last executing test programs:

4.290343143s ago: executing program 1:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc020660b, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x2)

4.147840426s ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x4000400)
sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x75}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
shutdown(r1, 0x2)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0))

4.111505901s ago: executing program 0:
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2000082, &(0x7f0000000380)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x34f, &(0x7f0000001f80)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000050000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='signal_generate\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x0, 0x0)
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
vmsplice(r4, &(0x7f0000000cc0)=[{&(0x7f0000000740)="e57712f3eeaf689ad027310343b1abf5865ecdd9d4dc2a6e24570ea934c7883dbe758b0d9ed96768601397de6841e51afdf666715017f257093bc22bd290ca7d055d49abed9b9eb24a7b9f33cd379f0ec79ff35e223569a6bc7db25703752ea86641bfde945d900835c485059788c5617d5afee4aa68702e90f9ae780e29f4fe74acf4fc1ac7439606e1dea196685d9551e01283f520b3db91b72f9fae325025b7b8a743e98e14d23ca0771aca5cd6a1c966e7a9b9a412ddd4ab7a14225fb3b5542f868c", 0xc4}, {&(0x7f0000000840)="8e94ac8074af14cda6d26f156219190394027fcd78fdfb674d5bace24e6441921d9d46532ff2f44abc321654ec3f7d6aeb0736de7054bc27af0f5477ead5e2059509d87119884b89be9990b4362ab57279bede480255a79df15f4a70bc00719298b0ac6d30b3a48d6977566bf28cc20ef7bcae8ea21a01b093d154136c468c061221864b9d57d19ef0fd3c3e8dd2b434777b4b1da2e0cad3ce", 0x99}, {&(0x7f0000000300)="5fe32a1b4d8842ac304464d1775ea14834294db89f382314b49c1721464f88528b5298c111adf9d4b328c9002eed31115c4ea0948a009e44a6bcc0de5bdeea5aa021870541933bc794e10bf889d0aaafa6", 0x51}, {&(0x7f0000000940)="dea25b872e6c0f965bc1ed81afb7495cc9a58f1fe0c781d7c2a05a982c03e0fd1e8678efbb92598a6c2646cde5fc1e563f0f6856efcafeb4fb92cb227983b10e7343757e385b70056dacbb12ecf4b518764d47647be09f8afe517721edd74a79571af23639b0418428bcdeaee069e293c0ae356d12f541b91321e872361597b3c7f9c5bc53685ddd64724760937d72a054923b", 0x93}, {0x0}, {&(0x7f00000004c0)="943112cfd39465cb900792ed22c75c87db9455df2dd804694071d90e049b66e64d7ee75697d141c8f96d7695407bad6a0e5c8f15c00336d678a8b4510d4df4af48b31a107bc6349f", 0x48}, {&(0x7f0000000ac0)="a78b70ab86cee39988c5730bb97baea24c25fb5596c36e002f141c455ae2afb40de4e7afa408f17d1fa49d436197cfa549ec12c79f85863619e657dc3ba91c8772c641721d7da61503745022412fa9571152970c7d78e1e24443cbc4afb3", 0x5e}, {&(0x7f0000000b40)="2b2342b2dbb22b882e4c312ca7f1d8b5046a76d72fdb86120013c4b190bcf5c3ecb7dcfd37d878c09d084b24c4d93925e6980730f60aea6d7d80f1a55288d177a1450bd646024bcdc7a7d9eb490bf18d23bfd3e9101aa4f41563e0d58e9b7726a59be9fc582b8dd3bd54441d15ecd1377c41a82308b256f639c60507493d8f5f87f356f93fd8eb0e9d64b63ee650ad85fe976a7869c35822e0e27db988871cf8c68c854f204d20c7cb8db32855295eabeef0ec8b2659e2ea00e760e203f506bd3f5c3506d74896bd0ec2fcae3d", 0xcd}, {&(0x7f0000000c40)="4251faa5e6c2049e0716d358f84b979f0ea86630fd63eaa86047eb59ad49701aadf8542e07f617112457e9cb4d72f6e14d600ff1bf0e654a5373f801e90231047a7a84953e9b0c580f90716e393f317c4cf04b6fa4d16b73fcaffad24246d4a993ef", 0x62}], 0x9, 0x3)
mount$fuseblk(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x0, 0x44000, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

3.140319692s ago: executing program 3:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x3}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x12, 0x0)

3.074787072s ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)

3.074449712s ago: executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x3}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x12, 0x0)

3.02463532s ago: executing program 0:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x3}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x12, 0x0)

2.921449076s ago: executing program 0:
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000a40)={[{@nouser_xattr}, {@inline_data}, {@four_active_logs}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@whint_mode_fs}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000ac0)=""/234, 0xea)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, <r1=>0x0})
read$FUSE(r0, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x22c, 0x0, 0x9, 0x401, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0x5}, [@typed={0x8, 0x114, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=r2}, @nested={0x3c, 0xa4, 0x0, 0x1, [@typed={0x14, 0x114, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0xac, 0x0, 0x0, @u64=0x4}, @typed={0x5, 0x89, 0x0, 0x0, @str='\x00'}, @typed={0x10, 0x145, 0x0, 0x0, @str='extent_cache'}]}, @typed={0x8, 0x138, 0x0, 0x0, @ipv4=@remote}, @nested={0x12c, 0x4f, 0x0, 0x1, [@typed={0x2a, 0xc8, 0x0, 0x0, @binary="8df780fe4e47ab14bc34e2edd7a3dd87928b5486f8878aedb776e0e9de8882733bb35e5fa12d"}, @typed={0x96, 0x59, 0x0, 0x0, @binary="1c77f6b6d2c88044e5d73a9f3daaf148da8980424fdf0477793707b2bdb86fcb513ad09cf5d9821e7dd7b140f7af15cf205b0c31e0d660ac6f97aa489221b6da3c8991f5efbeda1c0d4c73064629de5c15028ac3707d264150257ba7f1cf1dda6d075ad4fea5fd290765735c65826441205b44d297ad6871e0b3fa2beeb7bda2a152ac1eb8fafe4b264466c8e0207f3cc2bf"}, @generic="c605096d5aa6e53cc8b9121eacf80330865b44e7fdfee0d41f4ae013286089f3b2f84d3494d5f29200d4c7950be15417b0d2aff0db839179f97f816652b8f363593c244930086e09f3036d475ced93b9043fc563fffdea85c4094f0b70f21a541b6c0b8b"]}, @typed={0x14, 0x41, 0x0, 0x0, @ipv6=@local}, @generic="c15776d1d463d9ab9bdeced73e46ead3d6beaa0746f181851fc0f7f7ad47959a4fa44ca24373f476d32a8e91a2cc35293060d65d6f5007423ef4a38c7206e04b0d7593d995460711417b24cabfb4589683107f5383f4bb7f1a72ee39ead68ad2160d30c57d2e746e3a6ea49255c864236589c825f20f274be4947981b8a09b699c71"]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
fallocate(r0, 0x0, 0x0, 0x9000f4)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0203000010000000000000000000000005000600000000000a00000000000000ff02000000000000000000000000000100000000000000000200010000000000ebffffff0000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000100150000000000010014"], 0x80}}, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

2.848223787s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
open(&(0x7f0000007f80)='./bus\x00', 0x143142, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00')
lseek(0xffffffffffffffff, 0x8e9, 0x4)
preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/156, 0x9c}], 0xfc7, 0xffffffff, 0x0)

2.758880362s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0xb, [@volatile={0x7}, @struct={0x2, 0x1, 0x0, 0x4, 0x1, 0x9, [{0x8, 0x3, 0x1}]}, @struct={0x0, 0xa, 0x0, 0x4, 0x1, 0x3f, [{0x3, 0x1, 0x4}, {0xe, 0x1, 0xffff}, {0xa, 0x5, 0x43f7}, {0x4, 0x5, 0x1}, {0x4, 0x2, 0x6}, {0x8, 0x4}, {0x5, 0x2, 0x3800}, {0x9, 0x3, 0x3}, {0x3, 0x3}, {0x5, 0x5, 0x401}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0x67, 0x4}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @struct={0x9, 0x0, 0x0, 0x4, 0x1, 0x9}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x30, 0x2e, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000840)=""/4096, 0xff, 0x1000, 0x0, 0x40}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x400000, 0x57e, 0x412, r0, 0xffffffff, '\x00', 0x0, r1, 0x1, 0x3, 0x0, 0x9}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r4}, 0x10)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x101040, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000840)='./file0\x00', 0x818734, &(0x7f0000000080)={[{@max_batch_time={'max_batch_time', 0x3d, 0x700000000}}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@data_ordered}, {@jqfmt_vfsv0}]}, 0x5, 0x474, &(0x7f0000000880)="$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")

2.739719544s ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x4000400)
sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x75}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
shutdown(r1, 0x2)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0))

2.732181906s ago: executing program 3:
bpf$PROG_LOAD(0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x2, 0x4, 0x400, 0x8, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000340)={'nat\x00', 0x71, "9e2dccb4f703338457259b950ef51d8b805b5412586e6da8de3234e19204080346695c04d809f9c1e23bdcc1922d2bf57eea7fd4edeb51b3cc1af7198042434c6a24ab08605ce69954ef3323727c4353b55ad67a346bb001899c3b7cd617078feec000bf04e7dc9dfc0f08ae1dfe3a3356"}, &(0x7f0000000180)=0x95)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00')
preadv(r5, &(0x7f0000001340)=[{&(0x7f0000000040)=""/156, 0x9c}], 0x1, 0xffffffff, 0x0)
bpf$PROG_LOAD(0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x2, 0x4, 0x400, 0x8, 0x0, 0x1}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000340)={'nat\x00', 0x71, "9e2dccb4f703338457259b950ef51d8b805b5412586e6da8de3234e19204080346695c04d809f9c1e23bdcc1922d2bf57eea7fd4edeb51b3cc1af7198042434c6a24ab08605ce69954ef3323727c4353b55ad67a346bb001899c3b7cd617078feec000bf04e7dc9dfc0f08ae1dfe3a3356"}, &(0x7f0000000180)=0x95) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') (async)
preadv(r5, &(0x7f0000001340)=[{&(0x7f0000000040)=""/156, 0x9c}], 0x1, 0xffffffff, 0x0) (async)

2.691403842s ago: executing program 3:
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000001740)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4YQeZ31Jlso1KWHUmgg0J6bGFkxqWUrWHKIjWkTSqGXQlt6ay859+el9Nofh17a/6MkpK0TmtJDcRn9sJVYcuTElpLm84Gx3pt50nvfeaOZJ81YE8Bjazz9k4k4EhFvJRGj9flJRPRXU9mImVq52xvr+XRKYnPzhR+TaplbG+v5aHpO6lA98/eI+Or1iKOZnfWWV9cWZovFwnI9P1lZvDBZXl07dn5xdr4wX1g6MTU9ffzk/06e2L9Yf/5u7fD1t5/998czv772t0/e/DqJmThcX9Ycx34Zj/H6OulPV+Edntnvynrms1c6KNS0BWQPsjHsUdoxffVeORKj0bdb/wx3s2UAwEF5NSI22+lruwQAeKQlteP/U71uBwDQLY3vAW5trOcbU2+/keiuG09HxFAt/sb5zdqSbP2c3VD1POjIreSOMyNJRIztQ/3jEfH+5y99mE5xQOchAVq5fCUizo6N79z/JzuuWdir/3RQZvyuvP0fdM8X6fjn/63Gf5mt8U+0GP8Mtnjv3o97v/8z1/ahmrbS8d+TTde23W6Kv26sr577U3XM15+cO18spPu2P0fERPQPpvmpXeqYuPnbzXbLmsd/P73z8gdp/enjdonMtezgnc+Zm63MPkjMzW5cifhHtlX8yVb/J23Gv6c7rOO5J954r92yNP403sa0M/6DtXk14l8t+z/ZKpPsen3iZHVzmGxsFC18OhMj7eofz273fzql9Tc+C3RD2v8ju8c/ljRfr1nu+KW3rhb79urol+0KNW//reNvvf0PJC9W0wP1eZdmK5XlqYiB5Pmd849vP7eRb5RP45/4Z+v3/27bf/qZ8GyHKyJ7/YeP7j/+g5XGP7en/t9zIoZuL/S1q7+z/p+upibqczrZ/3XawAdZdwAAAAAAAAAAAAAAAAAAAAAAAADQqUxEHI4kk9tKZzK5XO0e3n+NkUyxVK4cPVdaWZqL6r2yx6I/0/ipy9Gm30Odqv8efiN//K78fyPiLxHx7uBwNZ/Ll4pzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtbn/f+r7wV63DgA4MEN9vW4BANBlSTbb6yYAAN02tKfSwwfWDgCge/Z2/AcA/ggc/wHg8XOP479/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBBnT51Kp02f9lYz6f5uYurKwuli8fmCuWF3OJKPpcvLV/IzZdK88VCLl9abPtCl2sPxVLpwnQsrVyarBTKlcny6tqZxdLKUuXM+cXZ+cKZQn/XIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzpVX1xZmi8XCskRPEgvf1PrhYWmPxN4ScbnWfw9Le/YvEQPbe4nh3uycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4BvwcAAP//JJMi3A==")
open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000007c0)={@link_local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "84c9ed", 0x10, 0x21, 0x0, @mcast2, @ipv4, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96f888", 0x0, "e77534"}}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2.499810611s ago: executing program 3:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x3}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x12, 0x0)

2.266514337s ago: executing program 1:
open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x17f)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x4003fa)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
epoll_create1(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x60, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100005070000fa00000000000000001a", @ANYRES32=r7, @ANYBLOB="ff00000000000000140012000c00010076657468"], 0x34}}, 0x0)
socket(0x10, 0x803, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x0, {0xa, 0x40, 0xc8, 0x0, r10}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x100, 0xfffffffd, 0x4}}]}, 0x34}}, 0x0)
r11 = socket(0x10, 0x803, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r13}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r13}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0)
epoll_create(0x2) (async)
r14 = epoll_create(0x2)
r15 = socket$netlink(0x10, 0x3, 0x4)
pselect6(0x40, &(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000000)={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
writev(r15, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async)
writev(r15, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
ioctl$VHOST_SET_VRING_ADDR(r14, 0x4028af11, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000400)=""/4096, &(0x7f00000000c0)=""/77, 0x1000})

1.99388899s ago: executing program 2:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x3}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x12, 0x0)

1.92976467s ago: executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000000c0)=[@acquire], 0x0, 0x0, 0x0})
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = open(&(0x7f0000000000)='./file0/file0\x00', 0x105800, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x5, &(0x7f0000000680)=0x4)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$eJzs3V9rZGcZAPDnTDJrtpuaVL2ohdZiK9miO5M0tg1etBXFu4JS79eQTELIJBMyk3YTiqT4AQQRXfDKK28EP4Ag+xFkYcG9FxVFdFcvvFCPnDMn2ex4ZpPQ+bMkvx+8M+9555zzPG+yOfOeP3tOAJfWyxHxbkRMRMRrETFTtFeKEofdks338MFHK1nJPnn/b0kkRVtEXj12rVhsqvtWqr1/sLncbDZ2i+l6Z2un3t4/uLGxtbzeWG9sLy4uvLn01tIbS/MD6WfWr7e/+aef/PAX33r7N1/58Pc3/3L9+1nS3yg+L/oxcPfz12r2szg2GRG7wwg2BhNFf6rjTgQAgDPJxvifiYgv5uP/mZjIR3O53iHd1OizAwAAAAYhfWc6/p1EpAAAAMCF9U5ETEdSqRXXAkxHpVKrda/h/Vw8U2m22p0vr7X2tlezzyJmo1pZ22g25otramejmmTTC3n90fTrPdOLEfFcRPx45mo+XVtpNVfHffADAAAALolrPfv//5zp7v8DAAAAF8zsuBMAAAAAhq7f/n8y4jwAAACA4XH+HwAAAC60b7/3XlbSo+dfr36wv7fZ+uDGaqO9WdvaW6mttHZ3auut1np+z76t09bXbLV2vhrbe7fqnUa7U2/vH9zcau1td25ueH4gAAAAjMtzX7hzP4mIw69dzUvmSvYy0WcB1wrAhVE5z8x/HF4ewOj1+5oHLr7JcScAjM/huBMAxu2xW32UDApOXrzz2DGD3w4vJwAAYLDmPl9+/j/bBaiOOzlgqM51/h+4UJz/h8vrnOf/7w4rD2D0qkYAcOmd9qiPvjfvKDv/f6VsxjQ9dV0AAMBQTeclqdSKc4HTUanUahHP5v/Vv5qsbTQb8xHx6Yj43Uz1U9n0Qr5k4vGAAAAAAAAAAAAAAAAAAAAAAAAAAHBGaZpECgAAAFxoEZU/J8Xzv+ZmXp3uPT5wJfnXTBSP9PrwZ+//9NZyp7O7kLX//bi9c7tof30cRzAAAACAXkf76Uf78QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwSA8ffLRyVEYZ969fj4jZsviTMZW/T0U1Ip75RxKTJ5ZLImJiAPEPP46I58viJ1laMVtk0Ru/EhFXRxP/xTRNS+NfG0B8uMzuZNufd8v+/irxcv5e/vc/WZRPqv/2r3K8/Zvos/179owxXrj3q3rf+B9HvDBZvv05ip/0if9K2QpLfijf++7Bwf81dlce6c8j5kq/f5LHYtU7Wzv19v7BjY2t5fXGemN7cXHhzaW3lt5Ymq+vbTQbxWtpH3/04q//29P0n7Qr73/0iT97Sv9fzSrVE41pb5gi2L1bDz7brVZ7VpHHv/5K+e//+SfEz/5NfKn4Hsg+nzuqH3brJ730y7svlSZWxF/t0//Tfv/X+620x2vf+cEfzjgrADAC7f2DzeVms7E79MrtNE1HFUvl/JWj0d3QQkw9LT1VOa0yiCNbAADA0+bRoH/cmQAAAAAAAAAAAAAAAAAAAMDl1d6PyrBvJ9Yb83A8XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKL/BQAA//9PHd4N")
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4)
sendmmsg$unix(r1, &(0x7f0000004540), 0x0, 0x800)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2, &(0x7f0000000240), 0x0, 0x4c0, &(0x7f0000000f80)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
prlimit64(r3, 0x3, &(0x7f0000001f00)={0x7}, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x25, 0x2, @val=@tracing}, 0x40)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000640)={@private1, 0x68})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000800000850000000c000000b709000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0xb8, 0x7000000, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000340), 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)

1.901484964s ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000001740)="$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")
socket$packet(0x11, 0x0, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000240)=0x8)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setns(0xffffffffffffffff, 0x40000000)
unshare(0x4040400)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0)
sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x26c, r1, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x2d}}}}, [@NL80211_ATTR_TESTDATA={0x9e, 0x45, "2654494f1147313703491c7f4d336047aa914402b02328c62c326e21ac13948d74164fac6514bd4a25021e06dd71dbeebd46697962ed4edeb0eca473b797b01a8a036ffd2c8f017be4380b6fb019b81223bd9955ddc868ac8c9b254df91332a1122a5a931bed0881f0713c4062eb5b8785571251009c89ce9ed8c4e973892569c06ef194cb39c651ae56190a11fcfcaaf645c223cab5484dba7f"}, @NL80211_ATTR_TESTDATA={0x102, 0x45, "2db3f826ff1ab3b9ea1687bb20086126fd7b42595a9487ea6063a6e08e7c72eacc269f5651c19efc0e08530b7755338c7cbee57162dae1d46006e6eebdeef4c75bf1db915923e4d68536d8bd6527e086a89afb044521cd217fb00b289c149dadf3fd32ab9799b1a298e2b2282a3eb448343958c91fa46a69cb96fb9e1059e5816e2bbe5548b5fc29d209059740ee7ad82d73ed1ed53eb10207bce875726d2fdf54a95277c73c439d3148e9bbcdd6e22419c4c5e68c6d16f1a2b34fd5535678e73517ed514a55bd43573b28917d81aa287f25817d8a73381a9e47ee07f981d706f1aeac4fd8dcf726d50e6a05ef3db229f73d0ed475efcc14c3c6a6ceb310"}, @NL80211_ATTR_TESTDATA={0x37, 0x45, "d8020b80051403006a7ac7e877aec2cec350e4d3e934054ccb2f8158c8907fff4282124e4a0a6fbf5012e4dba37882351e2035"}, @NL80211_ATTR_TESTDATA={0x66, 0x45, "44fa513b6e51b584ddb49947ccde412cf7657e6419a4f8dfdd4a0001f9ff88d5d5b43f2e3b65079d53e30c6f8da64bf7c48574247cb2892be34958291627f692c854d99b20948211b0fc68ea911201d14325f71bddc15b0385e1bf6ca21a0cdaf15a"}]}, 0x26c}}, 0x1)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x3a0, r1, 0xb01, 0x0, 0x0, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x11, 0x34, @random="5c2b4e2f106cf9d25aaf3b7324"}, @NL80211_ATTR_IE={0x1ad, 0x2a, [@fast_bss_trans={0x37, 0xb8, {0x0, 0x5, "377c5f9c4c95a2e20d9ff776804d6404", "48316c04446cd018ebce4045707575eb64a82b47614db57698cd312f28de621e", "d83a1aad083e1d5dcdae9e58666a8b3dc81b5da42b7447b24a3083f9ddf530af", [{0x0, 0xc, "78e156c2e5214d062c4bf85e"}, {0x0, 0x23, "f78799eef2c16bb98b6df8f1b7277af94d460f5c9d38118d7fea21430ff786a560f83f"}, {0x0, 0x5, "1f27b18013"}, {0x0, 0x19, "cf7b849c01374826250c8d085458e698401ac3787b5928eb92"}, {0x0, 0xf, "474a3d1bda342b83eff1e4e92fe770"}]}}, @perr={0x84, 0x29, {0x0, 0x3, [{{}, @device_b}, {}, {{}, @device_b}]}}, @perr={0x84, 0x9d, {0x0, 0xb, [{{0x0, 0x1}, @device_b, 0x0, @value}, {}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b}, {{}, @device_b}, {}, {{}, @device_b={0x6b}}, {{}, @device_b}, {{}, @device_b}, {}, {}, {{}, @device_b}]}}, @ssid={0x0, 0xb, @random="291efda298d0781a758679"}, @ssid={0x0, 0x13, @random="9afb2f51234b746ab93e01b0a10a0cc25f13c3"}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x1c0, 0x2a, [@challenge={0x10, 0x1}, @erp={0x2a, 0x1}, @tim={0x5, 0x91, {0x0, 0x0, 0x0, "772f8f7315f9ed4a1f589419052ddf31b95bcb99033a28cb89a09df0c2f3602ca1e7054c50bfba7811103b5f6369cc7b9768e77388eb49d2aa1937993e8182322f1b5bdb3173fc566a86747e602136cb361b79479d379eeee9adb48b7a2e7001ad933cd7782f4bae83cc8cedd05b991f688c6ad56e7657cb6cecafe9f3af3d8a3b776f818280ee5e08885257c516"}}, @ext_channel_switch={0x3c, 0x4}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast}}, @tim={0x5, 0x27, {0x0, 0x0, 0x0, "d04c753766bcd7db441320dfea070a7470e154c6917db91fde200c46a929df114b2a0b42"}}, @ext_channel_switch={0x3c, 0x4}, @erp={0x2a, 0x1}, @perr={0x84, 0xd2, {0x0, 0x10, [{}, {}, {}, {}, {{}, @device_b}, {{}, @broadcast}, {}, {{}, @device_b}, {{}, @device_b, 0x0, @void, 0xfffe}, {{}, @broadcast}, {}, {{}, @broadcast}, {}, {{}, @device_b}, {}, {{}, @broadcast}]}}]}]}, 0x3a0}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2e}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b31c4e8326"}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x95)
personality(0x400000)

1.86468922s ago: executing program 0:
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2000082, &(0x7f0000000380)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x34f, &(0x7f0000001f80)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000050000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='signal_generate\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x0, 0x0)
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
vmsplice(r4, &(0x7f0000000cc0)=[{&(0x7f0000000740)="e57712f3eeaf689ad027310343b1abf5865ecdd9d4dc2a6e24570ea934c7883dbe758b0d9ed96768601397de6841e51afdf666715017f257093bc22bd290ca7d055d49abed9b9eb24a7b9f33cd379f0ec79ff35e223569a6bc7db25703752ea86641bfde945d900835c485059788c5617d5afee4aa68702e90f9ae780e29f4fe74acf4fc1ac7439606e1dea196685d9551e01283f520b3db91b72f9fae325025b7b8a743e98e14d23ca0771aca5cd6a1c966e7a9b9a412ddd4ab7a14225fb3b5542f868c", 0xc4}, {&(0x7f0000000840)="8e94ac8074af14cda6d26f156219190394027fcd78fdfb674d5bace24e6441921d9d46532ff2f44abc321654ec3f7d6aeb0736de7054bc27af0f5477ead5e2059509d87119884b89be9990b4362ab57279bede480255a79df15f4a70bc00719298b0ac6d30b3a48d6977566bf28cc20ef7bcae8ea21a01b093d154136c468c061221864b9d57d19ef0fd3c3e8dd2b434777b4b1da2e0cad3ce", 0x99}, {&(0x7f0000000300)="5fe32a1b4d8842ac304464d1775ea14834294db89f382314b49c1721464f88528b5298c111adf9d4b328c9002eed31115c4ea0948a009e44a6bcc0de5bdeea5aa021870541933bc794e10bf889d0aaafa6", 0x51}, {&(0x7f0000000940)="dea25b872e6c0f965bc1ed81afb7495cc9a58f1fe0c781d7c2a05a982c03e0fd1e8678efbb92598a6c2646cde5fc1e563f0f6856efcafeb4fb92cb227983b10e7343757e385b70056dacbb12ecf4b518764d47647be09f8afe517721edd74a79571af23639b0418428bcdeaee069e293c0ae356d12f541b91321e872361597b3c7f9c5bc53685ddd64724760937d72a054923b", 0x93}, {0x0}, {&(0x7f00000004c0)="943112cfd39465cb900792ed22c75c87db9455df2dd804694071d90e049b66e64d7ee75697d141c8f96d7695407bad6a0e5c8f15c00336d678a8b4510d4df4af48b31a107bc6349f", 0x48}, {&(0x7f0000000ac0)="a78b70ab86cee39988c5730bb97baea24c25fb5596c36e002f141c455ae2afb40de4e7afa408f17d1fa49d436197cfa549ec12c79f85863619e657dc3ba91c8772c641721d7da61503745022412fa9571152970c7d78e1e24443cbc4afb3", 0x5e}, {&(0x7f0000000b40)="2b2342b2dbb22b882e4c312ca7f1d8b5046a76d72fdb86120013c4b190bcf5c3ecb7dcfd37d878c09d084b24c4d93925e6980730f60aea6d7d80f1a55288d177a1450bd646024bcdc7a7d9eb490bf18d23bfd3e9101aa4f41563e0d58e9b7726a59be9fc582b8dd3bd54441d15ecd1377c41a82308b256f639c60507493d8f5f87f356f93fd8eb0e9d64b63ee650ad85fe976a7869c35822e0e27db988871cf8c68c854f204d20c7cb8db32855295eabeef0ec8b2659e2ea00e760e203f506bd3f5c3506d74896bd0ec2fcae3d", 0xcd}, {&(0x7f0000000c40)="4251faa5e6c2049e0716d358f84b979f0ea86630fd63eaa86047eb59ad49701aadf8542e07f617112457e9cb4d72f6e14d600ff1bf0e654a5373f801e90231047a7a84953e9b0c580f90716e393f317c4cf04b6fa4d16b73fcaffad24246d4a993ef", 0x62}], 0x9, 0x3)
mount$fuseblk(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x0, 0x44000, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

1.643546005s ago: executing program 3:
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x8c431f5ae08266, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703835322c756e695f786c6174653d312c636f6465706167653d3836392c696f636861727365743d6d616363656c7469632c536e695f786c6174653d312c696f636861727398083f65743d69736f383835392d352c6e6f6e756d7461696c3d3000756e695f786c6174653d312c696f636861727365743d69736f383835392d31342c756e695f786c6174653d312c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c00"], 0x25, 0x34f, &(0x7f0000001f80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000050000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='signal_generate\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000700feff0000369923b8727bee33b59a70330d084ee1490db39ea2b5328356a87570e16a0543e118af6dc4dab8e3e9002111c6f6d449577c5063b85e1bfb3116d1c5c92e136b15b101000000c31cdfe6663aab3382d2677e"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$TIOCL_SETSEL(r5, 0x4b31, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x7ff, 0x100}})

983.859337ms ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)

716.864908ms ago: executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x13)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
setresgid(r2, 0x0, 0x0)
setreuid(0x0, r1)
setresgid(0x0, r3, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2c0, &(0x7f0000000800)="$eJzs3U9oE3kUwPGX/t8ubcKyu7ALu/t2e9ldlqHJeaENS7ssG+iyNlItCFM70ZAxCZkQTZEmgtCLBy/+O6sgUiiIB0Eo9eBJWqQ3D95668F6UqQ4EpOapE5b7b8U+v0cMo957yW/+ZMh+QUyy39ePpOIOUbMzIpPfNLUL0Xfqk8C0iRrivLb2ZmnPxw5dvzfcCQy8L/qYHg4GFLV7p9mR89P/zKX/fLo/e6H7TIfOLG8Elqa/3b+u+W3w6fjjsYdTaayaupYKpU1x2xLx686CUP1P9syHUvjScfK1OVjdiqdzquZHO/qTGcsx1EzmdeElddsSrOZvJqnzHhSDcPQrk7B5qZzN8IbZ6N3X7uurGSfuG57UVzXLa3s2MfhocG0sqwe/0sNHhH2U81FvUPEnspFc9HyspwPxyQutljSK35ZldI54t6ccd+fKqXHc6GZyOLvjx+pakAm7UKlv5CLNtf3B8UvgXJPWTke/CcyENSy+v5W6aztD4lfvvbuD3n2t8mvPTX9hvhl8aSkxJaF2Z9fLQ1NXVvrnwyq/jUUWdf/hYxXd9Odlw06PgAAAAAAAAAAbIehH3jO3xulgosTqtq1Ll/u9/p9YP38fK/n/HyLfN/S2G0HAAAAAOCwcPITCdO2rcwOg9JX+a1qvuneuqYStO50PAcnuHXh04t/HNy8pqeveaH/WTF9ELbrM4I3IwdiGPWBVGafNqvpEJHmXX6nVIMXu/I8vsr4Nq75e/T5Pa+UW7um7aP9s5G5vb8qAQAAANgL1Q/9fVKIPcgVRv640ugxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw2GzjL8cWrnultBR8ddsr5fnCvpW12wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA01LsAAAD//+WezQY=")

708.883839ms ago: executing program 1:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x3}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x12, 0x0)

660.618867ms ago: executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x4000400)
sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x75}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
shutdown(r1, 0x2)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0))

606.562605ms ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000001740)="$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")
open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000007c0)={@link_local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "84c9ed", 0x10, 0x21, 0x0, @mcast2, @ipv4, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96f888", 0x0, "e77534"}}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

595.702617ms ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$inet6(0xa, 0x2, 0x7ff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x24}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
r1 = socket(0x840000000002, 0x3, 0xfa)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x602, 0x0)

588.552418ms ago: executing program 1:
socket$packet(0x11, 0x0, 0x300)
open(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e00000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0xd4ce, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x200000}, 0x48)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000000)={0x9})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x7)
r9 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0x32)
setresuid(0x0, r10, 0x0)
r11 = memfd_create(&(0x7f00000001c0)='\xa3\x9fR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1a\x85r\xacg\xddU\x9c\x92\xcd\x8as\xb1\xf6\xa9\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00', 0x0)
execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008404"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='cachefiles_ondemand_fd_write\x00', r4}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt(r12, 0x0, 0x7ff, &(0x7f0000000080)="03", 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)

449.58628ms ago: executing program 0:
socket(0x11, 0x0, 0x5)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x2)
truncate(&(0x7f00000000c0)='./file2\x00', 0x0)
getdents(r1, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', <r6=>0x0, 0x7800, 0x40, 0x8, 0x7fffffff, {{0x8, 0x4, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private, {[@ra={0x94, 0x4}, @cipso={0x86, 0x8, 0x2, [{0x0, 0x2}]}]}}}}})
sendmmsg$sock(r5, &(0x7f0000003240)=[{{&(0x7f0000000640)=@ll={0x11, 0x12, r6, 0x8, 0x0, 0x6, @multicast}, 0x80, 0x0}}], 0x1, 0x4040000)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [], [0x0, 0x0, 0x9]}, 0x2}}, 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={0x0}, 0x18)
syz_emit_ethernet(0x86, 0x0, 0x0)

315.38985ms ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000f00)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r4 = socket(0xa, 0x3, 0x9)
getsockopt$nfc_llcp(r4, 0x29, 0x21, 0x0, 0x20000011)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffe00}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0)
close(0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2], 0x20}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x4004551e, &(0x7f0000000380)={0x0, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82577ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"})
ioctl$USBDEVFS_CLEAR_HALT(r8, 0x5514, 0x0)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xfffd, 0x4}, 0x6)
write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6)
request_key(0x0, &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000380)='G@\xf7\xff\xff\xff\xff\xff\xff\xff\xe3h;\x1d\xd3\xaa\x1a\x9c\xca+\xa2\f\xec\xdeq\xc8\xa2\xc0\xfb\xe7\x98\xa8\x94%\xeb8\xdc\xaf\x02\xe8\xb9g\xd9.k\\q5d\x7f\xaf\xa4\xacsl\xda\x8b\xfb\xdb\xde!\xe2@@G\vT\xa98\f\x1c\xc7D\x8b\xb3@\x96Z2\x1e\x13\x89\x80\xbf\x9f4\x17\xa8\xdd1\n\x05\x953\xd8)<\xcch{\xb3\xeed\xd2Kb\xf1\xdb<,]\x85\xd9}\xa9\xcdhz\xa7\xc5\x14\x8d\xe9R.\x7f\xa3\x9drc\x17\xa1\xe8\xae\x92\x92s\xc1\x98;\x04\xed\xd3\xf6:$n\x14V\xe7\x1c;\x15s\xb9\x82\xc1\fTP\xe5@\x86H\xdf\x93aB\xf2a&\x9c\tsV\"*\xc5\xa3\x0e(\xa6\b\xde\x19\xe8\xd1e\x01u?\xf9', 0xfffffffffffffffa)
socket$inet_udp(0x2, 0x2, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

0s ago: executing program 4:
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x3}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x12, 0x0)

kernel console output (not intermixed with test programs):

4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   39.956301][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.964260][  T775] System zones: 0-2, 18-18, 34-34
[   39.976589][  T775] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   39.991342][  T775] EXT4-fs (loop2): 1 truncate cleaned up
[   39.996808][  T775] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   40.016233][  T644] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir833463541/syzkaller.rEQIIz/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   40.046969][  T644] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   40.067806][  T785] EXT4-fs error (device loop1): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   40.080200][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.101549][  T644] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir833463541/syzkaller.rEQIIz/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   40.129277][    T7] device bridge_slave_1 left promiscuous mode
[   40.134953][  T644] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   40.135347][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.154513][  T644] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir833463541/syzkaller.rEQIIz/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   40.185661][  T644] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   40.206222][  T644] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir833463541/syzkaller.rEQIIz/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   40.231784][  T644] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   40.249366][    T7] device bridge_slave_0 left promiscuous mode
[   40.277562][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.497293][  T787] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   40.620303][   T23] audit: type=1400 audit(1718789969.219:195): avc:  denied  { create } for  pid=793 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1
[   40.702812][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.710797][  T513] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.717783][  T513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.724939][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.738619][  T513] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.745500][  T513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.756113][  T802] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   40.768378][  T802] EXT4-fs (loop2): Test dummy encryption mode enabled
[   40.773104][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.784013][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.793031][  T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.801344][  T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.810194][  T802] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[   40.818186][  T804] FAT-fs (loop1): Directory bread(block 64) failed
[   40.824827][  T804] FAT-fs (loop1): Directory bread(block 65) failed
[   40.831307][  T804] FAT-fs (loop1): Directory bread(block 66) failed
[   40.838523][  T804] FAT-fs (loop1): Directory bread(block 67) failed
[   40.846935][  T804] FAT-fs (loop1): Directory bread(block 68) failed
[   40.848694][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.855022][  T804] FAT-fs (loop1): Directory bread(block 69) failed
[   40.861470][  T802] EXT4-fs (loop2): Remounting filesystem read-only
[   40.867805][  T804] FAT-fs (loop1): Directory bread(block 70) failed
[   40.875857][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.881157][  T804] FAT-fs (loop1): Directory bread(block 71) failed
[   40.888751][  T802] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[   40.895256][  T804] FAT-fs (loop1): Directory bread(block 72) failed
[   40.906707][  T809] device bridge_slave_0 left promiscuous mode
[   40.915687][  T809] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.926658][  T802] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[   40.932597][  T804] FAT-fs (loop1): Directory bread(block 73) failed
[   40.941365][  T802] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[   40.941497][  T809] device bridge_slave_1 left promiscuous mode
[   40.955676][  T802] EXT4-fs error (device loop2): ext4_evict_inode:312: comm syz-executor.2: couldn't truncate inode 16 (err -27)
[   40.971490][  T802] EXT4-fs (loop2): 1 orphan inode deleted
[   40.983308][  T809] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.984579][  T802] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,nolazytime,
[   41.008966][  T802] ext4 filesystem being mounted at /root/syzkaller-testdir1928027672/syzkaller.TFr7dt/15/file1 supports timestamps until 2038 (0x7fffffff)
[   41.032957][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.041025][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.050472][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.058896][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.074633][  T813] bridge0: port 1(syz_tun) entered blocking state
[   41.084187][  T813] bridge0: port 1(syz_tun) entered disabled state
[   41.088405][  T802] EXT4-fs error (device loop2): ext4_lookup:1818: inode #2: comm syz-executor.2: deleted inode referenced: 16
[   41.090964][  T813] device syz_tun entered promiscuous mode
[   41.108840][  T802] EXT4-fs (loop2): Remounting filesystem read-only
[   41.109063][  T813] bridge0: port 1(syz_tun) entered blocking state
[   41.121493][  T813] bridge0: port 1(syz_tun) entered forwarding state
[   41.241901][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.250798][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.259272][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.267861][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.422159][  T812] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.429353][  T812] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.436739][  T812] device bridge_slave_0 entered promiscuous mode
[   41.453097][  T812] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.459932][  T812] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.473293][  T832] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   41.482688][  T832] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   41.483046][  T812] device bridge_slave_1 entered promiscuous mode
[   41.499401][  T832] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   41.508482][  T832] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   41.516700][  T832] System zones: 0-2, 18-18, 34-34
[   41.522634][  T832] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   41.537625][  T832] EXT4-fs (loop4): 1 truncate cleaned up
[   41.543095][  T832] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   41.609858][  T812] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.616724][  T812] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.623877][  T812] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.627313][  T870] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   41.630692][  T812] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.647601][  T870] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   41.652876][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   41.663616][  T505] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.670202][  T870] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   41.679593][  T870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   41.679607][  T505] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.687449][  T870] System zones: 0-2, 18-18, 34-34
[   41.717671][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   41.729097][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.736317][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.748286][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   41.756660][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.763507][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.770533][  T870] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   41.793327][  T870] EXT4-fs (loop2): 1 truncate cleaned up
[   41.798793][  T870] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   41.811718][  T823] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   41.824215][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   41.835904][  T823] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   41.844474][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   41.852311][  T823] F2FS-fs (loop3): Unrecognized mount option "00000000000000000005Sãò„QÃ" or missing value
[   42.029015][  T885] EXT4-fs error (device loop4): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   42.060724][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   42.068882][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   42.079911][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   42.088931][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   42.149267][   T23] kauditd_printk_skb: 6 callbacks suppressed
[   42.149287][   T23] audit: type=1400 audit(1718789970.749:202): avc:  denied  { mounton } for  pid=882 comm="syz-executor.1" path="/root/syzkaller-testdir23394122/syzkaller.QbPsEo/26/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   42.183487][  T889] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   42.293315][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   42.303845][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   42.312051][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   42.320621][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   42.329426][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   42.355574][  T892] FAT-fs (loop0): Directory bread(block 64) failed
[   42.362187][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.363145][  T892] FAT-fs (loop0): Directory bread(block 65) failed
[   42.378556][  T892] FAT-fs (loop0): Directory bread(block 66) failed
[   42.385003][  T892] FAT-fs (loop0): Directory bread(block 67) failed
[   42.385018][  T895] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   42.391403][  T892] FAT-fs (loop0): Directory bread(block 68) failed
[   42.400196][  T895] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   42.406488][  T895] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   42.406625][  T895] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   42.414720][  T892] FAT-fs (loop0): Directory bread(block 69) failed
[   42.414769][  T892] FAT-fs (loop0): Directory bread(block 70) failed
[   42.414781][  T892] FAT-fs (loop0): Directory bread(block 71) failed
[   42.414817][  T892] FAT-fs (loop0): Directory bread(block 72) failed
[   42.414829][  T892] FAT-fs (loop0): Directory bread(block 73) failed
[   42.463682][  T895] System zones: 0-2, 18-18, 34-34
[   42.492374][  T895] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   42.507862][  T895] EXT4-fs (loop4): 1 truncate cleaned up
[   42.514113][  T895] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   42.531273][  T823] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   42.545999][  T823] EXT4-fs (loop3): Unsupported blocksize for fs encryption
[   42.564303][   T23] audit: type=1400 audit(1718789971.169:203): avc:  denied  { create } for  pid=899 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   42.567732][  T892] overlayfs: unrecognized mount option "Te=0" or missing value
[   42.616099][   T23] audit: type=1400 audit(1718789971.209:204): avc:  denied  { remove_name } for  pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=1012 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.639214][   T23] audit: type=1400 audit(1718789971.209:205): avc:  denied  { rename } for  pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=1012 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.675486][   T23] audit: type=1400 audit(1718789971.209:206): avc:  denied  { create } for  pid=144 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.742087][   T23] audit: type=1400 audit(1718789971.339:207): avc:  denied  { ioctl } for  pid=906 comm="syz-executor.0" path="/dev/input/event0" dev="devtmpfs" ino=9242 ioctlcmd=0x452f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   42.836573][  T911] EXT4-fs error (device loop4): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   42.975342][  T823] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘Ì
[   43.022327][  T513] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   43.136675][  T916] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   43.154929][  T916] EXT4-fs (loop3): Test dummy encryption mode enabled
[   43.175019][  T916] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   43.220865][  T916] EXT4-fs (loop3): Remounting filesystem read-only
[   43.227238][  T835] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   43.234576][  T916] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   43.250564][   T23] audit: type=1400 audit(1718789971.849:208): avc:  denied  { create } for  pid=922 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   43.251636][  T916] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   43.279270][  T916] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   43.287543][  T916] EXT4-fs error (device loop3): ext4_evict_inode:312: comm syz-executor.3: couldn't truncate inode 16 (err -27)
[   43.300363][  T916] EXT4-fs (loop3): 1 orphan inode deleted
[   43.306023][  T916] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,nolazytime,
[   43.324605][  T916] ext4 filesystem being mounted at /root/syzkaller-testdir922861386/syzkaller.PbXx90/1/file1 supports timestamps until 2038 (0x7fffffff)
[   43.356947][  T926] device syz_tun left promiscuous mode
[   43.361395][  T916] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz-executor.3: deleted inode referenced: 16
[   43.370939][  T926] bridge0: port 1(syz_tun) entered disabled state
[   43.379189][   T23] audit: type=1400 audit(1718789971.979:209): avc:  denied  { write } for  pid=928 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   43.386812][  T916] EXT4-fs (loop3): Remounting filesystem read-only
[   43.401564][   T23] audit: type=1400 audit(1718789971.979:210): avc:  denied  { read } for  pid=928 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   43.427502][  T513] usb 3-1: Using ep0 maxpacket: 16
[   43.432825][    T7] device bridge_slave_1 left promiscuous mode
[   43.438769][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.445986][   T23] audit: type=1400 audit(1718789971.989:211): avc:  denied  { create } for  pid=928 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   43.472973][    T7] device bridge_slave_0 left promiscuous mode
[   43.479269][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.486755][    T7] device bridge_slave_1 left promiscuous mode
[   43.492853][  T835] usb 1-1: Using ep0 maxpacket: 8
[   43.493971][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.505142][    T7] device bridge_slave_0 left promiscuous mode
[   43.511057][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.602455][  T513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.615040][  T513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.622336][  T835] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   43.624615][  T513] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   43.633553][  T835] usb 1-1: config 0 has no interface number 0
[   43.647195][  T513] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   43.651356][  T835] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   43.659936][  T513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.660771][  T513] usb 3-1: config 0 descriptor??
[   43.670042][  T837] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   43.691020][  T835] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   43.699967][  T835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.699983][  T926] bridge0: port 1(syz_tun) entered blocking state
[   43.714863][  T835] usb 1-1: config 0 descriptor??
[   43.721377][  T926] bridge0: port 1(syz_tun) entered disabled state
[   43.728972][  T926] device syz_tun entered promiscuous mode
[   43.735331][  T926] bridge0: port 1(syz_tun) entered blocking state
[   43.741667][  T926] bridge0: port 1(syz_tun) entered forwarding state
[   43.831091][  T937] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   43.840178][  T937] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   43.849572][  T937] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   43.858486][  T937] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   43.866352][  T937] System zones: 0-2, 18-18, 34-34
[   43.871632][  T937] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   43.886837][  T937] EXT4-fs (loop3): 1 truncate cleaned up
[   43.892329][  T937] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   43.955571][  T837] usb 2-1: Using ep0 maxpacket: 8
[   43.963834][  T907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   43.971418][  T907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   43.981795][    T5] usb 1-1: USB disconnect, device number 2
[   44.002493][  T513] usbhid 3-1:0.0: can't add hid device: -71
[   44.008591][  T513] usbhid: probe of 3-1:0.0 failed with error -71
[   44.053606][  T945] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   44.062612][  T945] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   44.078476][  T945] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   44.089417][  T949] EXT4-fs error (device loop3): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   44.109992][  T945] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   44.117989][  T945] System zones: 0-2, 18-18, 34-34
[   44.125655][  T945] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   44.141508][  T945] EXT4-fs (loop2): 1 truncate cleaned up
[   44.147383][  T945] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   44.152712][  T513] usb 3-1: USB disconnect, device number 2
[   44.157252][  T940] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777" or missing value
[   44.171337][  T837] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64
[   44.189234][  T837] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8
[   44.203134][  T837] usb 2-1: config 1 interface 0 has no altsetting 0
[   44.402656][  T837] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   44.412050][  T837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.421792][  T837] usb 2-1: Product: Є
[   44.427002][  T837] usb 2-1: Manufacturer: �
[   44.431481][  T837] usb 2-1: SerialNumber: à¡’
[   44.462509][  T929] raw-gadget gadget: fail, usb_ep_enable returned -22
[   44.471862][  T956] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   44.519761][  T929] raw-gadget gadget: fail, usb_ep_enable returned -22
[   44.883275][  T837] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 7 proto 3 vid 0x0525 pid 0xA4A8
[   44.913303][  T837] usb 2-1: USB disconnect, device number 3
[   44.937601][  T837] usblp0: removed
[   45.354238][  T987] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   45.363249][  T987] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   45.372085][  T987] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   45.381127][  T987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   45.389208][  T987] System zones: 0-2, 18-18, 34-34
[   45.394796][  T987] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   45.409384][  T987] EXT4-fs (loop1): 1 truncate cleaned up
[   45.414845][  T987] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   45.495085][  T991] device bridge_slave_0 left promiscuous mode
[   45.501313][  T991] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.509242][  T991] device bridge_slave_1 left promiscuous mode
[   45.515877][  T991] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.535144][  T991] bridge0: port 1(syz_tun) entered blocking state
[   45.541492][  T991] bridge0: port 1(syz_tun) entered disabled state
[   45.550967][  T991] device syz_tun entered promiscuous mode
[   45.557533][  T991] bridge0: port 1(syz_tun) entered blocking state
[   45.563774][  T991] bridge0: port 1(syz_tun) entered forwarding state
[   45.616177][  T993] EXT4-fs error (device loop1): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   45.761569][  T999] overlayfs: empty lowerdir
[   45.915389][ T1008] device wireguard0 entered promiscuous mode
[   46.023500][ T1004] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.032590][ T1004] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   46.035822][ T1013] __nla_validate_parse: 2 callbacks suppressed
[   46.035829][ T1013] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[   46.056373][ T1002] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   46.064871][ T1002] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   46.073082][ T1004] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   46.080473][ T1002] F2FS-fs (loop0): Found nat_bits in checkpoint
[   46.082646][ T1004] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   46.095899][ T1004] System zones: 0-2, 18-18, 34-34
[   46.101699][ T1004] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   46.117435][ T1004] EXT4-fs (loop2): 1 truncate cleaned up
[   46.121647][ T1002] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   46.122905][ T1004] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   46.138808][ T1002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   46.398529][ T1032] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   46.582253][    T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   46.589570][  T513] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[   46.724948][   T18] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   46.832447][  T513] usb 5-1: Invalid ep0 maxpacket: 64
[   46.863912][ T1038] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   46.864097][ T1041] binder_alloc: binder_alloc_mmap_handler: 1040 20ffd000-21000000 already mapped failed -16
[   46.886496][  T576] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir1928027672/syzkaller.TFr7dt/22/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   46.886889][ T1041] binder_alloc: 1040: binder_alloc_buf, no vma
[   46.915830][  T576] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   46.938027][  T576] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir1928027672/syzkaller.TFr7dt/22/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   46.940544][  T576] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   46.941650][  T576] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir1928027672/syzkaller.TFr7dt/22/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   46.941936][  T576] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   46.942347][  T576] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir1928027672/syzkaller.TFr7dt/22/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   46.982361][  T513] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   47.013293][  T576] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   47.042330][    T5] usb 1-1: unable to get BOS descriptor or descriptor too short
[   47.054413][   T18] usb 2-1: Using ep0 maxpacket: 16
[   47.062866][  T576] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir1928027672/syzkaller.TFr7dt/22/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   47.118218][  T576] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   47.152526][    T5] usb 1-1: unable to read config index 0 descriptor/start: -71
[   47.160040][    T5] usb 1-1: can't read configurations, error -71
[   47.212528][   T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.302611][   T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.312416][   T18] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   47.325381][   T18] usb 2-1: New USB device found, idVendor=005e, idProduct=0000, bcdDevice= 0.00
[   47.334301][   T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.370001][   T18] usb 2-1: config 0 descriptor??
[   47.412291][  T513] usb 5-1: Invalid ep0 maxpacket: 64
[   47.417481][  T513] usb usb5-port1: attempt power cycle
[   47.551465][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.558963][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.566253][ T1051] device bridge_slave_0 entered promiscuous mode
[   47.577207][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.584078][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.591272][ T1051] device bridge_slave_1 entered promiscuous mode
[   47.623095][   T23] kauditd_printk_skb: 12 callbacks suppressed
[   47.623104][   T23] audit: type=1400 audit(1718789976.229:224): avc:  denied  { getopt } for  pid=1029 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   47.647243][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.655613][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.662667][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.669604][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.685437][   T23] audit: type=1400 audit(1718789976.289:225): avc:  denied  { execute } for  pid=1029 comm="syz-executor.1" dev="tmpfs" ino=16185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   47.703663][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   47.711096][   T23] audit: type=1400 audit(1718789976.289:226): avc:  denied  { execute_no_trans } for  pid=1029 comm="syz-executor.1" path=2F6D656D66643AA39F5204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=16185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   47.751410][  T837] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.760257][  T837] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.778559][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   47.787022][  T835] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.793904][  T835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.801824][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   47.810341][  T835] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.817228][  T835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.829742][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.842361][  T513] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   47.877206][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.885958][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.894711][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   47.894957][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.914580][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   47.924537][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.932162][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.940429][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.947926][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.955966][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.963882][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.972291][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.972530][  T513] usb 5-1: Invalid ep0 maxpacket: 64
[   47.980035][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.980050][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   47.980064][   T18] hid-multitouch 0003:005E:0000.0001: unknown main item tag 0x0
[   48.012422][   T18] hid-multitouch 0003:005E:0000.0001: hidraw0: USB HID v0.00 Device [HID 005e:0000] on usb-dummy_hcd.1-1/input0
[   48.045627][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.085339][ T1061] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   48.126107][   T18] usb 2-1: USB disconnect, device number 4
[   48.375567][  T513] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   48.409342][    T7] device bridge_slave_1 left promiscuous mode
[   48.415380][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.423410][    T7] device bridge_slave_0 left promiscuous mode
[   48.429541][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.482311][  T513] usb 5-1: Invalid ep0 maxpacket: 64
[   48.487608][  T513] usb usb5-port1: unable to enumerate USB device
[   48.834247][ T1081] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   49.047532][ T1086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   49.063673][ T1094] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   49.070860][ T1051] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir3762797878/syzkaller.x74UIo/1/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   49.073042][ T1094] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   49.099692][ T1051] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   49.124114][ T1051] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir3762797878/syzkaller.x74UIo/1/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   49.138326][ T1094] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[   49.153911][ T1089] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   49.158228][ T1094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   49.177760][ T1089] ext4 filesystem being mounted at /root/syzkaller-testdir922861386/syzkaller.PbXx90/13/bus supports timestamps until 2038 (0x7fffffff)
[   49.179423][ T1094] System zones: 0-2, 18-18, 34-34
[   49.192845][ T1051] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   49.216576][ T1094] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   49.232318][ T1094] EXT4-fs (loop0): 1 truncate cleaned up
[   49.237764][ T1094] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   49.245920][ T1051] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir3762797878/syzkaller.x74UIo/1/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   49.281047][ T1051] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   49.303823][ T1102] device syz_tun left promiscuous mode
[   49.309493][ T1051] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir3762797878/syzkaller.x74UIo/1/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   49.327895][ T1102] bridge0: port 1(syz_tun) entered disabled state
[   49.349131][ T1051] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   49.358366][ T1102] bridge0: port 1(syz_tun) entered blocking state
[   49.368493][ T1051] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir3762797878/syzkaller.x74UIo/1/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   49.374624][ T1102] bridge0: port 1(syz_tun) entered disabled state
[   49.400231][ T1051] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   49.431357][ T1102] device syz_tun entered promiscuous mode
[   49.438958][ T1102] bridge0: port 1(syz_tun) entered blocking state
[   49.445228][ T1102] bridge0: port 1(syz_tun) entered forwarding state
[   49.475664][ T1105] EXT4-fs error (device loop0): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   49.629710][ T1107] FAT-fs (loop3): Directory bread(block 64) failed
[   49.649709][ T1107] FAT-fs (loop3): Directory bread(block 65) failed
[   49.656783][ T1107] FAT-fs (loop3): Directory bread(block 66) failed
[   49.664260][ T1107] FAT-fs (loop3): Directory bread(block 67) failed
[   49.677423][ T1107] FAT-fs (loop3): Directory bread(block 68) failed
[   49.684942][ T1107] FAT-fs (loop3): Directory bread(block 69) failed
[   49.691627][ T1107] FAT-fs (loop3): Directory bread(block 70) failed
[   49.698342][ T1107] FAT-fs (loop3): Directory bread(block 71) failed
[   49.705230][ T1107] FAT-fs (loop3): Directory bread(block 72) failed
[   49.711755][ T1107] FAT-fs (loop3): Directory bread(block 73) failed
[   49.825253][ T1115] EXT4-fs (loop1): Test dummy encryption mode enabled
[   50.180102][ T1115] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[   50.236797][ T1124] device wireguard0 entered promiscuous mode
[   50.346519][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.353781][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.360997][ T1127] device bridge_slave_0 entered promiscuous mode
[   50.367808][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.375017][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.382199][ T1127] device bridge_slave_1 entered promiscuous mode
[   50.726914][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.735343][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.745060][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.758256][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.767748][  T513] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.774616][  T513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.782377][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.791285][ T1143] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   50.803219][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.811390][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.819475][    T5] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   50.827633][  T513] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.834497][  T513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.843767][  T769] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir922861386/syzkaller.PbXx90/15/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   50.844988][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.876781][    T9] device bridge_slave_1 left promiscuous mode
[   50.883017][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.890378][    T9] device bridge_slave_0 left promiscuous mode
[   50.891346][  T769] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   50.897080][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.922999][  T769] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir922861386/syzkaller.PbXx90/15/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   50.970202][  T769] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   50.992607][  T769] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir922861386/syzkaller.PbXx90/15/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   51.017841][  T769] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   51.036647][  T769] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir922861386/syzkaller.PbXx90/15/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   51.061620][  T769] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   51.066694][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.087749][    T5] usb 2-1: Using ep0 maxpacket: 16
[   51.088086][  T769] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir922861386/syzkaller.PbXx90/15/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   51.124582][  T769] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   51.145704][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.164427][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.204234][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.212425][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.225296][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.235086][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   51.254217][    T5] usb 2-1: New USB device found, idVendor=005e, idProduct=0000, bcdDevice= 0.00
[   51.263258][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.275659][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.284199][    T5] usb 2-1: config 0 descriptor??
[   51.289234][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.298257][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.308570][   T23] audit: type=1400 audit(1718789979.909:227): avc:  denied  { create } for  pid=1150 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   51.329801][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.334945][   T23] audit: type=1400 audit(1718789979.909:228): avc:  denied  { append } for  pid=1150 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   52.560315][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.567815][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.575605][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.583256][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.590699][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.598386][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.606006][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.613740][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.632263][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.639904][    T5] hid-multitouch 0003:005E:0000.0002: unknown main item tag 0x0
[   52.669046][    T5] hid-multitouch 0003:005E:0000.0002: hidraw0: USB HID v0.00 Device [HID 005e:0000] on usb-dummy_hcd.1-1/input0
[   52.683032][ T1171] EXT4-fs (loop0): Test dummy encryption mode enabled
[   52.688686][    T5] usb 2-1: USB disconnect, device number 5
[   52.710989][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.721235][ T1171] EXT4-fs (loop0): Unsupported blocksize for fs encryption
[   52.728097][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.743358][ T1159] device bridge_slave_0 entered promiscuous mode
[   52.898785][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.905724][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.913439][ T1159] device bridge_slave_1 entered promiscuous mode
[   53.212767][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.219729][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.226975][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.233902][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.242968][ T1190] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   53.257871][   T23] audit: type=1400 audit(1718789981.859:229): avc:  denied  { mount } for  pid=1189 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   53.284878][ T1190] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   53.443522][ T1199] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   53.452451][ T1199] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   53.499143][ T1199] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   53.508290][ T1199] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   53.516154][ T1199] System zones: 0-2, 18-18, 34-34
[   53.522007][ T1199] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   53.536577][ T1199] EXT4-fs (loop1): 1 truncate cleaned up
[   53.542049][ T1199] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   53.564547][   T23] audit: type=1400 audit(1718789982.169:230): avc:  denied  { unmount } for  pid=812 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   53.565929][  T812] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir4059115067/syzkaller.lSst6z/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   53.608983][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.616627][  T812] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   53.635536][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.643119][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.650552][  T812] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir4059115067/syzkaller.lSst6z/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   53.675999][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.690457][  T812] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   53.714182][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.722484][ T1169] F2FS-fs (loop2): Invalid log blocks per segment (1)
[   53.724458][  T513] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.729047][ T1169] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   53.737803][  T812] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir4059115067/syzkaller.lSst6z/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   53.744182][  T513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.745131][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.785259][ T1169] F2FS-fs (loop2): Unrecognized mount option "disable_ent_û£" or missing value
[   53.839405][ T1207] EXT4-fs error (device loop1): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   53.912553][  T812] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   53.985544][  T513] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.989988][  T812] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir4059115067/syzkaller.lSst6z/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   53.992547][  T513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.048603][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.057301][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.065161][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.073526][  T812] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   54.093853][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.136085][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.144303][  T812] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor.0: path /root/syzkaller-testdir4059115067/syzkaller.lSst6z/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   54.172958][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.199218][  T812] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   54.227912][    T9] device bridge_slave_1 left promiscuous mode
[   54.245517][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.282560][    T9] device bridge_slave_0 left promiscuous mode
[   54.296296][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.387531][ T1215] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.396837][ T1215] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   54.432839][ T1215] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   54.659389][ T1215] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   54.667349][ T1215] System zones: 0-2, 18-18, 34-34
[   54.677013][ T1215] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   54.691723][ T1215] EXT4-fs (loop3): 1 truncate cleaned up
[   54.697204][ T1215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   54.728186][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   54.743250][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.772897][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.816440][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.834111][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.916122][ T1226] EXT4-fs error (device loop3): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   55.031252][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.039657][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   55.047933][  T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.057782][  T812] bridge0: port 1(syz_tun) entered disabled state
[   55.074403][  T812] device syz_tun left promiscuous mode
[   55.085867][  T812] bridge0: port 1(syz_tun) entered disabled state
[   55.252596][ T1228] Zero length message leads to an empty skb
[   55.349714][ T1228] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   55.403452][   T23] audit: type=1400 audit(1718789984.009:231): avc:  denied  { remount } for  pid=1238 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   55.419734][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.430041][ T1245] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.437793][ T1245] device bridge_slave_0 entered promiscuous mode
[   55.444694][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.451612][ T1245] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.459149][ T1245] device bridge_slave_1 entered promiscuous mode
[   55.466260][ T1228] 9pnet_virtio: no channels available for device 127.0.0.1
[   55.477302][ T1228] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   55.503991][ T1244] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   55.573492][  T836] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   55.586756][ T1159] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir1440358118/syzkaller.MVGKNV/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   55.612793][ T1159] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   55.631679][ T1159] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir1440358118/syzkaller.MVGKNV/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   55.657336][ T1159] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   55.676393][ T1159] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir1440358118/syzkaller.MVGKNV/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   55.687693][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.702107][ T1159] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   55.708059][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.708161][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.727323][ T1159] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir1440358118/syzkaller.MVGKNV/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   55.733678][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.741263][ T1159] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   55.794024][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.801760][ T1159] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir1440358118/syzkaller.MVGKNV/2/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   55.827479][   T18] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.841135][ T1159] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   55.859774][   T18] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.876973][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.885649][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.894127][  T837] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.900979][  T837] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.909054][ T1258] FAT-fs (loop4): Directory bread(block 64) failed
[   55.909368][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.919492][ T1258] FAT-fs (loop4): Directory bread(block 65) failed
[   55.923829][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.937721][ T1258] FAT-fs (loop4): Directory bread(block 66) failed
[   55.938005][  T835] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   55.944255][ T1258] FAT-fs (loop4): Directory bread(block 67) failed
[   55.951785][  T837] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.964526][  T837] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.968370][ T1258] FAT-fs (loop4): Directory bread(block 68) failed
[   55.978339][ T1258] FAT-fs (loop4): Directory bread(block 69) failed
[   55.984769][ T1258] FAT-fs (loop4): Directory bread(block 70) failed
[   55.991063][ T1258] FAT-fs (loop4): Directory bread(block 71) failed
[   55.997651][ T1258] FAT-fs (loop4): Directory bread(block 72) failed
[   56.004992][ T1258] FAT-fs (loop4): Directory bread(block 73) failed
[   56.012552][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.020536][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.028700][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.036527][  T836] usb 3-1: config index 0 descriptor too short (expected 4023, got 18)
[   56.045505][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.131701][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.141349][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.154610][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.162833][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.432943][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.458117][  T835] usb 2-1: Using ep0 maxpacket: 16
[   56.463517][  T836] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=66.e3
[   56.484369][  T836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.522278][  T836] usb 3-1: Product: syz
[   56.529678][  T836] usb 3-1: Manufacturer: syz
[   56.539511][  T836] usb 3-1: SerialNumber: syz
[   56.549594][  T836] usb 3-1: config 0 descriptor??
[   56.564068][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.583050][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.591120][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.592679][  T835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.599651][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.610913][  T836] usbserial_generic 3-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   56.618108][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.628980][  T835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.647127][  T836] usbserial_generic 3-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   56.658032][  T835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   56.670791][  T836] usbserial_generic 3-1:0.0: device has no bulk endpoints
[   56.704829][  T835] usb 2-1: New USB device found, idVendor=005e, idProduct=0000, bcdDevice= 0.00
[   56.723077][  T835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.745102][  T835] usb 2-1: config 0 descriptor??
[   56.761320][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.771372][ T1268] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.779985][ T1268] device bridge_slave_0 entered promiscuous mode
[   56.787159][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.794340][ T1268] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.799152][  T398] usb 3-1: USB disconnect, device number 3
[   56.802185][ T1268] device bridge_slave_1 entered promiscuous mode
[   56.853711][ T1273] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   56.862695][ T1273] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   56.872201][ T1273] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   56.881118][ T1273] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   56.889000][ T1273] System zones: 0-2, 18-18, 34-34
[   56.894776][ T1273] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   56.909382][ T1273] EXT4-fs (loop4): 1 truncate cleaned up
[   56.909444][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.915622][ T1273] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   56.940546][  T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.604949][ T1280] EXT4-fs error (device loop4): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   57.658483][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.659189][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.666835][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.674279][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.682815][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.689541][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.696336][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.703823][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.711960][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.718803][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.727463][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.734085][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.734100][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.734113][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.742536][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.749503][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.756916][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.771488][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.809164][  T835] hid-multitouch 0003:005E:0000.0003: unknown main item tag 0x0
[   57.821199][  T835] hid-multitouch 0003:005E:0000.0003: hidraw0: USB HID v0.00 Device [HID 005e:0000] on usb-dummy_hcd.1-1/input0
[   57.876919][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.880655][  T835] usb 2-1: USB disconnect, device number 6
[   57.886045][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.924209][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.932449][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.940190][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.948374][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.956471][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.964207][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.971943][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.979962][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.013338][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.021483][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.031583][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.041968][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.192469][  T836] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   58.262349][    T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   58.543409][ T1299] EXT4-fs (loop1): Test dummy encryption mode enabled
[   58.550372][ T1299] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[   58.602384][  T836] usb 5-1: unable to get BOS descriptor or descriptor too short
[   58.622358][    T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.632449][    T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.643429][    T5] usb 1-1: config 1 interface 1 has no altsetting 1
[   58.673020][    T9] device bridge_slave_1 left promiscuous mode
[   58.681440][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.692179][    T9] device bridge_slave_0 left promiscuous mode
[   58.698797][  T836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   58.708396][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.708635][  T836] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   58.727886][  T836] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   58.790071][ T1308] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   58.804190][    T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   58.814652][  T376] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir23394122/syzkaller.QbPsEo/46/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   58.839715][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.848229][    T5] usb 1-1: Product: syz
[   58.849173][  T376] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   58.852190][    T5] usb 1-1: Manufacturer: syz
[   58.852528][    T5] usb 1-1: SerialNumber: syz
[   58.871745][  T376] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir23394122/syzkaller.QbPsEo/46/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   58.905710][  T376] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   58.924937][  T836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   58.935195][  T376] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir23394122/syzkaller.QbPsEo/46/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   58.968566][  T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.976673][  T836] usb 5-1: Product: syz
[   58.980883][  T836] usb 5-1: Manufacturer: syz
[   58.985394][  T836] usb 5-1: SerialNumber: syz
[   58.992477][  T376] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   59.033619][  T376] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir23394122/syzkaller.QbPsEo/46/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   59.052902][    T5] usb 1-1: selecting invalid altsetting 1
[   59.059184][  T836] hub 5-1:1.0: bad descriptor, ignoring hub
[   59.071079][  T836] hub: probe of 5-1:1.0 failed with error -5
[   59.077804][  T376] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   59.097709][  T376] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir23394122/syzkaller.QbPsEo/46/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   59.122938][  T376] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   59.233094][ T1291] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   59.449148][  T836] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   59.456500][ T1291] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   59.469444][ T1291] EXT4-fs (loop0): invalid journal inode
[   59.475210][ T1291] EXT4-fs (loop0): can't get journal size
[   59.482061][ T1291] EXT4-fs (loop0): 1 truncate cleaned up
[   59.487744][ T1291] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue
[   59.505443][   T23] audit: type=1400 audit(1718789988.109:232): avc:  denied  { write } for  pid=1289 comm="syz-executor.0" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   59.527882][    T5] cdc_ncm 1-1:1.0: bind() failure
[   59.534338][    T5] cdc_ncm 1-1:1.1: bind() failure
[   59.550713][    T5] usb 1-1: USB disconnect, device number 5
[   59.613961][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.620829][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.628408][ T1325] device bridge_slave_0 entered promiscuous mode
[   59.635331][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.642169][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.649620][ T1325] device bridge_slave_1 entered promiscuous mode
[   59.655903][  T836] usb 5-1: USB disconnect, device number 6
[   59.672860][  T836] usblp0: removed
[   59.706122][   T23] audit: type=1400 audit(1718789988.309:233): avc:  denied  { ioctl } for  pid=1335 comm="syz-executor.2" path="socket:[19358]" dev="sockfs" ino=19358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   59.735978][ T1336] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[   59.760443][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.767421][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.774520][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.777526][ T1338] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   59.781258][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.811191][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.818573][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.826799][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.841238][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.849262][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.856205][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.863607][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.871594][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.878597][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.892281][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.900144][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.908286][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.916525][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.931216][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.939751][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.983172][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.990924][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.006429][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.014747][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.059954][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.076278][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.166505][ T1343] EXT4-fs (loop2): Ignoring removed orlov option
[   60.213950][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.222073][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.242684][ T1343] EXT4-fs (loop2): Test dummy encryption mode enabled
[   60.249475][ T1343] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   60.260721][  T398] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   60.312431][ T1343] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[   60.322155][ T1343] EXT4-fs (loop2): Unsupported blocksize for fs encryption
[   60.394639][ T1351] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   60.412574][    T9] device bridge_slave_1 left promiscuous mode
[   60.441495][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.469665][    T9] device bridge_slave_0 left promiscuous mode
[   60.493578][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.522383][  T398] usb 4-1: Using ep0 maxpacket: 16
[   60.537094][ T1351] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   60.539936][ T1363] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   60.573618][  T704] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir3591152626/syzkaller.v3gS4z/23/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   60.609008][  T704] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   60.630945][  T704] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir3591152626/syzkaller.v3gS4z/23/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   60.643290][ T1361] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   60.656741][  T704] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   60.670422][ T1361] ext4 filesystem being mounted at /root/syzkaller-testdir3474293545/syzkaller.UqgEOR/5/bus supports timestamps until 2038 (0x7fffffff)
[   60.897980][  T398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.913062][  T398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.919445][   T23] audit: type=1400 audit(1718789989.349:234): avc:  denied  { mount } for  pid=1366 comm="syz-executor.2" name="/" dev="ramfs" ino=20554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   60.946529][  T398] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   60.953626][  T704] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir3591152626/syzkaller.v3gS4z/23/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   60.984019][  T398] usb 4-1: New USB device found, idVendor=005e, idProduct=0000, bcdDevice= 0.00
[   60.993329][  T398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.994241][  T704] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   61.003037][  T398] usb 4-1: config 0 descriptor??
[   61.023695][  T704] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir3591152626/syzkaller.v3gS4z/23/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   61.050136][  T704] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   61.070611][  T704] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir3591152626/syzkaller.v3gS4z/23/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   61.096355][  T704] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   61.155521][  T704] bridge0: port 1(syz_tun) entered disabled state
[   61.162826][  T704] device syz_tun left promiscuous mode
[   61.168132][  T704] bridge0: port 1(syz_tun) entered disabled state
[   61.427530][   T23] audit: type=1400 audit(1718789990.029:235): avc:  denied  { unmount } for  pid=1127 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   61.551164][ T1384] FAT-fs (loop2): Directory bread(block 64) failed
[   61.560103][ T1384] FAT-fs (loop2): Directory bread(block 65) failed
[   61.566967][ T1384] FAT-fs (loop2): Directory bread(block 66) failed
[   61.573741][ T1384] FAT-fs (loop2): Directory bread(block 67) failed
[   61.580137][ T1384] FAT-fs (loop2): Directory bread(block 68) failed
[   61.587616][ T1384] FAT-fs (loop2): Directory bread(block 69) failed
[   61.596611][ T1384] FAT-fs (loop2): Directory bread(block 70) failed
[   61.606746][ T1388] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.613640][ T1384] FAT-fs (loop2): Directory bread(block 71) failed
[   61.619951][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.626932][ T1384] FAT-fs (loop2): Directory bread(block 72) failed
[   61.633825][ T1388] device bridge_slave_0 entered promiscuous mode
[   61.639997][ T1384] FAT-fs (loop2): Directory bread(block 73) failed
[   61.647189][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.655151][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.674545][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.685776][ T1388] device bridge_slave_1 entered promiscuous mode
[   61.695093][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.706522][ T1386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   61.709026][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.724056][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.731557][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.749604][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.757554][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.765113][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.772517][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.780051][  T398] hid-multitouch 0003:005E:0000.0004: unknown main item tag 0x0
[   61.797463][  T398] hid-multitouch 0003:005E:0000.0004: hidraw0: USB HID v0.00 Device [HID 005e:0000] on usb-dummy_hcd.3-1/input0
[   62.127777][  T398] usb 4-1: USB disconnect, device number 3
[   62.137285][   T23] audit: type=1400 audit(1718789990.739:236): avc:  denied  { create } for  pid=1401 comm="syz-executor.1" dev="anon_inodefs" ino=20718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   62.181719][   T23] audit: type=1400 audit(1718789990.739:237): avc:  denied  { ioctl } for  pid=1401 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20718 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   62.187260][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.225562][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.262934][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.271174][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.280161][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.287023][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.295290][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.303546][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.311645][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.318501][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.333897][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.341489][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.349437][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.357629][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.389842][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.410654][ T1404] F2FS-fs (loop0): Found nat_bits in checkpoint
[   62.422375][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.430571][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.441222][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.449093][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.456900][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.466623][  T951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.479336][ T1404] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[   62.486904][ T1404] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   62.495166][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.503213][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.511377][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.520400][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.771921][   T23] audit: type=1400 audit(1718789991.359:238): avc:  denied  { write } for  pid=1403 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   62.982282][  T398] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   63.036454][ T1245] attempt to access beyond end of device
[   63.036454][ T1245] loop0: rw=2049, want=45104, limit=40427
[   63.063580][ T1425] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.072660][ T1425] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   63.097427][ T1425] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   63.106213][ T1425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   63.114064][ T1425] System zones: 0-2, 18-18, 34-34
[   63.119778][ T1425] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   63.135324][ T1425] EXT4-fs (loop3): 1 truncate cleaned up
[   63.140769][ T1425] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   63.179095][ T1419] incfs: ino conflict with backing FS 1
[   63.217346][   T23] audit: type=1400 audit(1718789991.779:239): avc:  denied  { mounton } for  pid=1411 comm="syz-executor.2" path="/root/syzkaller-testdir2556370825/syzkaller.aBxZC6/12/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   63.249344][   T23] audit: type=1400 audit(1718789991.819:240): avc:  denied  { write } for  pid=1411 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   63.269885][   T23] audit: type=1400 audit(1718789991.819:241): avc:  denied  { write } for  pid=1411 comm="syz-executor.2" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.364232][ T1434] EXT4-fs error (device loop3): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   63.494505][ T1429] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   63.572379][  T398] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.589194][  T398] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.600641][  T398] usb 5-1: config 1 interface 1 has no altsetting 1
[   63.625384][ T1449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1449 comm=syz-executor.0
[   63.703962][ T1449] EXT4-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value
[   63.882632][  T398] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.892344][  T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.900258][  T398] usb 5-1: Product: syz
[   63.936677][  T398] usb 5-1: Manufacturer: syz
[   63.941941][  T398] usb 5-1: SerialNumber: syz
[   63.992939][  T398] usb 5-1: selecting invalid altsetting 1
[   64.595769][ T1416] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   64.682994][ T1416] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   64.694377][ T1416] EXT4-fs (loop4): invalid journal inode
[   64.924679][ T1416] EXT4-fs (loop4): can't get journal size
[   64.940645][ T1416] EXT4-fs (loop4): 1 truncate cleaned up
[   64.946664][ T1416] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue
[   64.977054][  T398] cdc_ncm 5-1:1.0: bind() failure
[   64.998107][  T398] cdc_ncm 5-1:1.1: bind() failure
[   65.021081][  T398] usb 5-1: USB disconnect, device number 7
[   65.345824][ T1487] EXT4-fs (loop0): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks)
[   65.509189][   T23] kauditd_printk_skb: 7 callbacks suppressed
[   65.509197][   T23] audit: type=1400 audit(1718789994.109:249): avc:  denied  { bind } for  pid=1486 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   65.541904][ T1480] F2FS-fs (loop1): Found nat_bits in checkpoint
[   65.568940][ T1480] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[   65.575700][ T1480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   65.818637][ T1504] FAT-fs (loop4): Directory bread(block 64) failed
[   65.833513][ T1504] FAT-fs (loop4): Directory bread(block 65) failed
[   65.841420][ T1504] FAT-fs (loop4): Directory bread(block 66) failed
[   65.859120][ T1504] FAT-fs (loop4): Directory bread(block 67) failed
[   65.866711][ T1504] FAT-fs (loop4): Directory bread(block 68) failed
[   65.874493][ T1504] FAT-fs (loop4): Directory bread(block 69) failed
[   65.881310][ T1504] FAT-fs (loop4): Directory bread(block 70) failed
[   65.889054][ T1504] FAT-fs (loop4): Directory bread(block 71) failed
[   65.896510][ T1504] FAT-fs (loop4): Directory bread(block 72) failed
[   66.025701][ T1504] FAT-fs (loop4): Directory bread(block 73) failed
[   66.035869][ T1502] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   66.143804][ T1325] attempt to access beyond end of device
[   66.143804][ T1325] loop1: rw=2049, want=45104, limit=40427
[   66.584385][   T74] cfg80211: failed to load regulatory.db
[   66.935158][  T836] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   67.015246][ T1525] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   67.024171][ T1525] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   67.033712][ T1520] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   67.035614][ T1525] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[   67.051536][ T1525] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   67.059404][ T1525] System zones: 0-2, 18-18, 34-34
[   67.065530][ T1525] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   67.080932][ T1525] EXT4-fs (loop0): 1 truncate cleaned up
[   67.086405][ T1525] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   67.232464][  T836] usb 5-1: Using ep0 maxpacket: 16
[   67.313469][ T1127] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir2556370825/syzkaller.aBxZC6/18/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   67.339888][ T1127] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   67.611008][ T1536] EXT4-fs error (device loop0): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   67.631835][ T1127] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir2556370825/syzkaller.aBxZC6/18/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   67.728643][ T1127] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   67.750781][ T1127] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir2556370825/syzkaller.aBxZC6/18/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   67.777250][ T1127] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   67.798922][ T1127] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir2556370825/syzkaller.aBxZC6/18/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   67.879002][   T23] audit: type=1400 audit(1718789996.459:250): avc:  denied  { nlmsg_write } for  pid=1539 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.888073][ T1127] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   67.918764][ T1127] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir2556370825/syzkaller.aBxZC6/18/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   67.944297][ T1127] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   67.982343][  T836] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d0.1e
[   67.991493][  T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.999891][  T836] usb 5-1: Product: syz
[   68.004051][  T836] usb 5-1: Manufacturer: syz
[   68.008561][  T836] usb 5-1: SerialNumber: syz
[   68.016805][  T836] usb 5-1: config 0 descriptor??
[   68.031059][   T23] audit: type=1400 audit(1718789996.629:251): avc:  denied  { connect } for  pid=1545 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   68.070245][   T23] audit: type=1400 audit(1718789996.659:252): avc:  denied  { read } for  pid=1545 comm="syz-executor.0" name="msr" dev="devtmpfs" ino=9168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   68.094526][   T23] audit: type=1400 audit(1718789996.659:253): avc:  denied  { open } for  pid=1545 comm="syz-executor.0" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   68.121315][ T1543] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   68.135912][ T1543] ext4 filesystem being mounted at /root/syzkaller-testdir613974208/syzkaller.Hzt9gG/11/bus supports timestamps until 2038 (0x7fffffff)
[   68.373011][ T1556] EXT4-fs (loop1): Unrecognized mount option "dont_hash" or missing value
[   68.471329][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.478359][ T1562] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.486078][ T1562] device bridge_slave_0 entered promiscuous mode
[   68.494813][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.501872][ T1562] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.508113][   T23] audit: type=1400 audit(1718789997.109:254): avc:  denied  { read } for  pid=1567 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   68.509346][ T1562] device bridge_slave_1 entered promiscuous mode
[   68.535516][ T1568] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   68.581598][ T1572] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.583514][ T1561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   68.590472][ T1572] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   68.608923][ T1572] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[   68.617734][ T1572] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   68.625820][ T1572] System zones: 0-2, 18-18, 34-34
[   68.631442][ T1572] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   68.645973][ T1572] EXT4-fs (loop0): 1 truncate cleaned up
[   68.651426][ T1572] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   68.737723][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.744821][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.752358][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.759186][ T1562] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.087406][ T1582] EXT4-fs error (device loop0): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   69.430844][  T398] usb 5-1: USB disconnect, device number 8
[   69.483883][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.494468][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.584389][    T9] device bridge_slave_1 left promiscuous mode
[   69.590337][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.601371][    T9] device bridge_slave_0 left promiscuous mode
[   69.607400][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.823668][ T1586] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   69.852729][ T1586] ext4 filesystem being mounted at /root/syzkaller-testdir157810009/syzkaller.agDJVU/10/bus supports timestamps until 2038 (0x7fffffff)
[   69.898680][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.906441][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.915586][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.935993][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.946158][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.953019][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.975518][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.988320][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.997303][  T836] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.004267][  T836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.022530][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.030498][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.038370][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.046881][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.062165][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.070327][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.081606][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.089578][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.104383][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.112462][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.126680][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.134778][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.144143][ T1609] EXT4-fs (loop3): Unrecognized mount option "dont_hash" or missing value
[   70.156895][ T1607] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   70.167092][ T1607] EXT4-fs (loop4): orphan cleanup on readonly fs
[   70.173547][ T1607] EXT4-fs error (device loop4): ext4_orphan_get:1260: comm syz-executor.4: bad orphan inode 15
[   70.184263][ T1607] ext4_test_bit(bit=14, block=18) = 1
[   70.184310][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.189428][ T1607] is_bad_inode(inode)=0
[   70.189431][ T1607] NEXT_ORPHAN(inode)=1023
[   70.189434][ T1607] max_ino=32
[   70.189436][ T1607] i_nlink=0
[   70.189589][ T1607] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2930: inode #15: comm syz-executor.4: corrupted xattr block 19
[   70.198799][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.212389][ T1607] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -117)
[   70.241901][ T1607] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,grpquota,,errors=continue
[   70.277960][ T1607] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor.4: path /root/syzkaller-testdir18197364/syzkaller.zuiw0Y/7/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0
[   70.333202][ T1622] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   70.416795][   T23] audit: type=1400 audit(1718789999.019:255): avc:  denied  { shutdown } for  pid=1626 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.464167][ T1622] EXT4-fs error (device loop2): ext4_read_inode_bitmap:134: comm syz-executor.2: Invalid inode bitmap blk 13429 in block_group 0
[   70.571806][ T1562] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir938826745/syzkaller.tEties/0/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   70.598388][    T5] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   70.608489][ T1633] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   70.609352][ T1562] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   70.617362][ T1633] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   70.636969][ T1562] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir938826745/syzkaller.tEties/0/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   70.675194][ T1633] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   70.683341][ T1562] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   70.684106][ T1633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   70.703106][ T1562] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir938826745/syzkaller.tEties/0/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   70.710338][ T1633] System zones: 0-2, 18-18, 34-34
[   70.735476][ T1620] F2FS-fs (loop3): invalid crc value
[   70.745174][ T1633] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   70.760320][ T1633] EXT4-fs (loop4): 1 truncate cleaned up
[   70.762650][ T1562] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   70.766064][ T1633] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   70.800077][ T1562] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir938826745/syzkaller.tEties/0/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   70.806517][ T1629] FAT-fs (loop0): Directory bread(block 64) failed
[   70.830011][ T1562] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   70.851115][ T1562] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir938826745/syzkaller.tEties/0/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   70.875816][    T5] usb 2-1: Using ep0 maxpacket: 32
[   70.892946][ T1629] FAT-fs (loop0): Directory bread(block 65) failed
[   70.899565][ T1629] FAT-fs (loop0): Directory bread(block 66) failed
[   70.901583][ T1620] F2FS-fs (loop3): Found nat_bits in checkpoint
[   70.905974][ T1629] FAT-fs (loop0): Directory bread(block 67) failed
[   70.918989][ T1629] FAT-fs (loop0): Directory bread(block 68) failed
[   70.925359][ T1629] FAT-fs (loop0): Directory bread(block 69) failed
[   70.931716][ T1629] FAT-fs (loop0): Directory bread(block 70) failed
[   70.938068][ T1629] FAT-fs (loop0): Directory bread(block 71) failed
[   70.944410][ T1629] FAT-fs (loop0): Directory bread(block 72) failed
[   70.950816][ T1629] FAT-fs (loop0): Directory bread(block 73) failed
[   71.018469][ T1639] EXT4-fs error (device loop4): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   71.120767][ T1620] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   71.162446][    T5] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[   71.170759][    T5] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   71.179434][    T5] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[   71.188982][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   71.199412][    T5] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   71.206991][   T23] audit: type=1400 audit(1718789999.799:256): avc:  denied  { map } for  pid=1619 comm="syz-executor.3" path="/root/syzkaller-testdir613974208/syzkaller.Hzt9gG/17/file2/devices.list" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   71.209323][    T5] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   71.236672][   T23] audit: type=1400 audit(1718789999.799:257): avc:  denied  { block_suspend } for  pid=1619 comm="syz-executor.3" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   71.252056][    T5] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   71.282340][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.292551][    T5] usb 2-1: config 0 descriptor??
[   71.413469][ T1268] attempt to access beyond end of device
[   71.413469][ T1268] loop3: rw=2049, want=45112, limit=40427
[   71.543315][    T5] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   71.587682][ T1646] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.594593][ T1646] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.601908][ T1646] device bridge_slave_0 entered promiscuous mode
[   71.609108][ T1646] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.616942][ T1646] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.624778][ T1646] device bridge_slave_1 entered promiscuous mode
[   71.635282][ T1648] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   71.649200][ T1648] ext4 filesystem being mounted at /root/syzkaller-testdir18197364/syzkaller.zuiw0Y/9/bus supports timestamps until 2038 (0x7fffffff)
[   71.717954][ T1646] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.724822][ T1646] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.731947][ T1646] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.738708][ T1646] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.750604][  T835] usb 2-1: USB disconnect, device number 7
[   71.757143][  T835] usblp0: removed
[   71.854122][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.863475][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.870786][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.898290][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.912533][  T837] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.919399][  T837] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.927544][  T837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.928491][ T1679] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   71.935582][  T837] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.950951][  T837] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.961390][    T9] device bridge_slave_1 left promiscuous mode
[   71.967552][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.978282][    T9] device bridge_slave_0 left promiscuous mode
[   71.985143][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.062550][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.066991][ T1658] F2FS-fs (loop0): Found nat_bits in checkpoint
[   72.071244][ T1268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir613974208/syzkaller.Hzt9gG/21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   72.104070][ T1268] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   72.122793][  T835] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   72.124119][ T1658] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[   72.136658][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.136787][ T1268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir613974208/syzkaller.Hzt9gG/21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   72.145355][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.169657][ T1268] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   72.177487][ T1658] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   72.196600][ T1268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir613974208/syzkaller.Hzt9gG/21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   72.222565][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.235520][ T1268] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   72.255501][ T1268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir613974208/syzkaller.Hzt9gG/21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   72.305766][ T1268] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   72.331238][ T1268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir613974208/syzkaller.Hzt9gG/21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   72.356167][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.364928][ T1268] EXT4-fs error (device loop3): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   72.365033][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.397519][ T1691] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   72.405798][ T1692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   72.418238][  T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.442690][  T835] usb 5-1: Using ep0 maxpacket: 16
[   72.676511][  T835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.677959][ T1245] attempt to access beyond end of device
[   72.677959][ T1245] loop0: rw=2049, want=45104, limit=40427
[   72.688584][  T835] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[   72.709211][  T835] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[   72.739527][ T1698] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   72.748488][ T1698] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   72.758447][ T1698] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   72.767477][ T1698] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   72.775348][ T1698] System zones: 0-2, 18-18, 34-34
[   72.781081][ T1698] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   72.796056][ T1698] EXT4-fs (loop2): 1 truncate cleaned up
[   72.801502][ T1698] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   72.812308][  T835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   72.821154][  T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   72.834203][  T835] usb 5-1: SerialNumber: syz
[   72.834617][ T1701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   72.902343][ T1668] raw-gadget gadget: fail, usb_ep_enable returned -22
[   72.923169][  T835] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[   72.993521][  T835] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[   73.004548][ T1708] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   73.127025][ T1668] futex_wake_op: syz-executor.4 tries to shift op by 32; fix this program
[   73.224999][  T835] usb 5-1: USB disconnect, device number 9
[   73.330763][ T1714] FAT-fs (loop0): Directory bread(block 64) failed
[   73.346421][ T1714] FAT-fs (loop0): Directory bread(block 65) failed
[   73.353169][ T1714] FAT-fs (loop0): Directory bread(block 66) failed
[   73.359681][ T1714] FAT-fs (loop0): Directory bread(block 67) failed
[   73.366922][ T1714] FAT-fs (loop0): Directory bread(block 68) failed
[   73.373430][ T1714] FAT-fs (loop0): Directory bread(block 69) failed
[   73.380033][ T1714] FAT-fs (loop0): Directory bread(block 70) failed
[   73.386641][ T1714] FAT-fs (loop0): Directory bread(block 71) failed
[   73.393360][ T1714] FAT-fs (loop0): Directory bread(block 72) failed
[   73.399731][ T1714] FAT-fs (loop0): Directory bread(block 73) failed
[   73.422018][ T1712] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.438493][ T1712] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.455913][ T1712] device bridge_slave_0 entered promiscuous mode
[   73.571058][ T1712] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.580312][ T1712] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.588184][ T1712] device bridge_slave_1 entered promiscuous mode
[   73.893482][ T1723] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   73.907335][ T1723] ext4 filesystem being mounted at /root/syzkaller-testdir56268008/syzkaller.YbXulp/2/bus supports timestamps until 2038 (0x7fffffff)
[   73.924697][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.932026][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.948360][    T9] device bridge_slave_1 left promiscuous mode
[   73.959822][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.967411][    T9] device bridge_slave_0 left promiscuous mode
[   73.973873][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.060116][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.083264][ T1735] EXT4-fs (loop4): orphan cleanup on readonly fs
[   74.090410][ T1735] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 248: padding at end of block bitmap is not set
[   74.103763][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.106601][ T1735] Quota error (device loop4): write_blk: dquota write failed
[   74.120377][ T1735] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   74.130792][ T1735] EXT4-fs (loop4): 1 truncate cleaned up
[   74.140249][  T121] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.147108][  T121] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.155347][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.166472][ T1735] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   74.173191][ T1737] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   74.185003][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.201825][ T1735] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[   74.217779][ T1735] EXT4-fs (loop4): re-mounted. Opts: (null)
[   74.224316][ T1735] EXT4-fs (loop4): re-mounted. Opts: (null)
[   74.238634][ T1646] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir56268008/syzkaller.YbXulp/3/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   74.263599][ T1646] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   74.275967][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.290690][  T835] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.297539][  T835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.314119][ T1646] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir56268008/syzkaller.YbXulp/3/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   74.342878][  T840] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   74.343253][   T23] audit: type=1400 audit(1718790002.949:258): avc:  denied  { connect } for  pid=1734 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.361499][  T839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.380600][  T839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.413981][ T1646] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   74.444815][   T23] audit: type=1400 audit(1718790003.039:259): avc:  denied  { read } for  pid=1746 comm="syz-executor.0" dev="nsfs" ino=4026532328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   74.483526][ T1646] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir56268008/syzkaller.YbXulp/3/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   74.503108][ T1735] syz-executor.4 (1735) used greatest stack depth: 18392 bytes left
[   74.514851][  T839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.525276][   T23] audit: type=1400 audit(1718790003.039:260): avc:  denied  { open } for  pid=1746 comm="syz-executor.0" path="net:[4026532328]" dev="nsfs" ino=4026532328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   74.557334][   T23] audit: type=1400 audit(1718790003.039:261): avc:  denied  { write } for  pid=1746 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   74.557547][  T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.578194][ T1646] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   74.594775][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.612410][ T1646] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir56268008/syzkaller.YbXulp/3/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   74.612462][  T840] usb 2-1: Using ep0 maxpacket: 16
[   74.637275][ T1646] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   74.651546][ T1388] ==================================================================
[   74.661206][ T1646] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor.2: path /root/syzkaller-testdir56268008/syzkaller.YbXulp/3/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[   74.668296][ T1388] BUG: KASAN: use-after-free in kthread_stop+0x37/0x4a0
[   74.668303][ T1388] Write of size 4 at addr ffff8881d6cb8020 by task syz-executor.4/1388
[   74.668304][ T1388] 
[   74.668326][ T1388] CPU: 1 PID: 1388 Comm: syz-executor.4 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0
[   74.668336][ T1388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   74.693462][ T1646] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[   74.699556][ T1388] Call Trace:
[   74.752322][ T1388]  dump_stack+0x1d8/0x241
[   74.756652][ T1388]  ? prepare_exit_to_usermode+0x199/0x200
[   74.762295][ T1388]  ? nf_ct_l4proto_log_invalid+0x258/0x258
[   74.767925][ T1388]  ? printk+0xd1/0x111
[   74.771853][ T1388]  ? kthread_stop+0x37/0x4a0
[   74.776375][ T1388]  print_address_description+0x8c/0x600
[   74.781757][ T1388]  ? kthread_stop+0x37/0x4a0
[   74.786180][ T1388]  __kasan_report+0xf3/0x120
[   74.790621][ T1388]  ? kthread_stop+0x37/0x4a0
[   74.795027][ T1388]  kasan_report+0x30/0x60
[   74.799197][ T1388]  check_memory_region+0x272/0x280
[   74.804252][ T1388]  kthread_stop+0x37/0x4a0
[   74.808496][ T1388]  ext4_put_super+0x790/0xbb0
[   74.813014][ T1388]  ? ext4_drop_inode+0x1f0/0x1f0
[   74.817884][ T1388]  generic_shutdown_super+0x120/0x2a0
[   74.823189][ T1388]  kill_block_super+0x7a/0xe0
[   74.827706][ T1388]  deactivate_locked_super+0xa8/0x110
[   74.832999][ T1388]  deactivate_super+0x1e2/0x2a0
[   74.837684][ T1388]  ? vfs_submount+0xb0/0xb0
[   74.842050][ T1388]  ? deactivate_locked_super+0x110/0x110
[   74.847491][ T1388]  ? fast_dput+0x7a/0x280
[   74.851650][ T1388]  cleanup_mnt+0x44e/0x500
[   74.855903][ T1388]  task_work_run+0x140/0x170
[   74.860425][ T1388]  exit_to_usermode_loop+0x190/0x1a0
[   74.865721][ T1388]  prepare_exit_to_usermode+0x199/0x200
[   74.871099][ T1388]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[   74.876830][ T1388] RIP: 0033:0x7f2b7f252257
[   74.881160][ T1388] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[   74.900696][ T1388] RSP: 002b:00007fff5ab08cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   74.908931][ T1388] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2b7f252257
[   74.916835][ T1388] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5ab08db0
[   74.924648][ T1388] RBP: 00007fff5ab08db0 R08: 0000000000000000 R09: 0000000000000000
[   74.932448][ T1388] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5ab09e60
[   74.940256][ T1388] R13: 00007f2b7f2ad6c6 R14: 00000000000120f8 R15: 0000000000000012
[   74.948073][ T1388] 
[   74.950238][ T1388] Allocated by task 2:
[   74.954161][ T1388]  __kasan_kmalloc+0x171/0x210
[   74.958751][ T1388]  kmem_cache_alloc+0xd9/0x250
[   74.963349][ T1388]  dup_task_struct+0x4f/0x600
[   74.967865][ T1388]  copy_process+0x56d/0x3230
[   74.972285][ T1388]  _do_fork+0x197/0x900
[   74.976278][ T1388]  kernel_thread+0x16a/0x1d0
[   74.980890][ T1388]  kthreadd+0x3b1/0x4f0
[   74.984873][ T1388]  ret_from_fork+0x1f/0x30
[   74.989119][ T1388] 
[   74.991401][ T1388] Freed by task 10:
[   74.995033][ T1388]  __kasan_slab_free+0x1b5/0x270
[   74.999799][ T1388]  kmem_cache_free+0x10b/0x2c0
[   75.004426][ T1388]  rcu_do_batch+0x492/0xa00
[   75.008738][ T1388]  rcu_core+0x4c8/0xcb0
[   75.012739][ T1388]  __do_softirq+0x23b/0x6b7
[   75.017065][ T1388] 
[   75.019239][ T1388] The buggy address belongs to the object at ffff8881d6cb8000
[   75.019239][ T1388]  which belongs to the cache task_struct of size 3904
[   75.033311][ T1388] The buggy address is located 32 bytes inside of
[   75.033311][ T1388]  3904-byte region [ffff8881d6cb8000, ffff8881d6cb8f40)
[   75.046687][ T1388] The buggy address belongs to the page:
[   75.052176][ T1388] page:ffffea00075b2e00 refcount:1 mapcount:0 mapping:ffff8881f5cf9b80 index:0x0 compound_mapcount: 0
[   75.062927][ T1388] flags: 0x8000000000010200(slab|head)
[   75.068232][ T1388] raw: 8000000000010200 ffffea0007c35e00 0000000400000004 ffff8881f5cf9b80
[   75.076676][ T1388] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[   75.085051][ T1388] page dumped because: kasan: bad access detected
[   75.091310][ T1388] page_owner tracks the page as allocated
[   75.096859][ T1388] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC)
[   75.111706][ T1388]  prep_new_page+0x18f/0x370
[   75.116132][ T1388]  get_page_from_freelist+0x2d13/0x2d90
[   75.121501][ T1388]  __alloc_pages_nodemask+0x393/0x840
[   75.126803][ T1388]  alloc_slab_page+0x39/0x3c0
[   75.131308][ T1388]  new_slab+0x97/0x440
[   75.135219][ T1388]  ___slab_alloc+0x2fe/0x490
[   75.139645][ T1388]  __slab_alloc+0x62/0xa0
[   75.143808][ T1388]  kmem_cache_alloc+0x109/0x250
[   75.148498][ T1388]  dup_task_struct+0x4f/0x600
[   75.153009][ T1388]  copy_process+0x56d/0x3230
[   75.157451][ T1388]  _do_fork+0x197/0x900
[   75.161512][ T1388]  __x64_sys_clone+0x26b/0x2c0
[   75.166117][ T1388]  do_syscall_64+0xca/0x1c0
[   75.170540][ T1388]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[   75.176263][ T1388] page_owner free stack trace missing
[   75.181471][ T1388] 
[   75.183643][ T1388] Memory state around the buggy address:
[   75.189288][ T1388]  ffff8881d6cb7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   75.197192][ T1388]  ffff8881d6cb7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   75.205172][ T1388] >ffff8881d6cb8000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   75.213071][ T1388]                                ^
[   75.218018][ T1388]  ffff8881d6cb8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   75.225917][ T1388]  ffff8881d6cb8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   75.233809][ T1388] ==================================================================
[   75.241710][ T1388] Disabling lock debugging due to kernel taint
[   75.249571][ T1388] ------------[ cut here ]------------
[   75.258766][ T1388] refcount_t: addition on 0; use-after-free.
[   75.264906][ T1388] WARNING: CPU: 0 PID: 1388 at lib/refcount.c:25 refcount_warn_saturate+0x132/0x1a0
[   75.274165][ T1388] Modules linked in:
[   75.277891][ T1388] CPU: 0 PID: 1388 Comm: syz-executor.4 Tainted: G    B             5.4.274-syzkaller-00002-g6f97bd951d82 #0
[   75.289255][ T1388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   75.296752][   T23] audit: type=1400 audit(1718790003.899:262): avc:  denied  { write } for  pid=349 comm="syz-fuzzer" path="pipe:[10805]" dev="pipefs" ino=10805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   75.299159][ T1388] RIP: 0010:refcount_warn_saturate+0x132/0x1a0
[   75.328139][ T1388] Code: 04 01 48 c7 c7 a0 0b fa 84 e8 6a ef 0d ff 0f 0b eb a9 e8 31 3b 37 ff c6 05 c4 97 1c 04 01 48 c7 c7 20 0c fa 84 e8 4e ef 0d ff <0f> 0b eb 8d e8 15 3b 37 ff c6 05 a9 97 1c 04 01 48 c7 c7 80 0c fa
[   75.347664][ T1388] RSP: 0018:ffff8881e2197c30 EFLAGS: 00010246
[   75.353563][ T1388] RAX: 67d490fc35ea2c00 RBX: 0000000000000002 RCX: ffff8881e55fbf00
[   75.361385][ T1388] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   75.369188][ T1388] RBP: 0000000000000002 R08: ffffffff814d5cd2 R09: ffffed103edca9b8
[   75.377170][ T1388] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   75.384982][ T1388] R13: ffff8881d6cb8000 R14: dffffc0000000000 R15: ffff8881d6cb8020
[   75.392797][ T1388] FS:  0000555556da0480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   75.401556][ T1388] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.408070][ T1388] CR2: 00007fb418f4cfe0 CR3: 00000001e2033000 CR4: 00000000003406b0
[   75.415881][ T1388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   75.423779][ T1388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   75.431585][ T1388] Call Trace:
[   75.434722][ T1388]  ? __warn+0x162/0x250
[   75.438708][ T1388]  ? report_bug+0x3a1/0x4e0
[   75.443048][ T1388]  ? refcount_warn_saturate+0x132/0x1a0
[   75.448777][ T1388]  ? refcount_warn_saturate+0x132/0x1a0
[   75.454243][ T1388]  ? do_invalid_op+0x6e/0x110
[   75.458844][ T1388]  ? invalid_op+0x1e/0x30
[   75.463108][ T1388]  ? wake_up_klogd+0xb2/0xf0
[   75.467617][ T1388]  ? refcount_warn_saturate+0x132/0x1a0
[   75.473041][ T1388]  kthread_stop+0x1a5/0x4a0
[   75.477429][ T1388]  ext4_put_super+0x790/0xbb0
[   75.481947][ T1388]  ? ext4_drop_inode+0x1f0/0x1f0
[   75.486711][ T1388]  generic_shutdown_super+0x120/0x2a0
[   75.492007][ T1388]  kill_block_super+0x7a/0xe0
[   75.496519][ T1388]  deactivate_locked_super+0xa8/0x110
[   75.501724][ T1388]  deactivate_super+0x1e2/0x2a0
[   75.506410][ T1388]  ? vfs_submount+0xb0/0xb0
[   75.510761][ T1388]  ? deactivate_locked_super+0x110/0x110
[   75.516224][ T1388]  ? fast_dput+0x7a/0x280
[   75.520395][ T1388]  cleanup_mnt+0x44e/0x500
[   75.524727][ T1388]  task_work_run+0x140/0x170
[   75.529159][ T1388]  exit_to_usermode_loop+0x190/0x1a0
[   75.534447][ T1388]  prepare_exit_to_usermode+0x199/0x200
[   75.539830][ T1388]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[   75.545577][ T1388] RIP: 0033:0x7f2b7f252257
[   75.549807][ T1388] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[   75.569335][ T1388] RSP: 002b:00007fff5ab08cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   75.577584][ T1388] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2b7f252257
[   75.585409][ T1388] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5ab08db0
[   75.593377][ T1388] RBP: 00007fff5ab08db0 R08: 0000000000000000 R09: 0000000000000000
[   75.601273][ T1388] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5ab09e60
[   75.609088][ T1388] R13: 00007f2b7f2ad6c6 R14: 00000000000120f8 R15: 0000000000000012
2024/06/19 09:40:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[   75.616902][ T1388] ---[ end trace a5935d825ae871ff ]---
[   75.647065][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.674361][  T836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready