last executing test programs:

7.187966807s ago: executing program 0 (id=445):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
r1 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)

6.953976104s ago: executing program 0 (id=446):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x90)
syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x2e6}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000001600)='./file0\x00', 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
splice(r3, 0x0, r2, 0x0, 0x406f408, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101}, 0x20}}, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x8}}, 0x30)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

6.950309594s ago: executing program 4 (id=448):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3814744, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@acl}, {@test_dummy_encryption}, {@resgid}, {@jqfmt_vfsv0}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x46f, &(0x7f0000000b00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40081, 0x0)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r2}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
signalfd(r6, 0x0, 0x0) (async)
signalfd(r6, 0x0, 0x0)
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x7fffffff}, 0x6e) (async)
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x7fffffff}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000143, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)

6.4708376s ago: executing program 4 (id=449):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

6.451045221s ago: executing program 2 (id=450):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000030c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="6558d0f7f05536d6f86e7cfcff125a210ce572b241f6a72b72febd25638eaea49389e16de79ca1ce33aef6d8dace9d9b28b49f18a8404bfb9c8dfd13272ca517a1ce056626af79e6286e9ea9e5deda21bb6d33baf095db881ff9e9aae8a05de30122"], 0x1220}, 0x1, 0x0, 0x0, 0x24040000}, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5)
ptrace$pokeuser(0x6, r7, 0x80000001, 0x4)
socket$inet(0x2, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00')
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000020c0)=""/4094)

6.19298377s ago: executing program 1 (id=451):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaad827c2000000080045000070"], 0x0)

6.074180799s ago: executing program 1 (id=452):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x633, 0x3f00, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(0xffffffffffffffff, 0xc17a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001900150000007a21f876e4eb1d69cb78740910ffa05d51e619884b96ee000000000000000000dc1e728539af33a9fdc0831603f8e84b"], 0x1c}], 0x1}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140))
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x0, r8})

6.048361321s ago: executing program 0 (id=453):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

5.93224863s ago: executing program 3 (id=454):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000800001e04000280180001801400020073797a5f74756e00"], 0x30}}, 0x0)

5.93167599s ago: executing program 3 (id=455):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
r2 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0})
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)

3.979376954s ago: executing program 2 (id=456):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
r1 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)

3.966892535s ago: executing program 0 (id=457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x90)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r6, &(0x7f0000001600)='./file0\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10)
splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101}, 0x20}}, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x8}}, 0x30)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

3.965236275s ago: executing program 1 (id=458):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x40c2, &(0x7f0000000840)={[], [{@obj_user={'obj_user', 0x3d, 'team_slave_0\x00'}}, {@subj_role={'subj_role', 0x3d, 'GPL\x00'}}, {@obj_user={'obj_user', 0x3d, 'kmem_cache_free\x00'}}, {@measure}, {@flag='dirsync'}, {@fowner_lt}, {@pcr={'pcr', 0x3d, 0x2c}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x751, &(0x7f0000002880)="$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")
signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r7, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)

3.732720443s ago: executing program 2 (id=459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x9, 0x1}, 0x48)
syz_mount_image$msdos(&(0x7f00000004c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000a00)={[{@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@nodots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@gid}, {@fat=@nfs}, {@dots}, {@fat=@tz_utc}, {@dots}, {@fat=@discard}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
userfaultfd(0x801)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket(0x1e, 0x2, 0x0)

3.442436854s ago: executing program 3 (id=460):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xb583c63ca7430066)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$tipc(0x1e, 0x1, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r5, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x18000000}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3.405976497s ago: executing program 4 (id=461):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="8200000002000000e1"])
r5 = fcntl$dupfd(r0, 0x0, r0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000240)=@urb_type_iso={0x0, {0xc, 0x1}, 0x6, 0x1, &(0x7f0000000040)="8f8114caa305859c599dc9c7e520bca7587c0b575f3655ad57c996f1f548aa5e7198755097ecaa242ecc46066f398ac1d8322282079666ded99a88af733caccb4b524f37eee2f8b571e5a1bf4e01c6dd661d23aec1c15793c5a38c24c17c", 0x5e, 0x401, 0x6, 0x43, 0x3, 0x6, &(0x7f0000000140)="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", [{0x3, 0x8, 0x2}, {0x5, 0x0, 0x100}, {0x9, 0x3ab, 0x7b6}, {0x3, 0xf, 0x1a5f}, {0x40, 0x6, 0x7f}, {0xfffffff8, 0x10001, 0x2}, {0x8000, 0xb, 0x1}, {0xfffffffa, 0x9}, {0x3, 0x80, 0x7}, {0x0, 0xf6, 0x6}, {0x6, 0x10001}, {0xd230, 0x0, 0x8}, {0x5, 0x1, 0x7}, {0xb3, 0xa, 0x1}, {0x2, 0x9, 0x10}, {0x31d, 0x3, 0x5}, {0x6b, 0x2, 0x4}, {0x6, 0x3, 0xffff}, {0x8, 0x3, 0x94}, {0x800, 0x7, 0xdd00}, {0x3, 0x1, 0x4}, {0xffff, 0x1000, 0x3}, {0x5f98, 0xfffffffc, 0x8dc5}, {0x40000, 0x6, 0xc0c}, {0xffffffff, 0x8}, {0x100000, 0x6, 0x19ba}, {0x5, 0x6, 0x3}, {0x7, 0x401, 0xa20d}, {0xffff7fff, 0x7, 0x2}, {0x5, 0x2, 0x1}, {0x8ff, 0xb, 0x2}, {0xbe7, 0x800, 0x3}, {0x4, 0x6, 0xfffffffe}, {0x3, 0x1ff, 0x7995}, {0xf, 0x5, 0x409f}, {0x9, 0x3, 0x2}, {0x2, 0x46d, 0x7}, {0x8, 0x80000001, 0x4a9}, {0x8, 0x8, 0x2}, {0x80, 0x27ae}, {0x6, 0x200, 0x10001}, {0x40, 0x5, 0x3}, {0x4, 0x18000, 0x4}, {0x10001, 0x6b, 0x1}, {0x6, 0x7fff, 0x1}, {0x2c1, 0x80000000, 0x7fffffff}, {0x81, 0x9, 0x80}, {0xff, 0x7, 0x1}, {0xe8, 0x0, 0x4}, {0x8, 0x9, 0x6}, {0x9, 0x6, 0x6}, {0x1e, 0x0, 0x2}, {0x10000, 0x1, 0x845}, {0x2, 0x8, 0x9}, {0x6, 0x4, 0x81}, {0x8, 0x5, 0x409}, {0x0, 0x7, 0x2135f78}, {0x557, 0x1, 0x400}, {0x8, 0x1ef7, 0x2}, {0x7, 0x40, 0x3}, {0x6, 0x4, 0x4}, {0xb62, 0x0, 0x9}, {0xfce, 0xaa, 0x7}, {0x6, 0x9, 0x3ff}, {0x9, 0xf94, 0xc}, {0xff, 0x5, 0x2}, {0xb, 0x4}]})

2.458996527s ago: executing program 1 (id=462):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaad827c2000000080045000070"], 0x0)

2.365537354s ago: executing program 2 (id=463):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x1, 0x200, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x24044044)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
epoll_create1(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfe}, {0x0}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x3, 0x0, 0x0)
socket(0x0, 0x1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x3, 0xffffffffffffffff)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff)
mount$binderfs(0x0, &(0x7f0000002bc0)='./binderfs2\x00', 0x0, 0x0, &(0x7f0000002c40)={[{}]})
ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x19)

2.351851925s ago: executing program 3 (id=464):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x801)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
socket(0x10, 0x3, 0x9)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pipe2(&(0x7f0000000040), 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5d8, &(0x7f00000014c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xd, 0x400003, 0x4, 0xa48, r0, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10)
mkdir(&(0x7f0000005b80)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x280404)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2.306908868s ago: executing program 0 (id=465):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000c40)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}], [{@obj_user={'obj_user', 0x3d, 'resuid'}}]}, 0x1, 0x5f0, &(0x7f0000000640)="$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")
quotactl$Q_SETQUOTA(0x0, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x2, 0x9d})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
sendfile(0xffffffffffffffff, r5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x100001)

2.29395466s ago: executing program 1 (id=466):
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3814744, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@acl}, {@test_dummy_encryption}, {@resgid}, {@jqfmt_vfsv0}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x46f, &(0x7f0000000b00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
socket$inet6(0xa, 0x6, 0x9)

2.258806662s ago: executing program 4 (id=467):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000030c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="6558d0f7f05536d6f86e7cfcff125a210ce572b241f6a72b72febd25638eaea49389e16de79ca1ce33aef6d8dace9d9b28b49f18a8404bfb9c8dfd13272ca517a1ce056626af79e6286e9ea9e5deda21bb6d33baf095db881ff9e9aae8a05de30122"], 0x1220}, 0x1, 0x0, 0x0, 0x24040000}, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5)
ptrace$pokeuser(0x6, r7, 0x80000001, 0x4)
socket$inet(0x2, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00')
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000020c0)=""/4094)

1.356951169s ago: executing program 2 (id=468):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000900)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0029687dc171d07c6974395f07db", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 10)

1.356229209s ago: executing program 3 (id=469):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
r1 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)

997.585865ms ago: executing program 4 (id=470):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x180, 0x10, 0x633, 0x3f00, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x180}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(0xffffffffffffffff, 0xc17a)
open_tree(r0, &(0x7f0000000240)='./bus\x00', 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001900150000007a21f876e4eb1d69cb78740910ffa05d51e619884b96ee000000000000000000dc1e"], 0x1c}], 0x1}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000140))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000000)={0x0, r9})

920.560571ms ago: executing program 2 (id=471):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)

535.63311ms ago: executing program 1 (id=472):
dup(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r5, &(0x7f0000000080)="01020000", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000040)=0x1fb98, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000009100), 0x0, 0x0, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x18, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x18}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

458.235486ms ago: executing program 3 (id=473):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa68, 0x8b0, 0x11, 0x148, 0x0, 0x10, 0x9d0, 0x2a8, 0x2a8, 0x9d0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x890, 0x8b0, 0x1c, {}, [@common=@unspec=@u32={{0x7e0}}, @common=@set={{0x40}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@dscp={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0xac8)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000bc0)={[{@nouser_xattr}, {@inline_data}, {@four_active_logs}, {@compress_cache}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@io_bits={'io_bits', 0x3d, 0xfb}}, {@extent_cache}, {@checkpoint_merge}], [{@seclabel}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
r2 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000ac0)=""/234, 0xea)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
fallocate(r2, 0x0, 0x0, 0x9000f4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r6 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x486, 0x185, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4f, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x914}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8a, 0xbb, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x54, 0x3, 0x6}}]}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x250, 0xb5, 0x9, 0x3, 0x40, 0x3}, 0xc, &(0x7f0000000d00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x4, 0xbf5}]}, 0x5, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x408}}, {0xe3, &(0x7f0000000d80)=@string={0xe3, 0x3, "e525f7c46fb12f617c306358ec6678cd68f8cd4d8254601a4bfbb755b6ab0e0d07502b782f8b700d042974eb3eaf35b6d5de9f4587ebfc42990032da78c9e98502ea95b55d96fc81eedf77c8538593e2507093a2ae517779ef7ac8959ccd1bdc1f5c83bc0b5df0ec3dbc8dab1745f744fb012f686eeac004d50bc9535ee34942f2c072827ec3fa4fcd1847803fd5b29c4a77bdf5d22f46dfda64fbc8671f08760b608f874939de8156232af4123c15f9d97b245511d1d092d890b2149de98a604d18e8a1a4582b6a5af08e45c049ebbd0516910a3767ecd67b8234f63e6e42cfe7"}}, {0x9b, &(0x7f0000000e80)=@string={0x9b, 0x3, "f5ebac35e5ca49933a0e2ddaa277e81894c2fd7e7b178976f09afc660a117a77a13d5fba81bce5ace365a3afadc27b94854af57ff3c370c7a363af1b755c51c6d31823eb9b97de853436348e2b88157a9d38c625ef7af5d4565df77d6fcdd4b8459834d70ea7c08ff1571c0f445d27905736ed629aab66c7aa3e42410b097e0d4ab52e3cd7f2135ccf4ace6b1809d64c0cb12baf1f6070c4a8"}}, {0x59, &(0x7f0000000f40)=@string={0x59, 0x3, "edb2f82ddc575909ca1c39f373d37dae44cfe01796347926333af3b2157b9443110736a3014f2659cadd4192c700d89edfc2ba13a03bb417b2d194ab29642d549149d32e32efed733a3b9fd7e4bc7b32dcf33e61b25d03"}}, {0xe, &(0x7f0000000fc0)=@string={0xe, 0x3, "7f67311579eb3e097146e4c1"}}]})
syz_usb_control_io$hid(r6, &(0x7f0000001240)={0x24, &(0x7f0000001080)={0x40, 0x23, 0xf2, {0xf2, 0x22, "05007633e038ba1069b2e1e67a77cf88c5fd3a7c39d2c05fbc5d486826c85e7ac92c6f23b2f82d33ff77d19a8b723080ed886a9d537276d39de988fc652e71a0e85b2ae7869b85d22d99489bc84ca0647ff019dfda74a8ea7f0bfa6370abc4519131bc603c410709ccd9c0b9b21dc5f297cc4078a73a0f598cd26d65012af32ca8bf6bdd521f96903861bd19b655240a9f1ff95f03bda02e749ef56f75578be342e6237975be1263a266dd998514f1ee86bf879566ec27e5bf58ae1cf0c9efee66aa5d6ee65d5c5aea20abffdef742c3c9178cf024655dbc0033933207fab7c6991fe91ad67ceeb45ab739b17f754a2e"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000011c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x4, "9fa8"}, @global=@item_4={0x3, 0x1, 0x0, "191db6ca"}, @main=@item_4={0x3, 0x0, 0x8, "3a8274bf"}, @local=@item_4={0x3, 0x2, 0x86c4da260c7c328c, "52bb6103"}, @global=@item_4={0x3, 0x1, 0xa, "172c28c9"}, @main=@item_4={0x3, 0x0, 0xc, "27bf5cca"}, @global=@item_4={0x3, 0x1, 0x0, "314af8ba"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x150}}}}, &(0x7f0000001500)={0x2c, &(0x7f0000001280)={0x40, 0x8, 0xc0, "1ef267a9fd74966010e904829e5123b638a5e136b93a30ef941c97611f60eb91519cc2d2b2dcf59f6b7ea7ac0ad69a833fa6cf19dff57df1dc738a74e7ba36294783ff4b72343d3f89ba1b3af4fa9ccafb20bf57b631fec9d771f6a6f30a0edd59c8bb034b36f52bdaff6732a7f7d1d6affe58b28771456af10d5310b52e10eb8b11c5d4ff8d92bc9785c0be95714e6e2aa5a885226fd271b0f5b9d9a5606f9e777a139af72466a9a458a6eb0c8888b25c31cf885f9e6b7a9e61eea7e4506c72"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000001400)={0x20, 0x1, 0x47, "943de8ba7a4842a1b4c840dbad4869033826c7140a30d24f2075f18755cec1072bfdbbaa564b917c397c20cda8d7bce9cc292615edc3e806434280aa896f227d6c30d66d974858"}, &(0x7f00000014c0)={0x20, 0x3, 0x1, 0x8d}})
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYRES32=r1, @ANYBLOB="00000000000000006600ffffffff0000180000000000000000000000000000009500000000000000a60a070000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90)

110.038162ms ago: executing program 4 (id=474):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, 0x0, 0xc010)
prctl$PR_CAPBSET_DROP(0x18, 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x48)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = dup2(r2, r2)
read$FUSE(r3, &(0x7f0000001800)={0x2020}, 0x2020)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000000000)=""/154, 0x9a, 0xfa5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa00000000000071101e00000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

0s ago: executing program 0 (id=475):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0}, 0x10)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7402000000ed56e24a7266646e6f3de4a4e1b56979325a3aece0ed71d9cf5319b4576fc804487db6cb95b63822928d2c4ff33a422ec68ef0348eae1fe949a867d96301773d4da5e9f387b9cf5b491cd045f38d2e567e9329bb048027ce1af612f3478dffb650fe61bbbc13ea8218857de80ac258fe7333201b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',\x00'])
getpid()
utime(&(0x7f0000000200)='./file0\x00', 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r4, r5, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000d5270f11c0"], 0x1c}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r8, 0xae9a)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r8, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

38.486208][  T632] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   38.494564][  T655] loop3: detected capacity change from 0 to 256
[   38.503671][  T655] exfat: Bad value for 'uid'
[   38.508948][  T632] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   38.538886][  T632] F2FS-fs (loop2): invalid crc value
[   38.569190][  T632] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   38.589390][  T659] loop0: detected capacity change from 0 to 512
[   38.605941][  T632] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[   38.614265][  T632] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   38.635018][  T659] EXT4-fs: Ignoring removed oldalloc option
[   38.646402][  T661] loop4: detected capacity change from 0 to 256
[   38.661074][  T659] EXT4-fs (loop0): Test dummy encryption mode enabled
[   38.676980][  T661] exfat: Bad value for 'uid'
[   38.692159][  T659] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.75: invalid block
[   38.706825][  T659] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.75: couldn't read orphan inode 11 (err -117)
[   38.750999][  T659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   39.111308][  T670] loop1: detected capacity change from 0 to 256
[   39.139701][  T670] exfat: Bad value for 'uid'
[   39.457143][  T289] EXT4-fs (loop0): unmounting filesystem.
[   39.496963][  T679] loop0: detected capacity change from 0 to 512
[   39.573004][  T679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   39.621489][  T679] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff)
[   39.743100][  T692] loop3: detected capacity change from 0 to 512
[   39.937664][  T692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   39.981925][  T692] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff)
[   40.085678][  T701] loop1: detected capacity change from 0 to 512
[   40.088074][  T699] loop4: detected capacity change from 0 to 512
[   40.159179][  T701] serio: Serial port ptm0
[   40.259177][  T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   40.407379][  T289] EXT4-fs (loop0): unmounting filesystem.
[   40.436624][  T706] loop0: detected capacity change from 0 to 512
[   40.469972][  T708] binder: 707:708 ioctl 4018620d 0 returned -22
[   40.483353][  T706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   40.492307][  T706] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff)
[   40.508443][  T699] serio: Serial port ptm0
[   40.739009][  T290] EXT4-fs (loop3): unmounting filesystem.
[   40.828208][  T713] cgroup: Unknown subsys name 'appraise_type'
[   40.900902][  T719] loop2: detected capacity change from 0 to 512
[   40.910303][  T719] EXT4-fs: Ignoring removed oldalloc option
[   40.916415][  T719] EXT4-fs (loop2): Test dummy encryption mode enabled
[   40.969833][  T719] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.89: invalid block
[   40.981105][  T719] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.89: couldn't read orphan inode 11 (err -117)
[   40.993183][  T719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   41.174205][  T729] xt_TCPMSS: Only works on TCP SYN packets
[   41.366937][  T732] loop1: detected capacity change from 0 to 256
[   41.374377][  T289] EXT4-fs (loop0): unmounting filesystem.
[   41.377328][  T732] exfat: Bad value for 'uid'
[   41.416890][  T397] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   41.711582][  T294] EXT4-fs (loop2): unmounting filesystem.
[   41.836249][  T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.851096][  T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.861343][  T397] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   41.870444][  T397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.946816][  T397] usb 5-1: config 0 descriptor??
[   41.996532][  T741] loop2: detected capacity change from 0 to 40427
[   42.127259][  T741] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   42.168576][  T741] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   42.254346][  T741] F2FS-fs (loop2): invalid crc value
[   42.260886][  T734] syz.0.95 (734) used greatest stack depth: 22064 bytes left
[   42.270201][  T741] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   42.302648][  T748] loop0: detected capacity change from 0 to 2048
[   42.319723][  T741] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[   42.327089][  T741] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   42.338267][  T748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   42.417055][  T289] EXT4-fs (loop0): unmounting filesystem.
[   42.454491][  T755] loop0: detected capacity change from 0 to 512
[   42.467922][  T397] samsung 0003:0419:0600.0001: unknown main item tag 0x0
[   42.475507][  T397] samsung 0003:0419:0600.0001: unknown main item tag 0x0
[   42.482437][  T397] samsung 0003:0419:0600.0001: unknown main item tag 0x0
[   42.489303][  T397] samsung 0003:0419:0600.0001: unknown main item tag 0x0
[   42.496115][  T397] samsung 0003:0419:0600.0001: unknown main item tag 0x0
[   42.535488][  T397] samsung 0003:0419:0600.0001: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0
[   42.577446][  T755] serio: Serial port ptm0
[   42.840814][  T761] loop3: detected capacity change from 0 to 512
[   42.852091][   T39] usb 5-1: USB disconnect, device number 2
[   42.894670][  T505] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   43.008770][  T761] serio: Serial port ptm0
[   43.030880][  T771] loop0: detected capacity change from 0 to 256
[   43.037316][  T771] exfat: Bad value for 'uid'
[   44.018986][  T784] loop4: detected capacity change from 0 to 40427
[   44.035994][  T784] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   44.043764][  T784] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   44.060044][  T784] F2FS-fs (loop4): invalid crc value
[   44.066191][  T784] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   44.097486][  T784] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[   44.104605][  T784] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   44.799786][  T798] xt_TCPMSS: Only works on TCP SYN packets
[   45.083132][  T809] loop2: detected capacity change from 0 to 2048
[   45.089525][  T809] ext4: Unknown parameter 'obj_user'
[   45.618618][  T815] xt_TCPMSS: Only works on TCP SYN packets
[   45.978152][  T826] loop2: detected capacity change from 0 to 512
[   46.267933][  T832] loop3: detected capacity change from 0 to 512
[   46.311553][  T832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   46.320456][  T832] ext4 filesystem being mounted at /22/bus supports timestamps until 2038 (0x7fffffff)
[   46.386254][  T838] loop4: detected capacity change from 0 to 256
[   46.397300][  T838] exfat: Bad value for 'uid'
[   46.414371][  T826] serio: Serial port ptm0
[   46.755962][  T846] loop0: detected capacity change from 0 to 512
[   46.778889][  T846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   46.787820][  T846] ext4 filesystem being mounted at /25/bus supports timestamps until 2038 (0x7fffffff)
[   47.154778][  T290] EXT4-fs (loop3): unmounting filesystem.
[   47.171767][  T859] loop3: detected capacity change from 0 to 512
[   47.206781][  T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   47.298651][  T859] serio: Serial port ptm0
[   47.311723][  T864] loop4: detected capacity change from 0 to 512
[   47.358013][  T505] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   47.406615][  T866] loop3: detected capacity change from 0 to 512
[   47.444334][  T864] serio: Serial port ptm0
[   47.448361][  T866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   47.457311][  T866] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff)
[   48.486855][  T289] EXT4-fs (loop0): unmounting filesystem.
[   48.565784][  T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.576810][  T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.586372][  T313] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   48.626360][  T885] loop4: detected capacity change from 0 to 512
[   48.627048][  T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.633239][  T290] EXT4-fs (loop3): unmounting filesystem.
[   48.640871][  T313] usb 3-1: config 0 descriptor??
[   48.665470][  T887] loop0: detected capacity change from 0 to 512
[   48.677442][  T505] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   48.709521][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   48.709533][   T28] audit: type=1400 audit(1725203030.929:178): avc:  denied  { read } for  pid=890 comm="syz.1.135" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   48.748694][  T887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   48.766767][   T28] audit: type=1400 audit(1725203030.929:179): avc:  denied  { open } for  pid=890 comm="syz.1.135" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   48.766813][  T887] ext4 filesystem being mounted at /26/bus supports timestamps until 2038 (0x7fffffff)
[   48.818608][  T885] serio: Serial port ptm0
[   48.926920][  T889] loop3: detected capacity change from 0 to 40427
[   48.935119][  T898] loop4: detected capacity change from 0 to 256
[   48.941076][  T889] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   48.941521][  T898] exfat: Bad value for 'uid'
[   48.948974][  T889] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   48.964944][  T889] F2FS-fs (loop3): invalid crc value
[   48.975803][  T889] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   48.987270][  T505] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   49.186897][  T313] samsung 0003:0419:0600.0002: unknown main item tag 0x0
[   49.193770][  T313] samsung 0003:0419:0600.0002: unknown main item tag 0x0
[   49.210733][  T313] samsung 0003:0419:0600.0002: unknown main item tag 0x0
[   49.211709][  T889] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[   49.217619][  T313] samsung 0003:0419:0600.0002: unknown main item tag 0x0
[   49.217646][  T313] samsung 0003:0419:0600.0002: unknown main item tag 0x0
[   49.218237][  T313] samsung 0003:0419:0600.0002: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0
[   49.227732][  T889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   49.375642][  T313] usb 3-1: USB disconnect, device number 2
[   49.671831][  T289] EXT4-fs (loop0): unmounting filesystem.
[   49.699675][  T912] bridge0: port 3(veth1_macvtap) entered blocking state
[   49.706677][  T912] bridge0: port 3(veth1_macvtap) entered disabled state
[   49.708365][  T910] loop1: detected capacity change from 0 to 2048
[   49.719969][  T910] ext4: Unknown parameter 'obj_user'
[   49.874739][  T914] cgroup: Unknown subsys name 'appraise_type'
[   49.882495][  T913] cgroup: Unknown subsys name 'appraise_type'
[   50.031227][  T920] xt_TCPMSS: Only works on TCP SYN packets
[   50.118379][  T918] loop4: detected capacity change from 0 to 512
[   50.211008][  T918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   50.219931][  T918] ext4 filesystem being mounted at /27/bus supports timestamps until 2038 (0x7fffffff)
[   50.327194][  T934] loop3: detected capacity change from 0 to 512
[   50.473062][  T935] xt_TCPMSS: Only works on TCP SYN packets
[   50.667358][  T934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   50.685890][  T934] ext4 filesystem being mounted at /28/bus supports timestamps until 2038 (0x7fffffff)
[   51.801999][  T929] loop0: detected capacity change from 0 to 40427
[   51.812254][  T290] EXT4-fs (loop3): unmounting filesystem.
[   51.814643][  T951] binder: 947:951 ioctl 4018620d 0 returned -22
[   51.850447][  T953] loop3: detected capacity change from 0 to 256
[   51.863379][  T929] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   51.914845][  T953] exfat: Bad value for 'uid'
[   51.919659][  T929] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   51.946283][  T954] cgroup: Unknown subsys name 'appraise_type'
[   51.946549][  T929] F2FS-fs (loop0): invalid crc value
[   51.966201][  T295] EXT4-fs (loop4): unmounting filesystem.
[   51.999988][  T929] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   52.005892][  T958] loop4: detected capacity change from 0 to 256
[   52.043221][  T958] exfat: Bad value for 'uid'
[   52.048880][  T929] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[   52.056073][  T929] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   52.130865][  T949] loop1: detected capacity change from 0 to 40427
[   52.145404][  T949] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   52.161505][  T949] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   52.198750][  T949] F2FS-fs (loop1): invalid crc value
[   52.218472][  T949] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   52.357334][  T949] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[   52.364363][  T949] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   53.118134][  T981] loop3: detected capacity change from 0 to 256
[   53.189257][  T976] loop0: detected capacity change from 0 to 40427
[   53.206762][  T976] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   53.214400][  T976] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   53.233096][  T981] exfat: Bad value for 'uid'
[   53.237956][  T976] F2FS-fs (loop0): invalid crc value
[   53.254514][  T976] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   53.275694][  T989] cgroup: Unknown subsys name 'appraise_type'
[   53.320786][  T976] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[   53.341912][  T976] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   53.414514][  T984] loop4: detected capacity change from 0 to 40427
[   53.431224][  T984] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   53.439288][  T984] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   53.476976][  T984] F2FS-fs (loop4): invalid crc value
[   53.492190][  T984] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   53.559229][  T994] loop2: detected capacity change from 0 to 512
[   53.567516][  T984] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[   53.598700][  T984] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   53.602811][  T994] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   53.636862][  T994] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff)
[   54.650118][ T1002] loop0: detected capacity change from 0 to 512
[   54.924020][ T1009] loop1: detected capacity change from 0 to 2048
[   54.930401][ T1009] ext4: Unknown parameter 'obj_user'
[   54.951835][ T1002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   54.961553][  T294] EXT4-fs (loop2): unmounting filesystem.
[   54.966772][ T1002] ext4 filesystem being mounted at /31/bus supports timestamps until 2038 (0x7fffffff)
[   54.987064][  T315] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   55.007410][ T1011] loop3: detected capacity change from 0 to 512
[   55.102749][ T1020] loop2: detected capacity change from 0 to 256
[   55.120928][ T1020] exfat: Bad value for 'uid'
[   55.127216][ T1011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   55.136258][ T1011] ext4 filesystem being mounted at /31/bus supports timestamps until 2038 (0x7fffffff)
[   56.384155][ T1028] xt_TCPMSS: Only works on TCP SYN packets
[   56.607072][  T290] EXT4-fs (loop3): unmounting filesystem.
[   56.608016][  T289] EXT4-fs (loop0): unmounting filesystem.
[   56.616048][ T1033] binder: 1031:1033 ioctl 4018620d 0 returned -22
[   56.658963][ T1037] loop3: detected capacity change from 0 to 256
[   56.687250][ T1037] exfat: Bad value for 'uid'
[   56.712706][ T1039] cgroup: Unknown subsys name 'appraise_type'
[   57.059453][ T1049] loop1: detected capacity change from 0 to 256
[   57.065782][ T1049] exfat: Bad value for 'uid'
[   57.088410][ T1035] loop0: detected capacity change from 0 to 40427
[   57.097114][ T1035] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   57.107927][ T1035] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   57.116620][ T1035] F2FS-fs (loop0): invalid crc value
[   57.122902][ T1035] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   57.151986][ T1035] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[   57.159151][ T1035] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   57.323502][  T493] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   57.641443][ T1058] loop0: detected capacity change from 0 to 256
[   57.644882][ T1054] loop1: detected capacity change from 0 to 40427
[   57.665619][ T1054] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   57.674014][ T1054] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   57.682843][ T1054] F2FS-fs (loop1): invalid crc value
[   57.689446][ T1054] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   57.723443][ T1054] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[   57.730850][ T1054] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   57.746923][  T493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.763275][  T493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.764301][ T1065] loop3: detected capacity change from 0 to 512
[   57.779754][  T493] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   57.788886][  T493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.916313][  T493] usb 3-1: config 0 descriptor??
[   58.029203][ T1065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   58.060665][ T1065] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff)
[   58.064769][ T1071] loop4: detected capacity change from 0 to 512
[   58.088434][ T1071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   58.097412][ T1071] ext4 filesystem being mounted at /31/bus supports timestamps until 2038 (0x7fffffff)
[   59.596780][  T295] EXT4-fs (loop4): unmounting filesystem.
[   59.597197][  T290] EXT4-fs (loop3): unmounting filesystem.
[   59.707787][  T493] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[   59.714678][  T493] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[   59.730429][  T493] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[   59.741871][  T493] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[   59.749044][  T493] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[   59.756615][  T493] samsung 0003:0419:0600.0003: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0
[   60.037710][  T493] usb 3-1: USB disconnect, device number 3
[   60.106764][ T1082] loop1: detected capacity change from 0 to 40427
[   60.127801][ T1082] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   60.135424][ T1082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   60.144760][ T1082] F2FS-fs (loop1): invalid crc value
[   60.151135][ T1082] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   60.180948][ T1082] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[   60.188128][ T1082] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   60.190886][ T1097] loop3: detected capacity change from 0 to 40427
[   60.208875][ T1097] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   60.216531][ T1097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   60.225116][ T1097] F2FS-fs (loop3): invalid crc value
[   60.231144][ T1097] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   60.259756][ T1097] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[   60.267040][ T1097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   61.193437][ T1108] loop4: detected capacity change from 0 to 256
[   61.234810][ T1108] exfat: Bad value for 'uid'
[   61.243974][ T1112] loop0: detected capacity change from 0 to 512
[   61.244846][ T1114] loop3: detected capacity change from 0 to 512
[   61.254704][ T1110] loop2: detected capacity change from 0 to 2048
[   61.263347][ T1114] EXT4-fs: Ignoring removed oldalloc option
[   61.265432][ T1116] loop1: detected capacity change from 0 to 512
[   61.276113][ T1114] EXT4-fs (loop3): Test dummy encryption mode enabled
[   61.278992][ T1112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   61.291858][ T1112] ext4 filesystem being mounted at /35/bus supports timestamps until 2038 (0x7fffffff)
[   61.301004][  T505] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   61.311154][ T1114] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.190: invalid block
[   61.322735][ T1122] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   61.333038][ T1110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   61.345287][ T1114] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.190: couldn't read orphan inode 11 (err -117)
[   61.373634][ T1114] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   61.519675][ T1128] serio: Serial port ptm0
[   61.842153][ T1134] loop1: detected capacity change from 0 to 256
[   61.848512][ T1134] exfat: Bad value for 'uid'
[   62.105404][  T294] EXT4-fs (loop2): unmounting filesystem.
[   62.111345][  T289] EXT4-fs (loop0): unmounting filesystem.
[   62.118070][  T290] EXT4-fs (loop3): unmounting filesystem.
[   62.149549][ T1142] loop0: detected capacity change from 0 to 512
[   62.168170][ T1145] loop4: detected capacity change from 0 to 256
[   62.177765][ T1145] exfat: Bad value for 'uid'
[   62.194040][ T1147] loop3: detected capacity change from 0 to 512
[   62.203017][  T315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   62.227877][  T372] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   62.267874][ T1147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   62.287676][ T1147] ext4 filesystem being mounted at /41/bus supports timestamps until 2038 (0x7fffffff)
[   62.298207][ T1153] serio: Serial port ptm0
[   62.708782][ T1159] loop0: detected capacity change from 0 to 512
[   62.733725][ T1159] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   62.744744][ T1159] ext4 filesystem being mounted at /37/bus supports timestamps until 2038 (0x7fffffff)
[   63.185714][  T290] EXT4-fs (loop3): unmounting filesystem.
[   63.200838][ T1173] loop2: detected capacity change from 0 to 256
[   63.228541][ T1173] exfat: Bad value for 'uid'
[   63.293980][ T1176] loop3: detected capacity change from 0 to 2048
[   63.307044][ T1176] ext4: Unknown parameter 'obj_user'
[   63.358449][  T505] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   63.792573][ T1185] xt_TCPMSS: Only works on TCP SYN packets
[   63.846912][  T289] EXT4-fs (loop0): unmounting filesystem.
[   63.865349][ T1183] loop4: detected capacity change from 0 to 512
[   63.899774][ T1187] loop0: detected capacity change from 0 to 512
[   63.909160][ T1183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   63.923142][ T1183] ext4 filesystem being mounted at /35/bus supports timestamps until 2038 (0x7fffffff)
[   63.947692][ T1187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   63.968781][ T1187] ext4 filesystem being mounted at /38/bus supports timestamps until 2038 (0x7fffffff)
[   64.062173][ T1194] loop2: detected capacity change from 0 to 256
[   64.069543][ T1194] exfat: Bad value for 'uid'
[   64.596170][  T505] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   64.757922][  T295] EXT4-fs (loop4): unmounting filesystem.
[   64.773421][  T289] EXT4-fs (loop0): unmounting filesystem.
[   64.791088][ T1207] loop4: detected capacity change from 0 to 2048
[   64.798342][ T1207] ext4: Unknown parameter 'obj_user'
[   64.800252][ T1209] loop0: detected capacity change from 0 to 512
[   64.867705][  T315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   65.051733][ T1212] xt_TCPMSS: Only works on TCP SYN packets
[   65.092711][ T1209] serio: Serial port ptm0
[   65.182222][ T1215] loop1: detected capacity change from 0 to 2048
[   65.206815][  T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   65.219866][ T1215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   65.586811][  T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.597580][  T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.607311][  T313] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   65.616237][  T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.630929][  T313] usb 4-1: config 0 descriptor??
[   65.916781][  T493] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   65.930624][  T293] EXT4-fs (loop1): unmounting filesystem.
[   65.947900][ T1232] loop1: detected capacity change from 0 to 512
[   65.954277][ T1232] EXT4-fs: Ignoring removed oldalloc option
[   65.960650][ T1232] EXT4-fs (loop1): Test dummy encryption mode enabled
[   65.968602][ T1232] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.214: invalid block
[   65.979456][ T1232] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.214: couldn't read orphan inode 11 (err -117)
[   65.991271][ T1232] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   66.072384][ T1235] loop2: detected capacity change from 0 to 512
[   66.081805][ T1235] EXT4-fs: Ignoring removed oldalloc option
[   66.090474][ T1235] EXT4-fs (loop2): Test dummy encryption mode enabled
[   66.098543][ T1235] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.215: invalid block
[   66.109532][ T1235] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.215: couldn't read orphan inode 11 (err -117)
[   66.110790][  T313] samsung 0003:0419:0600.0004: unknown main item tag 0x0
[   66.121628][ T1235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   66.130286][  T313] samsung 0003:0419:0600.0004: unknown main item tag 0x0
[   66.143658][  T313] samsung 0003:0419:0600.0004: unknown main item tag 0x0
[   66.151152][  T313] samsung 0003:0419:0600.0004: unknown main item tag 0x0
[   66.158702][  T313] samsung 0003:0419:0600.0004: unknown main item tag 0x0
[   66.166655][  T313] samsung 0003:0419:0600.0004: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0
[   66.296965][  T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.308339][  T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.440614][  T493] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   66.470497][  T493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.487142][  T493] usb 5-1: config 0 descriptor??
[   66.499902][  T788] usb 4-1: USB disconnect, device number 2
[   66.798773][  T293] EXT4-fs (loop1): unmounting filesystem.
[   66.864357][ T1246] cgroup: Unknown subsys name 'appraise_type'
[   66.979048][  T294] EXT4-fs (loop2): unmounting filesystem.
[   66.986446][ T1248] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   66.994952][  T493] samsung 0003:0419:0600.0005: unknown main item tag 0x0
[   67.000638][ T1248] audit: out of memory in audit_log_start
[   67.007638][  T493] samsung 0003:0419:0600.0005: unknown main item tag 0x0
[   67.020409][  T493] samsung 0003:0419:0600.0005: unknown main item tag 0x0
[   67.025496][ T1248] SELinux: failed to load policy
[   67.047940][  T493] samsung 0003:0419:0600.0005: unknown main item tag 0x0
[   67.068058][ T1256] loop0: detected capacity change from 0 to 256
[   67.069292][  T493] samsung 0003:0419:0600.0005: unknown main item tag 0x0
[   67.080916][ T1256] exfat: Bad value for 'uid'
[   67.093272][   T28] audit: type=1400 audit(1725203049.309:180): avc:  denied  { write } for  pid=1249 comm="syz.2.218" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   67.160814][  T493] samsung 0003:0419:0600.0005: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0
[   67.177286][  T505] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   67.197115][  T493] usb 5-1: USB disconnect, device number 3
[   67.385716][ T1265] loop1: detected capacity change from 0 to 512
[   67.468990][ T1265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   67.477801][ T1265] ext4 filesystem being mounted at /48/bus supports timestamps until 2038 (0x7fffffff)
[   67.796982][ T1274] loop4: detected capacity change from 0 to 512
[   67.808539][ T1274] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   67.817384][ T1274] ext4 filesystem being mounted at /38/bus supports timestamps until 2038 (0x7fffffff)
[   67.997556][ T1281] Zero length message leads to an empty skb
[   68.167991][  T293] EXT4-fs (loop1): unmounting filesystem.
[   68.192088][ T1288] loop1: detected capacity change from 0 to 512
[   68.219277][ T1288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   68.228380][ T1288] ext4 filesystem being mounted at /49/bus supports timestamps until 2038 (0x7fffffff)
[   68.330068][ T1286] loop0: detected capacity change from 0 to 40427
[   68.336990][ T1286] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   68.344645][ T1286] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   68.353302][ T1286] F2FS-fs (loop0): invalid crc value
[   68.359792][ T1286] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   68.527002][ T1286] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[   68.534636][ T1286] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   68.661583][  T295] EXT4-fs (loop4): unmounting filesystem.
[   68.674835][ T1295] binder: 1294:1295 ioctl 4018620d 0 returned -22
[   68.736620][ T1296] cgroup: Unknown subsys name 'appraise_type'
[   69.442577][  T293] EXT4-fs (loop1): unmounting filesystem.
[   69.595351][   T28] audit: type=1400 audit(1725203051.809:181): avc:  denied  { ioctl } for  pid=1308 comm="syz.4.233" path="socket:[18028]" dev="sockfs" ino=18028 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   69.859425][ T1309] loop1: detected capacity change from 0 to 40427
[   69.870004][ T1309] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   69.877646][ T1309] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   69.894880][ T1309] F2FS-fs (loop1): invalid crc value
[   69.909889][ T1309] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   69.920479][ T1319] loop0: detected capacity change from 0 to 256
[   69.926810][ T1319] exfat: Bad value for 'uid'
[   69.948851][ T1313] loop3: detected capacity change from 0 to 40427
[   69.950793][ T1309] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   69.962052][ T1313] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   69.962346][ T1309] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   69.971127][   T28] audit: type=1400 audit(1725203052.189:182): avc:  denied  { remove_name } for  pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.978419][ T1313] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   70.015017][   T28] audit: type=1400 audit(1725203052.189:183): avc:  denied  { rename } for  pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   70.038185][   T28] audit: type=1400 audit(1725203052.189:184): avc:  denied  { create } for  pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   70.060088][ T1313] F2FS-fs (loop3): invalid crc value
[   70.071190][ T1313] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   70.099538][ T1313] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[   70.106618][ T1313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   70.227180][   T28] audit: type=1400 audit(1725203052.359:185): avc:  denied  { mounton } for  pid=1307 comm="syz.1.232" path="/proc/176/cgroup" dev="proc" ino=18039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   70.405528][   T28] audit: type=1400 audit(1725203052.359:186): avc:  denied  { remount } for  pid=1307 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1
[   70.418159][ T1330] loop2: detected capacity change from 0 to 512
[   70.466905][ T1330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   70.484326][ T1330] ext4 filesystem being mounted at /46/bus supports timestamps until 2038 (0x7fffffff)
[   71.634982][    T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   71.677510][  T294] EXT4-fs (loop2): unmounting filesystem.
[   71.699397][ T1336] loop1: detected capacity change from 0 to 40427
[   71.723241][ T1336] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   71.730656][ T1347] loop2: detected capacity change from 0 to 2048
[   71.740881][ T1336] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   71.744560][ T1349] loop0: detected capacity change from 0 to 512
[   71.749915][ T1336] F2FS-fs (loop1): invalid crc value
[   71.761081][ T1336] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   71.787830][ T1347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   71.856127][  T505] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   71.876997][ T1336] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[   71.884028][ T1336] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   71.979670][ T1349] serio: Serial port ptm0
[   72.001114][ T1343] loop3: detected capacity change from 0 to 40427
[   72.026847][    T6] usb 5-1: config index 0 descriptor too short (expected 106, got 36)
[   72.045911][    T6] usb 5-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config
[   72.058417][ T1343] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   72.076753][ T1343] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   72.088380][    T6] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   72.103338][ T1343] F2FS-fs (loop3): invalid crc value
[   72.116760][    T6] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[   72.134586][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.145170][    T6] usb 5-1: config 0 descriptor??
[   72.151669][ T1343] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   72.181699][ T1343] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[   72.189892][ T1343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   72.578202][   T28] audit: type=1400 audit(1725203054.799:187): avc:  denied  { read } for  pid=1363 comm="syz.1.245" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   72.608930][ T1365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1545 sclass=netlink_audit_socket pid=1365 comm=syz.1.245
[   72.625242][   T28] audit: type=1400 audit(1725203054.819:188): avc:  denied  { open } for  pid=1363 comm="syz.1.245" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   72.648239][   T28] audit: type=1400 audit(1725203054.829:189): avc:  denied  { ioctl } for  pid=1363 comm="syz.1.245" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   72.673438][  T294] EXT4-fs (loop2): unmounting filesystem.
[   72.732727][ T1370] loop2: detected capacity change from 0 to 512
[   72.739132][ T1370] EXT4-fs: Ignoring removed oldalloc option
[   72.745283][ T1370] EXT4-fs (loop2): Test dummy encryption mode enabled
[   72.753269][ T1370] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.247: invalid block
[   72.764141][ T1370] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.247: couldn't read orphan inode 11 (err -117)
[   72.776167][ T1370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   72.886902][  T328] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   73.121390][ T1378] binder: 1375:1378 ioctl 4018620d 0 returned -22
[   73.891848][ T1381] cgroup: Unknown subsys name 'appraise_type'
[   73.908130][  T294] EXT4-fs (loop2): unmounting filesystem.
[   73.946807][  T328] usb 2-1: device descriptor read/64, error -71
[   73.952652][ T1392] loop2: detected capacity change from 0 to 512
[   73.985530][ T1392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   74.002011][ T1392] ext4 filesystem being mounted at /50/bus supports timestamps until 2038 (0x7fffffff)
[   74.226883][ T1388] usb 5-1: USB disconnect, device number 4
[   74.406895][  T328] usb 2-1: device descriptor read/64, error -71
[   74.444391][ T1398] loop3: detected capacity change from 0 to 512
[   74.551830][ T1398] EXT4-fs (loop3): Test dummy encryption mode enabled
[   74.558345][ T1400] loop4: detected capacity change from 0 to 256
[   74.564833][ T1400] exfat: Bad value for 'uid'
[   74.571537][ T1398] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.251: invalid block
[   74.582447][ T1398] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.251: couldn't read orphan inode 11 (err -117)
[   74.594502][ T1398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   74.671955][   T28] audit: type=1400 audit(1725203056.889:190): avc:  denied  { name_bind } for  pid=1407 comm="syz.0.254" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   74.676765][  T328] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   74.716389][   T28] audit: type=1400 audit(1725203056.919:191): avc:  denied  { write } for  pid=1407 comm="syz.0.254" name="ip6_tables_matches" dev="proc" ino=4026532351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   74.824466][  T294] EXT4-fs (loop2): unmounting filesystem.
[   75.006767][  T328] usb 2-1: device descriptor read/64, error -71
[   75.023352][   T28] audit: type=1400 audit(1725203057.239:192): avc:  denied  { mounton } for  pid=1397 comm="syz.3.251" path="/51/file0/file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.023424][ T1398] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   75.054558][ T1398] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   75.074794][ T1410] loop2: detected capacity change from 0 to 40427
[   75.095126][ T1408] loop0: detected capacity change from 0 to 40427
[   75.101290][ T1410] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   75.107500][ T1408] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   75.109134][ T1410] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   75.124049][  T290] EXT4-fs (loop3): unmounting filesystem.
[   75.125202][ T1408] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   75.131227][ T1410] F2FS-fs (loop2): invalid crc value
[   75.147586][ T1410] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   75.157095][ T1416] loop3: detected capacity change from 0 to 2048
[   75.165491][ T1408] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   75.178223][ T1410] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[   75.185401][ T1410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   75.196224][ T1408] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   75.203430][ T1408] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   75.203998][ T1416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   75.436821][  T328] usb 2-1: device descriptor read/64, error -71
[   75.558115][  T328] usb usb2-port1: attempt power cycle
[   75.741408][ T1430] loop2: detected capacity change from 0 to 512
[   75.792342][   T28] audit: type=1400 audit(1725203057.979:193): avc:  denied  { create } for  pid=1427 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   75.808816][ T1430] EXT4-fs: Ignoring removed oldalloc option
[   75.839689][   T28] audit: type=1400 audit(1725203057.979:194): avc:  denied  { write } for  pid=1427 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   75.846233][ T1430] EXT4-fs (loop2): Test dummy encryption mode enabled
[   75.861540][   T28] audit: type=1400 audit(1725203057.979:195): avc:  denied  { read } for  pid=1427 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   75.944393][ T1441] xt_TCPMSS: Only works on TCP SYN packets
[   76.025124][ T1430] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.260: invalid block
[   76.037823][   T28] audit: type=1400 audit(1725203058.259:196): avc:  denied  { read write } for  pid=1436 comm="syz.0.262" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   76.087981][ T1430] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.260: couldn't read orphan inode 11 (err -117)
[   76.106217][ T1430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   76.155130][  T290] EXT4-fs (loop3): unmounting filesystem.
[   76.194587][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'.
[   76.204174][ T1445] loop3: detected capacity change from 0 to 16
[   76.211458][ T1445] erofs: Unknown parameter '0xffffffffffffffff��������������0xffffffffffffffff]����#[8����+K���W��䶓�?�҇�987'
[   76.309335][  T328] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   76.546809][  T328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.557571][  T328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.450502][  T294] EXT4-fs (loop2): unmounting filesystem.
[   77.462956][  T328] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   77.465552][ T1462] loop3: detected capacity change from 0 to 256
[   77.473561][  T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.482495][ T1462] exfat: Bad value for 'uid'
[   77.488994][  T328] usb 2-1: config 0 descriptor??
[   77.522785][ T1464] loop2: detected capacity change from 0 to 2048
[   77.524578][ T1466] cgroup: Unknown subsys name 'appraise_type'
[   77.529197][ T1464] ext4: Unknown parameter 'obj_user'
[   77.564368][ T1468] loop0: detected capacity change from 0 to 256
[   77.580756][  T315] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   77.962339][ T1474] xt_TCPMSS: Only works on TCP SYN packets
[   78.177793][  T328] samsung 0003:0419:0600.0006: unknown main item tag 0x0
[   78.186796][  T328] samsung 0003:0419:0600.0006: unknown main item tag 0x0
[   78.193940][  T328] samsung 0003:0419:0600.0006: unknown main item tag 0x0
[   78.201500][  T328] samsung 0003:0419:0600.0006: unknown main item tag 0x0
[   78.206482][ T1476] loop4: detected capacity change from 0 to 512
[   78.208728][  T328] samsung 0003:0419:0600.0006: unknown main item tag 0x0
[   78.222145][  T328] samsung 0003:0419:0600.0006: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0
[   78.238892][ T1476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   78.247723][ T1476] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff)
[   78.706382][ T1487] loop0: detected capacity change from 0 to 512
[   78.735666][ T1492] loop3: detected capacity change from 0 to 512
[   78.748139][ T1487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   78.749007][ T1490] loop2: detected capacity change from 0 to 2048
[   78.763658][ T1492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.767581][  T493] usb 2-1: USB disconnect, device number 4
[   78.782911][ T1487] ext4 filesystem being mounted at /57/bus supports timestamps until 2038 (0x7fffffff)
[   78.804435][ T1492] EXT4-fs (loop3): 1 orphan inode deleted
[   78.810110][ T1492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   78.819196][ T1067] __quota_error: 7 callbacks suppressed
[   78.819208][ T1067] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   78.834902][ T1492] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038 (0x7fffffff)
[   78.844809][ T1067] EXT4-fs error (device loop3): ext4_release_dquot:6787: comm kworker/u4:6: Failed to release dquot type 1
[   78.855943][ T1490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   78.887858][ T1492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   78.897542][ T1492] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.274: mark_inode_dirty error
[   78.913921][  T290] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[   78.966061][  T290] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   78.976300][  T290] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error
[   79.537343][  T290] EXT4-fs (loop3): unmounting filesystem.
[   79.543017][  T290] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   79.551683][  T295] EXT4-fs (loop4): unmounting filesystem.
[   79.555548][  T290] EXT4-fs error (device loop3): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error
[   79.594873][   T28] audit: type=1400 audit(1725203061.809:204): avc:  denied  { read } for  pid=1505 comm="syz.4.276" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   79.615273][  T294] EXT4-fs (loop2): unmounting filesystem.
[   79.628793][  T290] syz-executor (290) used greatest stack depth: 21584 bytes left
[   79.678397][ T1512] loop2: detected capacity change from 0 to 512
[   79.692347][ T1512] EXT4-fs: Ignoring removed oldalloc option
[   79.705850][  T289] EXT4-fs (loop0): unmounting filesystem.
[   79.715270][ T1512] EXT4-fs (loop2): Test dummy encryption mode enabled
[   79.732107][ T1512] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.277: invalid block
[   79.743056][ T1512] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.277: couldn't read orphan inode 11 (err -117)
[   79.755108][ T1512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   80.178532][ T1525] loop0: detected capacity change from 0 to 128
[   80.318039][ T1534] loop1: detected capacity change from 0 to 256
[   80.326138][ T1521] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.333150][ T1521] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.340690][ T1521] device bridge_slave_0 entered promiscuous mode
[   80.348160][ T1521] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.355049][ T1521] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.362566][ T1521] device bridge_slave_1 entered promiscuous mode
[   80.787507][  T294] EXT4-fs (loop2): unmounting filesystem.
[   80.817088][ T1542] loop2: detected capacity change from 0 to 128
[   80.841081][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.848940][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.864035][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.872398][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.880855][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.887735][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.896257][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.905277][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.913279][   T28] audit: type=1400 audit(1725203063.129:205): avc:  denied  { create } for  pid=1544 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   80.919594][ T1545] loop2: detected capacity change from 0 to 512
[   80.938955][ T1545] ext4: Bad value for 'resgid'
[   80.938979][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.950524][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.026972][ T1547] @: renamed from syztnl2
[   81.047194][   T28] audit: type=1400 audit(1725203063.259:206): avc:  denied  { create } for  pid=1541 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.070735][  T393] device bridge_slave_1 left promiscuous mode
[   81.079483][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.116844][  T393] device bridge_slave_0 left promiscuous mode
[   81.142618][   T28] audit: type=1400 audit(1725203063.259:207): avc:  denied  { ioctl } for  pid=1541 comm="syz.0.284" path="socket:[18412]" dev="sockfs" ino=18412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.236235][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.263805][ T1549] loop1: detected capacity change from 0 to 512
[   81.268475][  T328] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   81.282920][  T393] device veth1_macvtap left promiscuous mode
[   81.289184][  T393] device veth0_vlan left promiscuous mode
[   81.293999][ T1549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   81.303566][ T1549] ext4 filesystem being mounted at /57/bus supports timestamps until 2038 (0x7fffffff)
[   81.428125][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.435591][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.443478][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.451301][ T1553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.287'.
[   81.461087][  T788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.470030][  T788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.540612][  T328] usb 3-1: Using ep0 maxpacket: 8
[   81.697092][  T328] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   81.706876][  T328] usb 3-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config
[   81.739294][  T328] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.743947][ T1521] device veth0_vlan entered promiscuous mode
[   81.755001][  T328] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.766602][  T328] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   81.787402][  T328] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.796315][ T1521] device veth1_macvtap entered promiscuous mode
[   81.796381][  T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.821269][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.841482][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.849974][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.860898][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.868932][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.877260][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.885223][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.892730][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.900936][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.909150][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.917170][  T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.926640][  T788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.934039][  T788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.947817][   T28] audit: type=1400 audit(1725203064.169:208): avc:  denied  { mount } for  pid=1521 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   81.970048][   T28] audit: type=1400 audit(1725203064.189:209): avc:  denied  { mounton } for  pid=1521 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   82.107041][  T293] EXT4-fs (loop1): unmounting filesystem.
[   82.117340][  T313] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   82.129032][ T1566] loop3: detected capacity change from 0 to 40427
[   82.133590][ T1568] binder: 1567:1568 ioctl 4018620d 0 returned -22
[   82.135635][ T1566] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   82.149403][ T1566] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   82.159299][ T1566] F2FS-fs (loop3): invalid crc value
[   82.188431][ T1566] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   82.215546][ T1570] cgroup: Unknown subsys name 'appraise_type'
[   82.230771][ T1566] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[   82.237884][ T1566] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   82.496849][  T788] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   82.516837][  T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.528536][  T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.538912][  T313] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   82.548322][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.560025][  T313] usb 1-1: config 0 descriptor??
[   82.823142][  T328] usb 3-1: USB disconnect, device number 4
[   82.856847][  T788] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[   82.868199][  T788] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[   82.879962][  T788] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   82.896509][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.899266][ T1586] loop3: detected capacity change from 0 to 256
[   82.922751][   T28] audit: type=1400 audit(1725203065.139:210): avc:  denied  { read write } for  pid=1587 comm="syz.2.297" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   82.950570][ T1588] input: syz0 as /devices/virtual/input/input4
[   82.957169][   T28] audit: type=1400 audit(1725203065.169:211): avc:  denied  { open } for  pid=1587 comm="syz.2.297" path="/dev/uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   82.962712][ T1572] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   82.983661][   T28] audit: type=1400 audit(1725203065.169:212): avc:  denied  { ioctl } for  pid=1587 comm="syz.2.297" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   83.026964][  T313] hid (null): bogus close delimiter
[   83.637077][  T313] usb 1-1: language id specifier not provided by device, defaulting to English
[   83.757883][ T1617] xt_TCPMSS: Only works on TCP SYN packets
[   84.133412][  T313] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input6
[   84.146688][  T313] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input7
[   84.190598][  T313] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input8
[   84.210484][  T313] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0007/input/input9
[   84.230713][  T313] uclogic 0003:256C:006D.0007: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[   84.480788][ T1642] mmap: syz.1.308 (1642): VmData 17453056 exceed data ulimit 257. Update limits or use boot option ignore_rlimit_data.
[   84.506764][  T328] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   84.524930][ T1645] loop1: detected capacity change from 0 to 512
[   84.531351][ T1645] EXT4-fs: Ignoring removed oldalloc option
[   84.537645][ T1645] EXT4-fs (loop1): Test dummy encryption mode enabled
[   84.545661][ T1645] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.309: invalid block
[   84.556666][ T1645] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.309: couldn't read orphan inode 11 (err -117)
[   84.568607][ T1645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   84.906565][ T1651] syz.3.310 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   84.919554][   T28] audit: type=1400 audit(1725203067.139:213): avc:  denied  { write } for  pid=1650 comm="syz.3.310" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.941327][   T28] audit: type=1400 audit(1725203067.139:214): avc:  denied  { setattr } for  pid=1650 comm="syz.3.310" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   84.946938][  T328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.963037][   T28] audit: type=1400 audit(1725203067.159:215): avc:  denied  { unmount } for  pid=1521 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   84.972650][  T328] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   85.005205][  T328] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   85.014612][  T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.058458][  T328] usb 3-1: config 0 descriptor??
[   85.098123][  T328] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   85.186783][    C0] uclogic 0003:256C:006D.0007: usb_submit_urb(ctrl) failed: -1
[   85.246817][  T788] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[   85.260630][  T788] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5
[   85.303618][  T788] usb 5-1: USB disconnect, device number 5
[   85.309304][    C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   85.319241][ T1629] loop2: detected capacity change from 0 to 256
[   85.327056][   T28] audit: type=1400 audit(1725203067.549:216): avc:  denied  { watch } for  pid=1628 comm="syz.2.303" path="/63/file0/file1" dev="loop2" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   85.420956][ T1661] loop4: detected capacity change from 0 to 512
[   85.453951][  T293] EXT4-fs (loop1): unmounting filesystem.
[   85.454693][ T1661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   85.488745][ T1661] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff)
[   85.539208][ T1661] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.313: corrupted inode contents
[   85.557635][ T1661] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.313: mark_inode_dirty error
[   85.582514][ T1667] loop1: detected capacity change from 0 to 256
[   85.591322][ T1661] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.313: corrupted inode contents
[   85.607229][ T1661] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.313: mark_inode_dirty error
[   85.618704][ T1667] FAT-fs (loop1): Unrecognized mount option "" or missing value
[   86.097143][ T1677] loop0: detected capacity change from 0 to 2048
[   86.108336][ T1677] ext4: Unknown parameter 'obj_user'
[   86.217235][  T328] usb 1-1: USB disconnect, device number 2
[   86.579153][ T1680] xt_TCPMSS: Only works on TCP SYN packets
[   86.677927][  T295] EXT4-fs (loop4): unmounting filesystem.
[   86.776256][   T28] audit: type=1400 audit(1725203068.989:217): avc:  denied  { mounton } for  pid=1685 comm="syz.4.319" path="/52/file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   86.828142][   T28] audit: type=1400 audit(1725203069.049:218): avc:  denied  { write } for  pid=1685 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   87.298774][  T310] usb 3-1: USB disconnect, device number 5
[   87.317375][ T1701] loop3: detected capacity change from 0 to 256
[   87.346352][ T1704] capability: warning: `syz.2.324' uses deprecated v2 capabilities in a way that may be insecure
[   87.646540][ T1708] loop1: detected capacity change from 0 to 2048
[   87.668656][ T1708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   87.668658][ T1710] loop4: detected capacity change from 0 to 256
[   87.690288][ T1710] exfat: Bad value for 'uid'
[   87.756780][  T328] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   87.853160][ T1720] loop0: detected capacity change from 0 to 512
[   87.885601][ T1720] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.328: corrupted xattr block 255
[   87.897505][ T1720] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   87.905544][ T1720] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   87.914859][ T1720] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.328: corrupted xattr block 255
[   87.926926][ T1720] SELinux: (dev loop0, type ext4) getxattr errno 117
[   87.933898][ T1720] EXT4-fs (loop0): unmounting filesystem.
[   87.997911][ T1723] binder: 1722:1723 ioctl 4018620d 0 returned -22
[   88.064758][ T1726] cgroup: Unknown subsys name 'appraise_type'
[   88.116831][  T328] usb 4-1: no configurations
[   88.121262][  T328] usb 4-1: can't read configurations, error -22
[   88.276758][  T622] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   88.284108][  T328] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   88.479359][ T1731] loop2: detected capacity change from 0 to 256
[   88.721023][  T293] EXT4-fs (loop1): unmounting filesystem.
[   88.753273][ T1740] loop1: detected capacity change from 0 to 512
[   88.769864][ T1740] EXT4-fs: Ignoring removed bh option
[   88.778374][ T1740] EXT4-fs: dax option not supported
[   88.781057][  T328] usb 4-1: no configurations
[   88.789882][  T328] usb 4-1: can't read configurations, error -22
[   88.796183][  T328] usb usb4-port1: attempt power cycle
[   88.808642][ T1740] overlayfs: missing 'lowerdir'
[   88.815391][ T1740] loop1: detected capacity change from 0 to 512
[   88.896941][  T622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.916191][  T622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.927325][  T622] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   88.936286][  T622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.967591][  T505] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.984834][  T622] usb 1-1: config 0 descriptor??
[   89.106603][ T1743] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   89.115221][ T1743] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   89.226765][  T328] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   89.247431][ T1725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.255819][ T1725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.356844][  T328] usb 4-1: no configurations
[   89.361298][  T328] usb 4-1: can't read configurations, error -22
[   89.487000][  T622] hid (null): bogus close delimiter
[   89.516779][  T328] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   89.586694][ T1749] loop4: detected capacity change from 0 to 512
[   89.594919][ T1749] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.606623][ T1749] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[   89.618127][   T28] audit: type=1400 audit(1725203071.839:219): avc:  denied  { create } for  pid=1751 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.618636][ T1749] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.336: Corrupt directory, running e2fsck is recommended
[   89.639409][ T1752] FAULT_INJECTION: forcing a failure.
[   89.639409][ T1752] name failslab, interval 1, probability 0, space 0, times 0
[   89.651864][ T1749] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   89.663972][  T328] usb 4-1: no configurations
[   89.672043][ T1749] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.336: corrupted in-inode xattr
[   89.676266][  T328] usb 4-1: can't read configurations, error -22
[   89.687570][ T1752] CPU: 0 PID: 1752 Comm: syz.1.337 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0
[   89.694415][ T1749] EXT4-fs (loop4): Remounting filesystem read-only
[   89.703035][ T1752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   89.703056][ T1752] Call Trace:
[   89.703062][ T1752]  <TASK>
[   89.703068][ T1752]  dump_stack_lvl+0x151/0x1b7
[   89.703098][ T1752]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[   89.711732][  T328] usb usb4-port1: unable to enumerate USB device
[   89.719267][ T1752]  ? ptr_to_hashval+0x80/0x80
[   89.719300][ T1752]  dump_stack+0x15/0x1c
[   89.719314][ T1752]  should_fail_ex+0x3d0/0x520
[   89.719334][ T1752]  ? sidtab_sid2str_get+0x12b/0x2a0
[   89.719348][ T1752]  __should_failslab+0xaf/0xf0
[   89.722986][ T1749] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.336: couldn't read orphan inode 15 (err -117)
[   89.725170][ T1752]  should_failslab+0x9/0x20
[   89.725193][ T1752]  __kmem_cache_alloc_node+0x3d/0x250
[   89.732023][ T1749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   89.734972][ T1752]  ? audit_log_format+0x120/0x120
[   89.735000][ T1752]  ? sidtab_sid2str_get+0x12b/0x2a0
[   89.735015][ T1752]  __kmalloc_node_track_caller+0xa2/0x1e0
[   89.756816][ T1749] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.759187][ T1752]  kmemdup+0x29/0x60
[   89.764233][ T1749] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[   89.775331][ T1752]  sidtab_sid2str_get+0x12b/0x2a0
[   89.775358][ T1752]  security_sid_to_context_core+0x2b5/0x490
[   89.775377][ T1752]  security_sid_to_context+0x33/0x40
[   89.775394][ T1752]  avc_audit_post_callback+0x271/0xb20
[   89.775414][ T1752]  ? avc_audit_pre_callback+0x2b0/0x2b0
[   89.775433][ T1752]  ? avc_audit_pre_callback+0x2b0/0x2b0
[   89.780300][ T1749] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.336: Corrupt directory, running e2fsck is recommended
[   89.784876][ T1752]  common_lsm_audit+0xc0f/0x1940
[   89.784902][ T1752]  ? avc_audit_pre_callback+0x2b0/0x2b0
[   89.794364][ T1749] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.798418][ T1752]  ? ipv6_skb_to_auditdata+0xe90/0xe90
[   89.798446][ T1752]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   89.798468][ T1752]  ? avc_update_node+0x307/0xa80
[   89.803802][ T1749] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[   89.809012][ T1752]  slow_avc_audit+0x26c/0x3c0
[   89.809037][ T1752]  ? avc_get_hash_stats+0x180/0x180
[   89.809054][ T1752]  ? avc_has_perm_noaudit+0x2dd/0x430
[   89.809074][ T1752]  ? __kernel_text_address+0xd/0x40
[   89.809089][ T1752]  avc_has_perm+0x1f5/0x260
[   89.809107][ T1752]  ? avc_has_perm_noaudit+0x430/0x430
[   89.809124][ T1752]  ? kstrtoull+0x1cd/0x2e0
[   89.821217][ T1749] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.336: Corrupt directory, running e2fsck is recommended
[   89.824022][ T1752]  selinux_socket_sendmsg+0x243/0x340
[   89.824047][ T1752]  ? selinux_socket_accept+0x5b0/0x5b0
[   89.834663][ T1753] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.838863][ T1752]  ? kasan_set_track+0x4b/0x70
[   89.838887][ T1752]  ? kasan_save_free_info+0x2b/0x40
[   89.838904][ T1752]  security_socket_sendmsg+0x72/0xb0
[   89.838922][ T1752]  ____sys_sendmsg+0x541/0x9a0
[   89.845065][ T1753] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[   89.849714][ T1752]  ? __sys_sendmsg_sock+0x40/0x40
[   89.849741][ T1752]  __sys_sendmsg+0x2a9/0x390
[   89.849758][ T1752]  ? ____sys_sendmsg+0x9a0/0x9a0
[   89.855391][ T1753] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.336: Corrupt directory, running e2fsck is recommended
[   89.860388][ T1752]  ? __kasan_check_write+0x14/0x20
[   89.860407][ T1752]  ? mutex_unlock+0xb2/0x260
[   89.860428][ T1752]  ? __kasan_check_write+0x14/0x20
[   89.871423][ T1749] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.878357][ T1752]  ? __ia32_sys_read+0x90/0x90
[   89.878387][ T1752]  ? debug_smp_processor_id+0x17/0x20
[   89.878404][ T1752]  ? fpregs_assert_state_consistent+0xb6/0xe0
[   89.878421][ T1752]  __x64_sys_sendmsg+0x7f/0x90
[   89.886051][ T1749] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #2: block 3: comm syz.4.336: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[   89.888506][ T1752]  x64_sys_call+0x16a/0x9a0
[   89.888528][ T1752]  do_syscall_64+0x3b/0xb0
[   89.888541][ T1752]  ? clear_bhb_loop+0x55/0xb0
[   89.888559][ T1752]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   89.900641][ T1749] EXT4-fs (loop4): Remounting filesystem read-only
[   89.905085][ T1752] RIP: 0033:0x7f8a99f79eb9
[   89.905114][ T1752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.913551][ T1749] process 'syz.4.336' launched './file1' with NULL argv: empty string added
[   89.915717][ T1752] RSP: 002b:00007f8a9ae3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.915740][ T1752] RAX: ffffffffffffffda RBX: 00007f8a9a115f80 RCX: 00007f8a99f79eb9
[   89.966778][  T622] usb 1-1: string descriptor 0 read error: -71
[   89.971785][ T1752] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[   89.971802][ T1752] RBP: 00007f8a9ae3c090 R08: 0000000000000000 R09: 0000000000000000
[   89.971814][ T1752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.996836][  T622] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71
[   89.998170][ T1752] R13: 0000000000000000 R14: 00007f8a9a115f80 R15: 00007ffc8b819f78
[   89.998190][ T1752]  </TASK>
[   90.028867][   T28] audit: type=1400 audit(1725203071.859:220): avc:  denied  { write } for  pid=1751 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tsid=131 tclass=netlink_netfilter_socket permissive=1
[   90.032602][  T622] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71
[   90.091013][   T28] audit: type=1400 audit(1725203072.299:221): avc:  denied  { ioctl } for  pid=1754 comm="syz.2.338" path="socket:[20266]" dev="sockfs" ino=20266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   90.105922][  T622] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71
[   90.118296][   T28] audit: type=1400 audit(1725203072.339:222): avc:  denied  { create } for  pid=1754 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   90.168053][  T622] uclogic 0003:256C:006D.0008: failed probing parameters: -71
[   90.174854][   T28] audit: type=1400 audit(1725203072.339:223): avc:  denied  { read } for  pid=1754 comm="syz.2.338" path="socket:[20277]" dev="sockfs" ino=20277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   90.180348][  T622] uclogic: probe of 0003:256C:006D.0008 failed with error -71
[   90.357757][  T622] usb 1-1: USB disconnect, device number 3
[   90.388177][ T1766] binder: 1765:1766 ioctl 4018620d 0 returned -22
[   90.448800][ T1767] cgroup: Unknown subsys name 'appraise_type'
[   90.543195][  T328] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   90.823905][ T1773] loop3: detected capacity change from 0 to 2048
[   90.838009][ T1773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   90.906845][  T328] usb 5-1: config index 0 descriptor too short (expected 292, got 36)
[   90.914904][  T328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.925605][  T328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.928364][ T1777] loop2: detected capacity change from 0 to 256
[   90.935321][  T328] usb 5-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[   90.990152][ T1777] exfat: Bad value for 'uid'
[   91.050877][  T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.061423][  T328] usb 5-1: config 0 descriptor??
[   91.380945][ T1787] loop0: detected capacity change from 0 to 512
[   91.419233][ T1787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   91.428087][ T1787] ext4 filesystem being mounted at /71/bus supports timestamps until 2038 (0x7fffffff)
[   91.538382][  T328] wacom 0003:056A:00BB.0009: Unknown device_type for 'HID 056a:00bb'. Assuming pen.
[   91.549785][  T328] wacom 0003:056A:00BB.0009: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.4-1/input0
[   91.596575][  T328] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00BB.0009/input/input10
[   91.744876][ T1749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.795261][ T1749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.834580][ T1521] EXT4-fs (loop3): unmounting filesystem.
[   91.897813][ T1798] netlink: 'syz.1.349': attribute type 7 has an invalid length.
[   92.086828][  T397] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   92.229454][  T289] EXT4-fs (loop0): unmounting filesystem.
[   92.253254][ T1804] FAULT_INJECTION: forcing a failure.
[   92.253254][ T1804] name failslab, interval 1, probability 0, space 0, times 0
[   92.265741][ T1804] CPU: 0 PID: 1804 Comm: syz.0.351 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0
[   92.275131][ T1804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   92.285015][ T1804] Call Trace:
[   92.288138][ T1804]  <TASK>
[   92.290916][ T1804]  dump_stack_lvl+0x151/0x1b7
[   92.295427][ T1804]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[   92.300725][ T1804]  dump_stack+0x15/0x1c
[   92.304715][ T1804]  should_fail_ex+0x3d0/0x520
[   92.309314][ T1804]  ? tipc_nl_compat_doit+0x1a3/0x600
[   92.314435][ T1804]  __should_failslab+0xaf/0xf0
[   92.319039][ T1804]  should_failslab+0x9/0x20
[   92.323380][ T1804]  __kmem_cache_alloc_node+0x3d/0x250
[   92.323969][  T328] usb 5-1: USB disconnect, device number 6
[   92.328585][ T1804]  ? tipc_nl_compat_doit+0x1a3/0x600
[   92.328610][ T1804]  __kmalloc+0xa3/0x1e0
[   92.328630][ T1804]  tipc_nl_compat_doit+0x1a3/0x600
[   92.348287][ T1804]  ? arch_stack_walk+0xf3/0x140
[   92.352971][ T1804]  ? cap_capable+0x1d2/0x270
[   92.357400][ T1804]  ? tipc_nl_compat_bearer_enable+0x5f0/0x5f0
[   92.363301][ T1804]  ? ns_capable+0x89/0xe0
[   92.367467][ T1804]  tipc_nl_compat_recv+0x84a/0x13e0
[   92.372500][ T1804]  ? tipc_netlink_compat_stop+0x20/0x20
[   92.377881][ T1804]  ? tipc_nl_bearer_disable+0x30/0x30
[   92.383088][ T1804]  ? tipc_nl_compat_dumpit+0x770/0x770
[   92.388383][ T1804]  ? mutex_lock+0xb1/0x1e0
[   92.392637][ T1804]  ? genl_family_rcv_msg_attrs_parse+0x144/0x290
[   92.398801][ T1804]  genl_rcv_msg+0xc11/0xf70
[   92.403139][ T1804]  ? unwind_get_return_address+0x4d/0x90
[   92.408606][ T1804]  ? genl_bind+0x360/0x360
[   92.412857][ T1804]  ? stack_trace_save+0x113/0x1c0
[   92.417720][ T1804]  ? stack_trace_snprint+0xf0/0xf0
[   92.422666][ T1804]  ? __stack_depot_save+0x36/0x480
[   92.427611][ T1804]  ? kasan_set_track+0x4b/0x70
[   92.432214][ T1804]  ? down_read+0xeb7/0x1aa0
[   92.436557][ T1804]  ? kasan_set_track+0x4b/0x70
[   92.441152][ T1804]  ? __kasan_kmalloc+0x9c/0xb0
[   92.445751][ T1804]  ? __kmalloc_node_track_caller+0xb3/0x1e0
[   92.451480][ T1804]  ? tipc_netlink_compat_stop+0x20/0x20
[   92.456863][ T1804]  ? __down_common+0x690/0x690
[   92.461462][ T1804]  netlink_rcv_skb+0x1cd/0x410
[   92.466061][ T1804]  ? genl_bind+0x360/0x360
[   92.470315][ T1804]  ? netlink_ack+0x12a0/0x12a0
[   92.474917][ T1804]  ? __netlink_lookup+0x37b/0x3a0
[   92.479789][ T1804]  genl_rcv+0x28/0x40
[   92.483591][ T1804]  netlink_unicast+0x906/0xab0
[   92.488194][ T1804]  ? netlink_detachskb+0x90/0x90
[   92.492967][ T1804]  ? security_netlink_send+0x7b/0xa0
[   92.498089][ T1804]  netlink_sendmsg+0xa15/0xd30
[   92.502688][ T1804]  ? netlink_getsockopt+0x540/0x540
[   92.507723][ T1804]  ? security_socket_sendmsg+0x82/0xb0
[   92.513018][ T1804]  ? netlink_getsockopt+0x540/0x540
[   92.518049][ T1804]  ____sys_sendmsg+0x5d3/0x9a0
[   92.522649][ T1804]  ? __sys_sendmsg_sock+0x40/0x40
[   92.527511][ T1804]  __sys_sendmsg+0x2a9/0x390
[   92.531936][ T1804]  ? ____sys_sendmsg+0x9a0/0x9a0
[   92.536712][ T1804]  ? __kasan_check_write+0x14/0x20
[   92.541657][ T1804]  ? mutex_unlock+0xb2/0x260
[   92.546085][ T1804]  ? __kasan_check_write+0x14/0x20
[   92.551033][ T1804]  ? __ia32_sys_read+0x90/0x90
[   92.555631][ T1804]  ? debug_smp_processor_id+0x17/0x20
[   92.560837][ T1804]  ? fpregs_assert_state_consistent+0xb6/0xe0
[   92.566741][ T1804]  __x64_sys_sendmsg+0x7f/0x90
[   92.571340][ T1804]  x64_sys_call+0x16a/0x9a0
[   92.575765][ T1804]  do_syscall_64+0x3b/0xb0
[   92.580020][ T1804]  ? clear_bhb_loop+0x55/0xb0
[   92.584531][ T1804]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   92.590259][ T1804] RIP: 0033:0x7fc342d79eb9
[   92.594514][ T1804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.613957][ T1804] RSP: 002b:00007fc343be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.622202][ T1804] RAX: ffffffffffffffda RBX: 00007fc342f15f80 RCX: 00007fc342d79eb9
[   92.630015][ T1804] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005
[   92.637822][ T1804] RBP: 00007fc343be7090 R08: 0000000000000000 R09: 0000000000000000
[   92.645633][ T1804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.653444][ T1804] R13: 0000000000000000 R14: 00007fc342f15f80 R15: 00007ffea012f648
[   92.661261][ T1804]  </TASK>
[   92.674031][  T295] EXT4-fs (loop4): unmounting filesystem.
[   92.693150][ T1807] binder: 1806:1807 ioctl 4018620d 0 returned -22
[   92.704441][ T1811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.352'.
[   92.707134][   T28] audit: type=1400 audit(1725203074.919:224): avc:  denied  { append } for  pid=1808 comm="syz.3.354" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   92.736740][  T397] usb 3-1: device descriptor read/64, error -71
[   92.841457][ T1817] cgroup: Unknown subsys name 'appraise_type'
[   92.927730][ T1820] loop4: detected capacity change from 0 to 256
[   92.954007][ T1816] cgroup: Unknown subsys name 'appraise_type'
[   93.285225][ T1831] loop0: detected capacity change from 0 to 2048
[   93.308740][ T1831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   93.597353][ T1838] loop4: detected capacity change from 0 to 512
[   93.619224][ T1838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   93.633534][ T1838] ext4 filesystem being mounted at /58/bus supports timestamps until 2038 (0x7fffffff)
[   93.643247][   T28] audit: type=1400 audit(1725203075.859:225): avc:  denied  { setopt } for  pid=1842 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   93.646411][ T1843] fuse: blksize only supported for fuseblk
[   93.663424][  T397] usb 3-1: device descriptor read/64, error -71
[   94.008449][  T397] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   94.139986][  T289] EXT4-fs (loop0): unmounting filesystem.
[   94.161296][   T28] audit: type=1400 audit(1725203076.379:226): avc:  denied  { setopt } for  pid=1858 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   94.183393][   T28] audit: type=1400 audit(1725203076.399:227): avc:  denied  { setopt } for  pid=1858 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   94.203468][   T28] audit: type=1400 audit(1725203076.399:228): avc:  denied  { connect } for  pid=1858 comm="syz.3.366" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   94.277348][ T1860] capability: warning: `syz.0.365' uses 32-bit capabilities (legacy support in use)
[   94.306863][  T397] usb 3-1: device descriptor read/64, error -71
[   94.446961][  T295] EXT4-fs (loop4): unmounting filesystem.
[   94.466875][  T310] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   94.512871][ T1863] cgroup: Unknown subsys name 'appraise_type'
[   94.556776][  T328] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   94.579994][ T1867] binder: 1866:1867 ioctl 4018620d 0 returned -22
[   94.672010][ T1868] cgroup: Unknown subsys name 'appraise_type'
[   94.756805][  T397] usb 3-1: device descriptor read/64, error -71
[   94.790183][ T1873] loop1: detected capacity change from 0 to 256
[   94.796507][ T1873] exfat: Deprecated parameter 'utf8'
[   94.801667][ T1873] exfat: Unknown parameter 'er�o�s'
[   94.806847][  T310] usb 4-1: device descriptor read/64, error -71
[   94.847359][ T1875] syz.2.372[1875] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.847423][ T1875] syz.2.372[1875] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.860577][ T1877] loop2: detected capacity change from 0 to 512
[   94.887022][  T397] usb usb3-port1: attempt power cycle
[   94.955495][ T1883] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.966840][  T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.968752][  T800] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   94.980156][ T1883] loop1: detected capacity change from 0 to 256
[   94.995102][  T328] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   95.007041][   T28] audit: type=1400 audit(1725203077.229:229): avc:  denied  { create } for  pid=1889 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   95.031060][  T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.032182][ T1883] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa6c8c8ab, utbl_chksum : 0xe619d30d)
[   95.040014][  T328] usb 1-1: config 0 descriptor??
[   95.067309][ T1883] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005)
[   95.076261][ T1883] exFAT-fs (loop1): failed to initialize root inode
[   95.196798][  T310] usb 4-1: device descriptor read/64, error -71
[   95.212693][ T1881] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   95.226848][  T800] usb 5-1: Using ep0 maxpacket: 16
[   95.346763][  T800] usb 5-1: unable to get BOS descriptor or descriptor too short
[   95.357894][ T1890] loop2: detected capacity change from 0 to 40427
[   95.364667][ T1890] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   95.372391][ T1890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   95.383471][ T1890] F2FS-fs (loop2): Found nat_bits in checkpoint
[   95.416760][  T800] usb 5-1: unable to read config index 0 descriptor/start: -71
[   95.418278][ T1890] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   95.424222][  T800] usb 5-1: can't read configurations, error -71
[   95.431076][ T1890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   95.476745][  T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   95.756753][  T310] usb 4-1: device descriptor read/64, error -71
[   95.797945][ T1901] loop4: detected capacity change from 0 to 512
[   95.808511][ T1901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   95.817363][ T1901] ext4 filesystem being mounted at /61/bus supports timestamps until 2038 (0x7fffffff)
[   95.865681][   T28] audit: type=1326 audit(1725203078.079:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1889 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129a179eb9 code=0x7fc00000
[   95.989301][  T313] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   96.246754][  T310] usb 4-1: device descriptor read/64, error -71
[   96.269490][ T1905] loop2: detected capacity change from 0 to 40427
[   96.276256][ T1905] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   96.283913][ T1905] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   96.292563][ T1905] F2FS-fs (loop2): invalid crc value
[   96.298859][ T1905] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   96.316771][  T313] usb 2-1: Using ep0 maxpacket: 8
[   96.322476][ T1905] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[   96.329550][ T1905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   96.366831][  T310] usb usb4-port1: attempt power cycle
[   96.446845][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.458043][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.467658][  T313] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[   96.476583][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.492448][  T313] usb 2-1: config 0 descriptor??
[   96.668594][  T295] EXT4-fs (loop4): unmounting filesystem.
[   96.776758][  T310] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   96.789847][ T1916] cgroup: Unknown subsys name 'appraise_type'
[   96.956008][ T1918] binder: 1917:1918 ioctl 4018620d 0 returned -22
[   96.962654][  T310] usb 4-1: device descriptor read/8, error -71
[   96.970955][ T1920] loop4: detected capacity change from 0 to 512
[   96.978848][ T1920] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.979908][  T313] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0
[   96.985133][ T1920] EXT4-fs: Ignoring removed i_version option
[   97.000638][  T313] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0
[   97.001500][ T1920] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.382: invalid block
[   97.008280][  T313] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0
[   97.018801][ T1920] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.382: couldn't read orphan inode 11 (err -117)
[   97.026013][  T313] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0
[   97.037540][ T1920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   97.045321][  T313] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0
[   97.060670][ T1922] cgroup: Unknown subsys name 'appraise_type'
[   97.063787][  T313] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0
[   97.074362][  T313] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0
[   97.083198][  T313] playstation 0003:054C:0CE6.000A: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0
[   97.655906][ T1924] bridge0: port 3(vlan2) entered blocking state
[   97.662079][ T1924] bridge0: port 3(vlan2) entered disabled state
[   97.675719][ T1924] device vlan2 entered promiscuous mode
[   97.681170][ T1924] device xfrm0 entered promiscuous mode
[   97.688704][ T1924] bridge0: port 3(vlan2) entered blocking state
[   97.694778][ T1924] bridge0: port 3(vlan2) entered forwarding state
[   97.734744][   T28] audit: type=1400 audit(1725203079.839:231): avc:  denied  { ioctl } for  pid=1919 comm="syz.4.382" path="socket:[21095]" dev="sockfs" ino=21095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   97.771581][ T1929] loop3: detected capacity change from 0 to 512
[   97.796762][  T328] usbhid 1-1:0.0: can't add hid device: -71
[   97.796830][  T310] usb 4-1: device descriptor read/8, error -71
[   97.802673][  T328] usbhid: probe of 1-1:0.0 failed with error -71
[   97.818832][  T328] usb 1-1: USB disconnect, device number 4
[   97.821576][ T1899] loop1: detected capacity change from 0 to 256
[   97.836835][  T313] playstation 0003:054C:0CE6.000A: Invalid byte count transferred, expected 20 got 0
[   97.894716][  T313] playstation 0003:054C:0CE6.000A: Failed to retrieve DualSense pairing info: -22
[   97.897005][  T295] EXT4-fs (loop4): unmounting filesystem.
[   97.906542][  T313] playstation 0003:054C:0CE6.000A: Failed to get MAC address from DualSense
[   97.923246][  T313] playstation 0003:054C:0CE6.000A: Failed to create dualsense.
[   97.932606][  T313] playstation: probe of 0003:054C:0CE6.000A failed with error -22
[   97.963562][ T1929] serio: Serial port ptm0
[   98.272198][   T28] audit: type=1400 audit(1725203080.489:232): avc:  denied  { getopt } for  pid=1937 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.296779][  T328] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   98.317288][ T1942] loop2: detected capacity change from 0 to 512
[   98.323937][  T313] usb 2-1: USB disconnect, device number 5
[   98.327321][ T1942] EXT4-fs: Ignoring removed mblk_io_submit option
[   98.337077][ T1942] EXT4-fs: Ignoring removed i_version option
[   98.344495][ T1942] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.388: invalid block
[   98.355289][ T1942] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.388: couldn't read orphan inode 11 (err -117)
[   98.366992][ T1942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   98.469916][   T28] audit: type=1400 audit(1725203080.689:233): avc:  denied  { create } for  pid=1941 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   98.489230][   T28] audit: type=1400 audit(1725203080.709:234): avc:  denied  { setopt } for  pid=1941 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   98.508460][   T28] audit: type=1400 audit(1725203080.729:235): avc:  denied  { getopt } for  pid=1941 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   98.616790][  T310] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   98.686794][  T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.697652][  T328] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   98.706409][  T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.714918][  T328] usb 1-1: config 0 descriptor??
[   98.795581][ T1949] loop4: detected capacity change from 0 to 2048
[   98.802046][ T1949] EXT4-fs: Ignoring removed mblk_io_submit option
[   98.808366][ T1949] EXT4-fs: Ignoring removed mblk_io_submit option
[   98.814570][ T1949] EXT4-fs: Ignoring removed i_version option
[   98.828641][ T1949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   98.859874][ T1954] loop1: detected capacity change from 0 to 512
[   98.867179][  T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.884966][  T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.896590][ T1954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   98.897877][  T310] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   98.905761][ T1954] ext4 filesystem being mounted at /85/bus supports timestamps until 2038 (0x7fffffff)
[   98.914252][  T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.935327][  T310] usb 4-1: config 0 descriptor??
[   99.276902][   T28] audit: type=1400 audit(1725203081.259:236): avc:  denied  { read write } for  pid=1948 comm="syz.4.389" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   99.305220][  T294] EXT4-fs (loop2): unmounting filesystem.
[   99.324824][   T28] audit: type=1400 audit(1725203081.259:237): avc:  denied  { open } for  pid=1948 comm="syz.4.389" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   99.365047][  T328] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[   99.380764][  T328] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input13
[   99.494696][  T328] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   99.579990][ T1967] cgroup: Unknown subsys name 'appraise_type'
[   99.661268][ T1940] input: syz1 as /devices/virtual/input/input14
[   99.668528][  T295] EXT4-fs (loop4): unmounting filesystem.
[   99.713218][   T28] audit: type=1400 audit(1725203081.929:238): avc:  denied  { ioctl } for  pid=1969 comm="syz.4.393" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21227 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   99.740800][  T293] EXT4-fs (loop1): unmounting filesystem.
[   99.787030][  T310] usbhid 4-1:0.0: can't add hid device: -71
[   99.794657][  T310] usbhid: probe of 4-1:0.0 failed with error -71
[   99.805657][  T310] usb 4-1: USB disconnect, device number 10
[   99.949968][ T1980] loop2: detected capacity change from 0 to 40427
[   99.956581][ T1980] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   99.964563][ T1980] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   99.973372][ T1980] F2FS-fs (loop2): invalid crc value
[   99.979491][ T1980] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  100.000229][ T1980] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  100.007260][ T1980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  100.057729][  T328] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  100.320199][ T1388] usb 1-1: USB disconnect, device number 5
[  100.326749][  T328] usb 5-1: Using ep0 maxpacket: 16
[  100.346206][ T1990] loop3: detected capacity change from 0 to 512
[  100.377853][  T315] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  100.446780][  T328] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  100.466744][  T328] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  100.476189][  T328] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  100.490743][  T328] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  100.500562][  T328] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  100.510264][  T328] usb 5-1: config 1 interface 0 has no altsetting 0
[  100.517071][  T328] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  100.525974][  T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.533785][ T1990] serio: Serial port ptm0
[  100.578238][  T328] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  100.606151][ T1995] binder: 1994:1995 ioctl 4018620d 0 returned -22
[  100.666601][ T1998] cgroup: Unknown subsys name 'appraise_type'
[  100.753986][ T2000] loop2: detected capacity change from 0 to 256
[  100.782107][ T2000] exfat: Bad value for 'uid'
[  100.797597][  T328] scsi host1: usb-storage 5-1:1.0
[  100.907346][ T1388] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  101.045101][ T2012] xt_TCPMSS: Only works on TCP SYN packets
[  101.825842][   T28] audit: type=1400 audit(1725203083.339:239): avc:  denied  { sqpoll } for  pid=2010 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  101.856090][  T622] usb 5-1: USB disconnect, device number 9
[  101.861916][  T788] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  101.893809][ T2016] loop3: detected capacity change from 0 to 512
[  101.905506][  T540] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK
[  101.913545][   T28] audit: type=1400 audit(1725203083.339:240): avc:  denied  { map } for  pid=2010 comm="syz.3.402" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  101.925483][  T540] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK
[  101.946892][   T28] audit: type=1400 audit(1725203083.339:241): avc:  denied  { read write } for  pid=2010 comm="syz.3.402" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  101.975587][  T540] sd 1:0:0:0: [sdb] Sense not available.
[  101.981702][  T540] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  101.989246][  T540] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  101.995540][  T540] sd 1:0:0:0: [sdb] Write Protect is off
[  102.002058][ T2016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  102.011355][  T540] sd 1:0:0:0: [sdb] Asking for cache data failed
[  102.017985][ T2016] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff)
[  102.028082][  T540] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  102.109230][  T540] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  102.116830][ T1388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.132632][ T1388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.142469][ T1388] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  102.156754][  T397] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.163824][ T1388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.175683][  T505] udevd[505]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  102.216934][ T1388] usb 2-1: config 0 descriptor??
[  102.457659][  T505] udevd[505]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  102.464277][ T2029] FAULT_INJECTION: forcing a failure.
[  102.464277][ T2029] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  102.479700][ T2029] CPU: 0 PID: 2029 Comm: syz.4.406 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0
[  102.489169][ T2029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  102.499048][ T2029] Call Trace:
[  102.502172][ T2029]  <TASK>
[  102.504949][ T2029]  dump_stack_lvl+0x151/0x1b7
[  102.509462][ T2029]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  102.514755][ T2029]  ? kstrtoull+0x1cd/0x2e0
[  102.519008][ T2029]  dump_stack+0x15/0x1c
[  102.523001][ T2029]  should_fail_ex+0x3d0/0x520
[  102.527513][ T2029]  should_fail+0xb/0x10
[  102.531505][ T2029]  should_fail_usercopy+0x1a/0x20
[  102.536366][ T2029]  _copy_from_user+0x1e/0xc0
[  102.540794][ T2029]  do_ip6t_set_ctl+0x720/0x1250
[  102.545482][ T2029]  ? ip6t_unregister_table_exit+0x220/0x220
[  102.551221][ T2029]  ? avc_has_perm+0x16f/0x260
[  102.555725][ T2029]  ? __kasan_check_write+0x14/0x20
[  102.560671][ T2029]  ? mutex_unlock+0xb2/0x260
[  102.565097][ T2029]  ? proc_fail_nth_read+0x210/0x210
[  102.570130][ T2029]  ? __mutex_lock_slowpath+0x10/0x10
[  102.575250][ T2029]  ? selinux_socket_setsockopt+0x260/0x360
[  102.580891][ T2029]  ? try_module_get+0x12a/0x290
[  102.585577][ T2029]  nf_setsockopt+0x274/0x2a0
[  102.590004][ T2029]  ipv6_setsockopt+0x161/0x1a0
[  102.594607][ T2029]  udpv6_setsockopt+0x8c/0xa0
[  102.599117][ T2029]  sock_common_setsockopt+0xa2/0xc0
[  102.604150][ T2029]  ? sock_common_recvmsg+0x240/0x240
[  102.609270][ T2029]  __sys_setsockopt+0x4dc/0x8b0
[  102.613958][ T2029]  ? fput+0x15b/0x1b0
[  102.617778][ T2029]  ? __ia32_sys_recv+0xb0/0xb0
[  102.622379][ T2029]  ? debug_smp_processor_id+0x17/0x20
[  102.627585][ T2029]  __x64_sys_setsockopt+0xbf/0xd0
[  102.632446][ T2029]  x64_sys_call+0x1a2/0x9a0
[  102.636787][ T2029]  do_syscall_64+0x3b/0xb0
[  102.641036][ T2029]  ? clear_bhb_loop+0x55/0xb0
[  102.645550][ T2029]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.651278][ T2029] RIP: 0033:0x7f0a4d979eb9
[  102.655534][ T2029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.674973][ T2029] RSP: 002b:00007f0a4e84b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  102.683305][ T2029] RAX: ffffffffffffffda RBX: 00007f0a4db15f80 RCX: 00007f0a4d979eb9
[  102.691118][ T2029] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  102.698930][ T2029] RBP: 00007f0a4e84b090 R08: 0000000000000060 R09: 0000000000000000
[  102.706825][ T2029] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000001
[  102.714636][ T2029] R13: 0000000000000000 R14: 00007f0a4db15f80 R15: 00007ffef573e3e8
[  102.722463][ T2029]  </TASK>
[  102.748798][ T2030] cgroup: Unknown subsys name 'appraise_type'
[  102.765473][ T1521] EXT4-fs (loop3): unmounting filesystem.
[  102.788888][ T2034] loop3: detected capacity change from 0 to 512
[  102.791462][ T2032] loop4: detected capacity change from 0 to 512
[  102.830456][  T505] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.846220][ T2035] loop4: detected capacity change from 0 to 512
[  102.846248][  T505] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.861864][  T505] Buffer I/O error on dev loop4, logical block 0, async page read
[  102.924143][ T2034] serio: Serial port ptm0
[  103.017932][  T397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.040274][  T397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.051553][  T397] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  103.062177][  T397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.066757][ T1388] usbhid 2-1:0.0: can't add hid device: -71
[  103.080914][ T1388] usbhid: probe of 2-1:0.0 failed with error -71
[  103.081053][  T397] usb 1-1: config 0 descriptor??
[  103.088091][ T1388] usb 2-1: USB disconnect, device number 6
[  103.197853][ T2048] loop4: detected capacity change from 0 to 512
[  103.216967][ T2048] EXT4-fs: Ignoring removed orlov option
[  103.224338][ T2048] EXT4-fs (loop4): 1 truncate cleaned up
[  103.230188][ T2048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  103.541819][   T28] audit: type=1326 audit(1725203085.759:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.4.412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4d979eb9 code=0x0
[  103.797973][  T397] logitech-hidpp-device 0003:046D:C086.000C: item fetching failed at offset 2/5
[  103.807131][  T397] logitech-hidpp-device 0003:046D:C086.000C: hidpp_probe:parse failed
[  103.815127][  T397] logitech-hidpp-device: probe of 0003:046D:C086.000C failed with error -22
[  103.941605][ T2060] cgroup: Unknown subsys name 'appraise_type'
[  104.003898][  T310] usb 1-1: USB disconnect, device number 6
[  104.026756][ T1388] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  104.075656][  T295] EXT4-fs (loop4): unmounting filesystem.
[  104.082642][ T2062] loop2: detected capacity change from 0 to 2048
[  104.089785][ T2062] ext4: Unknown parameter 'obj_user'
[  104.201567][ T2066] loop3: detected capacity change from 0 to 512
[  104.208009][ T2066] EXT4-fs: Ignoring removed oldalloc option
[  104.214142][ T2066] EXT4-fs (loop3): Test dummy encryption mode enabled
[  104.230346][ T2066] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.417: invalid block
[  104.241812][ T2066] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.417: couldn't read orphan inode 11 (err -117)
[  104.254804][ T2066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  104.337823][ T2069] xt_TCPMSS: Only works on TCP SYN packets
[  104.476795][ T1388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.487570][ T1388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.497071][ T1388] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  104.505891][ T1388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.514515][ T1388] usb 2-1: config 0 descriptor??
[  104.725320][ T2073] loop0: detected capacity change from 0 to 512
[  104.765939][ T1675] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  104.778241][ T2073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  104.787127][ T2073] ext4 filesystem being mounted at /81/bus supports timestamps until 2038 (0x7fffffff)
[  105.167940][ T1388] hid (null): bogus close delimiter
[  105.192051][ T1521] EXT4-fs (loop3): unmounting filesystem.
[  105.288466][ T2080] loop2: detected capacity change from 0 to 256
[  105.313575][ T2082] loop3: detected capacity change from 0 to 512
[  105.376797][ T1388] usb 2-1: language id specifier not provided by device, defaulting to English
[  105.395139][ T2082] serio: Serial port ptm0
[  105.670357][  T289] EXT4-fs (loop0): unmounting filesystem.
[  105.776823][ T1675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.788340][ T1675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.789045][ T2091] cgroup: Unknown subsys name 'appraise_type'
[  105.798401][ T1675] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  105.812927][ T1675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.821854][ T1675] usb 5-1: config 0 descriptor??
[  106.126827][ T1388] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #100: -71
[  106.135585][ T1388] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71
[  106.143823][ T1388] uclogic 0003:256C:006D.000D: failed probing pen v1 parameters: -71
[  106.152082][ T1388] uclogic 0003:256C:006D.000D: failed probing parameters: -71
[  106.159636][ T1388] uclogic: probe of 0003:256C:006D.000D failed with error -71
[  106.169458][ T1388] usb 2-1: USB disconnect, device number 7
[  106.175791][ T2097] xt_l2tp: invalid flags combination: 0
[  106.181805][ T1675] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor
[  106.183214][ T2097] loop2: detected capacity change from 0 to 256
[  106.191594][ T1675] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input15
[  106.210209][ T2097] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  106.287211][  T310] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  106.297467][ T1675] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v73.1e Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  106.441351][ T1675] usb 5-1: USB disconnect, device number 10
[  106.453173][ T2104] binder: 2103:2104 ioctl 4018620d 0 returned -22
[  106.513829][ T2105] cgroup: Unknown subsys name 'appraise_type'
[  106.591900][ T2109] loop0: detected capacity change from 0 to 128
[  106.598755][ T2109] FAT-fs (loop0): Unrecognized mount option "^�Фo�t�Ծݶ#�)���:��![�7
�i\o
�"܉-����aboSW�$�=���i����]
I�Z�f�@^��N!����đ���^�M�`��O�����2	�\���0)�f��y-��Y7�~����S�rbto����@�$���c"��߂}]��[�%�nQ�>�-;�_�g�[~b^|��IKR�0 f���}�ZAW��;���H" or missing value
[  106.638035][   T28] audit: type=1400 audit(1725203088.859:243): avc:  denied  { getopt } for  pid=2110 comm="syz.1.428" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.675900][ T2113] loop1: detected capacity change from 0 to 256
[  106.697329][ T2113] exfat: Bad value for 'uid'
[  106.776771][  T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.788563][  T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.799212][  T310] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  106.808147][  T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.840850][  T310] usb 4-1: config 0 descriptor??
[  106.853635][ T2118] loop1: detected capacity change from 0 to 512
[  106.862373][ T2118] EXT4-fs: Ignoring removed oldalloc option
[  106.878189][ T2118] EXT4-fs (loop1): Test dummy encryption mode enabled
[  106.879907][ T2120] loop4: detected capacity change from 0 to 2048
[  106.899088][ T2118] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.430: invalid block
[  106.911828][ T2118] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.430: couldn't read orphan inode 11 (err -117)
[  106.923836][ T2118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  106.953034][ T2120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  106.977477][   T28] audit: type=1400 audit(1725203089.199:244): avc:  denied  { read write } for  pid=2119 comm="syz.4.431" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  107.003899][   T28] audit: type=1400 audit(1725203089.219:245): avc:  denied  { open } for  pid=2119 comm="syz.4.431" path="/74/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  107.454022][   T28] audit: type=1400 audit(1725203089.669:246): avc:  denied  { create } for  pid=2119 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  107.475071][  T310] samsung 0003:0419:0600.000F: unknown main item tag 0x0
[  107.485746][ T2132] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  107.501141][  T310] samsung 0003:0419:0600.000F: unknown main item tag 0x0
[  107.508255][  T310] samsung 0003:0419:0600.000F: unknown main item tag 0x0
[  107.515295][ T2132] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  107.527861][  T310] samsung 0003:0419:0600.000F: unknown main item tag 0x0
[  107.534769][  T310] samsung 0003:0419:0600.000F: unknown main item tag 0x0
[  107.542017][ T2132] EXT4-fs (loop4): This should not happen!! Data will be lost
[  107.542017][ T2132] 
[  107.555747][  T310] samsung 0003:0419:0600.000F: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0
[  107.567122][ T2132] EXT4-fs (loop4): Total free blocks count 0
[  107.578931][ T2132] EXT4-fs (loop4): Free/Dirty block details
[  107.584713][ T2132] EXT4-fs (loop4): free_blocks=2415919104
[  107.590551][ T2132] EXT4-fs (loop4): dirty_blocks=64
[  107.595535][ T2132] EXT4-fs (loop4): Block reservation details
[  107.601619][ T2132] EXT4-fs (loop4): i_reserved_data_blocks=4
[  107.681273][  T328] usb 4-1: USB disconnect, device number 11
[  107.716460][  T293] EXT4-fs (loop1): unmounting filesystem.
[  107.773683][ T1067] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  107.798035][ T2141] cgroup: Unknown subsys name 'appraise_type'
[  107.818935][   T28] audit: type=1400 audit(1725203090.039:247): avc:  denied  { read } for  pid=2144 comm="syz.4.435" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  107.851399][   T28] audit: type=1400 audit(1725203090.039:248): avc:  denied  { open } for  pid=2144 comm="syz.4.435" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  107.876347][   T28] audit: type=1400 audit(1725203090.039:249): avc:  denied  { ioctl } for  pid=2144 comm="syz.4.435" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  107.949902][ T2154] loop4: detected capacity change from 0 to 2048
[  107.956586][ T2154] ext4: Unknown parameter 'obj_user'
[  108.038077][ T2156] loop0: detected capacity change from 0 to 256
[  108.044632][ T2156] exfat: Bad value for 'uid'
[  108.188752][ T2162] xt_TCPMSS: Only works on TCP SYN packets
[  108.424009][ T2165] binder: 2164:2165 ioctl 4018620d 0 returned -22
[  108.445662][ T2167] loop3: detected capacity change from 0 to 256
[  108.457232][ T2167] exfat: Bad value for 'uid'
[  108.503354][ T2172] cgroup: Unknown subsys name 'appraise_type'
[  108.584695][ T2167] loop3: detected capacity change from 0 to 512
[  108.591016][ T2167] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  108.599220][ T2174] loop0: detected capacity change from 0 to 256
[  108.605538][ T2174] exfat: Bad value for 'uid'
[  108.815698][ T2183] loop3: detected capacity change from 0 to 128
[  108.818873][ T2187] loop4: detected capacity change from 0 to 512
[  108.832933][   T28] audit: type=1326 audit(1725203091.049:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2170 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99f79eb9 code=0x7ffc0000
[  108.857055][ T2187] EXT4-fs: Ignoring removed oldalloc option
[  108.867391][ T2183] EXT4-fs (loop3): Test dummy encryption mode enabled
[  108.868780][ T2187] EXT4-fs (loop4): Test dummy encryption mode enabled
[  108.891156][   T28] audit: type=1326 audit(1725203091.049:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2170 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f8a99f79eb9 code=0x7ffc0000
[  108.917309][ T2183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  108.918422][ T2187] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.448: invalid block
[  108.926973][   T28] audit: type=1326 audit(1725203091.049:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2170 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99f79eb9 code=0x7ffc0000
[  108.952405][ T2187] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.448: couldn't read orphan inode 11 (err -117)
[  108.960483][   T28] audit: type=1326 audit(1725203091.059:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2170 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a99f79eb9 code=0x7ffc0000
[  108.970997][ T2183] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038 (0x7fffffff)
[  109.003869][ T2187] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  109.288022][  T295] EXT4-fs (loop4): unmounting filesystem.
[  109.686925][ T2206] loop1: detected capacity change from 0 to 512
[  109.712151][ T2206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  109.721339][ T2206] ext4 filesystem being mounted at /96/bus supports timestamps until 2038 (0x7fffffff)
[  109.805419][ T1521] EXT4-fs (loop3): unmounting filesystem.
[  109.826837][  T310] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  109.830969][ T2214] loop3: detected capacity change from 0 to 256
[  111.781057][ T2214] exfat: Bad value for 'uid'
[  111.790546][  T293] EXT4-fs (loop1): unmounting filesystem.
[  111.797487][ T2221] loop2: detected capacity change from 0 to 256
[  111.805170][ T2221] exfat: Bad value for 'uid'
[  111.839048][ T2227] loop1: detected capacity change from 0 to 2048
[  111.845464][ T2227] ext4: Unknown parameter 'obj_user'
[  112.072023][ T2232] xt_TCPMSS: Only works on TCP SYN packets
[  112.161120][ T2234] loop2: detected capacity change from 0 to 256
[  112.399098][  T310] usb 5-1: unable to read config index 0 descriptor/all
[  113.261762][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  113.261788][   T28] audit: type=1400 audit(1725203095.429:257): avc:  denied  { bind } for  pid=2236 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  113.379087][  T310] usb 5-1: can't read configurations, error -71
[  113.389579][   T28] audit: type=1400 audit(1725203095.429:258): avc:  denied  { listen } for  pid=2236 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  113.427960][   T28] audit: type=1400 audit(1725203095.439:259): avc:  denied  { write } for  pid=2236 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  113.474503][ T2252] loop3: detected capacity change from 0 to 1024
[  113.484338][ T2255] loop1: detected capacity change from 0 to 512
[  113.652815][ T2255] EXT4-fs: Ignoring removed oldalloc option
[  113.751124][ T2255] EXT4-fs (loop1): Test dummy encryption mode enabled
[  113.758640][ T2252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  113.774185][ T2255] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.466: invalid block
[  113.785205][ T2255] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.466: couldn't read orphan inode 11 (err -117)
[  114.116861][ T2255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  114.353495][ T1521] EXT4-fs (loop3): unmounting filesystem.
[  114.360875][ T2267] FAULT_INJECTION: forcing a failure.
[  114.360875][ T2267] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.370611][ T2251] loop0: detected capacity change from 0 to 40427
[  114.381002][ T2267] CPU: 0 PID: 2267 Comm: syz.2.468 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0
[  114.384485][ T2251] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  114.390445][ T2267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  114.390457][ T2267] Call Trace:
[  114.390462][ T2267]  <TASK>
[  114.390468][ T2267]  dump_stack_lvl+0x151/0x1b7
[  114.390489][ T2267]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  114.390501][ T2267]  ? module_put+0xeb/0x220
[  114.390520][ T2267]  dump_stack+0x15/0x1c
[  114.397461][ T2251] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  114.406598][ T2267]  should_fail_ex+0x3d0/0x520
[  114.406629][ T2267]  should_fail+0xb/0x10
[  114.406646][ T2267]  should_fail_usercopy+0x1a/0x20
[  114.406663][ T2267]  _copy_to_user+0x1e/0x90
[  114.406681][ T2267]  simple_read_from_buffer+0xc7/0x150
[  114.406701][ T2267]  proc_fail_nth_read+0x1a3/0x210
[  114.406718][ T2267]  ? proc_fault_inject_write+0x390/0x390
[  114.406735][ T2267]  ? fsnotify_perm+0x470/0x5d0
[  114.406750][ T2267]  ? security_file_permission+0x86/0xb0
[  114.406763][ T2267]  ? proc_fault_inject_write+0x390/0x390
[  114.406782][ T2267]  vfs_read+0x26c/0xad0
[  114.406800][ T2267]  ? __kasan_check_write+0x14/0x20
[  114.406814][ T2267]  ? kernel_read+0x1f0/0x1f0
[  114.406838][ T2267]  ? mutex_lock+0xb1/0x1e0
[  114.406856][ T2267]  ? bit_wait_io_timeout+0x120/0x120
[  114.406875][ T2267]  ? __fdget_pos+0x2e2/0x390
[  114.444740][ T2271] loop3: detected capacity change from 0 to 256
[  114.447276][ T2267]  ? ksys_read+0x77/0x2c0
[  114.447305][ T2267]  ksys_read+0x199/0x2c0
[  114.447324][ T2267]  ? vfs_write+0xeb0/0xeb0
[  114.458106][ T2271] exfat: Bad value for 'uid'
[  114.461597][ T2267]  ? debug_smp_processor_id+0x17/0x20
[  114.461623][ T2267]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  114.467680][ T2251] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  114.471924][ T2267]  __x64_sys_read+0x7b/0x90
[  114.494396][ T2251] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  114.496315][ T2267]  x64_sys_call+0x28/0x9a0
[  114.500890][ T2251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  114.504992][ T2267]  do_syscall_64+0x3b/0xb0
[  114.505011][ T2267]  ? clear_bhb_loop+0x55/0xb0
[  114.591141][ T2267]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  114.596820][ T2267] RIP: 0033:0x7f129a1788fc
[  114.601070][ T2267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  114.620512][ T2267] RSP: 002b:00007f1299fff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  114.628755][ T2267] RAX: ffffffffffffffda RBX: 00007f129a315f80 RCX: 00007f129a1788fc
[  114.636565][ T2267] RDX: 000000000000000f RSI: 00007f1299fff0a0 RDI: 0000000000000004
[  114.644379][ T2267] RBP: 00007f1299fff090 R08: 0000000000000000 R09: 0000000000000000
[  114.652190][ T2267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  114.660001][ T2267] R13: 0000000000000000 R14: 00007f129a315f80 R15: 00007fffe1ff94a8
[  114.667815][ T2267]  </TASK>
[  114.750298][ T2277] overlayfs: failed to resolve './file0': -2
[  114.770468][ T2277] syz.0.465: attempt to access beyond end of device
[  114.770468][ T2277] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  114.770494][ T2280] loop4: detected capacity change from 0 to 512
[  114.784682][ T2277] syz.0.465: attempt to access beyond end of device
[  114.784682][ T2277] loop0: rw=2049, sector=53256, nr_sectors = 8 limit=40427
[  114.851318][ T2280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  115.130902][ T2280] ext4 filesystem being mounted at /81/bus supports timestamps until 2038 (0x7fffffff)
[  115.189956][  T293] EXT4-fs (loop1): unmounting filesystem.
[  115.366813][ T1388] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  115.644210][  T295] EXT4-fs (loop4): unmounting filesystem.
[  115.681477][   T28] audit: type=1400 audit(1725203097.899:260): avc:  denied  { read } for  pid=2296 comm="syz.4.474" path="socket:[22241]" dev="sockfs" ino=22241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  115.709308][ T2294] loop3: detected capacity change from 0 to 40427
[  115.715960][  T289] syz-executor: attempt to access beyond end of device
[  115.715960][  T289] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  115.731211][ T2294] F2FS-fs (loop3): Image doesn't support compression
[  115.737956][ T2294] ================================================================================
[  115.747354][ T2294] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:911:5
[  115.754166][ T2294] shift exponent 169 is too large for 64-bit type 'unsigned long'
[  115.762573][ T2294] CPU: 1 PID: 2294 Comm: syz.3.473 Not tainted 6.1.93-syzkaller-00068-gb5e374dda921 #0
[  115.772022][ T2294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  115.782010][ T2294] Call Trace:
[  115.785125][ T2294]  <TASK>
[  115.787913][ T2294]  dump_stack_lvl+0x151/0x1b7
[  115.792417][ T2294]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  115.797730][ T2294]  dump_stack+0x15/0x1c
[  115.801794][ T2294]  __ubsan_handle_shift_out_of_bounds+0x3e1/0x440
[  115.808053][ T2294]  parse_options+0x4b90/0x4ba0
[  115.812638][ T2294]  ? mount_bdev+0x282/0x3b0
[  115.816974][ T2294]  ? f2fs_mount+0x34/0x40
[  115.821147][ T2294]  ? default_options+0xc80/0xc80
[  115.825917][ T2294]  ? kstrdup+0x54/0x70
[  115.829821][ T2294]  ? memcpy+0x56/0x70
[  115.833640][ T2294]  f2fs_fill_super+0x23bc/0x6dc0
[  115.838421][ T2294]  ? kill_f2fs_super+0x3c0/0x3c0
[  115.843184][ T2294]  ? set_blocksize+0x1cb/0x360
[  115.847789][ T2294]  ? sb_set_blocksize+0xa8/0xf0
[  115.852473][ T2294]  mount_bdev+0x282/0x3b0
[  115.856638][ T2294]  ? kill_f2fs_super+0x3c0/0x3c0
[  115.861411][ T2294]  f2fs_mount+0x34/0x40
[  115.865403][ T2294]  legacy_get_tree+0xf1/0x190
[  115.869915][ T2294]  ? trace_raw_output_f2fs__rw_end+0x110/0x110
[  115.875908][ T2294]  vfs_get_tree+0x88/0x290
[  115.880162][ T2294]  do_new_mount+0x2ba/0xb30
[  115.884506][ T2294]  ? do_move_mount_old+0x160/0x160
[  115.889445][ T2294]  ? security_capable+0x87/0xb0
[  115.894142][ T2294]  ? ns_capable+0x89/0xe0
[  115.898301][ T2294]  path_mount+0x671/0x1070
[  115.902549][ T2294]  ? user_path_at_empty+0x14e/0x1a0
[  115.907587][ T2294]  __se_sys_mount+0x2c4/0x3b0
[  115.912101][ T2294]  ? __x64_sys_mount+0xd0/0xd0
[  115.916700][ T2294]  ? debug_smp_processor_id+0x17/0x20
[  115.921907][ T2294]  __x64_sys_mount+0xbf/0xd0
[  115.926332][ T2294]  x64_sys_call+0x49d/0x9a0
[  115.930673][ T2294]  do_syscall_64+0x3b/0xb0
[  115.934923][ T2294]  ? clear_bhb_loop+0x55/0xb0
[  115.939440][ T2294]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.945167][ T2294] RIP: 0033:0x7fdfc217b65a
[  115.949420][ T2294] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.968861][ T2294] RSP: 002b:00007fdfc2ea9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  115.977105][ T2294] RAX: ffffffffffffffda RBX: 00007fdfc2ea9ef0 RCX: 00007fdfc217b65a
[  115.984916][ T2294] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 00007fdfc2ea9eb0
[  115.992731][ T2294] RBP: 0000000020000040 R08: 00007fdfc2ea9ef0 R09: 0000000000000000
[  116.000539][ T2294] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0
[  116.008350][ T2294] R13: 00007fdfc2ea9eb0 R14: 00000000000054f9 R15: 0000000020000bc0
[  116.016166][ T2294]  </TASK>
[  116.019327][ T2294] ================================================================================
[  116.029336][ T2294] F2FS-fs (loop3): Not support 2199023255552, larger than 256
[  116.056816][ T1388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.067568][ T1388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.077457][ T1388] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  116.086355][ T1388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.097848][ T1388] usb 3-1: config 0 descriptor??
[  116.546869][  T328] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  116.626792][ T1388] usbhid 3-1:0.0: can't add hid device: -71
[  116.632529][ T1388] usbhid: probe of 3-1:0.0 failed with error -71
[  116.639618][ T1388] usb 3-1: USB disconnect, device number 9
[  116.786773][  T328] usb 4-1: Invalid ep0 maxpacket: 16
[  116.936759][  T328] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  117.176760][  T328] usb 4-1: Invalid ep0 maxpacket: 16
[  117.181914][  T328] usb usb4-port1: attempt power cycle
[  117.596764][  T328] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[  117.686835][  T328] usb 4-1: Invalid ep0 maxpacket: 16
[  117.846761][  T328] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[  117.956796][  T328] usb 4-1: Invalid ep0 maxpacket: 16
[  117.961980][  T328] usb usb4-port1: unable to enumerate USB device