last executing test programs:

11.34073423s ago: executing program 3 (id=195):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x800, 0x4)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendmmsg$inet(r3, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}], 0x1, 0x16da)

9.589214288s ago: executing program 1 (id=201):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$eJzs3AuYTtUaOPD3XWvtMSbxNcllWGu9my+5LJMkuSTJJUkqSZJbQtIkRxISQ0jSkITkMiaJISSXiUnu9/stIUmaJAnJLVn/Z5K/0+mcf51z+h/nOfP+nmc/1mvvd+13f+988629mfmm69DaTerUaERE8G/BC38kA0AsAAwEgHwAEABAhfgK8dn7c0tM/vdOwv5cD6Rf7grY5cT9z9m4/zkb9z9n4/7nbNz/nI37n7Nx/3M27j9jOdmmqYWv4i3nbvz8Pyfjz///IVllx36xpuw13QBi/mgK9z9n4/7/zwr+yEHc/5yN+59TxV7uAth/AX7/5wS5/uEe7n/Oxv1nLCe73M+fL/cGkf+y1+BI7guN+U9dP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9h9w2l+iAODi+HLXxRhjjDHGGGOMsT+Pz3W5K2CMMcYYY4wxxtj/fwgCJCgIIAZyQSzkhjgQAHAl5IV8EIGrIB6uhvxwDRSAglAICkMCFIGioMGABYIQikFxiMK1UAKug5JQCkpDGXBQFhLheigHN0B5uBEqwE1QEW6GSlAZqkBVuAWqwa1QHW6DGnA71IRaUBvqwB1QF+6EenAX1Ie7oQHcA/fCfdAQ7odG8AA0hgehCTwETeFhaAbNoQW0hFb/Uv5z0BOeh17QG5KhD/SFF6Af9IcB8CIMhJdgELwMg+EVSIEhMBRehWHwGgyH12EEjIRR8AaMhjdhDIyFcTAeUmECpMFbMBHehknwDkyGKZAOU2EavAvTYQbMhPdgFrwPs2EOzIV5kAEfwHxYAJnwISyEj2ARLIYlsBSWwXJYASthFayGNbAW1sF62ABpsAk2wxbYCttgO+yAj2EnfAK7YDfsgU9hL3z2O/kb/yb/1N/kd0NAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxP+bHAlgAC2EhTMAELIpF0aBBQsJiWAyjGMUSWAJLYkksjaXRocNETMRyeAOWx/JYAStgRayIlbAyVsaqWBWrYTWsjtWxBtbAmlgTa2NtvAPvwD5YD+thfayPDbDBxcdT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIRJ2BE7YifshJ2xM3bBLtgVu2I37I7ds57LBfg8Po+9sabog32xL/bDlFwD8EV8EV/CQfgyvoyvYAoOwaH4Kr6Kr+FwPIkjcCSOwlFYTbyJY3AskhiPqZiKaZiGE3EiZhf6Dk7BdJyK03AaTscZOAPfw1n4Pr6Pc3AOzsMMzMD5uAAzMRMX4ilchItxCS7FZbgcl+FKXIUrcQ2uxTW4HtfjRtyIm3EzbsWtuB2348eoAPAT3I27MQX34l7ch/twP+7HA3gAszALD+JBPISH8DAexiN4BI/iMTyOx/AEnsCTeApP42k8i2fxHD6T8FXjj0utTgGRTQklYkSMiBWxIk7EiTwij8gr8oqIiIh4ES/yi/yigCggColCIkEkiKKiqDDCCBJhDACIqIiKEqKEKClKitKitHDCiUSRKMqJcqK8KC8qiJtERXGzqCQqi7auqqgqqol2rrq4TdQQNURNUUvUFnVEHVFX1BX1RD1RX9QXDUQDca+4TzQUfXAAPiCyO9NEDMGmYig2E82F/OU7WGsxHNuItqKdeEyMxBHYQbR2SeJJ0VGMwU7iL2IsPi26iPHYVTwruonuood4TvQUbVwv0VtMwj6ir5iC/UR/MUC8KKZjLfEezspdW7wiUsQQMVS8Kubha2K4eF2MECPFKPGGGC3eFGPEWDFOjBepYoJIE2+JieJtMUm8IyaLKSJdTBXTxLtiupghZor3xCzxvpgt5oi5Yp7IEB+I+WKByBQfioXiI1FHLBZLxFKxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW0QsbBPbxQ7xsdgpPhG7xG6xR3wq9orPxD7xudgvvhAHxJciS3wlDoqvxSHxjTgsvhVHxHfiqDgmjovvxQnxgzgpTonT4ow4K34U58RP4rzwAiRKIaVUMpAxMpeMlbllnLxC5pHBL6/uVTJeXi3zy2tkAVlQFpKFZYIsIotKLY20kmQoi8niMiqvlSXkdbKkLCVLyzLSybIyUV4vy8kbZHl5o6wgb5IV5c2ykqwsq8iq8hZZTd4qIXLhHDVlLVlb1pF3yGS4U9aTd8n68m7ZQN4j75X3yYbyftlIPiAbywdlE/mQbCofls1kc9lCtpSt5COytXxUtpFtZTv5mGwvH5cd5BMyST4pO0r/y5fI07KLfEZ2lc/KbrK77CF/kuell71kbwl9QPaVL8h+sr8cEAsA8iU5SL4sB8tXZIocIofKV+Uw+ZocLl+XI+RIOUq+IUfLN+UYOVaOk+Nlqpwg0+RbcqJ8W06S78jJcopMl1PlADnw55lmSvm7+W/9nfzBP599o9wkN8stcqvcJrfLHfJjuVPulLvkLrlH7pF75V65T+6T++V+eUAekFkySx6UB+UheUgeloflEXlEHpXH5Bn5vTwhf5An5Sl5Sp6RZ+VZee6X1wAUKqGkUipQMSqXilW5VZy6QuVRV6q8Kp+KqKtUvLpa5VfXqAKqoCqkCqsEVUQVVVoZZRWpUBVTxVVUXYu/fMGo0qqMcqqsSlTX/zP5qoS6TpVUpX6Vf7G+5H9QXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVJJKUh1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VrJJVX/WC6qf6qwHqRTVQvaQGqUFqsBqsUlSKGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpVqSpNpamJaqKapCapyWqySlfpapqapqar6WqmmqlmqVlqtpqt5qq5KkNlqPlqvspUmWqhWqgWqcVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvVqkNqlNaovaorapbWqH2qF2qp1ql9il9qg9aq/aq/apfWq/2q8OqAMqS2Wpg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nL/sCEYhABSqICWKC2CA2iAvigjxBniBvkDeIBJEgPogP8gfXBAWCgkGhoHCQEBQJigY6MIENxC9NjwbXBiWC64KSQamgdFAmcEHZIDG4PigX3BCUD24MKgQ3BRWDm4NKQeWgSlA1uCWoFtwaVA9uC2oEtwc1g1pB7aBOcEdQN7gzqBfcFdQP7g4aBPcE9wb3BQ2D+4NGwQNB4+DBoEnwUNA0eDhoFjQPWgQtg1Z/6vzenyz4qOule+tk3Uf31S/ofrq/HqBf1AP1S3qQflkP1q/oFD1ED9Wv6mH6NT1cv65H6JF6lH5Dj9Zv6jF6rB6nx+tUPUGn6bf0RP22nqTf0ZP1FJ2up+pp+l09Xc/QM/V7epZ+X8/Wc/RcPU9n6A/0fL1AZ+oP9UL9kV6kF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36Y71Tf6J36d16j/5U79Wf6X36c71ff6EP6C91lv5KH9Rf60P6G31Yf6uP6O/0UX1MH9ff6xP6B31Sn9Kn9Rl9Vv+oz+mf9Hntsxf32R/vRhllYkyMiTWxJs7EmTwmj8lr8pqIiZh4E2/ym/ymgClgCplCJsEkmKKmqMlGhkwxU8xETdSUMCVMSVPSlDaljTPOJJpEU86UM+VNeVPBVDAVTUVTyVQyVUwVc4u5xdxqbjW3mdvM7eZ2U8vUMnVMHVPX1DX1TD1T39Q3DUwDc6+51zQ0DU0j08g0No1NE9PENDVNTTPTzLQwLUwr08q0Nq1NG9PGtDPtTHvT3nQwHUySSTIdTUfTyXQynU1n08V0MV1NV9PNdDM9TA/T0/Q0vUwvk2ySTV/T1/Qz/cwAM8AMNAPNIDPIDDaDTYpJMUPNUDPMDDPDzXAzwow0o7IXquZNM8aMNePMeJNqUk2aSTMTzUQzyUwyk81kk27SzTQzzUw3081MM9PMMrPMbDPbzDVzTYbJMPPNfJNpMs1Cs9AsMovMErPELDPLzAqzwqwyq8was8asg3Vmg9lgNplNZovZYraZbWaH2WF2mp1ml9ll9pg9Zq/Za/aZfWa/2W8OmAMmy2SZg+agOWQOmcPmsDlijpij5qg5bo6bE+aEOWlOmtPmtDlrCv7yeelNrM1t4+wVNo+90ua1+ezfxoVsYZtgi9iiVtsCtuCvYmOtLWlL2dK2jHW2rE201/8mrmQr2yq2qr3FVrO32uq/ievaO209e5etb++2dewdv4ob2Hts9uqkISKAbW4b25a2iX3INrUP22a2uW1hW9r29nHbwT5hk+yTtqN96jfxfLvArrKr7Rq71u6yu+1pe8Yest/Ys/ZH28v2tgPtS3aQfdkOtq/YFDvkN/Eo+4Ydbd+0Y+xYO86O/0082U6x6XaqnWbftdPtjN/EGfYDO8tm2tl2jp1r5/0cZ9eUaT+0C+1HdpENYIldapfZ5XaFXXmxVp/Prrcb7Ea7035it9itdpvdbndcXAjb3XaP/dTutZ/Zg/Zru99+YQ/YwzbLfvVznH19h+239oj9zh61x+xx+709YX9QF7Ozr/17+5M9b70FQgKSpCigGMpFsZSb4ugKykNXUl7KRxG6iuLpaspP11ABKkiFqDAlUBEqSpoMWSIKqRgVpyhdSxfLK01lyFFZSqTrqRzdQOXpRqpAN1FFupkqUWWqQlXpFqpGt1J1uo1q0O1Uk2pRbapDd1BdupPq0V1Un+6mBnQP3Uv3UUO6nxrRA9SYHqQm9BA1pYepGTWnFtSSWtEj1JoepTbUltrRY9SeHqcO9AQl0ZPUkZ6iTvQX6kxPUxd6hrrSs9SNulMPeo560vPUi3pTMvWhvvQC9aP+NIBepIH0Eg2il2kwvUIpNISG0qs0jF6j4fQ6jaCRNIreoNH0Jo2hsTSOxlMqTaA0eosm0ts0id6hyTSF0mkqTaN3aTrNoJn0Hs2i92k2zaG5NI8y6AOaTwsokz6khfQRLaLFtISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO+hj2kmf0C7aTXvoU9pLnxHS57SfvqAD9CVl0Vd0kL6mQ/QNHaZvfW/6jo7SMTpO39MJ+oFO0ik6TWfoLP1I5+gnOk+eIMRQhDJUYRDGhLnC2DB3GBdeEeYJrwzzhvnCSHhVGB9eHeYPrwkLhAXDQmHhMCEsEhYNdWhCG1IYhsXC4mE0vDYsEV4XlgxLhaXDMqELy4aJ4fVhufCGsHx4Y1ghvCmsGN4cVgorhw/dXTW8JawW3hpWD28La4S3hzXDWmHtsE54R1g3vDOsF94V1g/vDsuH94T3hveFDcP7w0bhA2Hj8MGwSfhQ2DR8OGwWNg9bhC3DVuEjYevw0bBN2DZsFz4Wtg8fDzuET4RJ4ZNhx/Cpn/ffs+Af708O+4R9wxfCF0Lv75Jzo/OiGdEPovOjC6KZ0Q+jC6MfRRdFF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+TCxw64aRTLnAxLpeLdbldnLvC5XFXurwun4u4q1y8u9rld9e4Aq6gK+QKuwRXxBV12hlnHbnQFXPFXdRd60q461xJV8qVdmWcc2VdomvpWrlWrrV71LVxbV0795h7zD3uHndPuCfck66je8p1cn9xnd3Trot7xj3jnnXdXHfXwz3neroJeS+8J5NdX9fX9XP93AA3wA10A90gN8gNdoNdiktxQ91QN8wNc8PdcDfCjXCj3Cg32o12Y9wYN86Nc6ku1aW5NDfRTXST3CQ32U126S7dTXPT3HQ33VWbceEss91sN9fNdRkuw8132WvGTLfQLXSL3CK3xC1xy9wyt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfD7XA73U63y+e7MKnb6/a5fW6/2+8OuC9dlvvKHXRfu0PuG3fYfeuOuO/cUXfMHXffuxPuB3fSnXKn3Rl31v3ozrmf3HnnXWpkQiQt8lZkYuTtyKTIO5HJkSmR9MjUyLTIu5HpkRmRmZH3IrMi70dmR+ZE5kbmRTIiH0TmRxZEMiMfRhZGPoosiiyOLIksjSyLLI94X2RL6Iv54j7qr/Ul/HW+pC/lS/sy3vmyPtFf78v5G3x5f6Ov4G/yFf3NvpKv7Kv4h30z39y38C19K/+Ib+0f9W18W9/OP+bb+8d9B/+ET/JP+o7+Kd/J/8V39k/7Lv4Z39U/67v57r6Hf8739M/7Xr63T/Z9fF//gu/n+/sB/kU/0L/kB/mX/WD/ik/xQ/xQ/6of5l/zw/3rfoQf6UfFvOFHX7xFhvE+1U/waf4tP9G/7Sf5d/xkP8Wn+6l+mn/XT/cz/Ez/np/l3/ez/Rw/18/zGf4DP98v8Jn+Q7/Qf+QX+cUXHyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+Y7/Tf+J3+d1+j//U7/Wf+X3+c7/ff+EP+C99lv/KH/Rf+0P+G3/Yf+uP+O/8UX/MH/ff+xP+B3/Sn/Kn/Rl/1v/oz/mf/Pk/9DNryX/4qThjjDHG2P+qCZeG4td7LjzO7/N3csRfHdwXAK7cWjjrr/dnryjXFbgw7i8S2kcA4MneXR+4uNWsmZx8cSW2SEJQfA7AxX8JyhYDl+LF0A4ehyRoC+X+bv39Rfez9DvzR28CiPurnFi4FF+a/3MA/O36sL945LFR8yuGp+P/H/PPAShZ/FJObrgUL4Z2Pz9faQvl/0H9BVv/Tv25v0gFaPNXOXngUnyp/kR4FJ6CpF8dyRhjjDHGGGOMXdBfVOl88f7z4v/4/Hv35wnqUk4uuBT/3v05Y4wxxhhjjDHGLr+nu/d44pGkpLad//lB9d8/Rv1rM/88aAr/amE8+JcG3gP838YBwL85IUD2QP4nr2Lzf+RcKb+8df5217IzPoD/jlb+GYPL/I2JMcYYY4wx9qe7tOj/9d+ry1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWA/27v+MN/sBv6bvc18gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbv8nAAD//8/q+bs=")
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==")
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffecb)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75f, &(0x7f0000001140)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0xd)
mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)

9.532775183s ago: executing program 3 (id=202):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockname$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6)

8.039750531s ago: executing program 3 (id=203):
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000180), 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r6, &(0x7f0000000180), 0x0}, 0x20)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b020004"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
read$FUSE(r11, 0x0, 0x0)
write$cgroup_int(r11, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
getsockopt$WPAN_SECURITY(r10, 0x0, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

7.940661539s ago: executing program 1 (id=205):
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))

7.583291075s ago: executing program 2 (id=207):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockname$inet6(r4, 0x0, &(0x7f00000003c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6)

6.752716066s ago: executing program 1 (id=206):
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)

6.69676379s ago: executing program 1 (id=209):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockname$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6)

6.169076989s ago: executing program 2 (id=211):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2(0x0, 0xf0ff1f)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
utimes(&(0x7f0000000540)='./file0\x00', 0x0)

5.669744465s ago: executing program 1 (id=213):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x808, 0x8}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020)

5.225959728s ago: executing program 2 (id=214):
socket(0x10, 0x3, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)
getdents(0xffffffffffffffff, 0x0, 0x54)

4.821169527s ago: executing program 3 (id=215):
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2(0x0, 0xf0ff1f)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

4.78174514s ago: executing program 0 (id=216):
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040))

4.759958802s ago: executing program 1 (id=217):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3158}}, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x81, 0x6, @broadcast}, 0x14)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r6 = dup(r4)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000002000000044d564b"])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r8, &(0x7f0000000180), 0x2000)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
sched_setscheduler(r9, 0x2, &(0x7f0000000080)=0x2)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

4.678272058s ago: executing program 4 (id=218):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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")
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffecb)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75f, &(0x7f0000001140)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0xd)
mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0)
getdents64(r0, &(0x7f0000000180)=""/161, 0xa1)

4.302282085s ago: executing program 2 (id=219):
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)

4.24067076s ago: executing program 2 (id=220):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x90)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r5=>0x0})
close(r1)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x4c}}, 0x0)

3.900656254s ago: executing program 3 (id=221):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r5, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r6, 0x0, 0x54)

3.802192631s ago: executing program 0 (id=222):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x800, 0x4)
bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}], 0x1, 0x16da)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1281, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)

3.460410687s ago: executing program 4 (id=223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockname$inet6(r4, 0x0, &(0x7f00000003c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6)

3.032649728s ago: executing program 4 (id=224):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockname$inet6(r4, 0x0, &(0x7f00000003c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6)

2.907608167s ago: executing program 3 (id=226):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3158}}, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x81, 0x6, @broadcast}, 0x14)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r6 = dup(r4)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000002000000044d564b"])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r8, &(0x7f0000000180), 0x2000)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
sched_setscheduler(r9, 0x2, &(0x7f0000000080)=0x2)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

2.749894529s ago: executing program 2 (id=227):
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
chdir(&(0x7f0000000540)='./file0\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x20, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6046, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="9d92fd7d0dc90653480e96255ffa012cf0adb2f6c32eac979c2a7358329dffcc18490a4e993b65a5842894888506489ab3c9258fc3db9bc91b7452c34ee796f1f450ff96e8d523dd85dfb806903629d0aa477162c52bb6b6a844f2fbb0899cede1dba6bc0dde67874723fd679bd91d80426275149a4bf38b50c68b6b4a18ab5c9e25a02f1e6346b1456880bf4bcfa9635425f53dd18d55a49c816f6433c678eb9dd9cfa71b34a6706b02fc595aaa36f21d4f65a348e294e15cb7619ddbdb408f2bcfe57feff04915b0a24809581275f234fce97afc4724108053252d55", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x2400c806, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0x678)
creat(&(0x7f0000000e00)='./file0\x00', 0x0)
renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x9, "34a6caf58db769"}, {0x0, 0x2}, {0x5, 0x2}]}]}}}}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000007000000a5000000050000000500000000000000000001000200000000000000000000000000000007"])
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.716988271s ago: executing program 0 (id=228):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xc8f, 0x8, 0x0, 0x420, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)

2.498505487s ago: executing program 4 (id=225):
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040))

1.801737348s ago: executing program 0 (id=229):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockname$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f00000003c0)=0x1c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6)

1.303886314s ago: executing program 4 (id=230):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
socket$packet(0x11, 0x3, 0x300)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)}, {&(0x7f0000000140)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe882ea140e87627ec5dd5f81b76d1751540000000000000000", 0x31}, {&(0x7f0000000d40)="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", 0x813}], 0x3}}], 0x1, 0x40440c1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
tee(0xffffffffffffffff, r5, 0x80000001, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r4, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x3804002, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@norecovery}, {@debug}, {@stripe={'stripe', 0x3d, 0x5}}, {@usrquota}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nolazytime}, {@commit={'commit', 0x3d, 0x92b}}, {}], [{@obj_role={'obj_role', 0x3d, '*%\xff\xaew*.k\xb7\a0\xab\xfbC\x95J\x16\x15\xcd\xd3P\xae>.=\b[\x7fjp\x95\x8a\x13\xafl\x95\xb5\x03\x99\xd2\xe6Ad\xe4w:\xbdr\x19\xe3Q\xca\xd5!\x81M\x13\x0e\xe8l\xbf\xf5\"]\x9c\r\xab\x01n)B\a\a\x00\x00\x00V\x0e\xf6(\xae\"\xff\xe9\xbf\xc9\xec~}$;\xeeu\x97\xf3\x8b\x82\x03\xf6~#\xdco'}}, {@appraise_type}, {@audit}, {@uid_gt}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x54f, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ")

1.220482501s ago: executing program 0 (id=231):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x90)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x4c}}, 0x0)

266.54121ms ago: executing program 0 (id=232):
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2(0x0, 0xf0ff1f)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

0s ago: executing program 4 (id=233):
socket(0x10, 0x3, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r5, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r6, 0x0, 0x54)

kernel console output (not intermixed with test programs):

le permissive=1 trawcon="root:object_r:swapfile_t"
[   21.791844][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.798737][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.806157][  T289] device bridge_slave_0 entered promiscuous mode
[   21.814200][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.821164][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.828481][  T289] device bridge_slave_1 entered promiscuous mode
[   21.834867][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.841698][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.848961][  T290] device bridge_slave_0 entered promiscuous mode
[   21.855718][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.862562][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.869905][  T290] device bridge_slave_1 entered promiscuous mode
[   21.957001][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.963868][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.971029][  T292] device bridge_slave_0 entered promiscuous mode
[   21.988421][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.995328][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.002548][  T292] device bridge_slave_1 entered promiscuous mode
[   22.016835][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.023712][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.030959][  T291] device bridge_slave_0 entered promiscuous mode
[   22.051715][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.058607][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.065894][  T291] device bridge_slave_1 entered promiscuous mode
[   22.115877][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.122721][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.130046][  T293] device bridge_slave_0 entered promiscuous mode
[   22.151423][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.158312][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.165535][  T293] device bridge_slave_1 entered promiscuous mode
[   22.236673][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.243541][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.250636][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.257434][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.297337][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.304200][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.311264][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.318091][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.344035][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.350965][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.358153][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.365003][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.382565][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.389864][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.396973][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.403745][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.435660][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.443639][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.450679][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.457946][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.465514][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.472646][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.479769][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.487347][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.494376][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.534091][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.541841][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.549919][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.556758][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.563976][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.572018][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.578875][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.586457][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.595452][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.602276][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.609506][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.617473][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.624319][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.633314][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.666753][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.674905][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.682196][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.690241][  T309] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.697095][  T309] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.704366][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.712355][  T309] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.719214][  T309] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.726392][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.734285][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.742028][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.749351][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.756580][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.764533][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.786327][  T291] device veth0_vlan entered promiscuous mode
[   22.799585][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.807371][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.814942][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.834430][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.842227][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.850415][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.857271][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.864655][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.872556][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.879308][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.886520][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.894686][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.902696][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.909948][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.917159][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.925222][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.933816][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.942085][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.950109][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.956944][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.964162][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   22.972271][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.980303][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.987162][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.994574][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.005878][  T290] device veth0_vlan entered promiscuous mode
[   23.023592][  T292] device veth0_vlan entered promiscuous mode
[   23.029917][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.037985][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.046070][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.054053][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.061833][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.069798][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.077914][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.085664][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.093936][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.101809][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.109977][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.118092][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.125937][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.133764][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.141578][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.148938][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.156200][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.163541][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.175231][  T291] device veth1_macvtap entered promiscuous mode
[   23.188692][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.196922][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.215273][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.223487][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.231526][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.239873][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.248063][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.256005][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.266901][  T290] device veth1_macvtap entered promiscuous mode
[   23.275527][  T292] device veth1_macvtap entered promiscuous mode
[   23.285583][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.293220][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.300709][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.309125][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.322702][  T314] loop0: detected capacity change from 0 to 16
[   23.336004][  T314] erofs: (device loop0): mounted with root inode @ nid 36.
[   23.350792][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.358957][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.366702][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.374195][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.382318][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.391054][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.399401][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.408036][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.416066][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.425317][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.443633][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.451666][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.459873][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.468010][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.476275][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.483921][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.493393][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.501224][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.536799][  T293] device veth0_vlan entered promiscuous mode
[   23.544938][  T289] device veth0_vlan entered promiscuous mode
[   24.566206][  T328] loop4: detected capacity change from 0 to 128
[   25.207417][  T289] device veth1_macvtap entered promiscuous mode
[   25.242360][  T328] =======================================================
[   25.242360][  T328] WARNING: The mand mount option has been deprecated and
[   25.242360][  T328]          and is ignored by this kernel. Remove the mand
[   25.242360][  T328]          option from the mount to silence this warning.
[   25.242360][  T328] =======================================================
[   25.286482][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.297312][  T334] loop3: detected capacity change from 0 to 512
[   25.303245][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.311428][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.312048][  T334] EXT4-fs (loop3): error: journal path ./file0 is not a block device
[   25.323598][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.337821][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.346220][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.354829][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.396565][  T293] device veth1_macvtap entered promiscuous mode
[   25.416587][  T328] EXT4-fs (loop4): Test dummy encryption mode enabled
[   25.426709][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.436741][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.440564][  T342] loop1: detected capacity change from 0 to 256
[   25.451564][  T328] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   25.464475][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.470587][  T342] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   25.472041][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.484212][  T328] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff)
[   25.492229][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.509855][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.540840][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.572851][   T30] kauditd_printk_skb: 32 callbacks suppressed
[   25.572867][   T30] audit: type=1400 audit(1725447202.770:108): avc:  denied  { read } for  pid=331 comm="syz.0.6" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   25.617592][  T334] binder: BINDER_SET_CONTEXT_MGR already set
[   25.623533][  T334] binder: 333:334 ioctl 4018620d 20000040 returned -16
[   25.665458][   T30] audit: type=1400 audit(1725447202.770:109): avc:  denied  { open } for  pid=331 comm="syz.0.6" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   25.689119][   T30] audit: type=1400 audit(1725447202.770:110): avc:  denied  { map } for  pid=331 comm="syz.0.6" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   25.702141][  T328] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   25.733627][   T30] audit: type=1400 audit(1725447202.770:111): avc:  denied  { ioctl } for  pid=331 comm="syz.0.6" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   25.761252][   T30] audit: type=1400 audit(1725447202.770:112): avc:  denied  { set_context_mgr } for  pid=331 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   25.811503][  T348] loop2: detected capacity change from 0 to 16
[   25.817894][   T30] audit: type=1400 audit(1725447202.780:113): avc:  denied  { write } for  pid=327 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   25.839230][   T30] audit: type=1400 audit(1725447202.780:114): avc:  denied  { add_name } for  pid=327 comm="syz.4.5" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.429353][  T348] erofs: (device loop2): mounted with root inode @ nid 36.
[   26.480288][   T30] audit: type=1400 audit(1725447202.780:115): avc:  denied  { create } for  pid=327 comm="syz.4.5" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   26.507732][  T349] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   26.517082][  T349] overlayfs: failed to resolve './file0': -2
[   26.547911][  T349] syz.4.5 (349) used greatest stack depth: 21424 bytes left
[   26.557815][   T30] audit: type=1400 audit(1725447202.980:116): avc:  denied  { mounton } for  pid=293 comm="syz-executor" path="/root/syzkaller.LQefw9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   26.583409][   T30] audit: type=1400 audit(1725447202.980:117): avc:  denied  { mount } for  pid=293 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   27.254049][  T289] syz-executor (289) used greatest stack depth: 20880 bytes left
[   27.272334][  T362] loop4: detected capacity change from 0 to 512
[   27.323598][  T362] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   27.357963][  T362] EXT4-fs (loop4): orphan cleanup on readonly fs
[   27.369807][  T362] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.10: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   27.388324][  T362] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.10: Bad quota inode: 4, type: 1
[   27.399834][  T362] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   27.414647][  T362] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   27.421195][  T362] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   27.467794][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.481045][  T364] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.495663][  T364] device bridge_slave_0 entered promiscuous mode
[   27.509882][  T364] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.521019][  T364] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.528561][  T364] device bridge_slave_1 entered promiscuous mode
[   27.702290][  T364] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.709191][  T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.716263][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.723055][  T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.761195][  T376] loop2: detected capacity change from 0 to 512
[   27.772990][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   27.780758][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.788998][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.807792][  T376] EXT4-fs (loop2): orphan cleanup on readonly fs
[   27.822840][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   27.831112][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.838031][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.845819][  T376] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.14: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   27.865250][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   27.873411][  T376] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.14: Bad quota inode: 4, type: 1
[   27.884559][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.891420][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.899463][  T376] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   27.923627][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   27.931712][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   27.939642][  T376] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   27.956018][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.965018][  T376] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   27.977819][    T8] device bridge_slave_1 left promiscuous mode
[   27.984860][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.992862][    T8] device bridge_slave_0 left promiscuous mode
[   28.016739][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.025279][    T8] device veth1_macvtap left promiscuous mode
[   28.031191][    T8] device veth0_vlan left promiscuous mode
[   28.233476][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.246063][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.263855][  T364] device veth0_vlan entered promiscuous mode
[   28.273902][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.284396][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.348398][  T364] device veth1_macvtap entered promiscuous mode
[   28.358413][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.361307][  T381] loop3: detected capacity change from 0 to 256
[   28.366748][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.386239][  T383] loop4: detected capacity change from 0 to 256
[   28.393320][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   28.409711][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.418375][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.427740][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.483123][  T381] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   28.491693][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.505666][  T383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   28.505944][  T385] loop0: detected capacity change from 0 to 512
[   28.542618][  T387] loop1: detected capacity change from 0 to 256
[   28.593627][  T385] EXT4-fs (loop0): error: journal path ./file0 is not a block device
[   28.658660][  T387] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   30.944208][  T290] syz-executor (290) used greatest stack depth: 19352 bytes left
[   30.982371][  T402] loop2: detected capacity change from 0 to 256
[   31.004742][  T402] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   31.181193][  T406] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.188272][  T406] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.195861][  T406] device bridge_slave_0 entered promiscuous mode
[   31.217967][  T406] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.224944][  T406] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.232120][  T406] device bridge_slave_1 entered promiscuous mode
[   31.242017][  T407] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.248958][  T407] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.256249][  T407] device bridge_slave_0 entered promiscuous mode
[   31.267454][  T407] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.274356][  T407] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.283651][  T407] device bridge_slave_1 entered promiscuous mode
[   31.653486][    T8] device bridge_slave_1 left promiscuous mode
[   31.659727][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.667268][    T8] device bridge_slave_0 left promiscuous mode
[   31.673412][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.681559][    T8] device veth1_macvtap left promiscuous mode
[   31.687926][    T8] device veth0_vlan left promiscuous mode
[   32.069169][  T408] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.076388][  T408] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.083716][  T408] device bridge_slave_0 entered promiscuous mode
[   32.101567][  T408] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.108464][  T408] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.115801][  T408] device bridge_slave_1 entered promiscuous mode
[   32.285612][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.293670][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.300831][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.309203][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.317293][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.324236][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.331366][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.339434][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.347364][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.354204][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.362820][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.383704][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.390894][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.415893][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.424207][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.432118][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.439052][  T397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.446548][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.493989][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.501230][  T430] loop0: detected capacity change from 0 to 256
[   32.503051][  T397] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.515029][  T397] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.522345][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.530201][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.542955][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.550925][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.559269][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.580060][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.593250][  T430] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   32.607078][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.631528][  T406] device veth0_vlan entered promiscuous mode
[   32.653699][  T426] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.662844][  T426] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.670262][  T426] device bridge_slave_0 entered promiscuous mode
[   32.678571][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.686658][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.694091][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.701423][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.709658][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.717741][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.724600][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.732124][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.740396][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.759917][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.766780][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.774008][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.781290][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.788625][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.803211][  T426] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.810058][  T426] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.819759][  T426] device bridge_slave_1 entered promiscuous mode
[   32.888066][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.897120][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.923135][  T406] device veth1_macvtap entered promiscuous mode
[   33.099966][  T407] device veth0_vlan entered promiscuous mode
[   33.110142][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.118345][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.126187][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.133416][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.140841][   T30] kauditd_printk_skb: 28 callbacks suppressed
[   33.140854][   T30] audit: type=1400 audit(1725447210.350:146): avc:  denied  { create } for  pid=435 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.167286][   T30] audit: type=1400 audit(1725447210.350:147): avc:  denied  { create } for  pid=435 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.186924][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.201371][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.211423][  T437] loop4: detected capacity change from 0 to 512
[   33.217772][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.226006][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.234034][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.246374][  T437] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   33.258667][  T437] EXT4-fs (loop4): 1 orphan inode deleted
[   33.264306][  T437] EXT4-fs (loop4): 1 truncate cleaned up
[   33.269695][  T437] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   33.311801][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.319790][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.333130][  T407] device veth1_macvtap entered promiscuous mode
[   33.378348][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.386233][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.394489][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.402722][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.411470][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.419691][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.428028][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.465891][  T408] device veth0_vlan entered promiscuous mode
[   33.473364][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.480986][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.488943][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.496175][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.513867][  T408] device veth1_macvtap entered promiscuous mode
[   33.526630][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.527204][  T442] loop1: detected capacity change from 0 to 512
[   33.543579][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.551673][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.570912][  T442] EXT4-fs (loop1): orphan cleanup on readonly fs
[   33.583205][  T442] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.33: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   33.602682][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.612145][  T442] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.33: Bad quota inode: 4, type: 1
[   33.614156][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.630874][  T442] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   33.630974][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.650754][  T442] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   33.653463][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.660000][  T442] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   33.760729][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.768399][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.811322][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.819693][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.828642][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.835640][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.843291][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.864207][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.872310][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.879176][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.886648][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   33.953554][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.961387][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.121244][  T445] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.128541][  T445] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.140354][  T445] device bridge_slave_0 entered promiscuous mode
[   34.213733][  T445] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.227202][  T445] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.243369][  T445] device bridge_slave_1 entered promiscuous mode
[   34.265600][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.274363][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.307920][    T8] device bridge_slave_1 left promiscuous mode
[   34.312062][  T457] process 'syz.4.36' launched './file0' with NULL argv: empty string added
[   34.314394][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.331739][    T8] device bridge_slave_0 left promiscuous mode
[   34.335947][  T457] loop4: detected capacity change from 0 to 256
[   34.338108][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.356045][    T8] device bridge_slave_1 left promiscuous mode
[   34.362066][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.395138][    T8] device bridge_slave_0 left promiscuous mode
[   34.407625][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.416372][    T8] device veth1_macvtap left promiscuous mode
[   34.422201][    T8] device veth0_vlan left promiscuous mode
[   34.434437][   T30] audit: type=1400 audit(1725447211.650:148): avc:  denied  { mount } for  pid=455 comm="syz.4.36" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   34.464920][    T8] device veth1_macvtap left promiscuous mode
[   34.470913][    T8] device veth0_vlan left promiscuous mode
[   34.480876][   T30] audit: type=1326 audit(1725447211.680:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=455 comm="syz.4.36" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe35a076ef9 code=0x0
[   34.702711][  T465] loop1: detected capacity change from 0 to 16
[   34.738253][  T465] erofs: (device loop1): mounted with root inode @ nid 36.
[   34.845321][  T426] device veth0_vlan entered promiscuous mode
[   34.867503][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.876914][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.900286][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.913208][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.001185][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.017010][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.026559][  T426] device veth1_macvtap entered promiscuous mode
[   35.067921][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.076196][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.089946][   T30] audit: type=1400 audit(1725447212.300:150): avc:  denied  { unmount } for  pid=406 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   35.110796][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.120000][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.128402][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.172651][  T472] loop4: detected capacity change from 0 to 256
[   35.185060][  T474] loop2: detected capacity change from 0 to 256
[   35.227501][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   35.235354][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   35.256866][  T474] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   35.269109][  T472] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   35.281196][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   35.289888][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   35.329287][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.336191][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.378486][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   35.407635][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   35.419725][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.426615][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.467677][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   35.500051][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   35.561840][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   35.591951][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   35.660017][  T478] incfs: Backing dir is not set, filesystem can't be mounted.
[   35.667551][  T478] incfs: mount failed -2
[   35.884627][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   35.892498][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   35.900740][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.932693][  T445] device veth0_vlan entered promiscuous mode
[   35.946342][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   35.958326][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.979556][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   35.990999][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   36.062512][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   36.083173][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   36.111879][  T445] device veth1_macvtap entered promiscuous mode
[   36.125170][   T30] audit: type=1400 audit(1725447213.340:151): avc:  denied  { create } for  pid=473 comm="syz.2.30" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   36.164485][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   36.172179][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   36.190461][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   36.270260][   T30] audit: type=1400 audit(1725447213.440:152): avc:  denied  { read } for  pid=480 comm="syz.4.41" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   36.292970][   T30] audit: type=1400 audit(1725447213.440:153): avc:  denied  { open } for  pid=480 comm="syz.4.41" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   36.317736][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   36.322613][  T485] loop4: detected capacity change from 0 to 512
[   36.331689][   T30] audit: type=1400 audit(1725447213.440:154): avc:  denied  { ioctl } for  pid=480 comm="syz.4.41" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   36.342596][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   36.391280][  T487] loop0: detected capacity change from 0 to 128
[   36.414340][  T485] EXT4-fs (loop4): orphan cleanup on readonly fs
[   36.423446][  T485] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.42: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   36.474026][  T485] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.42: Bad quota inode: 4, type: 1
[   36.487848][  T485] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   36.502651][  T485] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   36.519605][  T485] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   36.532651][  T487] EXT4-fs (loop0): Test dummy encryption mode enabled
[   36.564520][  T487] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   36.597362][  T487] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff)
[   36.801144][   T30] audit: type=1400 audit(1725447214.000:155): avc:  denied  { map } for  pid=490 comm="syz.1.43" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   36.976495][    T8] device bridge_slave_1 left promiscuous mode
[   36.985580][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.030270][    T8] device bridge_slave_0 left promiscuous mode
[   37.051957][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.088357][  T502] overlayfs: failed to resolve './file0': -2
[   37.094804][    T8] device veth1_macvtap left promiscuous mode
[   37.118034][    T8] device veth0_vlan left promiscuous mode
[   37.272825][   T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   37.432596][  T505] loop1: detected capacity change from 0 to 16
[   37.445399][  T505] erofs: (device loop1): mounted with root inode @ nid 36.
[   37.622932][   T26] usb 4-1: Using ep0 maxpacket: 16
[   37.770805][  T518] loop4: detected capacity change from 0 to 1024
[   37.823171][   T26] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[   37.849170][  T519] loop0: detected capacity change from 0 to 256
[   37.886447][  T511] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.909270][   T26] usb 4-1: config 0 has no interface number 0
[   37.926047][  T511] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.934362][  T518] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   37.934517][  T511] device bridge_slave_0 entered promiscuous mode
[   37.942294][  T518] System zones: 0-1, 3-12
[   37.949393][  T511] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.953239][  T518] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   37.959588][  T511] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.995224][   T26] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[   38.030104][  T511] device bridge_slave_1 entered promiscuous mode
[   38.152874][   T26] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   38.167055][   T26] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   38.175576][   T26] usb 4-1: Product: syz
[   38.179586][   T26] usb 4-1: SerialNumber: syz
[   38.190885][   T26] usb 4-1: config 0 descriptor??
[   38.222899][  T499] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   38.229052][  T511] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.236650][  T511] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.243747][  T511] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.250497][  T511] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.413347][  T319] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.433775][  T319] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.452010][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   38.458967][   T30] kauditd_printk_skb: 10 callbacks suppressed
[   38.458983][   T30] audit: type=1400 audit(1725447215.660:166): avc:  denied  { create } for  pid=495 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   38.459895][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.495521][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   38.503750][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.511736][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.518611][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.537835][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   38.546284][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.564434][   T30] audit: type=1400 audit(1725447215.700:167): avc:  denied  { setopt } for  pid=495 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   38.588001][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.594887][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.622357][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   38.634245][   T26] usb 4-1: invalid MIDI in EP 0
[   38.639126][   T30] audit: type=1400 audit(1725447215.700:168): avc:  denied  { getopt } for  pid=495 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   38.639654][   T26] snd-usb-audio: probe of 4-1:0.2 failed with error -22
[   38.667441][   T26] usb 4-1: USB disconnect, device number 2
[   38.806750][  T530] loop0: detected capacity change from 0 to 1024
[   38.981443][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.993776][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   39.095004][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.102664][  T530] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   39.110626][  T530] System zones: 0-1, 3-12
[   39.115328][  T530] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   39.156924][  T535] loop4: detected capacity change from 0 to 512
[   39.225376][  T535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   39.436178][  T535] EXT4-fs (loop4): 1 orphan inode deleted
[   39.441791][  T535] EXT4-fs (loop4): 1 truncate cleaned up
[   39.447474][  T535] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   39.484331][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   39.492498][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.520271][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   39.528334][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   39.557685][  T511] device veth0_vlan entered promiscuous mode
[   39.578610][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   39.587570][  T545] loop1: detected capacity change from 0 to 512
[   39.593533][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   39.601553][  T545] EXT4-fs (loop1): error: journal path ./file0 is not a block device
[   39.608308][  T511] device veth1_macvtap entered promiscuous mode
[   39.624303][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   39.632245][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.640888][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   39.648483][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.899836][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.914585][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.922825][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.935344][    T8] device bridge_slave_1 left promiscuous mode
[   39.941619][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.949352][    T8] device bridge_slave_0 left promiscuous mode
[   39.956060][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.965964][    T8] device veth1_macvtap left promiscuous mode
[   39.971844][    T8] device veth0_vlan left promiscuous mode
[   40.329815][   T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   40.402607][  T560] loop3: detected capacity change from 0 to 128
[   40.448657][  T560] EXT4-fs (loop3): Test dummy encryption mode enabled
[   40.489213][  T560] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   40.505412][  T562] loop2: detected capacity change from 0 to 512
[   40.522998][  T560] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff)
[   40.655951][  T567] loop4: detected capacity change from 0 to 256
[   40.670336][  T562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   40.697272][  T562] EXT4-fs (loop2): 1 orphan inode deleted
[   40.711109][  T562] EXT4-fs (loop2): 1 truncate cleaned up
[   40.726943][  T562] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   40.729185][  T567] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   40.748946][   T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.763310][  T569] overlayfs: failed to resolve './file0': -2
[   40.922904][   T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   40.932851][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.940697][   T20] usb 1-1: Product: syz
[   40.945162][   T20] usb 1-1: Manufacturer: syz
[   40.949611][   T20] usb 1-1: SerialNumber: syz
[   41.202886][  T572] incfs: Backing dir is not set, filesystem can't be mounted.
[   41.210304][  T572] incfs: mount failed -2
[   41.441393][  T577] loop2: detected capacity change from 0 to 128
[   41.579844][  T578] loop3: detected capacity change from 0 to 1024
[   41.734378][  T578] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   41.742334][  T578] System zones: 0-1, 3-12
[   41.747216][  T577] EXT4-fs (loop2): Test dummy encryption mode enabled
[   41.747362][  T578] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   41.771024][  T577] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   41.797357][  T577] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff)
[   41.914798][  T543] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   41.932027][   T30] audit: type=1400 audit(1725447219.130:169): avc:  denied  { read } for  pid=542 comm="syz.0.54" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   41.933015][   T20] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[   41.954599][   T30] audit: type=1400 audit(1725447219.130:170): avc:  denied  { open } for  pid=542 comm="syz.0.54" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   42.041244][   T30] audit: type=1400 audit(1725447219.130:171): avc:  denied  { ioctl } for  pid=542 comm="syz.0.54" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   42.178127][   T20] cdc_ncm 1-1:1.0: bind() failure
[   42.199029][   T20] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   42.205721][   T20] cdc_ncm 1-1:1.1: bind() failure
[   42.232342][   T30] audit: type=1400 audit(1725447219.220:172): avc:  denied  { setopt } for  pid=542 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   42.255917][   T30] audit: type=1400 audit(1725447219.470:173): avc:  denied  { bind } for  pid=542 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   42.302239][  T591] loop3: detected capacity change from 0 to 128
[   42.327688][  T592] overlayfs: failed to resolve './file0': -2
[   42.543984][   T30] audit: type=1400 audit(1725447219.760:174): avc:  denied  { bind } for  pid=590 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.827815][  T598] loop1: detected capacity change from 0 to 512
[   42.884754][  T598] EXT4-fs (loop1): error: journal path ./file0 is not a block device
[   43.364885][  T604] loop4: detected capacity change from 0 to 16
[   43.403410][  T604] erofs: (device loop4): mounted with root inode @ nid 36.
[   43.526300][  T319] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   43.782834][  T319] usb 3-1: Using ep0 maxpacket: 16
[   43.912844][  T319] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[   43.920768][  T319] usb 3-1: config 0 has no interface number 0
[   43.926973][  T319] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[   43.977396][   T20] usb 1-1: USB disconnect, device number 2
[   44.102922][  T319] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   44.111855][  T319] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   44.119719][  T319] usb 3-1: Product: syz
[   44.123920][  T319] usb 3-1: SerialNumber: syz
[   44.134051][  T319] usb 3-1: config 0 descriptor??
[   44.153041][  T600] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   44.523677][  T319] usb 3-1: invalid MIDI in EP 0
[   44.529624][  T319] snd-usb-audio: probe of 3-1:0.2 failed with error -22
[   44.569836][  T319] usb 3-1: USB disconnect, device number 2
[   44.766654][  T621] loop4: detected capacity change from 0 to 128
[   44.855315][  T621] EXT4-fs (loop4): Test dummy encryption mode enabled
[   44.866144][  T624] loop0: detected capacity change from 0 to 256
[   44.871052][  T621] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   44.884759][  T621] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038 (0x7fffffff)
[   45.015664][  T624] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   45.064468][  T630] overlayfs: failed to resolve './file0': -2
[   45.163287][  T632] loop2: detected capacity change from 0 to 512
[   45.304274][  T634] incfs: Backing dir is not set, filesystem can't be mounted.
[   45.311659][  T634] incfs: mount failed -2
[   45.375705][  T632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   45.597975][  T632] EXT4-fs (loop2): 1 orphan inode deleted
[   45.606640][  T632] EXT4-fs (loop2): 1 truncate cleaned up
[   45.622765][  T632] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   46.171453][  T646] loop0: detected capacity change from 0 to 256
[   46.233034][  T649] loop4: detected capacity change from 0 to 512
[   46.255929][   T30] audit: type=1326 audit(1725447223.470:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=644 comm="syz.0.75" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff29f23def9 code=0x0
[   46.342863][  T649] EXT4-fs (loop4): orphan cleanup on readonly fs
[   46.364378][  T649] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.76: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   46.408994][  T649] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.76: Bad quota inode: 4, type: 1
[   46.422919][  T649] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   46.440836][  T649] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   46.469889][  T653] loop2: detected capacity change from 0 to 128
[   46.476525][  T649] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   46.553885][  T653] EXT4-fs (loop2): Test dummy encryption mode enabled
[   46.611437][  T653] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   46.624138][  T653] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff)
[   46.754932][  T657] loop4: detected capacity change from 0 to 128
[   46.894796][  T659] overlayfs: failed to resolve './file0': -2
[   46.937372][  T657] EXT4-fs (loop4): Test dummy encryption mode enabled
[   47.114828][  T657] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   47.133517][  T657] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff)
[   47.161682][  T663] loop3: detected capacity change from 0 to 8192
[   47.193136][  T665] loop0: detected capacity change from 0 to 512
[   47.227493][   T30] audit: type=1400 audit(1725447224.440:176): avc:  denied  { name_bind } for  pid=662 comm="syz.3.79" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[   47.255153][  T665] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   47.270247][  T665] EXT4-fs (loop0): 1 orphan inode deleted
[   47.276016][  T665] EXT4-fs (loop0): 1 truncate cleaned up
[   47.281513][  T665] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   47.372727][  T668] overlayfs: failed to resolve './file0': -2
[   47.447556][  T672] loop2: detected capacity change from 0 to 128
[   47.606422][  T672] EXT4-fs (loop2): Test dummy encryption mode enabled
[   47.629506][  T672] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   48.800953][  T672] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff)
[   48.832880][   T30] audit: type=1400 audit(1725447226.030:177): avc:  denied  { append } for  pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   48.865088][   T30] audit: type=1400 audit(1725447226.030:178): avc:  denied  { open } for  pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   48.918042][   T30] audit: type=1400 audit(1725447226.030:179): avc:  denied  { getattr } for  pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   48.940448][  T397] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   48.955972][  T680] loop4: detected capacity change from 0 to 256
[   48.969420][  T680] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   49.003897][  T681] loop1: detected capacity change from 0 to 512
[   49.096044][  T681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   49.118693][  T681] EXT4-fs (loop1): 1 orphan inode deleted
[   49.124276][  T681] EXT4-fs (loop1): 1 truncate cleaned up
[   49.129731][  T681] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   49.222704][  T397] usb 4-1: Using ep0 maxpacket: 16
[   49.383153][  T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[   49.470485][  T397] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   49.491297][  T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.509886][  T691] loop0: detected capacity change from 0 to 512
[   49.510371][  T397] usb 4-1: config 0 descriptor??
[   49.561777][  T691] EXT4-fs (loop0): orphan cleanup on readonly fs
[   49.570906][  T691] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.86: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   49.589439][  T691] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.86: Bad quota inode: 4, type: 1
[   49.600376][  T691] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   49.615389][  T691] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   49.621909][  T691] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   50.338679][  T700] loop0: detected capacity change from 0 to 1024
[   50.392626][  T699] loop2: detected capacity change from 0 to 512
[   51.236661][  T699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   51.253996][  T699] EXT4-fs (loop2): 1 orphan inode deleted
[   51.257112][  T700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   51.259562][  T699] EXT4-fs (loop2): 1 truncate cleaned up
[   51.268249][  T700] System zones: 
[   51.273425][  T699] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   51.299082][  T700] 0-1, 3-12
[   51.303392][  T700] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   51.340094][  T710] loop1: detected capacity change from 0 to 512
[   51.350968][  T710] EXT4-fs (loop1): orphan cleanup on readonly fs
[   51.357488][  T710] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.90: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   51.375750][  T710] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.90: Bad quota inode: 4, type: 1
[   51.386603][  T710] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   51.422808][  T710] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   51.429404][  T710] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   51.502541][  T663] UDC core: couldn't find an available UDC or it's busy: -16
[   51.509926][  T663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   51.527224][  T397] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1
[   51.542880][  T717] loop0: detected capacity change from 0 to 256
[   51.549042][  T397] hid-generic 0003:0158:0100.0001: unexpected long global item
[   51.554056][  T718] loop2: detected capacity change from 0 to 512
[   51.563087][  T397] hid-generic: probe of 0003:0158:0100.0001 failed with error -22
[   51.575540][  T717] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   51.614658][  T713] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.623733][  T713] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.631199][  T713] device bridge_slave_0 entered promiscuous mode
[   51.638434][  T713] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.647703][  T713] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.655272][  T713] device bridge_slave_1 entered promiscuous mode
[   51.662288][  T718] EXT4-fs (loop2): orphan cleanup on readonly fs
[   51.678880][  T718] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.93: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   51.700482][  T718] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.93: Bad quota inode: 4, type: 1
[   51.711555][  T718] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   51.726269][  T718] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   51.733450][  T718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   52.192431][  T320] usb 4-1: USB disconnect, device number 3
[   52.338117][  T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.347172][  T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.670022][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.683568][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.691581][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.698529][  T397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.706439][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.714924][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.723214][  T397] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.730061][  T397] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.737512][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.758096][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.765969][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.773877][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.781684][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.789840][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.797977][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.806136][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.979258][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.002738][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.010124][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.018824][  T713] device veth0_vlan entered promiscuous mode
[   53.031751][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.041155][  T713] device veth1_macvtap entered promiscuous mode
[   53.050970][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.871047][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.898119][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.908905][  T744] loop2: detected capacity change from 0 to 512
[   53.918842][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.932530][  T744] EXT4-fs (loop2): orphan cleanup on readonly fs
[   53.943288][  T744] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.101: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   53.973272][  T744] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.101: Bad quota inode: 4, type: 1
[   53.974971][  T747] loop3: detected capacity change from 0 to 128
[   53.984186][  T744] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   54.018062][  T744] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   54.022217][  T747] EXT4-fs (loop3): Test dummy encryption mode enabled
[   54.024804][  T744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   54.035105][  T749] loop4: detected capacity change from 0 to 128
[   54.054394][   T30] audit: type=1400 audit(1725447231.270:180): avc:  denied  { remove_name } for  pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   54.106876][   T30] audit: type=1400 audit(1725447231.270:181): avc:  denied  { rename } for  pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   54.129748][   T30] audit: type=1400 audit(1725447231.270:182): avc:  denied  { create } for  pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   54.151954][  T747] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   54.176557][  T739] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.182392][  T747] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038 (0x7fffffff)
[   54.183587][  T739] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.193354][  T749] EXT4-fs (loop4): Test dummy encryption mode enabled
[   54.204049][  T739] device bridge_slave_0 entered promiscuous mode
[   54.216398][  T739] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.223420][  T739] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.224092][  T749] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   54.230809][  T739] device bridge_slave_1 entered promiscuous mode
[   54.245065][  T749] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff)
[   54.473976][  T758] overlayfs: failed to resolve './file0': -2
[   54.529835][  T739] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.536738][  T739] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.543843][  T739] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.550597][  T739] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.042969][  T762] overlayfs: failed to resolve './file0': -2
[   55.254662][  T739] device veth0_vlan entered promiscuous mode
[   55.267826][  T739] device veth1_macvtap entered promiscuous mode
[   55.309731][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.319324][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.327547][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.337542][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.356080][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.379374][  T770] loop3: detected capacity change from 0 to 512
[   55.389049][  T768] loop4: detected capacity change from 0 to 256
[   55.396689][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.415073][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.433378][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.441751][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.449880][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.457074][  T770] EXT4-fs (loop3): orphan cleanup on readonly fs
[   55.458209][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.463627][  T770] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.105: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   55.474683][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.488492][  T770] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.105: Bad quota inode: 4, type: 1
[   55.508164][  T770] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   55.522722][  T770] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   55.530471][  T770] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   55.533639][  T768] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   55.963549][  T781] loop2: detected capacity change from 0 to 1024
[   56.033988][  T484] device bridge_slave_1 left promiscuous mode
[   56.039976][  T484] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.050079][  T484] device bridge_slave_0 left promiscuous mode
[   56.060965][  T784] loop0: detected capacity change from 0 to 512
[   56.067442][  T484] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.075799][  T484] device veth1_macvtap left promiscuous mode
[   56.081689][  T484] device veth0_vlan left promiscuous mode
[   56.227891][  T784] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   56.744837][  T781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   56.752931][  T781] System zones: 0-1, 3-12
[   56.759213][  T781] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   56.759897][  T784] EXT4-fs (loop0): 1 orphan inode deleted
[   56.794037][  T784] EXT4-fs (loop0): 1 truncate cleaned up
[   56.799625][  T784] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   57.332889][  T397] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   57.552797][   T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   57.732863][  T397] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.760031][  T807] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.768315][  T807] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.776129][  T807] device bridge_slave_0 entered promiscuous mode
[   57.783724][  T807] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.790596][  T807] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.797583][   T20] usb 2-1: Using ep0 maxpacket: 16
[   57.803368][  T807] device bridge_slave_1 entered promiscuous mode
[   57.922889][  T397] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   57.936692][  T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.945082][  T397] usb 1-1: Product: syz
[   57.949065][  T397] usb 1-1: Manufacturer: syz
[   57.952877][   T20] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[   57.953864][  T397] usb 1-1: SerialNumber: syz
[   57.961474][   T20] usb 2-1: config 0 has no interface number 0
[   57.961504][   T20] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[   58.024982][  T807] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.031870][  T807] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.038982][  T807] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.045739][  T807] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.078901][  T816] loop2: detected capacity change from 0 to 512
[   58.108663][  T817] loop3: detected capacity change from 0 to 16
[   58.143289][  T816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   58.207401][  T816] EXT4-fs (loop2): 1 orphan inode deleted
[   58.213101][  T816] EXT4-fs (loop2): 1 truncate cleaned up
[   58.218579][  T816] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   58.275530][  T817] erofs: (device loop3): mounted with root inode @ nid 36.
[   58.351100][  T547] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.366790][  T547] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.392976][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.400515][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.408388][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.416886][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.425663][  T547] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.432533][  T547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.460670][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.468643][   T20] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   58.477769][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.486019][   T20] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   58.494027][  T547] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.500851][  T547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.507996][   T20] usb 2-1: Product: syz
[   58.511878][   T20] usb 2-1: SerialNumber: syz
[   58.516810][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.524680][   T20] usb 2-1: config 0 descriptor??
[   58.529764][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.537787][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.545481][  T795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   58.545704][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.560102][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.573033][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.584153][  T484] device bridge_slave_1 left promiscuous mode
[   58.591155][  T484] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.599084][  T484] device bridge_slave_0 left promiscuous mode
[   58.606028][  T484] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.621123][  T484] device veth1_macvtap left promiscuous mode
[   58.627087][  T484] device veth0_vlan left promiscuous mode
[   58.773562][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.781243][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.790182][  T807] device veth0_vlan entered promiscuous mode
[   58.796798][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   58.805950][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   58.820066][  T807] device veth1_macvtap entered promiscuous mode
[   58.840682][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.849530][   T20] usb 2-1: invalid MIDI in EP 0
[   58.856466][   T20] snd-usb-audio: probe of 2-1:0.2 failed with error -22
[   58.865995][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.877991][   T20] usb 2-1: USB disconnect, device number 2
[   58.884999][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.908062][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.916197][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.924578][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.932658][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.312844][  T397] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[   59.321462][  T397] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   59.330695][  T835] loop1: detected capacity change from 0 to 512
[   59.336800][  T397] cdc_ncm 1-1:1.0: setting rx_max = 2048
[   59.459003][  T837] loop3: detected capacity change from 0 to 1024
[   59.522964][  T837] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   59.531148][  T837] System zones: 0-1, 3-12
[   59.538722][  T837] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   59.556777][  T835] EXT4-fs (loop1): orphan cleanup on readonly fs
[   59.581866][  T835] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.119: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   59.600398][  T835] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.119: Bad quota inode: 4, type: 1
[   59.611677][  T835] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.626398][  T835] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   59.633204][  T835] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   59.801762][  T397] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[   59.840007][  T397] usb 1-1: USB disconnect, device number 3
[   59.840151][   T30] audit: type=1400 audit(1725447237.050:183): avc:  denied  { read } for  pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   59.846221][  T397] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[   60.137509][  T846] loop2: detected capacity change from 0 to 1024
[   60.210294][  T846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   60.218266][  T846] System zones: 0-1, 3-12
[   60.222929][  T846] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   60.291581][  T854] loop4: detected capacity change from 0 to 512
[   60.330773][  T857] loop3: detected capacity change from 0 to 512
[   60.346586][  T854] EXT4-fs (loop4): orphan cleanup on readonly fs
[   60.353143][  T854] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.122: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   60.371858][  T854] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.122: Bad quota inode: 4, type: 1
[   60.383014][  T857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   60.394506][  T854] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.411002][  T857] EXT4-fs (loop3): 1 orphan inode deleted
[   60.416578][  T857] EXT4-fs (loop3): 1 truncate cleaned up
[   60.422038][  T857] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   60.450660][  T854] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   60.461370][  T854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   60.507470][  T869] loop0: detected capacity change from 0 to 16
[   60.525522][  T869] erofs: (device loop0): mounted with root inode @ nid 36.
[   61.366083][   T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   61.421785][  T898] loop3: detected capacity change from 0 to 256
[   61.466186][  T898] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   61.612809][   T20] usb 2-1: Using ep0 maxpacket: 16
[   62.733133][   T20] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[   62.742213][   T20] usb 2-1: config 0 has no interface number 0
[   62.821395][   T20] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[   62.845691][  T908] loop2: detected capacity change from 0 to 8192
[   62.862177][  T911] loop3: detected capacity change from 0 to 16
[   62.898063][  T911] erofs: (device loop3): mounted with root inode @ nid 36.
[   62.980981][   T30] audit: type=1400 audit(1725447240.180:184): avc:  denied  { create } for  pid=906 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   63.875729][   T20] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   63.891713][   T20] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   63.899837][   T20] usb 2-1: Product: syz
[   63.904043][   T20] usb 2-1: SerialNumber: syz
[   63.926943][  T397] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   63.970444][   T20] usb 2-1: config 0 descriptor??
[   64.038479][   T20] usb 2-1: can't set config #0, error -71
[   64.046951][   T20] usb 2-1: USB disconnect, device number 3
[   64.633893][  T927] loop0: detected capacity change from 0 to 1024
[   64.741598][  T924] loop4: detected capacity change from 0 to 1024
[   64.853390][  T931] loop3: detected capacity change from 0 to 16
[   64.863180][  T397] usb 3-1: Using ep0 maxpacket: 16
[   64.874341][  T927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   64.882434][  T927] System zones: 0-1, 3-12
[   64.894953][  T924] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   64.903254][  T924] System zones: 0-1, 3-12
[   64.925748][  T927] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   64.955393][  T924] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   65.022823][  T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[   65.025211][  T931] erofs: (device loop3): mounted with root inode @ nid 36.
[   65.034204][  T397] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   65.049726][  T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.062373][  T397] usb 3-1: config 0 descriptor??
[   65.192086][  T938] loop0: detected capacity change from 0 to 512
[   65.214830][  T938] EXT4-fs (loop0): orphan cleanup on readonly fs
[   65.221856][  T938] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.136: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   65.240647][  T938] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.136: Bad quota inode: 4, type: 1
[   65.251929][  T938] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   65.266737][  T938] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   65.292928][  T938] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   65.442607][  T945] loop4: detected capacity change from 0 to 1024
[   65.847148][  T945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   65.855364][  T945] System zones: 0-1, 3-12
[   65.862488][  T945] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   66.024618][  T908] UDC core: couldn't find an available UDC or it's busy: -16
[   66.035329][  T908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   66.100356][   T30] audit: type=1400 audit(1725447243.310:185): avc:  denied  { create } for  pid=953 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.120010][   T30] audit: type=1400 audit(1725447243.310:186): avc:  denied  { setopt } for  pid=953 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.170198][  T397] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1
[   66.185996][  T397] hid-generic 0003:0158:0100.0002: unexpected long global item
[   66.193903][  T397] hid-generic: probe of 0003:0158:0100.0002 failed with error -22
[   66.194620][  T959] loop0: detected capacity change from 0 to 16
[   66.233665][  T963] loop4: detected capacity change from 0 to 512
[   66.284240][  T959] erofs: (device loop0): mounted with root inode @ nid 36.
[   66.297585][  T963] EXT4-fs (loop4): error: journal path ./file0 is not a block device
[   66.337858][    T6] usb 3-1: USB disconnect, device number 3
[   67.967934][  T985] loop3: detected capacity change from 0 to 128
[   67.992786][   T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   68.034500][  T985] EXT4-fs (loop3): Test dummy encryption mode enabled
[   68.042259][  T988] loop0: detected capacity change from 0 to 16
[   68.049773][  T985] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   68.062413][  T985] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038 (0x7fffffff)
[   68.198492][  T990] loop1: detected capacity change from 0 to 1024
[   68.373566][  T990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   68.381825][  T990] System zones: 0-1, 3-12
[   68.387020][  T990] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   68.429002][  T988] erofs: (device loop0): mounted with root inode @ nid 36.
[   68.472778][   T20] usb 3-1: Using ep0 maxpacket: 16
[   68.946693][   T20] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[   69.046766][   T20] usb 3-1: config 0 has no interface number 0
[   69.052700][   T20] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[   69.100340][ T1004] loop3: detected capacity change from 0 to 128
[   69.178636][ T1004] EXT4-fs (loop3): Test dummy encryption mode enabled
[   69.185353][   T20] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   69.204352][   T20] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   69.213457][ T1004] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   69.839656][ T1004] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038 (0x7fffffff)
[   69.886197][   T20] usb 3-1: Product: syz
[   69.890198][   T20] usb 3-1: SerialNumber: syz
[   69.897862][ T1015] loop1: detected capacity change from 0 to 128
[   69.915882][   T20] usb 3-1: config 0 descriptor??
[   69.933484][  T976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   69.977592][ T1015] EXT4-fs (loop1): Test dummy encryption mode enabled
[   70.001755][ T1015] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   70.022029][ T1015] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038 (0x7fffffff)
[   70.073617][   T20] usb 3-1: invalid MIDI in EP 0
[   70.078832][   T20] snd-usb-audio: probe of 3-1:0.2 failed with error -22
[   70.172664][   T20] usb 3-1: USB disconnect, device number 4
[   70.561895][ T1025] overlayfs: failed to resolve './file0': -2
[   70.712257][ T1031] overlayfs: failed to resolve './file0': -2
[   71.430780][ T1040] loop1: detected capacity change from 0 to 128
[   71.512246][ T1040] EXT4-fs (loop1): Test dummy encryption mode enabled
[   71.519839][ T1040] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   71.528027][ T1046] loop0: detected capacity change from 0 to 16
[   71.538189][ T1040] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038 (0x7fffffff)
[   71.603197][  T703] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.685271][ T1048] loop2: detected capacity change from 0 to 1024
[   71.774388][ T1046] erofs: (device loop0): mounted with root inode @ nid 36.
[   71.804152][ T1048] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   71.812108][ T1048] System zones: 0-1, 3-12
[   71.816753][ T1048] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   71.849579][   T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   72.216299][ T1054] overlayfs: failed to resolve './file0': -2
[   72.442864][  T703] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.481941][ T1062] loop1: detected capacity change from 0 to 256
[   72.496125][ T1062] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   72.543046][   T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.633153][  T703] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   72.648921][  T703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.686331][  T703] usb 5-1: Product: syz
[   72.699915][  T703] usb 5-1: Manufacturer: syz
[   72.805513][   T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   72.811752][  T703] usb 5-1: SerialNumber: syz
[   72.820548][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.828826][   T20] usb 4-1: Product: syz
[   72.833800][   T20] usb 4-1: Manufacturer: syz
[   72.838436][   T20] usb 4-1: SerialNumber: syz
[   74.095321][   T20] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[   74.101168][   T20] cdc_ncm 4-1:1.0: bind() failure
[   74.123807][   T20] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   74.125344][ T1078] loop0: detected capacity change from 0 to 512
[   74.130430][   T20] cdc_ncm 4-1:1.1: bind() failure
[   74.174303][ T1078] EXT4-fs (loop0): orphan cleanup on readonly fs
[   74.181835][ T1078] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   74.205177][ T1078] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.167: Bad quota inode: 4, type: 1
[   74.216699][ T1078] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   74.231663][ T1078] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   74.238576][ T1078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   74.269560][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.276579][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.284043][ T1080] device bridge_slave_0 entered promiscuous mode
[   74.291047][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.297995][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.305341][ T1080] device bridge_slave_1 entered promiscuous mode
[   74.360378][   T30] audit: type=1400 audit(1725447251.570:187): avc:  denied  { write } for  pid=1080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   74.367078][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.380974][   T30] audit: type=1400 audit(1725447251.570:188): avc:  denied  { read } for  pid=1080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   74.387655][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.387760][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.421758][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.448331][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.462669][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.469975][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.496301][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.504823][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.511682][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.528382][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.536469][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.543340][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.559266][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.580931][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.616109][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.644351][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.653444][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.660787][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.668923][ T1080] device veth0_vlan entered promiscuous mode
[   74.681089][ T1080] device veth1_macvtap entered promiscuous mode
[   74.688049][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.939410][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.948111][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.956260][  T703] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[   74.970035][  T703] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   74.979850][  T703] cdc_ncm 5-1:1.0: setting rx_max = 2048
[   74.985810][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.996437][ T1095] loop1: detected capacity change from 0 to 256
[   74.997195][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.029760][ T1097] loop0: detected capacity change from 0 to 128
[   75.040575][ T1095] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   75.063603][ T1097] EXT4-fs (loop0): Test dummy encryption mode enabled
[   75.075505][ T1097] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   75.088614][ T1097] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038 (0x7fffffff)
[   75.294433][  T703] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[   75.372219][  T703] usb 5-1: USB disconnect, device number 2
[   75.618824][ T1106] overlayfs: failed to resolve './file0': -2
[   75.643283][  T703] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[   75.918247][  T397] usb 4-1: USB disconnect, device number 4
[   75.940273][ T1127] loop1: detected capacity change from 0 to 16
[   76.003772][ T1127] erofs: (device loop1): mounted with root inode @ nid 36.
[   76.103894][ T1135] loop3: detected capacity change from 0 to 512
[   76.276092][ T1135] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   76.394887][ T1135] EXT4-fs (loop3): 1 orphan inode deleted
[   76.400561][ T1135] EXT4-fs (loop3): 1 truncate cleaned up
[   76.406047][ T1135] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   76.541680][ T1140] loop4: detected capacity change from 0 to 256
[   76.635431][ T1140] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   76.856292][ T1154] loop2: detected capacity change from 0 to 512
[   76.875645][ T1158] loop3: detected capacity change from 0 to 512
[   77.926462][ T1167] loop1: detected capacity change from 0 to 512
[   77.940880][ T1154] EXT4-fs (loop2): orphan cleanup on readonly fs
[   77.950465][ T1158] EXT4-fs (loop3): orphan cleanup on readonly fs
[   78.063107][ T1154] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.178: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   78.085674][ T1158] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.177: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   78.091629][ T1154] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.178: Bad quota inode: 4, type: 1
[   78.132976][ T1154] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   78.147683][ T1167] EXT4-fs (loop1): error: journal path ./file0 is not a block device
[   78.147710][ T1154] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   78.155728][ T1158] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.177: Bad quota inode: 4, type: 1
[   78.182822][ T1154] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.202827][ T1158] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   78.222947][ T1158] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   78.229670][ T1158] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.398513][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.405716][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.413474][ T1170] device bridge_slave_0 entered promiscuous mode
[   78.420717][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.427638][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.435033][ T1170] device bridge_slave_1 entered promiscuous mode
[   78.508027][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.515002][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.522116][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.528877][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.559137][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.567648][   T20] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.575541][   T20] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.588079][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.596384][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.603259][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.611063][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.619127][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.626337][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.642875][   T60] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   78.654414][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.662528][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.677246][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.692205][ T1180] loop3: detected capacity change from 0 to 128
[   78.692611][ T1170] device veth0_vlan entered promiscuous mode
[   78.711617][ T1170] device veth1_macvtap entered promiscuous mode
[   78.722484][  T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.725341][ T1184] loop1: detected capacity change from 0 to 16
[   78.730848][  T703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.744521][  T703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.751735][ T1180] EXT4-fs (loop3): Test dummy encryption mode enabled
[   78.758970][  T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.765220][ T1184] erofs: (device loop1): mounted with root inode @ nid 36.
[   78.804156][ T1180] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   78.833910][ T1180] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038 (0x7fffffff)
[   78.901529][  T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.442808][  T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.059143][ T1196] overlayfs: failed to resolve './file0': -2
[   81.162845][ T1204] loop2: detected capacity change from 0 to 256
[   81.949364][ T1207] loop0: detected capacity change from 0 to 16
[   81.993179][ T1209] loop4: detected capacity change from 0 to 512
[   82.010473][ T1207] erofs: (device loop0): mounted with root inode @ nid 36.
[   82.028930][ T1204] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   82.041501][ T1211] loop1: detected capacity change from 0 to 16
[   82.053186][   T60] usb 1-1: unable to read config index 0 descriptor/all
[   82.061043][   T60] usb 1-1: can't read configurations, error -71
[   82.070143][ T1209] EXT4-fs (loop4): orphan cleanup on readonly fs
[   82.077165][ T1209] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.191: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   82.095813][ T1209] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.191: Bad quota inode: 4, type: 1
[   82.107419][ T1209] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   82.122432][ T1209] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   82.167811][ T1209] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   82.197043][ T1211] erofs: (device loop1): mounted with root inode @ nid 36.
[   83.489626][ T1226] loop0: detected capacity change from 0 to 512
[   83.511163][ T1228] loop3: detected capacity change from 0 to 512
[   84.333166][ T1226] EXT4-fs (loop0): orphan cleanup on readonly fs
[   84.340834][ T1236] loop1: detected capacity change from 0 to 256
[   84.347548][ T1226] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.193: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   84.367169][ T1228] EXT4-fs (loop3): orphan cleanup on readonly fs
[   84.373940][ T1228] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.195: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   84.412613][ T1226] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.193: Bad quota inode: 4, type: 1
[   84.424001][ T1228] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.195: Bad quota inode: 4, type: 1
[   84.436063][ T1226] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   84.451265][ T1228] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   84.467337][ T1226] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   84.477074][ T1236] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   84.489807][ T1228] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   84.496650][ T1226] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   84.512315][ T1228] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   84.729907][ T1244] loop4: detected capacity change from 0 to 8192
[   85.191082][ T1252] loop0: detected capacity change from 0 to 16
[   85.292072][ T1252] erofs: (device loop0): mounted with root inode @ nid 36.
[   85.306618][    T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   85.428423][ T1259] loop2: detected capacity change from 0 to 512
[   86.854350][ T1259] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   86.963515][ T1259] EXT4-fs (loop2): 1 orphan inode deleted
[   86.969339][ T1259] EXT4-fs (loop2): 1 truncate cleaned up
[   86.975370][ T1259] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none.
[   87.121922][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.129223][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.213075][ T1273] device bridge_slave_0 entered promiscuous mode
[   87.225729][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.233183][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.242491][ T1273] device bridge_slave_1 entered promiscuous mode
[   87.446298][    T6] usb 5-1: Using ep0 maxpacket: 16
[   87.473219][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.480083][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.487230][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.494105][ T1273] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.549453][ T1273] device veth0_vlan entered promiscuous mode
[   87.565922][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.587435][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.595521][ T1067] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   87.604630][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.613531][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.621324][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.629294][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   87.637282][    T6] usb 5-1: unable to read config index 0 descriptor/all
[   87.905813][ T1283] loop4: detected capacity change from 0 to 512
[   87.961365][    T6] usb 5-1: can't read configurations, error -71
[   87.967943][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.976141][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.983446][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.990742][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.999129][ T1273] device veth1_macvtap entered promiscuous mode
[   88.015768][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.023997][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.024859][ T1283] EXT4-fs (loop4): orphan cleanup on readonly fs
[   88.032146][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.039206][ T1283] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.208: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   88.048078][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.065732][ T1283] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.208: Bad quota inode: 4, type: 1
[   88.084653][ T1283] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   88.099281][ T1283] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   88.107325][ T1283] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.163039][ T1067] usb 4-1: Using ep0 maxpacket: 16
[   88.203981][  T484] device bridge_slave_1 left promiscuous mode
[   88.209952][  T484] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.218231][  T484] device bridge_slave_0 left promiscuous mode
[   88.224341][  T484] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.232614][  T484] device veth1_macvtap left promiscuous mode
[   88.239028][  T484] device veth0_vlan left promiscuous mode
[   88.703561][ T1295] loop2: detected capacity change from 0 to 128
[   88.732799][ T1067] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[   88.744096][ T1067] usb 4-1: config 0 has no interface number 0
[   88.756525][ T1067] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[   88.790998][ T1295] EXT4-fs (loop2): Test dummy encryption mode enabled
[   88.810359][ T1295] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   88.823331][ T1295] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038 (0x7fffffff)
[   89.202900][ T1067] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   89.221315][ T1304] loop4: detected capacity change from 0 to 512
[   89.228698][ T1067] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   89.245407][ T1067] usb 4-1: Product: syz
[   89.249536][ T1067] usb 4-1: SerialNumber: syz
[   89.258962][ T1067] usb 4-1: config 0 descriptor??
[   89.289063][ T1304] EXT4-fs (loop4): orphan cleanup on readonly fs
[   89.295399][ T1268] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   89.302620][ T1304] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.212: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   89.321684][ T1304] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.212: Bad quota inode: 4, type: 1
[   89.332963][ T1304] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   89.347568][ T1304] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   89.354137][ T1304] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.419711][ T1310] overlayfs: failed to resolve './file0': -2
[   89.553570][ T1067] usb 4-1: invalid MIDI in EP 0
[   89.560721][ T1067] snd-usb-audio: probe of 4-1:0.2 failed with error -22
[   89.582246][ T1067] usb 4-1: USB disconnect, device number 5
[   90.264811][ T1323] overlayfs: failed to resolve './file0': -2
[   90.279221][   T30] audit: type=1400 audit(1725447267.480:189): avc:  denied  { unlink } for  pid=1316 comm="syz.3.215" name="#1f" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   90.486547][ T1326] loop4: detected capacity change from 0 to 256
[   90.495804][    T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   90.530251][ T1326] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[   91.046037][ T1338] loop3: detected capacity change from 0 to 16
[   91.181303][ T1338] erofs: (device loop3): mounted with root inode @ nid 36.
[   91.219204][    T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.241144][ T1340] loop0: detected capacity change from 0 to 512
[   91.320822][ T1340] EXT4-fs (loop0): orphan cleanup on readonly fs
[   91.327536][ T1340] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.222: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   91.346083][ T1340] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.222: Bad quota inode: 4, type: 1
[   91.357215][ T1340] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   91.389311][ T1340] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   91.396325][ T1340] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   91.422934][    T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   91.432137][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.440154][    T6] usb 2-1: Product: syz
[   91.444264][    T6] usb 2-1: Manufacturer: syz
[   91.448671][    T6] usb 2-1: SerialNumber: syz
[   91.874484][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.881400][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.891581][ T1347] device bridge_slave_0 entered promiscuous mode
[   91.962092][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.969178][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.979512][ T1347] device bridge_slave_1 entered promiscuous mode
[   92.087735][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.094728][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.101790][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.108599][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.152123][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.159916][  T547] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.168156][  T547] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.180787][ T1355] loop2: detected capacity change from 0 to 8192
[   92.188160][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.196421][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.197633][ T1357] loop0: detected capacity change from 0 to 128
[   92.203295][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.216562][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.224594][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.231418][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.250524][ T1347] device veth0_vlan entered promiscuous mode
[   92.258594][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   92.266924][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   92.274896][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   92.282139][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   92.289423][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   92.297254][  T547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   92.313919][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.323608][ T1347] device veth1_macvtap entered promiscuous mode
[   92.325247][ T1198] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   92.359639][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.369645][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.123100][  T547] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   93.192843][ T1198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.652868][    T6] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[   93.659154][    T6] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   93.666749][    T6] cdc_ncm 2-1:1.0: setting rx_max = 2048
[   94.357777][ T1378] loop4: detected capacity change from 0 to 1024
[   94.383144][ T1198] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   94.405675][ T1198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.537386][ T1378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b80ec128, mo2=0002]
[   94.545477][ T1378] System zones: 0-1, 3-12
[   94.545882][  T547] usb 3-1: Using ep0 maxpacket: 16
[   94.590298][ T1198] usb 4-1: Product: syz
[   94.599397][ T1198] usb 4-1: Manufacturer: syz
[   94.601118][ T1378] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,debug,stripe=0x0000000000000005,usrquota,lazytime,min_batch_time=0x0000000000000004,nolazytime,commit=0x0000000000. Quota mode: writeback.
[   94.604355][ T1198] usb 4-1: SerialNumber: syz
[   94.675688][    T6] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[   94.698414][    T6] usb 2-1: USB disconnect, device number 4
[   94.709615][    T6] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[   94.718282][  T547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[   94.735316][  T547] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   94.819253][ T1396] overlayfs: failed to resolve './file0': -2
[   95.100613][  T547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.109173][  T547] usb 3-1: config 0 descriptor??
[   95.114067][ T1067] ==================================================================
[   95.121937][ T1067] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120
[   95.129572][ T1067] Read of size 8 at addr ffff88810f156c70 by task kworker/0:6/1067
[   95.137300][ T1067] 
[   95.139470][ T1067] CPU: 0 PID: 1067 Comm: kworker/0:6 Not tainted 5.15.157-syzkaller-00896-g38761ec9fc9e #0
[   95.149276][ T1067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   95.159173][ T1067] Workqueue: events linkwatch_event
[   95.164215][ T1067] Call Trace:
[   95.167327][ T1067]  <TASK>
[   95.170108][ T1067]  dump_stack_lvl+0x151/0x1c0
[   95.174621][ T1067]  ? io_uring_drop_tctx_refs+0x190/0x190
[   95.180082][ T1067]  ? panic+0x760/0x760
[   95.183990][ T1067]  print_address_description+0x87/0x3b0
[   95.189370][ T1067]  ? _raw_spin_unlock+0x4d/0x70
[   95.194062][ T1067]  kasan_report+0x179/0x1c0
[   95.198396][ T1067]  ? __list_del_entry_valid+0xa6/0x120
[   95.203777][ T1067]  ? __list_del_entry_valid+0xa6/0x120
[   95.209071][ T1067]  __asan_report_load8_noabort+0x14/0x20
[   95.214541][ T1067]  __list_del_entry_valid+0xa6/0x120
[   95.219659][ T1067]  process_one_work+0x458/0xc10
[   95.224350][ T1067]  worker_thread+0xad5/0x12a0
[   95.228861][ T1067]  ? _raw_spin_lock+0x1b0/0x1b0
[   95.233548][ T1067]  kthread+0x421/0x510
[   95.237453][ T1067]  ? worker_clr_flags+0x180/0x180
[   95.242310][ T1067]  ? kthread_blkcg+0xd0/0xd0
[   95.246738][ T1067]  ret_from_fork+0x1f/0x30
[   95.250992][ T1067]  </TASK>
[   95.253857][ T1067] 
[   95.256034][ T1067] Allocated by task 6:
[   95.259930][ T1067]  ____kasan_kmalloc+0xdb/0x110
[   95.264615][ T1067]  __kasan_kmalloc+0x9/0x10
[   95.268957][ T1067]  __kmalloc+0x13a/0x270
[   95.273042][ T1067]  kvmalloc_node+0x1f0/0x4d0
[   95.277460][ T1067]  alloc_netdev_mqs+0x8c/0xc90
[   95.282061][ T1067]  alloc_etherdev_mqs+0x33/0x40
[   95.286748][ T1067]  usbnet_probe+0x1ff/0x2830
[   95.291174][ T1067]  usb_probe_interface+0x5b6/0xa90
[   95.296121][ T1067]  really_probe+0x28d/0x970
[   95.300461][ T1067]  __driver_probe_device+0x1a0/0x310
[   95.305581][ T1067]  driver_probe_device+0x54/0x3d0
[   95.310460][ T1067]  __device_attach_driver+0x2c5/0x470
[   95.315651][ T1067]  bus_for_each_drv+0x183/0x200
[   95.320335][ T1067]  __device_attach+0x312/0x510
[   95.324939][ T1067]  device_initial_probe+0x1a/0x20
[   95.329797][ T1067]  bus_probe_device+0xbe/0x1e0
[   95.334405][ T1067]  device_add+0xb60/0xf10
[   95.338566][ T1067]  usb_set_configuration+0x190f/0x1e80
[   95.343859][ T1067]  usb_generic_driver_probe+0x8b/0x150
[   95.349329][ T1067]  usb_probe_device+0x144/0x260
[   95.354017][ T1067]  really_probe+0x28d/0x970
[   95.358355][ T1067]  __driver_probe_device+0x1a0/0x310
[   95.363476][ T1067]  driver_probe_device+0x54/0x3d0
[   95.368337][ T1067]  __device_attach_driver+0x2c5/0x470
[   95.373544][ T1067]  bus_for_each_drv+0x183/0x200
[   95.378229][ T1067]  __device_attach+0x312/0x510
[   95.382829][ T1067]  device_initial_probe+0x1a/0x20
[   95.387784][ T1067]  bus_probe_device+0xbe/0x1e0
[   95.392465][ T1067]  device_add+0xb60/0xf10
[   95.396717][ T1067]  usb_new_device+0x1038/0x1c00
[   95.401424][ T1067]  hub_event+0x2def/0x4770
[   95.405746][ T1067]  process_one_work+0x6bb/0xc10
[   95.410467][ T1067]  worker_thread+0xad5/0x12a0
[   95.414942][ T1067]  kthread+0x421/0x510
[   95.418864][ T1067]  ret_from_fork+0x1f/0x30
[   95.423388][ T1067] 
[   95.425585][ T1067] Freed by task 6:
[   95.429122][ T1067]  kasan_set_track+0x4b/0x70
[   95.433543][ T1067]  kasan_set_free_info+0x23/0x40
[   95.438317][ T1067]  ____kasan_slab_free+0x126/0x160
[   95.443263][ T1067]  __kasan_slab_free+0x11/0x20
[   95.447865][ T1067]  slab_free_freelist_hook+0xbd/0x190
[   95.453072][ T1067]  kfree+0xc8/0x220
[   95.456716][ T1067]  kvfree+0x35/0x40
[   95.460359][ T1067]  netdev_freemem+0x3f/0x60
[   95.464701][ T1067]  netdev_release+0x7f/0xb0
[   95.469041][ T1067]  device_release+0x95/0x1c0
[   95.473469][ T1067]  kobject_put+0x178/0x260
[   95.477721][ T1067]  put_device+0x1f/0x30
[   95.481711][ T1067]  free_netdev+0x34f/0x440
[   95.485965][ T1067]  usbnet_disconnect+0x245/0x390
[   95.490737][ T1067]  usb_unbind_interface+0x1fa/0x8c0
[   95.495771][ T1067]  device_release_driver_internal+0x50b/0x7d0
[   95.501673][ T1067]  device_release_driver+0x19/0x20
[   95.506709][ T1067]  bus_remove_device+0x2f8/0x360
[   95.511481][ T1067]  device_del+0x663/0xe90
[   95.515648][ T1067]  usb_disable_device+0x380/0x720
[   95.520512][ T1067]  usb_disconnect+0x32a/0x890
[   95.525026][ T1067]  hub_event+0x1d42/0x4770
[   95.529360][ T1067]  process_one_work+0x6bb/0xc10
[   95.534046][ T1067]  worker_thread+0xe02/0x12a0
[   95.538563][ T1067]  kthread+0x421/0x510
[   95.542467][ T1067]  ret_from_fork+0x1f/0x30
[   95.546720][ T1067] 
[   95.548892][ T1067] Last potentially related work creation:
[   95.554449][ T1067]  kasan_save_stack+0x3b/0x60
[   95.558956][ T1067]  __kasan_record_aux_stack+0xd3/0xf0
[   95.564163][ T1067]  kasan_record_aux_stack_noalloc+0xb/0x10
[   95.569806][ T1067]  insert_work+0x56/0x320
[   95.573972][ T1067]  __queue_work+0x92a/0xcd0
[   95.578337][ T1067]  queue_work_on+0x105/0x170
[   95.582737][ T1067]  usbnet_link_change+0xeb/0x100
[   95.587513][ T1067]  usbnet_probe+0x1dd3/0x2830
[   95.592110][ T1067]  usb_probe_interface+0x5b6/0xa90
[   95.597057][ T1067]  really_probe+0x28d/0x970
[   95.601406][ T1067]  __driver_probe_device+0x1a0/0x310
[   95.606517][ T1067]  driver_probe_device+0x54/0x3d0
[   95.611413][ T1067]  __device_attach_driver+0x2c5/0x470
[   95.616587][ T1067]  bus_for_each_drv+0x183/0x200
[   95.621274][ T1067]  __device_attach+0x312/0x510
[   95.625874][ T1067]  device_initial_probe+0x1a/0x20
[   95.630734][ T1067]  bus_probe_device+0xbe/0x1e0
[   95.635333][ T1067]  device_add+0xb60/0xf10
[   95.639497][ T1067]  usb_set_configuration+0x190f/0x1e80
[   95.644882][ T1067]  usb_generic_driver_probe+0x8b/0x150
[   95.650174][ T1067]  usb_probe_device+0x144/0x260
[   95.654867][ T1067]  really_probe+0x28d/0x970
[   95.659200][ T1067]  __driver_probe_device+0x1a0/0x310
[   95.664322][ T1067]  driver_probe_device+0x54/0x3d0
[   95.669182][ T1067]  __device_attach_driver+0x2c5/0x470
[   95.674389][ T1067]  bus_for_each_drv+0x183/0x200
[   95.679077][ T1067]  __device_attach+0x312/0x510
[   95.683678][ T1067]  device_initial_probe+0x1a/0x20
[   95.688540][ T1067]  bus_probe_device+0xbe/0x1e0
[   95.693136][ T1067]  device_add+0xb60/0xf10
[   95.697339][ T1067]  usb_new_device+0x1038/0x1c00
[   95.701989][ T1067]  hub_event+0x2def/0x4770
[   95.706330][ T1067]  process_one_work+0x6bb/0xc10
[   95.711105][ T1067]  worker_thread+0xad5/0x12a0
[   95.715704][ T1067]  kthread+0x421/0x510
[   95.719608][ T1067]  ret_from_fork+0x1f/0x30
[   95.723863][ T1067] 
[   95.726032][ T1067] The buggy address belongs to the object at ffff88810f156000
[   95.726032][ T1067]  which belongs to the cache kmalloc-4k of size 4096
[   95.740264][ T1067] The buggy address is located 3184 bytes inside of
[   95.740264][ T1067]  4096-byte region [ffff88810f156000, ffff88810f157000)
[   95.753550][ T1067] The buggy address belongs to the page:
[   95.759024][ T1067] page:ffffea00043c5400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f150
[   95.769083][ T1067] head:ffffea00043c5400 order:3 compound_mapcount:0 compound_pincount:0
[   95.777245][ T1067] flags: 0x4000000000010200(slab|head|zone=1)
[   95.783659][ T1067] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043380
[   95.792078][ T1067] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   95.800492][ T1067] page dumped because: kasan: bad access detected
[   95.806747][ T1067] page_owner tracks the page as allocated
[   95.812289][ T1067] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 364, ts 27695047206, free_ts 27643311824
[   95.832517][ T1067]  post_alloc_hook+0x1a3/0x1b0
[   95.837112][ T1067]  prep_new_page+0x1b/0x110
[   95.841452][ T1067]  get_page_from_freelist+0x3550/0x35d0
[   95.846839][ T1067]  __alloc_pages+0x27e/0x8f0
[   95.851258][ T1067]  new_slab+0x9a/0x4e0
[   95.855170][ T1067]  ___slab_alloc+0x39e/0x830
[   95.859768][ T1067]  __slab_alloc+0x4a/0x90
[   95.863931][ T1067]  kmem_cache_alloc_trace+0x142/0x210
[   95.869141][ T1067]  kobject_uevent_env+0x269/0x700
[   95.874000][ T1067]  kobject_uevent+0x1f/0x30
[   95.878341][ T1067]  net_rx_queue_update_kobjects+0x213/0x490
[   95.884067][ T1067]  netdev_register_kobject+0x231/0x320
[   95.889362][ T1067]  register_netdevice+0xde9/0x1390
[   95.894307][ T1067]  macsec_newlink+0x57b/0xc90
[   95.898823][ T1067]  rtnl_newlink+0x1495/0x2050
[   95.903334][ T1067]  rtnetlink_rcv_msg+0x951/0xc40
[   95.908109][ T1067] page last free stack trace:
[   95.912623][ T1067]  free_unref_page_prepare+0x7c8/0x7d0
[   95.917915][ T1067]  free_unref_page+0xe8/0x750
[   95.922432][ T1067]  __free_pages+0x61/0xf0
[   95.926595][ T1067]  __free_slab+0xec/0x1d0
[   95.930760][ T1067]  discard_slab+0x29/0x40
[   95.935014][ T1067]  __slab_free+0x205/0x290
[   95.939267][ T1067]  ___cache_free+0x109/0x120
[   95.943695][ T1067]  qlink_free+0x4d/0x90
[   95.947686][ T1067]  qlist_free_all+0x44/0xb0
[   95.952024][ T1067]  kasan_quarantine_reduce+0x15a/0x180
[   95.957318][ T1067]  __kasan_slab_alloc+0x2f/0xe0
[   95.962007][ T1067]  slab_post_alloc_hook+0x53/0x2c0
[   95.966954][ T1067]  kmem_cache_alloc_trace+0xf9/0x210
[   95.972074][ T1067]  register_netdevice+0x257/0x1390
[   95.977022][ T1067]  veth_newlink+0x94f/0xe20
[   95.981363][ T1067]  rtnl_newlink+0x1495/0x2050
[   95.985876][ T1067] 
[   95.988043][ T1067] Memory state around the buggy address:
[   95.993517][ T1067]  ffff88810f156b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   96.001412][ T1067]  ffff88810f156b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   96.009397][ T1067] >ffff88810f156c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   96.017294][ T1067]                                                              ^
[   96.024847][ T1067]  ffff88810f156c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   96.032744][ T1067]  ffff88810f156d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   96.040641][ T1067] ==================================================================
[   96.048538][ T1067] Disabling lock debugging due to kernel taint
[   96.107857][  T547] usb 3-1: can't set config #0, error -71
[   96.122822][ T1198] cdc_ncm 4-1:1.0: bind() failure
[   96.142894][ T1198] cdc_ncm: probe of 4-1:1.1 failed with error -71
[   96.162859][ T1198] cdc_mbim: probe of 4-1:1.1 failed with error -71
[   96.173386][ T1198] usb 4-1: USB disconnect, device number 6
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   96.493191][  T547] usb 3-1: USB disconnect, device number 5
[   97.363727][    T8] device bridge_slave_1 left promiscuous mode
[   97.369692][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.377027][    T8] device bridge_slave_0 left promiscuous mode
[   97.383045][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.390787][    T8] device veth1_macvtap left promiscuous mode
[   97.396625][    T8] device veth0_vlan left promiscuous mode
[   98.763476][    T8] device bridge_slave_1 left promiscuous mode
[   98.769435][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.776761][    T8] device bridge_slave_0 left promiscuous mode
[   98.783397][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.790948][    T8] device veth1_macvtap left promiscuous mode
[   98.796895][    T8] device veth0_vlan left promiscuous mode