last executing test programs:

14m13.183009222s ago: executing program 3 (id=400):
prlimit64(0x0, 0xe, 0x0, 0x0)
getrlimit(0xe, &(0x7f0000000300))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r3, 0x4, 0x40800)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x4, 0x6, 0x4, 0x800})
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ftruncate(r5, 0x2000009)
sendfile(r3, r5, 0x0, 0x7ffff004)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

14m6.878471442s ago: executing program 3 (id=415):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2110008, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d00e70f0c6a4e2c32073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567a20d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x5, 0x1512, &(0x7f0000002980)="$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")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800200060ec97000fc82f00fe800000"], 0xffe)
close(r0)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000480)={0xcc, 0xfffffffffffffffd})
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

14m5.401876824s ago: executing program 3 (id=417):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2110008, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d00e70f0c6a4e2c32073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567a20d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x5, 0x1512, &(0x7f0000002980)="$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")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800200060ec97000fc82f00fe8000000000000000000000000000aaff020000000000"], 0xffe)
close(r0)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000480)={0xcc, 0xfffffffffffffffd})
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

14m4.736973979s ago: executing program 3 (id=419):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2110008, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d00e70f0c6a4e2c32073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567a20d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x5, 0x1512, &(0x7f0000002980)="$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")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000140)=ANY=[], 0xffe)
close(r0)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000480)={0xcc, 0xfffffffffffffffd})
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

14m3.380860699s ago: executing program 3 (id=423):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2110008, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d00e70f0c6a4e2c32073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567a20d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x5, 0x1512, &(0x7f0000002980)="$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")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800200060ec97000fc82f00fe8000000000000000000000000000aaff020000000000000000"], 0xffe)
close(r0)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000480)={0xcc, 0xfffffffffffffffd})
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

14m2.136692016s ago: executing program 3 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f0000000300))
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r3, 0x4, 0x40800)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x4, 0x6, 0x4, 0x800})
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ftruncate(0xffffffffffffffff, 0x2000009)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

13m46.928644803s ago: executing program 32 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f0000000300))
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r3, 0x4, 0x40800)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x4, 0x6, 0x4, 0x800})
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ftruncate(0xffffffffffffffff, 0x2000009)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

25.040217039s ago: executing program 1 (id=3065):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x15)
openat(0xffffffffffffffff, 0x0, 0x400000, 0xc6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000000)=0x1)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005)

22.400825003s ago: executing program 5 (id=3070):
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x1860, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x5, 0x4e23, 0x3, 0xa, 0x20, 0x10, 0x2e}, {0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x400009, 0xffffffffffffffbe, 0x1, 0xd}, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x2b}, 0x0, @in=@empty, 0x80000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x4080, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')

22.389687023s ago: executing program 1 (id=3071):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@usrquota}, {@nodiscard}, {@sysvgroups}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@mpls_uc={0x8847, {[], @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4e20, 0x4e24, 0x8}}}}}}, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001ed)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
syz_usb_connect$uac2(0x1, 0xc1, &(0x7f0000000200)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x5, 0x30, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8a, 0xb, 0x24}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0xa, "7fced038f3"}, @processing_unit={0x11, 0x24, 0x8, 0x2, 0x1, [0x1, 0x3, 0x2, 0x2, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x9, 0x2, "f306"}, @as_header={0x10, 0x24, 0x1, 0x9, 0x1, 0x1, 0x0, 0x7, 0x0, 0x3}, @as_header={0x10, 0x24, 0x1, 0x7f, 0x0, 0x3, 0x1002, 0x40, 0x5, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x3, {0x8, 0x25, 0x1, 0x80, 0x33, 0x9, 0x33a0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc, 0xb1, 0x4, {0x8, 0x25, 0x1, 0x2, 0x33, 0x6f, 0x3}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0xf, &(0x7f0000000340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0xff, 0x98d5}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x5872}}, {0x6a, &(0x7f00000003c0)=@string={0x6a, 0x3, "1e0841034e2c4247009470f32c9643bcb606928512c26b92cc96ab2d0457f5c864c2dc75081faa06a51f418301ce46c1ec327381aa49d959c4cf92bb8ec2df5110dac7e6bbcd59335b8daff938b5ade59f26d74949bdd0a78f87880750184ff8a8cda95e16690c71"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000180))
fallocate(r0, 0x3, 0xf00, 0x10000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40)
read$FUSE(r6, &(0x7f0000000cc0)={0x2020}, 0x2020)

20.532931821s ago: executing program 5 (id=3075):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

20.376501634s ago: executing program 5 (id=3077):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

20.304903286s ago: executing program 5 (id=3078):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0)

20.247209077s ago: executing program 5 (id=3079):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$uac3(0x0, 0xbc, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3c, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x405, 0x3, 0x4, 0x4, 0x8c87, 0x1, 0x41f4, 0x6}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x402, 0x13, 0x4, 0x8, 0x3, 0x6, 0x8, 0x6}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x997d, 0x80, 0x4762}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0x7ff, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x74, 0x8, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})

19.008391642s ago: executing program 1 (id=3080):
pipe2(&(0x7f0000000000), 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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")
open(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1, 0x40)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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")
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000010c0)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@noload}, {@grpjquota}, {@errors_continue}, {@nodiscard}, {@mblk_io_submit}, {@nodioread_nolock}]}, 0x81, 0xbef, &(0x7f0000002040)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r6, 0x2007ffc)
sched_setaffinity(0x0, 0x8, &(0x7f0000001380)=0x6a26)
sendfile(r6, r6, 0x0, 0x2000000000006)

18.61616283s ago: executing program 5 (id=3083):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb5", 0x89)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

18.283620057s ago: executing program 33 (id=3083):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb5", 0x89)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

17.015590443s ago: executing program 1 (id=3089):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0)

16.882074975s ago: executing program 1 (id=3090):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$xdp(0x2c, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, 0x0, 0x40000)

16.767606888s ago: executing program 1 (id=3093):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect$uac3(0x0, 0xbc, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3c, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x405, 0x3, 0x4, 0x4, 0x8c87, 0x1, 0x41f4, 0x6}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x402, 0x13, 0x4, 0x8, 0x3, 0x6, 0x8, 0x6}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x997d, 0x80, 0x4762}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0x7ff, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x74, 0x8, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})

16.722136279s ago: executing program 34 (id=3093):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect$uac3(0x0, 0xbc, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3c, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x405, 0x3, 0x4, 0x4, 0x8c87, 0x1, 0x41f4, 0x6}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x402, 0x13, 0x4, 0x8, 0x3, 0x6, 0x8, 0x6}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x997d, 0x80, 0x4762}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0x7ff, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x74, 0x8, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})

12.810021178s ago: executing program 2 (id=3105):
socket$inet(0x2, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x3, 0x3, 0x3, 0x1, 0x800, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0xb7fb, 0x0, 0x0, 0x9, 0x0, 0xcc}, 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
ioctl$TIOCPKT(r0, 0x5420, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d)
ioctl$TCXONC(r1, 0x540a, 0x2)

11.282271s ago: executing program 2 (id=3109):
mmap(&(0x7f00009b3000/0x2000)=nil, 0x2000, 0x300000b, 0x10, 0xffffffffffffffff, 0xec776000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0xffffffffffffffff, 0xfe93)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000007c0)=0x50000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x3c0d, 0x4)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvfrom$unix(r0, &(0x7f0000000340)=""/198, 0xc6, 0x42, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socket(0xf, 0x6, 0x5)
io_setup(0x9, &(0x7f00000000c0)=<r6=>0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x20070a, 0x2d, 0x8000000000000001, 0xa, 0x2000009, 0x2c}, 0x48)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_freeze_timeout', 0x20001, 0x106)
io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000100)='9', 0x20000101}])
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="0000010000a1000008001b00000000001c001a80180002801400018008001d000f00000008001a0000006ed22fc7131cd2d6dc060000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

11.26841192s ago: executing program 7 (id=3110):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x3010050, &(0x7f0000000100)=ANY=[], 0xfe, 0x150e, &(0x7f0000000ec0)="$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")
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140))
mkdir(0x0, 0x2)

10.085818554s ago: executing program 0 (id=3113):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, 0x0, 0x440b0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0)
r4 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
ftruncate(r4, 0x2)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

9.595122784s ago: executing program 2 (id=3115):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3)
clock_getres(0x5, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000006d80)={0x10, 0x12, 0x8, 0x70bd25, 0x25dfdc02}, 0x10}], 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x18, &(0x7f0000000400), 0x0, &(0x7f0000000980), 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x34, 0x66, 0x34, 0x65, 0x30, 0x39, 0x64, 0x30, 0x37, 0x34, 0x65, 0x34, 0x30, 0x31, 0x37, 0x32]}, &(0x7f0000000080)={0x0, "9e15bb54078bcd2307153360ea4c9eeac64d6349897b82ce4b2fe21b489c8722616788071b2a77be169c3c2d949a380a896644b6a6582f04c4561be129cc457f", 0x34}, 0x48, 0xfffffffffffffffd)
statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6000, 0x80, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
keyctl$chown(0x4, r6, r7, 0xee00)

8.621268624s ago: executing program 6 (id=3117):
mmap(&(0x7f00009b3000/0x2000)=nil, 0x2000, 0x300000b, 0x10, 0xffffffffffffffff, 0xec776000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0xffffffffffffffff, 0xfe93)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000007c0)=0x50000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x3c0d, 0x4)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvfrom$unix(r0, &(0x7f0000000340)=""/198, 0xc6, 0x42, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socket(0xf, 0x6, 0x5)
io_setup(0x9, &(0x7f00000000c0)=<r6=>0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x20070a, 0x2d, 0x8000000000000001, 0xa, 0x2000009, 0x2c}, 0x48)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_freeze_timeout', 0x20001, 0x106)
io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000100)='9', 0x20000101}])
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="0000010000a1000008001b00000000001c001a80180002801400018008001d000f00000008001a0000006ed22fc7131cd2d6dc060000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

7.953143798s ago: executing program 0 (id=3118):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

7.594651505s ago: executing program 7 (id=3121):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f0000000300))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r3, 0x4, 0x40800)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x4, 0x6, 0x4, 0x800})
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)

7.530555077s ago: executing program 0 (id=3122):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

5.939283699s ago: executing program 7 (id=3124):
pipe2(&(0x7f0000000000), 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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")
open(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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")
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000010c0)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@noload}, {@grpjquota}, {@errors_continue}, {@nodiscard}, {@mblk_io_submit}, {@nodioread_nolock}]}, 0x81, 0xbef, &(0x7f0000002040)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r6, 0x2007ffc)
sched_setaffinity(0x0, 0x8, &(0x7f0000001380)=0x6a26)
sendfile(r6, r6, 0x0, 0x2000000000006)

5.732041173s ago: executing program 4 (id=3125):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2110008, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d00e70f0c6a4e2c32073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567a20d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x5, 0x1512, &(0x7f0000002980)="$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")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800200060ec97000fc82f00fe8000000000000000000000000000aaff0200"/51], 0xffe)
close(r0)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000480)={0xcc, 0xfffffffffffffffd})
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

5.648307125s ago: executing program 0 (id=3126):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x9, 0xfe, 0xfff00004}, {0x16, 0x0, 0x3, 0xfffffffe}]}, 0x10)
clock_settime(0x1, &(0x7f0000000180)={0x0, 0x3938700})
r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0xfff9, 0x3}, 'syz0\x00', 0x38})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=<r5=>0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0xe7)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

4.844794371s ago: executing program 6 (id=3127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

4.736335603s ago: executing program 4 (id=3128):
sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
ptrace$setsig(0x4203, 0x0, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5bc, &(0x7f0000001600)="$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")
socket$unix(0x1, 0x1, 0x0)

4.653723235s ago: executing program 0 (id=3129):
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@mpls_uc={0x8847, {[], @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4e20, 0x4e24, 0x8}}}}}}, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001ed)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
syz_usb_connect$uac2(0x1, 0xc1, &(0x7f0000000200)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x5, 0x30, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8a, 0xb, 0x24}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0xa, "7fced038f3"}, @processing_unit={0x11, 0x24, 0x8, 0x2, 0x1, [0x1, 0x3, 0x2, 0x2, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x9, 0x2, "f306"}, @as_header={0x10, 0x24, 0x1, 0x9, 0x1, 0x1, 0x0, 0x7, 0x0, 0x3}, @as_header={0x10, 0x24, 0x1, 0x7f, 0x0, 0x3, 0x1002, 0x40, 0x5, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x3, {0x8, 0x25, 0x1, 0x80, 0x33, 0x9, 0x33a0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc, 0xb1, 0x4, {0x8, 0x25, 0x1, 0x2, 0x33, 0x6f, 0x3}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x0, 0x5, 0x1, 0x20, 0xff}, 0xf, &(0x7f0000000340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0xff, 0x98d5}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x5872}}, {0x6a, &(0x7f00000003c0)=@string={0x6a, 0x3, "1e0841034e2c4247009470f32c9643bcb606928512c26b92cc96ab2d0457f5c864c2dc75081faa06a51f418301ce46c1ec327381aa49d959c4cf92bb8ec2df5110dac7e6bbcd59335b8daff938b5ade59f26d74949bdd0a78f87880750184ff8a8cda95e16690c71"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000180))
fallocate(r0, 0x3, 0xf00, 0x10000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40)
read$FUSE(r4, &(0x7f0000000cc0)={0x2020}, 0x2020)

4.139053055s ago: executing program 7 (id=3130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x9, 0xfe, 0xfff00004}, {0x16, 0x0, 0x3, 0xfffffffe}]}, 0x10)
sendto$inet6(r3, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0)
clock_settime(0x1, &(0x7f0000000180)={0x0, 0x3938700})
r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0xfff9, 0x3}, 'syz0\x00', 0x38})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r5, 0x5501)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=<r6=>0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0xe7)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

4.112863346s ago: executing program 6 (id=3131):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

4.053667408s ago: executing program 6 (id=3132):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x10, 0x80002, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}}, 0x20}, 0x1, 0x0, 0x0, 0x4c001}, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0)

3.096342877s ago: executing program 4 (id=3133):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80802, 0x0)
sendfile(r0, r0, 0x0, 0x6)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x10000000, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000})
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r4)

3.016177798s ago: executing program 2 (id=3119):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x80, 0xa)
setreuid(0xee00, 0x0)
keyctl$session_to_parent(0x12)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x44, 0x30, 0x301, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.762837334s ago: executing program 7 (id=3134):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x15)
openat(0xffffffffffffffff, 0x0, 0x400000, 0xc6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000000)=0x1)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)

1.762351004s ago: executing program 6 (id=3135):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

1.729462825s ago: executing program 4 (id=3136):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet6(0x10, 0x2, 0x0)
sendto$inet6(r3, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0xfff9, 0x3}, 'syz0\x00', 0x38})
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$input_event(r5, &(0x7f00000000c0)={{0x0, 0xea60}, 0x12, 0x6, 0x80}, 0x18)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=<r6=>0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0xe7)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

869.734162ms ago: executing program 2 (id=3137):
socket$inet6(0xa, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0)
epoll_create1(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x20044010, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x12, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

574.388948ms ago: executing program 0 (id=3138):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x3, 0x0)
capset(&(0x7f0000000100)={0x20071026, r2}, &(0x7f0000000180)={0x8, 0x80000000, 0x10000, 0x5, 0x8001, 0x429b})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000039c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0x2}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x9}, {0x4, 0xff}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x30, 0x5f, 0x61, 0x2e, 0x0, 0x30, 0x2e]}}, &(0x7f00000029c0)=""/4096, 0x58, 0x1000, 0x1, 0x4}, 0x28)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}})
ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000080)={0xffffee01, 0x6, 0xfffffe01, 0x7fff, 0xb5, "feaa9d18c6e7a00000006500", 0x8001, 0x5})
ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f0000000000))
r9 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, r9, 0x0)

573.752708ms ago: executing program 7 (id=3139):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@usrquota}, {@nodiscard}, {@sysvgroups}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@mpls_uc={0x8847, {[], @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4e20, 0x4e24, 0x8}}}}}}, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001ed)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
syz_usb_connect$uac2(0x1, 0xc1, &(0x7f0000000200)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x5, 0x30, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8a, 0xb, 0x24}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0xa, "7fced038f3"}, @processing_unit={0x11, 0x24, 0x8, 0x2, 0x1, [0x1, 0x3, 0x2, 0x2, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x9, 0x2, "f306"}, @as_header={0x10, 0x24, 0x1, 0x9, 0x1, 0x1, 0x0, 0x7, 0x0, 0x3}, @as_header={0x10, 0x24, 0x1, 0x7f, 0x0, 0x3, 0x1002, 0x40, 0x5, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x3, {0x8, 0x25, 0x1, 0x80, 0x33, 0x9, 0x33a0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc, 0xb1, 0x4, {0x8, 0x25, 0x1, 0x2, 0x33, 0x6f, 0x3}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x0, 0x5, 0x1, 0x20, 0xff}, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x5872}}, {0x6a, &(0x7f00000003c0)=@string={0x6a, 0x3, "1e0841034e2c4247009470f32c9643bcb606928512c26b92cc96ab2d0457f5c864c2dc75081faa06a51f418301ce46c1ec327381aa49d959c4cf92bb8ec2df5110dac7e6bbcd59335b8daff938b5ade59f26d74949bdd0a78f87880750184ff8a8cda95e16690c71"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000180))
fallocate(r0, 0x3, 0xf00, 0x10000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40)
read$FUSE(r6, &(0x7f0000000cc0)={0x2020}, 0x2020)

80.631978ms ago: executing program 6 (id=3140):
pipe2(&(0x7f0000000000), 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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")
open(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$eJzs3U9oHFUYAPBvO5vdpFCTg1AUhNGboKGNeNBTQkmhmIvK4p+DuNhUJYmFLC6mh2zjRTwKHtWLNw967FkERbx58GoFqYoH7a1gcWR3ZrOz2c02Fba1+Psdhi/vvW/f93aHZDLJvn11OTbOz8SF69evxexsJarLZ5bjRiUWIom+yzGqNqYNALg33Miy+DPLHTGl0j0sTLcsAGCKej//Xz9Rann360njs8r0awIApqv4/X9u0pjZwzouTqUkAGDKRu7/PzLUXRv+U3+19F8BAMC96vmXXn5mZS3iuTSdjdh6r91oN+LpQf/KhXgzNmM9TsV83IzILxS6h0rvePbc2uqpNE078ctCNLoZ7UbEVqfdyK8UVpJefj1Ox3wsFPnF1UaWZcnZTyIi7YmIy53e/LFVaTdm4ngx/4/HYz2WIo37R/Ijzq2tLqXFAzS2+vmdiL3BfYtu/YsxH9+/FhdjM85HN7d/WbO2uns6Tc9ka0P57Ua9Ny536B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTfQv7+99kg/17FhfH9Pf2x8nzi/2B9vL9gbJ6Fln2xzuPN95PYmh/oIP787Qb1Th2d5cOAAAAAAAAAAAAAAAAAAAA/xmtnVo0NzfXt1s7lzbKQWe7tXMsIrotb337+VdzMTrmFkG1mKPUlRZNlzaaWdIfnCVDY4og6U7eb/nsyn7F5TH1/VWMLaOedx2LcRWeePjnjwYtDyX9R/57MCaJ8QtMDpRRDrbuy0u6nSdqP1i6xZirWZYdlr77ymhWVCKqt//CTQ5mu8/qN9feeOCJ1skney1fZrlHH5t/4eqHn/620dzszhy9V7C23bqZbTSLr8efbIcHSen8qUQeVMpnQnVS+t5wSzP54fcXH/zgu6PNnpVb3h4zJsmX88XBrloedMs80DU3bq6ZMSf/FIKTHy83r+z+9OtRs0rfJGzUAQAAAAAAAAAAAAAAAAAAd0TpveKF4s2+M5Oynnp2+pUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ0z+Pz/UrA30nKU4K9OjHbV17dbEbW7vUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7n/gkAAP//YA9qrg==")
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000010c0)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@noload}, {@grpjquota}, {@errors_continue}, {@nodiscard}, {@mblk_io_submit}, {@nodioread_nolock}]}, 0x81, 0xbef, &(0x7f0000002040)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)
ftruncate(r6, 0x2007ffc)
sched_setaffinity(0x0, 0x8, &(0x7f0000001380)=0x6a26)
sendfile(r6, r6, 0x0, 0x2000000000006)

79.776718ms ago: executing program 4 (id=3141):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

250.17µs ago: executing program 2 (id=3142):
sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
ptrace$setsig(0x4203, 0x0, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5bc, &(0x7f0000001600)="$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")
socket$unix(0x1, 0x1, 0x0)

0s ago: executing program 4 (id=3143):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40001)
setrlimit(0x6, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0)

kernel console output (not intermixed with test programs):

for  pid=9408 comm="syz.0.2363" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  916.115377][ T9423] loop2: detected capacity change from 0 to 512
[  916.140651][ T9425] loop0: detected capacity change from 0 to 512
[  916.263233][ T9423] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.2369: inode has both inline data and extents flags
[  916.331339][ T9425] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.2370: inode has both inline data and extents flags
[  916.412973][ T9423] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.2369: couldn't read orphan inode 15 (err -117)
[  916.439715][ T9425] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2370: couldn't read orphan inode 15 (err -117)
[  916.487092][ T9423] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  916.498609][ T1136] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  916.520548][ T9425] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  916.636861][    T6] usb 6-1: unit 4: unexpected type 0x03
[  916.726879][    T6] usb 6-1: USB disconnect, device number 10
[  916.784827][   T30] audit: type=1326 audit(1783529499.926:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.2382" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbf04b3e59 code=0x0
[  916.929157][ T1136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  916.939477][ T1136] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  916.952439][ T1136] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  916.961556][ T1136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.964472][ T8712] udevd[8712]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  916.972893][ T1136] usb 5-1: config 0 descriptor??
[  917.027082][ T1136] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  917.249162][ T9428] UDC core: couldn't find an available UDC or it's busy: -16
[  917.256681][ T9428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  917.265032][ T4896] usb 5-1: USB disconnect, device number 15
[  917.362365][ T1136] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  917.459864][  T444] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  917.622346][ T1136] usb 6-1: Using ep0 maxpacket: 8
[  917.795695][ T1136] usb 6-1: unable to get BOS descriptor or descriptor too short
[  917.849844][  T444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  917.860986][  T444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.870731][  T444] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  917.882583][ T4896] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  917.884398][ T1136] usb 6-1: config 15 has an invalid interface number: 234 but max is 0
[  917.899428][  T444] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  917.908502][ T1136] usb 6-1: config 15 has no interface number 0
[  917.914718][ T1136] usb 6-1: config 15 interface 234 has no altsetting 0
[  917.914784][  T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.930356][  T444] usb 3-1: config 0 descriptor??
[  918.099122][ T1136] usb 6-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=20.aa
[  918.108372][ T1136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.116658][ T1136] usb 6-1: Product: syz
[  918.120884][ T1136] usb 6-1: Manufacturer: syz
[  918.125516][ T1136] usb 6-1: SerialNumber: syz
[  918.152322][ T9485] loop0: detected capacity change from 0 to 512
[  918.164125][ T4896] usb 5-1: Using ep0 maxpacket: 32
[  918.191965][ T9485] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.2395: inode has both inline data and extents flags
[  918.205731][ T9485] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2395: couldn't read orphan inode 15 (err -117)
[  918.218013][ T9485] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  918.304789][ T4896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  918.315127][ T4896] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  918.328919][ T4896] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  918.338131][ T4896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.363996][ T4896] usb 5-1: config 0 descriptor??
[  918.446680][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.456466][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.458056][ T4896] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  918.468732][ T1136] pl2303 6-1:15.234: required endpoints missing
[  918.480754][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.493318][ T1136] usb 6-1: USB disconnect, device number 11
[  918.503700][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.519115][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.527030][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.534636][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.545214][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.552842][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.560539][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.568641][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.576353][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.583804][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.591460][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.605631][  T444] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  918.614718][  T444] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  918.625510][  T444] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  918.680449][ T4896] usb 5-1: USB disconnect, device number 16
[  918.739220][  T482] usb 3-1: USB disconnect, device number 18
[  919.190751][    T6] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  919.246442][ T9535] loop4: detected capacity change from 0 to 256
[  919.268826][ T4896] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  919.298211][ T9535] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  919.309524][ T9535] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  919.322120][ T9535] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d)
[  920.077865][ T9554] loop2: detected capacity change from 0 to 512
[  920.246762][ T9554] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  920.268957][ T9554] EXT4-fs (loop2): 1 truncate cleaned up
[  920.274643][ T9554] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback.
[  920.500944][ T9562] loop2: detected capacity change from 0 to 256
[  920.524192][ T9562] exfat: Deprecated parameter 'utf8'
[  920.530171][ T9562] exfat: Deprecated parameter 'namecase'
[  920.544592][ T9562] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  920.644521][ T4896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  920.655477][    T6] usb 1-1: unable to get BOS descriptor or descriptor too short
[  920.663162][ T4896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  920.673104][ T4896] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  920.682447][ T4896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.694191][ T4896] usb 6-1: config 0 descriptor??
[  920.699459][    T6] usb 1-1: not running at top speed; connect to a high speed hub
[  920.872044][    T6] usb 1-1: config 250 has an invalid interface number: 59 but max is 2
[  920.881091][    T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  920.892981][    T6] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 3
[  920.903478][    T6] usb 1-1: config 250 has no interface number 0
[  920.910355][    T6] usb 1-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64
[  920.923422][    T6] usb 1-1: config 250 interface 59 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  920.937290][  T445] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  920.946522][    T6] usb 1-1: config 250 interface 59 has no altsetting 0
[  921.121367][    T6] usb 1-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b
[  921.130714][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.139264][    T6] usb 1-1: Product: syz
[  921.143962][    T6] usb 1-1: Manufacturer: syz
[  921.148633][    T6] usb 1-1: SerialNumber: syz
[  921.337721][  T445] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  921.347926][  T445] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  921.357038][  T445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.366061][  T445] usb 5-1: config 0 descriptor??
[  921.440911][ T4896] hid-generic 0003:1532:010E.0005: item fetching failed at offset 4/5
[  921.450465][ T4896] hid-generic: probe of 0003:1532:010E.0005 failed with error -22
[  921.501386][    T6] usb 1-1: USB disconnect, device number 17
[  921.554530][ T9585] fuse: Bad value for 'group_id'
[  921.680877][ T8297] usb 6-1: USB disconnect, device number 12
[  921.760134][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  921.969169][ T9597] usb usb7: usbfs: process 9597 (syz.2.2441) did not claim interface 0 before use
[  922.312623][ T1136] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  922.550856][    T6] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  922.583349][ T1136] usb 3-1: Using ep0 maxpacket: 16
[  922.594274][ T8297] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  922.713371][ T1136] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  922.724429][ T1136] usb 3-1: config 0 interface 0 has no altsetting 0
[  922.731072][ T1136] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  922.740165][ T1136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.748807][ T1136] usb 3-1: config 0 descriptor??
[  922.843295][    T6] usb 1-1: Using ep0 maxpacket: 8
[  922.854551][ T8297] usb 6-1: Using ep0 maxpacket: 32
[  922.984172][ T8297] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  922.984189][    T6] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  922.992691][ T8297] usb 6-1: config 0 has no interface number 0
[  923.002064][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.010950][ T8297] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  923.025775][ T8297] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  923.035938][ T8297] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  923.045940][ T8297] usb 6-1: config 0 interface 196 has no altsetting 0
[  923.222482][ T8297] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  923.231616][ T8297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.239658][ T8297] usb 6-1: Product: syz
[  923.243845][ T8297] usb 6-1: Manufacturer: syz
[  923.248508][ T8297] usb 6-1: SerialNumber: syz
[  923.254340][ T8297] usb 6-1: config 0 descriptor??
[  923.266759][ T1136] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0
[  923.274153][ T1136] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0
[  923.281655][ T9605] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  923.288720][ T1136] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0
[  923.296117][ T1136] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0
[  923.304052][ T1136] hid-generic 0003:1E71:2009.0006: unknown main item tag 0x0
[  923.312231][ T1136] hid-generic 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  923.587377][ T9632] overlayfs: failed to clone upperpath
[  923.697867][ T8297] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  923.707526][ T8297] ipheth: probe of 6-1:0.196 failed with error -71
[  923.716186][ T8297] usb 6-1: USB disconnect, device number 13
[  923.723808][ T1136] usb 3-1: USB disconnect, device number 19
[  923.817941][  T444] usb 5-1: USB disconnect, device number 17
[  923.936630][ T9643] loop4: detected capacity change from 0 to 512
[  924.005905][ T9643] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  924.018614][ T9643] EXT4-fs (loop4): 1 truncate cleaned up
[  924.024476][ T9643] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback.
[  925.272314][ T1136] usb 1-1: USB disconnect, device number 18
[  925.286533][ T9674] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.2469' sets config #0
[  925.450082][   T30] audit: type=1400 audit(1783529507.930:283): avc:  denied  { listen } for  pid=9684 comm="syz.4.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  925.489938][ T9696] loop5: detected capacity change from 0 to 512
[  925.537147][ T9703] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2484'.
[  925.599957][ T9696] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  925.906064][ T9696] EXT4-fs (loop5): 1 truncate cleaned up
[  925.960836][ T9696] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  926.029088][ T1136] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  926.482827][  T334] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  926.677814][ T1136] usb 3-1: Using ep0 maxpacket: 32
[  926.807830][ T1136] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  926.816103][ T1136] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  926.827193][ T1136] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  926.838396][ T1136] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  926.851686][ T1136] usb 3-1: config 0 interface 0 has no altsetting 0
[  926.894491][  T334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  926.908591][  T334] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  926.927177][  T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.936178][  T334] usb 5-1: config 0 descriptor??
[  926.968582][ T9737] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  926.992059][  T445] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  927.046147][ T1136] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  927.059983][ T1136] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  927.073768][ T1136] usb 3-1: Product: syz
[  927.078014][ T1136] usb 3-1: Manufacturer: syz
[  927.082915][ T1136] usb 3-1: SerialNumber: syz
[  927.093184][ T1136] usb 3-1: config 0 descriptor??
[  927.114437][ T9746] fuse: Bad value for 'fd'
[  927.667450][  T444] usb 3-1: USB disconnect, device number 20
[  927.750323][ T9761] binder: 9760:9761 ioctl c028aa03 0 returned -22
[  927.767852][ T9763] loop0: detected capacity change from 0 to 256
[  927.858856][ T9763] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  927.869637][ T9763] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  927.879643][ T9763] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d)
[  927.948087][  T445] usb 6-1: Using ep0 maxpacket: 16
[  928.075154][  T445] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  928.084325][  T445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.093334][  T445] usb 6-1: config 0 descriptor??
[  928.140954][  T445] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  928.378444][  T445] usb 6-1: Detected FT232BM
[  928.431478][  T444] usb 5-1: USB disconnect, device number 18
[  928.470581][   T30] audit: type=1400 audit(1783529510.718:284): avc:  denied  { name_bind } for  pid=9773 comm="syz.4.2514" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  928.523853][ T9778] loop2: detected capacity change from 0 to 512
[  928.605892][  T445] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  928.628749][  T445] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  928.640500][ T9778] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.2515: inode has both inline data and extents flags
[  928.653982][  T445] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  928.659308][ T9778] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.2515: couldn't read orphan inode 15 (err -117)
[  928.684360][  T445] usb 6-1: USB disconnect, device number 14
[  928.693193][ T9778] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  928.729576][  T445] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  928.770412][  T445] ftdi_sio 6-1:0.0: device disconnected
[  928.790790][ T9793] loop0: detected capacity change from 0 to 256
[  928.800270][ T9793] exfat: Deprecated parameter 'utf8'
[  928.805768][ T9793] exfat: Deprecated parameter 'namecase'
[  928.820928][ T9795] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2523'.
[  928.842505][ T9793] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  928.888903][ T9803] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2525'.
[  928.995392][ T9822] loop0: detected capacity change from 0 to 256
[  929.003831][ T9822] exfat: Deprecated parameter 'utf8'
[  929.010025][ T9822] exfat: Deprecated parameter 'namecase'
[  929.020388][ T9822] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  929.044078][ T9826] overlayfs: failed to clone upperpath
[  929.125412][   T30] audit: type=1400 audit(1783529511.318:285): avc:  denied  { mounton } for  pid=9828 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  929.147536][ T4896] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  929.186285][ T9832] loop5: detected capacity change from 0 to 512
[  929.213165][ T9832] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  929.231103][ T9832] EXT4-fs (loop5): 1 truncate cleaned up
[  929.237301][ T9832] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  929.290719][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.297804][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.305390][ T9828] device bridge_slave_0 entered promiscuous mode
[  929.312598][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.319721][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.327373][ T9828] device bridge_slave_1 entered promiscuous mode
[  929.406716][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.413836][ T9828] bridge0: port 2(bridge_slave_1) entered forwarding state
[  929.421162][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.428232][ T9828] bridge0: port 1(bridge_slave_0) entered forwarding state
[  929.438227][ T9843] device syzkaller0 entered promiscuous mode
[  929.461800][ T4896] usb 3-1: Using ep0 maxpacket: 16
[  929.481044][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  929.488877][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.497024][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.517377][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  929.527054][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.534116][ T6950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  929.541779][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  929.550890][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.558007][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  929.574203][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  929.597411][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  929.612902][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  929.624193][ T4896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  929.625818][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  929.650068][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  929.660779][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  929.667050][ T4896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  929.677830][ T9857] loop4: detected capacity change from 0 to 256
[  929.682465][ T4896] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  929.687830][ T9828] device veth0_vlan entered promiscuous mode
[  929.697112][ T4896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.705058][ T9855] netlink: 'syz.0.2549': attribute type 37 has an invalid length.
[  929.715993][ T4896] usb 3-1: config 0 descriptor??
[  929.728113][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  929.738018][ T9828] device veth1_macvtap entered promiscuous mode
[  929.748949][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  929.755069][ T9857] exfat: Deprecated parameter 'utf8'
[  929.762501][ T9857] exfat: Deprecated parameter 'namecase'
[  929.769850][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  929.785194][ T9857] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  929.810003][   T30] audit: type=1400 audit(1783529511.955:286): avc:  denied  { mounton } for  pid=9828 comm="syz-executor" path="/root/syzkaller.Pal8Iz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  929.852807][ T9865] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2539'.
[  929.881201][ T9867] loop0: detected capacity change from 0 to 256
[  929.887654][   T30] audit: type=1400 audit(1783529512.029:287): avc:  denied  { ioctl } for  pid=9868 comm="syz.1.2553" path="socket:[50896]" dev="sockfs" ino=50896 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  929.920128][ T9871] device syzkaller0 entered promiscuous mode
[  929.949343][ T9867] exfat: Deprecated parameter 'utf8'
[  929.955384][ T9867] exfat: Deprecated parameter 'namecase'
[  929.987125][ T9867] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  930.026192][ T9885] loop4: detected capacity change from 0 to 256
[  930.036208][ T9885] exfat: Deprecated parameter 'utf8'
[  930.041880][ T9885] exfat: Deprecated parameter 'namecase'
[  930.050641][ T9885] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  930.175307][ T9892] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2565'.
[  930.232246][ T4896] HID 045e:07da: Invalid code 65791 type 1
[  930.246501][ T4896] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input122
[  930.265455][ T4896] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  930.269153][ T9905] device syzkaller0 entered promiscuous mode
[  930.284808][  T445] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  930.433836][ T9912] loop5: detected capacity change from 0 to 256
[  930.452590][ T9912] exfat: Deprecated parameter 'utf8'
[  930.475748][ T9912] exfat: Deprecated parameter 'namecase'
[  930.486739][ T4896] usb 3-1: USB disconnect, device number 21
[  930.515658][ T9912] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  930.659878][ T9914] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  930.684860][ T9914] EXT4-fs (loop5): 1 truncate cleaned up
[  930.690703][ T9914] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  930.739799][  T445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  930.757520][  T445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  930.776325][  T445] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  930.835089][  T445] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  930.844473][  T445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.853847][  T445] usb 2-1: config 0 descriptor??
[  931.173012][  T444] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  931.346352][    T6] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  931.369369][  T445] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  931.379200][  T445] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  931.573871][  T444] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  931.589295][  T444] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  931.600457][  T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.609366][  T444] usb 1-1: config 0 descriptor??
[  931.919525][ T9940] set_capacity_and_notify: 1 callbacks suppressed
[  931.919545][ T9940] loop5: detected capacity change from 0 to 512
[  931.959914][ T9940] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.2583: inode has both inline data and extents flags
[  931.973863][ T9940] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2583: couldn't read orphan inode 15 (err -117)
[  931.986777][ T9940] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  932.353761][    T6] usb 3-1: unable to get BOS descriptor or descriptor too short
[  932.364657][ T1136] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  932.451345][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  932.461536][    T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  932.635404][    T6] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  932.644528][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.652582][    T6] usb 3-1: Product: syz
[  932.656815][    T6] usb 3-1: Manufacturer: syz
[  932.661469][    T6] usb 3-1: SerialNumber: syz
[  932.701174][    T6] usb 3-1: selecting invalid altsetting 1
[  932.707094][    T6] usb 3-1: unit 6 not found!
[  932.787082][ T1136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  932.798120][ T1136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  932.807873][ T1136] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  932.816966][ T1136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.825952][ T1136] usb 6-1: config 0 descriptor??
[  933.032300][ T4896] usb 1-1: USB disconnect, device number 19
[  933.052356][ T9948] kvm [9947]: vcpu1, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x6
[  933.347707][ T1136] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[  933.355227][ T1136] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[  933.363921][ T1136] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[  933.371368][ T1136] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[  933.379055][ T1136] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[  933.389358][ T1136] hid-steam 0003:28DE:1142.0009: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  933.426113][    T6] usb 3-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3
[  933.447770][    T6] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3
[  933.460716][    T6] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  933.473784][   T30] audit: type=1400 audit(1783529515.343:288): avc:  denied  { bind } for  pid=9955 comm="syz.1.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  933.525058][    T6] usb 3-1: USB disconnect, device number 22
[  933.548861][ T9959] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  933.565076][ T4896] usb 6-1: USB disconnect, device number 15
[  933.719066][  T445] usb 2-1: USB disconnect, device number 15
[  934.013426][   T30] audit: type=1400 audit(1783529515.842:289): avc:  denied  { map } for  pid=9967 comm="syz.2.2591" path="socket:[51453]" dev="sockfs" ino=51453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  934.049424][   T30] audit: type=1400 audit(1783529515.842:290): avc:  denied  { read write } for  pid=9967 comm="syz.2.2591" path="socket:[51453]" dev="sockfs" ino=51453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  934.137532][ T9976] device syzkaller0 entered promiscuous mode
[  934.335935][  T445] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  934.390071][  T334] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  934.498429][ T4896] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  934.571071][ T9986] loop1: detected capacity change from 0 to 256
[  934.595950][  T445] usb 3-1: Using ep0 maxpacket: 32
[  934.601672][ T9986] exfat: Deprecated parameter 'utf8'
[  934.607297][ T9986] exfat: Deprecated parameter 'namecase'
[  934.652722][ T9986] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  934.682580][  T334] usb 1-1: Using ep0 maxpacket: 16
[  934.758444][  T445] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  934.766600][  T445] usb 3-1: config 0 has no interface number 0
[  934.772787][ T4896] usb 6-1: Using ep0 maxpacket: 32
[  934.844270][  T334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  934.854450][  T334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  935.050918][  T334] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  935.060055][  T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.062139][  T445] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  935.069102][  T334] usb 1-1: Product: syz
[  935.077457][  T445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.081976][  T334] usb 1-1: Manufacturer: syz
[  935.089776][  T445] usb 3-1: Product: syz
[  935.094594][  T334] usb 1-1: SerialNumber: syz
[  935.099011][  T445] usb 3-1: Manufacturer: syz
[  935.107552][  T445] usb 3-1: SerialNumber: syz
[  935.112793][  T445] usb 3-1: config 0 descriptor??
[  935.159654][  T445] smsc95xx v2.0.0
[  935.191745][ T4896] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  935.200859][ T4896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.208902][ T4896] usb 6-1: Product: syz
[  935.213105][ T4896] usb 6-1: Manufacturer: syz
[  935.217773][ T4896] usb 6-1: SerialNumber: syz
[  935.223094][ T4896] usb 6-1: config 0 descriptor??
[  935.475319][  T334] usb 1-1: 0:2 : does not exist
[  935.485652][  T334] usb 1-1: USB disconnect, device number 20
[  935.546685][ T9991] input: syz0 as /devices/virtual/input/input123
[  935.568680][ T9993] loop1: detected capacity change from 0 to 512
[  935.604459][ T9993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  935.617281][ T9993] EXT4-fs (loop1): 1 truncate cleaned up
[  935.623007][ T9993] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  935.643585][  T445] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  935.654431][  T445] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  935.701448][ T8712] udevd[8712]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  935.737861][ T9999] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2603'.
[  936.231520][  T334] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  936.394235][  T445] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  936.405138][  T445] smsc95xx: probe of 3-1:0.67 failed with error -71
[  936.412992][  T445] usb 3-1: USB disconnect, device number 23
[  936.491514][  T334] usb 1-1: Using ep0 maxpacket: 32
[  936.621524][  T334] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  936.629754][  T334] usb 1-1: config 0 has no interface number 0
[  936.635906][  T334] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  936.645946][  T334] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  936.655914][  T334] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  936.679726][  T445] usb 6-1: USB disconnect, device number 16
[  936.682534][  T334] usb 1-1: config 0 interface 196 has no altsetting 0
[  936.725970][T10017] loop5: detected capacity change from 0 to 512
[  936.767324][T10017] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.2610: inode has both inline data and extents flags
[  936.780870][T10017] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2610: couldn't read orphan inode 15 (err -117)
[  936.793007][T10017] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  936.892296][  T334] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  936.901381][  T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.909589][  T334] usb 1-1: Product: syz
[  936.913776][  T334] usb 1-1: Manufacturer: syz
[  936.922640][  T334] usb 1-1: SerialNumber: syz
[  936.931481][  T334] usb 1-1: config 0 descriptor??
[  936.957300][T10007] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  936.981110][T10024] loop2: detected capacity change from 0 to 512
[  937.003001][T10024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  937.016295][T10024] EXT4-fs (loop2): 1 truncate cleaned up
[  937.022007][T10024] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  937.303880][  T334] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  937.311408][  T334] ipheth: probe of 1-1:0.196 failed with error -71
[  937.322111][  T334] usb 1-1: USB disconnect, device number 21
[  937.604747][   T30] audit: type=1400 audit(1783529519.147:291): avc:  denied  { execute_no_trans } for  pid=10028 comm="syz.1.2613" path="/16/file1" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  937.953958][  T334] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  938.083767][ T9951] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  938.096382][T10051] input: syz1 as /devices/virtual/input/input124
[  938.387770][  T334] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  938.396134][  T334] usb 2-1: config 220 has an invalid descriptor of length 179, skipping remainder of the config
[  938.406647][  T334] usb 2-1: config 220 has no interface number 2
[  938.412996][  T334] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  938.426194][  T334] usb 2-1: config 220 interface 0 has no altsetting 0
[  938.433003][  T334] usb 2-1: config 220 interface 76 has no altsetting 0
[  938.439892][  T334] usb 2-1: config 220 interface 1 has no altsetting 0
[  938.473767][ T9951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  938.484785][ T9951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  938.494553][ T9951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  938.507465][ T9951] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  938.516678][ T9951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.526113][ T9951] usb 1-1: config 0 descriptor??
[  938.572056][ T9951] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  938.580138][ T9951] usbhid 1-1:0.0: can't add hid device: -22
[  938.586175][ T9951] usbhid: probe of 1-1:0.0 failed with error -22
[  938.614582][  T334] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  938.623661][  T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.631893][  T334] usb 2-1: Product: syz
[  938.636080][  T334] usb 2-1: Manufacturer: syz
[  938.641021][  T334] usb 2-1: SerialNumber: syz
[  938.684957][T10060] binder: BINDER_SET_CONTEXT_MGR already set
[  938.691483][T10060] binder: 10057:10060 ioctl 4018620d 200000004a80 returned -16
[  938.790623][ T9951] usb 1-1: USB disconnect, device number 22
[  939.037284][  T334] usb 2-1: selecting invalid altsetting 0
[  939.044368][  T334] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  939.051054][  T334] usb 2-1: No valid video chain found.
[  939.101342][  T334] usb 2-1: USB disconnect, device number 16
[  939.107587][T10090] loop2: detected capacity change from 0 to 128
[  939.118805][ T8116] udevd[8116]: incorrect ext4 checksum on /dev/loop2
[  939.128036][T10090] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  939.145275][ T4896] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  939.256877][T10090] loop2: detected capacity change from 0 to 256
[  939.270219][T10090] FAT-fs (loop2): Directory bread(block 64) failed
[  939.277050][T10090] FAT-fs (loop2): Directory bread(block 65) failed
[  939.283620][T10090] FAT-fs (loop2): Directory bread(block 66) failed
[  939.290296][T10090] FAT-fs (loop2): Directory bread(block 67) failed
[  939.297081][T10090] FAT-fs (loop2): Directory bread(block 68) failed
[  939.303706][T10090] FAT-fs (loop2): Directory bread(block 69) failed
[  939.310391][T10090] FAT-fs (loop2): Directory bread(block 70) failed
[  939.317035][T10090] FAT-fs (loop2): Directory bread(block 71) failed
[  939.324265][T10090] FAT-fs (loop2): Directory bread(block 72) failed
[  939.330942][T10090] FAT-fs (loop2): Directory bread(block 73) failed
[  939.459514][ T4896] usb 6-1: Using ep0 maxpacket: 32
[  939.540969][ T2682] attempt to access beyond end of device
[  939.540969][ T2682] loop2: rw=1, want=1832, limit=256
[  939.552052][ T2682] attempt to access beyond end of device
[  939.552052][ T2682] loop2: rw=1, want=1928, limit=256
[  939.564078][ T2682] attempt to access beyond end of device
[  939.564078][ T2682] loop2: rw=1, want=4008, limit=256
[  939.576823][ T2682] attempt to access beyond end of device
[  939.576823][ T2682] loop2: rw=1, want=6056, limit=256
[  939.611122][ T4896] usb 6-1: config 0 has no interfaces?
[  939.616651][ T4896] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  939.630104][ T4896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.664452][ T2682] attempt to access beyond end of device
[  939.664452][ T2682] loop2: rw=1, want=8104, limit=256
[  939.675518][ T4896] usb 6-1: config 0 descriptor??
[  939.682996][ T2682] attempt to access beyond end of device
[  939.682996][ T2682] loop2: rw=1, want=10152, limit=256
[  939.696530][ T2682] attempt to access beyond end of device
[  939.696530][ T2682] loop2: rw=1, want=12200, limit=256
[  939.696899][T10104] loop1: detected capacity change from 0 to 1024
[  939.714766][ T2682] attempt to access beyond end of device
[  939.714766][ T2682] loop2: rw=1, want=14248, limit=256
[  939.727778][ T2682] attempt to access beyond end of device
[  939.727778][ T2682] loop2: rw=1, want=17552, limit=256
[  939.741369][ T2682] attempt to access beyond end of device
[  939.741369][ T2682] loop2: rw=1, want=21648, limit=256
[  939.773580][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  939.783605][T10104] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  939.791014][T10104] EXT4-fs (loop1): Ignoring removed orlov option
[  939.832397][T10104] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  939.873798][T10112] loop0: detected capacity change from 0 to 16
[  939.960130][T10086] UDC core: couldn't find an available UDC or it's busy: -16
[  939.979414][T10086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  939.996006][  T444] usb 6-1: USB disconnect, device number 17
[  940.016794][T10112] erofs: (device loop0): mounted with root inode @ nid 36.
[  940.035239][T10112] xt_CT: You must specify a L4 protocol and not use inversions on it
[  940.045932][T10112] overlayfs: upper fs is r/o, try multi-lower layers mount
[  940.207004][ T1136] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  940.605378][   T30] audit: type=1400 audit(1783529521.917:292): avc:  denied  { create } for  pid=10127 comm="syz.5.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  940.759299][ T1136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0
[  940.769914][ T1136] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  940.815325][T10130] fuse: Bad value for 'fd'
[  940.833307][T10132] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2654'.
[  940.944266][T10139] loop0: detected capacity change from 0 to 512
[  940.965117][ T1136] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  940.974220][ T1136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.983961][ T1136] usb 2-1: Product: ᐊ
[  940.988533][ T1136] usb 2-1: Manufacturer: ࠞ́ⱎ䝂鐀阬뱃ڶ薒숒鉫雌ⶫ圄죵쉤痜Ἀڪᾥ荁츁셆㋬腳䦪姙쿄뮒슎凟춻㍙赛羚딸⚟䧗뵉Ꟑ螏ވᡐ춨庩椖焌
[  941.006405][ T1136] usb 2-1: SerialNumber: ᠁
[  941.009295][T10139] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.2657: inode has both inline data and extents flags
[  941.025397][T10139] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2657: couldn't read orphan inode 15 (err -117)
[  941.038039][T10139] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  941.387668][ T1136] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  941.396195][ T1136] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  941.436261][ T1136] usb 2-1: USB disconnect, device number 17
[  942.760805][T10165] fuse: Bad value for 'fd'
[  943.440548][T10184] binder: 10183:10184 ioctl c0306201 0 returned -14
[  943.895114][T10192] loop4: detected capacity change from 0 to 512
[  943.905426][T10192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  943.926238][T10192] EXT4-fs (loop4): 1 truncate cleaned up
[  943.938729][T10192] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback.
[  944.363402][T10215] loop5: detected capacity change from 0 to 512
[  944.491246][T10215] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.2680: inode has both inline data and extents flags
[  944.514006][T10215] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2680: couldn't read orphan inode 15 (err -117)
[  944.530741][T10215] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  947.515330][T10259] loop5: detected capacity change from 0 to 512
[  947.544721][T10259] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.2694: inode has both inline data and extents flags
[  947.578772][T10259] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2694: couldn't read orphan inode 15 (err -117)
[  947.603752][T10259] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  948.164843][T10272] loop4: detected capacity change from 0 to 256
[  948.187949][T10272] exfat: Deprecated parameter 'utf8'
[  948.195654][T10272] exfat: Deprecated parameter 'namecase'
[  948.707423][T10272] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  948.893900][T10277] loop0: detected capacity change from 0 to 1024
[  948.924691][T10286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2701'.
[  949.308519][T10277] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22
[  949.729990][T10295] loop5: detected capacity change from 0 to 16
[  949.828235][T10277] EXT4-fs (loop0): Unrecognized mount option "mask=^MAY_APPEND" or missing value
[  951.037183][T10295] erofs: (device loop5): mounted with root inode @ nid 36.
[  951.114993][T10294] xt_CT: You must specify a L4 protocol and not use inversions on it
[  951.744299][T10305] loop1: detected capacity change from 0 to 16
[  951.806751][T10277] loop0: detected capacity change from 0 to 512
[  951.814257][T10305] erofs: (device loop1): mounted with root inode @ nid 36.
[  951.828446][T10309] loop5: detected capacity change from 0 to 512
[  951.840046][T10305] xt_CT: You must specify a L4 protocol and not use inversions on it
[  951.850585][T10305] overlayfs: upper fs is r/o, try multi-lower layers mount
[  951.879510][T10309] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.2708: inode has both inline data and extents flags
[  951.905297][T10277] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  951.924674][T10309] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2708: couldn't read orphan inode 15 (err -117)
[  951.963681][T10277] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2699: bg 0: block 393: padding at end of block bitmap is not set
[  951.978468][T10309] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  952.002635][T10277] EXT4-fs (loop0): Remounting filesystem read-only
[  952.015688][T10277] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  952.057443][T10277] EXT4-fs (loop0): Remounting filesystem read-only
[  952.150684][T10277] EXT4-fs (loop0): 2 truncates cleaned up
[  952.161300][T10277] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback.
[  952.859696][T10323] loop1: detected capacity change from 0 to 256
[  952.898145][T10323] exfat: Deprecated parameter 'utf8'
[  952.920096][T10325] loop4: detected capacity change from 0 to 128
[  952.927989][T10323] exfat: Deprecated parameter 'namecase'
[  952.938738][T10323] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  954.073896][T10347] device gretap1 left promiscuous mode
[  955.395184][T10350] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  955.483492][T10329] loop5: detected capacity change from 0 to 40427
[  955.544781][T10329] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  955.599737][T10329] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  955.622785][T10329] F2FS-fs (loop5): invalid crc value
[  955.724920][T10367] input: syz0 as /devices/virtual/input/input127
[  955.994178][T10329] F2FS-fs (loop5): Found nat_bits in checkpoint
[  956.093305][T10375] loop2: detected capacity change from 0 to 256
[  956.110425][T10329] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  956.117904][T10329] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  956.170619][T10375] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  956.192230][T10375] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  956.222243][T10375] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d)
[  956.233829][T10377] handle_bad_sector: 3 callbacks suppressed
[  956.233872][T10377] attempt to access beyond end of device
[  956.233872][T10377] loop5: rw=2049, want=79776, limit=40427
[  956.266863][T10358] loop0: detected capacity change from 0 to 40427
[  956.286702][T10329] attempt to access beyond end of device
[  956.286702][T10329] loop5: rw=524288, want=78080, limit=40427
[  956.298499][T10329] attempt to access beyond end of device
[  956.298499][T10329] loop5: rw=0, want=77832, limit=40427
[  956.312434][T10358] F2FS-fs (loop0): invalid crc value
[  956.329133][T10329] attempt to access beyond end of device
[  956.329133][T10329] loop5: rw=0, want=77832, limit=40427
[  956.352227][T10358] F2FS-fs (loop0): Found nat_bits in checkpoint
[  956.367301][T10329] attempt to access beyond end of device
[  956.367301][T10329] loop5: rw=0, want=77832, limit=40427
[  956.379249][T10328] attempt to access beyond end of device
[  956.379249][T10328] loop5: rw=0, want=77832, limit=40427
[  956.391322][T10329] attempt to access beyond end of device
[  956.391322][T10329] loop5: rw=0, want=77832, limit=40427
[  956.402768][T10328] attempt to access beyond end of device
[  956.402768][T10328] loop5: rw=0, want=77832, limit=40427
[  956.450430][T10358] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  956.817472][T10328] attempt to access beyond end of device
[  956.817472][T10328] loop5: rw=0, want=77832, limit=40427
[  956.836825][T10329] attempt to access beyond end of device
[  956.836825][T10329] loop5: rw=0, want=77832, limit=40427
[  956.862218][T10358] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  957.451221][T10401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10401 comm=syz.0.2732
[  957.494397][T10403] loop2: detected capacity change from 0 to 128
[  957.587925][T10403] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  957.602224][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop2
[  957.727303][T10403] loop2: detected capacity change from 0 to 4096
[  958.075547][T10403] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  958.109070][T10403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c118, mo2=0002]
[  958.130138][T10403] System zones: 0-5
[  958.162602][T10403] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,noload,grpjquota=,errors=continue,nodiscard,mblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  958.835632][T10439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10439 comm=syz.1.2748
[  958.959954][T10443] loop0: detected capacity change from 0 to 16
[  959.057278][T10443] erofs: (device loop0): mounted with root inode @ nid 36.
[  959.102524][T10443] xt_CT: You must specify a L4 protocol and not use inversions on it
[  960.209313][T10455] loop1: detected capacity change from 0 to 512
[  960.338172][T10457] loop5: detected capacity change from 0 to 256
[  960.389098][T10457] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  960.968832][T10455] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.2752: inode has both inline data and extents flags
[  961.460311][T10455] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2752: couldn't read orphan inode 15 (err -117)
[  961.480493][T10455] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  961.864569][T10476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10476 comm=syz.5.2759
[  962.576167][T10495] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.583445][T10495] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.692185][T10498] loop2: detected capacity change from 0 to 16
[  962.739184][T10498] erofs: (device loop2): mounted with root inode @ nid 36.
[  962.766251][T10498] xt_CT: You must specify a L4 protocol and not use inversions on it
[  962.952518][  T527] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  963.753710][  T527] usb 2-1: unable to get BOS descriptor or descriptor too short
[  963.840252][  T527] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  963.945733][  T527] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  964.338783][  T527] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  964.360001][  T527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.368119][  T527] usb 2-1: Product: syz
[  964.375530][  T527] usb 2-1: Manufacturer: syz
[  964.380432][  T527] usb 2-1: SerialNumber: syz
[  964.389802][T10512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10512 comm=syz.0.2772
[  964.608012][T10523] loop0: detected capacity change from 0 to 16
[  964.648062][T10523] erofs: (device loop0): mounted with root inode @ nid 36.
[  964.727494][T10523] xt_CT: You must specify a L4 protocol and not use inversions on it
[  964.755873][T10526] loop4: detected capacity change from 0 to 512
[  964.804028][  T527] usb 2-1: unit 4: unexpected type 0x03
[  964.826156][T10526] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.2776: inode has both inline data and extents flags
[  964.839850][T10526] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.2776: couldn't read orphan inode 15 (err -117)
[  964.852747][T10526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  964.898814][  T527] usb 2-1: USB disconnect, device number 18
[  965.859110][T10550] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2783'.
[  966.481642][T10562] overlayfs: missing 'workdir'
[  966.835376][T10568] loop5: detected capacity change from 0 to 512
[  966.846267][T10570] loop2: detected capacity change from 0 to 16
[  966.905344][T10568] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  966.916650][T10570] erofs: (device loop2): mounted with root inode @ nid 36.
[  966.943774][T10568] EXT4-fs (loop5): 1 truncate cleaned up
[  966.950130][T10568] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  966.979665][T10570] xt_CT: You must specify a L4 protocol and not use inversions on it
[  966.991404][    T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  967.948168][T10587] loop4: detected capacity change from 0 to 512
[  968.024297][    T6] usb 2-1: unable to get BOS descriptor or descriptor too short
[  968.069200][T10587] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.2795: inode has both inline data and extents flags
[  968.107668][T10587] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.2795: couldn't read orphan inode 15 (err -117)
[  968.118892][    T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  968.139425][    T6] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  968.175882][T10587] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  968.323571][    T6] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  968.343575][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.351713][    T6] usb 2-1: Product: syz
[  968.365367][    T6] usb 2-1: Manufacturer: syz
[  968.370059][    T6] usb 2-1: SerialNumber: syz
[  968.622661][T10602] loop2: detected capacity change from 0 to 1024
[  968.683186][T10602] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  968.690563][T10602] EXT4-fs (loop2): Ignoring removed orlov option
[  968.730476][T10602] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  968.767677][    T6] usb 2-1: unit 4: unexpected type 0x03
[  968.857649][    T6] usb 2-1: USB disconnect, device number 19
[  968.962058][T10607] loop4: detected capacity change from 0 to 512
[  968.985387][T10607] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.2799: inode has both inline data and extents flags
[  968.999438][T10607] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.2799: couldn't read orphan inode 15 (err -117)
[  969.011574][T10607] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  969.070838][ T9951] usb 3-1: new low-speed USB device number 24 using dummy_hcd
[  969.093381][ T8712] udevd[8712]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  969.133350][T10610] overlayfs: missing 'workdir'
[  969.431320][T10617] input: syz0 as /devices/virtual/input/input128
[  969.753315][ T9951] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0
[  969.766393][T10619] loop5: detected capacity change from 0 to 512
[  969.772722][ T9951] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  969.791479][T10619] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  969.806073][T10619] EXT4-fs (loop5): 1 truncate cleaned up
[  969.812002][T10619] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  969.853981][T10622] loop0: detected capacity change from 0 to 512
[  969.873500][T10622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  969.886486][T10622] EXT4-fs (loop0): 1 truncate cleaned up
[  969.892170][T10622] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  969.980740][ T9951] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  970.002312][ T9951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.012135][ T9951] usb 3-1: Product: ᐊ
[  970.016834][ T9951] usb 3-1: Manufacturer: ࠞ́ⱎ䝂鐀阬뱃ڶ薒숒鉫雌ⶫ圄죵쉤痜Ἀڪᾥ荁츁셆㋬腳䦪姙쿄뮒슎凟춻㍙赛羚딸⚟䧗뵉Ꟑ螏ވᡐ춨庩椖焌
[  970.034512][ T9951] usb 3-1: SerialNumber: ᠁
[  970.150976][T10634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  970.159133][T10633] tipc: Disabling bearer <eth:syzkaller0>
[  970.305299][T10636] loop1: detected capacity change from 0 to 40427
[  970.433911][T10640] input: syz0 as /devices/virtual/input/input129
[  970.650910][T10636] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  970.662818][T10636] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  970.685154][T10636] F2FS-fs (loop1): invalid crc value
[  970.692500][T10636] F2FS-fs (loop1): Found nat_bits in checkpoint
[  970.717281][ T9951] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  970.725622][ T9951] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  970.742367][ T9951] usb 3-1: USB disconnect, device number 24
[  970.744300][T10636] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  970.759846][T10636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  970.871072][T10636] handle_bad_sector: 973 callbacks suppressed
[  970.871095][T10636] attempt to access beyond end of device
[  970.871095][T10636] loop1: rw=2049, want=79872, limit=40427
[  970.894422][T10636] attempt to access beyond end of device
[  970.894422][T10636] loop1: rw=2049, want=81920, limit=40427
[  970.915177][T10636] attempt to access beyond end of device
[  970.915177][T10636] loop1: rw=2049, want=52568, limit=40427
[  970.930837][T10636] attempt to access beyond end of device
[  970.930837][T10636] loop1: rw=2049, want=53248, limit=40427
[  970.968141][T10636] attempt to access beyond end of device
[  970.968141][T10636] loop1: rw=2049, want=61272, limit=40427
[  970.980813][T10654] attempt to access beyond end of device
[  970.980813][T10654] loop1: rw=524288, want=78080, limit=40427
[  970.992496][T10654] attempt to access beyond end of device
[  970.992496][T10654] loop1: rw=0, want=77832, limit=40427
[  971.003767][T10654] attempt to access beyond end of device
[  971.003767][T10654] loop1: rw=0, want=77832, limit=40427
[  971.004922][T10636] attempt to access beyond end of device
[  971.004922][T10636] loop1: rw=2049, want=63024, limit=40427
[  971.022445][T10654] attempt to access beyond end of device
[  971.022445][T10654] loop1: rw=0, want=77832, limit=40427
[  971.290241][T10659] loop4: detected capacity change from 0 to 512
[  971.301500][T10661] loop5: detected capacity change from 0 to 512
[  971.344245][T10663] loop2: detected capacity change from 0 to 512
[  971.361153][T10661] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.2815: inode has both inline data and extents flags
[  971.374537][T10661] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2815: couldn't read orphan inode 15 (err -117)
[  971.388311][T10661] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  971.399738][T10659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  971.421060][T10663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  971.425422][T10659] EXT4-fs (loop4): 1 truncate cleaned up
[  971.440325][T10659] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  971.466121][T10663] EXT4-fs (loop2): 1 truncate cleaned up
[  971.472153][T10663] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  971.777454][T10688] loop1: detected capacity change from 0 to 512
[  971.838248][T10688] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  971.853037][T10690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  971.880716][T10689] tipc: Disabling bearer <eth:syzkaller0>
[  971.887840][T10688] EXT4-fs (loop1): 1 truncate cleaned up
[  971.896620][T10688] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  972.594509][T10705] loop5: detected capacity change from 0 to 1024
[  972.624045][T10705] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  972.631637][T10705] EXT4-fs (loop5): Ignoring removed orlov option
[  972.646334][T10705] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  972.879727][T10712] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  972.912288][T10712] EXT4-fs (loop1): 1 truncate cleaned up
[  972.918574][T10712] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  972.954900][T10714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  972.999260][  T334] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  973.034184][T10714] EXT4-fs (loop0): 1 truncate cleaned up
[  973.040298][T10714] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  973.331709][T10727] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2830'.
[  973.447440][T10731] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.2835: inode has both inline data and extents flags
[  973.468839][T10731] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2835: couldn't read orphan inode 15 (err -117)
[  973.489128][T10731] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  973.500419][  T334] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0
[  973.514821][  T334] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  973.836674][  T334] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  973.855650][  T334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.863732][  T334] usb 6-1: Product: ᐊ
[  973.863749][  T334] usb 6-1: Manufacturer: ࠞ́ⱎ䝂鐀阬뱃ڶ薒숒鉫雌ⶫ圄죵쉤痜Ἀڪᾥ荁츁셆㋬腳䦪姙쿄뮒슎凟춻㍙赛羚딸⚟䧗뵉Ꟑ螏ވᡐ춨庩椖焌
[  973.863772][  T334] usb 6-1: SerialNumber: ᠁
[  974.099670][T10744] set_capacity_and_notify: 3 callbacks suppressed
[  974.099683][T10744] loop2: detected capacity change from 0 to 512
[  974.197110][T10744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  974.209013][T10744] EXT4-fs (loop2): 1 truncate cleaned up
[  974.214684][T10744] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  974.428561][  T334] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  974.443279][  T334] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  974.465185][  T334] usb 6-1: USB disconnect, device number 18
[  974.630071][T10753] loop1: detected capacity change from 0 to 512
[  974.664750][T10753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  974.908439][T10753] EXT4-fs (loop1): 1 truncate cleaned up
[  974.914496][T10753] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  974.990519][T10758] loop5: detected capacity change from 0 to 256
[  975.039434][T10758] exfat: Deprecated parameter 'utf8'
[  975.051222][T10758] exfat: Deprecated parameter 'namecase'
[  975.063286][T10760] loop1: detected capacity change from 0 to 512
[  975.074802][T10758] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  975.103113][T10760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  975.156794][T10760] EXT4-fs (loop1): 1 truncate cleaned up
[  975.162589][T10760] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  975.296220][T10768] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2844'.
[  975.415438][T10772] loop1: detected capacity change from 0 to 512
[  975.541423][T10772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  975.606589][T10778] loop0: detected capacity change from 0 to 512
[  975.615020][T10772] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  975.685835][T10778] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  975.701063][T10781] loop2: detected capacity change from 0 to 512
[  975.708821][T10778] EXT4-fs (loop0): 1 truncate cleaned up
[  975.715333][T10778] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  975.829681][T10781] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.2849: inode has both inline data and extents flags
[  975.907194][T10781] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.2849: couldn't read orphan inode 15 (err -117)
[  975.928930][T10781] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  975.970652][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  976.185816][T10798] loop0: detected capacity change from 0 to 512
[  976.205062][T10796] loop5: detected capacity change from 0 to 1024
[  976.213877][T10800] loop1: detected capacity change from 0 to 512
[  976.243142][T10798] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  976.253816][T10800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  976.264434][T10796] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  976.280654][T10796] EXT4-fs (loop5): Ignoring removed orlov option
[  976.289265][T10798] EXT4-fs (loop0): 1 truncate cleaned up
[  976.299412][T10798] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  976.342193][T10801] erofs: (device loop4): mounted with root inode @ nid 36.
[  976.373324][T10796] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  976.378554][T10800] EXT4-fs (loop1): 1 truncate cleaned up
[  976.426269][T10800] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  976.624887][T10810] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2855'.
[  976.656355][T10808] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  976.667661][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop0
[  976.687584][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop0
[  976.707265][  T527] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  976.737193][T10808] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  976.762004][T10808] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c118, mo2=0002]
[  976.781168][T10808] System zones: 0-5
[  976.786133][T10808] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,noload,grpjquota=,errors=continue,nodiscard,mblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  977.119033][  T527] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0
[  977.169136][  T527] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  977.455020][  T527] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  977.488675][  T527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.559824][  T527] usb 6-1: Product: ᐊ
[  977.598295][  T527] usb 6-1: Manufacturer: ࠞ́ⱎ䝂鐀阬뱃ڶ薒숒鉫雌ⶫ圄죵쉤痜Ἀڪᾥ荁츁셆㋬腳䦪姙쿄뮒슎凟춻㍙赛羚딸⚟䧗뵉Ꟑ螏ވᡐ춨庩椖焌
[  977.923367][  T527] usb 6-1: SerialNumber: ᠁
[  978.375486][  T527] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  978.402834][  T527] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  978.537426][  T527] usb 6-1: USB disconnect, device number 19
[  978.627440][T10829] overlayfs: missing 'workdir'
[  978.831963][T10833] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  978.846035][T10833] EXT4-fs (loop5): 1 truncate cleaned up
[  978.851812][T10833] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  978.867896][T10835] exfat: Deprecated parameter 'utf8'
[  978.890441][T10835] exfat: Deprecated parameter 'namecase'
[  978.933083][T10835] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  980.495404][T10852] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2867'.
[  980.514192][T10853] set_capacity_and_notify: 5 callbacks suppressed
[  980.514212][T10853] loop0: detected capacity change from 0 to 512
[  980.606195][T10853] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.2868: inode has both inline data and extents flags
[  980.643845][T10853] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2868: couldn't read orphan inode 15 (err -117)
[  980.751679][T10853] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  981.886560][T10871] loop4: detected capacity change from 0 to 1024
[  982.193785][T10871] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  982.231592][T10871] EXT4-fs (loop4): Ignoring removed orlov option
[  982.279761][T10859] loop2: detected capacity change from 0 to 40427
[  982.327931][T10871] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  982.368356][T10859] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  982.398067][T10859] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  982.441945][T10859] F2FS-fs (loop2): invalid crc value
[  982.475254][T10859] F2FS-fs (loop2): Found nat_bits in checkpoint
[  982.596903][T10859] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  982.614048][T10859] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  982.741718][T10891] loop1: detected capacity change from 0 to 512
[  982.751656][T10859] handle_bad_sector: 3388 callbacks suppressed
[  982.751676][T10859] attempt to access beyond end of device
[  982.751676][T10859] loop2: rw=2049, want=79872, limit=40427
[  982.775760][T10859] attempt to access beyond end of device
[  982.775760][T10859] loop2: rw=2049, want=81920, limit=40427
[  982.788581][T10859] attempt to access beyond end of device
[  982.788581][T10859] loop2: rw=2049, want=49424, limit=40427
[  982.812346][T10889] attempt to access beyond end of device
[  982.812346][T10889] loop2: rw=524288, want=78080, limit=40427
[  982.823979][T10889] attempt to access beyond end of device
[  982.823979][T10889] loop2: rw=0, want=77832, limit=40427
[  982.835528][T10891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  982.846726][T10889] attempt to access beyond end of device
[  982.846726][T10889] loop2: rw=0, want=77832, limit=40427
[  982.858162][T10889] attempt to access beyond end of device
[  982.858162][T10889] loop2: rw=0, want=77832, limit=40427
[  982.862689][T10891] EXT4-fs (loop1): 1 truncate cleaned up
[  982.875115][T10889] attempt to access beyond end of device
[  982.875115][T10889] loop2: rw=0, want=77832, limit=40427
[  982.887728][T10891] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  982.896693][T10889] attempt to access beyond end of device
[  982.896693][T10889] loop2: rw=0, want=77832, limit=40427
[  982.924177][T10858] attempt to access beyond end of device
[  982.924177][T10858] loop2: rw=0, want=77832, limit=40427
[  983.036523][T10895] loop0: detected capacity change from 0 to 256
[  983.087545][T10895] exfat: Deprecated parameter 'utf8'
[  983.093009][T10895] exfat: Deprecated parameter 'namecase'
[  983.167944][T10895] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  983.274450][T10900] loop5: detected capacity change from 0 to 512
[  983.310541][T10903] loop1: detected capacity change from 0 to 16
[  983.320025][T10900] EXT4-fs (loop5): Test dummy encryption mode enabled
[  983.380502][T10903] erofs: (device loop1): mounted with root inode @ nid 36.
[  983.427130][T10900] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,stripe=0x0000000000000007,barrier=0x0000000000000006,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  984.227482][T10918] overlayfs: missing 'workdir'
[  984.272930][T10920] device syzkaller0 entered promiscuous mode
[  984.293075][T10920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  984.311620][T10919] tipc: Resetting bearer <eth:syzkaller0>
[  984.319011][T10919] tipc: Disabling bearer <eth:syzkaller0>
[  984.607745][T10931] input: syz0 as /devices/virtual/input/input130
[  984.991418][T10933] loop0: detected capacity change from 0 to 512
[  985.080262][T10933] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.2889: inode has both inline data and extents flags
[  985.104777][T10933] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2889: couldn't read orphan inode 15 (err -117)
[  985.123797][T10933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  985.234035][T10936] loop4: detected capacity change from 0 to 512
[  985.362519][T10936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  985.418140][T10936] EXT4-fs (loop4): 1 truncate cleaned up
[  985.423842][T10936] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  986.479044][T10949] binder: 10948:10949 ioctl 4018620d 0 returned -22
[  986.566105][T10957] loop4: detected capacity change from 0 to 256
[  986.587345][T10957] exfat: Deprecated parameter 'utf8'
[  986.592726][T10957] exfat: Deprecated parameter 'namecase'
[  986.630705][T10957] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  988.002427][T10969] loop4: detected capacity change from 0 to 1024
[  988.027468][T10969] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  990.861583][T10973] loop5: detected capacity change from 0 to 256
[  990.870833][T10977] loop2: detected capacity change from 0 to 16
[  994.212692][T10969] EXT4-fs (loop4): Ignoring removed orlov option
[  994.247079][T10969] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4.
[  994.509348][T10992] loop2: detected capacity change from 0 to 512
[  994.530187][T10994] loop1: detected capacity change from 0 to 16
[  995.780378][T10992] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  996.068537][T11001] loop0: detected capacity change from 0 to 256
[  996.089747][T10992] EXT4-fs (loop2): 1 truncate cleaned up
[  996.095585][T10992] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  996.133105][T10994] erofs: (device loop1): mounted with root inode @ nid 36.
[  996.422108][T11010] binder: 11009:11010 ioctl 4018620d 0 returned -22
[  996.612366][T11014] loop2: detected capacity change from 0 to 256
[  996.716612][T11014] exfat: Deprecated parameter 'utf8'
[  996.802899][T11014] exfat: Deprecated parameter 'namecase'
[  996.916262][T11014] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  997.647095][T11031] loop4: detected capacity change from 0 to 128
[  999.332288][T11042] loop2: detected capacity change from 0 to 16
[  999.433581][T11042] erofs: (device loop2): mounted with root inode @ nid 36.
[  999.448072][T11042] xt_CT: You must specify a L4 protocol and not use inversions on it
[  999.460233][T11042] overlayfs: upper fs is r/o, try multi-lower layers mount
[  999.796813][T11048] loop1: detected capacity change from 0 to 512
[ 1000.149948][T11050] binder: 11049:11050 ioctl c0306201 0 returned -14
[ 1000.199069][T11053] loop2: detected capacity change from 0 to 512
[ 1000.354410][T11053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1000.383991][T11053] EXT4-fs (loop2): 1 truncate cleaned up
[ 1000.390121][T11053] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[ 1000.603796][T11048] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1000.644561][T11061] device syzkaller0 entered promiscuous mode
[ 1000.655319][T11048] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,stripe=0x0000000000000007,barrier=0x0000000000000006,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[ 1000.753931][T11071] binder: 11069:11071 ioctl 4018620d 0 returned -22
[ 1000.995528][T11078] loop2: detected capacity change from 0 to 16
[ 1001.056674][T11078] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1001.066249][T11078] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1002.157502][T11080] overlayfs: missing 'workdir'
[ 1002.494926][T11091] input: syz0 as /devices/virtual/input/input131
[ 1003.282297][T11090] loop5: detected capacity change from 0 to 512
[ 1003.293366][T11089] loop0: detected capacity change from 0 to 128
[ 1003.309081][T11093] loop2: detected capacity change from 0 to 512
[ 1003.358268][T11093] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1003.391222][T11090] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1003.419571][T11096] loop1: detected capacity change from 0 to 16
[ 1003.426013][T11090] ext4 filesystem being mounted at /485/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1003.482664][T11093] EXT4-fs (loop2): 1 truncate cleaned up
[ 1003.507649][T11093] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[ 1003.577130][T11096] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1003.599695][T11109] device syzkaller0 entered promiscuous mode
[ 1004.192680][T11128] loop5: detected capacity change from 0 to 16
[ 1005.476750][T11128] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1005.583136][T11127] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1005.592341][T11127] overlayfs: missing 'lowerdir'
[ 1005.638210][T11137] device syzkaller0 entered promiscuous mode
[ 1005.841033][T11141] loop0: detected capacity change from 0 to 512
[ 1005.933722][T11141] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1005.998620][T11141] EXT4-fs (loop0): 1 truncate cleaned up
[ 1006.004610][T11141] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[ 1006.110133][T11154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.117408][T11154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.209030][T11161] device syzkaller0 entered promiscuous mode
[ 1006.281851][T11167] loop5: detected capacity change from 0 to 256
[ 1006.402459][T11169] loop1: detected capacity change from 0 to 16
[ 1009.690857][T11169] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1009.705174][T11163] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1009.714005][T11163] overlayfs: upper fs is r/o, try multi-lower layers mount
[ 1009.744290][ T4896] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1010.826528][T11186] binder: BINDER_SET_CONTEXT_MGR already set
[ 1010.871864][T11186] binder: 11185:11186 ioctl 4018620d 200000004a80 returned -16
[ 1011.185089][T11198] loop4: detected capacity change from 0 to 512
[ 1011.201741][T11201] device syzkaller0 entered promiscuous mode
[ 1011.571981][T11204] loop1: detected capacity change from 0 to 256
[ 1011.631566][T11204] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1011.649268][T11198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1011.974401][T11198] EXT4-fs (loop4): 1 truncate cleaned up
[ 1012.451409][T11198] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[ 1012.831285][ T4896] usb 3-1: device descriptor read/64, error -71
[ 1012.866922][T11217] loop1: detected capacity change from 0 to 1024
[ 1012.929047][T11217] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22
[ 1012.996478][T11217] EXT4-fs (loop1): Unrecognized mount option "mask=^MAY_APPEND" or missing value
[ 1013.133136][T11217] loop1: detected capacity change from 0 to 512
[ 1013.331233][T11217] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[ 1013.432883][ T4374] tipc: Left network mode
[ 1013.471334][T11217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2970: bg 0: block 393: padding at end of block bitmap is not set
[ 1013.634949][T11233] binder: BINDER_SET_CONTEXT_MGR already set
[ 1013.640998][T11233] binder: 11228:11233 ioctl 4018620d 200000004a80 returned -16
[ 1013.665536][T11217] EXT4-fs (loop1): Remounting filesystem read-only
[ 1013.860426][T11236] loop4: detected capacity change from 0 to 16
[ 1013.875983][T11217] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[ 1013.917430][T11236] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1013.934618][T11236] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1013.946457][T11236] overlayfs: upper fs is r/o, try multi-lower layers mount
[ 1014.041471][T11217] EXT4-fs (loop1): Remounting filesystem read-only
[ 1014.121156][T11217] EXT4-fs (loop1): 2 truncates cleaned up
[ 1014.168098][T11217] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback.
[ 1014.232828][ T4374] device gretap1 left promiscuous mode
[ 1014.249928][ T4374] bridge1: port 1(gretap1) entered disabled state
[ 1015.482004][ T4374] device bridge_slave_1 left promiscuous mode
[ 1015.505420][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.556336][ T4374] device bridge_slave_0 left promiscuous mode
[ 1015.562688][ T4896] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1015.585122][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.697580][T11248] loop4: detected capacity change from 0 to 256
[ 1016.708392][T11253] loop1: detected capacity change from 0 to 256
[ 1016.818650][T11248] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1016.834309][T11253] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1016.914949][ T4896] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1016.924729][ T4896] usb 3-1: can't read configurations, error -71
[ 1019.335164][T11261] loop2: detected capacity change from 0 to 256
[ 1020.200596][ T4374] device veth1_macvtap left promiscuous mode
[ 1020.215676][ T4374] device veth0_vlan left promiscuous mode
[ 1020.557340][T11261] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1020.631347][T11263] loop1: detected capacity change from 0 to 512
[ 1020.662921][T11263] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1020.692917][T11263] EXT4-fs (loop1): 1 truncate cleaned up
[ 1020.698793][T11263] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[ 1021.090808][T11255] device syzkaller0 entered promiscuous mode
[ 1021.419161][T11287] loop0: detected capacity change from 0 to 16
[ 1022.941333][T11287] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1022.985290][T11286] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1022.994741][T11286] overlayfs: missing 'lowerdir'
[ 1023.302499][T11296] loop2: detected capacity change from 0 to 256
[ 1023.334363][T11296] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1024.776183][T11303] input: syz0 as /devices/virtual/input/input132
[ 1025.214986][T11305] loop5: detected capacity change from 0 to 256
[ 1026.227987][T11325] loop2: detected capacity change from 0 to 512
[ 1026.263693][T11325] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1026.297088][T11325] EXT4-fs (loop2): 1 truncate cleaned up
[ 1026.305076][T11325] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[ 1026.681121][T11333] device syzkaller0 entered promiscuous mode
[ 1029.095482][T11362] loop0: detected capacity change from 0 to 512
[ 1029.269321][T11362] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.3011: inode has both inline data and extents flags
[ 1029.287246][T11362] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.3011: couldn't read orphan inode 15 (err -117)
[ 1029.448308][T11362] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1030.290321][T11382] loop1: detected capacity change from 0 to 40427
[ 1030.307078][T11382] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1030.318947][T11382] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1030.328240][T11382] F2FS-fs (loop1): invalid crc value
[ 1030.335112][T11382] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1030.379064][T11382] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1030.386298][T11382] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1030.533268][T11382] handle_bad_sector: 2166 callbacks suppressed
[ 1030.533293][T11382] attempt to access beyond end of device
[ 1030.533293][T11382] loop1: rw=2049, want=80632, limit=40427
[ 1030.563604][T11382] attempt to access beyond end of device
[ 1030.563604][T11382] loop1: rw=2049, want=81920, limit=40427
[ 1030.587090][T11382] attempt to access beyond end of device
[ 1030.587090][T11382] loop1: rw=2049, want=53248, limit=40427
[ 1030.622631][T11398] attempt to access beyond end of device
[ 1030.622631][T11398] loop1: rw=524288, want=78080, limit=40427
[ 1030.634149][T11398] attempt to access beyond end of device
[ 1030.634149][T11398] loop1: rw=0, want=77832, limit=40427
[ 1030.648469][T11382] attempt to access beyond end of device
[ 1030.648469][T11382] loop1: rw=2049, want=63640, limit=40427
[ 1030.658033][T11398] attempt to access beyond end of device
[ 1030.658033][T11398] loop1: rw=0, want=77832, limit=40427
[ 1030.696250][T11398] attempt to access beyond end of device
[ 1030.696250][T11398] loop1: rw=0, want=77832, limit=40427
[ 1030.707517][T11398] attempt to access beyond end of device
[ 1030.707517][T11398] loop1: rw=0, want=77832, limit=40427
[ 1030.745691][T11398] attempt to access beyond end of device
[ 1030.745691][T11398] loop1: rw=0, want=77832, limit=40427
[ 1030.837962][T11406] loop5: detected capacity change from 0 to 128
[ 1030.847866][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop5
[ 1030.855307][T11406] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 1031.002215][T11406] loop5: detected capacity change from 0 to 4096
[ 1031.032536][T11406] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[ 1031.063836][T11406] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c118, mo2=0002]
[ 1031.072020][T11406] System zones: 0-5
[ 1031.084212][T11406] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,noload,grpjquota=,errors=continue,nodiscard,mblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: writeback.
[ 1031.182109][T11413] loop2: detected capacity change from 0 to 512
[ 1031.286871][T11413] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.3025: inode has both inline data and extents flags
[ 1031.561651][T11413] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.3025: couldn't read orphan inode 15 (err -117)
[ 1031.676627][T11413] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1032.586568][T11429] loop2: detected capacity change from 0 to 512
[ 1032.749308][T11429] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1032.768801][T11429] ext4 filesystem being mounted at /590/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1033.270201][T11454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1033.277468][T11454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.449449][T11457] input: syz0 as /devices/virtual/input/input133
[ 1033.704382][  T334] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1033.879029][T11462] loop5: detected capacity change from 0 to 40427
[ 1033.889941][T11462] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1033.897846][T11462] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1033.910357][T11462] F2FS-fs (loop5): invalid crc value
[ 1033.923567][T11462] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1033.969081][T11462] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1033.976264][T11462] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1034.159694][  T334] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1034.269960][T11477] loop4: detected capacity change from 0 to 512
[ 1034.278618][  T334] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 1034.289932][  T334] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[ 1034.320687][T11477] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.3037: inode has both inline data and extents flags
[ 1034.337754][T11477] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.3037: couldn't read orphan inode 15 (err -117)
[ 1034.349963][T11477] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1034.700696][  T334] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[ 1034.723562][  T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.734711][  T334] usb 1-1: Product: syz
[ 1034.739188][  T334] usb 1-1: Manufacturer: syz
[ 1034.746599][  T334] usb 1-1: SerialNumber: syz
[ 1034.954143][T11484] loop5: detected capacity change from 0 to 16
[ 1036.744444][T11484] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1036.792253][T11484] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1036.804072][T11484] overlayfs: upper fs is r/o, try multi-lower layers mount
[ 1037.039111][  T334] usb 1-1: can't set config #1, error -71
[ 1037.053029][  T334] usb 1-1: USB disconnect, device number 23
[ 1038.439694][T11512] device syzkaller0 entered promiscuous mode
[ 1038.482700][T11514] loop5: detected capacity change from 0 to 512
[ 1038.576029][T11514] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.3049: inode has both inline data and extents flags
[ 1038.605189][T11514] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.3049: couldn't read orphan inode 15 (err -117)
[ 1038.636386][T11514] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1039.941465][ T2093] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1040.081637][T11541] loop5: detected capacity change from 0 to 512
[ 1040.125135][T11541] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.3058: inode has both inline data and extents flags
[ 1040.139211][T11541] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.3058: couldn't read orphan inode 15 (err -117)
[ 1040.151381][T11541] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1040.223840][T11548] loop2: detected capacity change from 0 to 16
[ 1040.405264][T11548] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1040.421361][T11548] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1040.434224][T11548] overlayfs: upper fs is r/o, try multi-lower layers mount
[ 1041.377208][T11558] device syzkaller0 entered promiscuous mode
[ 1041.533600][ T2093] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1044.106212][ T2093] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 1044.129150][ T2093] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[ 1044.132806][T11573] loop4: detected capacity change from 0 to 512
[ 1044.192062][ T2093] usb 1-1: string descriptor 0 read error: -71
[ 1044.204909][ T2093] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[ 1044.232257][ T2093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.256321][ T2093] usb 1-1: can't set config #1, error -71
[ 1044.288245][ T2093] usb 1-1: USB disconnect, device number 24
[ 1044.335313][T11584] loop1: detected capacity change from 0 to 1024
[ 1044.344166][T11573] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.3067: inode has both inline data and extents flags
[ 1044.363120][T11584] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[ 1044.370918][T11573] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.3067: couldn't read orphan inode 15 (err -117)
[ 1044.383170][T11584] EXT4-fs (loop1): Ignoring removed orlov option
[ 1044.391251][T11573] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1044.418015][T11584] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[ 1044.683489][T11590] loop5: detected capacity change from 0 to 16
[ 1045.715841][T11590] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1045.740119][T11585] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1045.749210][T11585] overlayfs: upper fs is r/o, try multi-lower layers mount
[ 1046.142026][T11595] loop2: detected capacity change from 0 to 256
[ 1046.198354][T11602] device syzkaller0 entered promiscuous mode
[ 1046.325347][T11595] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1047.732714][ T1136] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[ 1047.809701][T11613] loop1: detected capacity change from 0 to 128
[ 1047.915278][T11613] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 1047.927109][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop1
[ 1048.175320][T11615] loop4: detected capacity change from 0 to 40427
[ 1048.220147][   T10] tipc: Left network mode
[ 1048.279342][T11613] loop1: detected capacity change from 0 to 256
[ 1048.392583][T11615] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1048.422069][T11613] FAT-fs (loop1): Directory bread(block 64) failed
[ 1048.443870][T11615] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1048.456057][T11613] FAT-fs (loop1): Directory bread(block 65) failed
[ 1048.462651][T11613] FAT-fs (loop1): Directory bread(block 66) failed
[ 1048.478373][T11613] FAT-fs (loop1): Directory bread(block 67) failed
[ 1048.492901][T11615] F2FS-fs (loop4): invalid crc value
[ 1048.498369][T11613] FAT-fs (loop1): Directory bread(block 68) failed
[ 1048.505230][T11613] FAT-fs (loop1): Directory bread(block 69) failed
[ 1048.512490][T11613] FAT-fs (loop1): Directory bread(block 70) failed
[ 1048.519038][T11613] FAT-fs (loop1): Directory bread(block 71) failed
[ 1048.526064][T11613] FAT-fs (loop1): Directory bread(block 72) failed
[ 1048.533282][T11613] FAT-fs (loop1): Directory bread(block 73) failed
[ 1048.540136][T11615] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1048.608522][T11615] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1048.615659][T11615] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1048.725037][T11626] handle_bad_sector: 5573 callbacks suppressed
[ 1048.725059][T11626] attempt to access beyond end of device
[ 1048.725059][T11626] loop4: rw=2049, want=79872, limit=40427
[ 1048.754085][T11626] attempt to access beyond end of device
[ 1048.754085][T11626] loop4: rw=2049, want=81920, limit=40427
[ 1048.786489][T11625] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.805992][T11626] attempt to access beyond end of device
[ 1048.805992][T11626] loop4: rw=2049, want=51208, limit=40427
[ 1048.815107][T11625] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.829222][T11626] attempt to access beyond end of device
[ 1048.829222][T11626] loop4: rw=2049, want=53248, limit=40427
[ 1048.841176][T11625] device bridge_slave_0 entered promiscuous mode
[ 1048.849552][T11626] attempt to access beyond end of device
[ 1048.849552][T11626] loop4: rw=2049, want=58576, limit=40427
[ 1048.863091][T11625] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.891038][T11625] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.900356][T11632] loop0: detected capacity change from 0 to 512
[ 1048.908590][T11625] device bridge_slave_1 entered promiscuous mode
[ 1048.932035][T11632] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.3085: inode has both inline data and extents flags
[ 1048.958965][T11634] attempt to access beyond end of device
[ 1048.958965][T11634] loop4: rw=524288, want=78080, limit=40427
[ 1048.963705][T11632] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.3085: couldn't read orphan inode 15 (err -117)
[ 1048.995544][T11632] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1049.101706][T11634] attempt to access beyond end of device
[ 1049.101706][T11634] loop4: rw=0, want=77832, limit=40427
[ 1049.113117][T11634] attempt to access beyond end of device
[ 1049.113117][T11634] loop4: rw=0, want=77832, limit=40427
[ 1049.147064][   T10] device veth1_macvtap left promiscuous mode
[ 1049.179269][T11634] attempt to access beyond end of device
[ 1049.179269][T11634] loop4: rw=0, want=77832, limit=40427
[ 1049.203135][T11614] attempt to access beyond end of device
[ 1049.203135][T11614] loop4: rw=0, want=77832, limit=40427
[ 1049.244754][   T10] device veth0_vlan left promiscuous mode
[ 1049.518607][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1049.533307][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1049.547787][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1049.562242][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1049.587754][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1049.594866][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1049.602648][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1049.611800][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1049.623911][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1049.631136][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1049.639480][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1049.665411][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1049.674062][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1049.683055][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1049.691407][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1049.714339][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1049.730369][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1049.739174][T11644] device syzkaller0 entered promiscuous mode
[ 1049.763566][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1049.774579][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1049.790608][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1049.809931][T11625] device veth0_vlan entered promiscuous mode
[ 1049.822411][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1049.835540][T11625] device veth1_macvtap entered promiscuous mode
[ 1049.858303][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1049.872968][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1049.898336][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1049.912231][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1049.922485][T11653] device syzkaller0 entered promiscuous mode
[ 1049.935055][T11653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1049.942463][T11652] tipc: Resetting bearer <eth:syzkaller0>
[ 1049.950264][T11652] tipc: Disabling bearer <eth:syzkaller0>
[ 1050.078033][T11659] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.085327][T11659] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1050.093164][T11659] device bridge_slave_0 entered promiscuous mode
[ 1050.100513][T11659] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.107612][T11659] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1050.230878][T11664] loop4: detected capacity change from 0 to 16
[ 1050.247427][T11659] device bridge_slave_1 entered promiscuous mode
[ 1050.284650][T11664] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1050.310793][T11664] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1050.328193][T11664] overlayfs: missing 'workdir'
[ 1050.798001][T11666] loop2: detected capacity change from 0 to 128
[ 1051.194023][T11669] loop0: detected capacity change from 0 to 256
[ 1051.484580][T11674] loop2: detected capacity change from 0 to 128
[ 1051.575724][T11674] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 1051.583522][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop2
[ 1051.687869][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1051.698267][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1051.710539][T11674] loop2: detected capacity change from 0 to 4096
[ 1051.717239][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1051.732643][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1051.744134][T11674] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[ 1051.757660][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.764759][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1051.775887][T11674] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c118, mo2=0002]
[ 1051.784169][T11674] System zones: 0-5
[ 1051.803595][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1051.814173][T11674] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,noload,grpjquota=,errors=continue,nodiscard,mblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: writeback.
[ 1051.830739][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1051.857107][T11672] loop4: detected capacity change from 0 to 40427
[ 1051.874045][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1051.881121][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1051.889114][T11672] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1051.908038][T11672] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1051.958768][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1051.967024][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1051.975926][T11672] F2FS-fs (loop4): invalid crc value
[ 1051.982424][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1051.991282][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1052.000151][T11672] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1052.006622][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1052.033056][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1052.063391][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1052.084410][T11659] device veth0_vlan entered promiscuous mode
[ 1052.098602][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1052.117472][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1052.139079][T11659] device veth1_macvtap entered promiscuous mode
[ 1052.161210][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1052.170175][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1052.177819][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1052.244586][T11672] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1052.258826][T11690] device syzkaller0 entered promiscuous mode
[ 1052.265153][T11672] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1052.278986][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1052.295075][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1052.304345][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1052.313485][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1053.313739][   T10] device bridge_slave_1 left promiscuous mode
[ 1053.337295][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.355734][   T10] device bridge_slave_0 left promiscuous mode
[ 1053.375103][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.386144][   T10] device veth1_macvtap left promiscuous mode
[ 1053.404007][   T10] device veth0_vlan left promiscuous mode
[ 1055.407497][T11717] loop7: detected capacity change from 0 to 256
[ 1055.461200][T11717] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1055.500262][T11717] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1055.833464][T11717] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d)
[ 1056.207910][   T10] tipc: Disabling bearer <udp:syz2>
[ 1056.241767][   T10] tipc: Left network mode
[ 1056.280816][T11725] loop6: detected capacity change from 0 to 40427
[ 1056.298939][T11725] F2FS-fs (loop6): invalid crc value
[ 1056.395878][T11725] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1056.414612][T11726] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.427780][T11726] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1056.442119][T11726] device bridge_slave_0 entered promiscuous mode
[ 1056.449128][T11736] device syzkaller0 entered promiscuous mode
[ 1056.462769][T11726] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.483350][T11726] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1056.490904][T11726] device bridge_slave_1 entered promiscuous mode
[ 1056.500576][T11725] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1
[ 1056.531852][T11725] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1056.648777][T11726] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.655898][T11726] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1056.663225][T11726] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.670323][T11726] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1056.761114][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1056.771098][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1056.792858][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1056.832500][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1056.844153][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.851243][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1056.900973][T11625] handle_bad_sector: 1754 callbacks suppressed
[ 1056.900993][T11625] attempt to access beyond end of device
[ 1056.900993][T11625] loop6: rw=2049, want=45104, limit=40427
[ 1056.933283][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1056.973701][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.980818][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1057.010262][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1057.033634][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1057.054905][T11741] loop0: detected capacity change from 0 to 40427
[ 1057.117708][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1057.137148][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1057.147027][T11741] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1057.167490][T11741] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1057.188697][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1057.197242][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1057.205289][T11741] F2FS-fs (loop0): invalid crc value
[ 1057.216343][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1057.244995][T11726] device veth0_vlan entered promiscuous mode
[ 1057.262841][T11741] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1057.298862][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1057.316487][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1057.345425][T11726] device veth1_macvtap entered promiscuous mode
[ 1057.366450][T11741] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1057.377117][T11741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1057.545506][   T10] device bridge_slave_1 left promiscuous mode
[ 1057.556226][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.557228][T11741] attempt to access beyond end of device
[ 1057.557228][T11741] loop0: rw=2049, want=81920, limit=40427
[ 1057.579272][   T10] device bridge_slave_0 left promiscuous mode
[ 1057.587903][T11741] attempt to access beyond end of device
[ 1057.587903][T11741] loop0: rw=2049, want=50520, limit=40427
[ 1057.601526][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1057.610873][   T10] device veth1_macvtap left promiscuous mode
[ 1057.616959][   T10] device veth0_vlan left promiscuous mode
[ 1057.685637][T11741] attempt to access beyond end of device
[ 1057.685637][T11741] loop0: rw=524288, want=78080, limit=40427
[ 1057.719437][T11741] attempt to access beyond end of device
[ 1057.719437][T11741] loop0: rw=0, want=77832, limit=40427
[ 1057.741457][T11741] attempt to access beyond end of device
[ 1057.741457][T11741] loop0: rw=0, want=77832, limit=40427
[ 1057.753338][T11740] attempt to access beyond end of device
[ 1057.753338][T11740] loop0: rw=0, want=77832, limit=40427
[ 1057.788122][T11740] attempt to access beyond end of device
[ 1057.788122][T11740] loop0: rw=0, want=77832, limit=40427
[ 1057.812342][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1057.822361][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1057.838275][T11740] attempt to access beyond end of device
[ 1057.838275][T11740] loop0: rw=0, want=77832, limit=40427
[ 1057.851840][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1057.862645][T11740] attempt to access beyond end of device
[ 1057.862645][T11740] loop0: rw=0, want=77832, limit=40427
[ 1057.898253][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1057.923555][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1057.961644][T11757] device syzkaller0 entered promiscuous mode
[ 1058.728396][T11763] input: syz0 as /devices/virtual/input/input136
[ 1058.997056][T11768] loop4: detected capacity change from 0 to 256
[ 1059.036512][T11768] exfat: Deprecated parameter 'utf8'
[ 1059.048780][T11768] exfat: Deprecated parameter 'namecase'
[ 1059.084571][T11768] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[ 1059.125538][T11771] binder_alloc: 11770: binder_alloc_buf, no vma
[ 1060.388754][T11769] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.779580][T11769] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.797030][T11793] loop7: detected capacity change from 0 to 128
[ 1060.803878][T11769] device bridge_slave_0 entered promiscuous mode
[ 1060.814407][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop7
[ 1060.874547][T11783] device syzkaller0 entered promiscuous mode
[ 1060.880543][T11793] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 1060.888924][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop7
[ 1060.899470][T11769] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.919684][T11769] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1060.927371][T11769] device bridge_slave_1 entered promiscuous mode
[ 1060.962993][T11796] loop4: detected capacity change from 0 to 256
[ 1060.978959][   T10] tipc: Left network mode
[ 1060.994836][T11793] loop7: detected capacity change from 0 to 4096
[ 1061.023231][T11793] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[ 1061.840695][T11804] device syzkaller0 entered promiscuous mode
[ 1061.847556][T11793] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c118, mo2=0002]
[ 1061.855783][T11793] System zones: 0-5
[ 1061.890100][T11793] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,noload,grpjquota=,errors=continue,nodiscard,mblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: writeback.
[ 1062.007099][T11769] device veth0_vlan entered promiscuous mode
[ 1062.020704][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1062.029660][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1062.038348][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1062.058878][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1062.067337][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1062.075210][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1062.331874][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1062.371668][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1062.383374][T11813] loop4: detected capacity change from 0 to 512
[ 1062.393374][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1062.409349][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1062.417627][ T2682] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1062.424677][ T2682] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1062.432149][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1062.441265][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1062.453863][T11813] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1062.467194][ T2682] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1062.474289][ T2682] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1062.486765][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1062.497088][T11813] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,stripe=0x0000000000000007,barrier=0x0000000000000006,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[ 1062.520878][T11812] syz.7.3124 (11812) used greatest stack depth: 20968 bytes left
[ 1062.545834][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1062.567404][T11817] binder_alloc: 11816: binder_alloc_buf, no vma
[ 1062.568604][T11032] usb 1-1: new low-speed USB device number 25 using dummy_hcd
[ 1062.574912][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1062.607301][T11769] device veth1_macvtap entered promiscuous mode
[ 1062.630061][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1062.638593][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1062.647329][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1062.664401][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1063.559069][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1063.578861][T11822] input: syz0 as /devices/virtual/input/input137
[ 1064.930588][T11834] device syzkaller0 entered promiscuous mode
[ 1064.963132][   T10] device bridge_slave_1 left promiscuous mode
[ 1064.969423][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.977547][   T10] device bridge_slave_0 left promiscuous mode
[ 1066.018201][T11842] input: syz0 as /devices/virtual/input/input138
[ 1066.064871][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.107444][T11032] usb 1-1: device descriptor read/all, error -71
[ 1066.113335][   T10] device veth1_macvtap left promiscuous mode
[ 1066.118936][T11849] loop7: detected capacity change from 0 to 1024
[ 1066.121839][   T10] device veth0_vlan left promiscuous mode
[ 1066.209188][T11849] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[ 1066.230373][T11849] EXT4-fs (loop7): Ignoring removed orlov option
[ 1066.250476][T11849] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[ 1066.597073][T11858] loop6: detected capacity change from 0 to 128
[ 1066.604856][T11859] binder: BINDER_SET_CONTEXT_MGR already set
[ 1066.611641][T11859] binder: 11856:11859 ioctl 4018620d 200000004a80 returned -16
[ 1066.644284][T11858] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 1066.656739][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop6
[ 1066.680307][ T8712] udevd[8712]: incorrect ext4 checksum on /dev/loop6
[ 1066.728064][T11861] loop2: detected capacity change from 0 to 512
[ 1066.746099][T11858] loop6: detected capacity change from 0 to 4096
[ 1066.773308][T11861] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1066.780904][T11858] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[ 1066.789995][T11858] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c118, mo2=0002]
[ 1066.798492][T11858] System zones: 0-5
[ 1066.808446][T11858] ==================================================================
[ 1066.816545][T11858] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e80
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1066.823693][T11858] Read of size 8 at addr ffff88813b5adff8 by task syz.6.3140/11858
[ 1066.826742][   T30] audit: type=1400 audit(1783529639.721:293): avc:  denied  { write } for  pid=277 comm="syz-executor" path="pipe:[14678]" dev="pipefs" ino=14678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1066.831583][T11858] 
[ 1066.831591][T11858] CPU: 1 PID: 11858 Comm: syz.6.3140 Not tainted syzkaller #0
[ 1066.831616][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1066.874583][T11858] Call Trace:
[ 1066.877951][T11858]  <TASK>
[ 1066.880913][T11858]  __dump_stack+0x21/0x30
[ 1066.885426][T11858]  dump_stack_lvl+0x110/0x170
[ 1066.890145][T11858]  ? show_regs_print_info+0x20/0x20
[ 1066.895423][T11858]  ? load_image+0x3f0/0x3f0
[ 1066.899988][T11858]  ? _raw_spin_lock+0x94/0xf0
[ 1066.904817][T11858]  print_address_description+0x7f/0x2c0
[ 1066.910407][T11858]  ? __ext4_iget+0x2bb/0x3e80
[ 1066.915130][T11858]  kasan_report+0x10f/0x150
[ 1066.919696][T11858]  ? __kasan_check_read+0x11/0x20
[ 1066.924779][T11858]  ? __ext4_iget+0x2bb/0x3e80
[ 1066.929493][T11858]  __asan_report_load8_noabort+0x14/0x20
[ 1066.935150][T11858]  __ext4_iget+0x2bb/0x3e80
[ 1066.939672][T11858]  ? _raw_write_lock+0x94/0xf0
[ 1066.944454][T11858]  ? _raw_write_trylock+0x150/0x150
[ 1066.949682][T11858]  ? __proc_create+0x581/0x8f0
[ 1066.954509][T11858]  ? _raw_write_trylock+0x150/0x150
[ 1066.959729][T11858]  ? ext4_get_projid+0x140/0x140
[ 1066.964687][T11858]  ? _raw_write_unlock+0x2b/0x60
[ 1066.969673][T11858]  ? ext4_orphan_file_block_trigger+0x460/0x460
[ 1066.976088][T11858]  ext4_enable_quotas+0x338/0x6d0
[ 1066.981201][T11858]  ? ext4_register_sysfs+0x299/0x2e0
[ 1066.986504][T11858]  ext4_fill_super+0x831d/0x8bf0
[ 1066.991465][T11858]  ? ext4_mount+0x40/0x40
[ 1066.995817][T11858]  ? set_blocksize+0x1e9/0x360
[ 1067.000662][T11858]  ? sb_set_blocksize+0xaa/0xf0
[ 1067.005524][T11858]  ? ext4_mount+0x40/0x40
[ 1067.009873][T11858]  mount_bdev+0x28d/0x3c0
[ 1067.014258][T11858]  ? ext4_mount+0x40/0x40
[ 1067.018601][T11858]  ext4_mount+0x34/0x40
[ 1067.022773][T11858]  legacy_get_tree+0xed/0x190
[ 1067.027498][T11858]  ? ext4_errno_to_code+0x160/0x160
[ 1067.032711][T11858]  vfs_get_tree+0x89/0x260
[ 1067.037146][T11858]  do_new_mount+0x251/0xb40
[ 1067.041678][T11858]  ? security_capable+0x87/0xb0
[ 1067.046586][T11858]  path_mount+0x640/0xff0
[ 1067.050943][T11858]  __se_sys_mount+0x320/0x390
[ 1067.055657][T11858]  ? __x64_sys_mount+0xd0/0xd0
[ 1067.060445][T11858]  __x64_sys_mount+0xbf/0xd0
[ 1067.065247][T11858]  x64_sys_call+0x6bf/0x9a0
[ 1067.069812][T11858]  do_syscall_64+0x4c/0xa0
[ 1067.074256][T11858]  ? clear_bhb_loop+0x50/0xa0
[ 1067.078952][T11858]  ? clear_bhb_loop+0x50/0xa0
[ 1067.083651][T11858]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1067.089573][T11858] RIP: 0033:0x7f6a29cfa0ca
[ 1067.094062][T11858] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1067.113882][T11858] RSP: 002b:00007f6a28751e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1067.122378][T11858] RAX: ffffffffffffffda RBX: 00007f6a28751ee0 RCX: 00007f6a29cfa0ca
[ 1067.130378][T11858] RDX: 0000200000000100 RSI: 0000200000000280 RDI: 00007f6a28751ea0
[ 1067.138370][T11858] RBP: 0000200000000100 R08: 00007f6a28751ee0 R09: 0000000002800000
[ 1067.146355][T11858] R10: 0000000002800000 R11: 0000000000000246 R12: 0000200000000280
[ 1067.154348][T11858] R13: 00007f6a28751ea0 R14: 0000000000000bef R15: 00002000000010c0
[ 1067.162342][T11858]  </TASK>
[ 1067.165383][T11858] 
[ 1067.167721][T11858] Allocated by task 11615:
[ 1067.172217][T11858]  __kasan_slab_alloc+0xb7/0xe0
[ 1067.177088][T11858]  slab_post_alloc_hook+0x4f/0x2b0
[ 1067.182229][T11858]  kmem_cache_alloc+0xf7/0x260
[ 1067.187003][T11858]  f2fs_alloc_inode+0x26/0x330
[ 1067.191887][T11858]  iget_locked+0x175/0x850
[ 1067.196342][T11858]  f2fs_iget+0x55/0x5020
[ 1067.200629][T11858]  f2fs_fill_super+0x3ccd/0x6dd0
[ 1067.205577][T11858]  mount_bdev+0x28d/0x3c0
[ 1067.209916][T11858]  f2fs_mount+0x34/0x40
[ 1067.214084][T11858]  legacy_get_tree+0xed/0x190
[ 1067.218774][T11858]  vfs_get_tree+0x89/0x260
[ 1067.223199][T11858]  do_new_mount+0x251/0xb40
[ 1067.227718][T11858]  path_mount+0x640/0xff0
[ 1067.232059][T11858]  __se_sys_mount+0x320/0x390
[ 1067.236748][T11858]  __x64_sys_mount+0xbf/0xd0
[ 1067.241361][T11858]  x64_sys_call+0x6bf/0x9a0
[ 1067.245875][T11858]  do_syscall_64+0x4c/0xa0
[ 1067.250319][T11858]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1067.256230][T11858] 
[ 1067.258561][T11858] Freed by task 25:
[ 1067.262381][T11858]  kasan_set_track+0x4a/0x70
[ 1067.266979][T11858]  kasan_set_free_info+0x23/0x40
[ 1067.271933][T11858]  ____kasan_slab_free+0x125/0x160
[ 1067.277060][T11858]  __kasan_slab_free+0x11/0x20
[ 1067.281835][T11858]  slab_free_freelist_hook+0xc2/0x190
[ 1067.287216][T11858]  kmem_cache_free+0x100/0x320
[ 1067.291994][T11858]  f2fs_free_inode+0x24/0x30
[ 1067.296619][T11858]  i_callback+0x4c/0x70
[ 1067.300790][T11858]  rcu_do_batch+0x4c1/0xbf0
[ 1067.305381][T11858]  rcu_core+0x4a3/0xef0
[ 1067.309551][T11858]  rcu_core_si+0x9/0x10
[ 1067.313722][T11858]  handle_softirqs+0x250/0x560
[ 1067.318559][T11858]  run_ksoftirqd+0x28/0x40
[ 1067.323091][T11858]  smpboot_thread_fn+0x446/0x880
[ 1067.328095][T11858]  kthread+0x3f5/0x4f0
[ 1067.332204][T11858]  ret_from_fork+0x1f/0x30
[ 1067.336731][T11858] 
[ 1067.339062][T11858] Last potentially related work creation:
[ 1067.344782][T11858]  kasan_save_stack+0x3a/0x60
[ 1067.349472][T11858]  __kasan_record_aux_stack+0xd2/0x100
[ 1067.354957][T11858]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 1067.360779][T11858]  call_rcu+0x10b/0xf60
[ 1067.364950][T11858]  evict+0x810/0x8b0
[ 1067.368855][T11858]  iput+0x651/0x7e0
[ 1067.372674][T11858]  f2fs_put_super+0x67b/0xbd0
[ 1067.377367][T11858]  generic_shutdown_super+0x151/0x330
[ 1067.382756][T11858]  kill_block_super+0x7f/0xf0
[ 1067.387451][T11858]  kill_f2fs_super+0x30a/0x3d0
[ 1067.392227][T11858]  deactivate_locked_super+0xa0/0x100
[ 1067.397616][T11858]  deactivate_super+0xaf/0xe0
[ 1067.402302][T11858]  cleanup_mnt+0x44f/0x500
[ 1067.406734][T11858]  __cleanup_mnt+0x19/0x20
[ 1067.411162][T11858]  task_work_run+0x127/0x190
[ 1067.415761][T11858]  exit_to_user_mode_loop+0xd0/0xe0
[ 1067.420969][T11858]  exit_to_user_mode_prepare+0x87/0xd0
[ 1067.426440][T11858]  syscall_exit_to_user_mode+0x1a/0x30
[ 1067.431998][T11858]  do_syscall_64+0x58/0xa0
[ 1067.436435][T11858]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1067.442340][T11858] 
[ 1067.444675][T11858] Second to last potentially related work creation:
[ 1067.451269][T11858]  kasan_save_stack+0x3a/0x60
[ 1067.455965][T11858]  __kasan_record_aux_stack+0xd2/0x100
[ 1067.461435][T11858]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 1067.467257][T11858]  call_rcu+0x10b/0xf60
[ 1067.471426][T11858]  evict+0x810/0x8b0
[ 1067.475340][T11858]  evict_inodes+0x62a/0x6a0
[ 1067.479859][T11858]  generic_shutdown_super+0x96/0x330
[ 1067.485170][T11858]  kill_block_super+0x7f/0xf0
[ 1067.489865][T11858]  kill_f2fs_super+0x30a/0x3d0
[ 1067.494644][T11858]  deactivate_locked_super+0xa0/0x100
[ 1067.500031][T11858]  deactivate_super+0xaf/0xe0
[ 1067.504718][T11858]  cleanup_mnt+0x44f/0x500
[ 1067.509146][T11858]  __cleanup_mnt+0x19/0x20
[ 1067.513573][T11858]  task_work_run+0x127/0x190
[ 1067.518176][T11858]  exit_to_user_mode_loop+0xd0/0xe0
[ 1067.523388][T11858]  exit_to_user_mode_prepare+0x87/0xd0
[ 1067.528859][T11858]  syscall_exit_to_user_mode+0x1a/0x30
[ 1067.534333][T11858]  do_syscall_64+0x58/0xa0
[ 1067.538759][T11858]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1067.544661][T11858] 
[ 1067.546996][T11858] The buggy address belongs to the object at ffff88813b5adaf0
[ 1067.546996][T11858]  which belongs to the cache f2fs_inode_cache of size 1424
[ 1067.561577][T11858] The buggy address is located 1288 bytes inside of
[ 1067.561577][T11858]  1424-byte region [ffff88813b5adaf0, ffff88813b5ae080)
[ 1067.575052][T11858] The buggy address belongs to the page:
[ 1067.580696][T11858] page:ffffea0004ed6a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88813b5a8c20 pfn:0x13b5a8
[ 1067.592332][T11858] head:ffffea0004ed6a00 order:3 compound_mapcount:0 compound_pincount:0
[ 1067.600754][T11858] flags: 0x4000000000010200(slab|head|zone=1)
[ 1067.606854][T11858] raw: 4000000000010200 ffffea0004ed3200 0000000300000003 ffff8881081f7b00
[ 1067.615448][T11858] raw: ffff88813b5a8c20 000000008015000e 00000001ffffffff 0000000000000000
[ 1067.624033][T11858] page dumped because: kasan: bad access detected
[ 1067.630540][T11858] page_owner tracks the page as allocated
[ 1067.636261][T11858] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6225, ts 678746612609, free_ts 674521434922
[ 1067.658019][T11858]  post_alloc_hook+0x192/0x1b0
[ 1067.662897][T11858]  prep_new_page+0x1c/0x110
[ 1067.667419][T11858]  get_page_from_freelist+0x2c3a/0x2cd0
[ 1067.672982][T11858]  __alloc_pages+0x1a2/0x460
[ 1067.677589][T11858]  new_slab+0xa0/0x4d0
[ 1067.681673][T11858]  ___slab_alloc+0x3ac/0x840
[ 1067.686277][T11858]  __slab_alloc+0x49/0x90
[ 1067.690623][T11858]  kmem_cache_alloc+0x138/0x260
[ 1067.695492][T11858]  f2fs_alloc_inode+0x26/0x330
[ 1067.700268][T11858]  new_inode_pseudo+0x62/0x210
[ 1067.705043][T11858]  new_inode+0x28/0x1e0
[ 1067.709210][T11858]  f2fs_new_inode+0xe7/0x12b0
[ 1067.713898][T11858]  f2fs_create+0x17b/0x1640
[ 1067.718412][T11858]  path_openat+0x15e6/0x2f80
[ 1067.723033][T11858]  do_filp_open+0x1df/0x400
[ 1067.727550][T11858]  do_sys_openat2+0x15e/0x7f0
[ 1067.732235][T11858] page last free stack trace:
[ 1067.736908][T11858]  free_unref_page_prepare+0x5fa/0x600
[ 1067.742378][T11858]  free_unref_page+0xae/0x540
[ 1067.747067][T11858]  __free_pages+0x6c/0x100
[ 1067.751497][T11858]  __free_slab+0xe5/0x1e0
[ 1067.755845][T11858]  __unfreeze_partials+0x15a/0x190
[ 1067.760967][T11858]  put_cpu_partial+0xc6/0x120
[ 1067.765663][T11858]  __slab_free+0x1d4/0x290
[ 1067.770099][T11858]  ___cache_free+0x104/0x120
[ 1067.774700][T11858]  qlink_free+0x4d/0x90
[ 1067.778865][T11858]  qlist_free_all+0x5f/0xb0
[ 1067.783375][T11858]  kasan_quarantine_reduce+0x14a/0x170
[ 1067.788847][T11858]  __kasan_slab_alloc+0x2f/0xe0
[ 1067.793707][T11858]  slab_post_alloc_hook+0x4f/0x2b0
[ 1067.798830][T11858]  kmem_cache_alloc+0xf7/0x260
[ 1067.803603][T11858]  __alloc_skb+0xe4/0x730
[ 1067.808056][T11858]  netlink_sendmsg+0x611/0xb80
[ 1067.812858][T11858] 
[ 1067.815190][T11858] Memory state around the buggy address:
[ 1067.820824][T11858]  ffff88813b5ade80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1067.828896][T11858]  ffff88813b5adf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1067.836961][T11858] >ffff88813b5adf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1067.845023][T11858]                                                                 ^
[ 1067.853012][T11858]  ffff88813b5ae000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1067.861076][T11858]  ffff88813b5ae080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1067.869139][T11858] ==================================================================
[ 1067.877204][T11858] Disabling lock debugging due to kernel taint
[ 1067.893417][T10314] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[ 1067.933789][T11858] EXT4-fs warning (device loop6): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[ 1067.949301][   T30] audit: type=1400 audit(1783529640.819:294): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 1067.989032][   T30] audit: type=1400 audit(1783529640.848:295): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1068.029575][T11858] EXT4-fs (loop6): mount failed
[ 1068.046661][   T30] audit: type=1400 audit(1783529640.848:296): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1068.069295][T11861] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,stripe=0x0000000000000007,barrier=0x0000000000000006,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[ 1068.090030][   T30] audit: type=1400 audit(1783529640.848:297): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1068.111654][   T30] audit: type=1400 audit(1783529640.848:298): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1068.143843][   T30] audit: type=1400 audit(1783529640.848:299): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1068.166950][   T30] audit: type=1400 audit(1783529640.848:300): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1068.928601][    T8] device bridge_slave_1 left promiscuous mode
[ 1068.934762][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.942382][    T8] device bridge_slave_0 left promiscuous mode
[ 1068.948513][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.956657][    T8] device veth1_macvtap left promiscuous mode
[ 1068.963192][    T8] device veth0_vlan left promiscuous mode
[ 1069.326735][    T8] tipc: Left network mode
[ 1069.955149][    T8] device bridge_slave_1 left promiscuous mode
[ 1069.961294][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.968855][    T8] device bridge_slave_0 left promiscuous mode
[ 1069.975175][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.983046][    T8] device bridge_slave_1 left promiscuous mode
[ 1069.989287][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.996900][    T8] device bridge_slave_0 left promiscuous mode
[ 1070.003018][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1070.011022][    T8] device bridge_slave_1 left promiscuous mode
[ 1070.017195][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1070.024574][    T8] device bridge_slave_0 left promiscuous mode
[ 1070.030766][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1070.038703][    T8] device bridge_slave_1 left promiscuous mode
[ 1070.044812][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1070.052461][    T8] device bridge_slave_0 left promiscuous mode
[ 1070.058610][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1070.067342][    T8] device veth1_macvtap left promiscuous mode
[ 1070.073416][    T8] device veth0_vlan left promiscuous mode
[ 1070.079450][    T8] device veth1_macvtap left promiscuous mode
[ 1070.085496][    T8] device veth0_vlan left promiscuous mode
[ 1070.091572][    T8] device veth1_macvtap left promiscuous mode
[ 1070.097578][    T8] device veth0_vlan left promiscuous mode
[ 1070.103702][    T8] device veth1_macvtap left promiscuous mode
[ 1070.109714][    T8] device veth0_vlan left promiscuous mode