][ T1906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'.
[   66.995161][ T1898] EXT4-fs (loop6): dirty_blocks=1236
[   67.009572][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.016792][ T1890] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.022638][ T1898] EXT4-fs (loop6): Block reservation details
[   67.024960][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.037769][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.050678][ T1898] EXT4-fs (loop6): i_reserved_data_blocks=1236
[   67.115083][ T1883] EXT4-fs (loop6): shut down requested (0)
[   67.122066][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.144062][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.174865][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.213016][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.235654][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.242779][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.266780][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.297769][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.304842][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.325850][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.358124][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.374412][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.421368][ T1890] device veth0_vlan entered promiscuous mode
[   67.436358][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.454696][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.464968][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.489346][ T1890] device veth1_macvtap entered promiscuous mode
[   67.520454][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.546732][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.560466][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.590069][   T24] audit: type=1400 audit(1791925130.143:429): avc:  denied  { execute } for  pid=1929 comm="syz.5.575" path="/file1" dev="ramfs" ino=25841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   67.676758][ T1938] binder: 1936:1938 ioctl c0306201 2000000000c0 returned -14
[   67.695522][ T1938] binder: 1936:1938 ioctl c0306201 2000000001c0 returned -14
[   67.825689][ T1943] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[   67.845447][ T1943] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.894518][ T1943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6054c01c, mo2=0002]
[   67.913053][ T1943] System zones: 0-1, 3-36
[   67.924002][ T1943] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,noinit_itable,debug,dioread_nolock,bsddf,acl,resgid=0x000000000000ee00,,errors=continue
[   68.078392][  T112] device bridge_slave_1 left promiscuous mode
[   68.087630][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.111031][ T1948] VFS: Mount too revealing
[   68.116536][  T112] device bridge_slave_0 left promiscuous mode
[   68.149075][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.197714][  T112] device veth1_macvtap left promiscuous mode
[   68.207605][  T112] device veth0_vlan left promiscuous mode
[   68.221000][   T24] audit: type=1400 audit(1791925130.773:430): avc:  denied  { create } for  pid=1956 comm="syz.9.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   68.405297][   T24] audit: type=1400 audit(1791925130.953:431): avc:  denied  { create } for  pid=1965 comm="syz.9.587" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   68.562245][ T1971] EXT4-fs (loop5): Unrecognized mount option "func=FIRMWARE_CHECK" or missing value
[   68.758155][ T1925] F2FS-fs (loop2): Test dummy encryption mode enabled
[   68.790700][ T1925] F2FS-fs (loop2): invalid crc value
[   68.801257][ T1962] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   68.842636][ T1962] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   68.873836][ T1962] F2FS-fs (loop3): invalid crc value
[   68.909056][ T1962] F2FS-fs (loop3): Found nat_bits in checkpoint
[   68.928589][ T1925] F2FS-fs (loop2): Found nat_bits in checkpoint
[   69.007112][ T1925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   69.015055][ T1962] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   69.024417][ T1962] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   69.205326][ T2019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.601'.
[   69.210650][ T2007] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   69.258068][ T2007] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.797542][  T284] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   70.047569][  T300] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   70.238817][  T284] usb 7-1: unable to get BOS descriptor or descriptor too short
[   70.309703][ T2056] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   70.327507][  T284] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.347489][  T284] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   70.368139][ T2056] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   70.381327][ T2056] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.617: bg 0: block 104: invalid block bitmap
[   70.394112][ T2056] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   70.403723][ T2056] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.617: invalid indirect mapped block 1 (level 1)
[   70.417341][ T2056] EXT4-fs (loop2): 1 truncate cleaned up
[   70.417721][  T300] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.434699][ T2056] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   70.517603][  T284] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   70.533353][  T284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.543055][  T284] usb 7-1: Product: syz
[   70.548190][  T284] usb 7-1: Manufacturer: syz
[   70.553031][  T284] usb 7-1: SerialNumber: syz
[   70.608548][  T284] usb 7-1: selecting invalid altsetting 1
[   70.627683][  T300] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   70.638246][  T284] usb 7-1: unit 6 not found!
[   70.644971][  T300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.654435][  T300] usb 4-1: Product: syz
[   70.659245][  T300] usb 4-1: Manufacturer: syz
[   70.664331][  T300] usb 4-1: SerialNumber: syz
[   70.708739][  T300] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   71.160940][ T2080] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   71.169477][ T2080] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[   71.197556][ T2084] binder: 2083:2084 ioctl c0306201 2000000000c0 returned -14
[   71.206467][ T2084] binder: 2083:2084 ioctl c0306201 2000000001c0 returned -14
[   71.225131][ T2086] binder: 2085:2086 ioctl c0306201 2000000000c0 returned -14
[   71.234213][ T2086] binder: 2085:2086 ioctl c0306201 2000000001c0 returned -14
[   71.240433][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   71.240474][   T24] audit: type=1400 audit(1791925133.793:434): avc:  denied  { write } for  pid=2037 comm="syz.6.609" path="socket:[26177]" dev="sockfs" ino=26177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.272961][  T284] usb 7-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3
[   71.281196][   T24] audit: type=1400 audit(1791925133.823:435): avc:  denied  { read write } for  pid=2046 comm="syz.3.610" name="cdc-wdm0" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   71.306461][   T24] audit: type=1400 audit(1791925133.843:436): avc:  denied  { open } for  pid=2046 comm="syz.3.610" path="/dev/cdc-wdm0" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   71.426036][   T24] audit: type=1400 audit(1791925133.973:437): avc:  denied  { getopt } for  pid=2091 comm="syz.9.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   71.522036][ T2096] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   71.532886][   T24] audit: type=1400 audit(1791925134.083:438): avc:  denied  { mount } for  pid=2095 comm="syz.9.632" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   71.537838][  T284] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3
[   71.573114][   T24] audit: type=1400 audit(1791925134.123:439): avc:  denied  { unmount } for  pid=1840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   71.593955][  T284] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3
[   71.604278][  T284] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[   71.612533][  T284] usb 7-1: USB disconnect, device number 6
[   71.636394][ T2101] netlink: 16 bytes leftover after parsing attributes in process `syz.9.634'.
[   71.660147][   T24] audit: type=1400 audit(1791925134.213:440): avc:  denied  { read } for  pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   71.683672][   T24] audit: type=1400 audit(1791925134.233:441): avc:  denied  { search } for  pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   71.705787][   T24] audit: type=1400 audit(1791925134.233:442): avc:  denied  { read } for  pid=134 comm="dhcpcd" name="n85" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   71.728396][   T24] audit: type=1400 audit(1791925134.233:443): avc:  denied  { open } for  pid=134 comm="dhcpcd" path="/run/udev/data/n85" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   71.764024][ T2108] EXT4-fs (loop2): Ignoring removed nobh option
[   71.773506][ T2108] EXT4-fs (loop2): 1 truncate cleaned up
[   71.779283][ T2108] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,errors=remount-ro,nombcache,noload,nobh,debug_want_extra_isize=0x0000000000000008,
[   72.048998][ T2126] netlink: 196 bytes leftover after parsing attributes in process `syz.6.643'.
[   72.156408][ T2134] netlink: 104 bytes leftover after parsing attributes in process `syz.5.642'.
[   72.202953][ T2136] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[   72.214663][ T2136] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[   72.231781][ T2136] pit: kvm: requested 66209 ns i8254 timer period limited to 200000 ns
[   72.253561][ T2136] pit: kvm: requested 27657 ns i8254 timer period limited to 200000 ns
[   72.262405][ T2136] pit: kvm: requested 56152 ns i8254 timer period limited to 200000 ns
[   72.273351][ T2136] pit: kvm: requested 34361 ns i8254 timer period limited to 200000 ns
[   72.290687][ T2136] pit: kvm: requested 156723 ns i8254 timer period limited to 200000 ns
[   72.778513][  T300] usb 4-1: USB disconnect, device number 2
[   72.812775][ T2156] tipc: Started in network mode
[   72.823080][ T2156] tipc: Own node identity ac14140f, cluster identity 4711
[   72.836196][ T2156] tipc: Enabled bearer <udp:syz2>, priority 10
[   73.004842][ T2160] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   73.024448][ T2160] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.120134][ T2179] kvm: pic: non byte read
[   73.147326][ T2187] FAULT_INJECTION: forcing a failure.
[   73.147326][ T2187] name failslab, interval 1, probability 0, space 0, times 0
[   73.160062][ T2187] CPU: 0 PID: 2187 Comm: syz.3.664 Not tainted syzkaller #0
[   73.167371][ T2187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   73.177501][ T2187] Call Trace:
[   73.180846][ T2187]  __dump_stack+0x21/0x24
[   73.185332][ T2187]  dump_stack_lvl+0x1a7/0x208
[   73.190445][ T2187]  ? show_regs_print_info+0x18/0x18
[   73.195664][ T2187]  ? selinux_kernfs_init_security+0x143/0x450
[   73.201754][ T2187]  ? selinux_path_notify+0x670/0x670
[   73.207051][ T2187]  dump_stack+0x15/0x1c
[   73.211227][ T2187]  should_fail+0x3ab/0x500
[   73.215670][ T2187]  ? __kernfs_new_node+0xe1/0x670
[   73.220824][ T2187]  __should_failslab+0xa4/0xe0
[   73.225688][ T2187]  should_failslab+0x9/0x20
[   73.230204][ T2187]  kmem_cache_alloc+0x3d/0x2d0
[   73.234983][ T2187]  __kernfs_new_node+0xe1/0x670
[   73.239855][ T2187]  ? kernfs_new_node+0x260/0x260
[   73.244828][ T2187]  ? down_write+0xb2/0x120
[   73.249516][ T2187]  ? down_read_killable+0xe0/0xe0
[   73.254646][ T2187]  ? __kasan_check_write+0x14/0x20
[   73.259881][ T2187]  ? up_write+0x57/0x120
[   73.264205][ T2187]  ? kernfs_activate+0x35e/0x370
[   73.269430][ T2187]  kernfs_new_node+0x150/0x260
[   73.274245][ T2187]  __kernfs_create_file+0x4e/0x270
[   73.279498][ T2187]  sysfs_add_file_mode_ns+0x29a/0x350
[   73.284884][ T2187]  internal_create_group+0x492/0xd00
[   73.290197][ T2187]  ? kernfs_activate+0x35e/0x370
[   73.295154][ T2187]  ? sysfs_create_group+0x30/0x30
[   73.300366][ T2187]  ? kernfs_put+0x44f/0x480
[   73.304969][ T2187]  ? kernfs_create_link+0x186/0x200
[   73.310269][ T2187]  sysfs_create_groups+0x58/0x120
[   73.315323][ T2187]  device_add_attrs+0x8c/0x430
[   73.320102][ T2187]  ? device_add_class_symlinks+0x26c/0x2a0
[   73.325924][ T2187]  device_add+0x4f5/0xc00
[   73.330266][ T2187]  ? device_initialize+0x1d6/0x410
[   73.335419][ T2187]  netdev_register_kobject+0x18e/0x330
[   73.341084][ T2187]  ? raw_notifier_call_chain+0xe9/0x100
[   73.346650][ T2187]  register_netdevice+0xdae/0x13a0
[   73.351786][ T2187]  ? netif_stacked_transfer_operstate+0x220/0x220
[   73.358234][ T2187]  ? xdp_rxq_info_reg+0xec/0x2e0
[   73.363269][ T2187]  register_netdev+0x3e/0x50
[   73.367871][ T2187]  loopback_net_init+0x74/0x150
[   73.372735][ T2187]  ops_init+0x2c0/0x470
[   73.377480][ T2187]  ? __kasan_check_write+0x14/0x20
[   73.382724][ T2187]  setup_net+0x34f/0xae0
[   73.387082][ T2187]  ? copy_net_ns+0x520/0x520
[   73.391710][ T2187]  ? __kasan_check_write+0x14/0x20
[   73.396829][ T2187]  copy_net_ns+0x314/0x520
[   73.401255][ T2187]  create_new_namespaces+0x3a8/0x650
[   73.406552][ T2187]  unshare_nsproxy_namespaces+0x120/0x170
[   73.412311][ T2187]  ksys_unshare+0x4fa/0x820
[   73.416822][ T2187]  ? unshare_fd+0x1c0/0x1c0
[   73.421336][ T2187]  ? __kasan_check_read+0x11/0x20
[   73.426400][ T2187]  __x64_sys_unshare+0x38/0x40
[   73.431175][ T2187]  do_syscall_64+0x31/0x40
[   73.435620][ T2187]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   73.441540][ T2187] RIP: 0033:0x7f7b4f22e2d9
[   73.445989][ T2187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.465867][ T2187] RSP: 002b:00007f7b4dc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   73.474300][ T2187] RAX: ffffffffffffffda RBX: 00007f7b4f4b5fa0 RCX: 00007f7b4f22e2d9
[   73.482292][ T2187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   73.490296][ T2187] RBP: 00007f7b4f2c5888 R08: 0000000000000000 R09: 0000000000000000
[   73.498286][ T2187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.506275][ T2187] R13: 00007f7b4f4b6038 R14: 00007f7b4f4b5fa0 R15: 00007ffe266bbae8
[   73.619303][ T2192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'.
[   73.661581][ T2192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'.
[   73.730420][ T2195] FAULT_INJECTION: forcing a failure.
[   73.730420][ T2195] name failslab, interval 1, probability 0, space 0, times 0
[   73.764820][ T2195] CPU: 0 PID: 2195 Comm: syz.3.667 Not tainted syzkaller #0
[   73.772178][ T2195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   73.782292][ T2195] Call Trace:
[   73.785624][ T2195]  __dump_stack+0x21/0x24
[   73.789997][ T2195]  dump_stack_lvl+0x1a7/0x208
[   73.794732][ T2195]  ? thaw_kernel_threads+0x220/0x220
[   73.800068][ T2195]  ? show_regs_print_info+0x18/0x18
[   73.805703][ T2195]  dump_stack+0x15/0x1c
[   73.810002][ T2195]  should_fail+0x3ab/0x500
[   73.814704][ T2195]  ? __alloc_file+0x28/0x320
[   73.819332][ T2195]  __should_failslab+0xa4/0xe0
[   73.824117][ T2195]  should_failslab+0x9/0x20
[   73.828637][ T2195]  kmem_cache_alloc+0x3d/0x2d0
[   73.833421][ T2195]  __alloc_file+0x28/0x320
[   73.837856][ T2195]  alloc_empty_file+0x97/0x180
[   73.842630][ T2195]  alloc_file+0x59/0x580
[   73.846886][ T2195]  alloc_file_pseudo+0x180/0x200
[   73.851923][ T2195]  ? alloc_empty_file_noaccount+0x80/0x80
[   73.857661][ T2195]  sock_alloc_file+0xba/0x260
[   73.862433][ T2195]  __sys_socketpair+0x386/0x590
[   73.867382][ T2195]  __x64_sys_socketpair+0x9b/0xb0
[   73.872417][ T2195]  do_syscall_64+0x31/0x40
[   73.876872][ T2195]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   73.882778][ T2195] RIP: 0033:0x7f7b4f22e2d9
[   73.887206][ T2195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.906839][ T2195] RSP: 002b:00007f7b4dc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[   73.915303][ T2195] RAX: ffffffffffffffda RBX: 00007f7b4f4b5fa0 RCX: 00007f7b4f22e2d9
[   73.923302][ T2195] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[   73.931299][ T2195] RBP: 00007f7b4f2c5888 R08: 0000000000000000 R09: 0000000000000000
[   73.939299][ T2195] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[   73.947290][ T2195] R13: 00007f7b4f4b6038 R14: 00007f7b4f4b5fa0 R15: 00007ffe266bbae8
[   73.955888][  T414] tipc: 32-bit node address hash set to f1414ac
[   74.048322][ T2197] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noauto_da_alloc,,errors=continue
[   74.246511][ T2219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'.
[   74.259160][ T2219] IPv6: sit1: Disabled Multicast RS
[   74.270650][ T2219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.676'.
[   74.362208][ T2231] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   74.423332][ T2227] FAULT_INJECTION: forcing a failure.
[   74.423332][ T2227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.436626][ T2227] CPU: 0 PID: 2227 Comm: syz.3.680 Not tainted syzkaller #0
[   74.443934][ T2227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   74.454191][ T2227] Call Trace:
[   74.457528][ T2227]  __dump_stack+0x21/0x24
[   74.461884][ T2227]  dump_stack_lvl+0x1a7/0x208
[   74.466647][ T2227]  ? thaw_kernel_threads+0x220/0x220
[   74.471971][ T2227]  ? show_regs_print_info+0x18/0x18
[   74.477467][ T2227]  ? cont_write_begin+0x61e/0x8b0
[   74.482529][ T2227]  ? futex_wait_queue_me+0x2ea/0x510
[   74.487850][ T2227]  dump_stack+0x15/0x1c
[   74.492042][ T2227]  should_fail+0x3ab/0x500
[   74.496645][ T2227]  should_fail_usercopy+0x1a/0x20
[   74.501710][ T2227]  iov_iter_copy_from_user_atomic+0x32e/0xad0
[   74.507816][ T2227]  ? fat_write_begin+0xba/0x170
[   74.512746][ T2227]  generic_perform_write+0x334/0x540
[   74.518069][ T2227]  ? __mark_inode_dirty+0x615/0x960
[   74.523297][ T2227]  ? grab_cache_page_write_begin+0xb0/0xb0
[   74.529139][ T2227]  ? file_remove_privs+0x590/0x590
[   74.534284][ T2227]  ? __kasan_check_write+0x14/0x20
[   74.539424][ T2227]  ? down_write+0xb2/0x120
[   74.543867][ T2227]  __generic_file_write_iter+0x24b/0x480
[   74.549754][ T2227]  ? generic_write_checks+0x3bf/0x480
[   74.555555][ T2227]  generic_file_write_iter+0xa9/0x1d0
[   74.560974][ T2227]  vfs_write+0x770/0xd70
[   74.565258][ T2227]  ? kernel_write+0x3c0/0x3c0
[   74.570064][ T2227]  ? mutex_lock+0x92/0xf0
[   74.574436][ T2227]  ? mutex_trylock+0xb0/0xb0
[   74.579076][ T2227]  ? __fget_files+0x2e1/0x340
[   74.583804][ T2227]  ? __fdget+0x1a1/0x230
[   74.588097][ T2227]  ? __x64_sys_pwrite64+0xf3/0x220
[   74.593250][ T2227]  __x64_sys_pwrite64+0x194/0x220
[   74.598318][ T2227]  ? ksys_pwrite64+0x1b0/0x1b0
[   74.603210][ T2227]  ? __kasan_check_read+0x11/0x20
[   74.608302][ T2227]  ? exit_to_user_mode_prepare+0x9a/0xa0
[   74.613971][ T2227]  do_syscall_64+0x31/0x40
[   74.618708][ T2227]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   74.624642][ T2227] RIP: 0033:0x7f7b4f22e2d9
[   74.629101][ T2227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.648957][ T2227] RSP: 002b:00007f7b4dc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[   74.657785][ T2227] RAX: ffffffffffffffda RBX: 00007f7b4f4b5fa0 RCX: 00007f7b4f22e2d9
[   74.665981][ T2227] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000005
[   74.674071][ T2227] RBP: 00007f7b4f2c5888 R08: 0000000000000000 R09: 0000000000000000
[   74.682177][ T2227] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000
[   74.690281][ T2227] R13: 00007f7b4f4b6038 R14: 00007f7b4f4b5fa0 R15: 00007ffe266bbae8
[   74.701092][ T2227] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[   74.709013][ T2227] FAT-fs (loop3): Filesystem has been set read-only
[   74.716289][ T2227] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[   74.724574][ T2227] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[   74.748960][ T1890] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   74.759652][ T1890] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   74.771859][ T2236] erofs: (device loop2): mounted with root inode @ nid 36.
[   74.795862][    T9] attempt to access beyond end of device
[   74.795862][    T9] loop3: rw=1, want=17179852770, limit=512
[   74.819292][  T112] tipc: Disabling bearer <udp:syz2>
[   74.824866][  T112] tipc: Left network mode
[   74.857478][  T418] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   75.007076][ T2239] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.014609][ T2239] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.022371][ T2239] device bridge_slave_0 entered promiscuous mode
[   75.031894][ T2239] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.039053][ T2239] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.044649][ T2244] kvm: pic: single mode not supported
[   75.046896][ T2244] kvm: pic: non byte read
[   75.048522][ T2239] device bridge_slave_1 entered promiscuous mode
[   75.054261][ T2244] kvm: pic: non byte read
[   75.070055][ T2244] kvm: pic: single mode not supported
[   75.070110][ T2244] kvm: pic: non byte read
[   75.107493][  T418] usb 10-1: Using ep0 maxpacket: 8
[   75.141320][ T2239] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.148445][ T2239] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.155728][ T2239] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.162823][ T2239] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.185969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.194174][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.201953][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.217172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.226161][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.233261][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.240990][  T418] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   75.260538][ T2250] netlink: 'syz.5.688': attribute type 4 has an invalid length.
[   75.275682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.284339][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.291653][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.301973][ T2250] netlink: 'syz.5.688': attribute type 4 has an invalid length.
[   75.317735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.327615][  T418] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   75.343256][  T418] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   75.352831][  T418] usb 10-1: SerialNumber: syz
[   75.362955][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.380604][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.393735][ T2239] device veth0_vlan entered promiscuous mode
[   75.402191][  T112] device bridge_slave_1 left promiscuous mode
[   75.408656][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.416360][  T112] device bridge_slave_0 left promiscuous mode
[   75.424319][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.432766][  T112] device veth1_macvtap left promiscuous mode
[   75.439158][  T112] device veth0_vlan left promiscuous mode
[   75.531683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.547978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.566292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.588537][ T2239] device veth1_macvtap entered promiscuous mode
[   75.613412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.628471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.648760][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.880045][ T2274] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   75.894846][ T2274] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   75.912653][ T2274] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   76.079602][  T418] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42
[   76.420859][  T300] usb 10-1: USB disconnect, device number 2
[   76.988154][   T24] kauditd_printk_skb: 18 callbacks suppressed
[   76.988173][   T24] audit: type=1400 audit(1791925139.533:462): avc:  denied  { write } for  pid=2280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   77.017345][   T24] audit: type=1400 audit(1791925139.533:463): avc:  denied  { add_name } for  pid=2280 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   77.040138][   T24] audit: type=1400 audit(1791925139.533:464): avc:  denied  { create } for  pid=2280 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   77.062617][   T24] audit: type=1400 audit(1791925139.533:465): avc:  denied  { write } for  pid=2280 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=1915 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   77.088747][   T24] audit: type=1400 audit(1791925139.533:466): avc:  denied  { append } for  pid=2280 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=1915 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   77.198179][   T24] audit: type=1400 audit(1791925139.753:467): avc:  denied  { remove_name } for  pid=2294 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1915 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   77.333400][   T24] audit: type=1400 audit(1791925139.783:468): avc:  denied  { unlink } for  pid=2294 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1915 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   77.393628][ T2301] netlink: 12 bytes leftover after parsing attributes in process `syz.9.700'.
[   77.539685][  T300] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device
[   77.690323][   T24] audit: type=1400 audit(1791925140.243:469): avc:  denied  { read } for  pid=2319 comm="syz.9.703" name="usbmon3" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   77.747960][   T24] audit: type=1400 audit(1791925140.243:470): avc:  denied  { open } for  pid=2319 comm="syz.9.703" path="/dev/usbmon3" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   77.781134][ T2330] ip_tables: iptables: counters copy to user failed while replacing table
[   77.818354][   T24] audit: type=1400 audit(1791925140.243:471): avc:  denied  { ioctl } for  pid=2319 comm="syz.9.703" path="/dev/usbmon3" dev="devtmpfs" ino=163 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   78.167488][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   78.368059][ T2367] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   78.377868][ T2367] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   78.387045][ T2367] F2FS-fs (loop4): invalid crc value
[   78.409996][ T2367] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   78.441460][ T2367] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   78.448800][ T2367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   78.490378][ T2239] attempt to access beyond end of device
[   78.490378][ T2239] loop4: rw=2049, want=45104, limit=40427
[   78.826939][ T2401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   78.892943][ T2412] FAULT_INJECTION: forcing a failure.
[   78.892943][ T2412] name failslab, interval 1, probability 0, space 0, times 0
[   78.905866][ T2412] CPU: 0 PID: 2412 Comm: syz.2.732 Not tainted syzkaller #0
[   78.913321][ T2412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   78.923415][ T2412] Call Trace:
[   78.926739][ T2412]  __dump_stack+0x21/0x24
[   78.931091][ T2412]  dump_stack_lvl+0x1a7/0x208
[   78.935807][ T2412]  ? show_regs_print_info+0x18/0x18
[   78.941036][ T2412]  dump_stack+0x15/0x1c
[   78.945219][ T2412]  should_fail+0x3ab/0x500
[   78.949927][ T2412]  ? security_inode_alloc+0x33/0x110
[   78.955241][ T2412]  __should_failslab+0xa4/0xe0
[   78.960036][ T2412]  should_failslab+0x9/0x20
[   78.964574][ T2412]  kmem_cache_alloc+0x3d/0x2d0
[   78.969380][ T2412]  security_inode_alloc+0x33/0x110
[   78.974536][ T2412]  inode_init_always+0x725/0x9c0
[   78.979554][ T2412]  new_inode_pseudo+0x91/0x210
[   78.984352][ T2412]  new_inode+0x28/0x1e0
[   78.988626][ T2412]  shmem_get_inode+0x343/0x9d0
[   78.993465][ T2412]  shmem_tmpfile+0x51/0x100
[   78.999062][ T2412]  vfs_tmpfile+0x1ef/0x2c0
[   79.003514][ T2412]  ovl_get_workdir+0x53a/0xe30
[   79.008541][ T2412]  ? _raw_spin_unlock+0x4d/0x70
[   79.013427][ T2412]  ? ovl_get_upper+0x4af/0x660
[   79.018263][ T2412]  ? ovl_get_upper+0x660/0x660
[   79.023048][ T2412]  ? ovl_fill_super+0x3f50/0x3f50
[   79.028090][ T2412]  ? ovl_fill_super+0x1223/0x3f50
[   79.033131][ T2412]  ovl_fill_super+0x1b5c/0x3f50
[   79.038000][ T2412]  ? ovl_mount+0x40/0x40
[   79.042257][ T2412]  ? idr_replace+0x133/0x1a0
[   79.046867][ T2412]  ? idr_get_next+0x340/0x340
[   79.051556][ T2412]  ? down_write+0xb2/0x120
[   79.055983][ T2412]  ? down_read_killable+0xe0/0xe0
[   79.061022][ T2412]  ? __kasan_check_write+0x14/0x20
[   79.066151][ T2412]  ? sget+0x4a0/0x4c0
[   79.070152][ T2412]  ? free_anon_bdev+0x30/0x30
[   79.074851][ T2412]  ? ovl_mount+0x40/0x40
[   79.079106][ T2412]  mount_nodev+0x5c/0xf0
[   79.083572][ T2412]  ovl_mount+0x2c/0x40
[   79.087652][ T2412]  legacy_get_tree+0xed/0x190
[   79.092340][ T2412]  ? virtio_fs_request_complete+0xab0/0xab0
[   79.097821][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   79.098284][ T2412]  vfs_get_tree+0x89/0x260
[   79.110407][ T2412]  do_new_mount+0x25a/0xa30
[   79.114925][ T2412]  path_mount+0x581/0xca0
[   79.119266][ T2412]  __se_sys_mount+0x320/0x390
[   79.123955][ T2412]  ? __x64_sys_mount+0xd0/0xd0
[   79.128815][ T2412]  __x64_sys_mount+0xbf/0xd0
[   79.133417][ T2412]  do_syscall_64+0x31/0x40
[   79.137947][ T2412]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   79.143853][ T2412] RIP: 0033:0x7f703df6f2d9
[   79.148279][ T2412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.167898][ T2412] RSP: 002b:00007f703c9c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   79.176329][ T2412] RAX: ffffffffffffffda RBX: 00007f703e1f6fa0 RCX: 00007f703df6f2d9
[   79.184316][ T2412] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000000
[   79.192306][ T2412] RBP: 00007f703e006888 R08: 0000200000000480 R09: 0000000000000000
[   79.200323][ T2412] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[   79.208311][ T2412] R13: 00007f703e1f7038 R14: 00007f703e1f6fa0 R15: 00007ffd2aff8c28
[   79.219546][ T2412] overlayfs: upper fs does not support tmpfile.
[   79.422584][ T2429] EXT4-fs (loop9): Unrecognized mount option "fowner<00000000000000000000" or missing value
[   79.485864][ T2429] bridge0: port 3(syz_tun) entered blocking state
[   79.494343][ T2429] bridge0: port 3(syz_tun) entered disabled state
[   79.501908][ T2429] device syz_tun entered promiscuous mode
[   79.509637][ T2429] bridge0: port 3(syz_tun) entered blocking state
[   79.516116][ T2429] bridge0: port 3(syz_tun) entered listening state
[   79.528846][ T2429] bridge0: port 3 config from 02:00:00:00:00:01 (message_age 21416l > max_age 12867l)
[   79.557456][  T418] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   79.680400][ T2440] EXT4-fs (loop9): Test dummy encryption mode enabled
[   79.690479][ T2440] EXT4-fs (loop9): Ignoring removed orlov option
[   79.700555][ T2440] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[   79.728056][ T2440] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0003]
[   79.736228][ T2440] System zones: 0-5
[   79.751909][ T2440] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,orlov,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,
[   79.809334][ T2438] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   79.821389][ T2438] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   79.830303][ T2440] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   79.839913][ T2438] F2FS-fs (loop5): invalid crc value
[   79.846854][ T2438] F2FS-fs (loop5): Found nat_bits in checkpoint
[   79.879807][ T2438] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   79.887045][ T2438] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   79.937565][  T418] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.957811][ T2437] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   79.967763][  T418] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.977157][ T2437] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   79.977717][  T418] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.977754][  T418] usb 3-1: config 0 interface 0 has no altsetting 0
[   80.006359][ T2437] F2FS-fs (loop4): invalid crc value
[   80.012153][  T418] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00
[   80.021963][  T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.031568][  T418] usb 3-1: config 0 descriptor??
[   80.059001][ T2437] F2FS-fs (loop4): Found nat_bits in checkpoint
[   80.102038][ T2437] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   80.109290][ T2437] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   80.377497][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.518124][ T2422] udc-core: couldn't find an available UDC or it's busy
[   80.526926][ T2422] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   80.545096][ T2422] udc-core: couldn't find an available UDC or it's busy
[   80.552404][ T2422] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   80.637488][  T418] usbhid 3-1:0.0: can't add hid device: -71
[   80.643565][  T418] usbhid: probe of 3-1:0.0 failed with error -71
[   80.673667][  T418] usb 3-1: USB disconnect, device number 5
[   81.087048][ T2491] device bridge_slave_0 left promiscuous mode
[   81.096028][ T2491] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.239912][ T2507] ip_tables: iptables: counters copy to user failed while replacing table
[   81.442969][ T2530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.778'.
[   81.534300][ T2532] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   81.670697][ T2538] wireguard: wg0: Could not create IPv6 socket
[   81.727758][  T414] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   81.852044][ T2540] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   81.872110][ T2540] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   81.925546][ T2540] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,norecovery,nomblk_io_submit,delalloc,nolazytime,
[   81.965018][ T2540] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.987572][  T414] usb 5-1: Using ep0 maxpacket: 8
[   82.107503][  T414] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   82.115801][  T414] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[   82.127549][  T414] usb 5-1: config 179 has no interface number 0
[   82.133849][  T414] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[   82.148918][  T414] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   82.158450][  T414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.170430][   T24] kauditd_printk_skb: 11 callbacks suppressed
[   82.170443][   T24] audit: type=1326 audit(1791925144.723:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb68902d9 code=0x7ffc0000
[   82.207619][   T24] audit: type=1326 audit(1791925144.753:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfb68902d9 code=0x7ffc0000
[   82.233027][ T2548] netlink: 4 bytes leftover after parsing attributes in process `syz.9.784'.
[   82.245937][   T24] audit: type=1326 audit(1791925144.753:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb68902d9 code=0x7ffc0000
[   82.280296][   T24] audit: type=1326 audit(1791925144.753:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb68902d9 code=0x7ffc0000
[   82.312610][   T24] audit: type=1326 audit(1791925144.753:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfb6891b47 code=0x7ffc0000
[   82.337735][   T24] audit: type=1326 audit(1791925144.753:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdfb6850b0e code=0x7ffc0000
[   82.363465][   T24] audit: type=1326 audit(1791925144.753:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdfb6850b0e code=0x7ffc0000
[   82.402556][   T24] audit: type=1326 audit(1791925144.753:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdfb6890042 code=0x7ffc0000
[   82.447770][ T2527] faulting far call emulation tainted memory
[   82.453921][   T24] audit: type=1326 audit(1791925144.753:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdfb6890107 code=0x7ffc0000
[   82.461610][  T414] usb 5-1: USB disconnect, device number 2
[   82.505517][ T2566] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   82.507844][  T300] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   82.532702][   T24] audit: type=1326 audit(1791925144.753:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.9.784" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdfb6890107 code=0x7ffc0000
[   82.767460][  T300] usb 10-1: Using ep0 maxpacket: 32
[   82.967693][  T300] usb 10-1: config 9 has an invalid interface number: 180 but max is 0
[   82.976443][  T300] usb 10-1: config 9 has no interface number 0
[   82.982933][  T300] usb 10-1: config 9 interface 180 altsetting 118 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   82.994743][  T300] usb 10-1: config 9 interface 180 altsetting 118 bulk endpoint 0x5 has invalid maxpacket 8
[   83.016899][  T300] usb 10-1: config 9 interface 180 altsetting 118 endpoint 0x4 has invalid maxpacket 512, setting to 64
[   83.034986][  T300] usb 10-1: config 9 interface 180 altsetting 118 endpoint 0x3 has invalid maxpacket 1040, setting to 64
[   83.056612][  T300] usb 10-1: config 9 interface 180 altsetting 118 has an invalid endpoint with address 0x0, skipping
[   83.082298][  T300] usb 10-1: config 9 interface 180 altsetting 118 has a duplicate endpoint with address 0x5, skipping
[   83.095501][  T300] usb 10-1: config 9 interface 180 altsetting 118 has an invalid endpoint with address 0x0, skipping
[   83.107048][  T300] usb 10-1: config 9 interface 180 altsetting 118 bulk endpoint 0xB has invalid maxpacket 32
[   83.117881][  T300] usb 10-1: config 9 interface 180 altsetting 118 bulk endpoint 0xE has invalid maxpacket 64
[   83.128381][  T300] usb 10-1: config 9 interface 180 altsetting 118 has a duplicate endpoint with address 0x5, skipping
[   83.139654][  T300] usb 10-1: config 9 interface 180 altsetting 118 endpoint 0xF has invalid maxpacket 959, setting to 64
[   83.159111][  T300] usb 10-1: config 9 interface 180 has no altsetting 0
[   83.223073][ T2570] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   83.276834][ T2581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   83.284244][ T2581] IPv6: NLM_F_CREATE should be set when creating new route
[   83.328224][  T300] usb 10-1: New USB device found, idVendor=0b05, idProduct=17ba, bcdDevice=db.c8
[   83.338113][  T300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.346312][  T300] usb 10-1: Product: syz
[   83.351322][  T300] usb 10-1: Manufacturer: 첓䳞䥨宫闻ళ�冰Ωዥ걿璛޵ﹶ蛻㤱�芞㈀�橾借�꯫�籪뢩娵䗮壔罯溥趮呛ꧨ�姺맼Ἔ᤹ﻦ⋌�Ϲ蜜㷄苷��붋櫈
[   83.371827][  T300] usb 10-1: SerialNumber: syz
[   83.418249][ T2548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   83.437261][ T2548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   83.477558][ T2548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   83.596438][ T2581] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.784022][  T300] usb 10-1: USB disconnect, device number 3
[   84.420532][ T2613] tipc: Started in network mode
[   84.425568][ T2613] tipc: Own node identity ac14140f, cluster identity 4711
[   84.443200][ T2613] tipc: Enabled bearer <udp:syz2>, priority 10
[   84.523110][ T2613] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   84.551423][ T2613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[   84.564188][ T2613] EXT4-fs (loop4): orphan cleanup on readonly fs
[   84.580540][ T2613] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #11: comm syz.4.807: attempt to clear invalid blocks 1024 len 1
[   84.593829][ T2613] EXT4-fs (loop4): Remounting filesystem read-only
[   84.600855][ T2613] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.807: bg 0: block 361: padding at end of block bitmap is not set
[   84.615514][ T2613] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   84.629330][ T2613] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.807: invalid indirect mapped block 1811939328 (level 0)
[   84.643984][ T2613] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.807: invalid indirect mapped block 2185560079 (level 1)
[   84.651683][ T2623] xt_hashlimit: size too large, truncated to 1048576
[   84.685706][ T2613] EXT4-fs (loop4): 1 truncate cleaned up
[   84.696236][ T2613] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009
[   85.557446][  T414] tipc: 32-bit node address hash set to f1414ac
[   86.597495][  T576] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   86.957547][  T576] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[   86.965996][  T576] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   86.989849][  T576] usb 6-1: config 220 has no interface number 2
[   86.996292][  T576] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   87.010211][  T576] usb 6-1: config 220 interface 0 has no altsetting 0
[   87.017273][  T576] usb 6-1: config 220 interface 76 has no altsetting 0
[   87.025293][  T576] usb 6-1: config 220 interface 1 has no altsetting 0
[   87.207486][  T576] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   87.216571][  T576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.237056][  T576] usb 6-1: Product: syz
[   87.249966][  T576] usb 6-1: Manufacturer: syz
[   87.254623][  T576] usb 6-1: SerialNumber: syz
[   87.337936][ T2644] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   87.360436][ T2644] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[   87.360436][ T2644] 
[   87.392634][ T2644] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   87.466169][ T2648] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   87.541243][   T24] kauditd_printk_skb: 62 callbacks suppressed
[   87.541257][   T24] audit: type=1400 audit(1791925150.093:555): avc:  denied  { map } for  pid=2647 comm="syz.9.820" path="/68/file1/memory.events.local" dev="loop9" ino=1048764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.647691][  T576] usb 6-1: selecting invalid altsetting 0
[   87.659224][  T576] uvcvideo: Found UVC 7.01 device syz (8086:0b07)
[   87.679384][  T576] uvcvideo: No valid video chain found.
[   87.751476][ T2653] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000d4d,grpquota,,errors=continue
[   87.764257][  T576] usb 6-1: USB disconnect, device number 4
[   87.809889][ T2653] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.884605][   T24] audit: type=1400 audit(1791925150.433:556): avc:  denied  { shutdown } for  pid=2660 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   87.957836][   T24] audit: type=1400 audit(1791925150.453:557): avc:  denied  { read } for  pid=2660 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   88.059861][ T2666] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.827'.
[   88.102453][   T24] audit: type=1400 audit(1791925150.653:558): avc:  denied  { remount } for  pid=2669 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   88.161098][   T24] audit: type=1400 audit(1791925150.683:559): avc:  denied  { mounton } for  pid=2669 comm="syz.5.829" path="/188/file0" dev="ramfs" ino=28801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   88.213817][   T24] audit: type=1400 audit(1791925150.693:560): avc:  denied  { unmount } for  pid=387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   88.309930][ T2653] EXT4-fs (loop2): shut down requested (2)
[   88.326857][ T2653] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=12
[   88.330066][   T24] audit: type=1400 audit(1791925150.873:561): avc:  denied  { search } for  pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.336148][ T2653] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=12
[   88.377473][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   88.467492][  T576] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   88.717453][  T576] usb 5-1: Using ep0 maxpacket: 8
[   88.927600][  T576] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 118, changing to 7
[   89.107583][  T576] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   89.117017][  T576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.125524][  T576] usb 5-1: Product: syz
[   89.130142][  T576] usb 5-1: Manufacturer: syz
[   89.134819][  T576] usb 5-1: SerialNumber: syz
[   89.341393][ T2698] tipc: Started in network mode
[   89.346630][ T2698] tipc: Own node identity 7f000001, cluster identity 4711
[   89.353911][ T2698] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   89.395559][ T2672] netlink: 'syz.4.826': attribute type 16 has an invalid length.
[   89.403729][ T2672] netlink: 'syz.4.826': attribute type 17 has an invalid length.
[   89.414066][ T2672] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   89.547517][  T576] usb 5-1: Audio class v2/v3 interfaces need an interface association
[   89.556105][  T576] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[   89.565200][  T576] usb 5-1: USB disconnect, device number 3
[   91.445247][ T2736] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   91.467903][ T2738] ip_tables: iptables: counters copy to user failed while replacing table
[   91.617282][ T2744] fuse: Bad value for 'fd'
[   91.696626][ T2733] F2FS-fs (loop2): invalid crc value
[   91.722481][ T2733] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   91.764852][ T2733] F2FS-fs (loop2): Start checkpoint disabled!
[   91.771755][ T2733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   91.794525][ T2733] device bridge_slave_1 left promiscuous mode
[   91.800829][ T2733] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.538655][ T2776] tipc: Started in network mode
[   92.552473][ T2776] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711
[   92.576095][ T2776] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[   92.610692][ T2776] tipc: Enabled bearer <udp:syz0>, priority 10
[   92.634523][ T2777] netlink: 4 bytes leftover after parsing attributes in process `syz.9.869'.
[   92.650109][ T2777] device syz_tun left promiscuous mode
[   92.671278][ T2777] bridge0: port 3(syz_tun) entered disabled state
[   92.692552][ T2779] cgroup: syz.2.870 (2779) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   92.709542][ T2777] device bridge_slave_1 left promiscuous mode
[   92.721365][ T2777] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.749456][ T2777] device bridge_slave_0 left promiscuous mode
[   92.751714][ T2779] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   92.776994][ T2777] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.924537][   T24] audit: type=1400 audit(1791925155.473:562): avc:  denied  { map } for  pid=2781 comm="syz.9.871" path="socket:[29881]" dev="sockfs" ino=29881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   93.103046][ T2784] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[   93.117526][ T2784] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.144788][ T2784] fs-verity: sha512 using implementation "sha512-avx2"
[   93.454706][ T2801] tipc: Failed to remove local publication {66,0,0}/2773597001
[   93.474015][ T2801] tipc: Failed to remove local publication {66,0,0}/2773597000
[   93.608170][  T576] tipc: 32-bit node address hash set to 1000000
[   93.668320][ T2812] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[   93.695649][ T2812] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[   93.708053][ T2812] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   93.758189][ T2812] EXT4-fs (loop5): 1 truncate cleaned up
[   93.766280][ T2812] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue
[   93.808788][ T2823] binder: 2822:2823 ioctl c0306201 200000000100 returned -14
[   93.823363][ T2823] binder: 2822:2823 ioctl c0306201 200000000200 returned -14
[   94.047533][   T24] audit: type=1400 audit(1791925156.593:563): avc:  denied  { watch watch_reads } for  pid=2833 comm="syz.9.892" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   94.222918][ T2843] netlink: 'syz.2.896': attribute type 5 has an invalid length.
[   94.424407][ T2855] FAULT_INJECTION: forcing a failure.
[   94.424407][ T2855] name failslab, interval 1, probability 0, space 0, times 0
[   94.455546][ T2855] CPU: 1 PID: 2855 Comm: syz.5.901 Not tainted syzkaller #0
[   94.461172][ T2856] FAULT_INJECTION: forcing a failure.
[   94.461172][ T2856] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   94.462990][ T2855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.486356][ T2855] Call Trace:
[   94.489718][ T2855]  __dump_stack+0x21/0x24
[   94.494093][ T2855]  dump_stack_lvl+0x1a7/0x208
[   94.498886][ T2855]  ? show_regs_print_info+0x18/0x18
[   94.504117][ T2855]  dump_stack+0x15/0x1c
[   94.508297][ T2855]  should_fail+0x3ab/0x500
[   94.512957][ T2855]  ? tipc_msg_create+0x44/0x560
[   94.517839][ T2855]  __should_failslab+0xa4/0xe0
[   94.522712][ T2855]  should_failslab+0x9/0x20
[   94.527240][ T2855]  __kmalloc_track_caller+0x5f/0x310
[   94.532723][ T2855]  ? kmem_cache_alloc+0x15a/0x2d0
[   94.537870][ T2855]  ? __alloc_skb+0x9e/0x520
[   94.542399][ T2855]  ? tipc_msg_create+0x44/0x560
[   94.547271][ T2855]  __alloc_skb+0xdc/0x520
[   94.551715][ T2855]  tipc_msg_create+0x44/0x560
[   94.556463][ T2855]  ? stack_trace_snprint+0xe0/0xe0
[   94.561616][ T2855]  tipc_group_proto_xmit+0x155/0x840
[   94.566959][ T2855]  tipc_group_delete+0x13b/0x460
[   94.571927][ T2855]  ? __x64_sys_close_range+0x7a/0x90
[   94.577233][ T2855]  ? do_syscall_64+0x31/0x40
[   94.581848][ T2855]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   94.588111][ T2855]  ? tipc_group_update_member+0x3f0/0x3f0
[   94.593857][ T2855]  ? __tipc_shutdown+0x9f6/0x14b0
[   94.598901][ T2855]  ? tipc_group_self+0x25/0x1c0
[   94.603775][ T2855]  tipc_sk_leave+0x137/0x4f0
[   94.608398][ T2855]  ? tipc_recvstream+0xe70/0xe70
[   94.613358][ T2855]  ? fsnotify+0x19ce/0x1a90
[   94.617886][ T2855]  ? __tipc_shutdown+0x14b0/0x14b0
[   94.623039][ T2855]  tipc_release+0xac/0x1490
[   94.627654][ T2855]  sock_close+0xb8/0x200
[   94.632023][ T2855]  ? sock_mmap+0xa0/0xa0
[   94.636493][ T2855]  __fput+0x2dc/0x730
[   94.640502][ T2855]  ____fput+0x15/0x20
[   94.644592][ T2855]  task_work_run+0x127/0x190
[   94.649318][ T2855]  exit_to_user_mode_loop+0xcb/0xe0
[   94.654565][ T2855]  exit_to_user_mode_prepare+0x76/0xa0
[   94.660166][ T2855]  syscall_exit_to_user_mode+0x1d/0x40
[   94.665922][ T2855]  do_syscall_64+0x3d/0x40
[   94.670547][ T2855]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   94.676457][ T2855] RIP: 0033:0x7f5ca57e72d9
[   94.680890][ T2855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.700732][ T2855] RSP: 002b:00007f5ca4240028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   94.709247][ T2855] RAX: 0000000000000000 RBX: 00007f5ca5a6efa0 RCX: 00007f5ca57e72d9
[   94.717325][ T2855] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[   94.725320][ T2855] RBP: 00007f5ca587e888 R08: 0000000000000000 R09: 0000000000000000
[   94.733308][ T2855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.741294][ T2855] R13: 00007f5ca5a6f038 R14: 00007f5ca5a6efa0 R15: 00007ffd4f5a3618
[   94.749595][ T2856] CPU: 0 PID: 2856 Comm: syz.2.902 Not tainted syzkaller #0
[   94.757124][ T2856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.767213][ T2856] Call Trace:
[   94.770616][ T2856]  __dump_stack+0x21/0x24
[   94.774961][ T2856]  dump_stack_lvl+0x1a7/0x208
[   94.779684][ T2856]  ? show_regs_print_info+0x18/0x18
[   94.784896][ T2856]  ? switch_mm_irqs_off+0x34d/0x990
[   94.790110][ T2856]  ? __switch_to_asm+0x3a/0x60
[   94.794886][ T2856]  dump_stack+0x15/0x1c
[   94.799060][ T2856]  should_fail+0x3ab/0x500
[   94.803490][ T2856]  should_fail_alloc_page+0x4f/0x60
[   94.808743][ T2856]  __alloc_pages_nodemask+0x11a/0x640
[   94.814331][ T2856]  ? __irq_exit_rcu+0x40/0x150
[   94.819104][ T2856]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   94.824857][ T2856]  ? __kasan_check_read+0x11/0x20
[   94.829897][ T2856]  ? preempt_schedule_common+0xbe/0xf0
[   94.835455][ T2856]  ? schedule_preempt_disabled+0x20/0x20
[   94.841096][ T2856]  __get_free_pages+0xe/0x30
[   94.845700][ T2856]  __tlb_remove_page_size+0x18a/0x310
[   94.851259][ T2856]  unmap_page_range+0x1303/0x2190
[   94.856382][ T2856]  ? _raw_spin_unlock_irq+0x4e/0x70
[   94.861598][ T2856]  ? __sched_text_start+0x8/0x8
[   94.866459][ T2856]  ? copy_page_range+0x27a0/0x27a0
[   94.871688][ T2856]  ? __kasan_check_read+0x11/0x20
[   94.876758][ T2856]  ? preempt_schedule_irq+0xca/0x120
[   94.882254][ T2856]  unmap_vmas+0x25f/0x360
[   94.886600][ T2856]  ? unmap_page_range+0x2190/0x2190
[   94.891836][ T2856]  exit_mmap+0x309/0x590
[   94.896123][ T2856]  ? vm_brk+0x30/0x30
[   94.900136][ T2856]  ? mutex_lock+0x92/0xf0
[   94.904918][ T2856]  ? mutex_unlock+0x1c/0x40
[   94.909434][ T2856]  __mmput+0x92/0x2d0
[   94.913512][ T2856]  mmput+0x4e/0x150
[   94.917345][ T2856]  do_exit+0x9d8/0x24e0
[   94.921516][ T2856]  ? put_task_struct+0x90/0x90
[   94.926291][ T2856]  ? __kasan_check_write+0x14/0x20
[   94.931417][ T2856]  ? _raw_spin_lock_irq+0x95/0xf0
[   94.936722][ T2856]  do_group_exit+0x149/0x310
[   94.941328][ T2856]  ? __kasan_check_write+0x14/0x20
[   94.946461][ T2856]  ? recalc_sigpending+0x1ac/0x230
[   94.951905][ T2856]  get_signal+0xfb1/0x1300
[   94.956336][ T2856]  arch_do_signal_or_restart+0xe7/0x11b0
[   94.961975][ T2856]  ? errseq_sample+0x44/0x70
[   94.966611][ T2856]  ? futex_exit_release+0x1e0/0x1e0
[   94.971835][ T2856]  ? alloc_file_pseudo+0x1aa/0x200
[   94.977160][ T2856]  ? __ia32_sys_rt_sigreturn+0x730/0x730
[   94.982834][ T2856]  ? __se_sys_futex+0x2ba/0x370
[   94.987703][ T2856]  ? fpu__clear_all+0x20/0x20
[   94.992848][ T2856]  exit_to_user_mode_loop+0xa2/0xe0
[   94.998073][ T2856]  exit_to_user_mode_prepare+0x76/0xa0
[   95.003560][ T2856]  syscall_exit_to_user_mode+0x1d/0x40
[   95.009260][ T2856]  do_syscall_64+0x3d/0x40
[   95.013790][ T2856]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   95.019707][ T2856] RIP: 0033:0x7f703df6f2d9
[   95.024216][ T2856] Code: Unable to access opcode bytes at RIP 0x7f703df6f2af.
[   95.031783][ T2856] RSP: 002b:00007f703c9c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   95.040296][ T2856] RAX: fffffffffffffe00 RBX: 00007f703e1f6fa8 RCX: 00007f703df6f2d9
[   95.048283][ T2856] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f703e1f6fa8
[   95.056297][ T2856] RBP: 00007f703e1f6fa0 R08: 0000000000000000 R09: 0000000000000000
[   95.064393][ T2856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.072382][ T2856] R13: 00007f703e1f7038 R14: 00007ffd2aff8b40 R15: 00007ffd2aff8c28
[   95.614875][   T24] audit: type=1400 audit(1791925158.163:564): avc:  denied  { getopt } for  pid=2865 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   95.808175][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.815462][ T2881] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.824616][ T2881] device bridge_slave_0 entered promiscuous mode
[   95.832203][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.839357][ T2881] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.847019][ T2881] device bridge_slave_1 entered promiscuous mode
[   95.926048][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.933173][ T2881] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.940684][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.947852][ T2881] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.028235][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.037900][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.056696][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.079195][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   96.097870][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.105143][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.130453][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   96.159625][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.166832][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.198951][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   96.248002][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.270545][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   96.301181][ T2881] device veth0_vlan entered promiscuous mode
[   96.313350][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.347572][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   96.373119][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.400099][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.424925][ T2881] device veth1_macvtap entered promiscuous mode
[   96.454359][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   96.479411][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   96.549133][    T9] device veth1_macvtap left promiscuous mode
[   96.557561][    T9] device veth0_vlan left promiscuous mode
[   97.320871][ T2943] netlink: 'syz.5.935': attribute type 4 has an invalid length.
[   97.353790][   T24] audit: type=1326 audit(1791925159.903:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.5.936" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ca57e72d9 code=0x0
[   97.458305][ T2950] overlayfs: failed to clone upperpath
[   97.478430][ T2954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'.
[   97.902280][ T2976] ip_tables: iptables: counters copy to user failed while replacing table
[   98.149678][   T24] audit: type=1400 audit(1791925160.703:566): avc:  denied  { map } for  pid=2989 comm="syz.1.954" path="socket:[31901]" dev="sockfs" ino=31901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   98.377178][   T24] audit: type=1400 audit(1791925160.923:567): avc:  denied  { mounton } for  pid=2999 comm="syz.4.958" path="/60/file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   98.419059][   T24] audit: type=1400 audit(1791925160.953:568): avc:  denied  { watch } for  pid=2999 comm="syz.4.958" path="/60/file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   98.477569][ T3004] netlink: 'syz.4.959': attribute type 7 has an invalid length.
[   98.497445][ T3004] netlink: 'syz.4.959': attribute type 8 has an invalid length.
[   98.505513][ T3002] netlink: 'syz.4.959': attribute type 7 has an invalid length.
[   98.516831][ T3002] netlink: 'syz.4.959': attribute type 8 has an invalid length.
[   98.597439][ T3014] netlink: 'syz.9.964': attribute type 4 has an invalid length.
[   98.614905][ T3014] netlink: 'syz.9.964': attribute type 4 has an invalid length.
[   98.748592][ T3025] netlink: 12 bytes leftover after parsing attributes in process `syz.9.969'.
[   98.762990][ T3025] HTB: quantum of class 80050002 is big. Consider r2q change.
[   98.865652][ T3032] ip_tables: iptables: counters copy to user failed while replacing table
[   98.984452][   T24] audit: type=1400 audit(1791925417.530:569): avc:  denied  { ioctl } for  pid=3034 comm="syz.1.973" path="socket:[32031]" dev="sockfs" ino=32031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   99.231571][ T3039] F2FS-fs (loop5): invalid crc value
[   99.249059][ T3039] F2FS-fs (loop5): Found nat_bits in checkpoint
[   99.304304][ T3039] F2FS-fs (loop5): Start checkpoint disabled!
[   99.313089][ T3039] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   99.352392][   T24] audit: type=1400 audit(1791925417.900:570): avc:  denied  { write } for  pid=3038 comm="syz.5.975" path="/217/file0/file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   99.422522][    T9] attempt to access beyond end of device
[   99.422522][    T9] loop5: rw=2049, want=40976, limit=40427
[  100.116479][ T3086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'.
[  100.130428][ T3086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'.
[  100.551597][ T3114] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  100.573227][ T3114] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  101.245475][   T24] audit: type=1400 audit(1791925419.795:571): avc:  denied  { link } for  pid=3139 comm="syz.2.1013" name="#2f" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  101.292381][ T3142] FAULT_INJECTION: forcing a failure.
[  101.292381][ T3142] name failslab, interval 1, probability 0, space 0, times 0
[  101.319966][   T24] audit: type=1400 audit(1791925419.795:572): avc:  denied  { rename } for  pid=3139 comm="syz.2.1013" name="#30" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  101.347704][ T3142] CPU: 1 PID: 3142 Comm: syz.2.1014 Not tainted syzkaller #0
[  101.355155][ T3142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  101.365242][ T3142] Call Trace:
[  101.368590][ T3142]  __dump_stack+0x21/0x24
[  101.372936][ T3142]  dump_stack_lvl+0x1a7/0x208
[  101.377813][ T3142]  ? show_regs_print_info+0x18/0x18
[  101.383028][ T3142]  dump_stack+0x15/0x1c
[  101.387478][ T3142]  should_fail+0x3ab/0x500
[  101.391943][ T3142]  ? anon_vma_clone+0xb7/0x4c0
[  101.396731][ T3142]  __should_failslab+0xa4/0xe0
[  101.401533][ T3142]  should_failslab+0x9/0x20
[  101.406504][ T3142]  kmem_cache_alloc+0x3d/0x2d0
[  101.411378][ T3142]  anon_vma_clone+0xb7/0x4c0
[  101.416120][ T3142]  anon_vma_fork+0x8f/0x520
[  101.420652][ T3142]  copy_mm+0x8f9/0x13d0
[  101.424824][ T3142]  ? copy_signal+0x5f0/0x5f0
[  101.429430][ T3142]  ? __init_rwsem+0xd5/0x1c0
[  101.434071][ T3142]  ? copy_signal+0x4cc/0x5f0
[  101.438683][ T3142]  copy_process+0x1386/0x3320
[  101.443384][ T3142]  ? __pidfd_prepare+0x150/0x150
[  101.448332][ T3142]  ? rw_verify_area+0x1c0/0x360
[  101.453211][ T3142]  ? vfs_write+0xae4/0xd70
[  101.457845][ T3142]  kernel_clone+0x233/0x950
[  101.462362][ T3142]  ? kernel_write+0x3c0/0x3c0
[  101.467169][ T3142]  ? create_io_thread+0x170/0x170
[  101.472314][ T3142]  ? mutex_lock+0x92/0xf0
[  101.476668][ T3142]  __x64_sys_clone+0x198/0x210
[  101.481456][ T3142]  ? __ia32_sys_vfork+0x130/0x130
[  101.486668][ T3142]  ? switch_fpu_return+0x19c/0x330
[  101.491799][ T3142]  ? __kasan_check_read+0x11/0x20
[  101.496840][ T3142]  ? exit_to_user_mode_prepare+0x9a/0xa0
[  101.502576][ T3142]  do_syscall_64+0x31/0x40
[  101.507093][ T3142]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  101.512996][ T3142] RIP: 0033:0x7f703df6f2d9
[  101.517445][ T3142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.537251][ T3142] RSP: 002b:00007f703c9c7fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  101.545769][ T3142] RAX: ffffffffffffffda RBX: 00007f703e1f6fa0 RCX: 00007f703df6f2d9
[  101.553851][ T3142] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000001000
[  101.561939][ T3142] RBP: 00007f703e006888 R08: 0000000000000000 R09: 0000000000000000
[  101.570008][ T3142] R10: 0000200000000340 R11: 0000000000000206 R12: 0000000000000000
[  101.577991][ T3142] R13: 00007f703e1f7038 R14: 00007f703e1f6fa0 R15: 00007ffd2aff8c28
[  101.687156][   T24] audit: type=1400 audit(1791925420.235:573): avc:  denied  { mount } for  pid=3143 comm="syz.9.1015" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  102.403389][ T3174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1026'.
[  103.097467][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  103.854096][ T3220] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  104.133521][   T24] audit: type=1400 audit(1791925422.685:574): avc:  denied  { setopt } for  pid=3230 comm="syz.4.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  104.327462][  T576] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  104.717522][  T576] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.737461][  T576] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  104.917571][  T576] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.933957][  T576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.961348][  T576] usb 6-1: Product: syz
[  104.973755][  T576] usb 6-1: Manufacturer: syz
[  104.987993][  T576] usb 6-1: SerialNumber: syz
[  105.048069][  T576] cdc_mbim 6-1:1.0: skipping garbage
[  105.099051][ T3245] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue
[  105.127704][ T3245] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.220416][   T24] audit: type=1326 audit(1791925423.775:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3253 comm="syz.4.1057" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd71e3f82d9 code=0x0
[  105.247963][ T3228] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  105.446426][ T3245] EXT4-fs error (device loop9): ext4_empty_dir:3077: inode #12: comm syz.9.1054: Directory hole found for htree leaf block 0
[  105.588812][ T3258] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[  105.602204][ T3258] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  105.635555][ T3258] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[  105.651332][ T3258] fscrypt: loop9: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  105.746379][ T3264] xt_hashlimit: size too large, truncated to 1048576
[  105.907685][ T3228] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  105.917593][  T576] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  105.926909][  T576] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  105.946825][  T576] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 8e:c7:01:62:6f:85
[  106.126885][  T576] usb 6-1: USB disconnect, device number 5
[  106.134105][  T576] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  106.429411][ T3291] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1063'.
[  106.666554][   T24] audit: type=1400 audit(1791925425.215:576): avc:  denied  { execute } for  pid=3304 comm="syz.5.1065" name="file0" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.248964][ T3301] F2FS-fs (loop9): invalid crc value
[  107.394902][ T3301] F2FS-fs (loop9): Found nat_bits in checkpoint
[  107.520202][ T3301] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  107.644408][   T24] audit: type=1400 audit(1791925426.195:577): avc:  denied  { read append } for  pid=3300 comm="syz.9.1064" path="/125/file0/blkio.bfq.io_merged" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  107.685146][ T1840] attempt to access beyond end of device
[  107.685146][ T1840] loop9: rw=2049, want=45104, limit=40427
[  107.934542][ T3316] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  107.974930][ T3316] EXT4-fs (loop5): Test dummy encryption mode enabled
[  107.988290][ T3316] EXT4-fs (loop5): Test dummy encryption mode enabled
[  108.029134][ T3316] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5
[  108.029134][ T3316] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  108.029134][ T3316] 
[  108.060437][ T3316] EXT4-fs (loop5): Ignoring removed bh option
[  108.068166][ T3316] EXT4-fs (loop5): Ignoring removed orlov option
[  108.091262][ T3316] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002]
[  108.103257][ T3316] System zones: 0-5
[  108.124769][ T3316] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue
[  108.294076][ T3328] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,,errors=continue
[  108.319051][ T3328] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.540839][   T24] audit: type=1400 audit(1791925427.095:578): avc:  denied  { bind } for  pid=3336 comm="syz.5.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  108.644265][   T24] audit: type=1400 audit(1791925427.195:579): avc:  denied  { write } for  pid=3342 comm="syz.5.1076" name="usb_gadget" dev="configfs" ino=13748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  108.699843][   T24] audit: type=1400 audit(1791925427.225:580): avc:  denied  { add_name } for  pid=3342 comm="syz.5.1076" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  108.721523][   T24] audit: type=1400 audit(1791925427.225:581): avc:  denied  { create } for  pid=3342 comm="syz.5.1076" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  108.743468][   T24] audit: type=1400 audit(1791925427.225:582): avc:  denied  { read write } for  pid=3342 comm="syz.5.1076" name="serialnumber" dev="configfs" ino=36068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  108.770330][   T24] audit: type=1400 audit(1791925427.225:583): avc:  denied  { open } for  pid=3342 comm="syz.5.1076" path="/237/config/usb_gadget/g1/strings/0x409/serialnumber" dev="configfs" ino=36068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  109.553356][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  109.553380][   T24] audit: type=1400 audit(1791925428.105:585): avc:  denied  { execute_no_trans } for  pid=3360 comm="syz.4.1083" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  109.987167][ T3367] netlink: 'syz.4.1085': attribute type 12 has an invalid length.
[  110.097613][ T3359] EXT4-fs error (device loop9): __ext4_iget:5034: inode #11: block 1: comm syz.9.1082: invalid block
[  110.155559][ T3359] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.1082: couldn't read orphan inode 11 (err -117)
[  110.181079][ T3359] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[  110.275861][ T3386] tipc: Failed to remove local publication {66,0,0}/1011991789
[  110.289928][ T3386] tipc: Failed to remove local publication {66,0,0}/1011991788
[  110.298886][ T3386] tipc: Failed to remove local publication {66,0,0}/1011991788
[  110.306487][ T3386] tipc: Failed to remove local publication {66,0,0}/1011991789
[  110.314605][ T3386] tipc: Failed to remove local publication {66,0,0}/1011991788
[  110.506685][ T3400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.721585][ T3409] ip_tables: iptables: counters copy to user failed while replacing table
[  110.857801][ T3413] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[  111.747450][ T1979] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  111.997458][ T1979] usb 6-1: Using ep0 maxpacket: 16
[  112.117521][ T1979] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.134161][ T1979] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.307578][ T1979] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.327075][ T1979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.337535][ T3448] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  112.345547][ T1979] usb 6-1: Product: syz
[  112.349857][ T1979] usb 6-1: Manufacturer: syz
[  112.354495][ T1979] usb 6-1: SerialNumber: syz
[  112.699930][ T1979] usb 6-1: 0:2 : does not exist
[  112.716035][ T1979] usb 6-1: USB disconnect, device number 6
[  112.782101][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.789411][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.797000][ T3454] device bridge_slave_0 entered promiscuous mode
[  112.803944][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.811092][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.823359][ T3454] device bridge_slave_0 left promiscuous mode
[  112.829945][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.879710][ T3458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  112.889878][ T3458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  112.920732][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  112.947852][   T24] audit: type=1400 audit(2000000002.160:586): avc:  denied  { mounton } for  pid=3461 comm="syz.9.1123" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  113.206476][   T24] audit: type=1400 audit(2000000002.410:587): avc:  denied  { remount } for  pid=3471 comm="syz.1.1126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  113.286353][   T24] audit: type=1400 audit(2000000002.430:588): avc:  denied  { associate } for  pid=3475 comm="syz.1.1126" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  113.367802][ T3488] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  113.384845][ T3470] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[  113.397842][ T3488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'.
[  113.406076][ T3470] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.495998][   T24] audit: type=1400 audit(2000000002.700:589): avc:  denied  { mount } for  pid=3494 comm="syz.9.1145" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  113.568172][ T3502] device bridge_slave_0 left promiscuous mode
[  113.581215][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.609129][ T3502] device bridge_slave_1 left promiscuous mode
[  113.615424][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.880262][ T3520] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,errors=remount-ro,nodiscard,
[  114.018549][ T3527] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #12: comm syz.5.1141: corrupted in-inode xattr
[  114.077211][ T3527] EXT4-fs (loop5): Remounting filesystem read-only
[  114.087420][  T414] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  114.415969][ T3541] fuse: Bad value for 'fd'
[  114.457606][  T414] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  114.474143][  T414] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.497567][  T414] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  114.506913][  T414] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.518639][  T414] usb 10-1: config 0 descriptor??
[  114.698873][ T3550] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  114.707876][   T24] audit: type=1400 audit(2000000003.920:590): avc:  denied  { create } for  pid=3549 comm="syz.4.1152" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  114.757459][   T24] audit: type=1400 audit(2000000003.950:591): avc:  denied  { write } for  pid=3549 comm="syz.4.1152" name="file0" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  114.807472][   T24] audit: type=1400 audit(2000000003.950:592): avc:  denied  { open } for  pid=3549 comm="syz.4.1152" path="/113/file0" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  114.854879][   T24] audit: type=1400 audit(2000000003.950:593): avc:  denied  { ioctl } for  pid=3549 comm="syz.4.1152" path="/113/file0" dev="tmpfs" ino=617 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  114.907447][   T24] audit: type=1400 audit(2000000003.950:594): avc:  denied  { unlink } for  pid=2239 comm="syz-executor" name="file0" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  114.999024][  T414] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[  115.008979][  T414] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[  115.019131][  T414] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[  115.028148][  T414] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[  115.044924][  T414] hid-generic 0003:04F3:0755.0003: unknown main item tag 0x0
[  115.065626][  T414] hid-generic 0003:04F3:0755.0003: failed to start in urb: -90
[  115.106876][  T414] hid-generic 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0
[  115.209248][  T284] usb 10-1: USB disconnect, device number 4
[  115.847953][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1164'.
[  116.233096][ T3592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1169'.
[  116.277834][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.408714][   T24] audit: type=1400 audit(2000000005.620:595): avc:  denied  { setopt } for  pid=3581 comm="syz.1.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  116.996938][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.004172][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.011765][ T3605] device bridge_slave_0 entered promiscuous mode
[  117.019192][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.026292][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.034543][ T3605] device bridge_slave_1 entered promiscuous mode
[  117.116233][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.123350][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.130701][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.137774][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.171209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.179225][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  117.188526][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.196180][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.214066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  117.222662][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.229773][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.238671][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  117.247078][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.254285][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.273543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  117.281826][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  117.300221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.319190][ T3605] device veth0_vlan entered promiscuous mode
[  117.339684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.351290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.369097][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.377538][  T300] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  117.403332][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.413683][ T3605] device veth1_macvtap entered promiscuous mode
[  117.444821][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.459645][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.618972][   T24] audit: type=1400 audit(2000000006.830:596): avc:  denied  { read write } for  pid=3632 comm="syz.0.1185" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  117.642583][  T300] usb 10-1: Using ep0 maxpacket: 8
[  117.669948][   T24] audit: type=1400 audit(2000000006.830:597): avc:  denied  { open } for  pid=3632 comm="syz.0.1185" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  117.714931][   T24] audit: type=1400 audit(2000000006.860:598): avc:  denied  { ioctl } for  pid=3632 comm="syz.0.1185" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  117.742400][ T3627] F2FS-fs (loop5): invalid crc value
[  117.768906][ T3627] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  117.807470][  T300] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  117.816238][  T300] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  117.827195][  T300] usb 10-1: config 179 has no interface number 0
[  117.833746][  T300] usb 10-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  117.847190][  T300] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  117.856578][  T300] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.865374][ T3627] F2FS-fs (loop5): Start checkpoint disabled!
[  117.877930][ T3627] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  118.067010][ T3649] netlink: 'syz.5.1188': attribute type 12 has an invalid length.
[  118.165187][   T51] usb 10-1: USB disconnect, device number 5
[  118.305391][ T3655] ------------[ cut here ]------------
[  118.312154][ T3655] EA inode 11 i_nlink=0
[  118.315457][ T3655] WARNING: CPU: 1 PID: 3655 at fs/ext4/xattr.c:1002 ext4_xattr_inode_update_ref+0x4ea/0x540
[  118.331644][ T3655] Modules linked in:
[  118.335775][ T3655] CPU: 1 PID: 3655 Comm: syz.5.1193 Not tainted syzkaller #0
[  118.343725][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  118.354760][ T3655] RIP: 0010:ext4_xattr_inode_update_ref+0x4ea/0x540
[  118.361732][ T3655] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 29 0f be ff 49 8b 34 24 48 c7 c7 a0 ed 2c 85 44 89 fa e8 46 91 98 02 <0f> 0b 4c 8b 74 24 08 4c 8b 64 24 10 e9 a5 fe ff ff e8 10 2e 9c 02
[  118.383572][ T3655] RSP: 0018:ffffc9000094f2c0 EFLAGS: 00010246
[  118.389790][ T3655] RAX: 2af0132f5ab8a000 RBX: ffff8881335c5b90 RCX: 0000000000080000
[  118.397911][ T3655] RDX: ffffc90000f31000 RSI: 00000000000049db RDI: 00000000000049dc
[  118.406262][ T3655] RBP: ffffc9000094f3b0 R08: ffff8881f7127493 R09: 1ffff1103ee24e92
[  118.414636][ T3655] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: ffff8881335c5a70
[  118.423068][ T3655] R13: dffffc0000000000 R14: ffff8881335c5a30 R15: 0000000000000000
[  118.432617][ T3655] FS:  00007f5ca42406c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  118.443492][ T3655] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.450301][ T3655] CR2: 0000200000c00010 CR3: 0000000111b0d000 CR4: 00000000003506a0
[  118.459744][ T3655] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  118.468050][ T3655] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  118.476451][ T3655] Call Trace:
[  118.479882][ T3655]  ? ext4_xattr_block_csum+0x560/0x560
[  118.485421][ T3655]  ? __ext4_journal_ensure_credits+0x30/0x470
[  118.493036][ T3655]  ? ext4_xattr_inode_dec_ref_all+0x394/0xf20
[  118.499583][ T3655]  ext4_xattr_inode_dec_ref_all+0x91a/0xf20
[  118.505773][ T3655]  ? ext4_xattr_delete_inode+0xc00/0xc00
[  118.511550][ T3655]  ? __ext4_journal_ensure_credits+0x470/0x470
[  118.518005][ T3655]  ? ext4_get_inode_loc+0x100/0x130
[  118.523307][ T3655]  ext4_xattr_delete_inode+0xa42/0xc00
[  118.528911][ T3655]  ? ext4_expand_extra_isize_ea+0x19d0/0x19d0
[  118.535060][ T3655]  ? __ext4_mark_inode_dirty+0x489/0x660
[  118.541685][ T3655]  ext4_evict_inode+0x10e2/0x1780
[  118.547227][ T3655]  ? _raw_spin_unlock+0x4d/0x70
[  118.552627][ T3655]  ? ext4_inode_is_fast_symlink+0x370/0x370
[  118.559221][ T3655]  ? ext4_inode_is_fast_symlink+0x370/0x370
[  118.565237][ T3655]  evict+0x4a9/0x940
[  118.569395][ T3655]  ? mode_strip_sgid+0x150/0x150
[  118.574430][ T3655]  ? _raw_spin_lock+0x94/0xf0
[  118.579471][ T3655]  ? _raw_spin_trylock_bh+0x150/0x150
[  118.588084][ T3655]  ? ext4_get_projid+0x140/0x140
[  118.597534][ T3655]  ? __kasan_check_write+0x14/0x20
[  118.604948][ T3655]  iput+0x654/0x7e0
[  118.611178][ T3655]  ext4_orphan_cleanup+0x989/0xd40
[  118.616347][ T3655]  ext4_fill_super+0x867e/0x8d90
[  118.621603][ T3655]  ? ext4_mount+0x40/0x40
[  118.625974][ T3655]  ? vscnprintf+0x80/0x80
[  118.631153][ T3655]  ? set_blocksize+0x1eb/0x3a0
[  118.636268][ T3655]  ? sb_set_blocksize+0xaa/0xf0
[  118.641473][ T3655]  mount_bdev+0x26a/0x380
[  118.646279][ T3655]  ? ext4_mount+0x40/0x40
[  118.650981][ T3655]  ext4_mount+0x34/0x40
[  118.655180][ T3655]  legacy_get_tree+0xed/0x190
[  118.660202][ T3655]  ? ext4_chksum+0x180/0x180
[  118.664935][ T3655]  vfs_get_tree+0x89/0x260
[  118.669674][ T3655]  do_new_mount+0x25a/0xa30
[  118.674309][ T3655]  path_mount+0x581/0xca0
[  118.678996][ T3655]  __se_sys_mount+0x320/0x390
[  118.683723][ T3655]  ? __x64_sys_mount+0xd0/0xd0
[  118.688751][ T3655]  __x64_sys_mount+0xbf/0xd0
[  118.704825][ T3655]  do_syscall_64+0x31/0x40
[  118.710000][ T3655]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  118.715941][ T3655] RIP: 0033:0x7f5ca57e854a
[  118.720739][ T3655] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.745173][ T3665] ip_tables: iptables: counters copy to user failed while replacing table
[  118.761857][ T3655] RSP: 002b:00007f5ca423fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  118.777038][ T3655] RAX: ffffffffffffffda RBX: 00007f5ca423fee0 RCX: 00007f5ca57e854a
[  118.797442][ T3655] RDX: 0000200000000600 RSI: 0000200000000640 RDI: 00007f5ca423fea0
[  118.805616][ T3655] RBP: 0000200000000600 R08: 00007f5ca423fee0 R09: 0000000000000008
[  118.832284][ T3655] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000640
[  118.841731][ T3655] R13: 00007f5ca423fea0 R14: 000000000000048d R15: 000000000000002c
[  118.859038][ T3655] ---[ end trace 65321e00f91c962c ]---
[  118.864689][ T3655] EXT4-fs (loop5): 1 orphan inode deleted
[  118.887820][ T3655] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,noquota,max_dir_size_kb=0x0000000000200004,debug_want_extra_isize=0x000000000000003a,grpquota,inlinecrypt,nodelalloc,
[  119.009248][ T3655] EXT4-fs error (device loop5): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.5.1193: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  119.036996][ T3655] EXT4-fs (loop5): Remounting filesystem read-only
[  119.158278][ T3683] EXT4-fs (loop5): Ignoring removed orlov option
[  119.202313][ T3683] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,nogrpid,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue
[  119.597443][   T51] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  119.725786][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  119.735697][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  119.744515][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  119.753434][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  119.761437][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  119.770066][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  119.777739][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  119.786085][   T24] audit: type=1400 audit(2000000008.990:599): avc:  denied  { sys_nice } for  pid=3718 comm="syz.9.1213" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  119.787209][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  119.816132][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  119.857523][   T51] usb 6-1: Using ep0 maxpacket: 8
[  119.977854][   T51] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  119.988469][   T51] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  120.006457][   T51] usb 6-1: config 179 has no interface number 0
[  120.018088][   T51] usb 6-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  120.039111][   T51] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  120.054801][   T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.336312][   T51] usb 6-1: USB disconnect, device number 7
[  121.090859][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.098122][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.664782][ T3791] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1237'.
[  123.421697][ T3798] netlink: 'syz.1.1239': attribute type 16 has an invalid length.
[  123.454770][ T3798] netlink: 'syz.1.1239': attribute type 17 has an invalid length.
[  123.527279][ T3798] device veth0_vlan left promiscuous mode
[  123.533581][ T3798] device veth0_vlan entered promiscuous mode
[  123.541669][ T3798] device veth1_macvtap left promiscuous mode
[  123.549441][ T3798] device veth1_macvtap entered promiscuous mode
[  123.556729][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.571322][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.579598][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.588857][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.595964][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.603735][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.612401][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.877510][ T1039] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  123.951736][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.958890][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.970169][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.978958][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  123.987227][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.995570][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.004107][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.012793][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.021260][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.029712][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.038237][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.046806][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.055451][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.064163][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  124.072566][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  124.080963][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  124.089372][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  124.097808][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.106389][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.115324][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.123658][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.132045][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.139840][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.147726][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.147798][ T1039] usb 10-1: Using ep0 maxpacket: 16
[  124.159561][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.169584][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.186285][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  124.337473][ T1039] usb 10-1: unable to get BOS descriptor or descriptor too short
[  124.417476][ T1039] usb 10-1: config 42 has an invalid interface number: 178 but max is 0
[  124.425903][ T1039] usb 10-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config
[  124.442897][ T1039] usb 10-1: config 42 has no interface number 0
[  124.450394][ T1039] usb 10-1: config 42 interface 178 has no altsetting 0
[  124.617589][ T1039] usb 10-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5
[  124.627031][ T1039] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.635304][ T1039] usb 10-1: Product: syz
[  124.639796][ T1039] usb 10-1: Manufacturer: syz
[  124.644609][ T1039] usb 10-1: SerialNumber: syz
[  125.008758][ T1039] usb 10-1: USB disconnect, device number 6
[  139.724590][ T3852] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  140.026955][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.049363][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.069641][ T3863] device bridge_slave_0 entered promiscuous mode
[  140.091750][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.099236][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.106816][ T3863] device bridge_slave_1 entered promiscuous mode
[  140.172864][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.179997][ T3863] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.187351][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.194597][ T3863] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.228908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.239309][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.258900][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.271972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.288386][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.295504][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.320525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.340999][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.348235][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.381906][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.395211][ T3883] 9pnet: p9_fd_create_tcp (3883): problem connecting socket to 127.0.0.1
[  140.400919][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.424512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.438350][ T3863] device veth0_vlan entered promiscuous mode
[  140.444843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  140.455710][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  140.463463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  140.479062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  140.513915][ T3863] device veth1_macvtap entered promiscuous mode
[  140.595427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.622114][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.767507][   T25] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  141.019007][   T25] usb 10-1: Using ep0 maxpacket: 8
[  141.176591][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'.
[  141.247605][   T25] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 118, changing to 7
[  141.418187][   T25] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  141.436318][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.454786][   T25] usb 10-1: Product: syz
[  141.463683][   T25] usb 10-1: Manufacturer: syz
[  141.477455][   T25] usb 10-1: SerialNumber: syz
[  141.716586][ T3909] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  141.735431][ T3907] overlayfs: failed to clone upperpath
[  141.750375][ T3885] netlink: 'syz.9.1263': attribute type 16 has an invalid length.
[  141.777548][ T3885] netlink: 'syz.9.1263': attribute type 17 has an invalid length.
[  141.786441][   T24] audit: type=1400 audit(2000000030.990:600): avc:  denied  { mount } for  pid=3910 comm="syz.7.1274" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  141.820317][ T3885] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  141.987533][   T25] usb 10-1: Audio class v2/v3 interfaces need an interface association
[  142.000288][   T25] snd-usb-audio: probe of 10-1:1.0 failed with error -22
[  142.014624][   T25] usb 10-1: USB disconnect, device number 7
[  142.130430][ T1979] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  142.497574][ T1979] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  142.516950][ T1979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.628531][    T9] device bridge_slave_1 left promiscuous mode
[  142.639154][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.657889][    T9] device bridge_slave_0 left promiscuous mode
[  142.674657][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.686821][    T9] device veth1_macvtap left promiscuous mode
[  142.693575][    T9] device veth0_vlan left promiscuous mode
[  142.952739][ T1979] net1080 8-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.7-1, NetChip TurboCONNECT, 42:43:70:5c:d9:ad
[  143.275114][ T3947] overlayfs: failed to clone upperpath
[  143.339250][   T25] usb 8-1: USB disconnect, device number 4
[  143.355521][   T25] net1080 8-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.7-1, NetChip TurboCONNECT
[  143.565196][ T3945] device syz_tun entered promiscuous mode
[  143.584428][ T3945] device syz_tun left promiscuous mode
[  143.863117][   T24] audit: type=1400 audit(2000000033.070:601): avc:  denied  { unmount } for  pid=3863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  144.625684][ T4000] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.976300][ T4015] netlink: 'syz.4.1299': attribute type 13 has an invalid length.
[  146.749292][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  146.822851][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready
[  146.833686][   T25] IPv6: BUG: Address fc00:: on device lo is missing its host route.
[  146.844460][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  146.856889][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.867912][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.880516][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.893326][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.906870][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  146.921082][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[  146.934510][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready