last executing test programs:

2m7.038866075s ago: executing program 0 (id=1039):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x2, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x100000, 0xa, 0x8, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x3000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0x8, 0x8000, 0x2000, [0x400, 0x0, 0x2]})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x9, 0x3ff}]}, 0x10)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54})

2m6.11291838s ago: executing program 0 (id=1049):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
write$vga_arbiter(r0, &(0x7f0000000680)=ANY=[@ANYBLOB='trylock i'], 0xf)

2m6.057526474s ago: executing program 0 (id=1050):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

2m6.037088486s ago: executing program 0 (id=1051):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x564, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFF2400bVb20XECoqoSoOCAOqbE3lsluNmTXpTaRcP8GkEDiBH8CByQOSD1xgBNHJA6AKAekAhEoRuph0MyO7Y29Jou93iXez0eazI83M9/3djPz3r5dzwtgYl2KiK2ImI2INyNiodyelFO82p3y/R4+uL+8/eD+chJZ9sbfkyI93xY9x+TOluecj4ivfinim8nBuO2NzdtLjUb9Xrle7TTvVtsbm1fXmkur9dX6nVrtxuKNay9df7E2tLJebP7s/S+uvfa1X/7i4+/9duvz382zda5M6y3HMHWLPrMbJzcdEa+dRLAxmCrns2POB0eTRsSHIuJTxfW/EFPF/04A4DTLsoXIFnrXAYDTLi36wJK0EhFpWjYCKt0+vGfjTNpotTtXbrXW76x0+8rOx0x6a61Rv3Zh7vffLnaeSfL1xSKtSC/Wa/vWr0fEhYj4wdxTxXpludVYGU+TBwAm3tne+j8i/jWXppXKQIf2+VYPAHhizI87AwDAyKn/AWDyqP8BYPIMUP+XX/ZvnXheAIDR8PkfACaP+h8AJo/6HwAmyldefz2fsu3y+dcrb22s3269dXWl3r5daa4vV5Zb9+5WVlut1eKZPc3Hna/Rat1dfCHW36526u1Otb2xebPZWr/TuVk81/tmfWYkpQIA/psLF9/9XRIRWy8/VUzRM5aDuhpOt3SIewFPlqnjHKyBAE80o33B5BqoCi8aCb8+8bwA49H3Yd7zfRcf9aP/IYjfGcH/lcsfHbz/3xjPcLrs69n/IBtXRoCRO1r//ytDzwcwekfu///jcPMBjF6WJfvH/J/dTQIATqVj/IQv+96wGiHAWD1uMO+hfP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp8y5iPhWJGmlGAs8zf9NK5WIpyPifMwkt9Ya9WsR8UxcjIiZuXx9cdyZBgCOKf1rUo7/dXnh+XP7U2eTf88V84j4zo/f+OHbS53OvcV8+z92t8/tDB9W2zvuGOMKAgCD+/MgOxX1d62c93yQf/jg/vLOdIJ5POD9L+wOPrq8/eB+MXVTpiPLsixivmhLnPlnEtPlMfMR8VxETA0h/tY7EfGRfuVPir6R8+XIp73xo4z99Ejjp4/ET4u07jx/+T48hLzApHk3v/+82u/6S+NSMe9//c8Xd6jjK+5/8xE7977tnvjTZaSpPvHza/7SoDFe+NWXD2zMFrpp70Q8N90vfrIbPzkk/vMDxv/Dxz7x/VcOSct+EnE5+sfvjVXtNO9W2xubV9eaS6v11fqdWu3G4o1rL11/sVYt+qirOz3VB/3t5SvPHJa3vPxnDonffefP7iv/7O6xnxmw/D/94M1vfHJvdW5//M99uv/7/2wRsf/rn9eJnx0w/tKZnx86fHcef+WQ8j/u/b8yYPz3/rK5MuCuAMAItDc2by81GvV7x1rIP4UO4zwHFvIsDrbzTnPxeEH/FMXC3suSRBJHPuFM/6S8MTbQ4Sf1qp74wvRuW3G4Z/56fsYRFycdeimOshDny4WHowo6vnsSMBp7F31E/GbcuQEAAAAAAAAAAAAAAPoZxd8wjbuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF7/CQAA///bV8Ru")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4)
syz_mount_image$fuse(0x0, 0x0, 0x300400, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
syz_clone(0x40200000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

2m5.541564476s ago: executing program 0 (id=1054):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x401, 0xfffffffd, 0x7ff, 0x7, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a00)=0x5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000)

2m5.326465343s ago: executing program 0 (id=1062):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)

2m5.189222584s ago: executing program 32 (id=1062):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)

1m35.581316057s ago: executing program 3 (id=2087):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x3, 0xa44, 0x11c, 0x8, 0xa, 0x3, 0x2401})

1m35.481526485s ago: executing program 3 (id=2091):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
socket$nl_generic(0x11, 0x3, 0x10)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0)

1m35.4174703s ago: executing program 3 (id=2093):
capset(&(0x7f0000000340)={0x19980330}, &(0x7f00000001c0)={0x200000, 0x200000, 0xa0000000})
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e21, 0x280000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010)

1m35.41702486s ago: executing program 3 (id=2094):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100010e, &(0x7f0000000540)={[{@errors_remount}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@nombcache}]}, 0x1, 0x444, &(0x7f0000000780)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x18e8, &(0x7f0000000400)=ANY=[@ANYRES16], 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100)
renameat2(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x2)

1m35.356350465s ago: executing program 3 (id=2097):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x44}}, 0x0)

1m35.240404364s ago: executing program 3 (id=2104):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

1m35.230784865s ago: executing program 33 (id=2104):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

4.655255035s ago: executing program 4 (id=3209):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000004000085000000860000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
listen(0xffffffffffffffff, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000480)="68c8e4bc8e6569f85655cf3cd072d238c08b2abd0abb3e12889093c16add1c084ea3f26ba93354e659a28671009282f2eac4a5d7579849fb4478193301a22dd8d4dfd85c33bcb4e89addd6fb49742f8209fe85c4e6a49eb9eefc5460dab7219e9781bc00fa550ecba6f1a478ea1cbfdc0cd1fc0291238233f0a3aa21bd73d8f4c8360b284eda9f6169083f3e7fbd091f278afb47f76f5fe2df100bd1bff5d726315164afcc2be7d4ef93b49bed9fe4000bea9a15bdacc62b16d72b4124c3392df83fcea3285eeeb48e", 0xc9}], 0x1)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

3.606202929s ago: executing program 6 (id=3217):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r4=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r4, 0x1, 0x80, 0x6, @remote}, 0x14)

3.604964639s ago: executing program 6 (id=3219):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000002cbb280000002800000004000000020000000000000c02000000000000000200000d0000000003000000040000000000000001000000002e5f00"], 0x0, 0x44}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000004100)={0x523, {0x30, 0x5, 0x0, 0x7fffffffffffffff, 0x3b5}})

3.60450911s ago: executing program 2 (id=3220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), 0x0}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@uni_xlate}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

3.327704831s ago: executing program 4 (id=3221):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

3.272611116s ago: executing program 4 (id=3223):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.015638337s ago: executing program 4 (id=3228):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0xcdd2, './file0\x00'}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x100, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f00000000c0)=0xfa0, 0x4)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000800))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r4=>0x0, 0x1, 0x20, 0x54, 0x8, {{0x19, 0x4, 0x3, 0x3, 0x64, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2, {[@generic={0x89, 0x7, "82c2d806ab"}, @timestamp_addr={0x44, 0x1c, 0xc2, 0x1, 0x9, [{@multicast2, 0x5}, {@remote, 0x2}, {@local, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0xf3, 0x3, 0xa, [{@empty, 0x1ff}, {@local, 0xd4}, {@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x9}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000020000000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
readlink(0x0, 0x0, 0x0)
fsync(r0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
rmdir(&(0x7f00000000c0)='./file0\x00')
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="2925455e32be822e45cdd6ae787db3fbfe62ae13f89bd71e5f1adf86b64c5225c8c549f6c4baf22cb925fb2d3db641a7b62d182a77bb70776c863e2a8284fe0db11dff87766fefddad43a2e469d890f7d5ebbdbc506128e1f802438f031b7de7737f0c1a719f0e595819df9e4d21d6e05a02212c6f56e002376e82981f73ea589242a85c7c0fa6a7a843874a123e8cf5f5219ef8a0f5e958ffeec1477544baf850019e04143db0df7748b9545a6a0280f656218dfe4f4396149146bf6521856bb39f72eb664e1123faf325128a791e7352d09975593505434b", @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, r0}, 0x94)
bind$802154_dgram(r0, &(0x7f0000000040), 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000340)={0x20, 0xe, 0x5, {0x5, 0x21, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.915307215s ago: executing program 1 (id=3231):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r4=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r4, 0x1, 0x80, 0x6, @remote}, 0x14)

2.897043006s ago: executing program 1 (id=3232):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

2.878739558s ago: executing program 1 (id=3233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)=r1}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@uni_xlate}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

2.756192818s ago: executing program 6 (id=3234):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

2.546015704s ago: executing program 6 (id=3235):
socket$inet6(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000100)='./file1\x00', 0x3000046, &(0x7f0000000040)={[{@delalloc}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@block_validity}, {@dioread_lock}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x100}}, {@data_err_ignore}, {@grpjquota}, {@nobh}, {@data_err_ignore}, {@bh}, {@bh}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x3, 0x8, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe7d, 0x0, 0x0, 0x0, 0x8}, @exit, @alu={0x4, 0x1, 0x3, 0x9, 0xb, 0xffffffffffffffe0, 0xffffffffffffffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x3d, r5})

2.307599994s ago: executing program 5 (id=3237):
r0 = syz_io_uring_setup(0x1049a, 0x0, 0x0, &(0x7f0000000040))
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003f236332266f582333bc6bfa0ff3ae042cfcf7335e5b5335bd8f4dc5f031f40cbb14ff1ef185c3936c82d83d508921fe89fff4c1c36fa2eddedfac6a31365e9d892a7d183a8210e68b649ee738e1f86850d4481fc100"/121, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x3}, 0x18)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280))
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r5 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r5, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x22, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x4}, {0x7, 0x4, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x10000}], 0x1003})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x40800)
read$usbmon(r7, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo")
chdir(&(0x7f0000000240)='./file0\x00')
ioprio_set$pid(0x2, 0x0, 0x2000)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
openat$cgroup_ro(r8, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)

2.259772407s ago: executing program 2 (id=3238):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)

2.059588254s ago: executing program 5 (id=3239):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="66b9800000c00f326635008200000f3066b98804000066b89d6800006a17580000000000300fc76c000f224466b9800000c00f3266350100000066b85100000066ba0000000f3066b82d006600d3d3ba000000000f30f0281dba4000b006ee67dad5660f3880360400", 0x69}], 0x1, 0x40, 0x0, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.058449664s ago: executing program 2 (id=3240):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaa"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x18)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x4, 0x0)
nanosleep(0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})

2.000735698s ago: executing program 1 (id=3241):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

1.97349878s ago: executing program 1 (id=3242):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
link(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getpolicy={0x8c, 0x15, 0x400, 0x70bd2a, 0x25dfdbfc, {{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x0, 0x4e21, 0x767f, 0x2, 0x80, 0x20, 0x29, 0x0, r6}, 0x6e6bb0}, [@coaddr={0x14, 0xe, @in=@local}, @etimer_thresh={0x8, 0xc, 0x9}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2c, 0x70bd2b, 0x70bd2a, 0x4, [0x1]}}]}, 0x8c}}, 0x0)

1.888667847s ago: executing program 5 (id=3243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1.843938291s ago: executing program 5 (id=3244):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000002cbb280000002800000004000000020000000000000c02000000000000000200000d0000000003000000040000000000000001000000002e5f00"], 0x0, 0x44}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000004100)={0x523, {0x30, 0x5, 0x0, 0x7fffffffffffffff, 0x3b5}})

1.566990123s ago: executing program 6 (id=3245):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.274451497s ago: executing program 6 (id=3246):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x3, "9a71c3"}, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x0, 0xc, 0x3, "156a6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
read$hiddev(r1, &(0x7f00000000c0)=""/122, 0x7a)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000300)={0x20, 0xe, 0x6a, "0000fa0f8e93005abf5fda650ba3c122f2c2928560e17f052db6b0910f14898aa5720400000000000000147b981765da22539e4819e7a0f2670559b590ed56b7d7807b4a0b34a70e8889c95b988489b17dc4fa3d5acf7f0f104e8023066dad3df34b3517174ad60d9a36"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x3)
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0)

1.211534672s ago: executing program 2 (id=3247):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)

1.197786493s ago: executing program 2 (id=3248):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
socket$inet6_tcp(0xa, 0x1, 0x0)
io_getevents(0x0, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x3, 0x10001, 0xb, 0xb, 0x1, {0x4, 0x0, 0xfc74, 0xf9a, 0xe, 0x7fff, 0x0, 0x6, 0x7, 0x6000, 0xc, 0x0, 0x0, 0x4, 0x3}}}, 0x90)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}})
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x404042bbe)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000039})

1.091466722s ago: executing program 1 (id=3249):
r0 = syz_io_uring_setup(0x1049a, 0x0, 0x0, &(0x7f0000000040))
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003f236332266f582333bc6bfa0ff3ae042cfcf7335e5b5335bd8f4dc5f031f40cbb14ff1ef185c3936c82d83d508921fe89fff4c1c36fa2eddedfac6a31365e9d892a7d183a8210e68b649ee738e1f86850d4481fc100"/121, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x3}, 0x18)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280))
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r5 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r5, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x22, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x4}, {0x7, 0x4, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x10000}], 0x1003})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x40800)
read$usbmon(r7, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
ioprio_set$pid(0x2, 0x0, 0x2000)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
openat$cgroup_ro(r8, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)

935.047484ms ago: executing program 5 (id=3250):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)

934.335584ms ago: executing program 4 (id=3251):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.346519ms ago: executing program 5 (id=3252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)=r1}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@uni_xlate}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

795.15µs ago: executing program 2 (id=3253):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

0s ago: executing program 4 (id=3254):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x18)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

kernel console output (not intermixed with test programs):

r 0 read error: -22
[  177.046453][    T6] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  177.056063][    T6] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  177.070550][    T6] usb 3-1: config 0 descriptor??
[  177.076213][ T5545] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  177.085402][    T6] hub 3-1:0.0: bad descriptor, ignoring hub
[  177.091503][    T6] hub: probe of 3-1:0.0 failed with error -5
[  177.186231][ T5596] loop5: detected capacity change from 0 to 512
[  177.193312][ T5596] /dev/loop5: Can't open blockdev
[  177.252577][ T5605] loop5: detected capacity change from 0 to 1024
[  177.259486][ T5605] EXT4-fs: Ignoring removed i_version option
[  177.266139][ T5605] /dev/loop5: Can't open blockdev
[  177.301882][    T6] usb 5-1: USB disconnect, device number 7
[  177.334300][   T28] audit: type=1400 audit(1754241017.196:343): avc:  denied  { listen } for  pid=5614 comm="syz.5.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  177.350313][ T5617] loop4: detected capacity change from 0 to 1024
[  177.360574][ T5617] EXT4-fs: Ignoring removed nomblk_io_submit option
[  177.367769][ T5617] /dev/loop4: Can't open blockdev
[  177.398046][   T28] audit: type=1326 audit(1754241017.256:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.1.1954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f98eb69 code=0x0
[  177.421356][  T360] usb 3-1: USB disconnect, device number 6
[  177.442182][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  177.551772][ T5617] loop4: detected capacity change from 0 to 40427
[  177.591458][  T457] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  177.642344][ T5617] loop4: detected capacity change from 0 to 1024
[  177.649243][ T5617] EXT4-fs: Ignoring removed bh option
[  177.654822][ T5617] /dev/loop4: Can't open blockdev
[  177.660767][   T19] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  177.793594][ T5633] loop4: detected capacity change from 0 to 256
[  177.800297][ T5633] exfat: Unknown parameter 'zero_size_dir'
[  177.820626][ T5635] loop2: detected capacity change from 0 to 128
[  177.828647][ T5635] /dev/loop2: Can't open blockdev
[  177.849702][ T5637] netlink: 'syz.2.1960': attribute type 16 has an invalid length.
[  177.861841][   T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.865475][ T5637] netlink: 'syz.2.1960': attribute type 1 has an invalid length.
[  177.881433][ T5637] netlink: 64030 bytes leftover after parsing attributes in process `syz.2.1960'.
[  177.884961][   T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.909365][   T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.922655][   T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.933617][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.945384][   T19] usb 4-1: config 0 descriptor??
[  178.066754][   T28] audit: type=1400 audit(1754241017.926:345): avc:  denied  { write } for  pid=5656 comm="syz.2.1969" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  178.068576][ T5657] input: syz1 as /devices/virtual/input/input6
[  178.123978][ T5659] loop2: detected capacity change from 0 to 512
[  178.215967][ T5668] loop5: detected capacity change from 0 to 512
[  178.252191][ T5668] /dev/loop5: Can't open blockdev
[  178.301625][  T786] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  178.305827][ T5663] loop2: detected capacity change from 0 to 40427
[  178.327454][ T5672] loop1: detected capacity change from 0 to 1024
[  178.336877][ T5672] EXT4-fs: Ignoring removed i_version option
[  178.343093][ T5672] /dev/loop1: Can't open blockdev
[  178.457147][ T5674] loop5: detected capacity change from 0 to 40427
[  178.465350][ T5568] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  178.466397][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.482874][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.491066][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.498540][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.506436][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.514070][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.521518][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.529030][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.548118][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.571571][  T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.582715][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.595502][  T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.605838][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.613496][  T786] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  178.626877][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.634922][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.642706][  T786] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  178.651993][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.659521][  T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.667759][   T19] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  178.679401][  T786] usb 5-1: config 0 descriptor??
[  178.684853][   T19] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  178.697639][   T19] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  178.726782][   T19] usb 4-1: USB disconnect, device number 5
[  178.751084][  T334] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  178.754665][ T5683] loop1: detected capacity change from 0 to 40427
[  178.774668][ T5686] fido_id[5686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  178.838803][ T5568] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  179.060214][ T5703] loop1: detected capacity change from 0 to 512
[  179.067108][ T5703] /dev/loop1: Can't open blockdev
[  179.094457][ T5705] loop2: detected capacity change from 0 to 512
[  179.101588][  T786] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  179.109797][ T5705] /dev/loop2: Can't open blockdev
[  179.111472][  T786] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  179.149097][   T28] audit: type=1400 audit(1754241019.006:346): avc:  denied  { mounton } for  pid=5700 comm="syz.5.1988" path="/173/file0/file1" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1
[  179.175692][   T28] audit: type=1400 audit(1754241019.006:347): avc:  denied  { mount } for  pid=5700 comm="syz.5.1988" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  179.221051][ T5714] loop1: detected capacity change from 0 to 512
[  179.233902][ T5714] /dev/loop1: Can't open blockdev
[  179.281347][ T5568] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  179.357297][ T5731] bridge0: port 1(syz_tun) entered blocking state
[  179.363817][ T5731] bridge0: port 1(syz_tun) entered disabled state
[  179.370856][ T5731] device syz_tun entered promiscuous mode
[  179.376775][ T5731] bridge0: port 1(syz_tun) entered blocking state
[  179.383271][ T5731] bridge0: port 1(syz_tun) entered forwarding state
[  179.399195][  T527] usb 5-1: USB disconnect, device number 8
[  179.427095][ T5735] loop2: detected capacity change from 0 to 1024
[  179.434962][ T5735] EXT4-fs: Ignoring removed bh option
[  179.442171][ T5735] /dev/loop2: Can't open blockdev
[  179.539664][  T786] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  179.729598][  T786] usb 4-1: Using ep0 maxpacket: 8
[  179.735940][  T786] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  179.744098][  T786] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  179.755640][  T786] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  179.777232][  T786] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  179.784717][  T786] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  179.799541][  T786] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  179.814904][  T786] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  179.822454][  T786] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  179.833797][  T786] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  179.851376][  T786] usb 4-1: string descriptor 0 read error: -22
[  179.857782][  T786] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  179.866915][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.908446][   T28] audit: type=1326 audit(1754241019.767:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269e78eb69 code=0x7ffc0000
[  179.932351][   T28] audit: type=1326 audit(1754241019.767:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f269e78eb69 code=0x7ffc0000
[  179.956076][   T28] audit: type=1326 audit(1754241019.767:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269e78eb69 code=0x7ffc0000
[  179.961100][ T5769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer.
[  180.090188][  T786] usb 4-1: USB disconnect, device number 6
[  180.131648][ T5782] loop5: detected capacity change from 0 to 2048
[  180.138517][ T5782] /dev/loop5: Can't open blockdev
[  180.153099][   T28] audit: type=1400 audit(1754241020.017:351): avc:  denied  { listen } for  pid=5783 comm="syz.2.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  180.253733][ T5795] syz.4.2029[5795] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  180.253790][ T5795] syz.4.2029[5795] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  180.265800][ T5795] syz.4.2029[5795] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  180.277578][ T5795] syz.4.2029[5795] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  180.469262][  T927] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  180.670264][  T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.681260][  T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.691360][  T927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  180.704624][  T927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  180.714001][  T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.722654][  T927] usb 3-1: config 0 descriptor??
[  180.948260][ T5814] loop3: detected capacity change from 0 to 40427
[  181.019316][  T340] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  181.043899][ T5816] loop5: detected capacity change from 0 to 256
[  181.050709][  T334] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  181.131571][  T927] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  181.140862][  T927] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  181.248807][  T340] usb 5-1: Using ep0 maxpacket: 8
[  181.254148][ T5830] loop3: detected capacity change from 0 to 512
[  181.255174][  T340] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  181.268850][  T340] usb 5-1: config 2 has no interface number 0
[  181.269179][ T5830] /dev/loop3: Can't open blockdev
[  181.274973][  T340] usb 5-1: config 2 interface 31 has no altsetting 0
[  181.276488][  T340] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  181.296168][  T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.304217][  T340] usb 5-1: Product: syz
[  181.308393][  T340] usb 5-1: Manufacturer: syz
[  181.313050][  T340] usb 5-1: SerialNumber: syz
[  181.361107][ T5834] tipc: Started in network mode
[  181.366099][ T5834] tipc: Node identity e61fcaf560bc, cluster identity 4711
[  181.373502][ T5834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.380887][ T5834] device syzkaller0 entered promiscuous mode
[  181.390544][ T5834] tipc: Resetting bearer <eth:syzkaller0>
[  181.397074][ T5833] tipc: Resetting bearer <eth:syzkaller0>
[  181.404006][ T5833] tipc: Disabling bearer <eth:syzkaller0>
[  181.413658][  T360] usb 3-1: USB disconnect, device number 7
[  181.523235][ T1064] usb 5-1: USB disconnect, device number 9
[  181.705208][ T5851] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  181.716458][ T5851] kvm: pic: non byte read
[  181.891441][ T5869] binder_alloc: 5868: binder_alloc_buf size 12328 failed, no address space
[  181.900118][ T5869] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  182.121747][ T5895] loop2: detected capacity change from 0 to 128
[  182.128613][ T5893] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2072'.
[  182.129101][ T5895] /dev/loop2: Can't open blockdev
[  182.170609][ T5899] syz.3.2073[5899] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.170702][ T5899] syz.3.2073[5899] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.282378][ T1064] kernel write not supported for file bpf-prog (pid: 1064 comm: kworker/1:10)
[  182.312222][ T5921] loop4: detected capacity change from 0 to 512
[  182.318713][   T28] audit: type=1400 audit(1754241022.178:352): avc:  denied  { name_bind } for  pid=5920 comm="syz.3.2083" src=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  182.324845][ T5921] EXT4-fs: Ignoring removed nomblk_io_submit option
[  182.365827][ T5921] /dev/loop4: Can't open blockdev
[  182.371420][   T28] audit: type=1400 audit(1754241022.218:353): avc:  denied  { mounton } for  pid=5923 comm="syz.5.2085" path="/195/file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  182.391900][ T5930] loop3: detected capacity change from 0 to 512
[  182.409719][ T5930] /dev/loop3: Can't open blockdev
[  182.439505][   T28] audit: type=1400 audit(1754241022.228:354): avc:  denied  { setattr } for  pid=5923 comm="syz.5.2085" name="file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  182.465938][   T28] audit: type=1400 audit(1754241022.228:355): avc:  denied  { read } for  pid=5923 comm="syz.5.2085" name="file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  182.530188][ T5944] loop3: detected capacity change from 0 to 512
[  182.537507][ T5944] /dev/loop3: Can't open blockdev
[  182.674431][  T428] tipc: Left network mode
[  182.893148][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.900383][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.914956][ T5974] device bridge_slave_0 entered promiscuous mode
[  182.932960][ T5991] loop2: detected capacity change from 0 to 256
[  182.933015][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.946623][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.955623][ T5974] device bridge_slave_1 entered promiscuous mode
[  182.962878][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  182.967745][ T5991] loop2: detected capacity change from 0 to 512
[  182.976675][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.980808][ T5991] /dev/loop2: Can't open blockdev
[  182.993169][  T457] Buffer I/O error on dev loop2, logical block 0, async page read
[  183.164742][ T6008] loop2: detected capacity change from 0 to 128
[  183.181632][ T6008] /dev/loop2: Can't open blockdev
[  183.205650][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.212807][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.220146][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.227201][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.284001][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  183.307865][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.322355][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.339283][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  183.351036][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.358183][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.366698][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  183.376239][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.383362][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.404487][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  183.413210][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  183.429467][ T6012] user requested TSC rate below hardware speed
[  183.445705][  T428] device bridge_slave_1 left promiscuous mode
[  183.462344][  T428] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.473683][  T428] device bridge_slave_0 left promiscuous mode
[  183.481472][  T428] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.491523][  T428] device veth1_macvtap left promiscuous mode
[  183.656962][ T5974] device veth0_vlan entered promiscuous mode
[  183.671619][ T5974] device veth1_macvtap entered promiscuous mode
[  183.679588][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.693830][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.702460][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.716635][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.724959][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.755693][ T6039] loop2: detected capacity change from 0 to 40427
[  183.788375][  T457] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  183.836264][  T779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  183.853322][  T779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  183.974965][  T779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  183.991858][  T779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  184.012294][ T6053] usb usb1: usbfs: process 6053 (syz.1.2142) did not claim interface 0 before use
[  184.055872][ T6055] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  184.093282][ T6063] loop1: detected capacity change from 0 to 512
[  184.106940][ T6063] /dev/loop1: Can't open blockdev
[  184.130212][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  184.229882][ T6081] loop1: detected capacity change from 0 to 256
[  184.236733][ T6081] exfat: Deprecated parameter 'namecase'
[  184.242952][ T6081] /dev/loop1: Can't open blockdev
[  184.298195][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  184.318066][ T1064] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  184.369019][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  184.369036][   T28] audit: type=1400 audit(1754241024.239:358): avc:  denied  { shutdown } for  pid=6086 comm="syz.1.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  184.457526][  T360] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  184.508428][ T1064] usb 3-1: config 0 has no interfaces?
[  184.514062][ T1064] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  184.524289][ T1064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.549431][ T1064] usb 3-1: config 0 descriptor??
[  184.571379][   T28] audit: type=1400 audit(1754241024.439:359): avc:  denied  { write } for  pid=6099 comm="syz.1.2162" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  184.647421][  T360] usb 7-1: Using ep0 maxpacket: 32
[  184.657397][  T360] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.680064][  T360] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  184.689908][  T360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.702407][  T360] usb 7-1: config 0 descriptor??
[  184.715570][  T360] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  184.756393][  T360] usb 3-1: USB disconnect, device number 8
[  185.026970][  T786] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  185.069913][  T360] usb 7-1: USB disconnect, device number 2
[  185.202546][ T6128] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2174'.
[  185.217025][  T786] usb 2-1: Using ep0 maxpacket: 32
[  185.218926][ T6130] loop4: detected capacity change from 0 to 256
[  185.224471][  T786] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  185.236901][  T786] usb 2-1: config 0 has an invalid descriptor of length 155, skipping remainder of the config
[  185.247497][  T786] usb 2-1: config 0 has no interface number 0
[  185.254103][  T786] usb 2-1: config 0 interface 69 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  185.267735][  T786] usb 2-1: config 0 interface 69 has no altsetting 0
[  185.277999][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  185.289600][  T786] usb 2-1: New USB device found, idVendor=061d, idProduct=dc50, bcdDevice=ce.6f
[  185.305907][  T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.315250][  T786] usb 2-1: Product: syz
[  185.324721][  T786] usb 2-1: Manufacturer: syz
[  185.329614][  T786] usb 2-1: SerialNumber: syz
[  185.344762][  T786] usb 2-1: config 0 descriptor??
[  185.501020][ T6157] loop4: detected capacity change from 0 to 512
[  185.511007][ T6157] /dev/loop4: Can't open blockdev
[  185.542757][ T6159] loop6: detected capacity change from 0 to 512
[  185.562719][ T6106] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2165'.
[  185.580661][ T6159] EXT4-fs: Ignoring removed nobh option
[  185.590780][  T786] usb 2-1: USB disconnect, device number 7
[  185.642049][ T6159] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.2187: corrupted inode contents
[  185.654878][ T6159] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #3: comm syz.6.2187: mark_inode_dirty error
[  185.666415][   T28] audit: type=1400 audit(1754241025.520:360): avc:  denied  { mount } for  pid=6168 comm="syz.2.2190" name="/" dev="configfs" ino=14067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  185.669174][ T6159] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.2187: corrupted inode contents
[  185.689658][   T28] audit: type=1400 audit(1754241025.540:361): avc:  denied  { search } for  pid=6168 comm="syz.2.2190" name="/" dev="configfs" ino=14067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  185.738020][ T6171] loop2: detected capacity change from 0 to 1024
[  185.767498][ T6171] EXT4-fs: Ignoring removed i_version option
[  185.774365][ T6171] /dev/loop2: Can't open blockdev
[  185.880424][   T28] audit: type=1400 audit(1754241025.540:362): avc:  denied  { read } for  pid=6168 comm="syz.2.2190" name="/" dev="configfs" ino=14067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  185.904185][ T6159] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.2187: mark_inode_dirty error
[  185.980917][   T28] audit: type=1400 audit(1754241025.540:363): avc:  denied  { open } for  pid=6168 comm="syz.2.2190" path="/" dev="configfs" ino=14067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  186.003490][ T6159] Quota error (device loop6): write_blk: dquota write failed
[  186.011076][ T6159] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  186.021237][ T6159] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.2187: Failed to acquire dquot type 0
[  186.038149][ T6159] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.2187: corrupted inode contents
[  186.054495][ T6159] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #16: comm syz.6.2187: mark_inode_dirty error
[  186.066875][ T6159] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.2187: corrupted inode contents
[  186.082554][ T6159] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.2187: mark_inode_dirty error
[  186.094627][ T6159] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.2187: corrupted inode contents
[  186.107794][ T6159] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  186.118385][ T6159] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.2187: corrupted inode contents
[  186.131096][ T6159] EXT4-fs error (device loop6): ext4_truncate:4314: inode #16: comm syz.6.2187: mark_inode_dirty error
[  186.142830][ T6159] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  186.152382][ T6159] EXT4-fs (loop6): 1 truncate cleaned up
[  186.158427][ T6159] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  186.167588][ T6159] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.178788][ T6159] EXT4-fs (loop6): unmounting filesystem.
[  186.247543][ T6195] loop6: detected capacity change from 0 to 256
[  186.255537][   T28] audit: type=1400 audit(1754241026.120:364): avc:  denied  { mount } for  pid=6194 comm="syz.6.2202" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  186.278168][   T28] audit: type=1400 audit(1754241026.150:365): avc:  denied  { unmount } for  pid=5974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  186.438215][ T6212] loop2: detected capacity change from 0 to 512
[  186.447960][ T6212] EXT4-fs: Ignoring removed orlov option
[  186.453879][ T6212] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.461741][ T6212] /dev/loop2: Can't open blockdev
[  186.470117][ T6214] loop4: detected capacity change from 0 to 1024
[  186.476970][ T6214] /dev/loop4: Can't open blockdev
[  186.565017][ T6219] loop2: detected capacity change from 0 to 512
[  186.576249][ T6219] /dev/loop2: Can't open blockdev
[  186.611671][ T6221] loop4: detected capacity change from 0 to 256
[  186.648863][ T6223] loop4: detected capacity change from 0 to 128
[  186.681112][ T6227] loop4: detected capacity change from 0 to 2048
[  186.690317][ T6227] /dev/loop4: Can't open blockdev
[  187.540014][ T6249] loop6: detected capacity change from 0 to 2048
[  188.273864][ T6268] fuse: Bad value for 'fd'
[  188.661826][ T6295] loop4: detected capacity change from 0 to 8192
[  188.747865][ T6309] loop4: detected capacity change from 0 to 512
[  188.767234][ T6309] /dev/loop4: Can't open blockdev
[  188.858266][ T6324] loop4: detected capacity change from 0 to 128
[  189.146881][ T6332] loop6: detected capacity change from 0 to 40427
[  189.165465][ T6332] F2FS-fs (loop6): fault_injection options not supported
[  189.173669][ T6332] F2FS-fs (loop6): invalid crc value
[  189.203900][ T6332] F2FS-fs (loop6): Found nat_bits in checkpoint
[  189.282586][ T6342] loop4: detected capacity change from 0 to 40427
[  189.303364][ T6332] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  189.309230][ T6362] loop1: detected capacity change from 0 to 256
[  189.382170][ T6368] loop4: detected capacity change from 0 to 512
[  189.390091][ T5974] syz-executor: attempt to access beyond end of device
[  189.390091][ T5974] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  189.408517][ T6372] loop1: detected capacity change from 0 to 256
[  189.425318][ T6368] /dev/loop4: Can't open blockdev
[  189.435134][ T6372] exfat: Deprecated parameter 'namecase'
[  189.443792][ T6372] /dev/loop1: Can't open blockdev
[  189.516804][ T6380] syz.5.2286 uses obsolete (PF_INET,SOCK_PACKET)
[  189.543240][ T6382] loop4: detected capacity change from 0 to 256
[  189.566450][ T6382] /dev/loop4: Can't open blockdev
[  189.867787][ T6401] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  190.882964][ T6441] loop1: detected capacity change from 0 to 512
[  190.886293][ T6439] loop2: detected capacity change from 0 to 512
[  190.906392][ T6439] EXT4-fs: Ignoring removed i_version option
[  190.912842][ T6439] /dev/loop2: Can't open blockdev
[  190.915671][ T6441] /dev/loop1: Can't open blockdev
[  190.944054][ T6441] loop1: detected capacity change from 0 to 128
[  190.951006][ T6441] /dev/loop1: Can't open blockdev
[  192.267941][ T6467] loop4: detected capacity change from 0 to 256
[  192.280051][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'.
[  192.408964][ T6467] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  192.454474][ T6467] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  192.502424][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  192.502441][   T28] audit: type=1400 audit(1754241032.363:377): avc:  denied  { read } for  pid=6477 comm="syz.6.2323" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  192.555291][   T28] audit: type=1400 audit(1754241032.403:378): avc:  denied  { open } for  pid=6477 comm="syz.6.2323" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  192.637111][ T6482] loop6: detected capacity change from 0 to 256
[  192.677268][ T6482] FAT-fs (loop6): Directory bread(block 64) failed
[  192.690938][ T6482] FAT-fs (loop6): Directory bread(block 65) failed
[  192.712073][ T6482] FAT-fs (loop6): Directory bread(block 66) failed
[  192.727970][ T6482] FAT-fs (loop6): Directory bread(block 67) failed
[  192.746324][ T6482] FAT-fs (loop6): Directory bread(block 68) failed
[  192.753474][ T6482] FAT-fs (loop6): Directory bread(block 69) failed
[  192.764222][ T6482] FAT-fs (loop6): Directory bread(block 70) failed
[  192.773743][ T6482] FAT-fs (loop6): Directory bread(block 71) failed
[  192.780537][ T6482] FAT-fs (loop6): Directory bread(block 72) failed
[  192.788943][ T6482] FAT-fs (loop6): Directory bread(block 73) failed
[  192.796393][ T6478] loop2: detected capacity change from 0 to 40427
[  192.819049][ T6482] syz.6.2325: attempt to access beyond end of device
[  192.819049][ T6482] loop6: rw=2051, sector=1224, nr_sectors = 64 limit=256
[  193.619969][ T6501] loop6: detected capacity change from 0 to 512
[  193.732061][ T6501] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  193.744545][ T6501] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.764983][ T6514] loop4: detected capacity change from 0 to 16
[  193.774344][ T6501] EXT4-fs (loop6): resizing filesystem from 128 to 1 blocks
[  193.788838][ T6501] EXT4-fs warning (device loop6): ext4_resize_fs:2051: can't shrink FS - resize aborted
[  193.796469][ T6514] /dev/loop4: Can't open blockdev
[  194.062885][ T6502] loop1: detected capacity change from 0 to 40427
[  194.072695][ T6524] loop4: detected capacity change from 0 to 16
[  194.079881][ T6524] erofs: (device loop4): mounted with root inode @ nid 36.
[  194.089465][ T6524] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  194.099198][ T6524] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  194.110237][ T6524] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  194.110700][  T457] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  194.503257][ T5974] EXT4-fs (loop6): unmounting filesystem.
[  194.545174][ T6528] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  194.574503][ T6528] kvm: pic: level sensitive irq not supported
[  194.574577][ T6528] kvm: pic: non byte read
[  194.580169][ T6539] loop2: detected capacity change from 0 to 1024
[  194.595213][ T6539] /dev/loop2: Can't open blockdev
[  194.676377][ T6549] loop2: detected capacity change from 0 to 256
[  194.769606][  T334] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  194.951990][   T19] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  195.396718][ T6574] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2355'.
[  195.401741][   T19] usb 7-1: Using ep0 maxpacket: 16
[  195.426976][   T19] usb 7-1: config 0 has an invalid interface number: 180 but max is 0
[  195.441773][   T19] usb 7-1: config 0 has no interface number 0
[  195.460824][   T19] usb 7-1: New USB device found, idVendor=0421, idProduct=0009, bcdDevice= 0.00
[  195.484840][   T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.493119][   T19] usb 7-1: Product: syz
[  195.497429][   T19] usb 7-1: Manufacturer: syz
[  195.503021][   T19] usb 7-1: SerialNumber: syz
[  195.520944][   T19] usb 7-1: config 0 descriptor??
[  195.529213][   T19] usb 7-1: bad CDC descriptors
[  195.740149][ T6606] loop1: detected capacity change from 0 to 1024
[  195.758125][ T6606] EXT4-fs: dax option not supported
[  195.902673][  T927] usb 7-1: USB disconnect, device number 3
[  195.979801][   T28] audit: type=1400 audit(1754241035.845:379): avc:  denied  { bind } for  pid=6609 comm="syz.4.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  196.035561][ T6626] fuse: Bad value for 'fd'
[  196.177057][ T6639] loop1: detected capacity change from 0 to 256
[  196.192708][ T6641] overlayfs: failed to clone upperpath
[  196.244789][ T6639] /dev/loop1: Can't open blockdev
[  196.264328][ T6615] loop2: detected capacity change from 0 to 40427
[  197.389788][ T6669] loop1: detected capacity change from 0 to 128
[  197.684342][ T6677] loop1: detected capacity change from 0 to 1024
[  197.711219][ T6677] EXT4-fs: Ignoring removed nobh option
[  197.725274][ T6677] /dev/loop1: Can't open blockdev
[  197.791043][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  198.146277][   T19] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  198.156013][ T6689] loop1: detected capacity change from 0 to 1024
[  198.157858][ T6691] loop4: detected capacity change from 0 to 256
[  198.166319][ T6689] /dev/loop1: Can't open blockdev
[  198.179671][ T6689] syz.1.2408 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  198.191690][ T6689] binfmt_misc: register: failed to install interpreter file ./file2
[  198.213139][  T334] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  198.332719][   T19] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  198.341973][   T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.350004][   T19] usb 7-1: Product: syz
[  198.356634][   T19] usb 7-1: Manufacturer: syz
[  198.361968][   T19] usb 7-1: SerialNumber: syz
[  198.384830][   T19] usb 7-1: config 0 descriptor??
[  198.523560][ T6703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2413'.
[  198.700836][ T6707] loop4: detected capacity change from 0 to 256
[  198.862107][ T6711] loop4: detected capacity change from 0 to 512
[  198.909906][ T6711] /dev/loop4: Can't open blockdev
[  199.117712][ T6663] loop2: detected capacity change from 0 to 131072
[  199.174338][ T6725] loop1: detected capacity change from 0 to 256
[  199.274136][ T6735] loop2: detected capacity change from 0 to 256
[  199.518365][ T6758] syz.5.2437[6758] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  199.518460][ T6758] syz.5.2437[6758] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  200.859141][ T1837] usb 7-1: USB disconnect, device number 4
[  201.016698][ T6781] loop6: detected capacity change from 0 to 512
[  201.103122][   T28] audit: type=1400 audit(1754241040.977:380): avc:  denied  { connect } for  pid=6785 comm="syz.1.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  201.260631][   T28] audit: type=1400 audit(1754241041.138:381): avc:  denied  { ioctl } for  pid=6787 comm="syz.1.2448" path="socket:[47763]" dev="sockfs" ino=47763 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  201.502043][    C0] hrtimer: interrupt took 20394 ns
[  202.085884][ T6810] tipc: Can't bind to reserved service type 0
[  202.105083][ T6813] loop1: detected capacity change from 0 to 256
[  202.111869][ T6813] /dev/loop1: Can't open blockdev
[  202.153892][ T6817] loop1: detected capacity change from 0 to 16
[  202.161998][ T6817] /dev/loop1: Can't open blockdev
[  202.262607][ T6832] loop1: detected capacity change from 0 to 512
[  202.270865][ T6832] /dev/loop1: Can't open blockdev
[  202.314079][ T6837] loop1: detected capacity change from 0 to 512
[  202.331783][ T6837] EXT4-fs: Ignoring removed nobh option
[  202.358654][ T6837] /dev/loop1: Can't open blockdev
[  202.368681][   T28] audit: type=1400 audit(1754241042.248:382): avc:  denied  { write } for  pid=6841 comm="syz.4.2471" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  202.395748][ T6845] loop6: detected capacity change from 0 to 256
[  202.458789][ T6845] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.550119][ T6845] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  202.579847][ T6845] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  202.613253][   T28] audit: type=1400 audit(1754241042.488:383): avc:  denied  { read write } for  pid=6844 comm="syz.6.2472" name="file0" dev="loop6" ino=1048688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  202.633750][ T6856] loop4: detected capacity change from 0 to 512
[  202.651747][   T28] audit: type=1400 audit(1754241042.498:384): avc:  denied  { open } for  pid=6844 comm="syz.6.2472" path="/36/file0/file0/file0" dev="loop6" ino=1048688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  202.680981][   T28] audit: type=1400 audit(1754241042.528:385): avc:  denied  { mounton } for  pid=6844 comm="syz.6.2472" path="/36/file0/file0" dev="loop6" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  202.773286][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.942141][ T6876] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2486'.
[  204.685684][ T6893] loop4: detected capacity change from 0 to 512
[  204.798654][ T6893] /dev/loop4: Can't open blockdev
[  205.037876][ T6901] loop2: detected capacity change from 0 to 512
[  205.461643][ T6901] /dev/loop2: Can't open blockdev
[  205.795137][ T6913] loop2: detected capacity change from 0 to 1024
[  205.846953][ T6913] EXT4-fs: Ignoring removed orlov option
[  205.852680][ T6913] EXT4-fs: Ignoring removed mblk_io_submit option
[  205.866580][ T6913] /dev/loop2: Can't open blockdev
[  206.076472][ T6907] loop4: detected capacity change from 0 to 40427
[  206.088611][   T28] audit: type=1400 audit(1754241045.970:386): avc:  denied  { create } for  pid=6936 comm="syz.6.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  206.117201][  T457] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  206.753668][   T28] audit: type=1400 audit(1754241046.630:387): avc:  denied  { execute } for  pid=6908 comm="syz.5.2499" path="/339/file1" dev="tmpfs" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  206.878048][ T6945] loop6: detected capacity change from 0 to 40427
[  206.941313][ T6945] F2FS-fs (loop6): heap/no_heap options were deprecated
[  206.958224][ T6945] F2FS-fs (loop6): fault_injection options not supported
[  206.973356][ T6945] F2FS-fs (loop6): fault_type options not supported
[  207.004123][ T6945] F2FS-fs (loop6): invalid crc value
[  207.040024][ T6945] F2FS-fs (loop6): Found nat_bits in checkpoint
[  207.145429][ T6945] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  207.229512][ T6945] F2FS-fs (loop6): Inconsistent error blkaddr:5632, sit bitmap:0
[  207.256213][ T6945] CPU: 0 PID: 6945 Comm: syz.6.2515 Not tainted 6.1.145-syzkaller-00038-g3b4ff5af8d36 #0
[  207.266097][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  207.276205][ T6945] Call Trace:
[  207.279519][ T6945]  <TASK>
[  207.282476][ T6945]  __dump_stack+0x21/0x24
[  207.286857][ T6945]  dump_stack_lvl+0xee/0x150
[  207.291475][ T6945]  ? __cfi_dump_stack_lvl+0x8/0x8
[  207.296530][ T6945]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[  207.302568][ T6945]  dump_stack+0x15/0x24
[  207.306807][ T6945]  __f2fs_is_valid_blkaddr+0xce6/0x1460
[  207.312432][ T6945]  f2fs_is_valid_blkaddr+0x23/0x30
[  207.317591][ T6945]  f2fs_map_blocks+0xc93/0x3a60
[  207.322522][ T6945]  ? __cfi_f2fs_map_blocks+0x10/0x10
[  207.327863][ T6945]  ? __alloc_pages+0x1c3/0x450
[  207.332683][ T6945]  ? __folio_alloc+0x12/0x40
[  207.337603][ T6945]  ? xas_start+0x317/0x3e0
[  207.342107][ T6945]  ? xas_load+0x39e/0x3b0
[  207.346483][ T6945]  ? xa_load+0xad/0xd0
[  207.350629][ T6945]  f2fs_mpage_readpages+0xa3a/0x1b70
[  207.356577][ T6945]  ? cgroup_rstat_updated+0xf5/0x370
[  207.362695][ T6945]  ? dquot_release_reservation_block+0xa0/0xa0
[  207.368889][ T6945]  ? cgroup_rstat_updated+0xf5/0x370
[  207.374221][ T6945]  ? xas_nomem+0x6b/0x1f0
[  207.378606][ T6945]  f2fs_readahead+0xfc/0x240
[  207.383224][ T6945]  ? __cfi_f2fs_readahead+0x10/0x10
[  207.388626][ T6945]  read_pages+0x1b0/0xdd0
[  207.392979][ T6945]  ? __cfi___filemap_add_folio+0x10/0x10
[  207.399196][ T6945]  ? page_cache_ra_unbounded+0x720/0x720
[  207.404856][ T6945]  ? folio_add_lru+0x260/0x390
[  207.409657][ T6945]  ? filemap_add_folio+0x105/0x150
[  207.414803][ T6945]  page_cache_ra_unbounded+0x5d1/0x720
[  207.420372][ T6945]  ? __cfi_page_cache_ra_unbounded+0x10/0x10
[  207.426632][ T6945]  ? __switch_to+0x51f/0xe30
[  207.431329][ T6945]  page_cache_ra_order+0x36a/0xb70
[  207.436457][ T6945]  ? finish_task_switch+0x16b/0x7b0
[  207.441669][ T6945]  ? __switch_to_asm+0x3a/0x60
[  207.446450][ T6945]  ? __schedule+0xb8f/0x14e0
[  207.451054][ T6945]  ? __cfi_page_cache_ra_order+0x10/0x10
[  207.456711][ T6945]  ondemand_readahead+0x817/0xdb0
[  207.461846][ T6945]  ? __kasan_check_read+0x11/0x20
[  207.466893][ T6945]  ? page_cache_sync_ra+0x490/0x490
[  207.472121][ T6945]  page_cache_sync_ra+0x41b/0x490
[  207.477171][ T6945]  f2fs_readdir+0x444/0x940
[  207.481875][ T6945]  ? __cfi_f2fs_readdir+0x10/0x10
[  207.486948][ T6945]  ? down_read_killable+0xb6/0x100
[  207.492099][ T6945]  ? __cfi_down_read_killable+0x10/0x10
[  207.497759][ T6945]  ? fsnotify_perm+0x269/0x5b0
[  207.502562][ T6945]  ? security_file_permission+0x94/0xb0
[  207.508248][ T6945]  iterate_dir+0x271/0x610
[  207.513165][ T6945]  ? __cfi_f2fs_readdir+0x10/0x10
[  207.518232][ T6945]  __se_sys_getdents64+0xe5/0x240
[  207.523376][ T6945]  ? __x64_sys_getdents64+0x90/0x90
[  207.528612][ T6945]  ? xfd_validate_state+0x70/0x150
[  207.533776][ T6945]  ? __cfi_filldir64+0x10/0x10
[  207.538556][ T6945]  ? fpregs_restore_userregs+0x128/0x260
[  207.544210][ T6945]  __x64_sys_getdents64+0x7b/0x90
[  207.549255][ T6945]  x64_sys_call+0x15c/0x9a0
[  207.553870][ T6945]  do_syscall_64+0x4c/0xa0
[  207.558384][ T6945]  ? clear_bhb_loop+0x30/0x80
[  207.563100][ T6945]  ? clear_bhb_loop+0x30/0x80
[  207.567874][ T6945]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.573816][ T6945] RIP: 0033:0x7fd8aa98eb69
[  207.578424][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.598249][ T6945] RSP: 002b:00007fd8ab7a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  207.606682][ T6945] RAX: ffffffffffffffda RBX: 00007fd8aabb5fa0 RCX: 00007fd8aa98eb69
[  207.614669][ T6945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  207.622654][ T6945] RBP: 00007fd8aaa11df1 R08: 0000000000000000 R09: 0000000000000000
[  207.630900][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  207.639058][ T6945] R13: 0000000000000000 R14: 00007fd8aabb5fa0 R15: 00007ffe6d2dfa28
[  207.647055][ T6945]  </TASK>
[  207.678536][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2526'.
[  207.689190][ T6982] netlink: 'syz.2.2526': attribute type 13 has an invalid length.
[  207.705786][ T6945] F2FS-fs (loop6): Inconsistent error blkaddr:5632, sit bitmap:0
[  207.710085][ T6982] netlink: 'syz.2.2526': attribute type 17 has an invalid length.
[  207.721720][ T6945] CPU: 1 PID: 6945 Comm: syz.6.2515 Not tainted 6.1.145-syzkaller-00038-g3b4ff5af8d36 #0
[  207.731666][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  207.741788][ T6945] Call Trace:
[  207.745188][ T6945]  <TASK>
[  207.748150][ T6945]  __dump_stack+0x21/0x24
[  207.752568][ T6945]  dump_stack_lvl+0xee/0x150
[  207.757305][ T6945]  ? __cfi_dump_stack_lvl+0x8/0x8
[  207.762396][ T6945]  ? __f2fs_is_valid_blkaddr+0xcb3/0x1460
[  207.768160][ T6945]  dump_stack+0x15/0x24
[  207.772364][ T6945]  __f2fs_is_valid_blkaddr+0xce6/0x1460
[  207.777980][ T6945]  f2fs_is_valid_blkaddr+0x23/0x30
[  207.783142][ T6945]  f2fs_get_read_data_page+0x4e2/0x840
[  207.788671][ T6945]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[  207.794880][ T6945]  ? __kasan_check_read+0x11/0x20
[  207.799968][ T6945]  f2fs_find_data_page+0x198/0x3a0
[  207.805140][ T6945]  f2fs_readdir+0x457/0x940
[  207.809711][ T6945]  ? __cfi_f2fs_readdir+0x10/0x10
[  207.815397][ T6945]  ? down_read_killable+0xb6/0x100
[  207.820557][ T6945]  ? __cfi_down_read_killable+0x10/0x10
[  207.826224][ T6945]  ? fsnotify_perm+0x269/0x5b0
[  207.831045][ T6945]  ? security_file_permission+0x94/0xb0
[  207.836619][ T6945]  iterate_dir+0x271/0x610
[  207.841160][ T6945]  ? __cfi_f2fs_readdir+0x10/0x10
[  207.846220][ T6945]  __se_sys_getdents64+0xe5/0x240
[  207.851296][ T6945]  ? __x64_sys_getdents64+0x90/0x90
[  207.856512][ T6945]  ? xfd_validate_state+0x70/0x150
[  207.861645][ T6945]  ? __cfi_filldir64+0x10/0x10
[  207.866952][ T6945]  ? fpregs_restore_userregs+0x128/0x260
[  207.872614][ T6945]  __x64_sys_getdents64+0x7b/0x90
[  207.877673][ T6945]  x64_sys_call+0x15c/0x9a0
[  207.882193][ T6945]  do_syscall_64+0x4c/0xa0
[  207.886620][ T6945]  ? clear_bhb_loop+0x30/0x80
[  207.891317][ T6945]  ? clear_bhb_loop+0x30/0x80
[  207.896036][ T6945]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.901936][ T6945] RIP: 0033:0x7fd8aa98eb69
[  207.906358][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.926821][ T6945] RSP: 002b:00007fd8ab7a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  207.935245][ T6945] RAX: ffffffffffffffda RBX: 00007fd8aabb5fa0 RCX: 00007fd8aa98eb69
[  207.943239][ T6945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  207.951216][ T6945] RBP: 00007fd8aaa11df1 R08: 0000000000000000 R09: 0000000000000000
[  207.959283][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  207.967273][ T6945] R13: 0000000000000000 R14: 00007fd8aabb5fa0 R15: 00007ffe6d2dfa28
[  207.975262][ T6945]  </TASK>
[  208.016300][ T5974] syz-executor: attempt to access beyond end of device
[  208.016300][ T5974] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.109973][ T6982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  208.141281][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  208.157079][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  208.206142][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  208.244437][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  208.254474][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.262799][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.271215][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.280016][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.380833][ T7003] loop4: detected capacity change from 0 to 1024
[  208.426867][ T7003] /dev/loop4: Can't open blockdev
[  208.476304][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  208.477698][ T7012] loop2: detected capacity change from 0 to 512
[  208.531273][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2542'.
[  208.544459][  T334] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  208.673761][ T7020] loop2: detected capacity change from 0 to 16
[  208.686553][ T7020] /dev/loop2: Can't open blockdev
[  208.838595][ T7018] loop4: detected capacity change from 0 to 40427
[  208.863742][ T7034] loop2: detected capacity change from 0 to 256
[  208.963375][ T7043] loop2: detected capacity change from 0 to 512
[  208.970959][ T7040] loop6: detected capacity change from 0 to 1024
[  208.977971][ T7043] EXT4-fs: Ignoring removed orlov option
[  208.987602][ T7043] /dev/loop2: Can't open blockdev
[  209.030788][ T7040] EXT4-fs (loop6): orphan cleanup on readonly fs
[  209.660041][ T7040] EXT4-fs (loop6): 1 truncate cleaned up
[  209.742228][ T7040] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  209.776217][ T7057] loop4: detected capacity change from 0 to 256
[  209.811597][ T5974] EXT4-fs (loop6): unmounting filesystem.
[  209.828644][ T7055] fuse: root generation should be zero
[  209.971805][ T7064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7064 comm=syz.6.2561
[  210.207303][ T7074] loop6: detected capacity change from 0 to 512
[  210.324893][ T7074] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  210.364609][ T7074] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.409174][ T7074] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2566: bg 0: block 345: padding at end of block bitmap is not set
[  210.426522][ T7074] EXT4-fs (loop6): Remounting filesystem read-only
[  210.435980][ T7074] Quota error (device loop6): write_blk: dquota write failed
[  210.453681][ T7074] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  210.477038][ T7074] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  210.574169][ T7074] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.2566: Failed to acquire dquot type 1
[  210.596338][ T7066] loop4: detected capacity change from 0 to 40427
[  210.616945][ T7074] EXT4-fs (loop6): Remounting filesystem read-only
[  210.627927][ T7085] loop1: detected capacity change from 0 to 512
[  210.642514][ T7085] /dev/loop1: Can't open blockdev
[  210.648619][  T457] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  210.664743][ T5974] EXT4-fs (loop6): unmounting filesystem.
[  210.672755][ T7087] loop2: detected capacity change from 0 to 512
[  210.717434][ T7087] /dev/loop2: Can't open blockdev
[  211.013970][  T340] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  211.053913][ T6889] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  211.083912][  T927] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  211.101481][ T7123] tap0: tun_chr_ioctl cmd 1074025677
[  211.106979][ T7123] tap0: linktype set to 774
[  211.146507][ T7125] loop4: detected capacity change from 0 to 256
[  211.153249][ T7125] /dev/loop4: Can't open blockdev
[  211.221466][  T340] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  211.229849][  T340] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  211.239364][  T340] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  211.249893][  T340] usb 7-1: config 220 has no interface number 2
[  211.256588][  T340] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  211.259724][ T6889] usb 3-1: Using ep0 maxpacket: 32
[  211.270350][  T340] usb 7-1: config 220 interface 0 has no altsetting 0
[  211.276929][ T6889] usb 3-1: unable to get BOS descriptor or descriptor too short
[  211.282225][  T340] usb 7-1: config 220 interface 76 has no altsetting 0
[  211.290802][ T6889] usb 3-1: config 0 has no interfaces?
[  211.297001][  T340] usb 7-1: config 220 interface 1 has no altsetting 0
[  211.303766][  T927] usb 2-1: Using ep0 maxpacket: 8
[  211.310635][  T340] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  211.314230][ T6889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  211.323184][  T340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.332138][ T6889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.340637][  T340] usb 7-1: Product: syz
[  211.348937][ T6889] usb 3-1: Product: syz
[  211.353104][  T340] usb 7-1: Manufacturer: syz
[  211.362614][  T340] usb 7-1: SerialNumber: syz
[  211.405867][ T7129] xt_TCPMSS: Only works on TCP SYN packets
[  211.596030][  T340] usb 7-1: selecting invalid altsetting 0
[  211.605631][ T6889] usb 3-1: Manufacturer: syz
[  211.610610][ T6889] usb 3-1: SerialNumber: syz
[  211.616427][  T927] usb 2-1: config 0 interface 0 has no altsetting 0
[  211.624220][ T6889] usb 3-1: config 0 descriptor??
[  211.638313][  T927] usb 2-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=4d.b9
[  211.640319][  T340] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  211.656998][  T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.662124][  T340] usb 7-1: No valid video chain found.
[  211.666381][  T927] usb 2-1: Product: syz
[  211.675256][  T927] usb 2-1: Manufacturer: syz
[  211.680061][  T927] usb 2-1: SerialNumber: syz
[  211.686134][  T340] usb 7-1: USB disconnect, device number 5
[  211.692936][  T927] usb 2-1: config 0 descriptor??
[  211.864150][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.874179][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.883051][  T688] usb 3-1: USB disconnect, device number 9
[  211.911833][  T927] usb 2-1: USB disconnect, device number 8
[  212.503271][  T688] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  212.528423][ T7202] loop1: detected capacity change from 0 to 256
[  212.535654][ T7202] /dev/loop1: Can't open blockdev
[  212.574300][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  212.598974][   T28] audit: type=1400 audit(1754241052.473:388): avc:  denied  { getopt } for  pid=7204 comm="syz.4.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  212.714206][  T688] usb 3-1: config index 0 descriptor too short (expected 159, got 149)
[  212.722559][  T688] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.749150][  T688] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.771340][  T688] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 1.40
[  212.785696][  T688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.796954][  T688] usb 3-1: Product: syz
[  212.801798][  T688] usb 3-1: Manufacturer: syz
[  212.807378][  T688] usb 3-1: SerialNumber: syz
[  212.819608][ T7230] loop4: detected capacity change from 0 to 1024
[  212.833571][  T688] usb 3-1: unit 5 not found!
[  212.836643][ T7230] /dev/loop4: Can't open blockdev
[  212.859697][ T7235] loop6: detected capacity change from 0 to 512
[  212.901860][ T7235] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  212.913601][ T7235] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  212.940694][ T7235] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.2641: corrupted inode contents
[  212.944294][ T7250] loop4: detected capacity change from 0 to 128
[  212.959493][ T7235] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #2: comm syz.6.2641: mark_inode_dirty error
[  212.977115][ T7235] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.2641: corrupted inode contents
[  212.989662][ T7235] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.2641: mark_inode_dirty error
[  213.004101][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  213.005330][   T28] audit: type=1400 audit(1754241052.883:389): avc:  denied  { map } for  pid=7249 comm="syz.4.2647" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  213.041906][  T688] usb 3-1: USB disconnect, device number 10
[  213.042929][  T927] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  213.064122][   T28] audit: type=1400 audit(1754241052.933:390): avc:  denied  { reparent } for  pid=7234 comm="syz.6.2641" name="file0" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  213.086654][   T28] audit: type=1400 audit(1754241052.933:391): avc:  denied  { rmdir } for  pid=7234 comm="syz.6.2641" name="file0" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  213.087821][ T5974] EXT4-fs (loop6): unmounting filesystem.
[  213.252873][  T927] usb 2-1: Using ep0 maxpacket: 16
[  213.260268][  T927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.279945][  T927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  213.293213][  T927] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  213.303601][  T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.315178][  T927] usb 2-1: config 0 descriptor??
[  213.462791][  T287] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  213.544279][ T7272] loop4: detected capacity change from 0 to 1024
[  213.589206][ T7272] EXT4-fs: Ignoring removed bh option
[  213.606240][ T7272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  213.640677][ T7272] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  213.652709][  T287] usb 7-1: Using ep0 maxpacket: 8
[  213.652928][ T7272] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  213.668041][ T7272] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[  213.678395][  T287] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  213.686945][  T287] usb 7-1: config 179 has no interface number 0
[  213.693705][  T287] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  213.705238][  T287] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  213.717180][  T287] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  213.736643][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.752874][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.763761][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.771243][  T287] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  213.781691][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.796355][  T287] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  213.814684][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.827099][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.834783][  T287] usb 7-1: config 179 interface 65 has no altsetting 0
[  213.842760][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.850367][  T287] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  213.859828][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.867417][  T287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.875987][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.887439][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.904534][  T287] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input7
[  213.915992][  T927] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  213.980413][  T927] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input8
[  214.005814][  T927] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  214.054809][  T927] usb 2-1: USB disconnect, device number 9
[  214.103157][   T28] audit: type=1400 audit(1754241053.984:392): avc:  denied  { append } for  pid=7260 comm="syz.6.2652" name="event4" dev="devtmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  214.129443][  T287] usb 7-1: USB disconnect, device number 6
[  214.129496][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  214.155368][  T287] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  214.187326][ T7283] fido_id[7283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  214.512186][    T6] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  214.542246][  T340] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  214.693664][    T6] usb 3-1: config 0 has no interfaces?
[  214.699253][    T6] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  214.708366][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.717348][    T6] usb 3-1: config 0 descriptor??
[  214.732081][  T340] usb 5-1: Using ep0 maxpacket: 32
[  214.746101][  T340] usb 5-1: unable to get BOS descriptor or descriptor too short
[  214.756346][  T340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.762426][  T927] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  214.767024][  T340] usb 5-1: config 0 has no interfaces?
[  214.781316][  T340] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  214.791869][  T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.800739][  T340] usb 5-1: Product: syz
[  214.805009][  T340] usb 5-1: Manufacturer: syz
[  214.809751][  T340] usb 5-1: SerialNumber: syz
[  214.817529][  T340] usb 5-1: config 0 descriptor??
[  214.928184][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.936923][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.946218][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.955079][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.964543][  T340] usb 3-1: USB disconnect, device number 11
[  214.993306][  T927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.004610][  T927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.015243][  T927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  215.028399][  T927] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  215.036699][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.037681][    T6] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  215.047140][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.053568][  T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.066816][  T662] usb 5-1: USB disconnect, device number 10
[  215.163845][  T927] usb 2-1: config 0 descriptor??
[  215.251801][    T6] usb 7-1: Using ep0 maxpacket: 32
[  215.258785][    T6] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.269274][    T6] usb 7-1: config 0 has no interfaces?
[  215.277543][    T6] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  215.286875][    T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.295202][    T6] usb 7-1: Product: syz
[  215.299534][    T6] usb 7-1: Manufacturer: syz
[  215.304335][    T6] usb 7-1: SerialNumber: syz
[  215.313857][    T6] usb 7-1: config 0 descriptor??
[  215.561760][  T340] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  215.584238][  T927] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  215.599905][  T927] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  215.661613][  T662] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  215.832677][  T340] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  215.843177][  T340] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  215.855285][  T340] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  215.864928][  T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.873156][  T340] usb 3-1: Product: syz
[  215.877505][  T340] usb 3-1: Manufacturer: syz
[  215.882425][  T340] usb 3-1: SerialNumber: syz
[  215.922983][  T662] usb 5-1: config index 0 descriptor too short (expected 159, got 149)
[  215.931713][  T662] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.942257][  T662] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  215.953391][  T662] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 1.40
[  215.964387][  T662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.972836][  T662] usb 5-1: Product: syz
[  215.977169][  T662] usb 5-1: Manufacturer: syz
[  215.981897][  T662] usb 5-1: SerialNumber: syz
[  216.133969][  T340] cdc_ncm 3-1:1.0: bind() failure
[  216.147503][   T28] audit: type=1400 audit(1754241056.025:393): avc:  denied  { mounton } for  pid=7346 comm="syz.5.2687" path="/397/file0" dev="tmpfs" ino=2111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  216.200211][  T662] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  216.216435][  T662] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  216.234795][  T662] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5)
[  216.253151][  T662] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5)
[  216.273974][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.305331][  T340] usb 3-1: USB disconnect, device number 12
[  216.357578][  T662] usb 5-1: USB disconnect, device number 11
[  216.365028][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.643207][    C1] plantronics 0003:047F:FFFF.000B: hid_field_extract() called with n (132) > 32! (syz.2.2663)
[  216.700591][ T7361] loop2: detected capacity change from 0 to 256
[  216.741989][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  216.858499][  T340] usb 2-1: USB disconnect, device number 10
[  216.992850][ T7368] overlayfs: failed to clone upperpath
[  217.059588][ T7365] loop4: detected capacity change from 0 to 40427
[  217.945212][  T360] usb 7-1: USB disconnect, device number 7
[  217.967667][ T7375] loop4: detected capacity change from 0 to 1024
[  218.010801][ T7375] EXT4-fs: Ignoring removed nobh option
[  218.016657][ T7375] EXT4-fs: Ignoring removed bh option
[  218.032478][ T7378] loop6: detected capacity change from 0 to 1024
[  218.042830][ T7384] loop1: detected capacity change from 0 to 512
[  218.049283][ T7375] EXT4-fs: Ignoring removed bh option
[  218.066305][ T7378] EXT4-fs: Ignoring removed nobh option
[  218.072802][ T7384] /dev/loop1: Can't open blockdev
[  218.079261][ T7375] /dev/loop4: Can't open blockdev
[  218.090429][ T7378] EXT4-fs: Ignoring removed bh option
[  218.110394][ T7378] EXT4-fs: Ignoring removed bh option
[  218.124518][ T7378] EXT4-fs: Mount option(s) incompatible with ext3
[  218.153031][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  218.432440][ T7382] loop2: detected capacity change from 0 to 40427
[  219.029209][ T7410] loop2: detected capacity change from 0 to 256
[  219.082744][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  219.779384][ T7426] loop4: detected capacity change from 0 to 512
[  219.786313][ T7426] EXT4-fs: Ignoring removed i_version option
[  219.792704][ T7426] /dev/loop4: Can't open blockdev
[  219.864812][  T334] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  220.226463][ T7440] loop4: detected capacity change from 0 to 256
[  220.307002][ T7442] loop2: detected capacity change from 0 to 256
[  220.316062][ T7442] /dev/loop2: Can't open blockdev
[  220.459332][   T28] audit: type=1400 audit(1754241060.337:394): avc:  denied  { read } for  pid=7453 comm="syz.2.2725" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  220.483639][   T28] audit: type=1400 audit(1754241060.337:395): avc:  denied  { open } for  pid=7453 comm="syz.2.2725" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  220.549215][   T39] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  220.844162][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.952384][   T39] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  220.971077][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.994268][   T39] usb 2-1: config 0 descriptor??
[  221.179918][ T7458] loop2: detected capacity change from 0 to 40427
[  221.276282][   T39] usbhid 2-1:0.0: can't add hid device: -71
[  221.284077][   T39] usbhid: probe of 2-1:0.0 failed with error -71
[  221.295030][   T39] usb 2-1: USB disconnect, device number 11
[  221.614117][ T7472] loop4: detected capacity change from 0 to 256
[  221.828559][   T39] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  221.915050][ T7484] loop6: detected capacity change from 0 to 1024
[  221.921942][ T7484] EXT4-fs: Ignoring removed nobh option
[  221.927594][ T7484] EXT4-fs: Ignoring removed bh option
[  221.933429][ T7484] EXT4-fs: Ignoring removed bh option
[  221.939476][ T7484] EXT4-fs: Mount option(s) incompatible with ext3
[  222.018414][   T39] usb 2-1: Using ep0 maxpacket: 32
[  222.024994][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.036511][   T39] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  222.045860][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.055336][   T39] usb 2-1: config 0 descriptor??
[  222.176605][ T7486] loop6: detected capacity change from 0 to 40427
[  222.195615][ T7486] F2FS-fs (loop6): fault_injection options not supported
[  222.214811][ T7486] F2FS-fs (loop6): invalid crc value
[  222.221557][ T7486] F2FS-fs (loop6): Found nat_bits in checkpoint
[  222.266231][ T7486] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  222.466811][   T39] usb 2-1: USB disconnect, device number 12
[  223.105526][ T5974] syz-executor: attempt to access beyond end of device
[  223.105526][ T5974] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  223.132041][ T7498] binder: BINDER_SET_CONTEXT_MGR already set
[  223.145516][ T7498] binder: 7493:7498 ioctl 4018620d 200000000040 returned -16
[  223.336602][ T7505] binder_alloc: 7503: binder_alloc_buf, no vma
[  223.742378][ T7518] binder_alloc: 7503: binder_alloc_buf, no vma
[  223.961788][ T7519] binder: BINDER_SET_CONTEXT_MGR already set
[  223.976280][ T7519] binder: 7513:7519 ioctl 4018620d 200000000040 returned -16
[  224.107372][  T340] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  224.257843][ T7517] loop1: detected capacity change from 0 to 40427
[  224.650911][  T340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.038684][  T340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.061269][ T7535] binder: BINDER_SET_CONTEXT_MGR already set
[  225.083317][ T7535] binder: 7534:7535 ioctl 4018620d 2000000000c0 returned -16
[  225.102350][ T7540] loop2: detected capacity change from 0 to 1024
[  225.104087][  T340] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  225.112340][ T7540] EXT4-fs: Ignoring removed nobh option
[  225.130231][ T7540] EXT4-fs: Ignoring removed bh option
[  225.136111][ T7540] EXT4-fs: Ignoring removed bh option
[  225.142713][ T7540] /dev/loop2: Can't open blockdev
[  225.146011][  T340] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  225.161598][ T7543] binder: BINDER_SET_CONTEXT_MGR already set
[  225.169672][ T7543] binder: 7534:7543 ioctl 4018620d 200000000040 returned -16
[  225.170538][ T7545] xt_TCPMSS: Only works on TCP SYN packets
[  225.183104][  T340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.192317][  T340] usb 7-1: config 0 descriptor??
[  225.203333][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  225.616730][  T340] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  225.626013][  T340] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  225.639879][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.647467][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.655146][ T7555] device bridge_slave_0 entered promiscuous mode
[  225.668586][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.676106][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.683968][ T7555] device bridge_slave_1 entered promiscuous mode
[  225.744292][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.751598][ T7555] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.761043][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.769102][ T7555] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.801532][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  225.809646][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.817465][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.831275][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  225.839556][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.846729][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.854249][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  225.862710][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.869854][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.885581][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  225.902680][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  225.919526][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  225.953863][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  225.964226][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  225.972234][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  226.016514][ T7555] device veth0_vlan entered promiscuous mode
[  226.032955][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  226.043417][ T7555] device veth1_macvtap entered promiscuous mode
[  226.060132][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  226.082919][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  226.300124][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.384243][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.490482][  T779] device bridge_slave_1 left promiscuous mode
[  226.496863][  T779] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.504521][  T779] device bridge_slave_0 left promiscuous mode
[  226.511461][  T779] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.520253][  T779] device veth1_macvtap left promiscuous mode
[  226.526401][  T779] device veth0_vlan left promiscuous mode
[  226.710709][ T7581] loop4: detected capacity change from 0 to 40427
[  226.908332][  T457] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  226.947068][ T7591] xt_TCPMSS: Only works on TCP SYN packets
[  227.066362][  T688] usb 7-1: reset high-speed USB device number 8 using dummy_hcd
[  227.463122][ T7593] loop2: detected capacity change from 0 to 40427
[  227.546608][  T457] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  227.644565][ T7607] loop4: detected capacity change from 0 to 1024
[  227.682735][ T7607] EXT4-fs: Ignoring removed nobh option
[  227.688526][ T7607] EXT4-fs: Ignoring removed bh option
[  227.693988][ T7607] EXT4-fs: Ignoring removed bh option
[  227.699838][ T7607] /dev/loop4: Can't open blockdev
[  227.863084][   T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  228.096967][   T39] usb 2-1: config 0 has no interfaces?
[  228.121294][   T39] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  228.187137][ T7617] binder: BINDER_SET_CONTEXT_MGR already set
[  228.202271][ T7617] binder: 7615:7617 ioctl 4018620d 200000000040 returned -16
[  228.202333][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.260037][   T39] usb 2-1: config 0 descriptor??
[  228.582922][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.592119][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.602038][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.611420][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.620741][  T287] usb 2-1: USB disconnect, device number 13
[  228.925354][  T340] usb 7-1: USB disconnect, device number 8
[  229.094918][  T287] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  229.130102][ T7644] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  229.150109][ T7644] loop6: detected capacity change from 0 to 256
[  229.173655][ T7644] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  229.182494][ T7634] loop2: detected capacity change from 0 to 40427
[  229.194552][ T7644] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  229.265442][ T7644] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  229.289887][  T287] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  229.306906][  T287] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  229.319401][  T287] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  229.328924][  T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.584143][  T287] usb 2-1: Product: syz
[  229.590086][  T287] usb 2-1: Manufacturer: syz
[  229.594811][  T287] usb 2-1: SerialNumber: syz
[  229.729358][ T7656] binder: BINDER_SET_CONTEXT_MGR already set
[  229.736532][ T7656] binder: 7652:7656 ioctl 4018620d 200000000040 returned -16
[  229.808902][  T287] cdc_ncm 2-1:1.0: bind() failure
[  229.877079][ T7661] binder: BINDER_SET_CONTEXT_MGR already set
[  229.883450][ T7661] binder: 7659:7661 ioctl 4018620d 200000000040 returned -16
[  229.887703][  T287] usb 2-1: USB disconnect, device number 14
[  229.950382][ T7663] loop2: detected capacity change from 0 to 1024
[  229.957418][ T7663] /dev/loop2: Can't open blockdev
[  230.335268][ T5568] udevd[5568]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  230.877501][ T7680] loop6: detected capacity change from 0 to 256
[  230.912788][ T7680] FAT-fs (loop6): Directory bread(block 64) failed
[  230.930613][ T7680] FAT-fs (loop6): Directory bread(block 65) failed
[  230.950788][ T7680] FAT-fs (loop6): Directory bread(block 66) failed
[  230.971807][ T7680] FAT-fs (loop6): Directory bread(block 67) failed
[  230.985695][ T7680] FAT-fs (loop6): Directory bread(block 68) failed
[  230.999861][ T7680] FAT-fs (loop6): Directory bread(block 69) failed
[  231.013938][ T7680] FAT-fs (loop6): Directory bread(block 70) failed
[  231.035301][ T7680] FAT-fs (loop6): Directory bread(block 71) failed
[  231.054388][ T7680] FAT-fs (loop6): Directory bread(block 72) failed
[  231.069639][ T7680] FAT-fs (loop6): Directory bread(block 73) failed
[  231.171465][ T7686] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  231.183602][ T7686] loop2: detected capacity change from 0 to 256
[  231.198585][ T7686] /dev/loop2: Can't open blockdev
[  231.378279][ T7700] loop2: detected capacity change from 0 to 512
[  231.385766][ T7700] EXT4-fs: Ignoring removed i_version option
[  231.391998][ T7700] /dev/loop2: Can't open blockdev
[  231.754580][ T7707] loop2: detected capacity change from 0 to 256
[  231.914641][ T7718] loop6: detected capacity change from 0 to 1024
[  231.965170][ T7706] loop1: detected capacity change from 0 to 40427
[  231.972239][ T7718] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  232.158581][ T7725] loop4: detected capacity change from 0 to 40427
[  232.361777][ T5974] EXT4-fs (loop6): unmounting filesystem.
[  232.851009][ T7732] loop1: detected capacity change from 0 to 40427
[  232.930992][  T457] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  233.324421][ T7745] loop4: detected capacity change from 0 to 40427
[  233.374282][ T7757] overlayfs: failed to resolve './file1': -2
[  233.663584][ T7761] loop6: detected capacity change from 0 to 40427
[  233.678779][ T7761] F2FS-fs (loop6): fault_injection options not supported
[  233.695999][ T7761] F2FS-fs (loop6): invalid crc value
[  233.723443][ T7761] F2FS-fs (loop6): Found nat_bits in checkpoint
[  233.872279][ T7761] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  233.933659][ T7780] loop4: detected capacity change from 0 to 1024
[  233.940493][ T7780] EXT4-fs: Ignoring removed i_version option
[  233.972613][ T7780] /dev/loop4: Can't open blockdev
[  234.028075][ T7781] binder: BINDER_SET_CONTEXT_MGR already set
[  234.037660][ T7781] binder: 7774:7781 ioctl 4018620d 200000000040 returned -16
[  234.754639][ T5974] syz-executor: attempt to access beyond end of device
[  234.754639][ T5974] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.179703][ T7791] syz.5.2834[7791] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  235.179791][ T7791] syz.5.2834[7791] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  235.237385][ T7794] syz.5.2834[7794] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  235.301093][ T7794] syz.5.2834[7794] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  235.335215][ T7784] loop1: detected capacity change from 0 to 40427
[  236.162126][ T7813] loop1: detected capacity change from 0 to 1024
[  236.169034][ T7813] /dev/loop1: Can't open blockdev
[  236.218505][ T7793] loop2: detected capacity change from 0 to 40427
[  236.280593][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  236.307903][  T334] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  236.446309][ T7825] loop4: detected capacity change from 0 to 256
[  236.532357][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  236.563071][ T7831] binder: BINDER_SET_CONTEXT_MGR already set
[  236.569234][ T7831] binder: 7826:7831 ioctl 4018620d 200000000040 returned -16
[  236.621388][  T927] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  236.801129][  T927] usb 7-1: Using ep0 maxpacket: 32
[  236.807654][  T927] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  236.828833][  T927] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  236.839550][  T927] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  236.860656][  T927] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  236.880330][  T927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.888817][  T927] usb 7-1: Product: syz
[  236.893594][  T927] usb 7-1: Manufacturer: syz
[  236.898478][  T927] usb 7-1: SerialNumber: syz
[  236.915203][  T927] cdc_ncm 7-1:1.0: skipping garbage
[  236.925153][  T927] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  236.936245][  T927] cdc_ncm 7-1:1.0: bind() failure
[  237.024004][ T7845] loop2: detected capacity change from 0 to 128
[  237.081597][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  237.092721][ T7845] No source specified
[  237.416849][ T7852] loop1: detected capacity change from 0 to 256
[  237.637234][ T7852] loop1: detected capacity change from 0 to 256
[  238.188637][ T7874] loop4: detected capacity change from 0 to 256
[  238.485806][ T7877] loop1: detected capacity change from 0 to 40427
[  238.958457][ T7885] loop2: detected capacity change from 0 to 256
[  239.010581][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  239.190620][ T6889] usb 7-1: USB disconnect, device number 9
[  239.224027][ T7898] loop4: detected capacity change from 0 to 128
[  239.290733][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  239.303028][ T7898] No source specified
[  239.763837][ T7906] loop1: detected capacity change from 0 to 40427
[  240.108478][ T7919] loop2: detected capacity change from 0 to 40427
[  240.538890][ T7939] binder: BINDER_SET_CONTEXT_MGR already set
[  240.633457][ T7940] overlayfs: failed to resolve './file1': -2
[  240.633458][ T7939] binder: 7933:7939 ioctl 4018620d 200000000040 returned -16
[  241.444099][ T7969] loop1: detected capacity change from 0 to 256
[  241.722079][ T7983] loop6: detected capacity change from 0 to 40427
[  241.729512][ T7983] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  241.778684][ T7983] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  241.790248][ T7983] F2FS-fs (loop6): invalid crc value
[  241.819392][ T7983] F2FS-fs (loop6): Found nat_bits in checkpoint
[  241.848553][  T688] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  241.878929][ T7983] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  241.888489][ T7983] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  242.014788][ T7987] loop2: detected capacity change from 0 to 40427
[  242.029623][  T688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.118337][  T688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.128219][  T688] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  242.150705][  T688] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  242.166980][  T688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.179789][  T688] usb 5-1: config 0 descriptor??
[  242.211033][ T7999] overlayfs: failed to resolve './file1': -2
[  242.323818][ T8000] overlayfs: failed to resolve './file1': -2
[  242.786781][  T688] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  242.829264][  T688] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  242.973715][ T8020] loop2: detected capacity change from 0 to 256
[  242.998862][ T8021] binder: BINDER_SET_CONTEXT_MGR already set
[  243.005024][ T8021] binder: 8015:8021 ioctl 4018620d 200000000040 returned -16
[  243.440463][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.449247][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.499079][ T8033] loop1: detected capacity change from 0 to 1024
[  243.509569][ T8033] EXT4-fs: Ignoring removed i_version option
[  243.515920][ T8033] /dev/loop1: Can't open blockdev
[  243.538785][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  244.675878][  T340] usb 5-1: USB disconnect, device number 12
[  244.729663][ T8051] syz.1.2930[8051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.729763][ T8051] syz.1.2930[8051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.865553][ T8039] loop6: detected capacity change from 0 to 40427
[  244.888274][ T8039] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  244.896141][ T8039] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  244.957435][ T8039] F2FS-fs (loop6): invalid crc value
[  244.983494][ T8065] loop4: detected capacity change from 0 to 256
[  244.992552][ T8039] F2FS-fs (loop6): Found nat_bits in checkpoint
[  245.025038][ T8039] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  245.032407][ T8039] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  245.043276][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  245.519059][ T8083] overlayfs: failed to resolve './file1': -2
[  245.775903][ T8087] loop1: detected capacity change from 0 to 1024
[  245.783133][ T8087] EXT4-fs: Ignoring removed i_version option
[  245.806790][ T8087] /dev/loop1: Can't open blockdev
[  247.664814][ T8118] loop2: detected capacity change from 0 to 256
[  247.687834][ T8118] /dev/loop2: Can't open blockdev
[  248.164821][ T8129] loop1: detected capacity change from 0 to 512
[  248.689398][ T8129] /dev/loop1: Can't open blockdev
[  249.091103][ T8133] loop4: detected capacity change from 0 to 40427
[  249.130432][  T662] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  249.165324][  T457] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  249.204945][  T340] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  249.326895][  T662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.388524][  T662] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  249.400961][  T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.435523][  T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.462672][  T662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.487008][  T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  249.511733][  T662] usb 2-1: config 0 descriptor??
[  249.531685][  T340] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  249.551756][  T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.562269][ T8148] loop6: detected capacity change from 0 to 40427
[  249.576953][ T8148] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  249.578816][  T340] usb 3-1: config 0 descriptor??
[  249.593900][ T8148] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  249.615557][ T8148] F2FS-fs (loop6): invalid crc value
[  249.625479][ T8148] F2FS-fs (loop6): Found nat_bits in checkpoint
[  249.669068][ T8148] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  249.676422][ T8148] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  249.745124][ T8154] overlayfs: failed to resolve './file1': -2
[  249.816746][ T8155] overlayfs: failed to resolve './file1': -2
[  249.928260][  T662] usbhid 2-1:0.0: can't add hid device: -71
[  249.944677][  T662] usbhid: probe of 2-1:0.0 failed with error -71
[  249.953933][  T662] usb 2-1: USB disconnect, device number 15
[  250.006819][  T340] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  250.035717][  T340] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  250.173527][ T8166] loop6: detected capacity change from 0 to 1024
[  250.186222][ T8166] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  250.686866][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.695570][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.038782][  T688] usb 3-1: USB disconnect, device number 13
[  251.166818][ T8200] loop4: detected capacity change from 0 to 512
[  251.192385][ T8200] /dev/loop4: Can't open blockdev
[  251.440446][ T5974] EXT4-fs (loop6): unmounting filesystem.
[  251.487860][  T662] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  251.561403][ T8226] loop2: detected capacity change from 0 to 512
[  251.595241][ T8226] /dev/loop2: Can't open blockdev
[  251.695054][  T662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.707691][  T662] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  251.717622][  T662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.726893][  T662] usb 5-1: config 0 descriptor??
[  251.742141][ T8234] syz.1.2990[8234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  251.742230][ T8234] syz.1.2990[8234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  251.931242][ T8249] binder: BINDER_SET_CONTEXT_MGR already set
[  251.949040][ T8249] binder: 8245:8249 ioctl 4018620d 200000000040 returned -16
[  252.017829][ T8248] loop2: detected capacity change from 0 to 40427
[  252.137396][  T662] usbhid 5-1:0.0: can't add hid device: -71
[  252.143684][  T662] usbhid: probe of 5-1:0.0 failed with error -71
[  252.151074][  T662] usb 5-1: USB disconnect, device number 13
[  252.972270][ T8275] loop2: detected capacity change from 0 to 256
[  253.015846][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  253.027888][ T8275] loop2: detected capacity change from 0 to 256
[  253.040489][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.051805][  T457] Buffer I/O error on dev loop2, logical block 0, async page read
[  253.137103][ T8289] loop6: detected capacity change from 0 to 512
[  253.156593][ T8289] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  253.188182][ T8289] EXT4-fs (loop6): 1 orphan inode deleted
[  253.194758][ T8289] EXT4-fs (loop6): 1 truncate cleaned up
[  253.202929][ T8289] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  253.222087][ T8289] EXT4-fs error (device loop6): empty_inline_dir:1877: inode #12: block 7: comm syz.6.3018: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0
[  253.246545][ T8289] EXT4-fs (loop6): Remounting filesystem read-only
[  253.253232][ T8289] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[  253.268883][ T8289] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  253.283792][ T8289] EXT4-fs (loop6): Remounting filesystem read-only
[  253.309001][ T8283] loop4: detected capacity change from 0 to 40427
[  253.363539][  T457] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  253.552665][  T287] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  253.743684][  T287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.753672][  T287] usb 7-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  253.762793][  T287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.771483][  T287] usb 7-1: config 0 descriptor??
[  254.225264][  T287] usbhid 7-1:0.0: can't add hid device: -71
[  254.233095][  T287] usbhid: probe of 7-1:0.0 failed with error -71
[  254.240632][  T287] usb 7-1: USB disconnect, device number 10
[  254.336184][ T8318] loop1: detected capacity change from 0 to 128
[  254.393125][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  254.394201][ T8320] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  254.423335][ T8320] loop2: detected capacity change from 0 to 256
[  254.432540][ T8320] /dev/loop2: Can't open blockdev
[  254.494200][ T8338] loop4: detected capacity change from 0 to 256
[  254.736527][ T5974] EXT4-fs (loop6): unmounting filesystem.
[  255.302504][ T8352] loop1: detected capacity change from 0 to 40427
[  255.759155][ T8370] loop4: detected capacity change from 0 to 512
[  255.773342][ T8370] /dev/loop4: Can't open blockdev
[  255.792316][ T8373] loop6: detected capacity change from 0 to 256
[  255.872156][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  255.893565][ T8374] loop2: detected capacity change from 0 to 128
[  255.942144][  T334] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  256.058997][ T8379] loop1: detected capacity change from 0 to 1024
[  256.066066][ T8379] EXT4-fs: Ignoring removed i_version option
[  256.072929][ T8379] /dev/loop1: Can't open blockdev
[  256.152079][    T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  256.382379][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.394133][    T6] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  256.404714][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.415007][    T6] usb 5-1: config 0 descriptor??
[  256.822577][    T6] usbhid 5-1:0.0: can't add hid device: -71
[  256.831767][    T6] usbhid: probe of 5-1:0.0 failed with error -71
[  256.847531][    T6] usb 5-1: USB disconnect, device number 14
[  256.923638][  T283] bridge0: port 1(syz_tun) entered disabled state
[  256.932593][  T283] device syz_tun left promiscuous mode
[  256.938478][  T283] bridge0: port 1(syz_tun) entered disabled state
[  256.944537][ T8401] loop6: detected capacity change from 0 to 40427
[  256.952879][ T8401] F2FS-fs (loop6): fault_injection options not supported
[  256.970252][ T8401] F2FS-fs (loop6): invalid crc value
[  256.983110][   T43] tipc: Disabling bearer <udp:s>
[  256.988460][   T43] tipc: Left network mode
[  256.996777][ T8401] F2FS-fs (loop6): Found nat_bits in checkpoint
[  257.075679][ T8401] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  257.119559][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.127070][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.134897][ T8415] device bridge_slave_0 entered promiscuous mode
[  257.143217][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.150288][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.158221][ T8415] device bridge_slave_1 entered promiscuous mode
[  257.166575][ T8424] binder: BINDER_SET_CONTEXT_MGR already set
[  257.176187][ T8424] binder: 8422:8424 ioctl 4018620d 200000000040 returned -16
[  257.379000][ T8434] loop4: detected capacity change from 0 to 256
[  257.448813][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  257.457460][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  257.484782][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  257.499057][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  257.508862][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.515991][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.524006][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  257.532943][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  257.544659][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.551843][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.574434][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  257.583001][ T5974] syz-executor: attempt to access beyond end of device
[  257.583001][ T5974] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.604763][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  257.618490][ T8448] syz.5.3078[8448] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  257.618572][ T8448] syz.5.3078[8448] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  257.625168][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  257.657742][   T43] device veth0_vlan left promiscuous mode
[  257.784379][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  257.795236][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  257.803802][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  257.811578][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  257.821640][ T8415] device veth0_vlan entered promiscuous mode
[  257.836786][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  257.846892][ T8415] device veth1_macvtap entered promiscuous mode
[  257.858065][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  257.869253][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  257.980165][ T8463] loop1: detected capacity change from 0 to 512
[  257.997971][ T8463] /dev/loop1: Can't open blockdev
[  258.020772][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  258.290337][   T39] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  258.302948][ T8467] loop4: detected capacity change from 0 to 1024
[  258.309820][ T8467] EXT4-fs: Ignoring removed nobh option
[  258.315891][ T8467] EXT4-fs: Ignoring removed bh option
[  258.321830][ T8467] EXT4-fs: Ignoring removed bh option
[  258.327466][ T8467] /dev/loop4: Can't open blockdev
[  258.511665][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.566642][   T39] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  258.576554][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.585939][   T39] usb 2-1: config 0 descriptor??
[  258.672398][ T8477] loop6: detected capacity change from 0 to 1024
[  258.679473][ T8477] EXT4-fs: Ignoring removed i_version option
[  258.687051][ T8477] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.711874][ T8477] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  258.730363][ T8477] bio_check_ro: 7 callbacks suppressed
[  258.730432][ T8477] Trying to write to read-only block-device loop6
[  258.743091][ T8477] Trying to write to read-only block-device loop6
[  258.762293][ T5974] EXT4-fs error (device loop6): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  258.777961][ T5974] Trying to write to read-only block-device loop6
[  258.784614][ T5974] Trying to write to read-only block-device loop6
[  258.791246][ T5974] Trying to write to read-only block-device loop6
[  258.797847][ T5974] Trying to write to read-only block-device loop6
[  258.804695][ T5974] Trying to write to read-only block-device loop6
[  258.812148][ T5974] Trying to write to read-only block-device loop6
[  258.818998][ T5974] Trying to write to read-only block-device loop6
[  258.826195][ T5974] Trying to write to read-only block-device loop6
[  258.833945][ T5974] EXT4-fs (loop6): unmounting filesystem.
[  258.867708][ T8484] syz.6.3088[8484] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  258.867789][ T8484] syz.6.3088[8484] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  258.936295][ T8489] binder: BINDER_SET_CONTEXT_MGR already set
[  258.961372][ T8489] binder: 8487:8489 ioctl 4018620d 200000000040 returned -16
[  258.993016][ T8495] loop6: detected capacity change from 0 to 512
[  258.993222][   T39] usbhid 2-1:0.0: can't add hid device: -71
[  259.000495][ T8495] EXT4-fs: Ignoring removed i_version option
[  259.011777][   T39] usbhid: probe of 2-1:0.0 failed with error -71
[  259.012634][ T8495] /dev/loop6: Can't open blockdev
[  259.020522][   T39] usb 2-1: USB disconnect, device number 16
[  259.092395][ T8498] loop6: detected capacity change from 0 to 256
[  259.884155][ T8523] xt_TCPMSS: Only works on TCP SYN packets
[  259.927283][ T8525] loop6: detected capacity change from 0 to 1024
[  259.934857][ T8525] EXT4-fs: Ignoring removed nobh option
[  259.941150][ T8525] EXT4-fs: Ignoring removed bh option
[  259.946713][ T8525] EXT4-fs: Ignoring removed bh option
[  259.952501][ T8525] /dev/loop6: Can't open blockdev
[  260.069450][  T927] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  260.270745][  T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.288627][  T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.299145][  T927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  260.312881][  T927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  260.322266][  T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.336475][  T927] usb 3-1: config 0 descriptor??
[  260.645275][ T8548] loop1: detected capacity change from 0 to 512
[  260.652183][ T8548] EXT4-fs: Ignoring removed i_version option
[  260.658594][ T8548] /dev/loop1: Can't open blockdev
[  260.723696][ T8551] loop1: detected capacity change from 0 to 256
[  260.746062][  T927] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  260.754900][  T927] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  260.780158][  T457] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  260.837808][ T8554] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  260.851340][ T8554] kvm: pic: level sensitive irq not supported
[  260.851428][ T8554] kvm: pic: non byte read
[  260.862452][ T8554] kvm: pic: level sensitive irq not supported
[  260.862514][ T8554] kvm: pic: non byte read
[  260.873311][ T8554] kvm: pic: level sensitive irq not supported
[  260.873385][ T8554] kvm: pic: non byte read
[  260.884518][ T8554] kvm: pic: level sensitive irq not supported
[  260.884600][ T8554] kvm: pic: non byte read
[  260.895722][ T8554] kvm: pic: level sensitive irq not supported
[  260.895799][ T8554] kvm: pic: non byte read
[  261.153380][ T8563] loop4: detected capacity change from 0 to 1024
[  261.160628][ T8563] EXT4-fs: Ignoring removed i_version option
[  261.167000][ T8563] /dev/loop4: Can't open blockdev
[  261.507054][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.569569][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.859141][   T39] usb 3-1: USB disconnect, device number 14
[  262.592756][ T8585] loop1: detected capacity change from 0 to 1024
[  262.601540][ T8585] EXT4-fs: Ignoring removed nobh option
[  262.607245][ T8585] EXT4-fs: Ignoring removed bh option
[  262.613360][ T8585] EXT4-fs: Ignoring removed bh option
[  262.618932][ T8585] /dev/loop1: Can't open blockdev
[  262.707386][ T8586] xt_TCPMSS: Only works on TCP SYN packets
[  263.577179][ T8613] loop2: detected capacity change from 0 to 256
[  263.619059][ T8616] loop6: detected capacity change from 0 to 1024
[  263.627397][ T8616] EXT4-fs: Ignoring removed i_version option
[  263.633699][ T8616] /dev/loop6: Can't open blockdev
[  263.684217][ T8617] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  263.706539][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  263.719208][ T8613] loop2: detected capacity change from 0 to 256
[  263.722440][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  263.734956][  T457] Buffer I/O error on dev loop2, logical block 0, async page read
[  263.750837][ T8604] loop4: detected capacity change from 0 to 256
[  263.777977][ T8604] /dev/loop4: Can't open blockdev
[  264.627898][ T8626] syz.5.3139[8626] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  264.627994][ T8626] syz.5.3139[8626] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.228977][ T8638] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  265.258581][ T8638] loop2: detected capacity change from 0 to 256
[  265.289371][ T8642] loop1: detected capacity change from 0 to 1024
[  265.296556][ T8638] /dev/loop2: Can't open blockdev
[  265.307490][ T8643] xt_TCPMSS: Only works on TCP SYN packets
[  265.332047][ T8642] EXT4-fs: Ignoring removed nobh option
[  265.337909][ T8642] EXT4-fs: Ignoring removed bh option
[  265.344065][ T8642] EXT4-fs: Ignoring removed bh option
[  265.349643][ T8642] /dev/loop1: Can't open blockdev
[  265.447518][  T334] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  265.585084][ T8651] loop2: detected capacity change from 0 to 512
[  265.599947][ T8651] EXT4-fs: Ignoring removed i_version option
[  265.608060][ T8651] /dev/loop2: Can't open blockdev
[  265.737567][ T8654] loop2: detected capacity change from 0 to 256
[  265.768109][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  265.787484][ T8660] syz.5.3150[8660] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.787564][ T8660] syz.5.3150[8660] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  266.008162][ T8667] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  266.113340][ T8671] loop6: detected capacity change from 0 to 1024
[  266.127605][ T8671] EXT4-fs: Ignoring removed i_version option
[  266.134199][ T8671] /dev/loop6: Can't open blockdev
[  266.238725][ T8677] syz.4.3157[8677] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  266.238864][ T8677] syz.4.3157[8677] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  267.283064][ T8681] loop4: detected capacity change from 0 to 40427
[  267.394949][ T8693] loop1: detected capacity change from 0 to 1024
[  267.410285][ T8693] EXT4-fs: Ignoring removed nobh option
[  267.415997][ T8693] EXT4-fs: Ignoring removed bh option
[  267.421482][ T8693] EXT4-fs: Ignoring removed bh option
[  267.426970][ T8693] /dev/loop1: Can't open blockdev
[  267.468607][ T8691] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  268.407546][ T8709] loop4: detected capacity change from 0 to 256
[  268.653746][ T8707] xt_TCPMSS: Only works on TCP SYN packets
[  268.662172][  T334] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  268.954934][ T8712] loop2: detected capacity change from 0 to 256
[  268.971928][ T8712] /dev/loop2: Can't open blockdev
[  269.063634][ T8723] loop6: detected capacity change from 0 to 256
[  270.280925][ T8757] syz.6.3185[8757] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  270.281014][ T8757] syz.6.3185[8757] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  270.377194][ T8767] loop4: detected capacity change from 0 to 512
[  270.448983][ T8767] EXT4-fs: Ignoring removed i_version option
[  270.464269][ T8767] /dev/loop4: Can't open blockdev
[  270.472479][ T8771] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  270.501149][ T8771] loop2: detected capacity change from 0 to 256
[  270.510326][ T8771] /dev/loop2: Can't open blockdev
[  270.558626][ T8779] loop4: detected capacity change from 0 to 256
[  270.615834][  T457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  270.693191][ T8785] loop2: detected capacity change from 0 to 1024
[  270.712191][ T8785] EXT4-fs: Ignoring removed i_version option
[  270.723594][ T8785] /dev/loop2: Can't open blockdev
[  271.689744][ T8793] loop6: detected capacity change from 0 to 256
[  271.902180][  T457] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  271.918552][ T8793] loop6: detected capacity change from 0 to 256
[  271.920043][ T8800] loop2: detected capacity change from 0 to 256
[  271.934621][  T457] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  271.944435][  T457] Buffer I/O error on dev loop6, logical block 0, async page read
[  272.259103][ T8803] loop1: detected capacity change from 0 to 512
[  272.266094][ T8803] /dev/loop1: Can't open blockdev
[  272.533143][    T6] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  272.724627][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.743665][    T6] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  272.792661][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.837066][    T6] usb 2-1: config 0 descriptor??
[  272.843851][ T8820] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.858449][ T8820] loop6: detected capacity change from 0 to 256
[  272.868493][ T8820] /dev/loop6: Can't open blockdev
[  272.872732][ T8825] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  272.895947][ T8825] kvm: pic: level sensitive irq not supported
[  272.896076][ T8825] kvm: pic: non byte read
[  273.116087][ T8829] loop6: detected capacity change from 0 to 40427
[  273.245391][    T6] usbhid 2-1:0.0: can't add hid device: -71
[  273.372867][ T8835] loop4: detected capacity change from 0 to 1024
[  273.399282][ T8835] EXT4-fs: Ignoring removed i_version option
[  273.435878][ T8835] /dev/loop4: Can't open blockdev
[  273.533517][    T6] usbhid: probe of 2-1:0.0 failed with error -71
[  273.540777][    T6] usb 2-1: USB disconnect, device number 17
[  274.445473][ T8864] loop2: detected capacity change from 0 to 256
[  274.653337][  T457] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  274.704086][ T8857] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  274.730853][ T8857] loop1: detected capacity change from 0 to 256
[  274.742391][ T8857] /dev/loop1: Can't open blockdev
[  274.951106][ T8886] loop4: detected capacity change from 0 to 512
[  274.958047][ T8886] /dev/loop4: Can't open blockdev
[  275.068368][ T8896] loop1: detected capacity change from 0 to 256
[  275.537868][ T8903] loop6: detected capacity change from 0 to 1024
[  275.538643][  T287] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  275.554284][ T8903] EXT4-fs: Ignoring removed nobh option
[  275.560003][ T8903] EXT4-fs: Ignoring removed bh option
[  275.566001][ T8903] EXT4-fs: Ignoring removed bh option
[  275.571521][ T8903] /dev/loop6: Can't open blockdev
[  275.742873][  T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.754073][ T8912] xt_TCPMSS: Only works on TCP SYN packets
[  275.768832][  T287] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  275.811765][  T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.847277][  T287] usb 5-1: config 0 descriptor??
[  275.942314][ T8919] binder: BINDER_SET_CONTEXT_MGR already set
[  275.948394][ T8919] binder: 8915:8919 ioctl 4018620d 200000000040 returned -16
[  276.141439][ T8922] loop1: detected capacity change from 0 to 40427
[  276.383600][ T8930] overlayfs: failed to resolve './file1': -2
[  276.648766][  T287] usbhid 5-1:0.0: can't add hid device: -71
[  276.655408][  T287] usbhid: probe of 5-1:0.0 failed with error -71
[  276.663751][  T287] usb 5-1: USB disconnect, device number 15
[  276.870641][ T8938] loop2: detected capacity change from 0 to 40427
[  276.987065][  T688] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  277.883967][ T8947] xt_TCPMSS: Only works on TCP SYN packets
[  377.900361][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  377.907351][    C0] 	(detected by 0, t=10003 jiffies, g=37225, q=443 ncpus=2)
[  377.914651][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10001 (4294975011-4294965010), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  377.928017][    C0] rcu: rcu_preempt kthread starved for 10001 jiffies! g37225 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  377.939202][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  377.949203][    C0] rcu: RCU grace-period kthread stack dump:
[  377.955087][    C0] task:rcu_preempt     state:R  running task     stack:28064 pid:14    ppid:2      flags:0x00004000
[  377.965864][    C0] Call Trace:
[  377.969136][    C0]  <TASK>
[  377.972064][    C0]  __schedule+0xb87/0x14e0
[  377.976479][    C0]  ? release_firmware_map_entry+0x194/0x194
[  377.982371][    C0]  ? __mod_timer+0x7ae/0xb30
[  377.986957][    C0]  schedule+0xbd/0x170
[  377.991031][    C0]  schedule_timeout+0x12c/0x2e0
[  377.995881][    C0]  ? __cfi_schedule_timeout+0x10/0x10
[  378.001254][    C0]  ? _raw_spin_lock_irqsave+0x108/0x110
[  378.006799][    C0]  ? __cfi_process_timeout+0x10/0x10
[  378.012084][    C0]  ? prepare_to_swait_event+0x308/0x320
[  378.017733][    C0]  rcu_gp_fqs_loop+0x2d8/0x10a0
[  378.022591][    C0]  ? __cfi_dyntick_save_progress_counter+0x10/0x10
[  378.029100][    C0]  ? rcu_gp_init+0xf10/0xf10
[  378.033719][    C0]  rcu_gp_kthread+0x95/0x370
[  378.038321][    C0]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  378.043518][    C0]  ? set_cpus_allowed_ptr+0x82/0xc0
[  378.048713][    C0]  ? __kasan_check_read+0x11/0x20
[  378.053736][    C0]  ? __kthread_parkme+0x142/0x180
[  378.058754][    C0]  kthread+0x281/0x320
[  378.062821][    C0]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  378.068018][    C0]  ? __cfi_kthread+0x10/0x10
[  378.072606][    C0]  ret_from_fork+0x1f/0x30
[  378.077027][    C0]  </TASK>
[  378.080102][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  378.086435][    C0] Sending NMI from CPU 0 to CPUs 1:
[  378.091680][    C1] NMI backtrace for cpu 1
[  378.091694][    C1] CPU: 1 PID: 8958 Comm: syz.4.3254 Not tainted 6.1.145-syzkaller-00038-g3b4ff5af8d36 #0
[  378.091713][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  378.091723][    C1] RIP: 0010:kvm_wait+0xcc/0x140
[  378.091749][    C1] Code: 20 f6 44 24 21 02 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 a6 66 90 0f 00 2d d5 ab 13 04 f4 <eb> 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07
[  378.091764][    C1] RSP: 0018:ffffc900025e74c0 EFLAGS: 00000046
[  378.091779][    C1] RAX: 0000000000000003 RBX: ffff8881f7127c40 RCX: ffffffff84f0c5a2
[  378.091792][    C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7127c40
[  378.091804][    C1] RBP: ffffc900025e7550 R08: dffffc0000000000 R09: ffffed103ee24f89
[  378.091817][    C1] R10: ffffed103ee24f89 R11: 1ffff1103ee24f88 R12: 1ffff1103ee20001
[  378.091831][    C1] R13: ffff8881f7138cd4 R14: dffffc0000000000 R15: 1ffff920004bce98
[  378.091844][    C1] FS:  00007f269f6326c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  378.091860][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  378.091872][    C1] CR2: 000000110c3073f4 CR3: 0000000130b95000 CR4: 00000000003526a0
[  378.091890][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  378.091900][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  378.091911][    C1] Call Trace:
[  378.091917][    C1]  <TASK>
[  378.091924][    C1]  ? __cfi_kvm_wait+0x10/0x10
[  378.091947][    C1]  ? pv_hash+0x86/0x150
[  378.091972][    C1]  __pv_queued_spin_lock_slowpath+0x690/0xc40
[  378.091993][    C1]  ? __kernel_text_address+0xd/0x30
[  378.092017][    C1]  ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[  378.092039][    C1]  queued_spin_lock_slowpath+0x47/0x50
[  378.092065][    C1]  _raw_spin_lock_irqsave+0x108/0x110
[  378.092081][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  378.092099][    C1]  ? kasan_save_stack+0x4c/0x60
[  378.092116][    C1]  ? kasan_save_stack+0x3a/0x60
[  378.092133][    C1]  ? __kasan_record_aux_stack+0xb6/0xc0
[  378.092156][    C1]  ? kasan_record_aux_stack_noalloc+0xb/0x10
[  378.092179][    C1]  ? kvfree_call_rcu+0x95/0x7a0
[  378.092199][    C1]  lock_timer_base+0x127/0x270
[  378.092219][    C1]  __mod_timer+0x10a/0xb30
[  378.092240][    C1]  add_timer+0x68/0x80
[  378.092258][    C1]  __queue_delayed_work+0x173/0x200
[  378.092281][    C1]  queue_delayed_work_on+0xdb/0x150
[  378.092303][    C1]  ? __cfi_queue_delayed_work_on+0x10/0x10
[  378.092326][    C1]  kvfree_call_rcu+0x436/0x7a0
[  378.092386][    C1]  ? __cfi_kvfree_call_rcu+0x10/0x10
[  378.092405][    C1]  ? longest_prefix_match+0x43c/0x640
[  378.092426][    C1]  trie_delete_elem+0x572/0x720
[  378.092446][    C1]  bpf_prog_1db1603a7cfa36fb+0x3d/0x41
[  378.092463][    C1]  bpf_trace_run3+0x113/0x270
[  378.092485][    C1]  ? __cfi_bpf_trace_run3+0x10/0x10
[  378.092508][    C1]  ? calc_wheel_index+0x353/0x8b0
[  378.092528][    C1]  ? __kasan_check_write+0x14/0x20
[  378.092552][    C1]  ? timer_update_keys+0xb0/0xb0
[  378.092574][    C1]  __bpf_trace_timer_start+0x2b/0x40
[  378.092591][    C1]  ? __cfi___bpf_trace_timer_start+0x10/0x10
[  378.092610][    C1]  __traceiter_timer_start+0x8c/0xe0
[  378.092636][    C1]  enqueue_timer+0x337/0x480
[  378.092658][    C1]  __mod_timer+0x79f/0xb30
[  378.092679][    C1]  mod_timer+0x1f/0x30
[  378.092697][    C1]  sk_reset_timer+0x22/0xb0
[  378.092719][    C1]  tipc_sk_finish_conn+0x14e/0x7e0
[  378.092734][    C1]  ? security_socket_post_create+0xa3/0xc0
[  378.092764][    C1]  tipc_socketpair+0x2a4/0x520
[  378.092780][    C1]  ? security_socket_socketpair+0x8c/0xb0
[  378.092807][    C1]  __sys_socketpair+0x2b5/0x5b0
[  378.092834][    C1]  __x64_sys_socketpair+0x9b/0xb0
[  378.092860][    C1]  x64_sys_call+0x6e/0x9a0
[  378.092880][    C1]  do_syscall_64+0x4c/0xa0
[  378.092896][    C1]  ? clear_bhb_loop+0x30/0x80
[  378.092915][    C1]  ? clear_bhb_loop+0x30/0x80
[  378.092935][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  378.092954][    C1] RIP: 0033:0x7f269e78eb69
[  378.092969][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.092983][    C1] RSP: 002b:00007f269f632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  378.092999][    C1] RAX: ffffffffffffffda RBX: 00007f269e9b5fa0 RCX: 00007f269e78eb69
[  378.093012][    C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e
[  378.093022][    C1] RBP: 00007f269e811df1 R08: 0000000000000000 R09: 0000000000000000
[  378.093033][    C1] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000
[  378.093044][    C1] R13: 0000000000000000 R14: 00007f269e9b5fa0 R15: 00007ffe1e922868
[  378.093060][    C1]  </TASK>
[  529.046756][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.1.3249:8951]
[  529.055189][    C0] Modules linked in:
[  529.059080][    C0] CPU: 0 PID: 8951 Comm: syz.1.3249 Not tainted 6.1.145-syzkaller-00038-g3b4ff5af8d36 #0
[  529.068960][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  529.079009][    C0] RIP: 0010:smp_call_function_many_cond+0x872/0x960
[  529.085603][    C0] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 39 66 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 05 62 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff
[  529.105199][    C0] RSP: 0018:ffffc900023b7580 EFLAGS: 00000246
[  529.111259][    C0] RAX: ffffffff8166a09e RBX: dffffc0000000000 RCX: 0000000000080000
[  529.119220][    C0] RDX: ffffc90014d87000 RSI: 000000000007ffff RDI: 0000000000080000
[  529.127185][    C0] RBP: ffffc900023b76b8 R08: dffffc0000000000 R09: ffffed103ee0721b
[  529.135167][    C0] R10: 0000000000000000 R11: ffffffff81342170 R12: 1ffff1103ee07218
[  529.143130][    C0] R13: 1ffff1103ee278a5 R14: 0000000000000001 R15: ffff8881f713c528
[  529.151094][    C0] FS:  00007f0fbd1a76c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  529.160018][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  529.166593][    C0] CR2: 0000200000040000 CR3: 000000013cd44000 CR4: 00000000003526b0
[  529.174557][    C0] Call Trace:
[  529.177826][    C0]  <TASK>
[  529.180753][    C0]  ? __cfi_do_sync_core+0x10/0x10
[  529.185863][    C0]  ? smp_call_function_many+0x40/0x40
[  529.191241][    C0]  ? kvm_irq_delivery_to_apic+0x3d7/0x9c0
[  529.196955][    C0]  ? text_poke+0x30/0x30
[  529.201214][    C0]  ? text_poke_loc_init+0xd6/0x570
[  529.206319][    C0]  ? __cfi_do_sync_core+0x10/0x10
[  529.211339][    C0]  on_each_cpu_cond_mask+0x43/0x80
[  529.216445][    C0]  text_poke_bp_batch+0x1cc/0x580
[  529.221469][    C0]  ? text_poke_loc_init+0x570/0x570
[  529.226923][    C0]  ? __kasan_check_write+0x14/0x20
[  529.232050][    C0]  ? mutex_lock+0x8d/0x1a0
[  529.236463][    C0]  ? __cfi_mutex_lock+0x10/0x10
[  529.241347][    C0]  ? kvm_irq_delivery_to_apic+0x3d7/0x9c0
[  529.247066][    C0]  text_poke_finish+0x1a/0x30
[  529.251744][    C0]  arch_jump_label_transform_apply+0x15/0x30
[  529.257739][    C0]  __jump_label_update+0x37c/0x3a0
[  529.262954][    C0]  jump_label_update+0x39b/0x450
[  529.267921][    C0]  static_key_slow_inc_cpuslocked+0x1c0/0x300
[  529.273994][    C0]  ? __cfi_static_key_slow_inc_cpuslocked+0x10/0x10
[  529.280582][    C0]  ? memset+0x35/0x40
[  529.284566][    C0]  static_key_slow_inc+0x1a/0x30
[  529.289587][    C0]  kvm_create_lapic+0x1fe/0x2f0
[  529.294440][    C0]  kvm_arch_vcpu_create+0x1fe/0x950
[  529.299634][    C0]  ? kvm_vm_ioctl_create_vcpu+0x12a/0x8c0
[  529.305371][    C0]  kvm_vm_ioctl_create_vcpu+0x30e/0x8c0
[  529.310919][    C0]  kvm_vm_ioctl+0x5f7/0xa80
[  529.315422][    C0]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  529.320445][    C0]  ? __this_cpu_preempt_check+0x13/0x20
[  529.326015][    C0]  ? memcg_rstat_updated+0x56/0x110
[  529.331212][    C0]  ? memcpy+0x56/0x70
[  529.335192][    C0]  ? ioctl_has_perm+0x3e8/0x4c0
[  529.340038][    C0]  ? has_cap_mac_admin+0x330/0x330
[  529.345166][    C0]  ? handle_mm_fault+0x17be/0x2640
[  529.350281][    C0]  ? selinux_file_ioctl+0x377/0x480
[  529.355500][    C0]  ? __cfi_handle_mm_fault+0x10/0x10
[  529.360786][    C0]  ? lock_vma_under_rcu+0x3eb/0x4d0
[  529.366429][    C0]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  529.371992][    C0]  ? __fget_files+0x2d5/0x330
[  529.376688][    C0]  ? security_file_ioctl+0x95/0xc0
[  529.381800][    C0]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  529.386841][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  529.391673][    C0]  __x64_sys_ioctl+0x7b/0x90
[  529.396270][    C0]  x64_sys_call+0x58b/0x9a0
[  529.400786][    C0]  do_syscall_64+0x4c/0xa0
[  529.405230][    C0]  ? clear_bhb_loop+0x30/0x80
[  529.409907][    C0]  ? clear_bhb_loop+0x30/0x80
[  529.414598][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.420562][    C0] RIP: 0033:0x7f0fbc38eb69
[  529.424988][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.444687][    C0] RSP: 002b:00007f0fbd1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  529.453106][    C0] RAX: ffffffffffffffda RBX: 00007f0fbc5b6240 RCX: 00007f0fbc38eb69
[  529.461086][    C0] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  529.469086][    C0] RBP: 00007f0fbc411df1 R08: 0000000000000000 R09: 0000000000000000
[  529.477049][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  529.485024][    C0] R13: 0000000000000001 R14: 00007f0fbc5b6240 R15: 00007ffdafee8e08
[  529.493003][    C0]  </TASK>
[  529.496015][    C0] Sending NMI from CPU 0 to CPUs 1:
[  529.501260][    C1] NMI backtrace for cpu 1
[  529.501270][    C1] CPU: 1 PID: 8958 Comm: syz.4.3254 Not tainted 6.1.145-syzkaller-00038-g3b4ff5af8d36 #0
[  529.501288][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  529.501299][    C1] RIP: 0010:kvm_wait+0xcc/0x140
[  529.501327][    C1] Code: 20 f6 44 24 21 02 75 24 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 0f b6 07 40 38 f0 75 a6 66 90 0f 00 2d d5 ab 13 04 f4 <eb> 9a fa 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 3f 0f b6 07
[  529.501342][    C1] RSP: 0018:ffffc900025e74c0 EFLAGS: 00000046
[  529.501357][    C1] RAX: 0000000000000003 RBX: ffff8881f7127c40 RCX: ffffffff84f0c5a2
[  529.501370][    C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f7127c40
[  529.501382][    C1] RBP: ffffc900025e7550 R08: dffffc0000000000 R09: ffffed103ee24f89
[  529.501395][    C1] R10: ffffed103ee24f89 R11: 1ffff1103ee24f88 R12: 1ffff1103ee20001
[  529.501408][    C1] R13: ffff8881f7138cd4 R14: dffffc0000000000 R15: 1ffff920004bce98
[  529.501422][    C1] FS:  00007f269f6326c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  529.501438][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  529.501450][    C1] CR2: 000000110c3073f4 CR3: 0000000130b95000 CR4: 00000000003526a0
[  529.501467][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  529.501478][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  529.501488][    C1] Call Trace:
[  529.501496][    C1]  <TASK>
[  529.501502][    C1]  ? __cfi_kvm_wait+0x10/0x10
[  529.501537][    C1]  ? pv_hash+0x86/0x150
[  529.501577][    C1]  __pv_queued_spin_lock_slowpath+0x690/0xc40
[  529.501609][    C1]  ? __kernel_text_address+0xd/0x30
[  529.501646][    C1]  ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[  529.501682][    C1]  queued_spin_lock_slowpath+0x47/0x50
[  529.501722][    C1]  _raw_spin_lock_irqsave+0x108/0x110
[  529.501742][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  529.501760][    C1]  ? kasan_save_stack+0x4c/0x60
[  529.501778][    C1]  ? kasan_save_stack+0x3a/0x60
[  529.501794][    C1]  ? __kasan_record_aux_stack+0xb6/0xc0
[  529.501818][    C1]  ? kasan_record_aux_stack_noalloc+0xb/0x10
[  529.501842][    C1]  ? kvfree_call_rcu+0x95/0x7a0
[  529.501861][    C1]  lock_timer_base+0x127/0x270
[  529.501883][    C1]  __mod_timer+0x10a/0xb30
[  529.501904][    C1]  add_timer+0x68/0x80
[  529.501922][    C1]  __queue_delayed_work+0x173/0x200
[  529.501945][    C1]  queue_delayed_work_on+0xdb/0x150
[  529.501966][    C1]  ? __cfi_queue_delayed_work_on+0x10/0x10
[  529.501990][    C1]  kvfree_call_rcu+0x436/0x7a0
[  529.502011][    C1]  ? __cfi_kvfree_call_rcu+0x10/0x10
[  529.502031][    C1]  ? longest_prefix_match+0x43c/0x640
[  529.502052][    C1]  trie_delete_elem+0x572/0x720
[  529.502085][    C1]  bpf_prog_1db1603a7cfa36fb+0x3d/0x41
[  529.502102][    C1]  bpf_trace_run3+0x113/0x270
[  529.502125][    C1]  ? __cfi_bpf_trace_run3+0x10/0x10
[  529.502148][    C1]  ? calc_wheel_index+0x353/0x8b0
[  529.502169][    C1]  ? __kasan_check_write+0x14/0x20
[  529.502194][    C1]  ? timer_update_keys+0xb0/0xb0
[  529.502216][    C1]  __bpf_trace_timer_start+0x2b/0x40
[  529.502234][    C1]  ? __cfi___bpf_trace_timer_start+0x10/0x10
[  529.502252][    C1]  __traceiter_timer_start+0x8c/0xe0
[  529.502278][    C1]  enqueue_timer+0x337/0x480
[  529.502301][    C1]  __mod_timer+0x79f/0xb30
[  529.502322][    C1]  mod_timer+0x1f/0x30
[  529.502339][    C1]  sk_reset_timer+0x22/0xb0
[  529.502361][    C1]  tipc_sk_finish_conn+0x14e/0x7e0
[  529.502377][    C1]  ? security_socket_post_create+0xa3/0xc0
[  529.502406][    C1]  tipc_socketpair+0x2a4/0x520
[  529.502423][    C1]  ? security_socket_socketpair+0x8c/0xb0
[  529.502449][    C1]  __sys_socketpair+0x2b5/0x5b0
[  529.502477][    C1]  __x64_sys_socketpair+0x9b/0xb0
[  529.502503][    C1]  x64_sys_call+0x6e/0x9a0
[  529.502523][    C1]  do_syscall_64+0x4c/0xa0
[  529.502539][    C1]  ? clear_bhb_loop+0x30/0x80
[  529.502559][    C1]  ? clear_bhb_loop+0x30/0x80
[  529.502579][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.502598][    C1] RIP: 0033:0x7f269e78eb69
[  529.502612][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.502626][    C1] RSP: 002b:00007f269f632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  529.502644][    C1] RAX: ffffffffffffffda RBX: 00007f269e9b5fa0 RCX: 00007f269e78eb69
[  529.502657][    C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e
[  529.502667][    C1] RBP: 00007f269e811df1 R08: 0000000000000000 R09: 0000000000000000
[  529.502678][    C1] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000
[  529.502690][    C1] R13: 0000000000000000 R14: 00007f269e9b5fa0 R15: 00007ffe1e922868
[  529.502705][    C1]  </TASK>