last executing test programs:

9.272613011s ago: executing program 4 (id=1406):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48)
setgid(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1e, 0x805, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
r7 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000000c0), 0x12)
write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7)

7.529293363s ago: executing program 4 (id=1407):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)

4.917483487s ago: executing program 1 (id=1424):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0x0, 0x8}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
accept(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f00000015c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x0, {{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x8, [{{@in6=@loopback={0x800000000000000}}, 0x0, @in=@broadcast}]}]}, 0xfc}}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)

4.493222342s ago: executing program 4 (id=1425):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

4.291056328s ago: executing program 4 (id=1431):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffc}, 0x48)
syz_emit_ethernet(0xe, &(0x7f0000000340)={@multicast, @remote, @void, {@generic={0x9}}}, &(0x7f0000000580)={0x0, 0x0, [0x3bc, 0x0, 0x731, 0x36d]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071101a00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x4}, 0x44)

3.886899451s ago: executing program 1 (id=1435):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
listen(r0, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
accept4$inet6(r0, 0x0, 0x0, 0x0)

3.717994575s ago: executing program 2 (id=1436):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046208, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)='^.}-].\x00', 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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")

3.632321982s ago: executing program 3 (id=1437):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB])

3.630338822s ago: executing program 1 (id=1447):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x0, @empty=0xcf050000}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x4000000000002, 0x300)
setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req={0x2, 0x1ff, 0xff, 0x2}, 0x10)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
pselect6(0x40, &(0x7f0000000380)={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x2000000000000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
signalfd4(r4, &(0x7f0000000300)={[0xfffffffffffffffa]}, 0x8, 0x80800)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x2b8, 0x0, 0xf8, 0x6000000, 0x240, 0x3a8, 0x3a8, 0x240, 0x3a8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'virt_wifi0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0xd2030000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x4000000}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)

3.578586147s ago: executing program 0 (id=1440):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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")
r1 = syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, <r2=>0x0})
tkill(r2, 0x1c)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
chdir(&(0x7f00000005c0)='./bus\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000006200)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='$'], 0x28, 0x7ffffff7}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x40}}], 0x2, 0x0)

3.194503668s ago: executing program 4 (id=1441):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000001340)=[{&(0x7f0000001200)=""/158, 0x9e}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{}], 0x8)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x101, 0x0, r3, 0x0, '\x00', 0x0, r2, 0x0, 0x2, 0x0, 0x6}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$TIOCNOTTY(r1, 0x5422)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = memfd_create(&(0x7f0000000000)='\x107', 0x0)
write$binfmt_elf32(r7, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58)
finit_module(r7, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff01000007", @ANYRES16=r6], 0x0)

1.520552915s ago: executing program 2 (id=1442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)
mlockall(0x1)

1.518707195s ago: executing program 0 (id=1443):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x1007)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r6, r5, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x0, 0x2}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x8000)

1.517125895s ago: executing program 3 (id=1453):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48)
r4 = fcntl$getown(r1, 0x9)
ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f0000000200)={[0xcfe4]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x0, 0x2, 0x0, 0x5}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000580)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r7, &(0x7f00000077c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r7, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000daffffff0000000000000200a8a5afd013bc173a2b0e4bf14e053e6af299ec1b8f2e0c453a767dc9415f7d15e8a4645555d1483d4446f8b8dbb683a193be8392a8c61e2739391e563cded859b2de9dfab6aefb987ad419b562a992c9157af3013769b6501ff529400d5e5680e5bd8e1647"], 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r9, 0x0, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r10 = dup(r2)
write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_INIT(r10, &(0x7f0000000300)={0x50}, 0x50)

1.512475326s ago: executing program 1 (id=1444):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000004000)="$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")
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, 0x0, 0x0}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r8 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r9 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
sendfile(r8, r9, 0x0, 0x80000001)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)

604.25539ms ago: executing program 0 (id=1445):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x419, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x1, 0x1ca, &(0x7f00000008c0)="$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")
mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0)

596.283841ms ago: executing program 1 (id=1446):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10)
r5 = dup(r3)
write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}})

586.941902ms ago: executing program 3 (id=1448):
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000040), 0x3b)

554.733004ms ago: executing program 0 (id=1449):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = memfd_create(&(0x7f0000000380)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X %\x91\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r\xec\xff\x83z\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]Wr{\xbb\xeb\xa7\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96g\x8a5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0\x1f\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca', 0x0)
splice(r3, 0x0, r2, &(0x7f0000000780), 0x8000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x50)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r5 = creat(&(0x7f00000007c0)='./file0/file0\x00', 0x88)
fcntl$setstatus(r5, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r6=>0x0)
ftruncate(0xffffffffffffffff, 0x81fd)
io_submit(r6, 0x0, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

540.032565ms ago: executing program 3 (id=1450):
openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000004080), 0x1, 0x762, &(0x7f0000001180)="$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")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_extract_tcp_res(0x0, 0x0, 0x0)
ftruncate(r1, 0x0)
write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003)
lseek(r1, 0x0, 0x4)

527.402387ms ago: executing program 2 (id=1451):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r4}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

469.832331ms ago: executing program 1 (id=1452):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0xfffffff5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600})

389.904458ms ago: executing program 0 (id=1455):
creat(0x0, 0x0)
creat(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x88}}, 0x0)

379.529838ms ago: executing program 2 (id=1456):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
dup3(r0, r2, 0x0)
splice(r2, 0x0, r1, 0x0, 0x11, 0x0)

343.467021ms ago: executing program 0 (id=1457):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_pdu(r4, &(0x7f00000004c0)=@r2t={{0x9, 0x2}, 0x40, 0x0, 0x2, 0x1}, 0x80, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_pidfd_open(0x0, 0x0)
setns(r1, 0x24020000)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

343.211502ms ago: executing program 2 (id=1458):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="440f20c03504000000440f22c08f89109080d6c43d8366460f3a0b89dd00000000660f38813fc461fc50c9b8010000000f01c1c74424007f000000c744240200180000ff1c240f01cb400fc7980b840000da0b", 0x53}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

342.339142ms ago: executing program 3 (id=1466):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xe, 0xffffffff, 0x1, 0x1}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000001040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
times(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x2cb, &(0x7f0000000480), &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r3, 0x0, 0x4823, 0x1, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x80, &(0x7f0000000000)=0x6, 0x0, 0x4)
io_uring_enter(r3, 0x60d7, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
ioprio_get$pid(0x1, 0x0)

149.579587ms ago: executing program 2 (id=1459):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000004000)="$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")
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, 0x0, 0x0}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000b0000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b30205006023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa8272f3eee97c0c3258918bd811db74b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a9433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0f34d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbdee00550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920386f14d12ca3c3431ee97471c7868dcdaffaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf974fcf36cbf6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a8022c8870f228787863a9e0885e238b44ae1c25c9fd8bb27083b8246829e64056000302bffff15405bd5f2eba2000000dd0000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb42305651152df60a3a05b89e760b60563c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9463f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d00000000ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf5ef06f7244dd357acd09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58aa9deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000004c0c1b4742fdb68a34370543d7aec4fbb67bfb3730af0c908d89029365378cca550f508e3699830028643ecfe9f79bd15db571c5420d9b60fa794cfbc7fd039856329b684216237ec55faf25fee7f1a838fc2399d67fe9b245fab52f7a8eb1aadbfbd8d203290f131965a41ca43bf5440e7b1425c15d39559e76384112b80dd0049280a1e9b63e3e7cadefa558b6d38ebe86b49e3f80204b5536f1bde80cb2dade46f6a1b8cc20a5a9b560e736235d518349599b8368bf1e360ecaa0bde20303eef789304761aca34b507fd66115ef36b2cec7629c7609283d1676"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r8 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r9 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
sendfile(r8, r9, 0x0, 0x80000001)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)

105.717591ms ago: executing program 4 (id=1460):
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c})
lremovexattr(0x0, &(0x7f0000000a40)=ANY=[])
prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
ioprio_set$pid(0x3, 0x0, 0x6000)

0s ago: executing program 3 (id=1461):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10)
syz_emit_ethernet(0xd86, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0xd50, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback, [@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@mcast1, @empty, @private2, @private1, @private1, @loopback, @local]}, @dstopts={0x0, 0x193, '\x00', [@generic={0x0, 0x5f, "f0edb1af7badf7491d2500721be4cce0542133657e2d12f0ae3e134727e49fe7c04867be7426e8cbefd47520beacbe5c36083a972cb3b73de48f661a252e0b0a5a236ddf29543f29a5e18fd1c7b54248c8b03dc91385c9160f3394ff0708c8"}, @hao={0xc9, 0x10, @private1}, @jumbo, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x800, 0x0, 0x0, 0x4]}}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xbc4, "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"}]}]}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

dge0: port 2(bridge_slave_1) entered blocking state
[  259.844694][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.851971][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  259.859758][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  259.892501][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  259.918079][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.924913][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.932362][ T4233] device bridge_slave_0 entered promiscuous mode
[  259.939150][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  259.946966][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  259.954223][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  259.963580][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.970605][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.977796][ T4233] device bridge_slave_1 entered promiscuous mode
[  259.984575][ T4222] device veth0_vlan entered promiscuous mode
[  260.022903][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  260.051258][ T4222] device veth1_macvtap entered promiscuous mode
[  260.066389][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  260.083069][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  260.118346][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  260.119727][  T341] usb 4-1: USB disconnect, device number 22
[  260.130027][  T572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  260.139613][  T572] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.146489][  T572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.154693][  T572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  260.162774][  T572] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.169650][  T572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.177020][  T572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  260.186307][ T1056] device bridge_slave_1 left promiscuous mode
[  260.192295][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.200010][ T1056] device bridge_slave_0 left promiscuous mode
[  260.206085][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.213761][ T1056] device veth1_macvtap left promiscuous mode
[  260.219907][ T1056] device veth0_vlan left promiscuous mode
[  260.305697][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  260.313688][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  260.321697][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  260.329784][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.355258][ T4233] device veth0_vlan entered promiscuous mode
[  260.361624][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  260.370058][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  260.378376][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  260.386685][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  260.403952][ T4233] device veth1_macvtap entered promiscuous mode
[  260.416695][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  260.424103][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  260.431378][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  260.440112][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  260.592023][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  260.600280][ T4245] loop2: detected capacity change from 0 to 16
[  260.607042][ T4245] erofs: (device loop2): mounted with root inode @ nid 36.
[  260.607133][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  260.622895][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  260.636042][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  260.644143][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  260.674258][ T4252] loop0: detected capacity change from 0 to 16
[  260.682288][ T4252] erofs: (device loop0): mounted with root inode @ nid 36.
[  260.692173][   T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000]
[  260.719751][ T4247] kvm: vcpu 0: requested 34 ns lapic timer period limited to 200000 ns
[  260.728627][ T4252] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192]
[  260.838854][ T4261] loop3: detected capacity change from 0 to 512
[  260.893606][  T317] usb 5-1: USB disconnect, device number 24
[  260.918487][ T4261] EXT4-fs (loop3): 1 truncate cleaned up
[  260.923985][ T4261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  261.233191][ T4267] loop0: detected capacity change from 0 to 2048
[  262.045709][ T4267] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  262.240050][ T4263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1037: bg 0: block 234: padding at end of block bitmap is not set
[  262.254420][   T28] audit: type=1400 audit(2000000009.390:626): avc:  denied  { setopt } for  pid=4258 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  262.276111][ T4263] EXT4-fs (loop0): Remounting filesystem read-only
[  262.484616][ T3722] EXT4-fs (loop3): unmounting filesystem.
[  262.761507][ T4233] EXT4-fs (loop0): unmounting filesystem.
[  262.796987][   T28] audit: type=1326 audit(2000000010.050:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cd9779f9 code=0x7ffc0000
[  262.797031][ T1056] device bridge_slave_1 left promiscuous mode
[  262.825994][  T317] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  262.828981][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.840199][   T28] audit: type=1326 audit(2000000010.070:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fd2cd9779f9 code=0x7ffc0000
[  262.864257][   T28] audit: type=1326 audit(2000000010.070:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cd9779f9 code=0x7ffc0000
[  262.893000][ T1056] device bridge_slave_0 left promiscuous mode
[  262.902514][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.920148][ T1056] device veth1_macvtap left promiscuous mode
[  262.926053][ T1056] device veth0_vlan left promiscuous mode
[  262.999583][ T4314] loop3: detected capacity change from 0 to 512
[  263.010807][ T4314] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  263.053258][ T4314] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  263.066999][ T4319] loop0: detected capacity change from 0 to 512
[  263.076806][ T4314] EXT4-fs (loop3): 1 truncate cleaned up
[  263.082669][ T4314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  263.099536][ T4314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1054'.
[  263.100030][ T4319] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.1055: corrupted inode contents
[  263.120075][ T4319] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.1055: mark_inode_dirty error
[  263.132081][ T4319] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.1055: corrupted inode contents
[  263.252901][ T4319] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1055: mark_inode_dirty error
[  263.265168][ T4319] Quota error (device loop0): write_blk: dquota write failed
[  263.330659][ T4319] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  263.340913][ T4319] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.1055: Failed to acquire dquot type 0
[  263.353214][ T4319] EXT4-fs (loop0): 1 orphan inode deleted
[  263.358955][ T4319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  263.368048][  T386] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  263.375662][ T4319] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff)
[  263.378303][  T386] EXT4-fs error (device loop0): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 1
[  263.456897][  T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.467847][  T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.477946][  T317] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  263.486872][  T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.498279][  T317] usb 5-1: config 0 descriptor??
[  263.956554][  T317] sony 0003:054C:0268.001B: unknown main item tag 0x0
[  263.981136][  T317] sony 0003:054C:0268.001B: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0
[  264.003853][  T317] sony 0003:054C:0268.001B: failed to claim input
[  264.043257][ T3722] EXT4-fs (loop3): unmounting filesystem.
[  264.106289][ T4233] EXT4-fs (loop0): unmounting filesystem.
[  264.121924][ T4334] loop3: detected capacity change from 0 to 1024
[  264.136011][ T4334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  264.159984][  T317] usb 5-1: USB disconnect, device number 25
[  265.128147][ T4346] loop0: detected capacity change from 0 to 512
[  265.191712][ T4346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  265.227009][ T4346] EXT4-fs warning (device loop0): ext4_multi_mount_protect:324: fsck is running on the filesystem
[  265.238503][ T4346] EXT4-fs warning (device loop0): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  265.274029][ T3722] EXT4-fs (loop3): unmounting filesystem.
[  265.405277][ T4357] loop3: detected capacity change from 0 to 40427
[  265.413685][ T4357] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  265.421307][  T331] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  265.421373][ T4357] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  265.438688][ T4357] F2FS-fs (loop3): Found nat_bits in checkpoint
[  265.468010][ T4357] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  265.479635][ T4357] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  265.486525][ T4357] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  265.519728][ T4357] syz.3.1060: attempt to access beyond end of device
[  265.519728][ T4357] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  265.533962][  T341] kworker/1:5: attempt to access beyond end of device
[  265.533962][  T341] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  265.575616][  T223] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  265.620034][ T4369] loop0: detected capacity change from 0 to 128
[  266.058947][ T4374] loop1: detected capacity change from 0 to 256
[  266.074947][ T4374] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  266.185580][  T331] usb 3-1: config 0 has no interfaces?
[  266.191168][  T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  266.232486][  T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.269855][  T331] usb 3-1: config 0 descriptor??
[  266.346247][  T223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  266.357467][  T223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  266.364543][ T1722] kworker/u4:7: attempt to access beyond end of device
[  266.364543][ T1722] loop3: rw=1, sector=45112, nr_sectors = 8 limit=40427
[  266.368901][  T223] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  266.394627][  T223] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  266.403474][  T223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.412075][  T223] usb 5-1: config 0 descriptor??
[  266.435602][ T4359] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  266.523975][ T4379] loop0: detected capacity change from 0 to 128
[  266.531931][ T4379] ext4: Unknown parameter 'hash'
[  266.539132][  T315] usb 3-1: USB disconnect, device number 18
[  266.952235][ T4389] xt_l2tp: wrong L2TP version: 0
[  267.282453][ T4390] loop1: detected capacity change from 0 to 512
[  267.309571][ T4359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.324237][ T4359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.179859][  T223] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd
[  268.188435][  T223] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving
[  268.260905][  T223] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  268.415593][   T19] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  268.426292][ T4417] loop1: detected capacity change from 0 to 128
[  268.434214][ T4417] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  268.442764][ T4417] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff)
[  268.476709][  T315] usb 5-1: USB disconnect, device number 26
[  268.901598][ T4428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'.
[  268.985603][   T19] usb 1-1: Using ep0 maxpacket: 16
[  268.993464][ T4422] loop2: detected capacity change from 0 to 40427
[  269.005574][ T4422] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  269.013270][ T4422] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  269.022531][ T4422] F2FS-fs (loop2): invalid crc value
[  269.029109][ T4422] F2FS-fs (loop2): Found nat_bits in checkpoint
[  269.087274][ T4434] loop4: detected capacity change from 0 to 128
[  269.115625][   T19] usb 1-1: config index 0 descriptor too short (expected 1572, got 36)
[  269.125799][   T19] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  269.130189][ T4434] ext4: Unknown parameter 'hash'
[  269.142524][   T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.152708][   T19] usb 1-1: config 0 has no interfaces?
[  269.158364][ T4422] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  269.165358][ T4422] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  269.255711][   T19] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  269.313384][ T4179] EXT4-fs (loop1): unmounting filesystem.
[  269.403438][ T4438] xt_l2tp: wrong L2TP version: 0
[  269.580477][ T4437] syz.2.1081: attempt to access beyond end of device
[  269.580477][ T4437] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  269.602246][   T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=32
[  269.610219][   T19] usb 1-1: SerialNumber: syz
[  269.615277][   T19] usb 1-1: config 0 descriptor??
[  269.624147][ T4422] overlayfs: failed to resolve './file0': -2
[  269.655829][ T4437] syz.2.1081: attempt to access beyond end of device
[  269.655829][ T4437] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  269.866300][ T4447] loop1: detected capacity change from 0 to 40427
[  269.976070][   T19] usb 1-1: USB disconnect, device number 20
[  269.980936][ T4462] loop4: detected capacity change from 0 to 512
[  270.019061][ T4462] EXT4-fs (loop4): Test dummy encryption mode enabled
[  270.034820][ T4462] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.1091: invalid block
[  270.042868][ T4460] kvm: vcpu 0: requested 34 ns lapic timer period limited to 200000 ns
[  270.053833][ T4462] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1091: couldn't read orphan inode 11 (err -117)
[  270.063524][ T4446] loop1: detected capacity change from 0 to 128
[  270.072626][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  270.563776][ T4472] loop2: detected capacity change from 0 to 256
[  270.575753][ T4472] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  270.590604][   T28] audit: type=1400 audit(2000000017.840:630): avc:  denied  { write } for  pid=4474 comm="syz.1.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  270.710071][ T4479] loop3: detected capacity change from 0 to 512
[  270.719648][ T4479] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1096: casefold flag without casefold feature
[  270.732684][ T4479] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.1096: missing EA_INODE flag
[  270.744850][ T4479] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1096: error while reading EA inode 2 err=-117
[  271.578875][ T4483] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  271.641101][ T4479] EXT4-fs (loop3): 1 orphan inode deleted
[  271.669991][ T3967] EXT4-fs (loop4): unmounting filesystem.
[  271.914522][ T4479] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  271.951834][ T4488] tipc: Started in network mode
[  271.956639][ T4488] tipc: Node identity ., cluster identity 4711
[  271.962770][ T4488] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  271.965027][   T28] audit: type=1400 audit(2000000019.210:631): avc:  denied  { watch } for  pid=4478 comm="syz.3.1096" path="/45/file1/file1" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  272.064173][ T4479] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #18: comm syz.3.1096: Siphash requires key
[  272.071552][ T4500] loop2: detected capacity change from 0 to 128
[  272.077729][ T4479] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #18: comm syz.3.1096: Siphash requires key
[  272.097188][ T4479] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #18: comm syz.3.1096: Siphash requires key
[  272.097494][ T4500] ext4: Unknown parameter 'hash'
[  272.119928][ T4495] loop0: detected capacity change from 0 to 128
[  272.130718][ T3722] EXT4-fs (loop3): unmounting filesystem.
[  272.203547][ T4505] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1098'.
[  272.273186][   T28] audit: type=1326 audit(2000000019.520:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4494 comm="syz.0.1101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2cd9779f9 code=0x0
[  272.436114][ T4507] loop3: detected capacity change from 0 to 1024
[  272.459290][ T4507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  272.560418][ T4512] loop1: detected capacity change from 0 to 1024
[  272.576892][ T4512] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  273.177406][ T4513] overlayfs: missing 'lowerdir'
[  273.953858][ T4521] xt_l2tp: wrong L2TP version: 0
[  274.304024][ T4519] tty tty23: ldisc open failed (-12), clearing slot 22
[  274.345721][ T3722] EXT4-fs (loop3): unmounting filesystem.
[  274.347447][ T4179] EXT4-fs (loop1): unmounting filesystem.
[  274.423917][ T4531] loop2: detected capacity change from 0 to 512
[  275.317068][ T4531] EXT4-fs (loop2): Test dummy encryption mode enabled
[  275.625088][ T4531] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.1109: invalid block
[  275.636790][ T4531] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1109: couldn't read orphan inode 11 (err -117)
[  275.648896][ T4531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  275.667495][ T4543] loop4: detected capacity change from 0 to 256
[  275.675846][ T4545] loop3: detected capacity change from 0 to 512
[  275.739718][ T4528] loop1: detected capacity change from 0 to 40427
[  275.751250][ T4543] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  275.762162][ T4528] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  275.773255][ T4528] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  275.783746][ T4528] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  275.820689][ T4545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  275.851434][ T4545] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff)
[  275.872857][ T4545] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.1112: corrupted inode contents
[  275.886051][ T4545] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.1112: mark_inode_dirty error
[  275.897637][ T4528] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  275.901321][ T4545] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.1112: corrupted inode contents
[  275.906982][ T4528] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  276.181289][ T4563] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  276.264048][ T4545] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1112: mark_inode_dirty error
[  276.310777][ T4222] EXT4-fs (loop2): unmounting filesystem.
[  276.539241][ T4568] syz.1.1117: attempt to access beyond end of device
[  276.539241][ T4568] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  276.560088][ T3722] EXT4-fs (loop3): unmounting filesystem.
[  277.022290][ T4579] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1119'.
[  277.148901][ T4576] loop3: detected capacity change from 0 to 256
[  277.188913][ T4179] syz-executor: attempt to access beyond end of device
[  277.188913][ T4179] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  277.450114][ T4179] syz-executor: attempt to access beyond end of device
[  277.450114][ T4179] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  277.470957][ T4551] f2fs_ckpt-7:1: attempt to access beyond end of device
[  277.470957][ T4551] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  278.287219][   T28] audit: type=1326 audit(2000000024.890:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4575 comm="syz.3.1129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5f03779f9 code=0x0
[  278.675625][  T315] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  278.892216][ T4611] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.899506][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.906868][ T4611] device bridge_slave_0 entered promiscuous mode
[  278.913737][ T4611] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.920651][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.927947][ T4611] device bridge_slave_1 entered promiscuous mode
[  278.945605][  T315] usb 3-1: Using ep0 maxpacket: 16
[  279.022699][ T4611] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.029669][ T4611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.036768][ T4611] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.043531][ T4611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.050999][   T19] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  279.065911][ T4617] loop4: detected capacity change from 0 to 40427
[  279.075897][ T4617] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  279.081054][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  279.087517][ T4617] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  279.097287][  T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.097332][  T341] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.115144][  T341] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.115982][  T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.124223][ T4617] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  279.131615][  T315] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  279.151855][  T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.164958][  T315] usb 3-1: config 0 descriptor??
[  279.170147][ T4617] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  279.177341][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  279.181795][ T4617] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  279.185317][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.199302][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.206576][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  279.214552][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.221410][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.230250][ T4623] syz.4.1135: attempt to access beyond end of device
[  279.230250][ T4623] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  279.305396][  T386] device bridge_slave_1 left promiscuous mode
[  279.312210][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.320009][  T386] device bridge_slave_0 left promiscuous mode
[  279.326485][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.334551][  T386] device veth1_macvtap left promiscuous mode
[  279.340970][  T386] device veth0_vlan left promiscuous mode
[  279.678628][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  279.687216][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  279.694923][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  279.704325][ T4611] device veth0_vlan entered promiscuous mode
[  279.710959][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  279.718756][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  279.726912][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  279.734420][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  279.745749][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  279.753744][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  279.766406][  T315] lenovo 0003:17EF:6009.001D: item fetching failed at offset 1/5
[  279.776066][  T315] lenovo 0003:17EF:6009.001D: hid_parse failed
[  279.782048][  T315] lenovo: probe of 0003:17EF:6009.001D failed with error -22
[  279.793189][ T3967] syz-executor: attempt to access beyond end of device
[  279.793189][ T3967] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  279.807902][ T3967] syz-executor: attempt to access beyond end of device
[  279.807902][ T3967] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  279.809634][ T4611] device veth1_macvtap entered promiscuous mode
[  279.836042][ T4619] f2fs_ckpt-7:4: attempt to access beyond end of device
[  279.836042][ T4619] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  279.836890][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  279.861706][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  279.870051][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  279.892062][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  279.900125][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  279.915679][   T19] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  279.975570][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.983589][   T19] usb 1-1: Product: syz
[  279.991276][   T19] usb 1-1: Manufacturer: syz
[  280.015581][   T19] usb 1-1: SerialNumber: syz
[  280.022861][   T19] usb 1-1: config 0 descriptor??
[  280.041297][ T4626] usb 3-1: USB disconnect, device number 19
[  280.215650][  T341] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  280.416889][  T315] usb 1-1: USB disconnect, device number 21
[  280.465599][  T341] usb 2-1: Using ep0 maxpacket: 32
[  280.616335][  T386] device bridge_slave_1 left promiscuous mode
[  280.625688][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.638000][  T386] device bridge_slave_0 left promiscuous mode
[  280.643987][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.720719][  T386] device veth1_macvtap left promiscuous mode
[  280.795686][  T341] usb 2-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00
[  280.806405][  T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.814272][  T341] usb 2-1: Product: syz
[  280.825456][  T341] usb 2-1: Manufacturer: syz
[  280.830898][  T341] usb 2-1: SerialNumber: syz
[  280.944147][  T341] usb 2-1: config 0 descriptor??
[  281.032399][  T341] usb-storage 2-1:0.0: USB Mass Storage device detected
[  281.061718][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.068835][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.076094][ T4638] device bridge_slave_0 entered promiscuous mode
[  281.082878][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.089970][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.103534][ T4638] device bridge_slave_1 entered promiscuous mode
[  281.159826][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.166810][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.173880][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.180702][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.200917][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  281.209225][  T341] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.216632][  T341] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.227050][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  281.235096][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.238134][   T39] usb 2-1: USB disconnect, device number 22
[  281.241943][  T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.266555][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  281.274597][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.281442][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.288619][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  281.296850][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  281.311822][ T4638] device veth0_vlan entered promiscuous mode
[  281.318308][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  281.326618][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  281.334323][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  281.341594][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  281.353223][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  281.362188][ T4638] device veth1_macvtap entered promiscuous mode
[  281.371924][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  281.381937][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  281.510873][ T4657] loop4: detected capacity change from 0 to 40427
[  281.534365][ T4657] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  281.541015][ T4657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  281.551335][ T4657] F2FS-fs (loop4): Found nat_bits in checkpoint
[  281.584614][ T4657] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  281.591583][ T4657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  281.685599][  T315] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  281.771793][ T4667] loop4: detected capacity change from 0 to 128
[  281.793328][ T4667] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  281.801942][ T4667] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff)
[  282.024106][ T4672] netlink: 'syz.3.1142': attribute type 16 has an invalid length.
[  282.031890][ T4672] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1142'.
[  282.879727][ T4679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'.
[  282.923925][ T4638] EXT4-fs (loop4): unmounting filesystem.
[  282.963649][ T4679] loop0: detected capacity change from 0 to 512
[  283.011503][ T4679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  283.024251][ T4679] ext4 filesystem being mounted at /26/bus supports timestamps until 2038 (0x7fffffff)
[  283.036481][ T4681] loop1: detected capacity change from 0 to 512
[  283.072019][ T4681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  283.084197][ T4681] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff)
[  283.095654][  T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.106799][  T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.145662][  T315] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  283.161469][ T4233] EXT4-fs (loop0): unmounting filesystem.
[  283.170391][  T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.189253][   T28] audit: type=1400 audit(2000000030.442:634): avc:  denied  { audit_write } for  pid=4683 comm="syz.3.1149" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  283.206091][  T315] usb 3-1: config 0 descriptor??
[  283.211188][   T28] audit: type=1107 audit(2000000030.442:635): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  283.475551][  T454] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  283.736222][  T315] sony 0003:054C:0268.001E: unknown main item tag 0x0
[  283.751307][  T315] sony 0003:054C:0268.001E: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0
[  283.763047][  T315] sony 0003:054C:0268.001E: failed to claim input
[  283.835613][  T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.855556][  T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.868864][ T4611] EXT4-fs (loop1): unmounting filesystem.
[  283.874466][  T454] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  283.883509][  T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.902249][   T28] audit: type=1400 audit(2000000031.152:636): avc:  denied  { listen } for  pid=4703 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  283.921618][   T28] audit: type=1400 audit(2000000031.152:637): avc:  denied  { accept } for  pid=4703 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  283.922226][  T454] usb 1-1: config 0 descriptor??
[  283.955948][  T650] usb 3-1: USB disconnect, device number 20
[  284.042291][ T4708] loop4: detected capacity change from 0 to 256
[  284.051358][ T4708] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x87abbd06, utbl_chksum : 0xe619d30d)
[  284.067091][ T4708] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  284.078621][ T4708] exFAT-fs (loop4): Filesystem has been set read-only
[  284.284841][ T4713] loop3: detected capacity change from 0 to 40427
[  284.335887][ T1416] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  284.375570][  T315] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  284.426509][  T454] sony 0003:054C:0268.001F: unknown main item tag 0x0
[  284.433119][  T454] sony 0003:054C:0268.001F: unknown main item tag 0x0
[  284.439941][  T454] sony 0003:054C:0268.001F: unknown main item tag 0x0
[  284.446680][  T454] sony 0003:054C:0268.001F: unknown main item tag 0x0
[  284.453264][  T454] sony 0003:054C:0268.001F: unknown main item tag 0x0
[  284.471115][  T454] sony 0003:054C:0268.001F: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0
[  284.483087][ T4712] loop3: detected capacity change from 0 to 128
[  284.484093][  T454] sony 0003:054C:0268.001F: failed to claim input
[  284.637299][  T317] usb 1-1: USB disconnect, device number 22
[  284.765606][  T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.776571][  T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.080868][  T315] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[  285.089792][  T315] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  285.097662][  T315] usb 5-1: Product: syz
[  285.102106][  T315] usb 5-1: config 0 descriptor??
[  285.161826][ T4731] loop0: detected capacity change from 0 to 256
[  285.176826][   T28] audit: type=1400 audit(2000000032.432:638): avc:  denied  { watch } for  pid=4730 comm="syz.0.1164" path="/29/file0/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  285.178538][ T4731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4731 comm=syz.0.1164
[  285.211805][   T28] audit: type=1400 audit(2000000032.462:639): avc:  denied  { read } for  pid=4730 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  285.237442][ T4233] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  285.245122][ T4233] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  285.423528][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.430574][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.437800][ T4737] device bridge_slave_0 entered promiscuous mode
[  285.444428][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.451796][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.459802][ T4737] device bridge_slave_1 entered promiscuous mode
[  285.484572][   T28] audit: type=1400 audit(2000000032.732:640): avc:  denied  { listen } for  pid=4743 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  285.556092][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.562946][ T4737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.570081][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.576828][ T4737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.598424][  T315] wacom 0003:056A:032C.0020: unknown main item tag 0x0
[  285.605111][  T315] wacom 0003:056A:032C.0020: unknown main item tag 0x0
[  285.612738][  T315] wacom 0003:056A:032C.0020: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  285.637998][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  285.686460][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.693649][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.707245][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  285.716246][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.723121][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.740988][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  285.749146][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.756033][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.981834][  T650] usb 5-1: USB disconnect, device number 27
[  286.019151][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.027232][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.044305][ T4737] device veth0_vlan entered promiscuous mode
[  286.052422][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  286.060676][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  286.068399][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  286.075576][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  286.091340][ T4737] device veth1_macvtap entered promiscuous mode
[  286.097893][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  286.112460][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  286.120577][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  286.147616][ T4759] loop2: detected capacity change from 0 to 256
[  286.171706][ T4759] FAT-fs (loop2): Directory bread(block 64) failed
[  286.181785][ T4759] FAT-fs (loop2): Directory bread(block 65) failed
[  286.188643][ T4759] FAT-fs (loop2): Directory bread(block 66) failed
[  286.195060][ T4759] FAT-fs (loop2): Directory bread(block 67) failed
[  286.201760][ T4759] FAT-fs (loop2): Directory bread(block 68) failed
[  286.208451][ T4759] FAT-fs (loop2): Directory bread(block 69) failed
[  286.214885][ T4759] FAT-fs (loop2): Directory bread(block 70) failed
[  286.221178][ T4759] FAT-fs (loop2): Directory bread(block 71) failed
[  286.227798][ T4759] FAT-fs (loop2): Directory bread(block 72) failed
[  286.234222][ T4759] FAT-fs (loop2): Directory bread(block 73) failed
[  286.234397][ T1056] device bridge_slave_1 left promiscuous mode
[  286.246998][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.254461][ T1056] device bridge_slave_0 left promiscuous mode
[  286.260683][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.268899][ T1056] device veth1_macvtap left promiscuous mode
[  286.274831][ T1056] device veth0_vlan left promiscuous mode
[  286.355740][ T4762] loop0: detected capacity change from 0 to 512
[  288.960163][ T4762] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  289.025167][ T4762] EXT4-fs (loop0): 1 orphan inode deleted
[  289.030935][ T4762] EXT4-fs (loop0): 1 truncate cleaned up
[  289.036464][ T4762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  289.214651][ T4770] loop1: detected capacity change from 0 to 512
[  289.239468][ T4775] input: syz0 as /devices/virtual/input/input27
[  289.318182][ T4737] EXT4-fs (loop0): unmounting filesystem.
[  289.597852][ T4770] EXT4-fs (loop1): 1 orphan inode deleted
[  289.610629][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  289.629226][ T4770] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff)
[  289.770832][ T4787] syz.1.1174[4787] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.770932][ T4787] syz.1.1174[4787] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.782496][  T317] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  289.808428][ T4789] loop0: detected capacity change from 0 to 1024
[  289.822052][ T4789] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  289.830710][ T4789] EXT4-fs (loop0): orphan cleanup on readonly fs
[  289.837215][ T4789] EXT4-fs error (device loop0): ext4_free_blocks:6211: comm syz.0.1178: Freeing blocks not in datazone - block = 0, count = 4096
[  289.852311][ T4789] EXT4-fs (loop0): 1 orphan inode deleted
[  289.858159][ T4789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  290.075194][ T4611] EXT4-fs (loop1): unmounting filesystem.
[  290.096690][ T4792] loop1: detected capacity change from 0 to 256
[  290.103164][ T4792] exfat: Deprecated parameter 'namecase'
[  290.112681][ T4792] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  290.139648][ T4795] loop3: detected capacity change from 0 to 256
[  290.175947][  T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.186868][  T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.196703][  T317] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  290.205594][  T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.225620][  T317] usb 3-1: config 0 descriptor??
[  290.252375][ T4805] loop4: detected capacity change from 0 to 256
[  290.285322][ T4805] FAT-fs (loop4): Directory bread(block 64) failed
[  290.291740][ T4805] FAT-fs (loop4): Directory bread(block 65) failed
[  290.298207][ T4805] FAT-fs (loop4): Directory bread(block 66) failed
[  290.304547][ T4805] FAT-fs (loop4): Directory bread(block 67) failed
[  290.311064][ T4805] FAT-fs (loop4): Directory bread(block 68) failed
[  290.317743][ T4805] FAT-fs (loop4): Directory bread(block 69) failed
[  290.324109][ T4805] FAT-fs (loop4): Directory bread(block 70) failed
[  290.330539][ T4805] FAT-fs (loop4): Directory bread(block 71) failed
[  290.337038][ T4805] FAT-fs (loop4): Directory bread(block 72) failed
[  290.343457][ T4805] FAT-fs (loop4): Directory bread(block 73) failed
[  290.393831][ T4737] EXT4-fs (loop0): unmounting filesystem.
[  290.491528][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'.
[  290.500476][ T4819] netlink: 'syz.4.1191': attribute type 1 has an invalid length.
[  290.846265][  T317] hid-led 0003:1D34:000A.0021: unexpected long global item
[  290.853535][  T317] hid-led: probe of 0003:1D34:000A.0021 failed with error -22
[  291.081529][  T331] usb 3-1: USB disconnect, device number 21
[  291.282738][ T4829] loop1: detected capacity change from 0 to 1024
[  291.293142][ T4829] EXT4-fs: Ignoring removed orlov option
[  291.300512][ T4829] EXT4-fs: Ignoring removed nomblk_io_submit option
[  291.317120][   T28] audit: type=1400 audit(2000000003.440:641): avc:  denied  { accept } for  pid=4832 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  291.339722][   T28] audit: type=1400 audit(2000000003.460:642): avc:  denied  { connect } for  pid=4834 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  291.343728][ T4829] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002]
[  291.362123][   T28] audit: type=1400 audit(2000000003.490:643): avc:  denied  { setopt } for  pid=4834 comm="syz.0.1197" laddr=172.20.20.170 lport=5 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  291.367362][ T4829] System zones: 0-1, 3-36
[  291.390910][   T28] audit: type=1400 audit(2000000003.490:644): avc:  denied  { read } for  pid=4834 comm="syz.0.1197" laddr=172.20.20.170 lport=5 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  291.396190][ T4829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  291.441912][ T4611] EXT4-fs (loop1): unmounting filesystem.
[  291.461963][ T4840] loop3: detected capacity change from 0 to 512
[  291.468943][ T4840] EXT4-fs: Ignoring removed bh option
[  291.477457][ T4840] EXT4-fs error (device loop3): __ext4_iget:5046: inode #12: block 2: comm syz.3.1199: invalid block
[  291.489253][ T4840] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1199: couldn't read orphan inode 12 (err -117)
[  291.501457][ T4840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  291.530894][   T28] audit: type=1326 audit(2000000003.650:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4841 comm="syz.1.1198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec9a3779f9 code=0x0
[  291.609143][ T4848] loop0: detected capacity change from 0 to 128
[  291.646817][   T28] audit: type=1400 audit(2000000003.770:646): avc:  denied  { nlmsg_write } for  pid=4849 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  291.904181][ T4859] device wireguard0 entered promiscuous mode
[  292.484889][ T3722] EXT4-fs (loop3): unmounting filesystem.
[  292.659322][ T4864] syz.0.1204 (4864) used greatest stack depth: 19072 bytes left
[  292.995591][   T39] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  293.052236][ T4868] loop3: detected capacity change from 0 to 40427
[  293.058990][ T4868] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  293.065408][ T4868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  293.075452][ T4868] F2FS-fs (loop3): Found nat_bits in checkpoint
[  293.107829][ T4868] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  293.114741][ T4868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  293.245573][   T39] usb 2-1: Using ep0 maxpacket: 32
[  293.347071][ T4887] loop0: detected capacity change from 0 to 256
[  293.395797][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.572958][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.583319][   T39] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  293.592667][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.631101][ T4885] loop3: detected capacity change from 0 to 40427
[  293.648186][ T4885] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  293.654542][ T4885] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  293.664011][   T39] usb 2-1: config 0 descriptor??
[  293.674216][ T4885] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  293.709438][ T4885] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  293.716867][ T4885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  294.008590][ T4902] syz.3.1208: attempt to access beyond end of device
[  294.008590][ T4902] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  294.066094][   T28] audit: type=1400 audit(2000000006.190:647): avc:  denied  { mount } for  pid=4906 comm="syz.0.1212" name="/" dev="configfs" ino=12602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  294.088701][   T28] audit: type=1400 audit(2000000006.210:648): avc:  denied  { read } for  pid=4906 comm="syz.0.1212" name="/" dev="configfs" ino=12602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  294.271339][   T39] hid-rmi 0003:0461:4E72.0022: unknown main item tag 0x0
[  294.307461][   T39] hid-rmi 0003:0461:4E72.0022: unknown main item tag 0x0
[  294.456658][   T28] audit: type=1400 audit(2000000006.210:649): avc:  denied  { open } for  pid=4906 comm="syz.0.1212" path="/" dev="configfs" ino=12602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  294.478671][   T39] hid-rmi 0003:0461:4E72.0022: unknown main item tag 0x0
[  294.481445][ T3722] syz-executor: attempt to access beyond end of device
[  294.481445][ T3722] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  294.488731][   T39] hid-rmi 0003:0461:4E72.0022: unknown main item tag 0x0
[  294.506850][   T39] hid-rmi 0003:0461:4E72.0022: unknown main item tag 0x0
[  294.519286][ T3722] syz-executor: attempt to access beyond end of device
[  294.519286][ T3722] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  294.533738][   T28] audit: type=1400 audit(2000000006.630:650): avc:  denied  { unmount } for  pid=4737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  294.535692][   T39] hid-rmi 0003:0461:4E72.0022: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0
[  294.582160][ T4921] loop2: detected capacity change from 0 to 512
[  294.593695][ T4921] EXT4-fs (loop2): Test dummy encryption mode enabled
[  294.596726][  T325] kworker/u4:3: attempt to access beyond end of device
[  294.596726][  T325] loop3: rw=1, sector=53256, nr_sectors = 2120 limit=40427
[  294.602416][ T4921] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.1220: inline data xattr refers to an external xattr inode
[  294.615444][   T39] usb 2-1: USB disconnect, device number 23
[  294.629161][ T4921] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1220: couldn't read orphan inode 12 (err -117)
[  294.651595][  T325] kworker/u4:3: attempt to access beyond end of device
[  294.651595][  T325] loop3: rw=1, sector=55376, nr_sectors = 2160 limit=40427
[  294.654800][ T4919] loop0: detected capacity change from 0 to 256
[  294.671970][ T4921] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  294.689104][ T4919] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  294.704088][  T325] kworker/u4:3: attempt to access beyond end of device
[  294.704088][  T325] loop3: rw=1, sector=57536, nr_sectors = 2192 limit=40427
[  294.734458][ T4919] exFAT-fs (loop0): error, tried to truncate zeroed cluster.
[  294.743170][  T325] kworker/u4:3: attempt to access beyond end of device
[  294.743170][  T325] loop3: rw=1, sector=59728, nr_sectors = 2216 limit=40427
[  294.751921][ T4919] exFAT-fs (loop0): Filesystem has been set read-only
[  294.760967][  T325] kworker/u4:3: attempt to access beyond end of device
[  294.760967][  T325] loop3: rw=1, sector=61944, nr_sectors = 888 limit=40427
[  294.794252][  T386] kworker/u4:4: attempt to access beyond end of device
[  294.794252][  T386] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  294.929379][ T4933] syz.0.1223[4933] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  294.929462][ T4933] syz.0.1223[4933] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  295.038288][ T4940] loop0: detected capacity change from 0 to 512
[  295.081336][ T4940] EXT4-fs (loop0): Test dummy encryption mode enabled
[  295.088809][ T4942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'.
[  295.119043][ T4940] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.1227: casefold flag without casefold feature
[  295.162696][ T4940] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  295.181930][ T4940] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  295.374399][ T4737] EXT4-fs (loop0): unmounting filesystem.
[  295.586225][  T386] device bridge_slave_1 left promiscuous mode
[  295.592241][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.599738][  T386] device bridge_slave_0 left promiscuous mode
[  295.606105][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.613973][  T386] device veth1_macvtap left promiscuous mode
[  295.620131][  T386] device veth0_vlan left promiscuous mode
[  295.756595][ T4949] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  295.933853][ T4222] EXT4-fs (loop2): unmounting filesystem.
[  296.202594][ T4962] loop4: detected capacity change from 0 to 256
[  296.400436][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  296.416279][   T28] audit: type=1400 audit(2000000008.430:652): avc:  denied  { ioctl } for  pid=4953 comm="syz.0.1238" path="socket:[40663]" dev="sockfs" ino=40663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  296.940495][ T4967] loop4: detected capacity change from 0 to 1024
[  296.993700][ T4967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  297.026015][ T4968] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.032942][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.063740][ T4968] device bridge_slave_0 entered promiscuous mode
[  297.101508][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.112938][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.120328][ T4968] device bridge_slave_1 entered promiscuous mode
[  297.540600][ T4960] loop2: detected capacity change from 0 to 40427
[  297.552499][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.559402][ T4968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.566508][ T4968] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.573348][ T4968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.576282][ T4960] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  297.587378][ T4960] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  297.614494][ T4984] loop0: detected capacity change from 0 to 128
[  297.620842][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.628204][ T4960] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  297.630970][ T4984] ext4: Unknown parameter 'hash'
[  297.644805][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.657191][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  297.671858][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  297.696587][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  297.705000][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.711899][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.814793][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  297.815532][ T4638] EXT4-fs (loop4): unmounting filesystem.
[  297.822742][ T4960] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  297.835366][ T4960] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  297.844144][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.851153][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.876701][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  297.884467][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  297.895339][ T4994] loop4: detected capacity change from 0 to 256
[  297.925104][ T4968] device veth0_vlan entered promiscuous mode
[  297.947432][ T4996] syz.2.1228: attempt to access beyond end of device
[  297.947432][ T4996] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  297.971253][ T4994] loop4: detected capacity change from 0 to 256
[  298.005897][ T4994] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0)
[  298.025560][ T4994] exFAT-fs (loop4): invalid boot region
[  298.035786][ T4994] exFAT-fs (loop4): failed to recognize exfat type
[  298.042606][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  298.056888][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  298.064732][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  298.074807][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  298.307921][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  298.315984][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  298.558220][ T4968] device veth1_macvtap entered promiscuous mode
[  298.581303][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  298.589529][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  298.606039][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  298.635958][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  298.644107][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  298.791303][ T1056] tipc: Left network mode
[  298.808045][ T5002] loop3: detected capacity change from 0 to 512
[  298.816007][ T5016] loop4: detected capacity change from 0 to 512
[  298.823924][ T5016] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1244: casefold flag without casefold feature
[  298.865729][ T5016] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.1244: missing EA_INODE flag
[  298.894850][ T5016] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1244: error while reading EA inode 2 err=-117
[  298.894926][ T5002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  298.916379][ T5002] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff)
[  298.935761][ T5016] EXT4-fs (loop4): 1 orphan inode deleted
[  298.941333][ T5016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  299.005283][ T4638] EXT4-fs (loop4): unmounting filesystem.
[  299.052333][ T5026] loop4: detected capacity change from 0 to 256
[  299.088035][ T5026] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  299.125593][   T19] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  299.231381][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.238343][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.245721][ T5028] device bridge_slave_0 entered promiscuous mode
[  299.252594][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.265748][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.310992][ T5028] device bridge_slave_1 entered promiscuous mode
[  299.666290][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.673145][ T5028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.680299][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.687157][ T5028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.735624][   T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  299.756209][   T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  299.767541][ T1056] device bridge_slave_1 left promiscuous mode
[  299.768352][   T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  299.777429][ T5037] loop1: detected capacity change from 0 to 40427
[  299.786831][   T19] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  299.792662][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.801522][   T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.810618][ T4968] EXT4-fs (loop3): unmounting filesystem.
[  299.822156][ T5037] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  299.828756][ T1056] device bridge_slave_0 left promiscuous mode
[  299.832937][   T19] usb 1-1: config 0 descriptor??
[  299.834697][ T5037] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  299.840322][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.855839][ T5019] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  299.865729][ T5037] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  299.920541][ T1056] device veth1_macvtap left promiscuous mode
[  299.929202][ T1056] device veth0_vlan left promiscuous mode
[  299.936016][ T5037] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  299.942935][ T5037] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  299.972500][ T5046] bio_check_eod: 6 callbacks suppressed
[  299.972515][ T5046] syz.1.1249: attempt to access beyond end of device
[  299.972515][ T5046] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  300.089694][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.095939][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  300.106348][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.119430][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  300.276681][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  300.301562][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  300.309641][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  300.336344][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  300.344722][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  300.359261][ T5028] device veth0_vlan entered promiscuous mode
[  300.374717][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  300.382694][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  300.411701][ T5028] device veth1_macvtap entered promiscuous mode
[  300.426795][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  300.434468][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  300.442030][ T4611] syz-executor: attempt to access beyond end of device
[  300.442030][ T4611] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  300.466563][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  300.471333][ T4611] syz-executor: attempt to access beyond end of device
[  300.471333][ T4611] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  300.474627][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  300.506424][   T19] plantronics 0003:047F:FFFF.0023: unknown main item tag 0xd
[  300.513814][   T19] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving
[  300.521970][ T5039] f2fs_ckpt-7:1: attempt to access beyond end of device
[  300.521970][ T5039] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  300.529119][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  300.545724][   T19] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  300.624580][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  300.643810][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  300.662045][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  300.683303][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  300.818147][   T39] usb 1-1: USB disconnect, device number 23
[  300.899777][ T5056] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.918021][ T5056] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.925461][ T5056] device bridge_slave_0 entered promiscuous mode
[  300.957028][ T5056] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.963940][ T5056] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.981633][ T5056] device bridge_slave_1 entered promiscuous mode
[  301.080633][   T28] audit: type=1400 audit(2000000013.180:653): avc:  denied  { shutdown } for  pid=5066 comm="syz.3.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  301.335291][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.342252][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.350016][ T5072] device bridge_slave_0 entered promiscuous mode
[  301.357059][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.363930][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.376904][ T5072] device bridge_slave_1 entered promiscuous mode
[  301.456174][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.463137][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.470281][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.477120][ T5072] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.511449][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  301.519096][  T315] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.527069][  T315] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.537036][ T1056] device bridge_slave_1 left promiscuous mode
[  301.543012][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.550504][ T1056] device bridge_slave_0 left promiscuous mode
[  301.556552][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.564424][ T1056] device veth1_macvtap left promiscuous mode
[  301.570688][ T1056] device veth0_vlan left promiscuous mode
[  301.726956][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  301.736444][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  301.743756][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  301.752508][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  301.760639][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  301.768715][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.775560][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.782723][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  301.790875][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  301.799090][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.805954][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.813138][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  301.821013][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  301.830336][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  301.838369][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.845202][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.852438][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  301.860541][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.867411][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.875236][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  301.883104][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  301.891076][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  301.905835][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  301.913601][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  301.920947][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  301.929615][ T5056] device veth0_vlan entered promiscuous mode
[  301.942257][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  301.952934][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  301.961681][ T5056] device veth1_macvtap entered promiscuous mode
[  301.973922][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  301.981839][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  301.989172][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  301.997829][ T5072] device veth0_vlan entered promiscuous mode
[  302.003936][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  302.017591][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  302.035341][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  302.045205][ T5072] device veth1_macvtap entered promiscuous mode
[  302.057936][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  302.071015][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  302.152768][ T5093] loop4: detected capacity change from 0 to 512
[  302.175584][ T5093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  302.187413][ T5093] EXT4-fs (loop4): 1 truncate cleaned up
[  302.192961][ T5093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  302.522250][ T5102] device batadv_slave_1 entered promiscuous mode
[  302.741277][ T5107] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  302.960566][ T5114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1277'.
[  303.092385][ T5092] device batadv_slave_1 left promiscuous mode
[  303.129970][  T315] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  303.146449][ T5056] EXT4-fs (loop4): unmounting filesystem.
[  303.216212][ T1056] device bridge_slave_1 left promiscuous mode
[  303.222415][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.240161][ T1056] device bridge_slave_0 left promiscuous mode
[  303.255594][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.267198][ T1056] device veth1_macvtap left promiscuous mode
[  303.273147][ T1056] device veth0_vlan left promiscuous mode
[  303.525792][  T315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.543563][  T315] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  303.563653][  T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.582987][  T315] usb 2-1: config 0 descriptor??
[  303.636131][  T315] usb 2-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  303.649559][  T315] usb 2-1: No valid video chain found.
[  303.948866][ T5126] loop0: detected capacity change from 0 to 16
[  303.960143][ T5126] erofs: (device loop0): mounted with root inode @ nid 36.
[  303.968094][ T5126] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  303.977565][ T5126] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  303.986975][ T5126] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  303.995907][ T5126] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  304.005295][ T5126] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  304.014685][ T5126] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  304.045807][ T5121] syz.4.1267 (5121) used greatest stack depth: 18784 bytes left
[  304.124751][   T28] audit: type=1400 audit(2000000016.240:654): avc:  denied  { accept } for  pid=5129 comm="syz.3.1269" path="socket:[42435]" dev="sockfs" ino=42435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  304.158897][ T5132] device sit0 entered promiscuous mode
[  304.175312][ T5132] netlink: 'syz.2.1270': attribute type 1 has an invalid length.
[  304.189860][   T28] audit: type=1400 audit(2000000016.280:655): avc:  denied  { map } for  pid=5131 comm="syz.2.1270" path="socket:[42437]" dev="sockfs" ino=42437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  304.221252][ T5132] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1270'.
[  304.226301][ T5100] loop1: detected capacity change from 0 to 40427
[  304.230887][   T28] audit: type=1400 audit(2000000016.280:656): avc:  denied  { read } for  pid=5131 comm="syz.2.1270" path="socket:[42437]" dev="sockfs" ino=42437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  304.261185][ T5100] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  304.268800][ T5100] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  304.280681][ T5100] F2FS-fs (loop1): invalid crc value
[  304.283874][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'.
[  304.287272][ T5100] F2FS-fs (loop1): Found nat_bits in checkpoint
[  304.332196][ T5100] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  304.339240][ T5100] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  304.465634][  T317] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  304.756173][ T5153] overlayfs: missing 'lowerdir'
[  304.770519][   T28] audit: type=1326 audit(2000000016.890:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5148 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39019779f9 code=0x7fc00000
[  304.772684][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'.
[  304.825874][ T4626] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[  305.095600][  T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.106701][  T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.116553][  T317] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  305.125754][  T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.138828][  T317] usb 4-1: config 0 descriptor??
[  305.185660][ T4626] usb 3-1: No LPM exit latency info found, disabling LPM.
[  305.201788][   T28] audit: type=1326 audit(2000000017.320:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5148 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39019779f9 code=0x7fc00000
[  305.227549][   T28] audit: type=1326 audit(2000000017.320:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5148 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39019779f9 code=0x7fc00000
[  305.602629][ T4626] usb 3-1: config 1 has an invalid interface number: 103 but max is 2
[  305.610954][ T4626] usb 3-1: config 1 has an invalid interface number: 175 but max is 2
[  305.619009][ T4626] usb 3-1: config 1 has an invalid interface number: 89 but max is 2
[  305.626878][ T4626] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  305.635490][ T4626] usb 3-1: config 1 has no interface number 0
[  305.641384][ T4626] usb 3-1: config 1 has no interface number 1
[  305.647322][ T4626] usb 3-1: config 1 has no interface number 2
[  305.653211][ T4626] usb 3-1: config 1 interface 103 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  305.663985][ T4626] usb 3-1: config 1 interface 103 altsetting 4 endpoint 0x3 has invalid maxpacket 8, setting to 0
[  305.674382][ T4626] usb 3-1: config 1 interface 103 altsetting 4 endpoint 0x7 has invalid maxpacket 32, setting to 8
[  305.685211][ T4626] usb 3-1: config 1 interface 103 altsetting 4 endpoint 0xE has invalid maxpacket 32, setting to 8
[  305.696034][ T4626] usb 3-1: config 1 interface 103 altsetting 4 endpoint 0x5 is Bulk; changing to Interrupt
[  305.705987][ T4626] usb 3-1: config 1 interface 103 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 8
[  305.716954][ T4626] usb 3-1: config 1 interface 103 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[  305.727530][ T4626] usb 3-1: config 1 interface 103 altsetting 4 endpoint 0xD has invalid maxpacket 439, setting to 8
[  305.738082][ T4626] usb 3-1: config 1 interface 175 altsetting 129 has a duplicate endpoint with address 0xD, skipping
[  305.748760][ T4626] usb 3-1: config 1 interface 175 altsetting 129 endpoint 0xC has invalid maxpacket 1024, setting to 8
[  305.759600][ T4626] usb 3-1: config 1 interface 175 altsetting 129 has a duplicate endpoint with address 0x5, skipping
[  305.770430][ T4626] usb 3-1: config 1 interface 89 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  305.795334][ T4626] usb 3-1: config 1 interface 89 altsetting 3 has an invalid endpoint with address 0x0, skipping
[  305.809906][ T4626] usb 3-1: config 1 interface 89 altsetting 3 has a duplicate endpoint with address 0xC, skipping
[  305.820819][ T4626] usb 3-1: config 1 interface 89 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 0
[  305.821585][   T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  305.831700][ T4626] usb 3-1: config 1 interface 89 altsetting 3 has an invalid endpoint with address 0x0, skipping
[  305.855973][ T4626] usb 3-1: config 1 interface 89 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  305.865941][ T4626] usb 3-1: config 1 interface 89 altsetting 3 endpoint 0x9 has invalid wMaxPacketSize 0
[  305.876063][   T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  305.891961][ T4626] usb 3-1: config 1 interface 89 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[  305.911194][ T4626] usb 3-1: config 1 interface 89 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[  305.915893][ T5172] input: syz1 as /devices/virtual/input/input30
[  305.922190][ T4626] usb 3-1: config 1 interface 89 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  305.940192][ T4626] usb 3-1: config 1 interface 89 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[  305.968204][ T4626] usb 3-1: config 1 interface 89 altsetting 3 has a duplicate endpoint with address 0xF, skipping
[  305.991724][ T4626] usb 3-1: config 1 interface 103 has no altsetting 0
[  306.006011][ T4626] usb 3-1: config 1 interface 175 has no altsetting 0
[  306.021066][ T4626] usb 3-1: config 1 interface 89 has no altsetting 0
[  306.035603][   T39] usb 2-1: USB disconnect, device number 24
[  306.165241][ T5172] loop3: detected capacity change from 0 to 1024
[  306.245853][ T4626] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=36.d4
[  306.254800][ T4626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.267967][ T4626] usb 3-1: Product: 䰊
[  306.272010][ T4626] usb 3-1: Manufacturer: Ў
[  306.285781][ T4626] usb 3-1: SerialNumber: 䵂᷏䠕볦ꬫ௜萺剼撬׭⒪형㓎锏䂪儏淂ԚჂ矻
[  306.309920][ T5178] xt_l2tp: invalid flags combination: 0
[  306.855636][ T5145] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  306.865771][ T5145] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  306.885831][ T5145] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  307.377458][ T4626] usb 3-1: USB disconnect, device number 22
[  307.387512][  T317] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0024/input/input31
[  307.400665][  T317] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0024/input/input32
[  307.413220][  T317] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0024/input/input33
[  307.426589][  T317] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0024/input/input34
[  307.443205][  T317] uclogic 0003:256C:006D.0024: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  307.659309][ T5135] loop3: detected capacity change from 0 to 32768
[  307.716067][ T5135]  loop3: p1 p3 < p5 p6 >
[  307.728568][ T4626] usb 4-1: USB disconnect, device number 23
[  307.808949][ T5192] loop1: detected capacity change from 0 to 4096
[  307.830901][ T5192] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  307.878318][ T5072] EXT4-fs (loop1): unmounting filesystem.
[  307.973722][ T5200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5200 comm=syz.0.1296
[  308.406717][   T19] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  308.795622][   T19] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  308.809955][   T19] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  308.821318][ T5219] loop3: detected capacity change from 0 to 512
[  308.827703][   T19] usb 5-1: config 0 has no interface number 1
[  308.834168][   T19] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  308.849235][ T5219] EXT4-fs (loop3): Test dummy encryption mode enabled
[  308.860012][   T19] usb 5-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  308.875290][ T5215] loop0: detected capacity change from 0 to 8192
[  308.884098][ T5215] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  308.887861][ T5219] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.1298: invalid block
[  308.896275][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.913817][ T5215] FAT-fs (loop0): Filesystem has been set read-only
[  308.920338][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.921380][ T5222] device pim6reg1 entered promiscuous mode
[  308.929008][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.943252][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.952163][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.960847][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.969396][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.978021][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.986586][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  308.986843][ T5219] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1298: couldn't read orphan inode 11 (err -117)
[  308.995160][ T5215] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  309.016563][ T5224] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  309.045139][ T5219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  309.105619][   T19] usb 5-1: New USB device found, idVendor=0f19, idProduct=0105, bcdDevice= 1.00
[  309.133854][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.142690][   T19] usb 5-1: Product: syz
[  309.149750][   T19] usb 5-1: Manufacturer: syz
[  309.156026][   T19] usb 5-1: SerialNumber: syz
[  309.168813][   T19] usb 5-1: config 0 descriptor??
[  309.225992][   T19] usb-storage 5-1:0.0: USB Mass Storage device detected
[  309.243261][   T19] usb-storage 5-1:0.0: Quirks match for vid 0f19 pid 0105: 20
[  309.890027][ T5238] loop0: detected capacity change from 0 to 256
[  309.977531][ T5238] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5b196f7a, utbl_chksum : 0xe619d30d)
[  310.035824][ T4968] EXT4-fs (loop3): unmounting filesystem.
[  310.197078][   T19] usb-storage 5-1:0.6: USB Mass Storage device detected
[  310.217097][   T19] usb-storage 5-1:0.6: Quirks match for vid 0f19 pid 0105: 20
[  310.253418][ T5244] loop3: detected capacity change from 0 to 256
[  310.288607][   T19] usb 5-1: USB disconnect, device number 28
[  310.296655][ T4626] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  310.304507][ T5244] FAT-fs (loop3): Directory bread(block 64) failed
[  310.316112][ T5247] loop0: detected capacity change from 0 to 1024
[  310.335343][ T5247] ext4: Unknown parameter 'dont_hash'
[  310.340710][ T5244] FAT-fs (loop3): Directory bread(block 65) failed
[  310.347468][ T5244] FAT-fs (loop3): Directory bread(block 66) failed
[  310.358399][ T5244] FAT-fs (loop3): Directory bread(block 67) failed
[  310.364838][ T5244] FAT-fs (loop3): Directory bread(block 68) failed
[  310.371419][ T5244] FAT-fs (loop3): Directory bread(block 69) failed
[  310.378029][ T5244] FAT-fs (loop3): Directory bread(block 70) failed
[  310.384434][ T5244] FAT-fs (loop3): Directory bread(block 71) failed
[  310.390902][ T5244] FAT-fs (loop3): Directory bread(block 72) failed
[  310.406828][ T5244] FAT-fs (loop3): Directory bread(block 73) failed
[  310.519243][ T5254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1308'.
[  310.585726][ T4626] usb 2-1: Using ep0 maxpacket: 16
[  310.612307][ T5259] netlink: 'syz.0.1305': attribute type 4 has an invalid length.
[  310.660733][ T5259] netlink: 'syz.0.1305': attribute type 4 has an invalid length.
[  310.869636][ T5264] loop4: detected capacity change from 0 to 1024
[  310.886794][ T5264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  310.897174][ T5264] EXT4-fs error (device loop4): ext4_lookup:1855: comm syz.4.1312: inode #12: comm syz.4.1312: iget: illegal inode #
[  310.909519][ T5264] EXT4-fs (loop4): Remounting filesystem read-only
[  310.920463][ T5056] EXT4-fs (loop4): unmounting filesystem.
[  310.937608][ T5268] loop4: detected capacity change from 0 to 512
[  310.948216][ T5268] EXT4-fs (loop4): 1 orphan inode deleted
[  310.953826][ T5268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  310.962558][ T5268] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff)
[  311.065586][ T4626] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  311.074501][ T4626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.082264][ T4626] usb 2-1: Product: syz
[  311.086291][ T4626] usb 2-1: Manufacturer: syz
[  311.090719][ T4626] usb 2-1: SerialNumber: syz
[  311.098474][ T4626] r8152-cfgselector 2-1: config 0 descriptor??
[  311.436197][ T5276] loop0: detected capacity change from 0 to 512
[  311.450814][ T5276] EXT4-fs (loop0): Test dummy encryption mode enabled
[  311.458555][ T5276] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1314: inline data xattr refers to an external xattr inode
[  311.473659][ T5276] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1314: couldn't read orphan inode 12 (err -117)
[  311.486170][ T5276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  311.615615][ T4626] r8152-cfgselector 2-1: Unknown version 0x0000
[  311.621842][ T4626] r8152-cfgselector 2-1: bad CDC descriptors
[  311.638296][ T5279] loop2: detected capacity change from 0 to 128
[  311.648755][ T4626] r8152-cfgselector 2-1: Unknown version 0x0000
[  311.665458][ T4626] r8152-cfgselector 2-1: USB disconnect, device number 25
[  311.673665][ T5279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  311.682139][ T5279] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  312.013113][ T5284] device wireguard0 entered promiscuous mode
[  312.050660][ T5056] EXT4-fs (loop4): unmounting filesystem.
[  312.153930][ T5028] EXT4-fs (loop2): unmounting filesystem.
[  312.260805][   T28] audit: type=1400 audit(2000000024.380:660): avc:  denied  { module_load } for  pid=5292 comm="syz.2.1317" path="/sys/power/wakeup_count" dev="sysfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  312.708825][ T5307] loop1: detected capacity change from 0 to 256
[  314.365911][   T28] audit: type=1326 audit(2000000025.670:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.1321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09a53779f9 code=0x0
[  314.439650][ T5314] loop1: detected capacity change from 0 to 512
[  314.499517][ T5314] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  314.552529][ T4737] EXT4-fs (loop0): unmounting filesystem.
[  314.571554][ T5314] EXT4-fs (loop1): 1 truncate cleaned up
[  314.618218][ T5314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  314.848011][ T5330] device batadv_slave_1 entered promiscuous mode
[  315.129241][ T5319] loop3: detected capacity change from 0 to 40427
[  315.138486][ T5319] F2FS-fs (loop3): invalid crc value
[  315.147708][ T5319] F2FS-fs (loop3): Found nat_bits in checkpoint
[  315.191316][ T5319] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  315.219102][ T5319] syz.3.1324: attempt to access beyond end of device
[  315.219102][ T5319] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  315.240693][ T4968] syz-executor: attempt to access beyond end of device
[  315.240693][ T4968] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  315.284360][ T5313] device batadv_slave_1 left promiscuous mode
[  315.308572][ T5340] loop4: detected capacity change from 0 to 256
[  315.323422][ T5072] EXT4-fs (loop1): unmounting filesystem.
[  315.342057][ T5340] FAT-fs (loop4): Directory bread(block 64) failed
[  315.350925][ T5340] FAT-fs (loop4): Directory bread(block 65) failed
[  315.358094][ T5340] FAT-fs (loop4): Directory bread(block 66) failed
[  315.364496][ T5340] FAT-fs (loop4): Directory bread(block 67) failed
[  315.371329][ T5340] FAT-fs (loop4): Directory bread(block 68) failed
[  315.378117][ T5340] FAT-fs (loop4): Directory bread(block 69) failed
[  315.384791][ T5340] FAT-fs (loop4): Directory bread(block 70) failed
[  315.391184][ T5340] FAT-fs (loop4): Directory bread(block 71) failed
[  315.397675][ T5340] FAT-fs (loop4): Directory bread(block 72) failed
[  315.404329][ T5340] FAT-fs (loop4): Directory bread(block 73) failed
[  315.556638][ T5346] device wireguard0 entered promiscuous mode
[  315.899226][ T5353] loop3: detected capacity change from 0 to 256
[  315.913868][ T5353] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  318.614448][ T5367] support for the xor transformation has been removed.
[  318.824372][ T5369] loop4: detected capacity change from 0 to 256
[  319.314586][ T5374] loop2: detected capacity change from 0 to 256
[  320.389482][   T28] audit: type=1326 audit(2000000004.190:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.2.1334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd96d1779f9 code=0x0
[  320.742120][ T5391] loop1: detected capacity change from 0 to 512
[  320.752933][ T5391] ext4: Unknown parameter 'euid>00000000000000000000'
[  320.829556][   T28] audit: type=1400 audit(2000000004.690:663): avc:  denied  { getopt } for  pid=5398 comm="syz.0.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  320.856627][   T43] device bridge_slave_1 left promiscuous mode
[  320.862705][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.894621][   T43] device bridge_slave_0 left promiscuous mode
[  320.904320][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.916654][   T43] device veth1_macvtap left promiscuous mode
[  320.928379][   T43] device veth0_vlan left promiscuous mode
[  320.955194][ T5404] loop0: detected capacity change from 0 to 256
[  320.999997][ T5404] FAT-fs (loop0): Directory bread(block 64) failed
[  321.063803][ T5405] xt_l2tp: invalid flags combination: 0
[  321.081069][ T5404] FAT-fs (loop0): Directory bread(block 65) failed
[  321.877414][ T5404] FAT-fs (loop0): Directory bread(block 66) failed
[  321.885588][ T5404] FAT-fs (loop0): Directory bread(block 67) failed
[  321.891961][ T5404] FAT-fs (loop0): Directory bread(block 68) failed
[  321.910350][ T5404] FAT-fs (loop0): Directory bread(block 69) failed
[  321.917013][ T5404] FAT-fs (loop0): Directory bread(block 70) failed
[  321.923468][ T5404] FAT-fs (loop0): Directory bread(block 71) failed
[  321.945369][ T5404] FAT-fs (loop0): Directory bread(block 72) failed
[  321.951834][ T5404] FAT-fs (loop0): Directory bread(block 73) failed
[  321.984707][ T5378] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.991802][ T5378] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.006967][ T5378] device bridge_slave_0 entered promiscuous mode
[  322.014015][ T5378] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.025346][ T5378] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.032923][ T5378] device bridge_slave_1 entered promiscuous mode
[  323.083516][ T4626] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  323.090984][  T650] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  323.117462][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  323.125079][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  323.145917][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  323.154108][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  323.163248][  T341] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.170112][  T341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.177625][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  323.187717][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  323.195948][  T341] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.202820][  T341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.306587][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  323.314505][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  323.322777][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  323.330881][  T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  323.355616][  T650] usb 2-1: Using ep0 maxpacket: 16
[  323.562653][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  323.579813][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  323.588594][ T4626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.627851][ T4626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.702490][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  323.710523][ T4626] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  323.723786][ T4626] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  323.726416][  T572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  323.740390][ T4626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.740621][  T572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  323.752848][ T4626] usb 5-1: config 0 descriptor??
[  323.757285][ T5378] device veth0_vlan entered promiscuous mode
[  323.767005][  T572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  324.029845][  T572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  324.048397][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  324.056470][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  324.074160][  T650] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c
[  324.106173][  T650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.111454][ T5378] device veth1_macvtap entered promiscuous mode
[  324.119515][  T650] usb 2-1: Product: syz
[  324.124093][  T650] usb 2-1: Manufacturer: syz
[  324.126936][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  324.128780][  T650] usb 2-1: SerialNumber: syz
[  324.136719][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  324.143835][  T650] usb 2-1: config 0 descriptor??
[  324.149736][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  324.168213][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  324.176526][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  324.186926][  T650] pl2303 2-1:0.0: required endpoints missing
[  324.254347][ T4626] acrux 0003:1A34:0802.0025: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0
[  324.265463][ T4626] acrux 0003:1A34:0802.0025: no inputs found
[  324.271608][ T4626] acrux 0003:1A34:0802.0025: Failed to enable force feedback support, error: -19
[  324.621027][  T315] usb 2-1: USB disconnect, device number 26
[  324.636661][ T5439] loop0: detected capacity change from 0 to 256
[  324.738074][  T572] usb 5-1: USB disconnect, device number 29
[  324.865713][   T28] audit: type=1326 audit(2000000002.130:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.1351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f1f9779f9 code=0x0
[  325.139733][ T5449] loop3: detected capacity change from 0 to 512
[  325.156485][ T5449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  325.171203][ T5449] EXT4-fs (loop3): 1 truncate cleaned up
[  325.176869][ T5449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  325.594963][ T5455] device batadv_slave_1 entered promiscuous mode
[  325.737925][ T5459] loop0: detected capacity change from 0 to 512
[  325.777363][ T5459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  325.796862][ T5459] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff)
[  325.841569][ T5459] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #2: comm syz.0.1356: corrupted inode contents
[  325.863642][ T5459] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #2: comm syz.0.1356: mark_inode_dirty error
[  325.895566][ T5459] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #2: comm syz.0.1356: corrupted inode contents
[  325.907404][ T5459] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1356: mark_inode_dirty error
[  325.951058][ T4737] EXT4-fs (loop0): unmounting filesystem.
[  325.982131][ T5448] device batadv_slave_1 left promiscuous mode
[  326.026081][ T5378] EXT4-fs (loop3): unmounting filesystem.
[  326.035610][  T572] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  326.081445][ T5469] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  326.089956][ T5469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4154471757 (8308943514 ns) > initial count (334709606 ns). Using initial count to start timer.
[  326.215547][ T4626] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  326.255845][ T5453] loop1: detected capacity change from 0 to 131072
[  326.264932][ T5453] F2FS-fs (loop1): Found nat_bits in checkpoint
[  326.285560][  T572] usb 5-1: Using ep0 maxpacket: 32
[  326.294391][ T5488] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1366'.
[  326.304822][ T5488] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  326.323788][ T5453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  326.399787][ T5492] loop3: detected capacity change from 0 to 256
[  326.411526][ T5492] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  326.445651][  T572] usb 5-1: unable to get BOS descriptor or descriptor too short
[  326.475579][  T314] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  326.525573][  T572] usb 5-1: config 0 has no interfaces?
[  326.616795][   T28] audit: type=1326 audit(2000000003.900:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.3.1370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f297779f9 code=0x0
[  326.935764][  T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.946806][  T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.957024][  T314] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  326.966084][  T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.974601][  T314] usb 1-1: config 0 descriptor??
[  326.985590][  T572] usb 5-1: language id specifier not provided by device, defaulting to English
[  327.105608][  T572] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  327.114486][  T572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.122364][  T572] usb 5-1: Product: syz
[  327.126367][  T572] usb 5-1: Manufacturer: syz
[  327.130702][  T572] usb 5-1: SerialNumber: syz
[  327.135773][  T572] usb 5-1: config 0 descriptor??
[  327.378326][  T315] usb 5-1: USB disconnect, device number 30
[  327.470246][  T314] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0026/input/input35
[  327.483728][ T5510] syz.3.1372[5510] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  327.483811][ T5510] syz.3.1372[5510] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  327.493256][  T314] sony 0003:054C:03D5.0026: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  327.795667][   T28] audit: type=1400 audit(2000000005.040:666): avc:  denied  { mount } for  pid=5508 comm="syz.3.1372" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  327.919300][  T314] usb 1-1: USB disconnect, device number 24
[  328.521401][ T5522] xt_l2tp: invalid flags combination: 0
[  329.009131][   T28] audit: type=1400 audit(2000000006.290:667): avc:  denied  { unmount } for  pid=5378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  329.074888][ T5528] loop3: detected capacity change from 0 to 256
[  329.081453][ T5528] FAT-fs (loop3): Unrecognized mount option "sh�Q�5G�~Jortname=winnt" or missing value
[  329.100589][ T5528] loop3: detected capacity change from 0 to 256
[  329.106899][ T5528] exfat: Unknown parameter ''
[  329.114618][ T5528] loop3: detected capacity change from 0 to 512
[  329.122938][ T5528] EXT4-fs (loop3): 1 truncate cleaned up
[  329.128487][ T5528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  329.302414][ T5534] syz.3.1377[5534] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  329.302758][ T5534] syz.3.1377[5534] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  329.345645][  T314] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  329.595555][  T454] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  329.715607][  T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  329.725190][  T314] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  329.885829][  T314] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  329.894732][  T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.902529][  T314] usb 5-1: Product: syz
[  329.906581][  T314] usb 5-1: Manufacturer: syz
[  329.910903][  T314] usb 5-1: SerialNumber: syz
[  329.916188][  T314] usb 5-1: config 0 descriptor??
[  330.065603][  T454] usb 4-1: config 13 has an invalid interface number: 180 but max is 0
[  330.073670][  T454] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  330.083946][  T454] usb 4-1: config 13 has no interface number 0
[  330.090069][  T454] usb 4-1: config 13 interface 180 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  330.103067][  T454] usb 4-1: config 13 interface 180 has no altsetting 0
[  330.178439][  T314] snd-usb-audio: probe of 5-1:0.0 failed with error -12
[  330.186046][  T314] usb 5-1: USB disconnect, device number 31
[  330.194774][ T2107] udevd[2107]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  331.139359][ T5537] loop1: detected capacity change from 0 to 256
[  331.161487][ T5537] FAT-fs (loop1): Directory bread(block 64) failed
[  331.168554][ T5537] FAT-fs (loop1): Directory bread(block 65) failed
[  331.175075][ T5537] FAT-fs (loop1): Directory bread(block 66) failed
[  331.181749][ T5537] FAT-fs (loop1): Directory bread(block 67) failed
[  331.188608][ T5537] FAT-fs (loop1): Directory bread(block 68) failed
[  331.194988][ T5537] FAT-fs (loop1): Directory bread(block 69) failed
[  331.201686][ T5537] FAT-fs (loop1): Directory bread(block 70) failed
[  331.208232][ T5537] FAT-fs (loop1): Directory bread(block 71) failed
[  331.214954][ T5537] FAT-fs (loop1): Directory bread(block 72) failed
[  331.238838][ T5537] FAT-fs (loop1): Directory bread(block 73) failed
[  332.850230][ T5554] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  332.864853][ T5557] loop4: detected capacity change from 0 to 512
[  332.871448][ T5557] EXT4-fs (loop4): unable to read superblock
[  332.882456][ T5559] loop1: detected capacity change from 0 to 256
[  332.906352][ T1416] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  332.910269][ T5557] loop4: detected capacity change from 0 to 512
[  332.916010][ T1416] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  332.932272][ T2107] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  332.938360][ T1416] Buffer I/O error on dev loop4, logical block 0, async page read
[  332.946627][ T5559] loop1: detected capacity change from 0 to 256
[  332.952058][ T2107] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  332.959716][   T28] audit: type=1400 audit(2000000001.040:668): avc:  denied  { create } for  pid=5560 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  332.964535][ T2107] Buffer I/O error on dev loop1, logical block 0, async page read
[  332.991611][ T2107] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  333.001209][ T2107] Buffer I/O error on dev loop1, logical block 0, async page read
[  333.010826][ T5559] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0)
[  333.021941][ T5559] exFAT-fs (loop1): invalid boot region
[  333.027632][ T5559] exFAT-fs (loop1): failed to recognize exfat type
[  333.028612][ T5557] EXT4-fs error (device loop4): ext4_quota_enable:6955: comm syz.4.1381: inode #16777216: comm syz.4.1381: iget: illegal inode #
[  333.060086][ T5557] EXT4-fs error (device loop4): ext4_quota_enable:6958: comm syz.4.1381: Bad quota inode: 16777216, type: 2
[  333.072087][ T5557] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix.
[  333.088121][ T5557] EXT4-fs (loop4): mount failed
[  333.373483][   T28] audit: type=1400 audit(2000000001.460:669): avc:  denied  { read } for  pid=5560 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  333.401383][ T5574] loop4: detected capacity change from 0 to 256
[  333.465900][ T1416] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  333.806026][ T5378] EXT4-fs (loop3): unmounting filesystem.
[  333.895076][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'.
[  333.975695][  T454] usb 4-1: New USB device found, idVendor=1410, idProduct=6002, bcdDevice=3f.2e
[  334.041177][ T5586] xt_l2tp: invalid flags combination: 0
[  334.957212][  T454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.055854][  T454] usb 4-1: can't set config #13, error -71
[  335.078111][ T5600] loop1: detected capacity change from 0 to 512
[  335.086950][  T454] usb 4-1: USB disconnect, device number 24
[  335.094081][ T5601] input: syz0 as /devices/virtual/input/input36
[  335.328100][ T5600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  335.420962][ T5600] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff)
[  335.978279][ T5072] EXT4-fs (loop1): unmounting filesystem.
[  336.035055][ T5619] loop3: detected capacity change from 0 to 256
[  336.083069][ T5619] FAT-fs (loop3): Directory bread(block 64) failed
[  336.109555][ T5619] FAT-fs (loop3): Directory bread(block 65) failed
[  336.130758][ T5619] FAT-fs (loop3): Directory bread(block 66) failed
[  336.141422][ T5619] FAT-fs (loop3): Directory bread(block 67) failed
[  336.163151][ T5619] FAT-fs (loop3): Directory bread(block 68) failed
[  336.170945][ T5619] FAT-fs (loop3): Directory bread(block 69) failed
[  336.178612][ T5619] FAT-fs (loop3): Directory bread(block 70) failed
[  336.185005][ T5619] FAT-fs (loop3): Directory bread(block 71) failed
[  336.205335][ T5619] FAT-fs (loop3): Directory bread(block 72) failed
[  336.285592][ T5619] FAT-fs (loop3): Directory bread(block 73) failed
[  336.324005][   T28] audit: type=1400 audit(2000000004.410:670): avc:  denied  { watch watch_reads } for  pid=5620 comm="syz.0.1403" path="/57/file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  337.786165][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.808400][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.834384][ T5631] device bridge_slave_0 entered promiscuous mode
[  337.956131][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.986465][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.004118][ T5648] loop3: detected capacity change from 0 to 512
[  338.011343][ T5631] device bridge_slave_1 entered promiscuous mode
[  338.075546][  T314] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  338.083718][ T5648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  338.102779][ T5648] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff)
[  338.242859][ T5656] syz.0.1410[5656] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  338.242938][ T5656] syz.0.1410[5656] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  338.299079][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.317070][ T5631] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.324167][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.330971][ T5631] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.475760][  T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.530305][  T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.543475][  T314] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  338.565702][  T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.577147][  T297] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.584611][  T297] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.591914][  T314] usb 5-1: config 0 descriptor??
[  338.606604][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  338.613907][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  338.647531][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  338.655912][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.662754][  T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.670228][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  338.678861][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.685722][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.693164][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  338.706108][  T466] device bridge_slave_1 left promiscuous mode
[  338.712041][  T466] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.720706][  T466] device bridge_slave_0 left promiscuous mode
[  338.726743][  T466] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.734834][  T466] device veth1_macvtap left promiscuous mode
[  338.740740][  T466] device veth0_vlan left promiscuous mode
[  338.746305][  T454] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  338.860946][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  338.870303][ T5378] EXT4-fs (loop3): unmounting filesystem.
[  338.883493][ T5631] device veth0_vlan entered promiscuous mode
[  338.901892][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  338.910471][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  338.926745][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  338.962033][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  338.977745][ T5631] device veth1_macvtap entered promiscuous mode
[  338.990371][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  338.997884][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  339.069207][  T454] usb 2-1: Using ep0 maxpacket: 16
[  339.205638][  T454] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.269429][  T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  339.319765][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  339.327896][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  339.335934][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  339.361378][  T454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  339.363169][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  339.385810][   T28] audit: type=1400 audit(2000000002.290:671): avc:  denied  { accept } for  pid=5669 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  339.412741][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  339.429600][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  339.435568][  T454] usb 2-1: string descriptor 0 read error: -71
[  339.438217][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  339.451433][  T454] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  339.463203][  T454] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  339.479635][  T454] usb 2-1: config 0 descriptor??
[  339.511945][ T5674] kvm: pic: non byte write
[  339.515641][  T454] usb 2-1: can't set config #0, error -71
[  339.526371][  T454] usb 2-1: USB disconnect, device number 27
[  339.552761][ T5681] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  339.952703][ T5694] tipc: Failed to remove unknown binding: 66,1,1/0:2290405162/2290405164
[  339.970429][ T5694] tipc: Failed to remove unknown binding: 66,1,1/0:2290405162/2290405164
[  340.129249][ T5666] loop3: detected capacity change from 0 to 131072
[  340.152751][ T5666] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name
[  340.197622][ T5666] F2FS-fs (loop3): invalid crc value
[  340.224793][ T5701] loop2: detected capacity change from 0 to 256
[  340.232531][ T5701] exfat: Bad value for 'uid'
[  340.246899][ T5666] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  340.390818][ T1416] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  340.485716][ T5666] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[  340.521897][ T5707] loop0: detected capacity change from 0 to 512
[  340.537491][ T5707] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  340.549016][ T5707] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  340.625915][ T5707] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  340.635082][ T5707] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  340.643494][ T5707] System zones: 0-2, 18-18, 34-34
[  340.650119][ T5707] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  340.665013][ T5707] EXT4-fs (loop0): 1 truncate cleaned up
[  340.670680][ T5707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  340.724423][ T5707] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz.0.1422: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[  340.794286][ T5712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1424'.
[  340.988418][ T5707] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem
[  340.997409][ T5707] EXT4-fs warning (device loop0): ext4_rename_delete:3735: inode #2: comm syz.0.1422: Deleting old file: nlink 4, error=-117
[  341.045655][  T314] usbhid 5-1:0.0: can't add hid device: -71
[  341.051530][  T314] usbhid: probe of 5-1:0.0 failed with error -71
[  341.064661][ T4737] EXT4-fs (loop0): unmounting filesystem.
[  341.073452][  T314] usb 5-1: USB disconnect, device number 32
[  341.491443][ T5747] loop2: detected capacity change from 0 to 256
[  341.535724][ T5745] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 925 (only 8 groups)
[  341.581618][ T5736] loop3: detected capacity change from 0 to 40427
[  341.609770][ T5736] F2FS-fs (loop3): invalid crc value
[  341.616324][ T5736] F2FS-fs (loop3): Found nat_bits in checkpoint
[  341.656460][ T5736] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  341.778831][ T5736] syz.3.1430: attempt to access beyond end of device
[  341.778831][ T5736] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  341.816554][ T5378] syz-executor: attempt to access beyond end of device
[  341.816554][ T5378] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  341.975028][ T5765] loop2: detected capacity change from 0 to 256
[  342.043724][   T28] audit: type=1400 audit(2000000004.920:672): avc:  denied  { create } for  pid=5756 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=socket permissive=1
[  342.050025][ T5763] loop0: detected capacity change from 0 to 512
[  342.210454][   T28] audit: type=1400 audit(2000000004.940:673): avc:  denied  { create } for  pid=5756 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  342.243144][   T28] audit: type=1400 audit(2000000004.940:674): avc:  denied  { setopt } for  pid=5756 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  342.283317][   T28] audit: type=1400 audit(2000000004.940:675): avc:  denied  { create } for  pid=5756 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  342.309183][ T5763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  342.311091][   T28] audit: type=1400 audit(2000000005.020:676): avc:  denied  { bind } for  pid=5756 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  342.318510][ T5763] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff)
[  342.342682][ T5772] loop3: detected capacity change from 0 to 512
[  342.359962][   T28] audit: type=1400 audit(2000000005.040:677): avc:  denied  { listen } for  pid=5756 comm="syz.1.1447" path=2F33322FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  342.379974][ T5763] overlayfs: missing 'workdir'
[  342.394264][ T5771] Invalid ELF header type: 0 != 1
[  342.401191][   T28] audit: type=1400 audit(2000000005.290:678): avc:  denied  { module_load } for  pid=5769 comm="syz.4.1441" path=2F6D656D66643A10372F33202864656C6574656429 dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  342.438131][ T5772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  342.447247][ T5772] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff)
[  343.966119][ T4737] EXT4-fs (loop0): unmounting filesystem.
[  343.968365][ T5378] EXT4-fs (loop3): unmounting filesystem.
[  343.988354][ T5787] loop1: detected capacity change from 0 to 256
[  343.999606][ T5787] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  344.025590][  T297] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  344.874202][ T5799] loop0: detected capacity change from 0 to 16
[  344.885849][ T5799] erofs: (device loop0): mounted with root inode @ nid 36.
[  344.907158][ T5799] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=46
[  344.961998][ T5807] loop3: detected capacity change from 0 to 2048
[  344.992735][ T5807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  345.025707][  T297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.050483][  T297] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  345.068692][  T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.111226][  T297] usb 5-1: config 0 descriptor??
[  345.141294][ T5378] EXT4-fs (loop3): unmounting filesystem.
[  345.156234][  T297] usb 5-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  345.172067][  T297] usb 5-1: No valid video chain found.
[  345.269184][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.277510][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.284835][ T5827] device bridge_slave_0 entered promiscuous mode
[  345.291923][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.298912][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.306348][ T5827] device bridge_slave_1 entered promiscuous mode
[  345.306498][  T297] usb 5-1: USB disconnect, device number 33
[  345.340724][   T28] audit: type=1400 audit(2000000008.240:679): avc:  denied  { create } for  pid=5819 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  345.375758][   T28] audit: type=1400 audit(2000000008.260:680): avc:  denied  { sys_admin } for  pid=5819 comm="syz.0.1457" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  345.407192][ T5836] loop2: detected capacity change from 0 to 256
[  345.440231][ T5836] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  345.506337][ T5838] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  345.517892][ T5838] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  345.526137][ T5838] CPU: 0 PID: 5838 Comm: syz.3.1461 Tainted: G        W          6.1.90-syzkaller-00129-g37391192a93a #0
[  345.537155][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  345.547055][ T5838] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0
[  345.553128][ T5838] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 6c 02 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 1f 25 00 48 89 5c 24 18 4c 8b
[  345.572574][ T5838] RSP: 0018:ffffc9000293f6a0 EFLAGS: 00010246
[  345.578470][ T5838] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000
[  345.586279][ T5838] RDX: ffffc90001089000 RSI: 00000000000000b3 RDI: 00000000000000b4
[  345.594091][ T5838] RBP: ffffc9000293f7f8 R08: 0000000000000005 R09: ffffffff8412c4d3
[  345.601904][ T5838] R10: 0000000000000004 R11: ffff88811509d100 R12: dffffc0000000000
[  345.609715][ T5838] R13: ffff8881133b8500 R14: 1ffff92000527ee0 R15: 0000000000000000
[  345.617522][ T5838] FS:  00007f6f2a5446c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  345.626288][ T5838] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  345.632713][ T5838] CR2: 0000000020002000 CR3: 000000010b96b000 CR4: 00000000003506b0
[  345.640531][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  345.648337][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  345.656149][ T5838] Call Trace:
[  345.659289][ T5838]  <TASK>
[  345.662053][ T5838]  ? __die_body+0x62/0xb0
[  345.666216][ T5838]  ? die_addr+0x9f/0xd0
[  345.670211][ T5838]  ? exc_general_protection+0x317/0x4c0
[  345.675599][ T5838]  ? asm_exc_general_protection+0x27/0x30
[  345.681231][ T5838]  ? xdp_do_generic_redirect+0x303/0xad0
[  345.686700][ T5838]  ? dev_map_generic_redirect+0x90/0x7d0
[  345.692167][ T5838]  ? kasan_quarantine_put+0x34/0x1a0
[  345.697285][ T5838]  ? kfree+0x7a/0xf0
[  345.701021][ T5838]  ? bq_enqueue+0x3e0/0x3e0
[  345.705361][ T5838]  ? bpf_prog_run_generic_xdp+0xa35/0x1200
[  345.711009][ T5838]  xdp_do_generic_redirect+0x411/0xad0
[  345.716300][ T5838]  do_xdp_generic+0x53e/0x800
[  345.720816][ T5838]  ? generic_xdp_tx+0x560/0x560
[  345.725591][ T5838]  ? tun_get_user+0x2340/0x3a90
[  345.730272][ T5838]  tun_get_user+0x238a/0x3a90
[  345.734790][ T5838]  ? release_firmware_map_entry+0x191/0x191
[  345.740513][ T5838]  ? futex_q_unlock+0x30/0x30
[  345.745028][ T5838]  ? tun_do_read+0x2000/0x2000
[  345.749628][ T5838]  ? ref_tracker_alloc+0x31d/0x450
[  345.754573][ T5838]  ? ref_tracker_dir_print+0x160/0x160
[  345.759874][ T5838]  ? futex_wait_setup+0x330/0x330
[  345.764815][ T5838]  ? avc_policy_seqno+0x1b/0x70
[  345.769502][ T5838]  ? tun_get+0xe9/0x120
[  345.773493][ T5838]  tun_chr_write_iter+0x129/0x210
[  345.778353][ T5838]  vfs_write+0x902/0xeb0
[  345.782439][ T5838]  ? file_end_write+0x1c0/0x1c0
[  345.787117][ T5838]  ? do_futex+0x55a/0x9a0
[  345.791286][ T5838]  ? __fget_files+0x2cb/0x330
[  345.795800][ T5838]  ? __fdget_pos+0x204/0x390
[  345.800226][ T5838]  ? ksys_write+0x77/0x2c0
[  345.804480][ T5838]  ksys_write+0x199/0x2c0
[  345.808643][ T5838]  ? save_fpregs_to_fpstate+0x220/0x220
[  345.814024][ T5838]  ? __ia32_sys_read+0x90/0x90
[  345.818624][ T5838]  ? fpregs_restore_userregs+0x130/0x290
[  345.824174][ T5838]  __x64_sys_write+0x7b/0x90
[  345.828524][ T5838]  x64_sys_call+0x2f/0x9a0
[  345.832778][ T5838]  do_syscall_64+0x3b/0xb0
[  345.837024][ T5838]  ? clear_bhb_loop+0x55/0xb0
[  345.841542][ T5838]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  345.847266][ T5838] RIP: 0033:0x7f6f297764df
[  345.851521][ T5838] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48
[  345.870958][ T5838] RSP: 002b:00007f6f2a544010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  345.879201][ T5838] RAX: ffffffffffffffda RBX: 00007f6f29905f80 RCX: 00007f6f297764df
[  345.887015][ T5838] RDX: 0000000000000d86 RSI: 0000000020001580 RDI: 00000000000000c8
[  345.894820][ T5838] RBP: 00007f6f297e58ee R08: 0000000000000000 R09: 0000000000000000
[  345.902644][ T5838] R10: 0000000000000d86 R11: 0000000000000293 R12: 0000000000000000
[  345.910444][ T5838] R13: 000000000000000b R14: 00007f6f29905f80 R15: 00007ffc6e8d43e8
[  345.918266][ T5838]  </TASK>
[  345.921121][ T5838] Modules linked in:
[  345.924937][ T5838] ---[ end trace 0000000000000000 ]---
[  345.930237][ T5838] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0
[  345.936428][ T5838] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 6c 02 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 1f 25 00 48 89 5c 24 18 4c 8b
[  345.955939][ T5838] RSP: 0018:ffffc9000293f6a0 EFLAGS: 00010246
[  345.961808][ T5838] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000
[  345.969670][ T5838] RDX: ffffc90001089000 RSI: 00000000000000b3 RDI: 00000000000000b4
[  345.977455][ T5838] RBP: ffffc9000293f7f8 R08: 0000000000000005 R09: ffffffff8412c4d3
[  345.985241][ T5838] R10: 0000000000000004 R11: ffff88811509d100 R12: dffffc0000000000
[  345.993103][ T5838] R13: ffff8881133b8500 R14: 1ffff92000527ee0 R15: 0000000000000000
[  346.000920][ T5838] FS:  00007f6f2a5446c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  346.009706][ T5838] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  346.016213][ T5838] CR2: 0000000020002000 CR3: 000000010b96b000 CR4: 00000000003506b0
[  346.023986][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  346.031815][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  346.039634][ T5838] Kernel panic - not syncing: Fatal exception in interrupt
[  346.046950][ T5838] Kernel Offset: disabled
[  346.051091][ T5838] Rebooting in 86400 seconds..