last executing test programs:

58.542856307s ago: executing program 1 (id=34):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
setresuid(0xee01, 0x0, 0x0)
statfs(0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
dup(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b50a00001800000061118c0000000000180000000000000000000000000000009500000400000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x38)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC=r3, @ANYRES64], 0x8, 0x2ec, &(0x7f0000000a00)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
fdatasync(r4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
open(&(0x7f0000000340)='./bus/file0\x00', 0x616842, 0x6)

57.653654076s ago: executing program 1 (id=43):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, &(0x7f0000000080)={[{@errors_continue}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x0, 0x639, &(0x7f0000000380)="$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")
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x20004090)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x112, 0x2, 0x0, 0x0)
openat$rtc(0xffffff9c, &(0x7f0000000080), 0x4200, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r6, &(0x7f0000004540)={0x2020}, 0x2020)

56.111120618s ago: executing program 1 (id=49):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, &(0x7f0000000080)={[{@errors_continue}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x0, 0x639, &(0x7f0000000380)="$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")
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x112, 0x2, 0x0, 0x0)
openat$rtc(0xffffff9c, &(0x7f0000000080), 0x4200, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000a80))
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r5, &(0x7f0000004540)={0x2020}, 0x2020)

53.423925885s ago: executing program 1 (id=53):
r0 = socket(0x1, 0x5, 0x0)
unshare(0x400)
close(r0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000480)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ff303030303032fd33a1ddfe6717c3d234022f30303030302c6e6f606f74732cb7f973636172642c6e66733d6e6f738f176d945097ec0dd5eadb028dfd7ea6ef584b372f5d74d4250c9b6f8f839859f3492898b4b06691432b63bab01154fdffffffffffffff5b47720a85ad56c37ed0", @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff3030303030313737373737373737f9909fdfd4291a9ccfbbdb0556c0f39fdb37372c004c0f1208ec0c34b7df4ba1b5e6b76697434de7574db9bcaef6a61212c3f260bebc7ac5b1b113e1119b83f1cf9f686b3dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7acab1c2e7b6a547f8120c12a14b06fb302b8adb87fa67ab868940868fee39f0796736ccd4adf62186a216263c1322da47b156791f49bf9e904cf364616ba0d1bf1"], 0x1, 0x291, &(0x7f0000000740)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
creat(&(0x7f0000000240)='./file1\x00', 0xd)
truncate(&(0x7f0000000140)='./file1\x00', 0x401)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007b, 0x402802)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0x6000000d})

53.080773492s ago: executing program 1 (id=55):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, &(0x7f0000000080)={[{@errors_continue}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x0, 0x639, &(0x7f0000000380)="$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")
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x20004090)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x112, 0x2, 0x0, 0x0)
openat$rtc(0xffffff9c, &(0x7f0000000080), 0x4200, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000a80))
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
read$FUSE(r6, &(0x7f0000004540)={0x2020}, 0x2020)
unshare(0x24040400)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000440)={'syz0\x00', {0x7bcc, 0x9, 0xfffd, 0x1ff}, 0x2b, [0x9, 0x7, 0x3b00, 0xd94, 0x31, 0x7ff, 0x4, 0x5, 0xeacb, 0x7d, 0x6, 0x1383, 0x3, 0x202b, 0x9, 0x23a, 0x4, 0x9, 0x5, 0x9, 0x11bb, 0x6, 0xfffffffa, 0x4, 0x4, 0x51, 0xc, 0x1ff, 0x7, 0x3, 0xeb0, 0x4, 0x7ff, 0x9, 0x8d, 0x7, 0x6, 0x6, 0xffff0000, 0x2, 0x0, 0x6, 0x9, 0x2, 0x4, 0x7, 0xfffffffa, 0x37f5, 0x8, 0x1, 0x7f, 0xeaf1, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7fff, 0x9, 0x3, 0x2, 0x5, 0x2, 0x100], [0x6, 0x2, 0xfffff490, 0x2, 0x0, 0x7, 0x14, 0x401, 0x7, 0x4243, 0x0, 0x2, 0xa4, 0x7, 0x401, 0x9, 0x9, 0x6, 0x1, 0x41c6, 0xc46, 0x3, 0x4, 0x9, 0x7ff, 0x401, 0x1, 0x101, 0x100, 0x5b4, 0x1, 0x5c3, 0x6, 0x2, 0x10, 0xad63, 0x6, 0x401, 0x8, 0x9, 0x9, 0x1, 0xfffffffe, 0x9, 0x6, 0xfff, 0x6, 0x0, 0x7ff, 0xab5, 0x200, 0x5, 0x81, 0xe, 0x9, 0x6, 0x5, 0x8, 0xca, 0xe36, 0x6, 0xb, 0x8, 0x8001], [0x5, 0xfffffffd, 0x80000001, 0x5, 0x80000000, 0x9, 0xfffffff6, 0x0, 0x6, 0xfffffff9, 0x80, 0xb210, 0x80000000, 0x0, 0xec9e, 0x7, 0x1, 0x2, 0x8, 0x0, 0x1, 0x6, 0xffffffe1, 0x6, 0xa, 0xc5a, 0x1, 0x2, 0x22d621f0, 0x8000, 0x6, 0x2, 0x6, 0x77f8, 0x0, 0xf, 0x6, 0x3, 0xfff, 0x59a6, 0xbc, 0x1, 0x0, 0x6ff1, 0x3508, 0x2, 0x8, 0x0, 0x247, 0x1ff, 0x1, 0x4, 0xf9b5, 0x1, 0x6, 0x6, 0x100, 0xfffffff7, 0x1, 0x9, 0x4, 0x1, 0x9, 0x6], [0xffffffff, 0x3, 0x101, 0x6, 0xffff, 0x8, 0x7fffffff, 0x1, 0x8, 0x8000, 0x10001, 0xccf, 0xa99, 0x3, 0x0, 0x7, 0xffffffff, 0x7, 0xf, 0x6, 0x3, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3, 0x8, 0xee, 0xfffffffa, 0x27, 0x3, 0x3, 0x0, 0x3, 0x80, 0x200, 0x8, 0x0, 0x6, 0x200, 0x7f, 0x9, 0x5a, 0x1, 0x4, 0x5, 0x9, 0x9, 0xc, 0x6, 0x8, 0x84800000, 0x401, 0x3ff, 0x2, 0x4, 0x200, 0x6, 0x84, 0x8, 0x8, 0x3]}, 0x45c)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r8, 0x0, 0x20000000, 0x0)
io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})

52.561425333s ago: executing program 1 (id=59):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x1525, &(0x7f0000001580)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_pgetevents(0x0, 0x4, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000003400)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x40000, 0x0, 0x2}])
io_destroy(0x0)
r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
io_submit(0x0, 0x2, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x405, r4, &(0x7f0000000140)="7e0efc7e9eca6e8832054c34b29cd8210e61d2969acadcfdc54623d72c8f934800c38fdd97e80c2def1d644f2ce07b557d57e6fc2450f67b3578cf386bc26e8bfb269872737123d1d2fdccc6cda0cdfd5625f428166659f7779e7d6a3277f7e7f32d8116", 0x64, 0x81, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000200)="b9fd4cb3f8b5ab4288ef96ec6af558cede504d076f3e12e19205b740a10aa7a7161be035a255e623a2f0d4104c0ab94ecfa49576bc8738cb3d6e19e0bec01fbf53cfabf5904afa2438924adc0b8c4a1b2d66460bcc8910e9b03dd2f88459cbbd19d55b07108e7f23fd026be4014f", 0x6e, 0x933, 0x0, 0x1, r2}])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a0000000000006111a200000000008500000006000000950000000000000062f90e9435726cf8b02fdb6bf063e988b6ae735027a892f07c8446490b1333ee83d61b0617a3fe65d472faf97631c5c07ff17db59131bdb408e8c60ee1b7dbc0ab47fa88dbef7b394b7c1e61f37d964b50ca7f4dba052347482931f6660508741efe7eb317f2"], &(0x7f0000000000)='GPL\x00'}, 0x94)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600))
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = syz_open_pts(0xffffffffffffffff, 0x602)
ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f0000000600))
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010028bd700009b945bf7be3cb6f2d370d8f0000000b0000000800040001feffff080004000800000005000500f91000001400018008000300ac1414aa060001000a0000000800420004000000050005000a000000140001800500020002000000080006000c0000001400068008000700", @ANYRES32, @ANYBLOB="060001000200000005000500080000000800020007000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
sendto$packet(r6, &(0x7f0000000080)="8f0bd70b7a9db07a5c10ce74f5a5eac06fb52bbf998fc0e276c3d793f57bc2d45605ce61ffdbf9034461f0279ff82c79688a5b9805a29af4e8828212cc3941a8a4ab0ba07d3e727ef2cf228e5e1db5e243c2e7dc02dfeb4ed7dceca07aedb74aea6397e9809b6c5d8ec3ccbf4adf858b51d5b636b294b38926a9249ff69e2479306c1bc1f7f74a0739ab386cfc1a19fd99a3a2a1aab8354d71ff9aeecfe0de6738f356338c0864eaceeae907e3ec9ad539aa7b40ec49109f8abe8d80966543370566db01d5f0924b64275138d85ff9d0bb9d954360ab5b6da2a82d5cf03eec", 0xdf, 0x4068041, 0x0, 0x0)

50.526535666s ago: executing program 32 (id=59):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x1525, &(0x7f0000001580)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_pgetevents(0x0, 0x4, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000003400)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x40000, 0x0, 0x2}])
io_destroy(0x0)
r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
io_submit(0x0, 0x2, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x405, r4, &(0x7f0000000140)="7e0efc7e9eca6e8832054c34b29cd8210e61d2969acadcfdc54623d72c8f934800c38fdd97e80c2def1d644f2ce07b557d57e6fc2450f67b3578cf386bc26e8bfb269872737123d1d2fdccc6cda0cdfd5625f428166659f7779e7d6a3277f7e7f32d8116", 0x64, 0x81, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000200)="b9fd4cb3f8b5ab4288ef96ec6af558cede504d076f3e12e19205b740a10aa7a7161be035a255e623a2f0d4104c0ab94ecfa49576bc8738cb3d6e19e0bec01fbf53cfabf5904afa2438924adc0b8c4a1b2d66460bcc8910e9b03dd2f88459cbbd19d55b07108e7f23fd026be4014f", 0x6e, 0x933, 0x0, 0x1, r2}])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a0000000000006111a200000000008500000006000000950000000000000062f90e9435726cf8b02fdb6bf063e988b6ae735027a892f07c8446490b1333ee83d61b0617a3fe65d472faf97631c5c07ff17db59131bdb408e8c60ee1b7dbc0ab47fa88dbef7b394b7c1e61f37d964b50ca7f4dba052347482931f6660508741efe7eb317f2"], &(0x7f0000000000)='GPL\x00'}, 0x94)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600))
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = syz_open_pts(0xffffffffffffffff, 0x602)
ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f0000000600))
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010028bd700009b945bf7be3cb6f2d370d8f0000000b0000000800040001feffff080004000800000005000500f91000001400018008000300ac1414aa060001000a0000000800420004000000050005000a000000140001800500020002000000080006000c0000001400068008000700", @ANYRES32, @ANYBLOB="060001000200000005000500080000000800020007000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
sendto$packet(r6, &(0x7f0000000080)="8f0bd70b7a9db07a5c10ce74f5a5eac06fb52bbf998fc0e276c3d793f57bc2d45605ce61ffdbf9034461f0279ff82c79688a5b9805a29af4e8828212cc3941a8a4ab0ba07d3e727ef2cf228e5e1db5e243c2e7dc02dfeb4ed7dceca07aedb74aea6397e9809b6c5d8ec3ccbf4adf858b51d5b636b294b38926a9249ff69e2479306c1bc1f7f74a0739ab386cfc1a19fd99a3a2a1aab8354d71ff9aeecfe0de6738f356338c0864eaceeae907e3ec9ad539aa7b40ec49109f8abe8d80966543370566db01d5f0924b64275138d85ff9d0bb9d954360ab5b6da2a82d5cf03eec", 0xdf, 0x4068041, 0x0, 0x0)

32.458478476s ago: executing program 5 (id=89):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x1525, &(0x7f0000001580)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
io_setup(0x2278, &(0x7f0000000180)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140))
io_pgetevents(r2, 0x4, 0x0, 0x0, 0x0, 0x0)
io_submit(r2, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x405, 0xffffffffffffffff, &(0x7f0000000140)="7e0efc7e9eca6e8832054c34b29cd8210e61d2969acadcfdc54623d72c8f934800c38fdd97e80c2def1d644f2ce07b557d57e6fc2450f67b3578cf386bc26e8bfb269872737123d1d2fdccc6cda0cdfd5625f428166659f7", 0x58, 0x81, 0x0, 0x1, r1}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, 0x0, &(0x7f0000001600))
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_pts(0xffffffffffffffff, 0x602)
ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000600))
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@dev, @multicast1, <r8=>0x0}, &(0x7f0000000480)=0xc)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=r7, @ANYBLOB="010028bd700009b945bf7be3cb6f2d370d8f0000000b0000000800040001feffff080004000800000005000500f91000001400018008000300ac1414aa060001000a0000000800420004000000050005000a000000140001800500020002000000080006000c0000001400068008000700", @ANYRES32=r8, @ANYBLOB="060001000200000005000500080000000800020007000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
sendto$packet(r4, &(0x7f0000000080)="8f0bd70b7a9db07a5c10ce74f5a5eac06fb52bbf998fc0e276c3d793f57bc2d45605ce61ffdbf9034461f0279ff82c79688a5b9805a29af4e8828212cc3941a8a4ab0ba07d3e727ef2cf228e5e1db5e243c2e7dc02dfeb4ed7dceca07aedb74aea6397e9809b6c5d8ec3ccbf4adf858b51d5b636b294b38926a9249ff69e2479306c1bc1f7f74a0739ab386cfc1a19fd99a3a2a1aab8354d71ff9aeecfe0de6738f356338c0864eaceeae907e3ec9ad539aa7b40ec49109f8abe8d80966543370566db01d5f0924b64275138d85ff9d0bb9d954360ab5b6da2a82d5cf03eec", 0xdf, 0x4068041, 0x0, 0x0)

31.031849796s ago: executing program 5 (id=93):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2210448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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")
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f040000000e00000000344200010000000000000500000000000000", @ANYRES16], &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x28)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))

30.802065771s ago: executing program 5 (id=98):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x1525, &(0x7f0000001580)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_pgetevents(0x0, 0x4, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000003400)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x40000, 0x0, 0x2}])
io_destroy(0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_pts(0xffffffffffffffff, 0x602)
ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f0000000600))
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010028bd700009b945bf7be3cb6f2d370d8f0000000b0000000800040001feffff080004000800000005000500f91000001400018008000300ac1414aa060001000a0000000800420004000000050005000a000000140001800500020002000000080006000c0000001400068008000700", @ANYRES32, @ANYBLOB="060001000200000005000500080000000800020007000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
sendto$packet(r5, &(0x7f0000000080)="8f0bd70b7a9db07a5c10ce74f5a5eac06fb52bbf998fc0e276c3d793f57bc2d45605ce61ffdbf9034461f0279ff82c79688a5b9805a29af4e8828212cc3941a8a4ab0ba07d3e727ef2cf228e5e1db5e243c2e7dc02dfeb4ed7dceca07aedb74aea6397e9809b6c5d8ec3ccbf4adf858b51d5b636b294b38926a9249ff69e2479306c1bc1f7f74a0739ab386cfc1a19fd99a3a2a1aab8354d71ff9aeecfe0de6738f356338c0864eaceeae907e3ec9ad539aa7b40ec49109f8abe8d80966543370566db01d5f0924b64275138d85ff9d0bb9d954360ab5b6da2a82d5cf03eec", 0xdf, 0x4068041, 0x0, 0x0)

30.020517787s ago: executing program 5 (id=105):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000040), 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x1, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2}}}})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
waitid(0x1, r1, 0x0, 0x61000006, &(0x7f0000000340))
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000100)={'full', 0x20, 0x8, 0x20, 0xb871}, 0x2f)
write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

29.534573158s ago: executing program 5 (id=107):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, &(0x7f0000001600))

29.373489071s ago: executing program 5 (id=109):
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x51b, &(0x7f0000001000)="$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")
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x2)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x4280, 0xad)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
fremovexattr(r0, &(0x7f0000000180)=@known='trusted.overlay.opaque\x00')

29.373393101s ago: executing program 33 (id=109):
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x51b, &(0x7f0000001000)="$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")
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x2)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x4280, 0xad)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
fremovexattr(r0, &(0x7f0000000180)=@known='trusted.overlay.opaque\x00')

16.900259444s ago: executing program 6 (id=191):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000180)={[{@dioread_lock}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes128, 0x2, '\x00', @d})
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x2000844, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES64], 0x1, 0x279, &(0x7f0000000580)="$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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd701bfddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)

15.978596833s ago: executing program 6 (id=196):
fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) (async)
r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
getdents(r2, &(0x7f0000001fc0)=""/184, 0x2000208e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6a94da7d}], 0x1, 0x2, 0x0)
dup3(r5, r4, 0x0)

15.970145153s ago: executing program 6 (id=197):
syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x862b43)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0xbf, &(0x7f0000000000)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x89, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x1, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0xffffac1414aa}, [@srh={0xbf, 0xa, 0x4, 0x5, 0x5, 0x20, 0xff, [@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "8d"}}}}}}}, 0x0)
listen(r1, 0x2)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0)
shutdown(r0, 0x0)

15.909536305s ago: executing program 6 (id=199):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000040), 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x1, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2}}}})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
waitid(0x1, r1, 0x0, 0x61000006, &(0x7f0000000340))
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000100)={'full', 0x20, 0x8, 0x20, 0xb871}, 0x2f)
write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

15.527708933s ago: executing program 6 (id=203):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2210448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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")
gettid()
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
lseek(r1, 0xfffffffffffffffe, 0x0)
sendfile(r1, r1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000000340)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0)
recvmsg(r0, &(0x7f0000001a40)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/52, 0x34}, {&(0x7f0000001880)=""/213, 0xd5}], 0x3, &(0x7f00000019c0)=""/113, 0x71}, 0x1)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
fsopen(0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x100021, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000001010400000000141a00000300001024000180140001800800010108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4800)
recvmmsg$unix(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000240)={0x77359400})
timer_create(0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)

14.591707092s ago: executing program 6 (id=207):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x1525, &(0x7f0000001580)="$eJzs3Au4jdX2MPAx5pwvm6SV5D7HHC8ruUySJJeEXJIkSZLcEpIkSUJyyy0JScg9yT3kHpL7/ZZ7khxJkoSEJPN7dOrvnNP5/zvnO+f76zt7/J5nPnuO/a4x1nj32M9a632fZ++v2w2sVKdy+VrMDP8S/POXrgCQAgB9AOAaAIgAoFimYpkuHU+nseu/9iTi3+vBKVe6A3ElyfxTN5l/6ibzT91k/qmbzD91k/mnbjL/1E3mL0RqtnVq9mtlpd4l9/9TM3n//w9yuNCoz9cXur79P5Ei80/dZP6pm8w/dZP5p24y//9E6h9+pMz/P1+5/+GYzD91k/kLkZptRQPwB7gPLevKrCv9+yeEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQInU4Fy4zAPDr/kr3JYQQQgghhBBCiH+fkPZKdyCEEEIIIYQQQoj/9xAUaDAQQRpICymQDtLDVZABroaMcA0k4FrIBNdBZrgeskBWyAbZIQfkhFxggcABQwy5IQ8k4QbICzdCPsgPBaAgeCgEheEmKAI3Q1G4BYrBrVAcboMSUBJKQWm4HcrAHVAWykF5uBMqQEWoBJXhLqgCd0NVuAeqwb1QHe6DGnA/1IQHoBY8CLXhIagDD0NdeATqQX1oAA2h0f9V/gvQCV6EztAFukI36A4vQQ/oCb2gN/SBl6EvvAL94FXoDwNgILwGg+B1GAxvwBAYCsPgTRgOI2AkjILRMAbGwlswDt6G8fAOTICJMAkmwxSYCtPgXZgOM2AmvAezYDbMgbkwD+bDAngfFsIiWAwfwBL4EJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsJHsA22ww7YCbtgN+yBj2EvfAL74FPYD5/9k/ln/ya/PQICKlRo0GAaTIMpmILpMT1mwAyYETNiAhOYCTNhZsyMWTALZsNsmANzYC7MhYSEjIy5MTcmMYl5MS/mw3xYAAugR4+FsTAWwZuxKBbFYlgMi2NxLIElsSSWxtJYBstgWSyL5bE8VsAKWAkr4V14F96NVbEqVsNqWB2rYw2sgTWxJtbCWlgba2MdrIN1sS7Ww3rYABtgI2yEjbExNsEm2AybYXNsji2wBbbEltgKW2FrbI1tsA22xbbYDtthe+yAHfAFfAFfxBexC1ZQ3bA7dsce2AN7YW/sjS9jX3wFX8FXsT8OwIH4Gr6Gr+NgPINDcCgOw2FYRo3AkTgKWY3BsTgWx+E4HI/jcQJOxIk4GafgVJyG03A6zsAZ+B7Owtk4G+fiXJyPC3ABLsRFuBgX4xI8i0txGS7HFbgSV+FKXINrcQ2uxw24HjfhJtyCW/Aj/Ai343bciTtxN+7Gj/Fj/AQ/wf64H/fjATyAB/EgHsJDeBgP4xE8gkfxKB7DY3gcj+MJPImn8CSextN4Bs/iOTyH5/E8XsDncnxZe3f+df1BKaWenw2g0qg0KkWlqPQqvcqgMqiMKqNKqITKpDKpzCqzyqKyqGwqm8qhcqhcKpciRYpVrHKr3CqpkiqvyqvyqXyqgCqgvPKqsCqsiqgiqqgqqoqpW1VxdZsqoUqqpr60Kq3KqGa+rCqnyqvyqoKqqCqpyqqyqqKqqKqqqqqmqqnqqrqqoe5XNVU37IUPqkuTqaMGYF01EOup+qqBaqhex0dVYzUYm6imqpl6XA3FIdhCNfYt1VOqlRqJrdUzahQ+q9qqMdhOPa/aqw6qo3pBdVJNfGfVRU3Abqq7mow9VE/VS/VW07GiujSxSupV1V8NUAPVa2o+vq4GqzfUEDVUDVNvquFqhBqpRqnRaowaq95S49Tbarx6R01QE9UkNXkfqKlqmnpXTVcz1Ez1npqlZqs5aq6ap+arBep9tVAtUovVB2qJ+lAtVcvUcrVCrVSr1Gq1Rq1V69R6tUFtVJvUZrVFbVUfqW1qu9qhdqpdarfaoz5We9Unap/6VO1Xn6kD6k/qoPpcHVJfqMPqS3VEfaWOqq/VMfWNOq6+VSfUSXVKfadOq+/VGXVWnVM/qPPqR3VB/aQuqqBAo1Zaa6MjnUan1Sk6nU6vr9IZ9NU6o75GJ/S1OpO+TmfW1+ssOqvOprPrHDqnzqWtJu0061jn1nl0Ut+g8+obdT6dXxfQBbXXhXRhfZMuom/WRfUtupi+VRfXt+kSuqQupUvr23UZfYcuq8vp8vpOXUFX1JV0ZX2XrqLv1lX1PbqavldX1/fpGvp+XVM/oGvpB3Vt/ZCuox/WdfUjup6urxvohrqRflQ31o/pJrqpbqYf1831E7qFflK31E/pVvpp3Vo/o9voZ3Vb/Zxup5/X7XUH3VH/pC/qoDvrLrqr7qa765d0D91T99K9dR/9su6rX9H99Ku6vx6gB+rX9CD9uh6s39BD9FA9TL+ph+sReqQepUfrMXqsfkuP02/r8fodPUFP1JP0ZD1FT9W9fqk08x/If/vv5Pf7+dm36K36I71Nb9c79E69S+/We/QevVfv1fv0Pr1f79cH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/RJ/YP+Tp/W3+sz+qw+q3/Q5/V5feGXnwEYNMpoY0xk0pi0JsWkM+nNVSaDudpkNNeYhLnWZDLXmczmepPFZDXZTHaTw+Q0uYw1ZJxhE5vcJo9JmhtMXnOjyWfymwKmoPGmkClsbvqX83+vv0amkWlsGpsmpolpZpqZ5qa5aWFamJampWllWpnWprVpY9qYtqataWfamfamveloOppOppPpbDqbrqar6W5eMj1MT9PL9DZ9zMumr+lr+pl+pr/pbwaagWaQGWQGm8FmiBlihplhZrgZbkaakWa0GW3GmrFmnBlnxpvxZoKZYCaZSWaKmWKmmWlmupluZpqZZpaZZeaYOWaemWcWmAVmoVloFpvFZolZYpaaZWaZWWFWmFVmlVlj1ph1Zp3ZYDaYTWaTWWq2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX1mv9lvDpgD5qA5aA6ZQ+awOWyOmCPmqDlqjplj5rg5bk6YE+aUOWVOm9PmjDljzplz5rw5by6YC+aiuXjpY1+kIhWZyERpojRRSpQSpY/SRxmiDFHGKGOUiBJRpihTlDm6PsoSZY2yRdmjHFHOKFdkI4pcxFEc5Y7yRMnohihvdGOUL8ofFYgKRj4qFBWOboqKRDdHRaNbomLRrVHx6LaoRDqISkWlo9ujMtEdUdmoXFQ+ujOqEFWMKkWVo7uiKtHdUdXonqhadG9UPbovqhHdH9WMHohqRQ9GtaOHojrRw1Hd6JGoXlQ/ahA1jBr9bf2o5L9QP4QzWR/znW0X29V2s93tS7aH7Wl72d62j33Z9rWv2H72VdvfDrAD7Wt2kH3dDrZv2CF2qB1m37TD7Qg70o6yo+0YO9a+ZcfZt+14+46dYCfaSXaynWKn2mn2XTvdzrAz7Xt2lp1t59i5dp6dbxfY9+1Cu8guth/YJfZDu9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmS32e12h91pd9nddo/92O61n9h99lO7335mD9g/2YP2c3vIfmEP2y/tEfuVPaoBwH5jj9tv7Ql70p6y39nT9nt7xp615+wP9rz90V6wP9mLNlz6cH/p7Z0MGUpDaSiFUig9pacMlIEyUkZKUIIyUSbKTJkpC2WhbJSNclAOykW56BImptyUm5KUpLyUl/JRPipABciTp8JUmIpQESpKRakYFaPiVJxKUAkqRaXodrqd7qA7qByVozvpTqpIFakyVaYqVIWqUlWqRtWoOlWnGlSDalJNqkW1qDbVpjpUh+pSXapH9agBNaBG1IgaU2NqQk2oGTWj5tScWlALakktqRW1otbUmtpQG2pLbakdtaP21J46UkfqRJ2oM3WmrtSVulN36kE9qBf1oj7Uh/pSX+pH/ag/9aeBNJAG0SAaTINpCA2lYfQmDacRNJJG0WgaQ2NpLI2jcTSextMEmkCTaBJNoSk0jabRdJpOM2kmzaJZNIfm0DyaRwtoAS2khbSYFtMSWkJLaSktp+W0klbSalpNa2ktraf1tJE20mbaTFtpK22jbbSDdtAu2kV7aA/tpb20j/bRftpPB+gAHaSDdIgO0WE6TEfoCB2lo3SMjtFxOk4n6ASdolN0mk7TGTpD5+gcnacf6QL9RBcpUIpTkN5d5TK4q11Gd41LcencX8bZXHaXw+V0uZx1WVxWl831NQB/jsk5l8/ldwVcQeddIVfY3fQXsf7lurOkK+VKu9tdGXeHK+tKuL+Oq7i7XVV3j6vm7nWV3V1/FVd397ka7mFX0z3iarn6rrZr6Oq4h11d94ir5+q7Bq6ha+6ecC3ck66le8q1ck//Jl7oFrm1bp1b7za4ve4Td8794I66r91596Pr7Lq4Pu5l19e94vq5V11/N+A38TD3phvuRriRbpQb7cb8Jp7kJrspbqqb5t51092M38QL3Ptullvs5ri5bp6b/3N8qafF7gO3xH3olrplbrlb4Va6VW61W/Nfva5wm9xmt8XtcR+7bW672+F2ul1u98/xpfPY5z51+91n7oj7yh10n7tD7pg77L78Ob50fsfcN+64+9adcCfdKfedO+2+d2fc2Z/P/9K5f+d+chddcMDIijUbjjgNp+UUTsfp+SrOwFdzRr6GE3wtZ+LrODNfz1k4K2fj7JyDc3IutkzsmDnm3JyHk3wD5+UbOR/n5wJckD0X4sJ8Exfhm7ko38LF+FYuzrdxCS7Jpbg0385l+A4uy+W4PN/JFbgiV+LKfBdX4bu5Kt/D1fhers73cQ2+n2vyA1yLH+Ta/BDX4Ye5Lj/C9bg+N+CG3Igf5cb8GDfhptyMH+fm/AS34Ce5JT/Frfhpbs3PcBt+ltvyc9yOn+f23IE78gvciV/kztyFu3I37s4vcQ/uyb24N/fhl7kvv8L9+FXuzwN4IL/Gg/h1Hsxv8BAeysP4TR7OI3gkj+LRPIbH8ls8jt/m8fwOT+CJPIkn8xSeytP4XZ7OM3gmv8ezeDbP4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4TH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPEaeOUOF2cPr4qzhBfHWeMr4kT8bVxpvi6OHN8fZwlzhpni7PHOeKcca7YxhS7mOM4zh3niZPxDXHe+MY4X5w/LhAXjH1cKC4c3xQXiW+Oi8a3xMXiW+Pi8W1xibhk/PC9pePb4zLxHXHZuFxcPr4zrhBXjCvFleO74irx3XHV+J64WnxvXDS+L64R3x/XjB+Ia8UPxrXjh+I68cNx3fiRuF5cP24QN4wbxY/GjePH0v3yYhM3j5+IW8RPxi3jp+JW8dO/Ho+bxE3jZvHjvzneNe4Wd49fil+KQ7hHz0vOTy5Ivp9cmFyUXJz8ILkk+WFyaXJZcnlyRXJlclVydXJNcm1yXXJ9ckNyY3JTcnNySzKEymnBo1dee+Mjn8an9Sk+nU/vr/IZ/NU+o7/GJ/y1PpO/zmf21/ssPqvP5rP7HD6nz+WtJ+88+9jn9nl80t/g8/obfT6f3xfwBb33hXxh39A38o18Y/+Yb+Kb+mb+cf+4f8I/4Z/0T/qnfCv/tG/tn/Ft/LO+rX/OP+ef9+19B9/Rv+A7+Rd9Z9/Fd/VdfXff3ffwPXwv38v38X18SAvQz/fz/X1/P9AP9IP8ID/YD/ZD/BA/zA/zw/1wP9KP9KP9aD/Wj/Xj/Dg/3o/3E/wEP8lP8lP8FD/NT/PT/XQ/08/0s/LN8nP8HD/Pz/ML/AK/0C/0i1MW+yV+iV/ql/rlfrlf6Vf61X61X+vX+vV+vd/oN/rNfrPf6rf6bX6b3+F3+F1+l9/j9/i9fq/f5/f5/X6/P+AP+IP+oD/kv/CH/Zf+iP/KH/Vf+2P+G3/cf+tP+JP+lP/On/bf+zP+rD/nf/Dn/Y/+gv/JX/TBj028lRiXeDsxPvFOYkJiYmJSYnJiSmJqYlri3cT0xIzEzMR7iVmJ2Yk5ibmJeYn5iQWJ9xMLE4sSixMfJJYkPkwsTSxLLE+sSKxMrEqEkHNbHHKHPCEZbgh5w40hX8gfCoSCwYdCoXC4KRQJN4ei4ZZQLNwaiofbQolQMpQKj4R6oX5oEBqGRuHR0Dg8FpqEpqFZeDw0D0+EFuHJ0DI8FVqFp0Pr8ExoE54NbcNzoV14PrQPHULH8ELoFF4MnUOX0DV0C93DS6FH6Bl6hd6hT3g59A2vhH7h1dA/DAgDw2thUHg9DA5vhCFhaBgW3gzDw4gwMowKo8OYMDa8FcaFt8P48E6YECaGSWFymBKmhmnh3TA9zAgzw3thVpgd5oS5YV6YHxaE98PCsCgsDh+EJeHDsDQsC8vDirAyrAqrw5qwNqwL68OGsDFsCpvDlrA1fBS2he1hR9gZdoXdYU/4OOwNn4R94dOwP3wWDoQ/hYPh83AofBEOhy/DkfBVOBq+DsfCN+F4+DacCCfDqfBdOB2+D2fC2XAu/BDOhx/DhfBTuCh/syaEEEII8Q/Rv3O829/5nvplXdIdAK7env3w39bcmOXP+54qR/MEADzVpd2Dv64KFbp27frLY5dqiPLMBYDE5fw0cDleBs3gCWgJTaHI3+2vp+pwnn+nfvJWgPT/1TlACvwa/2X9m/+b+o8+Pmxh8fhcpv+h/lyAfHku51y66Pw1vly/6H9TP2vj3+k/3edjAZr8RU4GuBxfrl8YHoOnoeVfPVIIIYQQQgghhPiznqpUm9+7fr50fZ7DXM5JC5fj37s+F0IIIYQQQgghxJX3bIeOTz7asmXTNv+fbwDg51sWf5R+/tlNml/m8UfpRzb/C5vEH6ONv7+5sq9LQgghhBBCiH+/yx/6r3QnQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE6vW/8e/ErvQ5CiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEFfa/wkAAP//QT0vHQ==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_submit(0x0, 0x1, &(0x7f0000003400)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x40000, 0x0, 0x2}])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_pts(0xffffffffffffffff, 0x602)
ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f0000000600))
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010028bd700009b945bf7be3cb6f2d370d8f0000000b0000000800040001feffff080004000800000005000500f91000001400018008000300ac1414aa060001000a0000000800420004000000050005000a000000140001800500020002000000080006000c0000001400068008000700", @ANYRES32, @ANYBLOB="060001000200000005000500080000000800020007000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
sendto$packet(r5, &(0x7f0000000080)="8f0bd70b7a9db07a5c10ce74f5a5eac06fb52bbf998fc0e276c3d793f57bc2d45605ce61ffdbf9034461f0279ff82c79688a5b9805a29af4e8828212cc3941a8a4ab0ba07d3e727ef2cf228e5e1db5e243c2e7dc02dfeb4ed7dceca07aedb74aea6397e9809b6c5d8ec3ccbf4adf858b51d5b636b294b38926a9249ff69e2479306c1bc1f7f74a0739ab386cfc1a19fd99a3a2a1aab8354d71ff9aeecfe0de6738f356338c0864eaceeae907e3ec9ad539aa7b40ec49109f8abe8d80966543370566db01d5f0924b64275138d85ff9d0bb9d954360ab5b6da2a82d5cf03eec", 0xdf, 0x4068041, 0x0, 0x0)

14.552549003s ago: executing program 34 (id=207):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x1525, &(0x7f0000001580)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_submit(0x0, 0x1, &(0x7f0000003400)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x40000, 0x0, 0x2}])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_pts(0xffffffffffffffff, 0x602)
ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f0000000600))
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010028bd700009b945bf7be3cb6f2d370d8f0000000b0000000800040001feffff080004000800000005000500f91000001400018008000300ac1414aa060001000a0000000800420004000000050005000a000000140001800500020002000000080006000c0000001400068008000700", @ANYRES32, @ANYBLOB="060001000200000005000500080000000800020007000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
sendto$packet(r5, &(0x7f0000000080)="8f0bd70b7a9db07a5c10ce74f5a5eac06fb52bbf998fc0e276c3d793f57bc2d45605ce61ffdbf9034461f0279ff82c79688a5b9805a29af4e8828212cc3941a8a4ab0ba07d3e727ef2cf228e5e1db5e243c2e7dc02dfeb4ed7dceca07aedb74aea6397e9809b6c5d8ec3ccbf4adf858b51d5b636b294b38926a9249ff69e2479306c1bc1f7f74a0739ab386cfc1a19fd99a3a2a1aab8354d71ff9aeecfe0de6738f356338c0864eaceeae907e3ec9ad539aa7b40ec49109f8abe8d80966543370566db01d5f0924b64275138d85ff9d0bb9d954360ab5b6da2a82d5cf03eec", 0xdf, 0x4068041, 0x0, 0x0)

3.369283489s ago: executing program 4 (id=282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x0, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)

3.361563579s ago: executing program 4 (id=283):
r0 = socket$inet6(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4089, &(0x7f0000000040)=0xff9)

3.29538686s ago: executing program 4 (id=284):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf2509000000050008000100000008000100010000000500070000000300226e"], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800)

3.209576593s ago: executing program 4 (id=286):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, r1, 0x3)
r2 = syz_pidfd_open(r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setns(r2, 0x24020000)
syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0)

3.180879443s ago: executing program 3 (id=288):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x65)

3.049313326s ago: executing program 4 (id=289):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file2\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x970840, 0x6ab858183a7ef7d3)
finit_module(r0, 0xfffffffffffffffe, 0x1)

3.046908316s ago: executing program 3 (id=290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

3.013393617s ago: executing program 7 (id=291):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,utf8,iocharset=maccyrillic,errors=continue,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030352c00c7c2461c47ee7b8442c02150e1250ae9ab006b259afeb87ea44bb8594f8d1c4d6bd50fae0177ee0311e746c321089031ea651fcab7ac08560ce3ba062aaac396aca85cd71ef5577063874db803025bf903a1ef39a78abacc397c3349"], 0x1, 0x1535, &(0x7f0000001380)="$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")
lsetxattr$security_evm(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0)

2.934885618s ago: executing program 3 (id=292):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.892621109s ago: executing program 4 (id=293):
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file0\x00', 0x9, &(0x7f0000000040)=ANY=[], 0x1, 0x10586, &(0x7f0000010600)="$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")

2.892490249s ago: executing program 0 (id=294):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100), 0xfd, 0x4ae, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

2.681524824s ago: executing program 2 (id=296):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000054c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x100000000, 0x3a, 'uid>', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x4f]}, 0x3a)

2.666224233s ago: executing program 7 (id=297):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x44}}, 0x0)

2.568846595s ago: executing program 2 (id=298):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
sendmsg$nl_route(r0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r6=>0x0})
sendmsg$NFT_BATCH(r0, 0x0, 0x84001)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000010001b6f00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

2.425594429s ago: executing program 0 (id=299):
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
recvmsg$unix(0xffffffffffffffff, 0x0, 0x20)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)

2.37737793s ago: executing program 7 (id=300):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
prlimit64(r0, 0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x207, &(0x7f0000000c40)="$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")
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260)
pread64(0xffffffffffffffff, &(0x7f0000032400)=""/102357, 0x18fd5, 0x1c29)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffff"], 0x48)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fffb59c00"/20, @ANYRES32=0x0, @ANYBLOB="63100400000000002800128008000100736974001c00028008000300e00000010600080005000000080002007f000001"], 0x48}, 0x1, 0x0, 0x0, 0x9000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

2.304248711s ago: executing program 0 (id=301):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c)
syz_emit_ethernet(0x34, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x0, @val=0x80}, "a17e"}}}}}}, 0x0)

2.229534343s ago: executing program 2 (id=302):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b1393fa7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb2", 0xc5}], 0x1}}], 0x1, 0x42054)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000002c0)="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", 0xffffffffffffffe1, 0x4040014, 0x0, 0x0)

2.199979863s ago: executing program 0 (id=303):
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

1.989229828s ago: executing program 3 (id=304):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)

1.725515254s ago: executing program 0 (id=305):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000002480)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r3=>0x0)
clock_gettime(0x0, &(0x7f00000000c0))
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
fcntl$getown(r4, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1.508960058s ago: executing program 7 (id=306):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
setuid(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000340), 0x3ff, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000007c0), 0x7, r0}, 0x38)

591.435457ms ago: executing program 3 (id=307):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbf0, &(0x7f0000002c00)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000a00)="25913147647f25d2154a8402e25557d462681756774824a78de6743c", 0x1c}], 0x2}}], 0x3, 0x42044)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, 0x0, 0x0, 0x10008095, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

537.303859ms ago: executing program 2 (id=308):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0xde74, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)

429.068641ms ago: executing program 7 (id=309):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c850)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20016}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

391.771371ms ago: executing program 2 (id=310):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0xc5edd497cbf5f59e, '\x00', @a})

309.344873ms ago: executing program 7 (id=311):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000340)={[{@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_mixed}, {@uni_xlate}, {@fat=@uid}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}, {@utf8no}]}, 0x2a, 0x356, &(0x7f0000000780)="$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")
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)

60.292648ms ago: executing program 0 (id=312):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

52.089309ms ago: executing program 2 (id=313):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0xfffffffc, 0x4)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

0s ago: executing program 3 (id=314):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

kernel console output (not intermixed with test programs):

g journal
[   27.378691][  T359] loop3: detected capacity change from 0 to 1024
[   27.513262][  T359] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   27.879955][  T359] EXT4-fs (loop3): barriers disabled
[   27.905637][  T359] JBD2: no valid journal superblock found
[   27.925844][  T359] EXT4-fs (loop3): error loading journal
[   28.749138][    C0] sched: RT throttling activated
[   28.772914][  T369] binder: 368:369 ioctl 40046205 0 returned -22
[   28.821119][  T370] loop0: detected capacity change from 0 to 256
[   28.971885][  T370] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   29.212558][  T373] binder: 372:373 ioctl 40046205 0 returned -22
[   29.221739][  T376] loop1: detected capacity change from 0 to 128
[   29.301325][  T377] loop3: detected capacity change from 0 to 256
[   29.393150][  T379] loop0: detected capacity change from 0 to 1024
[   29.404391][  T377] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   29.460696][  T379] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   29.483863][  T379] EXT4-fs (loop0): barriers disabled
[   29.489345][  T379] JBD2: no valid journal superblock found
[   29.498638][  T379] EXT4-fs (loop0): error loading journal
[   29.545359][  T383] loop4: detected capacity change from 0 to 1024
[   29.640661][  T383] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   29.663994][  T383] EXT4-fs (loop4): barriers disabled
[   29.669384][  T383] JBD2: no valid journal superblock found
[   29.675274][  T383] EXT4-fs (loop4): error loading journal
[   29.775843][  T388] loop2: detected capacity change from 0 to 128
[   29.804106][  T390] ------------[ cut here ]------------
[   29.809696][  T390] WARNING: CPU: 1 PID: 390 at mm/page_alloc.c:5799 __alloc_pages+0x392/0x460
[   29.818595][  T390] Modules linked in:
[   29.822621][  T390] CPU: 1 PID: 390 Comm: syz.3.22 Not tainted syzkaller #0
[   29.829812][  T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   29.839988][  T390] RIP: 0010:__alloc_pages+0x392/0x460
[   29.845463][  T390] Code: ff e8 82 7d 09 03 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 41 89 ff 4c 89 e7 e8 a6 cb 04 00 44 89 ff e9 59 fd ff ff <0f> 0b e9 16 ff ff ff 65 8b 05 a8 c0 5d 7e 89 44 24 08 c1 e8 06 48
[   29.865187][  T390] RSP: 0018:ffffc90000c978e0 EFLAGS: 00010246
[   29.871409][  T390] RAX: ffffc90000c97940 RBX: 0000000000000020 RCX: 0000000000000000
[   29.879475][  T390] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000c97958
[   29.887534][  T390] RBP: ffffc90000c979c8 R08: ffffc90000c97957 R09: ffffc90000c97940
[   29.895618][  T390] R10: dffffc0000000000 R11: fffff52000192f2b R12: ffffc90000c97920
[   29.903683][  T390] R13: dffffc0000000000 R14: 1ffff92000192f20 R15: 0000000000000000
[   29.911753][  T390] FS:  00007f8f52a966c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   29.920767][  T390] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   29.927436][  T390] CR2: 0000001b2ed1dff8 CR3: 000000012b25d000 CR4: 00000000003506a0
[   29.935523][  T390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   29.943597][  T390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   29.951667][  T390] Call Trace:
[   29.955016][  T390]  <TASK>
[   29.958045][  T390]  ? prep_new_page+0x110/0x110
[   29.962905][  T390]  ? __kasan_check_read+0x11/0x20
[   29.968028][  T390]  ? __kasan_check_read+0x11/0x20
[   29.973144][  T390]  ? preempt_schedule_irq+0xca/0x120
[   29.978521][  T390]  ? __cond_resched+0xd0/0xd0
[   29.983305][  T390]  kmalloc_order+0x4c/0x160
[   29.987922][  T390]  kmalloc_order_trace+0x18/0xb0
[   29.992981][  T390]  __kmalloc+0x199/0x2c0
[   29.997360][  T390]  incfs_realloc_mount_info+0x99/0x420
[   30.002944][  T390]  incfs_alloc_mount_info+0x476/0x540
[   30.008558][  T390]  incfs_mount_fs+0x3c6/0x890
[   30.013369][  T390]  ? incfs_unlink+0x90/0x90
[   30.017991][  T390]  legacy_get_tree+0xed/0x190
[   30.022750][  T390]  ? incfs_unlink+0x90/0x90
[   30.027353][  T390]  vfs_get_tree+0x89/0x260
[   30.031869][  T390]  do_new_mount+0x251/0xb40
[   30.036452][  T390]  ? security_capable+0x87/0xb0
[   30.041403][  T390]  path_mount+0x640/0xff0
[   30.045855][  T390]  __se_sys_mount+0x320/0x390
[   30.050635][  T390]  ? __x64_sys_mount+0xd0/0xd0
[   30.055486][  T390]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   30.061238][  T390]  __x64_sys_mount+0xbf/0xd0
[   30.065959][  T390]  x64_sys_call+0x6bf/0x9a0
[   30.070596][  T390]  do_syscall_64+0x4c/0xa0
[   30.075095][  T390]  ? clear_bhb_loop+0x50/0xa0
[   30.079860][  T390]  ? clear_bhb_loop+0x50/0xa0
[   30.084623][  T390]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   30.090617][  T390] RIP: 0033:0x7f8f5405ce59
[   30.095129][  T390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   30.114825][  T390] RSP: 002b:00007f8f52a96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   30.123419][  T390] RAX: ffffffffffffffda RBX: 00007f8f542d6090 RCX: 00007f8f5405ce59
[   30.131506][  T390] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000200000000040
[   30.139577][  T390] RBP: 00007f8f540f2e6f R08: 0000200000000100 R09: 0000000000000000
[   30.147652][  T390] R10: 0000000000200c04 R11: 0000000000000246 R12: 0000000000000000
[   30.155726][  T390] R13: 00007f8f542d6128 R14: 00007f8f542d6090 R15: 00007ffd23292708
[   30.163818][  T390]  </TASK>
[   30.166927][  T390] ---[ end trace 60b765e242051581 ]---
[   30.172567][  T390] incfs: Error allocating mount info. -12
[   30.178587][  T390] incfs: mount failed -12
[   30.699777][  T388] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   30.714407][  T388] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   30.730017][   T30] kauditd_printk_skb: 20 callbacks suppressed
[   30.730029][   T30] audit: type=1400 audit(1782809051.109:147): avc:  denied  { sys_module } for  pid=380 comm="syz.2.20" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   30.766994][   T30] audit: type=1400 audit(1782809051.109:148): avc:  denied  { module_load } for  pid=380 comm="syz.2.20" path="/1/bus/bus" dev="loop2" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1
[   30.833845][  T388] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   30.841453][  T388] FAT-fs (loop2): Filesystem has been set read-only
[   30.848387][  T392] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   30.871278][  T394] binder: 393:394 ioctl 40046205 0 returned -22
[   30.915039][   T30] audit: type=1400 audit(1782809051.139:149): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   30.995281][   T30] audit: type=1400 audit(1782809051.359:150): avc:  denied  { create } for  pid=397 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.001430][  T396] binder: 395:396 ioctl 40046205 0 returned -22
[   31.020557][  T400] loop3: detected capacity change from 0 to 256
[   31.027786][   T30] audit: type=1400 audit(1782809051.359:151): avc:  denied  { write } for  pid=397 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.047173][  T402] loop1: detected capacity change from 0 to 128
[   31.050588][   T30] audit: type=1400 audit(1782809051.359:152): avc:  denied  { nlmsg_write } for  pid=397 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.148287][  T396] loop0: detected capacity change from 0 to 256
[   31.159537][  T402] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   31.191135][  T402] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   31.609886][  T400] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   31.632911][   T30] audit: type=1400 audit(1782809052.009:153): avc:  denied  { write } for  pid=401 comm="syz.1.26" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   31.666652][  T396] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   31.757723][   T30] audit: type=1400 audit(1782809052.059:154): avc:  denied  { add_name } for  pid=401 comm="syz.1.26" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   31.869530][   T30] audit: type=1400 audit(1782809052.059:155): avc:  denied  { create } for  pid=401 comm="syz.1.26" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   32.048321][  T413] loop4: detected capacity change from 0 to 1024
[   32.093821][  T413] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   32.111269][  T413] EXT4-fs (loop4): barriers disabled
[   32.116744][  T413] JBD2: no valid journal superblock found
[   32.116867][  T415] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   32.123012][  T413] EXT4-fs (loop4): error loading journal
[   32.150750][  T415] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   32.195940][   T30] audit: type=1400 audit(1782809052.569:156): avc:  denied  { prog_run } for  pid=418 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.234297][  T422] binder: 421:422 ioctl 40046205 0 returned -22
[   32.569087][  T424] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   33.509306][  T430] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   33.530833][  T430] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.31: bg 0: block 104: invalid block bitmap
[   33.553340][  T430] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   33.579511][  T430] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.31: invalid indirect mapped block 1 (level 1)
[   33.602961][  T430] EXT4-fs (loop3): 1 truncate cleaned up
[   33.608644][  T430] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   33.708845][  T430] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.31: Logical block already allocated
[   33.753077][  T436] binder: 435:436 ioctl 40046205 0 returned -22
[   33.780437][  T436] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   33.874950][  T439] attempt to access beyond end of device
[   33.874950][  T439] loop1: rw=2049, want=1041, limit=128
[   33.897182][  T441] binder: 440:441 ioctl 40046205 0 returned -22
[   33.928546][  T445] set_capacity_and_notify: 5 callbacks suppressed
[   33.928574][  T445] loop4: detected capacity change from 0 to 4096
[   33.957564][  T445] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   33.994883][  T447] loop3: detected capacity change from 0 to 256
[   34.008630][  T445] =======================================================
[   34.008630][  T445] WARNING: The mand mount option has been deprecated and
[   34.008630][  T445]          and is ignored by this kernel. Remove the mand
[   34.008630][  T445]          option from the mount to silence this warning.
[   34.008630][  T445] =======================================================
[   34.056818][  T445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'.
[   34.071275][  T447] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   34.230007][  T288] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   34.304212][  T449] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   34.320599][  T454] loop2: detected capacity change from 0 to 256
[   34.338114][  T449] 9pnet: Insufficient options for proto=fd
[   34.373674][  T454] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   34.403714][  T445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36'.
[   34.422816][  T445] netlink: 32 bytes leftover after parsing attributes in process `syz.4.36'.
[   34.438502][  T458] loop3: detected capacity change from 0 to 2048
[   34.446531][  T459] binder: 455:459 ioctl c0306201 200000000300 returned -14
[   34.465359][  T445] syz.4.36 (445) used greatest stack depth: 18048 bytes left
[   34.480810][  T458] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[   34.504792][  T454] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   34.515141][  T454] FAT-fs (loop2): Filesystem has been set read-only
[   34.521850][  T454] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   34.541587][  T458] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   34.559256][  T458] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28
[   34.596873][  T458] EXT4-fs (loop3): This should not happen!! Data will be lost
[   34.596873][  T458] 
[   34.609567][  T454] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[   34.617588][  T458] EXT4-fs (loop3): Total free blocks count 0
[   34.638729][  T466] loop1: detected capacity change from 0 to 1024
[   34.645489][  T458] EXT4-fs (loop3): Free/Dirty block details
[   34.663544][  T466] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   34.673870][  T458] EXT4-fs (loop3): free_blocks=2415919504
[   34.679844][  T458] EXT4-fs (loop3): dirty_blocks=16
[   34.685970][  T466] EXT4-fs (loop1): barriers disabled
[   34.691494][  T458] EXT4-fs (loop3): Block reservation details
[   34.697891][  T466] JBD2: no valid journal superblock found
[   34.703997][  T458] EXT4-fs (loop3): i_reserved_data_blocks=1
[   34.710251][  T466] EXT4-fs (loop1): error loading journal
[   34.726806][  T323] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   34.739538][  T323] EXT4-fs (loop3): This should not happen!! Data will be lost
[   34.739538][  T323] 
[   34.778929][  T464] loop4: detected capacity change from 0 to 40427
[   34.808876][  T470] loop3: detected capacity change from 0 to 128
[   34.831662][  T464] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   34.844408][  T464] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   34.877438][  T464] F2FS-fs (loop4): invalid crc value
[   34.890381][  T470] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   34.912470][  T470] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   34.944946][  T464] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   34.978087][  T464] F2FS-fs (loop4): Start checkpoint disabled!
[   34.986149][  T464] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   34.993703][  T464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   35.878897][  T477] loop0: detected capacity change from 0 to 1024
[   35.896114][   T30] kauditd_printk_skb: 39 callbacks suppressed
[   35.896130][   T30] audit: type=1400 audit(1782809056.269:196): avc:  denied  { write open } for  pid=463 comm="syz.4.42" path="/9/file0/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   35.959915][  T477] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   35.990183][  T323] attempt to access beyond end of device
[   35.990183][  T323] loop4: rw=2049, want=45112, limit=40427
[   36.002172][  T477] EXT4-fs (loop0): barriers disabled
[   36.007492][  T477] JBD2: no valid journal superblock found
[   36.016179][   T30] audit: type=1400 audit(1782809056.299:197): avc:  denied  { ioctl } for  pid=463 comm="syz.4.42" path="/9/file0/file0" dev="loop4" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   36.059203][  T477] EXT4-fs (loop0): error loading journal
[   36.135352][  T479] loop1: detected capacity change from 0 to 1024
[   36.166821][   T30] audit: type=1400 audit(1782809056.539:198): avc:  denied  { write } for  pid=480 comm="syz.3.48" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   36.189191][   T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   36.203793][   T30] audit: type=1400 audit(1782809056.579:199): avc:  denied  { unlink } for  pid=482 comm="syz.4.47" name="#4" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   36.225797][   T30] audit: type=1400 audit(1782809056.579:200): avc:  denied  { remount } for  pid=482 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   36.273625][  T481] mmap: syz.3.48 (481) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   36.337973][  T479] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   36.352560][  T479] EXT4-fs (loop1): barriers disabled
[   36.357890][  T479] JBD2: no valid journal superblock found
[   36.364541][  T479] EXT4-fs (loop1): error loading journal
[   37.742643][  T355] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   37.773907][  T481] loop3: detected capacity change from 0 to 40427
[   38.697474][  T494] binder: 493:494 ioctl 40046205 0 returned -22
[   38.777477][  T494] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   38.829226][  T355] usb 5-1: device descriptor read/64, error -71
[   38.829227][   T20] usb 3-1: unable to read config index 0 descriptor/start: -71
[   38.829254][   T20] usb 3-1: can't read configurations, error -71
[   38.924524][   T30] audit: type=1400 audit(1782809059.299:201): avc:  denied  { mounton } for  pid=500 comm="syz.1.53" path="/10/file1/bus" dev="loop1" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   38.989201][  T501] set_capacity_and_notify: 3 callbacks suppressed
[   38.989220][  T501] loop1: detected capacity change from 128 to 0
[   39.015752][   T30] audit: type=1400 audit(1782809059.389:202): avc:  denied  { remount } for  pid=500 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   39.035936][    C0] blk_update_request: I/O error, dev loop1, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   39.046972][  T505] FAT-fs (loop1): unable to read inode block for updating (i_pos 546)
[   39.058110][  T504] attempt to access beyond end of device
[   39.058110][  T504] loop2: rw=2049, want=1041, limit=128
[   39.071628][  T323] loop: Write error at byte offset 9223372036854805503, length 1536.
[   39.084090][    C1] blk_update_request: I/O error, dev loop1, sector 58 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   39.099141][    C1] blk_update_request: I/O error, dev loop1, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   39.110193][  T501] FAT-fs (loop1): unable to read inode block for updating (i_pos 546)
[   39.152789][    C0] blk_update_request: I/O error, dev loop1, sector 66 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   39.168584][    C0] blk_update_request: I/O error, dev loop1, sector 67 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   39.180052][    C0] blk_update_request: I/O error, dev loop1, sector 68 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   39.191384][    C0] blk_update_request: I/O error, dev loop1, sector 69 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   39.202724][    C0] blk_update_request: I/O error, dev loop1, sector 70 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   39.214049][    C0] blk_update_request: I/O error, dev loop1, sector 71 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   39.225389][    C0] blk_update_request: I/O error, dev loop1, sector 72 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   39.243287][  T287] FAT-fs (loop1): Directory bread(block 66) failed
[   39.263668][  T508] loop0: detected capacity change from 0 to 1024
[   39.270160][  T287] FAT-fs (loop1): Directory bread(block 67) failed
[   39.271425][   T30] audit: type=1400 audit(1782809059.649:203): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.276886][  T287] FAT-fs (loop1): Directory bread(block 68) failed
[   39.296181][  T355] usb 5-1: device descriptor read/64, error -71
[   39.317160][  T508] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   39.331303][  T510] loop4: detected capacity change from 0 to 1024
[   39.344621][  T508] EXT4-fs (loop0): barriers disabled
[   39.350234][  T287] FAT-fs (loop1): Directory bread(block 69) failed
[   39.356956][  T287] FAT-fs (loop1): Directory bread(block 70) failed
[   39.365197][  T508] JBD2: no valid journal superblock found
[   39.371346][  T508] EXT4-fs (loop0): error loading journal
[   39.379382][  T287] FAT-fs (loop1): Directory bread(block 71) failed
[   39.386883][  T510] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   39.396837][  T287] FAT-fs (loop1): Directory bread(block 72) failed
[   39.409390][  T287] FAT-fs (loop1): Directory bread(block 73) failed
[   39.417080][  T287] FAT-fs (loop1): Directory bread(block 74) failed
[   39.420663][  T510] EXT4-fs (loop4): barriers disabled
[   39.433503][  T287] FAT-fs (loop1): Directory bread(block 75) failed
[   39.440166][  T510] JBD2: no valid journal superblock found
[   39.445911][  T510] EXT4-fs (loop4): error loading journal
[   39.521129][  T512] loop3: detected capacity change from 0 to 1024
[   39.539275][  T287] FAT-fs (loop1): unable to read boot sector to mark fs as dirty
[   39.577901][  T515] loop2: detected capacity change from 0 to 512
[   39.584290][  T512] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   39.595071][  T512] EXT4-fs (loop3): barriers disabled
[   40.027472][  T512] JBD2: no valid journal superblock found
[   40.759859][  T515] EXT4-fs (loop2): Test dummy encryption mode enabled
[   40.760942][  T512] EXT4-fs (loop3): error loading journal
[   40.774482][  T515] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.58: inode has both inline data and extents flags
[   40.787664][  T515] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.58: couldn't read orphan inode 15 (err -117)
[   41.104750][  T515] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   41.663379][   T30] audit: type=1400 audit(1782809062.039:204): avc:  denied  { mount } for  pid=514 comm="syz.2.58" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.312253][  T515] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   42.323305][  T528] tap0: tun_chr_ioctl cmd 1074025675
[   42.328761][  T528] tap0: persist enabled
[   42.359573][  T528] tap0: tun_chr_ioctl cmd 1074025675
[   42.377603][   T30] audit: type=1400 audit(1782809062.729:205): avc:  denied  { read append } for  pid=514 comm="syz.2.58" path="/7/file1/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.405539][  T528] tap0: persist disabled
[   42.489177][   T30] audit: type=1400 audit(1782809062.799:206): avc:  denied  { map } for  pid=514 comm="syz.2.58" path="/7/file1/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.585859][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   42.600453][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   42.610623][   T30] audit: type=1400 audit(1782809062.929:207): avc:  denied  { mounton } for  pid=537 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   42.656016][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   42.672551][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   42.689185][   T30] audit: type=1400 audit(1782809062.979:208): avc:  denied  { create } for  pid=532 comm="syz.4.62" dev="anon_inodefs" ino=16199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   42.713697][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   42.729490][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   42.737972][   T30] audit: type=1400 audit(1782809063.019:209): avc:  denied  { create } for  pid=532 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   42.767116][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   42.768489][  T535] loop4: detected capacity change from 0 to 32768
[   42.776462][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   42.782137][   T30] audit: type=1400 audit(1782809063.029:210): avc:  denied  { setopt } for  pid=532 comm="syz.4.62" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   42.809909][   T30] audit: type=1400 audit(1782809063.029:211): avc:  denied  { ioctl } for  pid=532 comm="syz.4.62" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16199 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   42.835782][   T30] audit: type=1400 audit(1782809063.139:212): avc:  denied  { map } for  pid=542 comm="syz.3.64" path="socket:[16208]" dev="sockfs" ino=16208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   42.859882][  T315]  loop4: p1 < > p3 < p5 >
[   42.874219][  T535]  loop4: p1 < > p3 < p5 >
[   42.900272][    T8] device bridge_slave_1 left promiscuous mode
[   42.909018][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.918531][    T8] device bridge_slave_0 left promiscuous mode
[   42.924811][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.933226][    T8] device veth1_macvtap left promiscuous mode
[   42.939591][    T8] device veth0_vlan left promiscuous mode
[   42.949075][   T30] audit: type=1400 audit(1782809063.319:213): avc:  denied  { mount } for  pid=544 comm="syz.2.65" name="/" dev="configfs" ino=14552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   43.039180][  T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   43.063266][  T537] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.070429][  T537] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.077895][  T537] device bridge_slave_0 entered promiscuous mode
[   43.085121][  T537] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.092491][  T537] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.100401][  T537] device bridge_slave_1 entered promiscuous mode
[   43.128429][  T550] binder: 549:550 ioctl 40046205 0 returned -22
[   43.155204][  T537] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.162251][  T537] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.169657][  T537] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.176686][  T537] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.188046][  T552] loop0: detected capacity change from 0 to 256
[   43.203286][  T552] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   43.226844][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.239652][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.249273][  T525] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   43.263387][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.279231][  T310] usb 4-1: Using ep0 maxpacket: 32
[   43.305546][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.313944][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.321017][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.328674][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.336903][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.343976][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.367705][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.375812][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.391009][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.399317][  T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.410321][  T310] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   43.419537][  T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.428840][  T310] usb 4-1: config 0 descriptor??
[   43.435947][  T537] device veth0_vlan entered promiscuous mode
[   43.444408][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.457424][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.465355][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.470758][  T310] hub 4-1:0.0: USB hub found
[   43.483786][  T537] device veth1_macvtap entered promiscuous mode
[   43.489446][  T525] usb 3-1: Using ep0 maxpacket: 16
[   43.491071][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   43.503610][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.512213][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   43.523483][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   43.532289][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.550911][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   43.559386][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.600343][  T558] loop0: detected capacity change from 0 to 512
[   43.607525][  T558] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   43.618172][  T525] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[   43.626341][  T525] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   43.629394][  T340] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   43.638239][  T525] usb 3-1: config 0 has no interface number 0
[   43.654763][  T558] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   43.668170][  T525] usb 3-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[   43.679494][  T525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.685655][  T558] EXT4-fs (loop0): 1 truncate cleaned up
[   43.694300][  T310] hub 4-1:0.0: 1 port detected
[   43.695141][  T558] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[   43.700667][  T525] usb 3-1: config 0 descriptor??
[   43.728319][  T561] loop5: detected capacity change from 0 to 128
[   43.759505][  T558] x_tables: duplicate underflow at hook 2
[   43.760798][  T525] uvcvideo 3-1:0.64: Found Unit with invalid ID 0
[   43.788855][  T525] usb 3-1: Found UVC 0.00 device <unnamed> (0bd3:05f4)
[   43.796104][  T525] usb 3-1: No valid video chain found.
[   43.829876][  T561] attempt to access beyond end of device
[   43.829876][  T561] loop5: rw=2049, want=1041, limit=128
[   43.929251][  T340] usb 5-1: Using ep0 maxpacket: 32
[   44.069205][  T340] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   44.079725][  T340] usb 5-1: config 0 has no interface number 0
[   44.085966][  T340] usb 5-1: config 0 interface 184 has no altsetting 0
[   44.096186][  T564] loop0: detected capacity change from 0 to 1024
[   44.131446][  T564] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   44.144161][  T564] EXT4-fs (loop0): barriers disabled
[   44.152134][  T564] JBD2: no valid journal superblock found
[   44.167872][  T564] EXT4-fs (loop0): error loading journal
[   44.249287][  T340] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   44.258642][  T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.267432][  T340] usb 5-1: Product: syz
[   44.272825][  T340] usb 5-1: Manufacturer: syz
[   44.277644][  T340] usb 5-1: SerialNumber: syz
[   44.287759][  T340] usb 5-1: config 0 descriptor??
[   46.718033][   T60] usb 3-1: USB disconnect, device number 4
[   46.748863][  T570] loop0: detected capacity change from 0 to 128
[   46.789146][    C1] raw-gadget.0 gadget: ignoring, device is not running
[   46.791556][  T340] usb 5-1: can't set config #0, error -71
[   46.809246][  T310] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[   46.827975][  T340] usb 5-1: USB disconnect, device number 4
[   46.856964][  T576] loop3: detected capacity change from 0 to 512
[   46.859452][  T310] usb 4-1: Failed to suspend device, error -71
[   46.872172][  T570] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   46.882745][  T581] binder: 580:581 ioctl 40046205 0 returned -22
[   46.895934][  T579] loop5: detected capacity change from 0 to 256
[   46.903111][   T30] audit: type=1400 audit(1782809067.279:214): avc:  denied  { mounton } for  pid=575 comm="syz.3.74" path="/14/file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   46.925618][  T570] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   46.936677][  T576] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.951435][   T60] usb 4-1: USB disconnect, device number 4
[   46.969417][  T587] loop4: detected capacity change from 0 to 256
[   46.986915][  T579] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   47.006086][  T587] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   47.030017][  T576] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.74: Allocating blocks 41-42 which overlap fs metadata
[   47.077550][  T576] Quota error (device loop3): write_blk: dquota write failed
[   47.085741][  T576] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[   47.095402][  T576] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.74: Allocating blocks 41-42 which overlap fs metadata
[   47.109674][  T576] Quota error (device loop3): write_blk: dquota write failed
[   47.118734][  T576] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   47.129397][  T576] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.74: Failed to acquire dquot type 1
[   47.141587][  T576] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   47.156773][  T576] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #12: comm syz.3.74: corrupted inode contents
[   47.195476][  T576] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #12: comm syz.3.74: mark_inode_dirty error
[   47.208325][  T576] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #12: comm syz.3.74: corrupted inode contents
[   47.248539][  T576] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.74: mark_inode_dirty error
[   47.264452][  T592] loop4: detected capacity change from 0 to 1024
[   47.273212][  T576] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #12: comm syz.3.74: corrupted inode contents
[   47.298974][  T576] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   47.319853][  T576] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #12: comm syz.3.74: corrupted inode contents
[   47.333328][  T592] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   47.343596][  T576] EXT4-fs error (device loop3): ext4_truncate:4317: inode #12: comm syz.3.74: mark_inode_dirty error
[   47.356636][  T592] EXT4-fs (loop4): barriers disabled
[   47.362363][  T576] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   47.371835][  T592] JBD2: no valid journal superblock found
[   47.377795][  T592] EXT4-fs (loop4): error loading journal
[   47.384272][  T576] EXT4-fs (loop3): 1 truncate cleaned up
[   47.390051][  T576] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback.
[   47.510563][  T576] loop3: detected capacity change from 0 to 256
[   47.554725][  T595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.77'.
[   47.563548][   T30] audit: type=1400 audit(1782809067.929:215): avc:  denied  { read write } for  pid=593 comm="syz.5.77" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   47.630045][  T576] exfat: Unknown parameter 'iochaccyrillic'
[   47.659804][   T30] audit: type=1400 audit(1782809067.929:216): avc:  denied  { open } for  pid=593 comm="syz.5.77" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   47.707794][   T30] audit: type=1400 audit(1782809067.979:217): avc:  denied  { unmount } for  pid=537 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   53.140604][   T30] audit: type=1400 audit(1782809068.019:218): avc:  denied  { nlmsg_write } for  pid=575 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   53.161165][   T30] audit: type=1326 audit(1782809068.019:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.219838][   T30] audit: type=1326 audit(1782809068.019:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.267622][  T608] loop3: detected capacity change from 0 to 1024
[   53.277987][  T606] binder: 605:606 ioctl 40046205 0 returned -22
[   53.302826][  T608] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   53.323675][  T608] EXT4-fs (loop3): barriers disabled
[   53.329114][   T30] audit: type=1326 audit(1782809068.029:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.354349][  T608] JBD2: no valid journal superblock found
[   53.360404][  T608] EXT4-fs (loop3): error loading journal
[   53.366227][   T30] audit: type=1326 audit(1782809068.029:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.392567][  T610] loop2: detected capacity change from 0 to 256
[   53.399636][   T30] audit: type=1326 audit(1782809068.029:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.445544][  T610] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   53.486187][   T30] audit: type=1326 audit(1782809068.029:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.539312][   T30] audit: type=1326 audit(1782809068.029:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.594279][   T30] audit: type=1326 audit(1782809068.029:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.639174][   T30] audit: type=1326 audit(1782809068.029:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=597 comm="syz.5.78" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3435d59e59 code=0x7ffc0000
[   53.755972][  T612] loop5: detected capacity change from 0 to 1024
[   53.815904][  T616] loop4: detected capacity change from 0 to 128
[   53.835273][  T618] binder: 617:618 ioctl 40046205 0 returned -22
[   53.844390][  T618] loop2: detected capacity change from 0 to 256
[   53.853768][  T618] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   53.866051][  T612] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   53.876014][  T616] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   53.888186][  T612] EXT4-fs (loop5): barriers disabled
[   53.893695][  T612] JBD2: no valid journal superblock found
[   53.899599][  T612] EXT4-fs (loop5): error loading journal
[   53.905507][  T616] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.576007][  T634] loop0: detected capacity change from 0 to 128
[   59.761479][  T602] attempt to access beyond end of device
[   59.761479][  T602] loop0: rw=1, want=1041, limit=128
[   59.798943][  T640] loop0: detected capacity change from 0 to 1024
[   59.820791][  T641] binder: 638:641 ioctl 40046205 0 returned -22
[   59.829463][  T641] loop5: detected capacity change from 0 to 256
[   59.853056][  T640] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   59.872996][  T646] loop2: detected capacity change from 0 to 16
[   59.890850][  T641] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   59.906784][  T644] loop4: detected capacity change from 0 to 256
[   59.913673][  T640] EXT4-fs (loop0): barriers disabled
[   59.919041][  T640] JBD2: no valid journal superblock found
[   59.925371][  T640] EXT4-fs (loop0): error loading journal
[   59.932783][  T646] erofs: (device loop2): mounted with root inode @ nid 36.
[   59.940342][  T644] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   60.059219][  T604] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   60.070315][   T30] kauditd_printk_skb: 59 callbacks suppressed
[   60.070329][   T30] audit: type=1400 audit(1782809080.449:287): avc:  denied  { mounton } for  pid=643 comm="syz.4.90" path="/18/file0/file0" dev="loop4" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.253631][  T655] loop2: detected capacity change from 0 to 16
[   60.325241][  T655] erofs: (device loop2): mounted with root inode @ nid 36.
[   60.455440][  T655] FAULT_INJECTION: forcing a failure.
[   60.455440][  T655] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   61.023986][  T655] CPU: 1 PID: 655 Comm: syz.2.92 Tainted: G        W         syzkaller #0
[   61.032546][  T655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   61.042631][  T655] Call Trace:
[   61.045925][  T655]  <TASK>
[   61.048889][  T655]  __dump_stack+0x21/0x30
[   61.053235][  T655]  dump_stack_lvl+0x110/0x170
[   61.058050][  T655]  ? show_regs_print_info+0x20/0x20
[   61.063269][  T655]  dump_stack+0x15/0x20
[   61.067438][  T655]  should_fail+0x3ab/0x500
[   61.071870][  T655]  should_fail_usercopy+0x1a/0x20
[   61.076909][  T655]  strncpy_from_user+0x24/0x2d0
[   61.081775][  T655]  ? kmem_cache_alloc+0xf7/0x260
[   61.086726][  T655]  getname_flags+0xf5/0x510
[   61.091251][  T655]  __x64_sys_mkdirat+0x7c/0xa0
[   61.096033][  T655]  x64_sys_call+0x37e/0x9a0
[   61.100550][  T655]  do_syscall_64+0x4c/0xa0
[   61.104996][  T655]  ? clear_bhb_loop+0x50/0xa0
[   61.109688][  T655]  ? clear_bhb_loop+0x50/0xa0
[   61.114385][  T655]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   61.120300][  T655] RIP: 0033:0x7f46a9806cc7
[   61.124731][  T655] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.144354][  T655] RSP: 002b:00007f46a8261e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   61.152782][  T655] RAX: ffffffffffffffda RBX: 00007f46a8261ee0 RCX: 00007f46a9806cc7
[   61.160772][  T655] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c
[   61.168763][  T655] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000
[   61.176762][  T655] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0
[   61.184751][  T655] R13: 00007f46a8261ea0 R14: 0000000000000000 R15: 0000000000000000
[   61.192747][  T655]  </TASK>
[   61.297430][  T662] loop5: detected capacity change from 0 to 16
[   61.324017][  T664] loop0: detected capacity change from 0 to 512
[   61.331303][   T30] audit: type=1400 audit(1782809081.709:288): avc:  denied  { create } for  pid=659 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   61.352290][  T664] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   61.364679][  T664] EXT4-fs (loop0): 1 truncate cleaned up
[   61.370741][  T664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   61.381501][  T662] erofs: (device loop5): mounted with root inode @ nid 36.
[   61.467473][  T669] loop4: detected capacity change from 0 to 1024
[   61.496235][  T671] binder: 670:671 ioctl 40046205 0 returned -22
[   61.531114][  T669] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   61.539961][  T669] EXT4-fs (loop4): orphan cleanup on readonly fs
[   61.542921][   T30] audit: type=1400 audit(1782809081.919:289): avc:  denied  { name_bind } for  pid=673 comm="syz.0.99" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   61.546714][  T669] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.94: Freeing blocks not in datazone - block = 0, count = 4096
[   61.582543][  T676] loop5: detected capacity change from 0 to 256
[   61.589822][  T669] EXT4-fs (loop4): 1 orphan inode deleted
[   61.595596][  T669] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,journal_dev=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   61.609310][   T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   61.629227][  T604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.629811][  T676] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   61.640558][  T604] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   61.661262][  T604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.669895][  T604] usb 4-1: config 0 descriptor??
[   61.697773][   T30] audit: type=1400 audit(1782809082.029:290): avc:  granted  { setsecparam } for  pid=673 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   61.717707][  T679] xt_bpf: check failed: parse error
[   61.745129][  T681] Zero length message leads to an empty skb
[   61.805567][  T685] FAULT_INJECTION: forcing a failure.
[   61.805567][  T685] name failslab, interval 1, probability 0, space 0, times 1
[   61.819739][  T685] CPU: 1 PID: 685 Comm: syz.0.103 Tainted: G        W         syzkaller #0
[   61.828368][  T685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   61.838448][  T685] Call Trace:
[   61.841749][  T685]  <TASK>
[   61.844696][  T685]  __dump_stack+0x21/0x30
[   61.849051][  T685]  dump_stack_lvl+0x110/0x170
[   61.853740][  T685]  ? show_regs_print_info+0x20/0x20
[   61.858965][  T685]  dump_stack+0x15/0x20
[   61.863147][  T685]  should_fail+0x3ab/0x500
[   61.867584][  T685]  __should_failslab+0xa4/0xe0
[   61.872379][  T685]  should_failslab+0x9/0x20
[   61.876915][  T685]  slab_pre_alloc_hook+0x39/0xd0
[   61.881888][  T685]  ? fat_parse_long+0x9a/0x820
[   61.886703][  T685]  kmem_cache_alloc+0x44/0x260
[   61.891497][  T685]  fat_parse_long+0x9a/0x820
[   61.896108][  T685]  ? __d_alloc+0x2d/0x690
[   61.900457][  T685]  ? d_alloc+0x48/0x260
[   61.904661][  T685]  ? lookup_one_qstr_excl+0xcb/0x250
[   61.909965][  T685]  fat_search_long+0x2ad/0x1150
[   61.914829][  T685]  ? fat_bmap+0x5b0/0x5b0
[   61.919177][  T685]  ? wait_for_completion_killable_timeout+0x10/0x10
[   61.925782][  T685]  vfat_lookup+0x1a7/0x510
[   61.930219][  T685]  ? setup+0xe0/0xe0
[   61.934132][  T685]  ? __d_alloc+0x4b3/0x690
[   61.938566][  T685]  ? d_alloc+0x1f4/0x260
[   61.942839][  T685]  lookup_one_qstr_excl+0x114/0x250
[   61.948072][  T685]  filename_create+0x23d/0x440
[   61.952858][  T685]  ? kern_path_create+0x1b0/0x1b0
[   61.957903][  T685]  do_mkdirat+0x5c/0x4d0
[   61.962169][  T685]  ? getname_flags+0x205/0x510
[   61.966947][  T685]  __x64_sys_mkdirat+0x89/0xa0
[   61.971722][  T685]  x64_sys_call+0x37e/0x9a0
[   61.976254][  T685]  do_syscall_64+0x4c/0xa0
[   61.980697][  T685]  ? clear_bhb_loop+0x50/0xa0
[   61.985390][  T685]  ? clear_bhb_loop+0x50/0xa0
[   61.990089][  T685]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   61.995999][  T685] RIP: 0033:0x7ff0bdccfe59
[   62.000447][  T685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.020076][  T685] RSP: 002b:00007ff0bc72a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   62.028520][  T685] RAX: ffffffffffffffda RBX: 00007ff0bdf48fa0 RCX: 00007ff0bdccfe59
[   62.036514][  T685] RDX: 0000000000000167 RSI: 0000200000000100 RDI: ffffffffffffff9c
[   62.044504][  T685] RBP: 00007ff0bc72a090 R08: 0000000000000000 R09: 0000000000000000
[   62.052491][  T685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.060474][  T685] R13: 00007ff0bdf49038 R14: 00007ff0bdf48fa0 R15: 00007fff4ae755f8
[   62.068466][  T685]  </TASK>
[   62.239251][   T39] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   62.248488][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.257227][   T39] usb 3-1: config 0 descriptor??
[   62.319962][  T637] UDC core: couldn't find an available UDC or it's busy: -16
[   62.327542][  T637] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   62.337194][   T30] audit: type=1400 audit(1782809082.709:291): avc:  denied  { connect } for  pid=636 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.356510][   T30] audit: type=1400 audit(1782809082.719:292): avc:  denied  { write } for  pid=636 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.376864][   T30] audit: type=1400 audit(1782809082.719:293): avc:  denied  { read } for  pid=636 comm="syz.3.87" path="socket:[17158]" dev="sockfs" ino=17158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   62.401748][  T691] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   62.412526][  T691] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.434588][   T30] audit: type=1400 audit(1782809082.809:294): avc:  denied  { map } for  pid=690 comm="syz.5.105" path="/8/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   62.437012][  T691] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.457447][   T30] audit: type=1400 audit(1782809082.809:295): avc:  denied  { execute } for  pid=690 comm="syz.5.105" path="/8/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   62.473072][  T691] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   62.507094][  T691] EXT4-fs (loop5): This should not happen!! Data will be lost
[   62.507094][  T691] 
[   62.517214][  T691] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.530726][  T691] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.105: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   62.549468][  T695] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.562934][  T695] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.580077][  T690] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.612710][  T690] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.626239][  T690] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.639663][  T691] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.652583][   T30] audit: type=1400 audit(1782809083.029:296): avc:  denied  { watch watch_reads } for  pid=696 comm="syz.4.106" path="/21/file0" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   62.667934][  T691] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.105: lblock 0 mapped to illegal pblock 0 (length 1)
[   62.876169][  T702] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[   62.889098][  T702] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.918249][  T706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'.
[   62.927137][  T706] netlink: 5 bytes leftover after parsing attributes in process `syz.0.111'.
[   62.990307][  T701] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.000742][  T701] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.011595][  T701] device bridge_slave_0 entered promiscuous mode
[   63.022753][  T701] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.032099][  T701] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.039667][  T701] device bridge_slave_1 entered promiscuous mode
[   63.108933][  T701] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.116037][  T701] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.123377][  T701] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.123397][  T701] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.150357][  T717] netlink: 'syz.0.113': attribute type 3 has an invalid length.
[   63.179772][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.187405][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.195983][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.205231][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.213453][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.234162][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.242796][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.252324][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.259952][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.268235][  T701] device veth0_vlan entered promiscuous mode
[   63.285164][  T701] device veth1_macvtap entered promiscuous mode
[   63.311791][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.328251][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.338309][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.364876][  T724] FAULT_INJECTION: forcing a failure.
[   63.364876][  T724] name failslab, interval 1, probability 0, space 0, times 0
[   63.377998][  T724] CPU: 1 PID: 724 Comm: syz.6.110 Tainted: G        W         syzkaller #0
[   63.386615][  T724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   63.396684][  T724] Call Trace:
[   63.399973][  T724]  <TASK>
[   63.402923][  T724]  __dump_stack+0x21/0x30
[   63.407280][  T724]  dump_stack_lvl+0x110/0x170
[   63.411997][  T724]  ? show_regs_print_info+0x20/0x20
[   63.417209][  T724]  ? _parse_integer_limit+0x18e/0x1d0
[   63.422602][  T724]  dump_stack+0x15/0x20
[   63.426781][  T724]  should_fail+0x3ab/0x500
[   63.431225][  T724]  __should_failslab+0xa4/0xe0
[   63.436013][  T724]  should_failslab+0x9/0x20
[   63.440547][  T724]  slab_pre_alloc_hook+0x39/0xd0
[   63.445500][  T724]  ? match_int+0xbd/0x1a0
[   63.449832][  T724]  __kmalloc_track_caller+0x6c/0x2c0
[   63.455120][  T724]  ? match_int+0xbd/0x1a0
[   63.459443][  T724]  kmemdup_nul+0x2c/0xa0
[   63.463685][  T724]  match_int+0xbd/0x1a0
[   63.467843][  T724]  ? match_token+0x580/0x580
[   63.472453][  T724]  ? kstrdup+0x51/0x70
[   63.476525][  T724]  ? memcpy+0x56/0x70
[   63.480531][  T724]  parse_opts+0x266/0x5c0
[   63.484881][  T724]  ? p9_fd_show_options+0x1a0/0x1a0
[   63.490108][  T724]  ? ____kasan_slab_free+0x130/0x160
[   63.495430][  T724]  ? __kasan_slab_free+0x11/0x20
[   63.500390][  T724]  ? slab_free_freelist_hook+0xc2/0x190
[   63.505981][  T724]  p9_fd_create+0x3f/0x3f0
[   63.510431][  T724]  ? p9_client_create+0x6eb/0x1090
[   63.515550][  T724]  p9_client_create+0x786/0x1090
[   63.520484][  T724]  ? p9_parse_header+0x3e0/0x3e0
[   63.525461][  T724]  ? memset+0x35/0x40
[   63.529448][  T724]  v9fs_session_init+0x1c2/0x1710
[   63.534484][  T724]  ? v9fs_show_options+0x5a0/0x5a0
[   63.539587][  T724]  ? kmem_cache_alloc_trace+0x119/0x270
[   63.545129][  T724]  ? v9fs_mount+0x60/0x7e0
[   63.549543][  T724]  v9fs_mount+0x76/0x7e0
[   63.553782][  T724]  legacy_get_tree+0xed/0x190
[   63.558457][  T724]  ? incfs_get_verity_signature+0x420/0x420
[   63.564351][  T724]  vfs_get_tree+0x89/0x260
[   63.568765][  T724]  do_new_mount+0x251/0xb40
[   63.573267][  T724]  ? security_capable+0x87/0xb0
[   63.578119][  T724]  path_mount+0x640/0xff0
[   63.582467][  T724]  __se_sys_mount+0x320/0x390
[   63.587143][  T724]  ? __x64_sys_mount+0xd0/0xd0
[   63.591915][  T724]  ? __ia32_sys_read+0x90/0x90
[   63.596701][  T724]  __x64_sys_mount+0xbf/0xd0
[   63.601305][  T724]  x64_sys_call+0x6bf/0x9a0
[   63.605833][  T724]  do_syscall_64+0x4c/0xa0
[   63.610267][  T724]  ? clear_bhb_loop+0x50/0xa0
[   63.614965][  T724]  ? clear_bhb_loop+0x50/0xa0
[   63.619660][  T724]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   63.625586][  T724] RIP: 0033:0x7f06659cbe59
[   63.630025][  T724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.649650][  T724] RSP: 002b:00007f0664426028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   63.658072][  T724] RAX: ffffffffffffffda RBX: 00007f0665c44fa0 RCX: 00007f06659cbe59
[   63.666037][  T724] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 0000000000000000
[   63.673999][  T724] RBP: 00007f0664426090 R08: 00002000000002c0 R09: 0000000000000000
[   63.681978][  T724] R10: 0000000000210010 R11: 0000000000000246 R12: 0000000000000002
[   63.689949][  T724] R13: 00007f0665c45038 R14: 00007f0665c44fa0 R15: 00007ffe1e36f0c8
[   63.697939][  T724]  </TASK>
[   63.701573][  T724] 9pnet: Insufficient options for proto=fd
[   63.776511][  T602] device bridge_slave_1 left promiscuous mode
[   63.782879][  T604] usbhid 4-1:0.0: can't add hid device: -71
[   63.788952][  T604] usbhid: probe of 4-1:0.0 failed with error -71
[   63.796510][  T315] Alternate GPT is invalid, using primary GPT.
[   63.799515][  T602] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.812789][  T315]  loop4: p1 p2 p3
[   63.812792][  T731] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   63.829119][  T604] usb 4-1: USB disconnect, device number 5
[   63.841069][  T729] Alternate GPT is invalid, using primary GPT.
[   63.857106][  T602] device bridge_slave_0 left promiscuous mode
[   63.866987][  T602] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.880983][  T602] device veth1_macvtap left promiscuous mode
[   63.887092][  T602] device veth0_vlan left promiscuous mode
[   63.893239][  T729]  loop4: p1 p2 p3
[   63.951908][   T39] usb 3-1: Cannot set autoneg
[   63.954963][  T731] EXT4-fs (loop3): 1 truncate cleaned up
[   63.956758][   T39] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[   63.969536][  T731] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   63.993989][   T39] usb 3-1: USB disconnect, device number 5
[   64.470264][  T315] udevd[315]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   64.493711][  T737] udevd[737]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   64.836242][  T308] udevd[308]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   64.860300][  T737] udevd[737]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   64.902948][  T750] set_capacity_and_notify: 8 callbacks suppressed
[   64.902967][  T750] loop0: detected capacity change from 0 to 256
[   64.937102][  T751] loop2: detected capacity change from 0 to 512
[   65.164744][   T30] kauditd_printk_skb: 2 callbacks suppressed
[   65.164759][   T30] audit: type=1400 audit(1782809085.519:299): avc:  denied  { ioctl } for  pid=755 comm="syz.0.126" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   65.230232][  T749] loop4: detected capacity change from 0 to 40427
[   65.240556][  T749] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   65.263280][   T30] audit: type=1400 audit(1782809085.589:300): avc:  denied  { connect } for  pid=759 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   65.399375][  T749] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   65.428630][  T762] loop0: detected capacity change from 0 to 512
[   65.468564][  T765] loop6: detected capacity change from 0 to 128
[   65.497937][  T760] loop3: detected capacity change from 0 to 8192
[   65.517333][  T749] F2FS-fs (loop4): invalid crc value
[   65.631704][  T765] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   65.676317][  T762] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   65.687955][  T749] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   65.723586][   T30] audit: type=1400 audit(1782809085.599:301): avc:  denied  { accept } for  pid=759 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   65.870312][  T765] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   65.881848][  T762] EXT4-fs (loop0): 1 truncate cleaned up
[   65.887528][  T762] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   66.010443][  T760] netlink: 104 bytes leftover after parsing attributes in process `syz.3.125'.
[   66.019995][  T749] F2FS-fs (loop4): Start checkpoint disabled!
[   66.033105][   T30] audit: type=1326 audit(1782809086.409:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.0.128" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bdccfe59 code=0x7ffc0000
[   66.068873][  T749] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   66.080567][  T749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   66.135385][  T760] netlink: 104 bytes leftover after parsing attributes in process `syz.3.125'.
[   66.146439][   T30] audit: type=1326 audit(1782809086.439:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.0.128" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bdccfe59 code=0x7ffc0000
[   66.190072][  T760] netlink: 104 bytes leftover after parsing attributes in process `syz.3.125'.
[   66.241745][   T30] audit: type=1326 audit(1782809086.439:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.0.128" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bdccfe59 code=0x7ffc0000
[   66.290612][   T30] audit: type=1326 audit(1782809086.439:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.0.128" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff0bdccfe59 code=0x7ffc0000
[   66.317762][   T30] audit: type=1326 audit(1782809086.439:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.0.128" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bdccfe59 code=0x7ffc0000
[   66.399560][   T30] audit: type=1326 audit(1782809086.439:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.0.128" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bdccfe59 code=0x7ffc0000
[   66.438020][   T30] audit: type=1326 audit(1782809086.439:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.0.128" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bdccfe59 code=0x7ffc0000
[   66.478438][  T782] binder: 781:782 ioctl 40046205 0 returned -22
[   66.551965][  T793] loop6: detected capacity change from 0 to 256
[   66.561892][  T323] attempt to access beyond end of device
[   66.561892][  T323] loop4: rw=2049, want=45104, limit=40427
[   66.604995][  T793] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   66.769192][  T604] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   66.816480][  T807] loop6: detected capacity change from 0 to 1024
[   66.824601][  T807] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   66.837733][  T807] EXT4-fs (loop6): barriers disabled
[   66.848770][  T809] loop0: detected capacity change from 0 to 512
[   66.855142][  T807] JBD2: no valid journal superblock found
[   66.861816][  T807] EXT4-fs (loop6): error loading journal
[   68.067243][  T809] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.138465][  T809] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.141: Allocating blocks 41-42 which overlap fs metadata
[   68.171977][  T809] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.141: Allocating blocks 41-42 which overlap fs metadata
[   68.227061][  T809] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.141: Failed to acquire dquot type 1
[   68.263740][  T809] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   68.314616][  T809] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #12: comm syz.0.141: corrupted inode contents
[   68.346813][  T809] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #12: comm syz.0.141: mark_inode_dirty error
[   68.368590][  T809] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #12: comm syz.0.141: corrupted inode contents
[   68.399337][  T809] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.141: mark_inode_dirty error
[   68.420527][  T809] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #12: comm syz.0.141: corrupted inode contents
[   68.442825][  T809] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   68.460398][  T809] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #12: comm syz.0.141: corrupted inode contents
[   68.489614][  T809] EXT4-fs error (device loop0): ext4_truncate:4317: inode #12: comm syz.0.141: mark_inode_dirty error
[   68.519324][  T809] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   68.546808][  T809] EXT4-fs (loop0): 1 truncate cleaned up
[   68.559148][  T809] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback.
[   68.671341][  T833] loop6: detected capacity change from 0 to 512
[   68.700798][  T833] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.728003][  T833] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3894: comm syz.6.148: Allocating blocks 41-42 which overlap fs metadata
[   68.744693][  T833] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3894: comm syz.6.148: Allocating blocks 41-42 which overlap fs metadata
[   68.758962][  T833] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.148: Failed to acquire dquot type 1
[   68.770471][  T833] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   68.785771][  T833] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #12: comm syz.6.148: corrupted inode contents
[   68.797791][  T833] EXT4-fs error (device loop6): ext4_dirty_inode:6108: inode #12: comm syz.6.148: mark_inode_dirty error
[   68.809416][  T809] exfat: Unknown parameter 'iochaccyrillic'
[   68.815687][  T833] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #12: comm syz.6.148: corrupted inode contents
[   68.827675][  T833] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #12: comm syz.6.148: mark_inode_dirty error
[   68.839022][  T833] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #12: comm syz.6.148: corrupted inode contents
[   68.850986][  T833] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[   68.867104][  T833] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #12: comm syz.6.148: corrupted inode contents
[   68.879066][  T833] EXT4-fs error (device loop6): ext4_truncate:4317: inode #12: comm syz.6.148: mark_inode_dirty error
[   68.879310][  T604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.890413][  T833] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[   68.911253][  T833] EXT4-fs (loop6): 1 truncate cleaned up
[   68.919341][  T833] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback.
[   68.945728][  T604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.955774][  T604] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   68.965022][  T604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.976515][  T604] usb 3-1: config 0 descriptor??
[   69.035872][  T840] binder: 839:840 ioctl 40046205 0 returned -22
[   69.158452][  T846] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   69.169791][  T847] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   69.203895][  T846] netlink: 116 bytes leftover after parsing attributes in process `syz.6.152'.
[   69.405428][  T853] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   69.429791][  T853] EXT4-fs (loop6): barriers disabled
[   69.435121][  T853] JBD2: no valid journal superblock found
[   69.439742][  T784] UDC core: couldn't find an available UDC or it's busy: -16
[   69.449419][  T784] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   69.459219][  T853] EXT4-fs (loop6): error loading journal
[   69.511333][  T604] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[   69.533025][  T604] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[   69.618191][  T604] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected
[   69.648641][  T822] F2FS-fs (loop4): Found nat_bits in checkpoint
[   69.690522][  T822] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   69.789307][   T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.039205][   T26] usb 1-1: Using ep0 maxpacket: 32
[   70.159362][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.210845][   T26] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   70.320951][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.352814][   T26] usb 1-1: config 0 descriptor??
[   70.389676][   T26] hub 1-1:0.0: USB hub found
[   70.530491][  T784] set_capacity_and_notify: 6 callbacks suppressed
[   70.530508][  T784] loop2: detected capacity change from 0 to 40427
[   70.574204][  T784] F2FS-fs (loop2): Invalid segment/section count (24 != 11 * 1)
[   70.589578][  T784] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   70.608059][  T784] F2FS-fs (loop2): fault_type options not supported
[   70.615386][   T26] hub 1-1:0.0: 1 port detected
[   70.629338][  T784] F2FS-fs (loop2): fault_injection options not supported
[   70.646740][  T784] F2FS-fs (loop2): Unrecognized mount option "ch$V" or missing value
[   70.732159][   T30] kauditd_printk_skb: 132 callbacks suppressed
[   70.732175][   T30] audit: type=1400 audit(1782809091.109:433): avc:  denied  { ioctl } for  pid=877 comm="syz.6.161" path="/dev/input/event1" dev="devtmpfs" ino=257 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   70.764464][  T878] loop6: detected capacity change from 0 to 128
[   70.774313][   T30] audit: type=1400 audit(1782809091.149:434): avc:  denied  { remount } for  pid=821 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   70.789894][  T822] F2FS-fs (loop4): Start checkpoint disabled!
[   70.829198][   T20] usb 3-1: reset high-speed USB device number 6 using dummy_hcd
[   70.847008][  T878] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   70.859317][  T878] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   70.920210][  T881] netlink: 68 bytes leftover after parsing attributes in process `syz.6.162'.
[   70.929965][   T30] audit: type=1400 audit(1782809091.309:435): avc:  denied  { listen } for  pid=880 comm="syz.6.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.951177][   T30] audit: type=1400 audit(1782809091.329:436): avc:  denied  { read } for  pid=880 comm="syz.6.162" path="socket:[18808]" dev="sockfs" ino=18808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.974327][   T30] audit: type=1400 audit(1782809091.329:437): avc:  denied  { accept } for  pid=880 comm="syz.6.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.065635][   T30] audit: type=1400 audit(1782809091.439:438): avc:  denied  { mount } for  pid=888 comm="syz.6.165" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   71.112766][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   71.131311][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.206410][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   71.214801][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.225572][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.234102][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.244027][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.252461][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.388826][  T900] loop2: detected capacity change from 0 to 1024
[   71.422595][  T900] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   71.442486][  T900] EXT4-fs (loop2): barriers disabled
[   71.447854][  T900] JBD2: no valid journal superblock found
[   71.454209][  T900] EXT4-fs (loop2): error loading journal
[   71.473024][  T902] binder: 901:902 ioctl 40046205 0 returned -22
[   71.531995][  T904] loop4: detected capacity change from 0 to 256
[   71.603931][  T904] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   71.808987][   T39] usb 1-1: USB disconnect, device number 2
[   71.819602][   T26] usb 1-1-port1: config error
[   71.929933][  T604] usb 3-1: USB disconnect, device number 6
[   72.186561][   T30] audit: type=1400 audit(1782809092.559:439): avc:  denied  { append } for  pid=910 comm="syz.6.171" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   72.352709][  T912] loop6: detected capacity change from 0 to 8192
[   72.405604][   T30] audit: type=1400 audit(1782809092.779:440): avc:  denied  { ioctl } for  pid=913 comm="syz.4.172" path="socket:[19565]" dev="sockfs" ino=19565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.556302][   T30] audit: type=1400 audit(1782809092.929:441): avc:  denied  { write } for  pid=913 comm="syz.4.172" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   73.372441][  T604] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected
[   73.435461][   T30] audit: type=1400 audit(1782809093.039:442): avc:  denied  { create } for  pid=917 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   73.497226][  T930] loop4: detected capacity change from 0 to 512
[   73.552807][  T934] loop6: detected capacity change from 0 to 512
[   73.560445][  T930] EXT4-fs (loop4): Ignoring removed bh option
[   73.570130][  T930] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.178: corrupted in-inode xattr
[   73.631130][  T930] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.178: couldn't read orphan inode 15 (err -117)
[   73.679585][  T930] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,grpid,bh,grpid,noauto_da_alloc,errors=continue,jqfmt=vfsv0,quota,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   73.763032][  T940] netlink: 'syz.4.178': attribute type 15 has an invalid length.
[   73.771320][  T940] netlink: 'syz.4.178': attribute type 15 has an invalid length.
[   74.110499][  T934] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #16: comm syz.6.179: iget: bogus i_mode (0)
[   74.142615][  T934] EXT4-fs (loop6): Remounting filesystem read-only
[   74.151829][  T934] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.179: couldn't read orphan inode 16 (err -117)
[   74.164284][  T934] EXT4-fs (loop6): Remounting filesystem read-only
[   74.171053][  T934] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,. Quota mode: writeback.
[   74.183248][  T934] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.211306][  T949] loop2: detected capacity change from 0 to 256
[   74.239083][  T951] loop4: detected capacity change from 0 to 256
[   74.240118][  T949] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[   74.259026][  T934] tipc: Started in network mode
[   74.272411][  T934] tipc: Node identity 40482071e2c40589, cluster identity 4711
[   74.282230][  T951] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   74.297240][  T934] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   74.373269][  T958] loop2: detected capacity change from 0 to 1024
[   74.392621][  T958] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   74.431484][  T958] EXT4-fs (loop2): barriers disabled
[   74.436868][  T958] JBD2: no valid journal superblock found
[   74.465264][  T958] EXT4-fs (loop2): error loading journal
[   74.774223][  T960] attempt to access beyond end of device
[   74.774223][  T960] loop6: rw=2049, want=1041, limit=128
[   74.929922][  T967] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   75.396507][  T969] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   75.429120][  T978] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   75.457105][  T969] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   75.469966][  T978] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.519918][  T969] F2FS-fs (loop0): Found nat_bits in checkpoint
[   75.582313][  T986] set_capacity_and_notify: 4 callbacks suppressed
[   75.582332][  T986] loop4: detected capacity change from 0 to 256
[   75.637186][  T986] FAT-fs (loop4): Directory bread(block 64) failed
[   75.645870][  T969] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   75.653386][  T986] FAT-fs (loop4): Directory bread(block 65) failed
[   75.660207][  T969] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   75.667805][  T986] FAT-fs (loop4): Directory bread(block 66) failed
[   75.695074][  T986] FAT-fs (loop4): Directory bread(block 67) failed
[   75.701915][  T986] FAT-fs (loop4): Directory bread(block 68) failed
[   75.708522][  T986] FAT-fs (loop4): Directory bread(block 69) failed
[   75.715446][  T986] FAT-fs (loop4): Directory bread(block 70) failed
[   75.722328][  T986] FAT-fs (loop4): Directory bread(block 71) failed
[   75.728963][  T986] FAT-fs (loop4): Directory bread(block 72) failed
[   75.735720][  T986] FAT-fs (loop4): Directory bread(block 73) failed
[   75.815359][  T989] loop2: detected capacity change from 0 to 16
[   75.841653][  T989] erofs: (device loop2): mounted with root inode @ nid 36.
[   75.854907][  T989] FAULT_INJECTION: forcing a failure.
[   75.854907][  T989] name failslab, interval 1, probability 0, space 0, times 0
[   75.872496][  T989] CPU: 0 PID: 989 Comm: syz.2.195 Tainted: G        W         syzkaller #0
[   75.881128][  T989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   75.891312][  T989] Call Trace:
[   75.894616][  T989]  <TASK>
[   75.897569][  T989]  __dump_stack+0x21/0x30
[   75.901922][  T989]  dump_stack_lvl+0x110/0x170
[   75.906737][  T989]  ? show_regs_print_info+0x20/0x20
[   75.911955][  T989]  ? iomap_readpage+0x275/0x410
[   75.916820][  T989]  ? find_inode+0x33c/0x3f0
[   75.921338][  T989]  ? trace_raw_output_iomap_iter+0x250/0x250
[   75.927329][  T989]  dump_stack+0x15/0x20
[   75.931518][  T989]  should_fail+0x3ab/0x500
[   75.935937][  T989]  ? erofs_getattr+0x130/0x130
[   75.940729][  T989]  __should_failslab+0xa4/0xe0
[   75.945514][  T989]  should_failslab+0x9/0x20
[   75.950031][  T989]  slab_pre_alloc_hook+0x39/0xd0
[   75.955067][  T989]  ? erofs_getattr+0x130/0x130
[   75.959837][  T989]  ? erofs_alloc_inode+0x1b/0x50
[   75.964814][  T989]  kmem_cache_alloc+0x44/0x260
[   75.969603][  T989]  ? __bpf_trace_erofs__map_blocks_exit+0x40/0x40
[   75.976024][  T989]  ? erofs_getattr+0x130/0x130
[   75.980789][  T989]  ? erofs_getattr+0x130/0x130
[   75.985556][  T989]  erofs_alloc_inode+0x1b/0x50
[   75.990331][  T989]  ? __bpf_trace_erofs__map_blocks_exit+0x40/0x40
[   75.996751][  T989]  iget5_locked+0xb1/0x270
[   76.001186][  T989]  ? erofs_ilookup_test_actor+0x70/0x70
[   76.006761][  T989]  erofs_iget+0xb8/0x1fd0
[   76.011085][  T989]  ? __kasan_check_write+0x14/0x20
[   76.016197][  T989]  ? erofs_namei+0xe2f/0xf80
[   76.020796][  T989]  ? erofs_inode_init_once+0x20/0x20
[   76.026101][  T989]  erofs_lookup+0x115/0x260
[   76.030604][  T989]  __lookup_slow+0x2b8/0x410
[   76.035198][  T989]  ? lookup_one_len+0x2d0/0x2d0
[   76.040049][  T989]  ? down_read+0xab/0x100
[   76.044392][  T989]  ? handle_dots+0xe10/0xe10
[   76.048987][  T989]  lookup_slow+0x57/0x70
[   76.053232][  T989]  walk_component+0x326/0x460
[   76.057920][  T989]  link_path_walk+0x688/0xde0
[   76.062612][  T989]  ? handle_lookup_down+0x130/0x130
[   76.067830][  T989]  path_openat+0x282/0x2f80
[   76.072351][  T989]  ? __kasan_slab_alloc+0xc9/0xe0
[   76.077391][  T989]  ? __kasan_slab_alloc+0xb7/0xe0
[   76.082422][  T989]  ? slab_post_alloc_hook+0x4f/0x2b0
[   76.087724][  T989]  ? do_sys_openat2+0xeb/0x7f0
[   76.092502][  T989]  ? __x64_sys_openat+0x136/0x160
[   76.097534][  T989]  ? x64_sys_call+0x219/0x9a0
[   76.102222][  T989]  ? do_syscall_64+0x4c/0xa0
[   76.106829][  T989]  ? do_filp_open+0x400/0x400
[   76.111510][  T989]  do_filp_open+0x1df/0x400
[   76.116022][  T989]  ? vfs_tmpfile+0x2d0/0x2d0
[   76.120641][  T989]  do_sys_openat2+0x15e/0x7f0
[   76.125348][  T989]  ? fput_many+0x15a/0x1a0
[   76.129778][  T989]  ? do_sys_open+0xe0/0xe0
[   76.134208][  T989]  ? fput+0x1a/0x20
[   76.138026][  T989]  ? ksys_write+0x1fa/0x260
[   76.142539][  T989]  ? __ia32_sys_read+0x90/0x90
[   76.147313][  T989]  __x64_sys_openat+0x136/0x160
[   76.152191][  T989]  x64_sys_call+0x219/0x9a0
[   76.156700][  T989]  do_syscall_64+0x4c/0xa0
[   76.161125][  T989]  ? clear_bhb_loop+0x50/0xa0
[   76.165825][  T989]  ? clear_bhb_loop+0x50/0xa0
[   76.170508][  T989]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   76.176407][  T989] RIP: 0033:0x7f46a9807e59
[   76.180831][  T989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.200458][  T989] RSP: 002b:00007f46a8262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   76.208880][  T989] RAX: ffffffffffffffda RBX: 00007f46a9a80fa0 RCX: 00007f46a9807e59
[   76.216856][  T989] RDX: 0000000000000040 RSI: 0000200000000400 RDI: ffffffffffffff9c
[   76.224828][  T989] RBP: 00007f46a8262090 R08: 0000000000000000 R09: 0000000000000000
[   76.232889][  T989] R10: 0000000000000083 R11: 0000000000000246 R12: 0000000000000001
[   76.240864][  T989] R13: 00007f46a9a81038 R14: 00007f46a9a80fa0 R15: 00007fff0d7273a8
[   76.248933][  T989]  </TASK>
[   76.288822][ T1000] loop6: detected capacity change from 0 to 1024
[   76.322024][ T1002] loop2: detected capacity change from 0 to 256
[   76.345614][ T1000] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   76.356541][ T1000] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.386015][ T1002] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   76.415981][ T1000] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #15: comm syz.6.199: lblock 0 mapped to illegal pblock 0 (length 1)
[   76.434905][ T1000] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   76.459171][ T1000] EXT4-fs (loop6): This should not happen!! Data will be lost
[   76.459171][ T1000] 
[   76.476150][ T1000] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: comm syz.6.199: lblock 0 mapped to illegal pblock 0 (length 1)
[   76.497689][ T1000] EXT4-fs error (device loop6): ext4_ext_remove_space:2929: inode #15: comm syz.6.199: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   76.518035][ T1013] loop0: detected capacity change from 0 to 512
[   76.540847][ T1011] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: comm syz.6.199: lblock 0 mapped to illegal pblock 0 (length 1)
[   76.609617][ T1013] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   76.625144][ T1013] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 16776965)!
[   76.645351][ T1011] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: comm syz.6.199: lblock 0 mapped to illegal pblock 0 (length 1)
[   76.645464][ T1013] EXT4-fs (loop0): group descriptors corrupted!
[   76.680872][  T701] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /29/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[   76.703681][  T701] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /29/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[   76.726059][  T701] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[   76.745398][  T701] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /29/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[   76.766807][  T701] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[   76.786821][ T1020] loop4: detected capacity change from 0 to 128
[   76.819422][ T1020] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   76.838718][ T1020] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   76.861947][ T1020] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   76.869576][ T1020] FAT-fs (loop4): Filesystem has been set read-only
[   76.879938][ T1020] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   76.892730][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   76.892742][   T30] audit: type=1326 audit(1782809097.269:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5405ce59 code=0x7ffc0000
[   77.045926][   T30] audit: type=1326 audit(1782809097.309:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5405ce59 code=0x7ffc0000
[   77.201101][   T30] audit: type=1326 audit(1782809097.309:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5405ce59 code=0x7ffc0000
[   77.227268][  T603] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   77.242324][ T1028] loop0: detected capacity change from 0 to 1024
[   77.296225][ T1028] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   77.335623][ T1028] EXT4-fs (loop0): barriers disabled
[   77.353492][ T1028] JBD2: no valid journal superblock found
[   77.359937][   T30] audit: type=1326 audit(1782809097.309:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5405ce59 code=0x7ffc0000
[   77.444321][ T1028] EXT4-fs (loop0): error loading journal
[   77.464435][   T30] audit: type=1326 audit(1782809097.309:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f5401d68e code=0x7ffc0000
[   77.489309][  T603] usb 4-1: Using ep0 maxpacket: 8
[   77.494438][   T30] audit: type=1326 audit(1782809097.309:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f5405caeb code=0x7ffc0000
[   77.521364][   T30] audit: type=1326 audit(1782809097.309:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f5405caeb code=0x7ffc0000
[   77.553967][  T289] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   77.558650][   T30] audit: type=1326 audit(1782809097.309:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f5405caeb code=0x7ffc0000
[   77.588271][   T30] audit: type=1326 audit(1782809097.309:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1021 comm="syz.3.204" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f5405caeb code=0x7ffc0000
[   77.612905][   T30] audit: type=1400 audit(1782809097.369:456): avc:  denied  { ioctl } for  pid=1012 comm="syz.0.202" path="socket:[19937]" dev="sockfs" ino=19937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   77.659393][  T603] usb 4-1: unable to get BOS descriptor or descriptor too short
[   77.751637][ T1036] FAULT_INJECTION: forcing a failure.
[   77.751637][ T1036] name failslab, interval 1, probability 0, space 0, times 0
[   77.764502][ T1036] CPU: 1 PID: 1036 Comm: syz.2.209 Tainted: G        W         syzkaller #0
[   77.773206][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   77.783282][ T1036] Call Trace:
[   77.786570][ T1036]  <TASK>
[   77.789514][ T1036]  __dump_stack+0x21/0x30
[   77.793850][ T1036]  dump_stack_lvl+0x110/0x170
[   77.798524][ T1036]  ? show_regs_print_info+0x20/0x20
[   77.803734][ T1036]  dump_stack+0x15/0x20
[   77.807891][ T1036]  should_fail+0x3ab/0x500
[   77.812313][ T1036]  __should_failslab+0xa4/0xe0
[   77.817075][ T1036]  should_failslab+0x9/0x20
[   77.821578][ T1036]  slab_pre_alloc_hook+0x39/0xd0
[   77.826516][ T1036]  ? __d_alloc+0x2d/0x690
[   77.830842][ T1036]  kmem_cache_alloc+0x44/0x260
[   77.835606][ T1036]  __d_alloc+0x2d/0x690
[   77.839785][ T1036]  d_alloc_pseudo+0x1d/0x70
[   77.844295][ T1036]  alloc_file_pseudo+0xe0/0x200
[   77.849179][ T1036]  ? alloc_empty_file_noaccount+0x80/0x80
[   77.854903][ T1036]  ? __kasan_check_write+0x14/0x20
[   77.860029][ T1036]  ? clear_nlink+0x8a/0xe0
[   77.864466][ T1036]  __shmem_file_setup+0x1df/0x2b0
[   77.869490][ T1036]  shmem_file_setup+0x2f/0x40
[   77.874165][ T1036]  __se_sys_memfd_create+0x1de/0x3c0
[   77.879460][ T1036]  __x64_sys_memfd_create+0x5b/0x70
[   77.884667][ T1036]  x64_sys_call+0x473/0x9a0
[   77.889172][ T1036]  do_syscall_64+0x4c/0xa0
[   77.893587][ T1036]  ? clear_bhb_loop+0x50/0xa0
[   77.898371][ T1036]  ? clear_bhb_loop+0x50/0xa0
[   77.903053][ T1036]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   77.908959][ T1036] RIP: 0033:0x7f46a9807e59
[   77.913377][ T1036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.932981][ T1036] RSP: 002b:00007f46a8261e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   77.941406][ T1036] RAX: ffffffffffffffda RBX: 00000000000004e0 RCX: 00007f46a9807e59
[   77.949385][ T1036] RDX: 00007f46a8261ee0 RSI: 0000000000000000 RDI: 00007f46a989e04f
[   77.957388][ T1036] RBP: 0000200000001a40 R08: 00000000ffffffff R09: 0000000000000000
[   77.965365][ T1036] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000140
[   77.973331][ T1036] R13: 00007f46a8261ee0 R14: 00007f46a8261ea0 R15: 0000200000000580
[   77.981318][ T1036]  </TASK>
[   77.999374][  T603] usb 4-1: config 8 has an invalid interface number: 188 but max is 0
[   78.012878][  T603] usb 4-1: config 8 has no interface number 0
[   78.020275][  T603] usb 4-1: config 8 interface 188 has no altsetting 0
[   78.259352][  T603] usb 4-1: New USB device found, idVendor=1b3d, idProduct=019a, bcdDevice= 2.2c
[   78.288736][  T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.320615][  T603] usb 4-1: Product: syz
[   78.324830][  T603] usb 4-1: Manufacturer: syz
[   78.356998][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.364245][  T603] usb 4-1: SerialNumber: syz
[   78.408013][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.496581][ T1034] device bridge_slave_0 entered promiscuous mode
[   78.508148][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.525441][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.760180][ T1034] device bridge_slave_1 entered promiscuous mode
[   78.766895][ T1048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'.
[   78.905440][ T1041] loop2: detected capacity change from 0 to 40427
[   78.912630][ T1022] overlayfs: './file0' not a directory
[   78.945259][ T1055] loop0: detected capacity change from 0 to 512
[   78.972293][ T1041] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   78.989339][ T1041] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   79.000978][ T1041] F2FS-fs (loop2): Unrecognized mount option "1844674407370955161501777777777777777777777" or missing value
[   79.040421][ T1055] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   79.071327][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.078465][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.085780][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.092832][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.101470][ T1055] EXT4-fs (loop0): 1 truncate cleaned up
[   79.107147][ T1055] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   79.257453][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.265576][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.289641][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.306224][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.318344][ T1065] loop2: detected capacity change from 0 to 1024
[   79.327296][ T1065] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   79.360170][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.372716][ T1069] FAULT_INJECTION: forcing a failure.
[   79.372716][ T1069] name failslab, interval 1, probability 0, space 0, times 0
[   79.380440][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.393771][ T1069] CPU: 1 PID: 1069 Comm: syz.0.217 Tainted: G        W         syzkaller #0
[   79.402494][ T1069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   79.412559][ T1069] Call Trace:
[   79.415862][ T1069]  <TASK>
[   79.418792][ T1069]  __dump_stack+0x21/0x30
[   79.423132][ T1069]  dump_stack_lvl+0x110/0x170
[   79.427818][ T1069]  ? show_regs_print_info+0x20/0x20
[   79.433026][ T1069]  ? __kasan_check_read+0x11/0x20
[   79.438059][ T1069]  ? vmx_vcpu_pi_load+0xa1/0x370
[   79.443000][ T1069]  dump_stack+0x15/0x20
[   79.447161][ T1069]  should_fail+0x3ab/0x500
[   79.451586][ T1069]  __should_failslab+0xa4/0xe0
[   79.456361][ T1069]  should_failslab+0x9/0x20
[   79.460883][ T1069]  slab_pre_alloc_hook+0x39/0xd0
[   79.465852][ T1069]  ? kvm_arch_vcpu_ioctl+0x1454/0x1b50
[   79.471314][ T1069]  __kmalloc_track_caller+0x6c/0x2c0
[   79.476605][ T1069]  ? avc_has_perm+0x163/0x250
[   79.481290][ T1069]  ? kvm_arch_vcpu_ioctl+0x1454/0x1b50
[   79.486757][ T1069]  memdup_user+0x25/0xb0
[   79.490999][ T1069]  kvm_arch_vcpu_ioctl+0x1454/0x1b50
[   79.496286][ T1069]  ? kvm_arch_vcpu_put+0x570/0x570
[   79.501400][ T1069]  ? 0xffffffffa0028000
[   79.505564][ T1069]  ? is_bpf_text_address+0x177/0x190
[   79.510866][ T1069]  ? __kernel_text_address+0xa0/0x100
[   79.516265][ T1069]  ? unwind_get_return_address+0x4d/0x90
[   79.521906][ T1069]  ? stack_trace_save+0xf0/0xf0
[   79.526765][ T1069]  ? arch_stack_walk+0xee/0x140
[   79.531624][ T1069]  ? stack_trace_save+0xa6/0xf0
[   79.536478][ T1069]  ? __stack_depot_save+0x34/0x480
[   79.541598][ T1069]  ? path_openat+0x284f/0x2f80
[   79.546370][ T1069]  ? kasan_set_track+0x5b/0x70
[   79.551135][ T1069]  ? kasan_set_track+0x4a/0x70
[   79.555897][ T1069]  ? kasan_set_free_info+0x23/0x40
[   79.561013][ T1069]  ? ____kasan_slab_free+0x125/0x160
[   79.566304][ T1069]  ? __kasan_slab_free+0x11/0x20
[   79.571249][ T1069]  ? slab_free_freelist_hook+0xc2/0x190
[   79.576802][ T1069]  ? kmem_cache_free+0x100/0x320
[   79.581771][ T1069]  ? __asan_set_shadow_00+0xe/0x10
[   79.586893][ T1069]  ? do_vfs_ioctl+0x1c15/0x1d80
[   79.591753][ T1069]  ? __ia32_compat_sys_ioctl+0x910/0x910
[   79.597393][ T1069]  ? kstrtouint_from_user+0x1c4/0x220
[   79.602772][ T1069]  ? kstrtol_from_user+0x2a0/0x2a0
[   79.607909][ T1069]  ? ioctl_has_perm+0x1b8/0x4f0
[   79.612768][ T1069]  ? memcpy+0x56/0x70
[   79.616763][ T1069]  ? __kasan_check_write+0x14/0x20
[   79.621877][ T1069]  ? mutex_lock_killable+0x9b/0x1c0
[   79.627081][ T1069]  ? __mutex_lock_interruptible_slowpath+0x10/0x10
[   79.633586][ T1069]  ? vfs_write+0xc72/0xfd0
[   79.638013][ T1069]  kvm_vcpu_ioctl+0x6fb/0xc00
[   79.642699][ T1069]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[   79.648342][ T1069]  ? selinux_file_ioctl+0x3ad/0x4c0
[   79.653550][ T1069]  ? selinux_file_alloc_security+0x120/0x120
[   79.659565][ T1069]  ? mutex_unlock+0x8f/0x230
[   79.664159][ T1069]  ? __mutex_lock_slowpath+0x10/0x10
[   79.669449][ T1069]  ? __fget_files+0x2e1/0x340
[   79.674144][ T1069]  ? security_file_ioctl+0x84/0xa0
[   79.679262][ T1069]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[   79.684902][ T1069]  __se_sys_ioctl+0x121/0x1a0
[   79.689585][ T1069]  __x64_sys_ioctl+0x7b/0x90
[   79.694177][ T1069]  x64_sys_call+0x2f/0x9a0
[   79.698596][ T1069]  do_syscall_64+0x4c/0xa0
[   79.703023][ T1069]  ? clear_bhb_loop+0x50/0xa0
[   79.707711][ T1069]  ? clear_bhb_loop+0x50/0xa0
[   79.712395][ T1069]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   79.718289][ T1069] RIP: 0033:0x7ff0bdccfe59
[   79.722709][ T1069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.742319][ T1069] RSP: 002b:00007ff0bc72a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   79.750742][ T1069] RAX: ffffffffffffffda RBX: 00007ff0bdf48fa0 RCX: 00007ff0bdccfe59
[   79.758713][ T1069] RDX: 0000200000000240 RSI: 000000004008ae89 RDI: 0000000000000005
[   79.766690][ T1069] RBP: 00007ff0bc72a090 R08: 0000000000000000 R09: 0000000000000000
[   79.774664][ T1069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.782672][ T1069] R13: 00007ff0bdf49038 R14: 00007ff0bdf48fa0 R15: 00007fff4ae755f8
[   79.790657][ T1069]  </TASK>
[   79.800948][  T566] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.802447][ T1065] EXT4-fs (loop2): barriers disabled
[   79.808006][  T566] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.820889][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.829442][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.837664][  T566] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.839394][ T1065] JBD2: no valid journal superblock found
[   79.844724][  T566] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.864992][ T1067] netlink: 52 bytes leftover after parsing attributes in process `syz.4.218'.
[   79.872778][ T1065] EXT4-fs (loop2): error loading journal
[   79.892556][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.910517][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.918522][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.928628][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.958103][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.979449][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.031489][ T1075] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   80.050044][  T962] tipc: Left network mode
[   80.059659][ T1078] sch_tbf: burst 6 is lower than device veth0_to_bridge mtu (1514) !
[   80.090244][ T1034] device veth0_vlan entered promiscuous mode
[   80.098184][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.106783][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.154143][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.162324][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.170541][ T1083] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   80.202702][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   80.211551][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.225227][ T1034] device veth1_macvtap entered promiscuous mode
[   80.255729][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.272892][ T1083] EXT4-fs (loop3): barriers disabled
[   80.279512][ T1083] JBD2: no valid journal superblock found
[   80.287905][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.348065][ T1085] attempt to access beyond end of device
[   80.348065][ T1085] loop2: rw=2049, want=1041, limit=128
[   80.437094][ T1083] EXT4-fs (loop3): error loading journal
[   80.443920][  T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.489153][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.500864][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.634852][ T1092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   80.773966][ T1092] EXT4-fs (loop2): 1 truncate cleaned up
[   80.805577][ T1092] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.234992][ T1106] set_capacity_and_notify: 5 callbacks suppressed
[   82.235009][ T1106] loop7: detected capacity change from 0 to 512
[   82.296402][ T1109] loop4: detected capacity change from 0 to 1024
[   82.320120][ T1111] loop0: detected capacity change from 0 to 1024
[   82.328953][   T30] kauditd_printk_skb: 121 callbacks suppressed
[   82.328965][   T30] audit: type=1400 audit(1782809102.699:578): avc:  denied  { mounton } for  pid=1112 comm="syz.3.233" path="/proc/85/task" dev="proc" ino=20361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   82.360295][  T962] device bridge_slave_1 left promiscuous mode
[   82.366566][  T962] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.373900][ T1106] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   82.384911][  T962] device bridge_slave_0 left promiscuous mode
[   82.391068][  T962] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.399300][  T962] device veth1_macvtap left promiscuous mode
[   82.405335][  T962] device veth0_vlan left promiscuous mode
[   82.420075][ T1109] EXT4-fs (loop4): Unrecognized mount option "subj_role=ext4" or missing value
[   82.429476][ T1111] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[   82.454945][   T30] audit: type=1400 audit(1782809102.739:579): avc:  denied  { mounton } for  pid=1105 comm="syz.7.229" path="/syzcgroup/unified/file0" dev="cgroup2" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   82.482191][ T1111] EXT4-fs (loop0): barriers disabled
[   82.487511][ T1111] JBD2: no valid journal superblock found
[   82.522056][ T1106] EXT4-fs (loop7): 1 truncate cleaned up
[   82.527732][ T1106] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.539745][  T603] ftdi_sio 4-1:8.188: FTDI USB Serial Device converter detected
[   82.548516][ T1111] EXT4-fs (loop0): error loading journal
[   82.554633][  T603] usb 4-1: Detected FT8U232AM
[   82.559840][ T1106] overlayfs: failed to resolve './bus': -2
[   82.566437][ T1106] EXT4-fs (loop7): Unrecognized mount option "
[   82.566437][ T1106] " or missing value
[   82.567631][  T603] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   82.585810][  T603] usb 4-1: USB disconnect, device number 6
[   82.592436][  T603] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   82.602436][  T603] ftdi_sio 4-1:8.188: device disconnected
[   84.467921][ T1126] loop2: detected capacity change from 0 to 128
[   84.621000][ T1123] attempt to access beyond end of device
[   84.621000][ T1123] loop2: rw=2049, want=1041, limit=128
[   84.826163][ T1137] loop0: detected capacity change from 0 to 128
[   85.254495][ T1137] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   85.281754][ T1137] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   85.422471][ T1155] loop7: detected capacity change from 0 to 512
[   85.456332][ T1155] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   85.486835][ T1155] EXT4-fs (loop7): 1 truncate cleaned up
[   85.493137][ T1155] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   85.691493][ T1161] loop3: detected capacity change from 0 to 4096
[   85.705841][  T909] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   85.748129][ T1161] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   85.779066][ T1161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'.
[   85.937640][ T1166] loop7: detected capacity change from 0 to 128
[   85.945273][   T30] audit: type=1400 audit(1782809106.149:580): avc:  denied  { unlink } for  pid=1160 comm="syz.3.246" name="#8" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   86.108665][ T1166] attempt to access beyond end of device
[   86.108665][ T1166] loop7: rw=2049, want=1041, limit=128
[   86.279355][ T1171] binder: 1170:1171 ioctl 40046205 0 returned -22
[   86.294180][ T1171] loop0: detected capacity change from 0 to 256
[   86.297979][ T1174] loop2: detected capacity change from 0 to 512
[   86.315104][ T1171] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d)
[   86.352099][ T1174] EXT4-fs (loop2): Ignoring removed nobh option
[   86.399549][ T1174] EXT4-fs (loop2): orphan cleanup on readonly fs
[   86.411534][ T1174] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #11: comm syz.2.250: unexpected EA_INODE flag
[   86.429285][  T909] usb 5-1: Using ep0 maxpacket: 32
[   86.434483][ T1174] EXT4-fs (loop2): Remounting filesystem read-only
[   86.445246][ T1174] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.250: couldn't read orphan inode 11 (err -117)
[   86.462295][ T1174] EXT4-fs (loop2): Remounting filesystem read-only
[   86.471963][ T1174] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,nobh,resgid=0x0000000000000000,acl,init_itable=0x0000000000000e4d,. Quota mode: none.
[   86.513845][ T1161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.246'.
[   86.519216][   T30] audit: type=1400 audit(1782809106.889:581): avc:  denied  { rename } for  pid=1160 comm="syz.3.246" name="file2" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   86.545027][ T1161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.246'.
[   86.589195][  T909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.615604][ T1178] netlink: 148 bytes leftover after parsing attributes in process `syz.2.251'.
[   86.624972][  T909] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   86.637671][  T909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.656257][  T909] usb 5-1: config 0 descriptor??
[   86.719625][  T909] hub 5-1:0.0: USB hub found
[   86.732619][ T1186] EXT4-fs (loop7): Unsupported blocksize for fs-verity
[   86.763261][ T1184] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[   86.786938][ T1184] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.853963][ T1192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   86.875378][ T1192] EXT4-fs (loop3): 1 truncate cleaned up
[   86.881146][ T1192] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.939196][  T909] hub 5-1:0.0: 1 port detected
[   86.985539][   T30] audit: type=1400 audit(1782809107.359:582): avc:  denied  { ioctl } for  pid=1202 comm="syz.3.261" path="socket:[20639]" dev="sockfs" ino=20639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   87.023300][ T1206] tipc: Started in network mode
[   87.028264][ T1206] tipc: Node identity ac1414aa, cluster identity 4711
[   87.035255][ T1206] tipc: Enabled bearer <udp:s>, priority 10
[   87.066239][   T30] audit: type=1400 audit(1782809107.439:583): avc:  denied  { name_bind } for  pid=1209 comm="syz.3.264" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   87.117189][ T1212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'.
[   87.158978][  T340] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   87.839357][  T340] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   87.858980][  T340] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping
[   87.887121][  T340] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   88.099262][  T340] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   88.124112][  T340] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.141845][  T340] usb 8-1: Product: syz
[   88.149394][  T340] usb 8-1: Manufacturer: syz
[   88.154211][  T340] usb 8-1: SerialNumber: syz
[   88.159172][   T26] tipc: Node number set to 2886997162
[   88.165829][  T340] usb 8-1: config 0 descriptor??
[   88.262228][  T340] usb 5-1: USB disconnect, device number 5
[   88.279239][  T604] usb 5-1-port1: config error
[   88.513254][ T1227] set_capacity_and_notify: 3 callbacks suppressed
[   88.513269][ T1227] loop2: detected capacity change from 0 to 131072
[   88.530872][ T1227] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[   88.539047][ T1227] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   88.552695][  T340] usb 8-1: USB disconnect, device number 2
[   88.571035][ T1227] F2FS-fs (loop2): invalid crc value
[   88.586792][ T1227] F2FS-fs (loop2): Found nat_bits in checkpoint
[   88.592742][   T30] audit: type=1400 audit(1782809108.969:584): avc:  denied  { set_context_mgr } for  pid=1246 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   88.614419][ T1247] binder: 1246:1247 ioctl c0306201 200000000080 returned -14
[   88.622554][ T1247] binder: 1246:1247 ioctl c0306201 2000000003c0 returned -14
[   88.644874][   T30] audit: type=1400 audit(1782809109.019:585): avc:  denied  { create } for  pid=1248 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   88.685273][ T1227] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   88.692786][ T1227] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   88.716605][   T30] audit: type=1400 audit(1782809109.089:586): avc:  denied  { map } for  pid=1253 comm="syz.3.278" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   88.748437][   T30] audit: type=1400 audit(1782809109.089:587): avc:  denied  { call } for  pid=1253 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   88.783823][ T1256] loop3: detected capacity change from 0 to 512
[   88.785493][   T30] audit: type=1400 audit(1782809109.089:588): avc:  denied  { read write } for  pid=1253 comm="syz.3.278" path="socket:[21642]" dev="sockfs" ino=21642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   88.840955][ T1256] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   88.861557][ T1256] EXT4-fs (loop3): 1 truncate cleaned up
[   88.872432][ T1256] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,noquota,user_xattr,noload,noquota,,errors=continue. Quota mode: none.
[   88.897301][   T30] audit: type=1400 audit(1782809109.269:589): avc:  denied  { create } for  pid=1262 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.976182][   T30] audit: type=1400 audit(1782809109.319:590): avc:  denied  { setattr } for  pid=1255 comm="syz.3.279" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.036613][ T1269] loop0: detected capacity change from 0 to 256
[   89.078605][ T1269] FAT-fs (loop0): Directory bread(block 64) failed
[   89.095280][ T1269] FAT-fs (loop0): Directory bread(block 65) failed
[   89.109755][ T1269] FAT-fs (loop0): Directory bread(block 66) failed
[   89.119067][   T30] audit: type=1400 audit(1782809109.489:591): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   89.151340][ T1269] FAT-fs (loop0): Directory bread(block 67) failed
[   89.159327][ T1269] FAT-fs (loop0): Directory bread(block 68) failed
[   89.176060][ T1269] FAT-fs (loop0): Directory bread(block 69) failed
[   89.187552][ T1276] loop4: detected capacity change from 0 to 256
[   89.189696][ T1269] FAT-fs (loop0): Directory bread(block 70) failed
[   89.223516][ T1269] FAT-fs (loop0): Directory bread(block 71) failed
[   89.239226][ T1269] FAT-fs (loop0): Directory bread(block 72) failed
[   89.246080][ T1269] FAT-fs (loop0): Directory bread(block 73) failed
[   89.263515][ T1280] loop7: detected capacity change from 0 to 256
[   89.266943][ T1276] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   89.308266][ T1282] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   89.340241][ T1280] exfat: Deprecated parameter 'utf8'
[   89.345613][ T1280] exfat: Deprecated parameter 'namecase'
[   89.398642][ T1280] exfat: Deprecated parameter 'namecase'
[   89.459228][ T1280] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   89.490861][ T1291] loop0: detected capacity change from 0 to 512
[   89.625960][ T1291] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.0.294: corrupted xattr block 95
[   89.664697][ T1291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.294: bg 0: block 7: invalid block bitmap
[   89.685955][ T1291] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   89.695952][ T1291] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2923: inode #11: comm syz.0.294: corrupted xattr block 95
[   89.708500][ T1291] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117)
[   89.717730][ T1291] EXT4-fs (loop0): 1 orphan inode deleted
[   89.723726][ T1291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.831264][   T30] audit: type=1400 audit(1782809110.209:592): avc:  denied  { create } for  pid=1300 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   89.858223][ T1301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'.
[   89.904410][   T30] audit: type=1400 audit(1782809110.229:593): avc:  denied  { setopt } for  pid=1300 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   89.938295][ T1304] loop7: detected capacity change from 0 to 16
[   90.060041][ T1304] erofs: (device loop7): mounted with root inode @ nid 36.
[   90.070368][ T1304] erofs: (device loop7): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet
[   90.101037][ T1304] SELinux: (dev loop7, type erofs) has no security xattr handler
[   90.214262][ T1310] loop0: detected capacity change from 0 to 4096
[   90.327280][ T1304] IPv6: sit1: Disabled Multicast RS
[   90.335446][ T1310] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.357805][ T1310] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.303: Failed to acquire dquot type 1
[   90.376115][ T1310] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[   90.525615][ T1317] loop0: detected capacity change from 0 to 512
[   90.916095][ T1292] loop4: detected capacity change from 0 to 131072
[   91.691416][ T1292] F2FS-fs (loop4): Invalid log sectorsize (16253193)
[   91.718125][ T1326] EXT4-fs (loop3): Test dummy encryption mode enabled
[   91.815873][ T1292] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   91.866159][ T1326] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   91.906666][ T1292] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:5, blkofs:5
[   91.930453][ T1326] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   91.939018][ T1292] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[   91.947283][ T1326] System zones: 0-5
[   91.964357][ T1326] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[   91.998583][ T1335] FAT-fs (loop7): Directory bread(block 64) failed
[   92.011010][ T1332] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   92.028621][ T1335] FAT-fs (loop7): Directory bread(block 65) failed
[   92.035819][ T1332] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.058518][ T1335] FAT-fs (loop7): Directory bread(block 66) failed
[   92.091205][ T1332] fscrypt (loop2, inode 12): Unsupported encryption flags (0x9e)
[   92.099046][ T1335] FAT-fs (loop7): Directory bread(block 67) failed
[   92.140461][ T1335] FAT-fs (loop7): Directory bread(block 68) failed
[   92.170221][ T1335] FAT-fs (loop7): Directory bread(block 69) failed
[   92.174292][ T1326] EXT4-fs (loop3): shut down requested (0)
[   92.177533][ T1335] FAT-fs (loop7): Directory bread(block 70) failed
[   92.189649][ T1335] FAT-fs (loop7): Directory bread(block 71) failed
[   92.196250][ T1335] FAT-fs (loop7): Directory bread(block 72) failed
[   92.212626][ T1335] FAT-fs (loop7): Directory bread(block 73) failed
[   92.302290][ T1340] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   92.328745][ T1340] exFAT-fs (loop0): hint_cluster is invalid (17)
[   92.332371][ T1345] ==================================================================
[   92.343316][ T1345] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200
[   92.351495][ T1345] Read of size 8 at addr ffff88810fd352c0 by task syz.3.314/1345
[   92.359242][ T1345] 
[   92.361583][ T1345] CPU: 1 PID: 1345 Comm: syz.3.314 Tainted: G        W         syzkaller #0
[   92.370278][ T1345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   92.380355][ T1345] Call Trace:
[   92.380928][ T1340] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff)
[   92.383733][ T1345]  <TASK>
[   92.394670][ T1345]  __dump_stack+0x21/0x30
[   92.399025][ T1345]  dump_stack_lvl+0x110/0x170
[   92.403719][ T1345]  ? show_regs_print_info+0x20/0x20
[   92.408963][ T1345]  ? load_image+0x3f0/0x3f0
[   92.413493][ T1345]  print_address_description+0x7f/0x2c0
[   92.419067][ T1345]  ? tc_setup_flow_action+0x88e/0x3200
[   92.424553][ T1345]  kasan_report+0x10f/0x150
[   92.429088][ T1345]  ? tc_setup_flow_action+0x88e/0x3200
[   92.430823][ T1340] exFAT-fs (loop0): Filesystem has been set read-only
[   92.434561][ T1345]  __asan_report_load8_noabort+0x14/0x20
[   92.434586][ T1345]  tc_setup_flow_action+0x88e/0x3200
[   92.452300][ T1345]  mall_replace_hw_filter+0x2db/0x8d0
[   92.457718][ T1345]  ? pcpu_block_update_hint_alloc+0x8bc/0xc50
[   92.463812][ T1345]  ? mall_set_parms+0x520/0x520
[   92.468679][ T1345]  ? tcf_exts_destroy+0xb0/0xb0
[   92.473557][ T1345]  ? pcpu_alloc+0x1118/0x16f0
[   92.478277][ T1345]  ? mall_set_parms+0x1e4/0x520
[   92.483154][ T1345]  mall_change+0x544/0x760
[   92.487594][ T1345]  ? __kasan_check_write+0x14/0x20
[   92.492735][ T1345]  ? mall_get+0xa0/0xa0
[   92.496932][ T1345]  ? tcf_chain_tp_insert_unique+0x946/0xa70
[   92.502851][ T1345]  ? mall_get+0xa0/0xa0
[   92.507030][ T1345]  tc_new_tfilter+0x13df/0x1990
[   92.511912][ T1345]  ? tcf_gate_entry_destructor+0x20/0x20
[   92.517582][ T1345]  ? 0xffffffffa0028000
[   92.521757][ T1345]  ? security_capable+0x87/0xb0
[   92.526650][ T1345]  ? ns_capable+0x8c/0xf0
[   92.531021][ T1345]  ? netlink_net_capable+0x125/0x160
[   92.536601][ T1345]  ? tcf_gate_entry_destructor+0x20/0x20
[   92.542269][ T1345]  rtnetlink_rcv_msg+0x83c/0xcb0
[   92.547231][ T1345]  ? 0xffffffffa0028000
[   92.551405][ T1345]  ? rtnetlink_bind+0x80/0x80
[   92.556112][ T1345]  ? avc_has_perm_noaudit+0x390/0x490
[   92.561527][ T1345]  ? memcpy+0x56/0x70
[   92.565537][ T1345]  ? avc_has_perm_noaudit+0x30a/0x490
[   92.570930][ T1345]  ? arch_stack_walk+0xee/0x140
[   92.575809][ T1345]  ? avc_denied+0x1b0/0x1b0
[   92.580336][ T1345]  ? stack_trace_save+0xa6/0xf0
[   92.585213][ T1345]  ? avc_has_perm+0x163/0x250
[   92.589955][ T1345]  ? avc_has_perm_noaudit+0x490/0x490
[   92.595471][ T1345]  ? x64_sys_call+0x4b/0x9a0
[   92.600091][ T1345]  ? selinux_nlmsg_lookup+0x39d/0x440
[   92.605490][ T1345]  netlink_rcv_skb+0x1e9/0x430
[   92.610283][ T1345]  ? rtnetlink_bind+0x80/0x80
[   92.615003][ T1345]  ? netlink_ack+0xb10/0xb10
[   92.619620][ T1345]  ? _copy_from_iter+0x4a4/0x10a0
[   92.624835][ T1345]  ? __netlink_lookup+0x387/0x3b0
[   92.629900][ T1345]  rtnetlink_rcv+0x1c/0x20
[   92.634349][ T1345]  netlink_unicast+0x86c/0xa30
[   92.639146][ T1345]  netlink_sendmsg+0x879/0xb80
[   92.643962][ T1345]  ? netlink_getsockopt+0x530/0x530
[   92.649197][ T1345]  ? security_socket_sendmsg+0x82/0xa0
[   92.654687][ T1345]  ? netlink_getsockopt+0x530/0x530
[   92.659923][ T1345]  ____sys_sendmsg+0x5be/0x8f0
[   92.664715][ T1345]  ? __sys_sendmsg_sock+0x40/0x40
[   92.669761][ T1345]  ? import_iovec+0x7c/0xb0
[   92.674299][ T1345]  ___sys_sendmsg+0x236/0x2e0
[   92.679027][ T1345]  ? __sys_sendmsg+0x280/0x280
[   92.683813][ T1345]  ? sock_show_fdinfo+0xa0/0xa0
[   92.688694][ T1345]  ? __fdget+0x1a1/0x230
[   92.692965][ T1345]  __x64_sys_sendmsg+0x201/0x2d0
[   92.697926][ T1345]  ? ___sys_sendmsg+0x2e0/0x2e0
[   92.702811][ T1345]  ? __kasan_check_write+0x14/0x20
[   92.707964][ T1345]  ? switch_fpu_return+0x15d/0x2c0
[   92.713113][ T1345]  x64_sys_call+0x4b/0x9a0
[   92.717573][ T1345]  do_syscall_64+0x4c/0xa0
[   92.722029][ T1345]  ? clear_bhb_loop+0x50/0xa0
[   92.726738][ T1345]  ? clear_bhb_loop+0x50/0xa0
[   92.731449][ T1345]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.737383][ T1345] RIP: 0033:0x7f8f5405ce59
[   92.741821][ T1345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.761452][ T1345] RSP: 002b:00007f8f52ab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.769905][ T1345] RAX: ffffffffffffffda RBX: 00007f8f542d5fa0 RCX: 00007f8f5405ce59
[   92.777984][ T1345] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004
[   92.785979][ T1345] RBP: 00007f8f540f2e6f R08: 0000000000000000 R09: 0000000000000000
[   92.793994][ T1345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.801990][ T1345] R13: 00007f8f542d6038 R14: 00007f8f542d5fa0 R15: 00007ffd23292708
[   92.809990][ T1345]  </TASK>
[   92.813027][ T1345] 
[   92.815360][ T1345] Allocated by task 1345:
[   92.819709][ T1345]  __kasan_kmalloc+0xd4/0x100
[   92.824406][ T1345]  __kmalloc+0x13d/0x2c0
[   92.828655][ T1345]  tcf_idr_create+0x5f/0x790
[   92.833268][ T1345]  tcf_idr_create_from_flags+0x61/0x70
[   92.838768][ T1345]  tcf_gact_init+0x342/0x570
[   92.843380][ T1345]  tcf_action_init_1+0x3fd/0x6b0
[   92.848347][ T1345]  tcf_action_init+0x233/0x7a0
[   92.853134][ T1345]  tcf_exts_validate+0x24a/0x580
[   92.858093][ T1345]  mall_set_parms+0x48/0x520
[   92.862711][ T1345]  mall_change+0x478/0x760
[   92.867162][ T1345]  tc_new_tfilter+0x13df/0x1990
[   92.872033][ T1345]  rtnetlink_rcv_msg+0x83c/0xcb0
[   92.876992][ T1345]  netlink_rcv_skb+0x1e9/0x430
[   92.881786][ T1345]  rtnetlink_rcv+0x1c/0x20
[   92.886220][ T1345]  netlink_unicast+0x86c/0xa30
[   92.891006][ T1345]  netlink_sendmsg+0x879/0xb80
[   92.895787][ T1345]  ____sys_sendmsg+0x5be/0x8f0
[   92.900570][ T1345]  ___sys_sendmsg+0x236/0x2e0
[   92.905267][ T1345]  __x64_sys_sendmsg+0x201/0x2d0
[   92.910229][ T1345]  x64_sys_call+0x4b/0x9a0
[   92.914671][ T1345]  do_syscall_64+0x4c/0xa0
[   92.919101][ T1345]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.925009][ T1345] 
[   92.927339][ T1345] The buggy address belongs to the object at ffff88810fd35200
[   92.927339][ T1345]  which belongs to the cache kmalloc-192 of size 192
[   92.941528][ T1345] The buggy address is located 0 bytes to the right of
[   92.941528][ T1345]  192-byte region [ffff88810fd35200, ffff88810fd352c0)
[   92.955172][ T1345] The buggy address belongs to the page:
[   92.960921][ T1345] page:ffffea00043f4d40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810fd35e00 pfn:0x10fd35
[   92.972502][ T1345] flags: 0x4000000000000200(slab|zone=1)
[   92.978162][ T1345] raw: 4000000000000200 ffffea00043f4640 0000000900000009 ffff888100042c00
[   92.986774][ T1345] raw: ffff88810fd35e00 000000008010000c 00000001ffffffff 0000000000000000
[   92.995362][ T1345] page dumped because: kasan: bad access detected
[   93.001792][ T1345] page_owner tracks the page as allocated
[   93.007520][ T1345] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 102, ts 4663607123, free_ts 4663585197
[   93.023345][ T1345]  post_alloc_hook+0x192/0x1b0
[   93.028140][ T1345]  prep_new_page+0x1c/0x110
[   93.032663][ T1345]  get_page_from_freelist+0x2c3a/0x2cd0
[   93.038208][ T1345]  __alloc_pages+0x1a2/0x460
[   93.042794][ T1345]  new_slab+0xa0/0x4d0
[   93.046869][ T1345]  ___slab_alloc+0x3ac/0x840
[   93.051462][ T1345]  __slab_alloc+0x49/0x90
[   93.055810][ T1345]  kmem_cache_alloc_trace+0x146/0x270
[   93.061170][ T1345]  kernfs_fop_open+0x375/0xbb0
[   93.065936][ T1345]  do_dentry_open+0x82a/0x1010
[   93.070694][ T1345]  vfs_open+0x73/0x80
[   93.074684][ T1345]  path_openat+0x26e6/0x2f80
[   93.079270][ T1345]  do_filp_open+0x1df/0x400
[   93.083764][ T1345]  do_sys_openat2+0x15e/0x7f0
[   93.088446][ T1345]  __x64_sys_openat+0x136/0x160
[   93.093295][ T1345]  x64_sys_call+0x219/0x9a0
[   93.097797][ T1345] page last free stack trace:
[   93.102469][ T1345]  free_unref_page_prepare+0x5fa/0x600
[   93.107928][ T1345]  free_unref_page+0xae/0x540
[   93.112611][ T1345]  __free_pages+0x6c/0x100
[   93.117019][ T1345]  free_pages+0x82/0x90
[   93.121163][ T1345]  selinux_genfs_get_sid+0x20b/0x250
[   93.126435][ T1345]  inode_doinit_with_dentry+0x884/0xd90
[   93.131971][ T1345]  selinux_d_instantiate+0x27/0x40
[   93.137087][ T1345]  security_d_instantiate+0x9e/0xf0
[   93.142306][ T1345]  d_splice_alias+0x6d/0x390
[   93.146902][ T1345]  kernfs_iop_lookup+0x2c2/0x310
[   93.151833][ T1345]  path_openat+0x1436/0x2f80
[   93.156420][ T1345]  do_filp_open+0x1df/0x400
[   93.160916][ T1345]  do_sys_openat2+0x15e/0x7f0
[   93.165609][ T1345]  __x64_sys_openat+0x136/0x160
[   93.170454][ T1345]  x64_sys_call+0x219/0x9a0
[   93.174948][ T1345]  do_syscall_64+0x4c/0xa0
[   93.179354][ T1345] 
[   93.181662][ T1345] Memory state around the buggy address:
[   93.187275][ T1345]  ffff88810fd35180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   93.195324][ T1345]  ffff88810fd35200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   93.203373][ T1345] >ffff88810fd35280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   93.211436][ T1345]                                            ^
[   93.217586][ T1345]  ffff88810fd35300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.225634][ T1345]  ffff88810fd35380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   93.233679][ T1345] ==================================================================
[   93.241904][ T1345] Disabling lock debugging due to kernel taint