last executing test programs:

40.141749525s ago: executing program 0 (id=1938):
unshare(0x20040600)
socket$inet6(0xa, 0x802, 0x88)
chdir(0x0)
unshare(0x24000800)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141842, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x8000000})

39.285801492s ago: executing program 0 (id=1942):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TIOCGISO7816(r0, 0x5453, 0x0)

38.92729379s ago: executing program 0 (id=1944):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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")
r0 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfd14)
sendfile(r0, r0, 0x0, 0x100e00000)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r3, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200), 0x0, 0x40040}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = syz_usb_connect(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000100)={{0x0, 0x1}, {}, 0x0, 0x2, 0x4})

35.45644919s ago: executing program 0 (id=1952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x48080)

34.91698999s ago: executing program 0 (id=1953):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b00010000"], 0x80}}, 0x0)
syz_usb_connect(0x1, 0x556, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x2c, 0xd7, 0x6c, 0x40, 0x1bc7, 0x1073, 0x2330, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x544, 0x4, 0x1, 0x77, 0x40, 0x0, [{{0x9, 0x4, 0x30, 0x9, 0x2, 0xff, 0x7b, 0xa1, 0x9, [@hid_hid={0x9, 0x21, 0xe, 0x31, 0x1, {0x22, 0x5f8}}], [{{0x9, 0x5, 0x0, 0x8, 0x20, 0x5, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}, @generic={0x12, 0x21, "3f71de19a026f7bc4bcbac7e975195cb"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x8, 0x8, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}, @generic={0x18, 0x3, "055ea76f611e683cccb6a03bd357b0a5a2fab726a280"}]}}]}}, {{0x9, 0x4, 0x6, 0x6, 0xb, 0x90, 0xa6, 0xcb, 0xff, [], [{{0x9, 0x5, 0xb, 0x10, 0x20, 0x8, 0x8c, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x428, 0x80, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x1}, @generic={0x80, 0x23, "bf1b5738231c14b64be52c9df91342bf90536b2f2ea3c6ffabb4639957fc9ba0d7e2b2f46506e1a4cea1019ee0f8a842f0790d0451ea04fa60b007faa3a7ccaf3fd7fb129a25e8bf5e1d7705753d5d2bfd4cf9882c003f4984a98a2712172a50d6af2beadfe0bc47a2e155d5c30d940affacaf203b3deb9ab56a4ae9fe0e"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x2, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x3, 0x3}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x1, 0x72, 0xf2}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x0, 0x5, 0x8}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x7f, 0x7, 0xd}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x2, 0x40, 0x5}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x8, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x64, 0xe}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0xae, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xbe, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x28, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x3}]}}]}}, {{0x9, 0x4, 0x7d, 0xc, 0x6, 0xe, 0x1, 0x0, 0x25, [@hid_hid={0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x8c4}}], [{{0x9, 0x5, 0x4, 0xc, 0x10, 0x81, 0x6, 0xa9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x10, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xe00}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x3, 0x3, 0x3, [@generic={0xc6, 0xe, "67e443814ac224d820d4112638a5c8d944b8ae96fa2e6dfe465b8cf45a64904ee2c46a20c03ef5e350aaa6fc7266b13a1fe192026d100869c086ecb1dfde0066477dc05fb94fcd6c86935ab6ff416311575d8544f18a10fab827728198acfcaac1fd497d00d419be5af9275eff2430fc875920eea61647a2bd4faa1ccd2179e5ec2bb988328e7db37adcb99feb53c964f3868bb872ef6695b1d746e8fe2c899633dc3f07c9cb0389b07098f8117c8b918dd176eadecfaa79da8d27936f4cfb79f0595a3c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0xa, 0xc, 0x90, [@generic={0x64, 0x42, "27f9dfd770740a51b1061c6c3f7b46375f02b8c5ae594044962ffb99a83e03d8f956f897e03fca932b1bc823b15a282c507df8cc62fe892ed7a86fb9b7ea2f10e85a3f14afdb96762bd03197219d36629c40219eaae5bdcc89109b99bbac2f3f7ede"}, @generic={0x31, 0xc, "6d5d179ee9e30afb6b1c515091209a2cae0573832769d87ce9a1267f7cf9d58010eb7a6e9812a81212cfe761f54673"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x5, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x10}]}}]}}, {{0x9, 0x4, 0x14, 0xf8, 0x5, 0xfc, 0x79, 0x16, 0x9, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x7f, 0x8, 0x0, [@generic={0x7e, 0xd, "6cbbbf0ef6ea8a94c12a8b4852aec97e48bee468aa1abfa3e16d268a5bd95032dfa3427b47b0cfa2c8305bb138a4ab8d419a93c35254436aaf2531751a4713cde79cd346b84029fba2ab637c7f7f55b8537a7a17251fc8ca0eb831df9a128d1b5e6c6e7475467bc371db01ba85be821413820029479a001cf9055eee"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x3, 0x40, 0x1b, [@generic={0xcf, 0xf, "490490cb34c1b637f47c963791e0f1e03fccac5ad6f723e927b097f222fb4d02f2264bb6b84aea5e22a54a60a82d41b06e751afb6f0c031b9472e4699b7630aa7d9349f38759f61373179ecbdf6758bbb428779a685f3841e2797f10302eba1aacc388daf9743b055a239dc4dd405750bfa8c23755939931080196d65752418c3ae0f53eb9286d99772d5bd4d5a571a8806d61f82221af9577b1725c06e9afd00053014f8113f709bbfb2f684630a9e04c5a51879a29197b14d59d1f1658c47b60243422ce86c059a0d79b62c4"}, @generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x49, 0x7}, @generic={0x70, 0x9, "267fdbc872353544c0df3390c5ce4040eac28045015d6453761b8348f9a09000d581f9fb9d232bf3bcaa69456d656321e07684ed740529146740279fd09c34d663658e62146a5e6f8251969bcf7f348edec4a3d12c7d207eef485124271bd6164ca3a0ea9bbaf0e2e54def445e39"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0xe, 0x8, 0x4}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x2e, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x8c2d62bacc684555, 0xfa, 0x5, 0x4, 0x8}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x8e, &(0x7f0000000640)=ANY=[@ANYBLOB="8e032c7b5bbae59642a31d527ee0859bfc501e741e014ad912c52f5fda63e83941a0d64e574360ac23dec46c29123c17d71ac1cbea36c98ab1451a5e54bd91279cf743fdc1e5fc54de9f4039803b12622cbbbf9e4b8193e0ed9371f4b10356fdecba24c591c7830824c5d78ab8ce9fb9966b88379e5f022f18e8425f151b2f4632c82b1e8914381086ec5affe06fe0fca48cf75795aa265c4f9e21038ddb8ab79ce86eaebf42592087e672"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc1a}}, {0x9a, &(0x7f0000000380)=@string={0x9a, 0x3, "1a250d600ac61d1026e5e57ffa84620227f00dfc878c6aebe8efb3630c360d08b5c4c1799d7125007be2f73c9565a719e4d356ce4a510ec9f782d466ab91a8cd520a176624a7d048a8163f789b83b894849c794d2b6989d07ce44fbbec3de00a2bde86cbaeebe296d9e5119f287a4a2da9078efc0055b6fae6bfff938575ace06dabb370296c535a98c9232f1b521853cc8c8a14c9514b13"}}]})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
syz_mount_image$v7(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80), 0x1, 0x9dc3, &(0x7f0000009ec0)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x20000000)
getdents64(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x100, 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
fanotify_mark(0xffffffffffffffff, 0x565, 0x48000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b5090100000000852600000000000085180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = openat(r8, &(0x7f0000000080)='./file0\x00', 0x0, 0x2)
setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f00000000c0), 0x4)

31.745426932s ago: executing program 0 (id=1960):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x8}})
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000008c0)={0x0, 0x6, 0x0, 'queue0\x00', 0xe})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3]}}], 0xffc8)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4000)

12.766633195s ago: executing program 3 (id=1985):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4)
sendmsg$netlink(r0, 0x0, 0x0)

12.125330298s ago: executing program 3 (id=1987):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000800)='./bus\x00', 0x100000, &(0x7f0000000b80)=ANY=[], 0xff, 0xafa, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES64=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000efffca8cfce3617e54d0eec1b38efcee66b44e03d08fd4c500fc962fc9ce6d5d06cd072ccfaa088e9fb2420a91ba1058b71d5199cea586bd17f46689f68528d69b6706c7cdf5d97bb7fbf50ba289fa6926147ff75c2550ad9a1730010cfebc24d7e99245a965", @ANYBLOB="9d622809525086f6306ce4df37ffddeb02497e5cda36b4eff9b17a0af1986601ba1299b081368741682262a06f6ff251149036434a33d25ba7ec5e7fcc910883bf6ddaedf347254f06813c9ef0d4aa3f26c0774189bba6bc5fa2480ae06c127ef1bd2c63089fa8e24ec718fea4781566c1210ec49de67757db48ad5e9942934dffb11d6de98f92c156dfcd05fece945c0b468291624d0ef26d1c7684f47e686e3ebadcf5020a542fceffacf39c2b01fd8537d6cdbbe0a000d6e03ffe9872def2", @ANYRESHEX=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000400000004000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000050000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r7], 0x48)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r8 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x366, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000000080)=[{{0x0, 0x11000, &(0x7f00000023c0)=[{&(0x7f00000001c0)="1c3a4eb168616afad74ee0cbc071993afa3f91b1f8900bfafca21c2d529054eae7eb436ae1501402da73b829764e3b97328ffa0328c893116dfd337b23a15470f6509916c3714b3a00d0dae9f5fba4c07a28629dffd2c4443af122b36fca9f7c6e1c2ec7ae5d25b3e5b6a36d39ec239b16d0db69f746d18bde4b7dfd8bee960f60a63ba6872850a09cf4204f85d43ec374b7e9a7ae9c25079bf2cf12c29fc4f93c691665175f37229fc62566489368795950beef01f18833f0802e081fe4b02172ed1e7c8d99d6f4fd2f365caad791f69a9cdb51ed7abab1ea64a38d2b3b4417f3f4d36d7764d0e54ad539a61fbc7bc9ee5afd", 0xf3}, {&(0x7f00000002c0)="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", 0x48a}], 0x2}}], 0x1, 0x4001c00)
r9 = socket(0x11, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r11=>0x0})
bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="03011400b1d4430800000800ad0001140000002f0600ac14141fe0000001"], 0xdd12}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00'})

8.204746117s ago: executing program 1 (id=1990):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x2}}}}}}, 0x0)

7.83826593s ago: executing program 1 (id=1991):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0x100}})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0)

7.837890493s ago: executing program 2 (id=1992):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000"], 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x101}, [], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3479, r1, 0x0, 0x0, 0x0, 0x10, 0xffffff0a, @void, @value}, 0x90)
syz_usb_control_io$hid(r0, 0x0, 0x0)

7.825491411s ago: executing program 3 (id=1993):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ftruncate(r0, 0x69)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000000)="7c73c1e117e291cb6cef4163ed06963af9a19a5183aa91163ef7aa02b707e09546e781172decfece433c", 0x2a}, {&(0x7f00000004c0)="790f076461633e860315f3328f99377a0aa835675115acd2b7f10f5db17ec3fde9b974183c45cef27e5f95a42d5eee4f9c3ba0ef5c6601d08076576cddefe74f2b3b23c3b16076675cb1bcdede8d819967d59a7b7c2c34e76233d38be07bc9d91e27bfe688115bb226db5e1179a69c22357df381e6a73bd8b4132f610008d32103ebde594b4611450ab4bd7e97a51718c9e186ee8ae006e66ea2c6afbdfc76b2c4ba738000000021bfce27", 0xab}], 0x5)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

7.46591336s ago: executing program 1 (id=1994):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x31, 0x1, 0x1, "0088f200000000000000000000000096c300", 0x32314d56})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r2}, 0x10)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x0, 0x0)

7.193730684s ago: executing program 3 (id=1995):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00')
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

6.865620328s ago: executing program 1 (id=1996):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4)
sendmsg$netlink(r0, 0x0, 0x0)

6.44334548s ago: executing program 1 (id=1997):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0xeb1, &(0x7f0000000f80)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x1, "7f"}, 0x0, 0x0, 0x0, 0x0})
write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000440)=""/234, 0xfffffffffffffec4, 0x0, 0x0, 0x2}}, 0x48)
ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000180)=0x2)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x7, 0x9, 0x8000}, {0xb, 0x4, 0x0, 0x101}]})
ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @loopback}, "04006371ae9b1c03"}}}}}, 0x0)
r4 = open(0x0, 0x143142, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendto(r5, 0x0, 0x0, 0x1, 0x0, 0x0)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

6.154152523s ago: executing program 3 (id=1998):
syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00')
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './bus\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000100), 0x1, 0x559d, &(0x7f0000005680)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x80742, 0x2)
read$FUSE(r0, &(0x7f0000006940)={0x2020}, 0x2020)

4.753721534s ago: executing program 4 (id=1999):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0xffffff05, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x70, 0x88, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x100000000}, @fda={0x66646185, 0x4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000020000000022000000180001801400020076657468315f766972745f9979666900"], 0x2c}}, 0x0)

4.195385868s ago: executing program 2 (id=2000):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffc22)

3.377164956s ago: executing program 2 (id=2001):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7f, {0x2, 0x0, @broadcast}})
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000800)="240000001e005f0314200081ffffffffffffff000100000000000800080008c013000000", 0x24)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000080)={[{@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xefe}}, {@abort}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x648}}, {@noblock_validity}]}, 0x1, 0x5de, &(0x7f0000000780)="$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")
chdir(&(0x7f0000000540)='./file0\x00')
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x4, &(0x7f00000019c0)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=2m,\x00>'])
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000080)
socket$nl_generic(0x10, 0x3, 0x10)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)

3.322034709s ago: executing program 4 (id=2002):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x6, 0x0, @void}, 0x10)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@uid_ignore}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@undelete}, {@uid}, {}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x70ed}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000013c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRES16=r2, @ANYBLOB=',discard,\x00', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="00020011000000003030303030303030302c796f636884c178f94be4ee34617273657439697300926f3800"/55, @ANYBLOB="51060c4f1adb6e795b70e7ed8cd4cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRESHEX=r1, @ANYBLOB="394bf189e73798e9adcead9ccca3031a326221d7b45add41721863ed092fbcd99c308a068abef050f98c682fcf8214c2dab78b316ca0bd1ede3a2bb83f1be06d56061a6c6fb010e0e83020de5d62f0044cb38bffd1fd7bfca68f46775e682f4cab117c184b60fae642b3ef9ef7a4d796c0077b16be6ac2dbcdced7318cd0595ef5b6eb881564fce35605aec664ace0a15bbb0103017d9487ccff6f0179a00bb09955be491317a197904828847de55f37fd7a926fd0277e3ec49825516e4bf6290f45652dacd880b16035a328ee2ccdc8371549cb76365fb0ccde4225dae676d8a506c49954a2e5ca6f7769d0d6"], 0x81, 0x151a, &(0x7f0000002a80)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=")

3.030943561s ago: executing program 3 (id=2003):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$eJzs3U9P1EAYx/HftMuyCGIVjInxYFCiJwN4MV5IDPE1eNGo7JoQNxAVE/Ui8Wx8Ad69+AJ8EZ6MiWc9efIFcKuZ2Vl2yrZbWEIr8ftJFsp2/jzTdtt5miwVgP/WnbWfn27+ti8jxYol3ZYiu+qyGpLO60Lr5eb2xna30x7VUCy15F5GcjXNUJn1zU5eVVvP1fAS+1dDM+F7OB5pmqa/6g4CdWr533Heykia9J/OOCx8ku3E0k7dQdTM7GpXrzRbdxwAgHqZ3vU98tf5GT9/jyJp0V/2w+v/j9M1x3s017Rbdwg1C67/LstKjd2/Z9yqQb7nUji7PupniYftx04em+odWZkJpslmlcPJooslmnqy0e3cWN/qtiO906oXFJuXtKq2z1m9kmgXcrrLaurgrY0w7cYwYcewUhD/XF6n4/dYznw138wDk+ij2nvzv0ZqbPcugmRvT92dGMS/VNTc1rP7rlavVMEoz7pOLmY37MhRxkUZifyWSmNlbxAk2TibubWa2lerN7rlop58O3O5tVZKas3bWp+DWoOjubjmcTMfzD2zoD/6orVg/h/Zrb2o4U9mfiOupD8y+uPJzQ0brmQSvrVzKbfNaLzxYCzv9Vi3NPvi9Zunj7rdzvOqF2wMlXfKQm+hfxD8K/GMt2DPsftXNarpvXnkTdfSoQoPjzRc6J86D9Bg/yRd2mktZyVUbLDTi8u8rTIgVM2ePEwv/wvylSWXItkfyYh5elo2bQtaXM7JDSb3Cp4KWjL+/nxxBjRdnMEdNOe6cl26GrxZknMlOidNjRzrSWLW9F0Puf8PAAAAAAAAAAAAAAAAAABw0lTxbY2gO/6jDwAAAAAAAAAAAAAAAAAAAAAAYyh+/m9Lx/j838z3AHj+L1CPvwEAAP//pAVz+Q==")
sync()
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@multiplanar_overlay={0xc, 0xe, 0x4, 0xe000, 0x93, {0x77359400}, {0x4, 0x8, 0x3, 0x2, 0xec, 0xfa, "d71b8814"}, 0x9, 0x3, {0x0}, 0x6, 0x0, <r2=>0xffffffffffffffff})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x0)
r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000700)={@desc={0x1, 0x0, @desc4}, 0x40, 0x0, '\x00', @b})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x8b)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="055cd7369a42e246"}})
getdents(r3, 0x0, 0x5e)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000002200)={0x84, &(0x7f0000001dc0)={0x0, 0x0, 0xd, "50c79b21daabbc7a74eeca6666"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x9, 0xcb, {0xcb, 0x4b7e02a5ce9d27bd, "162edfa4602696dbbb580d913673a9204ae2959a79df4255a35288d98bb34dc8790f5ab9d306451ab5e853698d4e78247f1c7241c18abe8cec5f39243ffa020d709439be24981c7844897773d848c546d1bf4d74b83bbbfcbad8979f1a5a4a78f659ac804a2881e1f11a29e8a34f8df036642e78f51f5fdc5d8a57c04e4111d37b1921fa013facdd959de57d3ddbd2c5d37e7c5a837f4785013cdb224f0d218256c245b154f71bb42e783b4ff247e169fd191dd908caff93f88ba10618cc473e3c117e33e431048a76"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000340)={0x20, 0x7, 0xb1, "d851ecbc2539a253acc4a0727812d5bdd9b48cb090a50fbd6f08c8e5c21fb5f657b071d5e3c24a066a244f27e90552ece8aa118736f7bf005daf28a6c34e4512ec004278d369c64701db5ab61d1af3710aee823482f3f6d0e41c6c63ba88ff2a378ba95b00caf4dbedaab2d541fb8c3fe78ea5879b3a584a4fed64ab807d67ab49b0b40a1e482a324afab8020a4e18b84eeceb678d55b845117a31381bce18a8c19e44fdb25ace99de49b732750aa1c377"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1c}})

2.724116946s ago: executing program 4 (id=2004):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ftruncate(r0, 0x69)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000000)="7c73c1e117e291cb6cef4163ed06963af9a19a5183aa91163ef7aa02b707e09546e781172decfece433c", 0x2a}, {&(0x7f00000004c0)="790f076461633e860315f3328f99377a0aa835675115acd2b7f10f5db17ec3fde9b974183c45cef27e5f95a42d5eee4f9c3ba0ef5c6601d08076576cddefe74f2b3b23c3b16076675cb1bcdede8d819967d59a7b7c2c34e76233d38be07bc9d91e27bfe688115bb226db5e1179a69c22357df381e6a73bd8b4132f610008d32103ebde594b4611450ab4bd7e97a51718c9e186ee8ae006e66ea2c6afbdfc76b2c4ba738000000021bfce27", 0xab}], 0x5)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

2.477980289s ago: executing program 2 (id=2005):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x31, 0x1, 0x1, "0088f200000000000000000000000096c300", 0x32314d56})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x0, 0x0)

2.310347272s ago: executing program 4 (id=2006):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x58, 0x0, &(0x7f0000000c40)=[@free_buffer={0x40086303, r3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

1.655884212s ago: executing program 2 (id=2007):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000b00), 0xe, 0x5e9, &(0x7f0000000b40)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='ext4_es_find_extent_range_enter\x00', r0}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x1e2, 0x9, {{0x27, 0x4, 0x2, 0x3, 0x9c, 0x64, 0x0, 0xde, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xd3, 0x3, 0x4, [{@local, 0x80000000}, {@private=0xa010100, 0x7}, {@multicast2, 0x8000}]}, @lsrr={0x83, 0x17, 0xd5, [@loopback, @local, @private=0xa010100, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x54, 0x3f, 0x1, 0x4, [{@empty, 0x1}, {@remote, 0x2}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x800}, {@loopback, 0x6}, {@broadcast, 0x10000}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffb3}]}]}}}}})
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

1.594949516s ago: executing program 4 (id=2008):
r0 = memfd_create(0x0, 0x1)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket(0x10, 0x3, 0x0)
bind$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed}, 0x8)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xa89)
r3 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r3, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a578400200004e230000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

945.645236ms ago: executing program 1 (id=2009):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a000b0000000000000000000400000004000000100001800c00100004000f"], 0x28}}, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
getpeername$netlink(r2, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'netdevsim0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000600)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0xffffffffffffff47, 0x10, 0x8, 0x0, 0x0}}, 0x64)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r6}, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x5)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {0x5}}, './file0\x00'})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r11, 0x4, 0x1, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], <r12=>0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r10, r9, 0xe, 0x0, @val=@netkit={@void, @value=r8, @void, @void, r12}}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000700000000000000aa00000018b20000fdffffff0000000009ba00009247180010000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x10, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000380), 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r11, r7, 0x2f, 0x2000, 0xffffffffffffffff, @value=r9}, 0x20)
r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r13, &(0x7f0000008380)={0x2020, 0x0, <r14=>0x0}, 0x2020)
write$FUSE_INIT(r13, &(0x7f0000000040)={0x50, 0x0, r14, {0x7, 0x1f, 0x0, 0x10400, 0x6}}, 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r15=>0x0}, 0x800)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0xfffffffffffffff5, r14, {{0x0, 0x1, 0xffffffff, 0x5, 0xe, 0xa6, {0x2, 0x7, 0x6, 0xe, 0x8, 0x7, 0x1000, 0x6, 0x7, 0x1000, 0x11, r15, 0xee01, 0x0, 0x9}}, {0x0, 0x15}}}, 0xa0)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001200070200"/56, @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r16=>0xffffffffffffffff}, 0x0)
write$tcp_mem(r16, &(0x7f0000000040), 0x48)
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000002200)}], 0x1, 0x5, 0x5, 0x0)

361.584758ms ago: executing program 4 (id=2010):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r2 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001080)="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", 0x325}, {&(0x7f0000000bc0)="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", 0x267}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c1", 0x24}, {&(0x7f0000000fc0)="924b1997172c2f482ebd27bf5b9d2b7e1b9417c88b75f722dff78627c443b77217fa02f4d5f12ebd3b149bbd3e47c699975aac4723b42994d9709193021e1b78a85c6d2891fa68b34c20e8d12f379d95a45ce9e9748019ef14a4d777af6a6f7bfd4f7cf70e96db77305d09d789db9d459b9ba09f2203e25805fce106b08171ea334f23d0f0634d48e63b71a9b303e161e4461ce1a5c44052d56bcd4e009d99202cd8ef3e", 0xa4}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0)
io_setup(0xfffffff8, &(0x7f0000001840)=<r3=>0x0)
io_destroy(r3)
r4 = socket$rds(0x15, 0x5, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000180))
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
io_destroy(r3)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
syz_clone3(&(0x7f0000000580)={0x40000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), {0x1}, &(0x7f0000000400)=""/74, 0x4a, &(0x7f0000000480)=""/187, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8}, 0x58)

0s ago: executing program 2 (id=2011):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) (async)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000440)=""/67, 0x43, <r2=>0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, 0x10) (async)
r3 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=<r4=>0x0], 0x1, 0x2db, &(0x7f0000000680)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="ec66db5706f3d492fdcbf0dbacea127420dc8537e5d338e46be48a0ee319a76b6c9d36d539dd29348d430a03e9c14ad8306568945e229b708df9f3d1d4685bd86add6de777d2d2414d40b24357a42f1eb6c1ffd43485d6283e204d9af6d584f9d804e1", @ANYRESDEC=r3, @ANYRES16=r3, @ANYRES8, @ANYRES16=r2, @ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x18, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xa}}, 0x18}}, 0x0)

kernel console output (not intermixed with test programs):

99][T11090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.293764][T11175] usb 3-1: config 0 descriptor??
[  923.517577][T11887] loop0: detected capacity change from 0 to 128
[  923.557260][T11887] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  923.633837][T11887] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  924.006932][T11601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  924.050343][T11175] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71
[  924.114472][T11175] usb 3-1: USB disconnect, device number 45
[  924.571306][ T9221] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  924.766391][ T9221] usb 4-1: Using ep0 maxpacket: 8
[  924.863233][ T9221] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  924.873019][ T9221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.881592][ T9221] usb 4-1: Product: syz
[  924.886004][ T9221] usb 4-1: Manufacturer: syz
[  924.890842][ T9221] usb 4-1: SerialNumber: syz
[  925.023929][ T9221] usb 4-1: config 0 descriptor??
[  925.086114][T11906] netlink: 'syz.0.1690': attribute type 8 has an invalid length.
[  925.266467][ T9221] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  925.292775][T11895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.440659][T11895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.532005][T11901] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  925.538355][T11901] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  925.549758][T11901] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  925.561783][T11901] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  925.894567][T11907] loop3: detected capacity change from 0 to 128
[  925.951946][T11901] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  925.958369][T11901] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  925.976370][T11901] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  925.982907][T11901] Bluetooth: hci7: Error when powering off device on rfkill (-4)
[  926.059112][T11907] VFS: could not find a valid V7 on loop3.
[  926.195811][T11901] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  926.202393][T11901] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  926.260555][T11901] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  926.272211][T11901] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  926.301612][T11899] loop1: detected capacity change from 0 to 32768
[  926.354323][T11901] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  926.360503][T11901] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  926.376378][T11911] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1692'.
[  926.450064][   T29] audit: type=1804 audit(1729716925.812:148): pid=11899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1689" name="/newroot/123/file1/bus" dev="loop1" ino=8 res=1 errno=0
[  926.523040][ T9221] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  926.552309][ T9221] usb 4-1: USB disconnect, device number 56
[  927.214881][T11914] loop4: detected capacity change from 0 to 1024
[  927.323340][T11914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  927.781465][   T29] audit: type=1800 audit(1729716927.142:149): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1695" name="bus" dev="loop4" ino=19 res=0 errno=0
[  928.172444][ T9221] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  928.341495][ T9221] usb 5-1: Using ep0 maxpacket: 8
[  928.363691][ T9221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  928.374183][ T9221] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  928.383809][ T9221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.541433][ T9221] usb 5-1: config 0 descriptor??
[  928.595750][ T9221] iowarrior 5-1:0.0: no interrupt-in endpoint found
[  928.721245][T11942] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1703'.
[  928.874430][T11175] usb 5-1: USB disconnect, device number 50
[  929.110076][T11951] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(5093765648234) <= P.seqno(0) <= S.SWH(5093765648308)) and (P.ackno exists or LAWL(100509025935342) <= P.ackno(100509025935343) <= S.AWH(100509025935343), sending SYNC...
[  929.201492][T11948] loop3: detected capacity change from 0 to 1024
[  929.233468][T11948] ext4: Bad value for 'commit'
[  929.311685][ T5242] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  929.499167][ T5242] usb 4-1: Using ep0 maxpacket: 16
[  929.541076][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  929.557765][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  929.569443][ T5242] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  929.578920][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.806420][T11601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  929.869088][ T5242] usb 4-1: config 0 descriptor??
[  930.168072][T11175] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  930.421827][T11175] usb 2-1: Using ep0 maxpacket: 8
[  930.693294][T11175] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  930.703211][T11175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.704945][T11943] loop0: detected capacity change from 0 to 32768
[  930.711655][T11175] usb 2-1: Product: syz
[  930.727114][T11175] usb 2-1: Manufacturer: syz
[  930.732482][T11175] usb 2-1: SerialNumber: syz
[  930.827854][ T5242] usbhid 4-1:0.0: can't add hid device: -71
[  930.834949][ T5242] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  930.886252][   T29] audit: type=1804 audit(1729716930.232:150): pid=11943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1704" name="/newroot/98/file1/bus" dev="loop0" ino=8 res=1 errno=0
[  930.923580][ T5242] usb 4-1: USB disconnect, device number 57
[  930.940514][T11175] usb 2-1: config 0 descriptor??
[  931.454205][T11175] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  931.484532][T11953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  931.613146][T11953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  932.068170][T11966] 9pnet: Could not find request transport: fd0x0000000000000003
[  932.095545][T11968] loop1: detected capacity change from 0 to 128
[  932.264397][T11968] VFS: could not find a valid V7 on loop1.
[  932.602383][T11175] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  932.739430][T11175] usb 2-1: USB disconnect, device number 72
[  933.164057][T11964] loop2: detected capacity change from 0 to 32768
[  933.197284][T11972] loop4: detected capacity change from 0 to 256
[  933.592851][T11972] FAT-fs (loop4): Directory bread(block 64) failed
[  933.599680][T11972] FAT-fs (loop4): Directory bread(block 65) failed
[  933.607061][T11972] FAT-fs (loop4): Directory bread(block 66) failed
[  933.614080][T11972] FAT-fs (loop4): Directory bread(block 67) failed
[  933.621168][T11972] FAT-fs (loop4): Directory bread(block 68) failed
[  933.627955][T11972] FAT-fs (loop4): Directory bread(block 69) failed
[  933.635333][T11972] FAT-fs (loop4): Directory bread(block 70) failed
[  933.649867][T11972] FAT-fs (loop4): Directory bread(block 71) failed
[  933.657002][T11972] FAT-fs (loop4): Directory bread(block 72) failed
[  933.662655][T11970] loop3: detected capacity change from 0 to 4096
[  933.663952][T11972] FAT-fs (loop4): Directory bread(block 73) failed
[  933.706368][T11970] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  933.810819][T11972] syz.4.1715: attempt to access beyond end of device
[  933.810819][T11972] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  933.825412][T11972] syz.4.1715: attempt to access beyond end of device
[  933.825412][T11972] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256
[  933.882760][T11970] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  933.903974][T11974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1717'.
[  934.421781][T11979] dvmrp8: entered allmulticast mode
[  934.431944][T11977] dvmrp8: left allmulticast mode
[  934.699931][T11982] loop3: detected capacity change from 0 to 1024
[  934.824473][T11982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  935.049831][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'.
[  935.059382][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'.
[  935.101907][   T29] audit: type=1800 audit(1729716934.462:151): pid=11982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1718" name="bus" dev="loop3" ino=19 res=0 errno=0
[  935.397141][T11988] loop1: detected capacity change from 0 to 2048
[  935.461599][ T9221] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  935.571653][T11988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  935.654549][ T9221] usb 4-1: Using ep0 maxpacket: 8
[  935.685827][ T9221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  935.702654][ T9221] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  935.712214][ T9221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.732026][ T9981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.732679][ T9221] usb 4-1: config 0 descriptor??
[  935.776408][ T9221] iowarrior 4-1:0.0: no interrupt-in endpoint found
[  935.857417][T12002] 9pnet: Could not find request transport: fd0x0000000000000003
[  935.890244][T12006] loop4: detected capacity change from 0 to 512
[  935.931581][T12006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  935.969785][ T9221] usb 4-1: USB disconnect, device number 58
[  936.024185][T12006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[  936.051809][T12006] System zones: 1-12
[  936.115966][T12006] EXT4-fs (loop4): 1 truncate cleaned up
[  936.123621][T12006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  936.768631][T12013] loop0: detected capacity change from 0 to 4096
[  936.777944][T12013] ntfs3: Unknown parameter 'nosys_immutable'
[  937.157484][T11601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.423761][T11181] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  937.649758][T11181] usb 3-1: Using ep0 maxpacket: 8
[  937.767526][T11181] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  937.778003][T11181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.786389][T11181] usb 3-1: Product: syz
[  937.790797][T11181] usb 3-1: Manufacturer: syz
[  937.795855][T11181] usb 3-1: SerialNumber: syz
[  937.864642][T11090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.975990][T11181] usb 3-1: config 0 descriptor??
[  938.129859][T12009] loop1: detected capacity change from 0 to 32768
[  938.193046][T11181] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  938.312393][T12023] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1730'.
[  938.461280][T12011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.601918][T12011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.855174][T12031] FAULT_INJECTION: forcing a failure.
[  938.855174][T12031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  938.874154][T12031] CPU: 0 UID: 0 PID: 12031 Comm: syz.4.1734 Tainted: G        W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  938.886784][T12031] Tainted: [W]=WARN
[  938.890794][T12031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  938.901094][T12031] Call Trace:
[  938.904572][T12031]  <TASK>
[  938.907705][T12031]  dump_stack_lvl+0x216/0x2d0
[  938.912710][T12031]  dump_stack+0x1e/0x30
[  938.917166][T12031]  should_fail_ex+0x748/0x7f0
[  938.922181][T12031]  should_fail+0x2a/0x40
[  938.926732][T12031]  should_fail_usercopy+0x2e/0x40
[  938.932068][T12031]  _copy_to_user+0x33/0x110
[  938.936885][T12031]  drm_ioctl+0xd68/0x15a0
[  938.941551][T12031]  ? __pfx_drm_mode_getresources+0x10/0x10
[  938.947684][T12031]  ? kmsan_get_metadata+0x13e/0x1c0
[  938.953223][T12031]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  938.959378][T12031]  ? __pfx_drm_ioctl+0x10/0x10
[  938.964465][T12031]  ? __pfx_drm_ioctl+0x10/0x10
[  938.969545][T12031]  __se_sys_ioctl+0x25e/0x450
[  938.974546][T12031]  __x64_sys_ioctl+0x96/0xe0
[  938.979453][T12031]  x64_sys_call+0x18bf/0x3ba0
[  938.979836][T12014] loop2: detected capacity change from 0 to 128
[  938.984357][T12031]  do_syscall_64+0xcd/0x1e0
[  938.984526][T12031]  ? clear_bhb_loop+0x25/0x80
[  938.984673][T12031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.984881][T12031] RIP: 0033:0x7f3f2797dff9
[  938.984990][T12031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  938.985116][T12031] RSP: 002b:00007f3f28699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  938.985259][T12031] RAX: ffffffffffffffda RBX: 00007f3f27b35f80 RCX: 00007f3f2797dff9
[  939.047988][T12031] RDX: 0000000020000000 RSI: 00000000c04064a0 RDI: 0000000000000003
[  939.056215][T12031] RBP: 00007f3f28699090 R08: 0000000000000000 R09: 0000000000000000
[  939.064430][T12031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  939.072635][T12031] R13: 0000000000000000 R14: 00007f3f27b35f80 R15: 00007ffd2398f048
[  939.080868][T12031]  </TASK>
[  939.111236][T12014] VFS: could not find a valid V7 on loop2.
[  939.324951][T11181] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  939.341093][T11181] usb 3-1: USB disconnect, device number 46
[  939.398502][T12033] loop0: detected capacity change from 0 to 64
[  939.833393][T12035] 9pnet: Could not find request transport: fd0x0000000000000003
[  940.591885][T12049] loop2: detected capacity change from 0 to 1024
[  940.673029][T12053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1744'.
[  940.953532][T12049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  941.221983][   T29] audit: type=1800 audit(1729716940.582:152): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1742" name="bus" dev="loop2" ino=19 res=0 errno=0
[  941.364273][T12066] loop1: detected capacity change from 0 to 1024
[  941.477964][T12066] hfsplus: extend alloc file! (8192,65536,366)
[  941.562989][T11181] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  941.768903][T11181] usb 3-1: Using ep0 maxpacket: 8
[  941.859447][T11181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  941.869934][T11181] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  941.879465][T11181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.134291][T11181] usb 3-1: config 0 descriptor??
[  942.217042][T11181] iowarrior 3-1:0.0: no interrupt-in endpoint found
[  942.831014][T12054] loop3: detected capacity change from 0 to 32768
[  942.894391][ T5242] usb 3-1: USB disconnect, device number 47
[  943.509774][T12078] 9pnet_fd: Insufficient options for proto=fd
[  943.827210][T10516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  944.278733][T12074] loop0: detected capacity change from 0 to 32768
[  944.351929][T12074] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1749 (12074)
[  944.385144][T12074] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  944.402463][T12074] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  944.403911][T12083] loop4: detected capacity change from 0 to 64
[  944.412723][T12074] BTRFS info (device loop0): using free-space-tree
[  944.521348][T12091] loop2: detected capacity change from 0 to 128
[  944.686220][T12091] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  944.749751][T12091] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  944.931093][T10516] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  945.143771][T10253] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  945.161231][ T5242] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  945.331212][ T5242] usb 4-1: Using ep0 maxpacket: 8
[  945.446209][T12111] loop4: detected capacity change from 0 to 64
[  945.455894][ T5242] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  945.465565][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.474151][ T5242] usb 4-1: Product: syz
[  945.478573][ T5242] usb 4-1: Manufacturer: syz
[  945.483525][ T5242] usb 4-1: SerialNumber: syz
[  945.543903][ T5242] usb 4-1: config 0 descriptor??
[  945.756501][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'.
[  945.781769][ T5242] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  945.788787][T12094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  945.911960][T12094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  946.152007][T12094] loop3: detected capacity change from 0 to 128
[  946.179724][T12113] loop1: detected capacity change from 0 to 2048
[  946.254472][T12113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27742, location=27742
[  946.365413][T12113] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  946.376733][T12113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27998, location=27998
[  946.387035][T12113] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  946.395142][T12113] UDF-fs: Scanning with blocksize 512 failed
[  946.435725][T12113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27742, location=27742
[  946.482233][ T5242] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  946.519873][ T5242] usb 4-1: USB disconnect, device number 59
[  946.593099][T12113] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  946.604680][T12113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27998, location=27998
[  946.615145][T12113] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  946.623169][T12113] UDF-fs: Scanning with blocksize 1024 failed
[  946.666282][T12113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27742, location=27742
[  946.703153][T12113] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  946.714474][T12113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27998, location=27998
[  946.724848][T12113] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  946.732926][T12113] UDF-fs: Scanning with blocksize 2048 failed
[  946.781888][T12113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27742, location=27742
[  946.826699][T12113] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  946.838017][T12113] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27998, location=27998
[  946.854065][T12113] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  946.863572][T12113] UDF-fs: Scanning with blocksize 4096 failed
[  946.869853][T12113] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  946.960688][T12126] netlink: 'syz.0.1758': attribute type 3 has an invalid length.
[  946.968941][T12126] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1758'.
[  946.988801][T12126] x_tables: duplicate underflow at hook 3
[  947.025845][   T29] audit: type=1326 audit(1729716946.372:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc9d7dff9 code=0x7ffc0000
[  947.054348][   T29] audit: type=1326 audit(1729716946.372:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f6fc9d7dff9 code=0x7ffc0000
[  947.082145][   T29] audit: type=1326 audit(1729716946.372:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc9d7dff9 code=0x7ffc0000
[  947.106454][   T29] audit: type=1326 audit(1729716946.372:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc9d7c990 code=0x7ffc0000
[  947.129600][   T29] audit: type=1326 audit(1729716946.372:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc9d7dbfb code=0x7ffc0000
[  947.152545][   T29] audit: type=1326 audit(1729716946.372:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc9d7dbfb code=0x7ffc0000
[  947.179643][   T29] audit: type=1326 audit(1729716946.372:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc9d7dbfb code=0x7ffc0000
[  947.204273][   T29] audit: type=1326 audit(1729716946.372:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc9d7dbfb code=0x7ffc0000
[  947.901473][T12129] 9pnet_fd: Insufficient options for proto=fd
[  948.173320][T12131] loop3: detected capacity change from 0 to 1024
[  948.247831][   T29] audit: type=1326 audit(1729716947.382:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc9d7dbfb code=0x7ffc0000
[  948.401426][T12131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  948.656515][   T29] audit: type=1800 audit(1729716948.012:162): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1763" name="bus" dev="loop3" ino=19 res=0 errno=0
[  948.813798][T12135] loop1: detected capacity change from 0 to 512
[  948.863294][T12135] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  948.978416][T12135] EXT4-fs (loop1): 1 truncate cleaned up
[  948.986634][T12135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  949.007133][T12127] loop2: detected capacity change from 0 to 32768
[  949.009967][ T9221] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  949.095023][ T5242] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  949.241473][ T9221] usb 4-1: Using ep0 maxpacket: 8
[  949.303662][T12139] loop4: detected capacity change from 0 to 256
[  949.341747][ T9221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  949.352096][ T9221] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  949.354262][T12139] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[  949.361501][ T9221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.386994][ T9981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.425342][ T9221] usb 4-1: config 0 descriptor??
[  949.443797][ T9221] iowarrior 4-1:0.0: no interrupt-in endpoint found
[  949.461248][ T5242] usb 1-1: unable to get BOS descriptor or descriptor too short
[  949.485064][ T5242] usb 1-1: config 64 has an invalid interface number: 119 but max is 0
[  949.493858][ T5242] usb 1-1: config 64 has no interface number 0
[  949.500307][ T5242] usb 1-1: config 64 interface 119 altsetting 233 bulk endpoint 0xA has invalid maxpacket 503
[  949.516240][ T5242] usb 1-1: config 64 interface 119 has no altsetting 0
[  949.544229][ T5242] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0013, bcdDevice=90.d7
[  949.554350][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.562732][ T5242] usb 1-1: Product: Я
[  949.567057][ T5242] usb 1-1: Manufacturer: 淖ᰦ䧹∉셰鷴玫虊쑢괵䟁㲿暅੘媛朷蕰㐩㒞⑼繕Ⲍ뢢鿚Ḟℛṝᆄ唀≓놗음≑蟼廈冀āꝬ恵䤴鴅躽ᾲÂ役늁墘㼪涢耩䳃᭚숭鶻∩⫊ᢏהּરꛍ六極ᜊ鉟逕钎뼏ᠳ褷ᣡ杯
[  949.568728][T12141] loop1: detected capacity change from 0 to 128
[  949.592582][ T5242] usb 1-1: SerialNumber: 㡜
[  949.604011][T12126] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  949.665861][ T9221] usb 4-1: USB disconnect, device number 60
[  949.677519][T12141] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  949.708165][T12141] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  949.846662][ T5242] kvaser_usb 1-1:64.119: error -ENODEV: Cannot get usb endpoint(s)
[  949.880814][ T5242] usb 1-1: USB disconnect, device number 63
[  949.929184][T11181] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  950.084278][ T9981] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  950.102878][T11181] usb 5-1: Using ep0 maxpacket: 16
[  950.145776][T11181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  950.157256][T11181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  950.167511][T11181] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00
[  950.177700][T11181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.314345][T11181] usb 5-1: config 0 descriptor??
[  950.429618][T11090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.981593][T11181] apple 0003:05AC:0246.0014: unknown main item tag 0xd
[  950.988941][T11181] apple 0003:05AC:0246.0014: unexpected long global item
[  951.985424][T11181] apple 0003:05AC:0246.0014: parse failed
[  951.991883][T11181] apple 0003:05AC:0246.0014: probe with driver apple failed with error -22
[  953.044172][T12139] coredump: 52(syz.4.1766): Core dump to core aborted: cannot preserve file permissions
[  953.076558][T12150] loop2: detected capacity change from 0 to 32768
[  953.185753][T12150] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1768 (12150)
[  953.222052][T12150] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  953.232985][T12150] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  953.243273][T12150] BTRFS info (device loop2): using free-space-tree
[  953.268022][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'.
[  953.400748][T11181] usb 5-1: USB disconnect, device number 51
[  953.454557][ T5242] usb 4-1: new low-speed USB device number 61 using dummy_hcd
[  953.515314][ T5261] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  953.613038][T12180] loop4: detected capacity change from 0 to 64
[  953.638712][ T5242] usb 4-1: LPM exit latency is zeroed, disabling LPM.
[  953.650468][ T5242] usb 4-1: config 0 has no interfaces?
[  953.692739][ T5242] usb 4-1: string descriptor 0 read error: -22
[  953.699575][ T5242] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40
[  953.714388][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.757161][ T5242] usb 4-1: config 0 descriptor??
[  953.787614][ T5261] usb 2-1: Using ep0 maxpacket: 8
[  953.862055][T10516] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  953.872072][ T5261] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  953.882034][ T5261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.890345][ T5261] usb 2-1: Product: syz
[  953.894847][ T5261] usb 2-1: Manufacturer: syz
[  953.899685][ T5261] usb 2-1: SerialNumber: syz
[  953.912771][ T5261] usb 2-1: config 0 descriptor??
[  953.970819][T12180] syz.4.1774: attempt to access beyond end of device
[  953.970819][T12180] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64
[  953.984923][T12180] Buffer I/O error on dev loop4, logical block 512, async page read
[  953.993380][T12180] syz.4.1774: attempt to access beyond end of device
[  953.993380][T12180] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64
[  954.008998][T12180] Buffer I/O error on dev loop4, logical block 56576, async page read
[  954.150096][ T5261] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  954.176570][T12161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.193415][T12161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.202615][T12180] syz.4.1774: attempt to access beyond end of device
[  954.202615][T12180] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64
[  954.216354][T12180] Buffer I/O error on dev loop4, logical block 512, async page read
[  954.231472][T12180] syz.4.1774: attempt to access beyond end of device
[  954.231472][T12180] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64
[  954.246987][T12180] Buffer I/O error on dev loop4, logical block 56576, async page read
[  954.418713][T12180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1774'.
[  954.452496][T12161] loop1: detected capacity change from 0 to 128
[  954.691575][ T5261] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  954.722670][ T5261] usb 2-1: USB disconnect, device number 73
[  954.806714][T12187] loop0: detected capacity change from 0 to 1024
[  954.830650][T12187] EXT4-fs: Ignoring removed nobh option
[  954.862786][T12187] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  954.935525][T12187] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.1777: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  954.954448][    C1] vkms_vblank_simulate: vblank timer overrun
[  954.980741][T12187] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1777: couldn't read orphan inode 11 (err -117)
[  954.996663][T12187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  955.163611][ T5261] usb 4-1: USB disconnect, device number 61
[  955.213928][T12191] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1777: Invalid block bitmap block 0 in block_group 0
[  955.243818][T12191] __quota_error: 34 callbacks suppressed
[  955.243905][T12191] Quota error (device loop0): write_blk: dquota write failed
[  955.264851][T12191] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  955.275783][T12191] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.1777: Failed to acquire dquot type 0
[  956.122057][T10253] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.185643][T12195] FAULT_INJECTION: forcing a failure.
[  956.185643][T12195] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  956.199581][T12195] CPU: 1 UID: 0 PID: 12195 Comm: syz.3.1779 Tainted: G        W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  956.212188][T12195] Tainted: [W]=WARN
[  956.216185][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  956.226485][T12195] Call Trace:
[  956.229964][T12195]  <TASK>
[  956.233084][T12195]  dump_stack_lvl+0x216/0x2d0
[  956.238083][T12195]  dump_stack+0x1e/0x30
[  956.242535][T12195]  should_fail_ex+0x748/0x7f0
[  956.247526][T12195]  should_fail_alloc_page+0x235/0x2b0
[  956.253186][T12195]  __alloc_pages_noprof+0x343/0xe00
[  956.258690][T12195]  alloc_pages_mpol_noprof+0x299/0x990
[  956.264444][T12195]  ? kmsan_get_metadata+0x13e/0x1c0
[  956.269977][T12195]  folio_alloc_mpol_noprof+0x55/0x180
[  956.275637][T12195]  shmem_alloc_and_add_folio+0xc33/0x1c30
[  956.281685][T12195]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  956.287866][T12195]  shmem_get_folio_gfp+0xacd/0x1f30
[  956.293391][T12195]  shmem_write_begin+0x158/0x3f0
[  956.298648][T12195]  ? __pfx_shmem_write_begin+0x10/0x10
[  956.304419][T12195]  generic_perform_write+0x4d8/0x1080
[  956.310150][T12195]  shmem_file_write_iter+0x2ba/0x2f0
[  956.315763][T12195]  vfs_write+0xb28/0x1540
[  956.320401][T12195]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  956.326559][T12195]  ksys_write+0x24f/0x4c0
[  956.331210][T12195]  __x64_sys_write+0x93/0xe0
[  956.336111][T12195]  x64_sys_call+0x306a/0x3ba0
[  956.341102][T12195]  do_syscall_64+0xcd/0x1e0
[  956.345913][T12195]  ? clear_bhb_loop+0x25/0x80
[  956.350873][T12195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.357096][T12195] RIP: 0033:0x7f13edd7cadf
[  956.361751][T12195] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  956.381678][T12195] RSP: 002b:00007f13eebf3df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  956.390415][T12195] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f13edd7cadf
[  956.398639][T12195] RDX: 0000000000010000 RSI: 00007f13e3400000 RDI: 0000000000000004
[  956.406868][T12195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000009de3
[  956.415083][T12195] R10: 0000000000000ffe R11: 0000000000000293 R12: 0000000000000004
[  956.423307][T12195] R13: 00007f13eebf3ef0 R14: 00007f13eebf3eb0 R15: 00007f13e3400000
[  956.431643][T12195]  </TASK>
[  956.434985][    C1] vkms_vblank_simulate: vblank timer overrun
[  956.532478][ T4553] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8
[  956.541939][ T4553] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:28: Failed to release dquot type 0
[  956.574313][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  956.584784][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  956.699644][T12197] 9pnet_fd: Insufficient options for proto=fd
[  957.363351][T12193] loop4: detected capacity change from 0 to 32768
[  960.100629][T12209] loop0: detected capacity change from 0 to 1024
[  960.198636][T12209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  960.328593][T12213] loop3: detected capacity change from 0 to 32768
[  960.393026][T12213] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1785 (12213)
[  960.421616][T12213] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  960.432382][T12213] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  960.442659][T12213] BTRFS info (device loop3): using free-space-tree
[  960.489081][T12224] loop2: detected capacity change from 0 to 128
[  960.502034][   T29] audit: type=1800 audit(1729716959.872:197): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1781" name="bus" dev="loop0" ino=19 res=0 errno=0
[  960.604683][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'.
[  961.100810][ T5261] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  961.312974][T12213] BTRFS error (device loop3): open_ctree failed
[  961.361274][ T5261] usb 1-1: Using ep0 maxpacket: 8
[  961.423647][ T5261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  961.434497][ T5261] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  961.449566][ T5261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.906743][ T5261] usb 1-1: config 0 descriptor??
[  961.940096][T12250] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1788'.
[  961.949823][T12250] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1788'.
[  961.981681][ T5242] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  962.038666][ T5261] usb 1-1: can't set config #0, error -71
[  962.047883][ T5261] usb 1-1: USB disconnect, device number 64
[  962.149803][T10253] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  962.202112][ T5242] usb 2-1: Using ep0 maxpacket: 8
[  962.264915][ T5242] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  962.274735][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.283183][ T5242] usb 2-1: Product: syz
[  962.287589][ T5242] usb 2-1: Manufacturer: syz
[  962.292599][ T5242] usb 2-1: SerialNumber: syz
[  962.383846][ T5242] usb 2-1: config 0 descriptor??
[  962.390730][T12256] loop3: detected capacity change from 0 to 1024
[  962.430078][T12260] loop0: detected capacity change from 0 to 64
[  962.494676][T12260] FAULT_INJECTION: forcing a failure.
[  962.494676][T12260] name failslab, interval 1, probability 0, space 0, times 0
[  962.507977][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.0.1793 Tainted: G        W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  962.520579][T12260] Tainted: [W]=WARN
[  962.524579][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  962.534888][T12260] Call Trace:
[  962.538363][T12260]  <TASK>
[  962.541482][T12260]  dump_stack_lvl+0x216/0x2d0
[  962.546478][T12260]  dump_stack+0x1e/0x30
[  962.550926][T12260]  should_fail_ex+0x748/0x7f0
[  962.555920][T12260]  should_failslab+0x17f/0x210
[  962.560965][T12260]  kmem_cache_alloc_lru_noprof+0xec/0xb30
[  962.567002][T12260]  ? __d_alloc+0x69/0x9c0
[  962.571612][T12260]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  962.577777][T12260]  __d_alloc+0x69/0x9c0
[  962.582208][T12260]  ? kmsan_get_metadata+0x13e/0x1c0
[  962.587753][T12260]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  962.593896][T12260]  d_alloc+0x59/0x300
[  962.598146][T12260]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  962.604300][T12260]  lookup_one_qstr_excl+0x19b/0x530
[  962.609875][T12260]  filename_create+0x2fc/0x6e0
[  962.614943][T12260]  do_mkdirat+0x69/0x810
[  962.619472][T12260]  ? getname_flags+0x5df/0xa30
[  962.624555][T12260]  __x64_sys_mkdirat+0xc6/0x120
[  962.629687][T12260]  x64_sys_call+0x3a81/0x3ba0
[  962.634658][T12260]  do_syscall_64+0xcd/0x1e0
[  962.639443][T12260]  ? clear_bhb_loop+0x25/0x80
[  962.644384][T12260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.650590][T12260] RIP: 0033:0x7f6fc9d7dff9
[  962.655229][T12260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  962.675130][T12260] RSP: 002b:00007f6fcab81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  962.683864][T12260] RAX: ffffffffffffffda RBX: 00007f6fc9f35f80 RCX: 00007f6fc9d7dff9
[  962.692093][T12260] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[  962.700313][T12260] RBP: 00007f6fcab81090 R08: 0000000000000000 R09: 0000000000000000
[  962.708507][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  962.716700][T12260] R13: 0000000000000000 R14: 00007f6fc9f35f80 R15: 00007fff0265e948
[  962.724926][T12260]  </TASK>
[  962.785930][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.791448][ T5242] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  962.810288][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.946984][T12244] loop1: detected capacity change from 0 to 128
[  963.003387][T12254] loop2: detected capacity change from 0 to 4096
[  963.051747][T12254] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  963.231027][ T5242] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  963.271393][T12266] loop4: detected capacity change from 0 to 128
[  963.292304][ T5242] usb 2-1: USB disconnect, device number 74
[  963.323732][T12266] VFS: Found a Xenix FS (block size = 1024) on device loop4
[  963.331555][T12266] Bad inode number on dev loop4: 2 is out of range
[  963.344294][T12266] SysV FS: get root inode failed
[  963.351197][T12266] oldfs: cannot read superblock
[  963.378196][T12254] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  963.387544][T12266] ------------[ cut here ]------------
[  963.393210][T12266] VFS: brelse: Trying to free free buffer
[  963.399654][T12266] WARNING: CPU: 0 PID: 12266 at fs/buffer.c:1235 invalidate_bh_lru+0x1c2/0x280
[  963.408933][T12266] Modules linked in:
[  963.413076][T12266] CPU: 0 UID: 0 PID: 12266 Comm: syz.4.1797 Tainted: G        W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  963.425639][T12266] Tainted: [W]=WARN
[  963.429623][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  963.439908][T12266] RIP: 0010:invalidate_bh_lru+0x1c2/0x280
[  963.445944][T12266] Code: 85 ed 0f 85 48 ff ff ff e8 4b a5 30 ff 90 48 8b 45 c8 48 c7 80 80 0c 00 00 00 00 00 00 48 c7 c7 cb a1 0a 91 e8 af 05 d6 fe 90 <0f> 0b 90 90 4c 8b 65 b8 41 b5 01 45 84 ed 0f 85 75 ff ff ff 31 ff
[  963.465844][T12266] RSP: 0018:ffff88804f313a80 EFLAGS: 00010083
[  963.472190][T12266] RAX: ffffffff815a5cf9 RBX: ffff88803bb65a20 RCX: 0000000000040000
[  963.480396][T12266] RDX: ffffc90009129000 RSI: 00000000000044d9 RDI: 00000000000044da
[  963.488605][T12266] RBP: ffff88804f313ac8 R08: ffffffff815a5cef R09: 0000000000000000
[  963.496810][T12266] R10: ffff88804eb136c0 R11: 0000000000000004 R12: 0000000000000000
[  963.505007][T12266] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88813fca31f0
[  963.513205][T12266] FS:  00007f3f286996c0(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000
[  963.522397][T12266] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  963.529328][T12266] CR2: 000000110c335725 CR3: 000000003a086000 CR4: 00000000003526f0
[  963.537551][T12266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  963.545754][T12266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  963.553954][T12266] Call Trace:
[  963.557409][T12266]  <TASK>
[  963.560524][T12266]  ? show_trace_log_lvl+0x268/0x3d0
[  963.566011][T12266]  ? smp_call_function_many_cond+0xcf9/0x16e0
[  963.572379][T12266]  ? show_regs+0xb4/0xe0
[  963.576892][T12266]  ? __warn+0x2c7/0x780
[  963.581317][T12266]  ? invalidate_bh_lru+0x1c2/0x280
[  963.586712][T12266]  ? report_bug+0x929/0xbd0
[  963.591505][T12266]  ? invalidate_bh_lru+0x1c2/0x280
[  963.596891][T12266]  ? handle_bug+0x6a/0x90
[  963.601510][T12266]  ? exc_invalid_op+0x1f/0x50
[  963.606479][T12266]  ? asm_exc_invalid_op+0x1f/0x30
[  963.611765][T12266]  ? __warn_printk+0x43f/0x470
[  963.616799][T12266]  ? __warn_printk+0x449/0x470
[  963.621843][T12266]  ? invalidate_bh_lru+0x1c2/0x280
[  963.627233][T12266]  smp_call_function_many_cond+0xcf9/0x16e0
[  963.633418][T12266]  ? __pfx_has_bh_in_lru+0x10/0x10
[  963.638806][T12266]  ? __pfx_invalidate_bh_lru+0x10/0x10
[  963.644556][T12266]  ? __pfx_invalidate_bh_lru+0x10/0x10
[  963.650298][T12266]  on_each_cpu_cond_mask+0x5d/0xd0
[  963.655693][T12266]  ? __pfx_has_bh_in_lru+0x10/0x10
[  963.661089][T12266]  invalidate_bh_lrus+0x33/0x40
[  963.666204][T12266]  blkdev_flush_mapping+0x117/0x3e0
[  963.671722][T12266]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  963.678101][T12266]  bdev_release+0x900/0xbf0
[  963.682906][T12266]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  963.689065][T12266]  ? __pfx_blkdev_release+0x10/0x10
[  963.694525][T12266]  blkdev_release+0x23/0x50
[  963.699276][T12266]  __fput+0x32c/0x1120
[  963.703611][T12266]  ? kmsan_get_metadata+0x130/0x1c0
[  963.709129][T12266]  ? __pfx_____fput+0x10/0x10
[  963.714063][T12266]  ____fput+0x25/0x30
[  963.718289][T12266]  task_work_run+0x268/0x310
[  963.723148][T12266]  syscall_exit_to_user_mode+0xce/0x170
[  963.728985][T12266]  do_syscall_64+0xda/0x1e0
[  963.733768][T12266]  ? clear_bhb_loop+0x25/0x80
[  963.738708][T12266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.744927][T12266] RIP: 0033:0x7f3f2797f79a
[  963.749578][T12266] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  963.769491][T12266] RSP: 002b:00007f3f28698e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  963.778205][T12266] RAX: ffffffffffffffea RBX: 00007f3f28698ef0 RCX: 00007f3f2797f79a
[  963.786422][T12266] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f3f28698eb0
[  963.794628][T12266] RBP: 0000000020000000 R08: 00007f3f28698ef0 R09: 0000000002000412
[  963.802851][T12266] R10: 0000000002000412 R11: 0000000000000246 R12: 0000000020000100
[  963.811057][T12266] R13: 00007f3f28698eb0 R14: 0000000000009eb9 R15: 0000000020000140
[  963.819286][T12266]  </TASK>
[  963.822487][T12266] ---[ end trace 0000000000000000 ]---
[  964.084128][T12273] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  964.084128][T12273]    program syz.4.1799 not setting count and/or reply_len properly
[  964.443254][T12279] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1800'.
[  965.272958][T12288] loop1: detected capacity change from 0 to 1024
[  965.403004][T12286] loop0: detected capacity change from 0 to 4096
[  965.543451][T12288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  965.601173][T12291] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  965.803277][   T29] audit: type=1800 audit(1729716965.142:198): pid=12288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1803" name="bus" dev="loop1" ino=19 res=0 errno=0
[  965.951810][ T5242] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  966.226459][ T5242] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  966.236399][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.244918][ T5242] usb 1-1: Product: syz
[  966.249359][ T5242] usb 1-1: Manufacturer: syz
[  966.254297][ T5242] usb 1-1: SerialNumber: syz
[  966.297968][ T9981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  966.459347][T12280] loop2: detected capacity change from 0 to 32768
[  966.459946][ T5242] usb 1-1: config 0 descriptor??
[  966.484377][T12280] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1801 (12280)
[  966.523706][T12280] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  966.534330][T12280] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  966.544538][T12280] BTRFS info (device loop2): using free-space-tree
[  966.978194][ T5242] mos7840 1-1:0.0: required endpoints missing
[  967.212981][ T5802] usb 1-1: USB disconnect, device number 65
[  967.454299][T10516] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  968.256776][ T5802] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  968.391340][ T5802] usb 2-1: device descriptor read/64, error -71
[  968.471498][ T5242] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  968.641613][ T5802] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  968.652697][ T5242] usb 5-1: Using ep0 maxpacket: 8
[  968.734313][ T5242] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  968.744196][ T5242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.753722][ T5242] usb 5-1: Product: syz
[  968.758139][ T5242] usb 5-1: Manufacturer: syz
[  968.768172][ T5242] usb 5-1: SerialNumber: syz
[  968.884768][ T5242] usb 5-1: config 0 descriptor??
[  968.979292][T12338] loop3: detected capacity change from 0 to 1024
[  969.003214][T12329] loop2: detected capacity change from 0 to 4096
[  969.021966][T12329] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  969.050847][T12338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  969.065773][ T5802] usb 2-1: device descriptor read/64, error -71
[  969.147275][ T5242] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  969.148948][   T29] audit: type=1800 audit(1729716968.502:199): pid=12338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1816" name="bus" dev="loop3" ino=19 res=0 errno=0
[  969.183868][ T5802] usb usb2-port1: attempt power cycle
[  969.209592][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.265958][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.363899][T12329] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  969.392632][T12329] ntfs3: Cannot use different iocharset when remounting!
[  969.497257][T12327] loop4: detected capacity change from 0 to 128
[  969.612447][ T5802] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  969.618795][T11090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  969.669464][ T5802] usb 2-1: device descriptor read/8, error -71
[  969.943495][ T5802] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  969.975587][ T5242] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  970.013123][ T5242] usb 5-1: USB disconnect, device number 52
[  970.033235][ T5802] usb 2-1: device descriptor read/8, error -71
[  970.159858][ T5802] usb usb2-port1: unable to enumerate USB device
[  972.418272][T12350] loop0: detected capacity change from 0 to 32768
[  972.430321][T12350] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1821 (12350)
[  972.462177][T12350] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  972.473079][T12350] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  972.483259][T12350] BTRFS info (device loop0): using free-space-tree
[  972.590787][T12363] loop4: detected capacity change from 0 to 1024
[  972.649980][T12363] EXT4-fs: Ignoring removed nomblk_io_submit option
[  972.742949][T12363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c018, mo2=0002]
[  972.797692][T12363] System zones: 0-1, 3-12
[  972.850000][T12363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  973.081446][T12373] loop1: detected capacity change from 0 to 4096
[  973.125833][T12373] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  973.188401][T10253] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  973.495881][T12373] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  973.532062][T12373] ntfs3: Cannot use different iocharset when remounting!
[  973.613680][T12388] netlink: 'syz.2.1830': attribute type 2 has an invalid length.
[  973.659843][T12390] netlink: 'syz.2.1830': attribute type 2 has an invalid length.
[  974.262280][T12363] loop4: detected capacity change from 1024 to 0
[  974.268663][T12359] syz.4.1825: attempt to access beyond end of device
[  974.268663][T12359] loop4: rw=524288, sector=10, nr_sectors = 2 limit=0
[  974.268843][T12359] syz.4.1825: attempt to access beyond end of device
[  974.268843][T12359] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0
[  974.301969][T12359] syz.4.1825: attempt to access beyond end of device
[  974.301969][T12359] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0
[  974.317511][T12359] syz.4.1825: attempt to access beyond end of device
[  974.317511][T12359] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0
[  974.331404][T12359] syz.4.1825: attempt to access beyond end of device
[  974.331404][T12359] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0
[  974.345195][T12359] syz.4.1825: attempt to access beyond end of device
[  974.345195][T12359] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0
[  974.359147][T12359] syz.4.1825: attempt to access beyond end of device
[  974.359147][T12359] loop4: rw=524288, sector=24, nr_sectors = 2 limit=0
[  974.373036][T12359] syz.4.1825: attempt to access beyond end of device
[  974.373036][T12359] loop4: rw=524288, sector=26, nr_sectors = 2 limit=0
[  974.387412][T12359] syz.4.1825: attempt to access beyond end of device
[  974.387412][T12359] loop4: rw=12288, sector=18, nr_sectors = 2 limit=0
[  974.406896][T12359] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #19: block 9: comm syz.4.1825: unable to read itable block
[  974.421691][T12359] syz.4.1825: attempt to access beyond end of device
[  974.421691][T12359] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0
[  974.435684][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.444366][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.451466][T12359] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure
[  974.460437][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.469189][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.476355][T12359] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.1825: mark_inode_dirty error
[  974.488289][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.503021][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.510457][T12359] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #19: block 9: comm syz.4.1825: unable to read itable block
[  974.525320][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.534005][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.541131][T12359] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure
[  974.550108][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.558768][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.565991][T12359] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.1825: mark_inode_dirty error
[  974.577802][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.586877][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.594069][T12359] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz.4.1825: Error while async write back metadata
[  974.612788][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.623246][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.630254][T12359] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz.4.1825: Error while async write back metadata
[  974.643286][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.651974][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.659365][T12359] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #19: block 9: comm syz.4.1825: unable to read itable block
[  974.672604][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.681363][T12359] EXT4-fs (loop4): I/O error while writing superblock
[  974.688448][T12359] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure
[  974.697561][T12359] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  974.737650][   T29] audit: type=1800 audit(1729716974.092:200): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="file1" dev="loop4" ino=13 res=0 errno=0
[  974.912463][ T5261] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  974.981494][ T5802] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  975.151516][ T5261] usb 3-1: Using ep0 maxpacket: 8
[  975.153704][ T5802] usb 4-1: Using ep0 maxpacket: 16
[  975.162793][T10427] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 112)
[  975.162960][T10427] Buffer I/O error on device loop4, logical block 112
[  975.163035][T10427] Buffer I/O error on device loop4, logical block 113
[  975.163110][T10427] Buffer I/O error on device loop4, logical block 114
[  975.163184][T10427] Buffer I/O error on device loop4, logical block 115
[  975.198586][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  975.218681][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  975.230250][ T5802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  975.243556][ T5802] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  975.253002][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.266014][ T5261] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  975.272534][ T5802] usb 4-1: config 0 descriptor??
[  975.275679][ T5261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.275822][ T5261] usb 3-1: Product: syz
[  975.275929][ T5261] usb 3-1: Manufacturer: syz
[  975.276040][ T5261] usb 3-1: SerialNumber: syz
[  975.351355][ T5261] usb 3-1: config 0 descriptor??
[  975.683508][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  975.687633][ T5261] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  975.718660][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  975.805097][ T5802] microsoft 0003:045E:07DA.0015: No inputs registered, leaving
[  975.815499][T12398] loop2: detected capacity change from 0 to 128
[  975.851298][ T5802] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  975.863289][ T5802] microsoft 0003:045E:07DA.0015: no inputs found
[  975.869874][ T5802] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway
[  976.026718][ T3322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.086334][ T5261] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  976.103250][ T5261] usb 3-1: USB disconnect, device number 48
[  976.209279][ T3322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.352192][ T9221] usb 4-1: USB disconnect, device number 62
[  976.389034][ T3322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.550130][ T3322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.801572][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.883338][ T3322] bridge_slave_1: left allmulticast mode
[  976.889254][ T3322] bridge_slave_1: left promiscuous mode
[  976.896105][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.942762][ T3322] bridge_slave_0: left allmulticast mode
[  976.948673][ T3322] bridge_slave_0: left promiscuous mode
[  976.963394][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.587059][ T3322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  977.759266][ T3322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  977.847725][ T3322] bond0 (unregistering): Released all slaves
[  977.887964][T10249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  977.923645][T10249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  977.934144][T10249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  977.947100][T10249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  977.958135][T10249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  977.967344][T10249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  978.210754][ T5673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  978.223739][ T5673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  978.236498][ T5673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  978.272600][ T5673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  978.290987][ T5673] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  978.301437][ T5673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  978.531082][ T9221] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  978.730354][ T9221] usb 2-1: Using ep0 maxpacket: 8
[  978.755871][ T9221] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  978.764717][ T9221] usb 2-1: config 0 has no interface number 0
[  978.810322][ T9221] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=bf.0a
[  978.820020][ T9221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.828409][ T9221] usb 2-1: Product: syz
[  978.832950][ T9221] usb 2-1: Manufacturer: syz
[  978.837780][ T9221] usb 2-1: SerialNumber: syz
[  978.914991][ T9221] usb 2-1: config 0 descriptor??
[  978.949076][ T9221] gspca_main: t613-2.14.0 probing 17a1:0128
[  979.101514][ T3322] hsr_slave_0: left promiscuous mode
[  979.183202][ T3322] hsr_slave_1: left promiscuous mode
[  979.199136][ T9221] gspca_t613: unknown sensor 0000
[  979.204897][ T9221] t613 2-1:0.196: probe with driver t613 failed with error -22
[  979.243887][ T9221] usb 2-1: USB disconnect, device number 79
[  979.264421][ T3322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  979.273374][ T3322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.336884][ T3322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  979.344883][ T3322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.466415][ T5261] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  979.486225][ T3322] veth1_macvtap: left promiscuous mode
[  979.492279][ T3322] veth0_macvtap: left promiscuous mode
[  979.498273][ T3322] veth1_vlan: left promiscuous mode
[  979.504530][ T3322] veth0_vlan: left promiscuous mode
[  979.694562][ T5261] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  979.704244][ T5261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.758001][ T5261] usb 4-1: config 0 descriptor??
[  980.357010][T12453] loop0: detected capacity change from 0 to 2048
[  980.441189][ T3322] team0 (unregistering): Port device team_slave_1 removed
[  980.473645][T12453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  980.492855][T10249] Bluetooth: hci1: command tx timeout
[  980.508671][ T3322] team0 (unregistering): Port device team_slave_0 removed
[  980.559990][   T29] audit: type=1804 audit(1729716979.912:201): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1852" name="/newroot/128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=1367 res=1 errno=0
[  981.171890][T12445] loop3: detected capacity change from 0 to 2048
[  981.303603][T12463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  981.382817][   T29] audit: type=1804 audit(1729716980.742:202): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1848" name="/newroot/70/file0/bus" dev="loop3" ino=2097152 res=1 errno=0
[  981.518312][   T29] audit: type=1804 audit(1729716980.842:203): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1848" name="/newroot/70/file0/bus" dev="loop3" ino=2097152 res=1 errno=0
[  981.792146][T12426] chnl_net:caif_netlink_parms(): no params data found
[  982.017929][ T5261] pegasus 4-1:0.0: can't reset MAC
[  982.024187][ T5261] pegasus 4-1:0.0: probe with driver pegasus failed with error -5
[  982.042803][ T5261] usb 4-1: USB disconnect, device number 63
[  982.128960][T12471] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1856'.
[  982.562075][T10249] Bluetooth: hci1: command tx timeout
[  982.626335][T12426] bridge0: port 1(bridge_slave_0) entered blocking state
[  982.634279][T12426] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.643934][T12426] bridge_slave_0: entered allmulticast mode
[  982.653172][T12426] bridge_slave_0: entered promiscuous mode
[  982.676500][T12426] bridge0: port 2(bridge_slave_1) entered blocking state
[  982.684457][T12426] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.698201][T12426] bridge_slave_1: entered allmulticast mode
[  982.707435][T12426] bridge_slave_1: entered promiscuous mode
[  982.832649][T12426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  983.017498][T12426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  983.181638][T11175] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  983.412298][T11175] usb 3-1: Using ep0 maxpacket: 8
[  983.434360][T11175] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  983.445878][T11175] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  983.457874][T11175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  983.469259][T11175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  983.479562][T11175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  983.602542][T12426] team0: Port device team_slave_0 added
[  983.749544][T12426] team0: Port device team_slave_1 added
[  983.831167][T11175] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  983.840743][T11175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  983.851525][T11175] usb 3-1: Product: syz
[  983.855945][T11175] usb 3-1: Manufacturer: syz
[  983.860820][T11175] usb 3-1: SerialNumber: syz
[  984.046645][T11175] usb 3-1: config 0 descriptor??
[  984.289595][T11175] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  984.297010][T11175] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  984.379740][T12426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  984.387737][T12426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.414230][T12426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  984.536445][T11175] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[  984.545509][T11175] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  984.555543][T11175] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  984.643488][T10249] Bluetooth: hci1: command tx timeout
[  984.772313][T11175] usb 3-1: USB disconnect, device number 49
[  984.795039][T12477] loop0: detected capacity change from 0 to 32768
[  984.802036][T12426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  984.809391][T12426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.811057][T12477] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1859 (12477)
[  984.835887][T12426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  984.940457][T12477] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  984.955554][T12477] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  984.967184][T12477] BTRFS info (device loop0): using free-space-tree
[  985.087090][T12426] hsr_slave_0: entered promiscuous mode
[  985.117305][T12426] hsr_slave_1: entered promiscuous mode
[  985.126805][T12426] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  985.134735][T12426] Cannot create hsr debugfs directory
[  986.050650][T10253] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  986.291750][T12426] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  986.316100][T12426] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  986.341999][T12426] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  986.421421][T12426] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  986.562649][T12514] netlink: 'syz.3.1866': attribute type 21 has an invalid length.
[  986.571394][T12514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1866'.
[  986.673906][T12516] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1867'.
[  986.721525][T10249] Bluetooth: hci1: command tx timeout
[  986.960727][T12426] 8021q: adding VLAN 0 to HW filter on device bond0
[  986.972038][T12514] loop3: detected capacity change from 0 to 1024
[  986.981239][T12514] hfsplus: unable to parse mount options
[  987.012978][T12426] 8021q: adding VLAN 0 to HW filter on device team0
[  987.107496][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.115271][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  987.131037][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  987.138735][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  987.477833][T12522] loop3: detected capacity change from 0 to 128
[  987.622341][T12522] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  987.665894][T12522] UDF-fs: error (device loop3): udf_read_inode: (ino 88) failed !bh
[  988.079274][T12532] loop3: detected capacity change from 0 to 8
[  988.138624][T12532] unable to read xattr id index table
[  988.719540][T12426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  989.203319][T12543] loop1: detected capacity change from 0 to 256
[  990.011441][ T9221] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  990.652372][T12553] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1877'.
[  990.896705][T12540] loop0: detected capacity change from 0 to 32768
[  990.908140][T12540] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1873 (12540)
[  990.930084][T12540] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  990.940719][T12540] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  990.951172][T12540] BTRFS info (device loop0): using free-space-tree
[  991.008674][ T9221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.021122][ T9221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  991.032124][ T9221] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  991.041601][ T9221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.055684][ T9221] usb 4-1: config 0 descriptor??
[  991.448806][T12426] veth0_vlan: entered promiscuous mode
[  991.479567][T12426] veth1_vlan: entered promiscuous mode
[  991.515614][T12541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1874'.
[  991.594108][T12572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1874'.
[  991.654399][ T9221] wacom 0003:056A:0029.0016: unknown main item tag 0x0
[  991.661847][ T9221] wacom 0003:056A:0029.0016: unknown main item tag 0x0
[  991.669152][ T9221] wacom 0003:056A:0029.0016: collection stack underflow
[  991.676498][ T9221] wacom 0003:056A:0029.0016: item 0 0 0 12 parsing failed
[  991.953496][T12426] veth0_macvtap: entered promiscuous mode
[  991.998504][ T9221] wacom 0003:056A:0029.0016: parse failed
[  992.005555][ T9221] wacom 0003:056A:0029.0016: probe with driver wacom failed with error -22
[  992.066108][T10253] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  992.096059][T12426] veth1_macvtap: entered promiscuous mode
[  992.114059][ T5261] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  992.158275][ T9221] usb 4-1: USB disconnect, device number 64
[  992.249552][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  992.261491][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.271798][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  992.282580][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.292771][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  992.303570][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.313803][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  992.329716][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.341350][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  992.352727][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.362913][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  992.373723][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.388926][T12426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  992.424803][ T5261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  992.436421][ T5261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  992.446642][ T5261] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  992.456120][ T5261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.554865][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.565037][ T5261] usb 3-1: config 0 descriptor??
[  992.569109][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.584649][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.595616][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.605845][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.616647][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.632020][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.644209][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.654633][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.665430][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.675593][T12426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.686493][T12426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.701414][T12426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  992.885676][ T5802] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  992.945695][T12426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  992.955059][T12426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  992.966501][T12426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  992.975793][T12426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  993.101554][ T5802] usb 2-1: Using ep0 maxpacket: 16
[  993.123047][ T5802] usb 2-1: config 0 has no interfaces?
[  993.128841][ T5802] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  993.142913][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.159035][ T5261] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  993.317502][ T5802] usb 2-1: config 0 descriptor??
[  993.552793][   T29] audit: type=1326 audit(1729716992.902:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f798a97dff9 code=0x0
[  993.709052][ T5261] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device
[  993.717193][ T5261] pyra 0003:1E7D:2CF6.0017: couldn't install mouse
[  993.745274][ T5261] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -71
[  993.816158][ T5261] usb 3-1: USB disconnect, device number 50
[  994.459029][T12592] loop0: detected capacity change from 0 to 128
[  994.500261][T12592] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  994.579982][T12592] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  994.692752][T12595] loop3: detected capacity change from 0 to 1024
[  994.704247][T12595] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  994.818931][T12595] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  994.852345][T12595] EXT4-fs (loop3): orphan cleanup on readonly fs
[  994.858965][T12595] EXT4-fs error (device loop3): ext4_quota_enable:7049: comm syz.3.1884: Bad quota inum: 46, type: 0
[  994.924961][T12601] loop2: detected capacity change from 0 to 256
[  994.951285][T12595] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=46). Please run e2fsck to fix.
[  994.971235][T12595] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  994.987288][T12595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  995.072621][ T5802] usb 2-1: USB disconnect, device number 80
[  995.131807][ T5261] usb 1-1: new low-speed USB device number 66 using dummy_hcd
[  995.237646][T11090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  995.452226][ T5261] usb 1-1: device descriptor read/64, error -71
[  995.822171][ T5261] usb 1-1: new low-speed USB device number 67 using dummy_hcd
[  996.163971][T12615] FAULT_INJECTION: forcing a failure.
[  996.163971][T12615] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  996.168741][T12611] loop2: detected capacity change from 0 to 4096
[  996.177548][T12615] CPU: 0 UID: 0 PID: 12615 Comm: syz.3.1888 Tainted: G        W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  996.186903][T12611] ntfs3: Unknown parameter 'nosparse'
[  996.196039][T12615] Tainted: [W]=WARN
[  996.196094][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  996.196173][T12615] Call Trace:
[  996.196230][T12615]  <TASK>
[  996.222449][T12615]  dump_stack_lvl+0x216/0x2d0
[  996.227463][T12615]  dump_stack+0x1e/0x30
[  996.231926][T12615]  should_fail_ex+0x748/0x7f0
[  996.236926][T12615]  should_fail+0x2a/0x40
[  996.241455][T12615]  should_fail_usercopy+0x2e/0x40
[  996.246798][T12615]  _copy_from_user+0x33/0x160
[  996.251778][T12615]  ___sys_sendmsg+0x120/0x3c0
[  996.256758][T12615]  ? kmsan_get_metadata+0x13e/0x1c0
[  996.262302][T12615]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  996.268463][T12615]  ? __rcu_read_unlock+0x7b/0xe0
[  996.273711][T12615]  ? __fget_files+0x4f5/0x5c0
[  996.278699][T12615]  ? kmsan_get_metadata+0x13e/0x1c0
[  996.284229][T12615]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  996.290381][T12615]  __x64_sys_sendmsg+0x300/0x4a0
[  996.295634][T12615]  ? ksys_write+0x416/0x4c0
[  996.300435][T12615]  ? kmsan_get_metadata+0x13e/0x1c0
[  996.305988][T12615]  x64_sys_call+0x2da0/0x3ba0
[  996.310973][T12615]  do_syscall_64+0xcd/0x1e0
[  996.315781][T12615]  ? clear_bhb_loop+0x25/0x80
[  996.320774][T12615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.327003][T12615] RIP: 0033:0x7f13edd7dff9
[  996.331658][T12615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  996.351552][T12615] RSP: 002b:00007f13eebd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  996.360254][T12615] RAX: ffffffffffffffda RBX: 00007f13edf36058 RCX: 00007f13edd7dff9
[  996.368462][T12615] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004
[  996.376660][T12615] RBP: 00007f13eebd3090 R08: 0000000000000000 R09: 0000000000000000
[  996.384857][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  996.393052][T12615] R13: 0000000000000000 R14: 00007f13edf36058 R15: 00007ffcff377168
[  996.401279][T12615]  </TASK>
[  996.418724][ T5261] usb 1-1: device descriptor read/64, error -71
[  996.533164][ T5261] usb usb1-port1: attempt power cycle
[  997.811220][ T5261] usb 1-1: new low-speed USB device number 68 using dummy_hcd
[  997.831544][ T5802] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  998.021538][ T5261] usb 1-1: device not accepting address 68, error -71
[  998.068700][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  998.077114][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  998.240265][ T5802] usb 4-1: Using ep0 maxpacket: 8
[  998.342845][ T5802] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  998.354665][ T5802] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  998.369916][ T5802] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  998.381632][ T5802] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  998.395271][ T5802] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  998.404728][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.559885][T12617] loop1: detected capacity change from 0 to 32768
[  998.590201][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  998.590201][T12617] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1889 (12617)
[  998.598990][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  998.645823][T12617] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  998.656461][T12617] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  998.672467][T12617] BTRFS info (device loop1): using free-space-tree
[  998.716269][T12631] loop2: detected capacity change from 0 to 1024
[  998.882623][T12631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  998.895981][T12631] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  998.961150][ T5802] usb 4-1: usb_control_msg returned -32
[  998.967204][ T5802] usbtmc 4-1:16.0: can't read capabilities
[  999.222674][T10516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  999.237146][ T9981] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  999.372575][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'.
[ 1000.398287][T12652] loop4: detected capacity change from 0 to 4096
[ 1000.469556][T12652] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[ 1000.725286][ T5261] usb 4-1: USB disconnect, device number 65
[ 1000.910352][T12652] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[ 1000.992322][T12652] ntfs3: Cannot use different iocharset when remounting!
[ 1001.176747][T12682] loop0: detected capacity change from 0 to 128
[ 1001.215211][T12682] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1001.298173][T12682] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1002.127506][T12689] loop4: detected capacity change from 0 to 64
[ 1002.197469][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[ 1002.207029][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[ 1002.216367][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[ 1002.225641][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[ 1002.316806][T12693] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1906'.
[ 1002.751570][ T5802] usb 1-1: new low-speed USB device number 70 using dummy_hcd
[ 1002.981996][T11175] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1003.001445][ T5802] usb 1-1: device descriptor read/64, error -71
[ 1003.189003][T11175] usb 5-1: config 0 has no interfaces?
[ 1003.216198][T11175] usb 5-1: config 0 has no interfaces?
[ 1003.252061][T11175] usb 5-1: config 0 has no interfaces?
[ 1003.292503][ T5802] usb 1-1: new low-speed USB device number 71 using dummy_hcd
[ 1003.323515][T12685] loop2: detected capacity change from 0 to 32768
[ 1003.334710][T12685] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1904 (12685)
[ 1003.341338][T11175] usb 5-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[ 1003.357787][T11175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.366264][T11175] usb 5-1: Product: syz
[ 1003.370664][T11175] usb 5-1: Manufacturer: syz
[ 1003.381720][T11175] usb 5-1: SerialNumber: syz
[ 1003.410476][T12685] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1003.421420][T12685] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[ 1003.431880][T12685] BTRFS info (device loop2): using free-space-tree
[ 1003.501141][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1003.503973][ T5802] usb 1-1: device descriptor read/64, error -71
[ 1003.524231][T11175] usb 5-1: config 0 descriptor??
[ 1003.622531][ T5802] usb usb1-port1: attempt power cycle
[ 1003.748757][ T5242] usb 5-1: USB disconnect, device number 53
[ 1003.984081][ T5802] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[ 1004.023131][ T5802] usb 1-1: device descriptor read/8, error -71
[ 1004.059430][T10516] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1004.336639][T12728] dccp_close: ABORT with 1 bytes unread
[ 1005.861439][ T5802] usb 1-1: new low-speed USB device number 73 using dummy_hcd
[ 1006.616921][T12731] loop1: detected capacity change from 0 to 32768
[ 1006.629387][ T5802] usb 1-1: device descriptor read/8, error -71
[ 1006.743252][ T5802] usb usb1-port1: unable to enumerate USB device
[ 1006.848862][T12731] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1006.949605][T12757] FAULT_INJECTION: forcing a failure.
[ 1006.949605][T12757] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1006.970106][T12757] CPU: 0 UID: 0 PID: 12757 Comm: syz.2.1911 Tainted: G        W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 1006.982721][T12757] Tainted: [W]=WARN
[ 1006.986719][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1006.997007][T12757] Call Trace:
[ 1007.000471][T12757]  <TASK>
[ 1007.003588][T12757]  dump_stack_lvl+0x216/0x2d0
[ 1007.008593][T12757]  dump_stack+0x1e/0x30
[ 1007.013044][T12757]  should_fail_ex+0x748/0x7f0
[ 1007.018032][T12757]  should_fail+0x2a/0x40
[ 1007.022571][T12757]  should_fail_usercopy+0x2e/0x40
[ 1007.027914][T12757]  _copy_to_user+0x33/0x110
[ 1007.032724][T12757]  simple_read_from_buffer+0x199/0x340
[ 1007.038478][T12757]  proc_fail_nth_read+0x1e5/0x2c0
[ 1007.043817][T12757]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1007.049677][T12757]  vfs_read+0x29b/0xf60
[ 1007.054116][T12757]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1007.059646][T12757]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 1007.066308][T12757]  ksys_read+0x24f/0x4c0
[ 1007.070859][T12757]  __x64_sys_read+0x93/0xe0
[ 1007.075649][T12757]  x64_sys_call+0x3055/0x3ba0
[ 1007.080649][T12757]  do_syscall_64+0xcd/0x1e0
[ 1007.085450][T12757]  ? clear_bhb_loop+0x25/0x80
[ 1007.090412][T12757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.096657][T12757] RIP: 0033:0x7f278837ca3c
[ 1007.101317][T12757] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 1007.121235][T12757] RSP: 002b:00007f2787dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1007.129974][T12757] RAX: ffffffffffffffda RBX: 00007f2788536058 RCX: 00007f278837ca3c
[ 1007.138205][T12757] RDX: 000000000000000f RSI: 00007f2787dff0a0 RDI: 0000000000000003
[ 1007.146421][T12757] RBP: 00007f2787dff090 R08: 0000000000000000 R09: 0000000000000000
[ 1007.154647][T12757] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001
[ 1007.162864][T12757] R13: 0000000000000000 R14: 00007f2788536058 R15: 00007ffd106c8548
[ 1007.171101][T12757]  </TASK>
[ 1008.861846][T12752] loop4: detected capacity change from 0 to 32768
[ 1009.358722][T12756] loop3: detected capacity change from 0 to 32768
[ 1009.396767][T12752] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1920 (12752)
[ 1009.511997][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'.
[ 1011.126033][ T9981] ocfs2: Unmounting device (7,1) on (node local)
[ 1011.276158][T12769] loop3: detected capacity change from 0 to 128
[ 1011.286270][T12769] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1011.323025][T12769] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1011.924987][T12779] loop1: detected capacity change from 0 to 64
[ 1012.026603][T12776] loop0: detected capacity change from 0 to 1024
[ 1012.105362][T12776] hfsplus: extend alloc file! (8192,65536,366)
[ 1012.346522][T12776] kvm: pic: non byte write
[ 1012.354578][ T5802] usb 4-1: new low-speed USB device number 66 using dummy_hcd
[ 1013.161879][ T5802] usb 4-1: device descriptor read/64, error -71
[ 1013.431197][ T5802] usb 4-1: new low-speed USB device number 67 using dummy_hcd
[ 1013.461733][ T9221] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1013.571652][ T5802] usb 4-1: device descriptor read/64, error -71
[ 1013.632596][ T9221] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1013.644686][ T9221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1013.655984][ T9221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1013.666134][ T9221] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1013.679516][ T9221] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1013.686055][ T5802] usb usb4-port1: attempt power cycle
[ 1013.689188][ T9221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.856388][ T9221] usb 2-1: config 0 descriptor??
[ 1014.064103][ T5802] usb 4-1: new low-speed USB device number 68 using dummy_hcd
[ 1014.105334][ T5802] usb 4-1: device descriptor read/8, error -71
[ 1014.289492][T12795] loop2: detected capacity change from 0 to 256
[ 1014.296803][ T9221] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1014.305176][ T9221] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1014.312985][ T9221] plantronics 0003:047F:FFFF.0018: unbalanced collection at end of report description
[ 1014.362351][ T5802] usb 4-1: new low-speed USB device number 69 using dummy_hcd
[ 1014.389242][ T9221] plantronics 0003:047F:FFFF.0018: parse failed
[ 1014.396632][ T9221] plantronics 0003:047F:FFFF.0018: probe with driver plantronics failed with error -22
[ 1014.427915][ T5802] usb 4-1: device descriptor read/8, error -71
[ 1014.672527][ T5802] usb usb4-port1: unable to enumerate USB device
[ 1014.874886][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1934'.
[ 1014.992225][T12781] loop4: detected capacity change from 0 to 32768
[ 1015.001584][T12781] btrfs: Unknown parameter 'fragment'
[ 1015.091416][ T5242] usb 2-1: USB disconnect, device number 81
[ 1015.326764][T12802] loop3: detected capacity change from 0 to 8
[ 1015.838415][T12802] unable to read inode lookup table
[ 1016.078915][T12802] kvm: pic: non byte write
[ 1016.139019][T12804] loop4: detected capacity change from 0 to 256
[ 1017.129752][T12799] loop2: detected capacity change from 0 to 32768
[ 1017.145175][T12799] BTRFS: device /dev/loop2 (7:2) using temp-fsid 2eb2ad3f-ad41-4765-8a99-b3755826e480
[ 1017.155328][T12799] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1935 (12799)
[ 1017.194796][T12799] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1017.211544][T12799] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[ 1017.221876][T12799] BTRFS info (device loop2): using free-space-tree
[ 1017.281317][T12820] : entered promiscuous mode
[ 1017.663686][ T9221] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1017.785474][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[ 1017.793643][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[ 1017.862168][ T9221] usb 4-1: Using ep0 maxpacket: 8
[ 1017.874734][ T9221] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1017.883477][ T9221] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1017.894929][ T9221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1017.905337][ T9221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1017.920046][ T9221] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1017.929278][T12840] loop0: detected capacity change from 0 to 128
[ 1017.934762][ T9221] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1017.949171][ T9221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.035067][   T29] audit: type=1800 audit(1729717017.402:205): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1944" name="bus" dev="loop0" ino=1048907 res=0 errno=0
[ 1018.319762][T10516] BTRFS info (device loop2): last unmount of filesystem 2eb2ad3f-ad41-4765-8a99-b3755826e480
[ 1018.345259][ T9221] usb 4-1: GET_CAPABILITIES returned 0
[ 1018.351254][ T9221] usbtmc 4-1:16.0: can't read capabilities
[ 1018.417899][T12844] loop4: detected capacity change from 0 to 512
[ 1018.486152][T12844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1018.546011][T12820] loop3: detected capacity change from 0 to 16
[ 1018.576120][T12844] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.1945: Unimplemented hash flags: 0x0001
[ 1018.588266][T12844] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1945: Corrupt directory, running e2fsck is recommended
[ 1018.703656][T12820] erofs: DAX unsupported by block device. Turning off DAX.
[ 1018.712405][T12820] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1018.725915][T12820] : left promiscuous mode
[ 1018.811929][T12844] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1945: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[ 1018.934903][ T5802] usb 4-1: USB disconnect, device number 70
[ 1019.099447][T12854] loop2: detected capacity change from 0 to 1024
[ 1019.482894][T12851] loop1: detected capacity change from 0 to 4096
[ 1019.564402][T12856] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1019.607967][   T29] audit: type=1800 audit(1729717018.962:206): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1948" name="bus" dev="loop1" ino=18 res=0 errno=0
[ 1020.158647][T12426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1020.331882][T12860] loop2: detected capacity change from 0 to 8
[ 1020.389115][T12860] unable to read inode lookup table
[ 1020.801250][ T5802] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1021.253713][T12866] loop4: detected capacity change from 0 to 256
[ 1021.774157][T12858] loop3: detected capacity change from 0 to 32768
[ 1021.790041][T12858] BTRFS: device /dev/loop3 (7:3) using temp-fsid 1e0ebab3-4a6b-48b4-bd1b-387f919559c8
[ 1021.800236][T12858] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1949 (12858)
[ 1021.884529][T12858] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1021.895974][T12858] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 1021.906229][T12858] BTRFS info (device loop3): using free-space-tree
[ 1021.991778][ T5802] usb 2-1: device not accepting address 82, error -71
[ 1022.331644][ T5242] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1022.500483][T12893] loop1: detected capacity change from 0 to 512
[ 1022.548794][T11090] BTRFS info (device loop3): last unmount of filesystem 1e0ebab3-4a6b-48b4-bd1b-387f919559c8
[ 1022.582586][ T5242] usb 1-1: Using ep0 maxpacket: 8
[ 1022.653749][T12893] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[ 1022.684907][ T5242] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[ 1022.694607][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.703274][ T5242] usb 1-1: Product: syz
[ 1022.707685][ T5242] usb 1-1: Manufacturer: syz
[ 1022.712709][ T5242] usb 1-1: SerialNumber: syz
[ 1022.768805][T12893] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[ 1022.778603][T12893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1022.824686][ T5242] usb 1-1: config 0 descriptor??
[ 1023.075519][ T5242] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1023.134151][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1023.234297][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1023.331287][ T9221] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1023.579640][ T9981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1023.706072][T12897] loop0: detected capacity change from 0 to 128
[ 1023.808607][T12897] VFS: could not find a valid V7 on loop0.
[ 1024.117560][ T5242] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1024.181198][ T5242] usb 1-1: USB disconnect, device number 74
[ 1024.188446][T12886] loop2: detected capacity change from 0 to 32768
[ 1024.201123][T12886] BTRFS: device /dev/loop2 (7:2) using temp-fsid 2b615afd-665b-4d0a-a6cf-99bdecda37e2
[ 1024.211124][T12886] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1956 (12886)
[ 1024.293055][T12886] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1024.303832][T12886] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[ 1024.314096][T12886] BTRFS info (device loop2): using free-space-tree
[ 1024.324971][ T9221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1024.336355][ T9221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1024.346501][ T9221] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1024.359769][ T9221] usb 5-1: New USB device found, idVendor=15c2, idProduct=2208, bcdDevice= 0.00
[ 1024.373047][ T9221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1024.392492][ T9221] usb 5-1: config 0 descriptor??
[ 1024.503241][T12904] loop1: detected capacity change from 0 to 256
[ 1024.604689][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'.
[ 1024.636631][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.835886][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.865708][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.910148][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.937771][T12890] netlink: 'syz.4.1955': attribute type 64 has an invalid length.
[ 1024.949403][T12890] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[ 1024.957642][T12904] FAT-fs (loop1): Directory bread(block 64) failed
[ 1024.972197][T12904] FAT-fs (loop1): Directory bread(block 65) failed
[ 1024.979107][T12904] FAT-fs (loop1): Directory bread(block 66) failed
[ 1024.995540][T12904] FAT-fs (loop1): Directory bread(block 67) failed
[ 1025.002746][T12904] FAT-fs (loop1): Directory bread(block 68) failed
[ 1025.009519][T12904] FAT-fs (loop1): Directory bread(block 69) failed
[ 1025.016604][T12904] FAT-fs (loop1): Directory bread(block 70) failed
[ 1025.023488][T12904] FAT-fs (loop1): Directory bread(block 71) failed
[ 1025.030381][T12904] FAT-fs (loop1): Directory bread(block 72) failed
[ 1025.037305][T12904] FAT-fs (loop1): Directory bread(block 73) failed
[ 1025.118057][T12904] 9pnet_fd: Insufficient options for proto=fd
[ 1025.236996][T12921] netlink: 'syz.3.1959': attribute type 12 has an invalid length.
[ 1025.343935][T12886] BTRFS error (device loop2): open_ctree failed
[ 1025.373793][T12923] loop1: detected capacity change from 0 to 256
[ 1025.385824][ T9221] usbhid 5-1:0.0: can't add hid device: -71
[ 1025.400238][ T9221] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1025.445407][ T9221] usb 5-1: USB disconnect, device number 54
[ 1026.986617][T12935] binder: 12934:12935 ioctl 40087543 200002c0 returned -22
[ 1027.098065][T12938] FAULT_INJECTION: forcing a failure.
[ 1027.098065][T12938] name failslab, interval 1, probability 0, space 0, times 0
[ 1027.111403][T12938] CPU: 0 UID: 0 PID: 12938 Comm: syz.4.1963 Tainted: G        W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 1027.124006][T12938] Tainted: [W]=WARN
[ 1027.128000][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1027.138297][T12938] Call Trace:
[ 1027.141774][T12938]  <TASK>
[ 1027.144897][T12938]  dump_stack_lvl+0x216/0x2d0
[ 1027.149903][T12938]  dump_stack+0x1e/0x30
[ 1027.154355][T12938]  should_fail_ex+0x748/0x7f0
[ 1027.159359][T12938]  should_failslab+0x17f/0x210
[ 1027.164395][T12938]  __kmalloc_cache_noprof+0xbf/0xb00
[ 1027.170007][T12938]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1027.176163][T12938]  ? __se_sys_mount+0x21d/0x810
[ 1027.181321][T12938]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1027.187478][T12938]  __se_sys_mount+0x21d/0x810
[ 1027.192472][T12938]  ? ksys_write+0x405/0x4c0
[ 1027.197276][T12938]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1027.203482][T12938]  __x64_sys_mount+0xe4/0x150
[ 1027.208490][T12938]  x64_sys_call+0x255a/0x3ba0
[ 1027.213491][T12938]  do_syscall_64+0xcd/0x1e0
[ 1027.218315][T12938]  ? clear_bhb_loop+0x25/0x80
[ 1027.223282][T12938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1027.229520][T12938] RIP: 0033:0x7f9a8917dff9
[ 1027.234177][T12938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1027.254089][T12938] RSP: 002b:00007f9a89ed8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1027.262810][T12938] RAX: ffffffffffffffda RBX: 00007f9a89335f80 RCX: 00007f9a8917dff9
[ 1027.271025][T12938] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 1027.279219][T12938] RBP: 00007f9a89ed8090 R08: 0000000020000100 R09: 0000000000000000
[ 1027.287418][T12938] R10: 000000000380004c R11: 0000000000000246 R12: 0000000000000001
[ 1027.295612][T12938] R13: 0000000000000000 R14: 00007f9a89335f80 R15: 00007ffd105aff78
[ 1027.303840][T12938]  </TASK>
[ 1027.879204][T12941] loop2: detected capacity change from 0 to 256
[ 1027.915160][T12945] loop4: detected capacity change from 0 to 128
[ 1028.186239][T12939] loop1: detected capacity change from 0 to 4096
[ 1028.323047][T12946] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1028.364081][   T29] audit: type=1800 audit(1729717027.732:207): pid=12939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1964" name="bus" dev="loop1" ino=18 res=0 errno=0
[ 1028.639922][ T9221] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1029.710413][ T9221] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1029.720054][ T9221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.728840][ T9221] usb 2-1: Product: syz
[ 1029.733366][ T9221] usb 2-1: Manufacturer: syz
[ 1029.738189][ T9221] usb 2-1: SerialNumber: syz
[ 1030.622143][T12948] loop2: detected capacity change from 0 to 32768
[ 1030.633991][ T9221] usb 2-1: config 0 descriptor??
[ 1030.640515][ T9221] usb 2-1: can't set config #0, error -71
[ 1030.649250][ T9221] usb 2-1: USB disconnect, device number 84
[ 1030.837962][T12950] loop3: detected capacity change from 0 to 4096
[ 1030.926560][T12948] BTRFS: device /dev/loop2 (7:2) using temp-fsid 33d93b2d-237b-46a2-99b8-2d2fa5aac2de
[ 1030.936753][T12948] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1967 (12948)
[ 1031.090399][T12955] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1031.382636][   T29] audit: type=1800 audit(1729717030.752:208): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1968" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1032.633520][T12954] Invalid ELF header magic: != ELF
[ 1032.805582][T12963] 9pnet_fd: Insufficient options for proto=fd
[ 1032.920278][T12963] loop3: detected capacity change from 0 to 128
[ 1034.827310][T12962] loop1: detected capacity change from 0 to 32768
[ 1034.893266][T12963] VFS: could not find a valid V7 on loop3.
[ 1035.012250][T12962] (syz.1.1973,12962,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1035.040388][T12962] (syz.1.1973,12962,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1035.258182][T12962] JBD2: Ignoring recovery information on journal
[ 1035.377184][T12962] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1035.612883][ T9981] ocfs2: Unmounting device (7,1) on (node local)
[ 1035.651916][T12968] vlan2: entered promiscuous mode
[ 1035.657240][T12968] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1035.747091][T12969] overlayfs: missing 'lowerdir'
[ 1036.046626][T12968] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[ 1036.602939][ T5673] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1036.612292][ T5673] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1036.621683][ T5673] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1036.635191][ T5673] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1036.646431][ T5673] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1036.661025][ T5673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1037.364766][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'.
[ 1037.379037][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'.
[ 1037.566610][T12979] loop4: detected capacity change from 0 to 256
[ 1038.164198][T12979] FAT-fs (loop4): Directory bread(block 64) failed
[ 1038.171816][T12979] FAT-fs (loop4): Directory bread(block 65) failed
[ 1038.178907][T12979] FAT-fs (loop4): Directory bread(block 66) failed
[ 1038.185855][T12979] FAT-fs (loop4): Directory bread(block 67) failed
[ 1038.197724][T12979] FAT-fs (loop4): Directory bread(block 68) failed
[ 1038.206036][T12979] FAT-fs (loop4): Directory bread(block 69) failed
[ 1038.213191][T12979] FAT-fs (loop4): Directory bread(block 70) failed
[ 1038.219975][T12979] FAT-fs (loop4): Directory bread(block 71) failed
[ 1038.227067][T12979] FAT-fs (loop4): Directory bread(block 72) failed
[ 1038.233994][T12979] FAT-fs (loop4): Directory bread(block 73) failed
[ 1038.705830][T12970] chnl_net:caif_netlink_parms(): no params data found
[ 1038.881826][ T5673] Bluetooth: hci6: command tx timeout
[ 1039.200692][T12987] loop1: detected capacity change from 0 to 256
[ 1039.754271][T12990] loop2: detected capacity change from 0 to 128
[ 1039.775334][T12990] ext4: Unknown parameter 'fscontext'
[ 1040.897350][T12970] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.905403][T12970] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.913463][T12970] bridge_slave_0: entered allmulticast mode
[ 1040.922819][T12970] bridge_slave_0: entered promiscuous mode
[ 1040.961711][ T5673] Bluetooth: hci6: command tx timeout
[ 1041.028212][T12970] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1041.036149][T12970] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.044445][T12970] bridge_slave_1: entered allmulticast mode
[ 1041.053756][T12970] bridge_slave_1: entered promiscuous mode
[ 1041.946732][T12970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1042.046402][T12970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1042.148102][T12970] team0: Port device team_slave_0 added
[ 1042.165027][T12970] team0: Port device team_slave_1 added
[ 1042.209762][T12993] loop4: detected capacity change from 0 to 4096
[ 1042.377690][T12998] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1042.444705][T12970] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1042.452066][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1042.478516][T12970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1042.570557][T12970] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1042.578443][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1042.609296][T12970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1042.670119][   T29] audit: type=1800 audit(1729717042.032:209): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1981" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1042.784441][T11181] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1042.972600][T11181] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1042.982319][T11181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.990599][T11181] usb 5-1: Product: syz
[ 1042.995173][T11181] usb 5-1: Manufacturer: syz
[ 1043.000015][T11181] usb 5-1: SerialNumber: syz
[ 1043.045860][T10249] Bluetooth: hci6: command tx timeout
[ 1043.068611][T12970] hsr_slave_0: entered promiscuous mode
[ 1043.102967][T11181] usb 5-1: config 0 descriptor??
[ 1043.139960][T12970] hsr_slave_1: entered promiscuous mode
[ 1043.152711][T12970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1043.160734][T12970] Cannot create hsr debugfs directory
[ 1043.331825][T11181] mos7840 5-1:0.0: required endpoints missing
[ 1043.764376][T11181] usb 5-1: USB disconnect, device number 55
[ 1044.142562][T12970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1044.479202][T12970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.006772][T12970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.138542][T10249] Bluetooth: hci6: command tx timeout
[ 1045.319314][T12970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.584291][T13007] loop3: detected capacity change from 0 to 2048
[ 1046.007939][T13002] loop2: detected capacity change from 0 to 32768
[ 1046.194660][T13002] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1046.205398][T13002] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[ 1046.215623][T13002] BTRFS info (device loop2): using free-space-tree
[ 1046.245961][T12970] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1046.274252][T12970] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1046.305642][T12970] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1046.331525][T12970] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1046.761315][T11181] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1046.820072][T13007] syzkaller1: entered promiscuous mode
[ 1046.826138][T13007] syzkaller1: entered allmulticast mode
[ 1046.843375][T12163] bridge_slave_1: left allmulticast mode
[ 1046.849295][T12163] bridge_slave_1: left promiscuous mode
[ 1046.856065][T12163] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.876663][T12163] bridge_slave_0: left allmulticast mode
[ 1046.886582][T12163] bridge_slave_0: left promiscuous mode
[ 1046.900810][T12163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.257742][T10516] BTRFS info (device loop2): last unmount of filesystem 33d93b2d-237b-46a2-99b8-2d2fa5aac2de
[ 1047.268429][T11181] usb 5-1: Using ep0 maxpacket: 32
[ 1047.275618][T11181] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1047.285065][T11181] usb 5-1: config 0 has no interface number 0
[ 1047.352657][T11181] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1047.362966][T11181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.372151][T11181] usb 5-1: Product: syz
[ 1047.376557][T11181] usb 5-1: Manufacturer: syz
[ 1047.382291][T11181] usb 5-1: SerialNumber: syz
[ 1047.403139][T11181] usb 5-1: config 0 descriptor??
[ 1047.430665][T11181] smsc95xx v2.0.0
[ 1047.433623][T12163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1047.480584][T12163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1047.562255][T12163] bond0 (unregistering): Released all slaves
[ 1048.175269][T11181] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1048.186585][T11181] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1049.096859][ T9221] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1049.167439][T12163] hsr_slave_0: left promiscuous mode
[ 1049.185177][T12163] hsr_slave_1: left promiscuous mode
[ 1049.196546][T12163] batman_adv: batadv0: Interface deactivated: dummy0
[ 1049.204035][T12163] batman_adv: batadv0: Removing interface: dummy0
[ 1049.241983][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1049.253242][T12163] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1049.286350][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1049.294611][T12163] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1049.333452][ T9221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.344351][ T9221] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1049.360180][ T9221] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1049.370659][ T9221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.432956][T12163] veth1_macvtap: left promiscuous mode
[ 1049.438824][T12163] veth0_macvtap: left promiscuous mode
[ 1049.445004][T12163] veth1_vlan: left promiscuous mode
[ 1049.453657][T12163] veth0_vlan: left promiscuous mode
[ 1049.570850][ T9221] usb 3-1: config 0 descriptor??
[ 1049.613348][ T9221] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1049.846210][T13045] loop3: detected capacity change from 0 to 256
[ 1050.217912][T12163] team0 (unregistering): Port device vlan0 removed
[ 1050.432792][T12163] team0 (unregistering): Port device team_slave_1 removed
[ 1050.507285][T12163] team0 (unregistering): Port device team_slave_0 removed
[ 1050.789894][T11181] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[ 1050.803169][T11181] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[ 1050.998899][T11181] usb 5-1: USB disconnect, device number 56
[ 1051.290317][T12970] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1051.758009][T12970] 8021q: adding VLAN 0 to HW filter on device team0
[ 1051.932464][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.940149][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1052.159360][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1052.167129][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1052.335557][T11181] usb 3-1: USB disconnect, device number 51
[ 1052.959350][T13051] loop1: detected capacity change from 0 to 4096
[ 1052.998902][T13053] loop3: detected capacity change from 0 to 32768
[ 1053.016627][T13053] BTRFS: device /dev/loop3 (7:3) using temp-fsid ff608a7c-f6ea-4356-a93c-e940be5f423f
[ 1053.027812][T13053] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1998 (13053)
[ 1053.081981][T13053] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1053.092648][T13053] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 1053.102971][T13053] BTRFS info (device loop3): using free-space-tree
[ 1053.300201][T13065] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1053.480459][   T29] audit: type=1800 audit(1729717052.812:210): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1997" name="bus" dev="loop1" ino=18 res=0 errno=0
[ 1053.495788][T13073] loop2: detected capacity change from 0 to 1024
[ 1053.537333][T13073] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1053.694183][T13073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1053.711509][T11181] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1053.723961][T11090] BTRFS info (device loop3): last unmount of filesystem ff608a7c-f6ea-4356-a93c-e940be5f423f
[ 1053.914757][T11181] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1053.924547][T11181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.932981][T11181] usb 2-1: Product: syz
[ 1053.937387][T11181] usb 2-1: Manufacturer: syz
[ 1053.942316][T11181] usb 2-1: SerialNumber: syz
[ 1054.057569][T11181] usb 2-1: config 0 descriptor??
[ 1054.138897][T10516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1054.276750][T11181] mos7840 2-1:0.0: required endpoints missing
[ 1054.579260][T12970] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1054.814937][ T5802] usb 2-1: USB disconnect, device number 85
[ 1054.822992][T12970] veth0_vlan: entered promiscuous mode
[ 1054.963875][T12970] veth1_vlan: entered promiscuous mode
[ 1055.210195][T12970] veth0_macvtap: entered promiscuous mode
[ 1055.245246][T12970] veth1_macvtap: entered promiscuous mode
[ 1055.260296][T13094] loop2: detected capacity change from 0 to 1024
[ 1055.312949][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.323837][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.334051][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.337544][T13094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1055.345000][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.345096][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.379716][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.382206][ T5802] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1055.389992][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.411710][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.421891][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.432751][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.446529][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.457292][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.472440][T12970] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1055.620163][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.631385][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.641610][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.654000][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.664237][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.675313][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.685516][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.696317][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.713847][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.726567][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.736796][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.747611][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.762887][T12970] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1055.815681][ T5802] usb 4-1: Using ep0 maxpacket: 32
[ 1055.830850][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1055.842596][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1055.852940][ T5802] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1055.862457][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.864159][T12970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.879966][T12970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.889161][T12970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.898387][T12970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.989745][ T5802] usb 4-1: config 0 descriptor??
[ 1056.115464][   T29] audit: type=1800 audit(1729717055.312:211): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2007" name="bus" dev="loop2" ino=19 res=0 errno=0
[ 1056.252418][T13095] loop3: detected capacity change from 0 to 64
[ 1056.437210][T13105] hfs: keylen 94 too large
[ 1056.442199][T13105] hfs: request for non-existent node 1818584064 in B*Tree
[ 1056.449724][T13105] hfs: request for non-existent node 1818584064 in B*Tree
[ 1056.478784][T13104] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1056.532685][T13107] No control pipe specified
[ 1056.576023][T10516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1056.763282][T13095] hfs: keylen 94 too large
[ 1056.768060][T13095] =====================================================
[ 1056.776035][T13095] BUG: KMSAN: uninit-value in hfs_brec_find+0x65e/0x980
[ 1056.783414][T13095]  hfs_brec_find+0x65e/0x980
[ 1056.788511][T13095]  hfs_brec_read+0x3f/0x1a0
[ 1056.793568][T13095]  hfs_lookup+0x1ce/0x3d0
[ 1056.798211][T13095]  __lookup_slow+0x506/0x6e0
[ 1056.803459][T13095]  lookup_slow+0x6a/0xd0
[ 1056.808019][T13095]  link_path_walk+0xf16/0x1400
[ 1056.813367][T13095]  __filename_parentat+0x253/0x8e0
[ 1056.818789][T13095]  filename_create+0xbb/0x6e0
[ 1056.824039][T13095]  do_mkdirat+0x69/0x810
[ 1056.835418][T13095]  __x64_sys_mkdirat+0xc6/0x120
[ 1056.840484][T13095]  x64_sys_call+0x3a81/0x3ba0
[ 1056.847550][T13095]  do_syscall_64+0xcd/0x1e0
[ 1056.852556][T13095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.858814][T13095] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1056.861647][T13095] Local variable fd created at:
[ 1056.866729][T13095]  hfs_lookup+0x5b/0x3d0
[ 1056.871465][T13095]  __lookup_slow+0x506/0x6e0
[ 1056.876352][T13095] 
[ 1056.878909][T13095] CPU: 0 UID: 0 PID: 13095 Comm: syz.3.2003 Tainted: G        W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 1056.891914][T13095] Tainted: [W]=WARN
[ 1056.895948][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1056.906608][T13095] =====================================================
[ 1056.914037][T13095] Disabling lock debugging due to kernel taint
[ 1056.920424][T13095] Kernel panic - not syncing: kmsan.panic set ...
[ 1056.926983][T13095] CPU: 0 UID: 0 PID: 13095 Comm: syz.3.2003 Tainted: G    B   W          6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 1056.939478][T13095] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1056.944629][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1056.954842][T13095] Call Trace:
[ 1056.958227][T13095]  <TASK>
[ 1056.961264][T13095]  dump_stack_lvl+0x216/0x2d0
[ 1056.966140][T13095]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1056.972185][T13095]  dump_stack+0x1e/0x30
[ 1056.976526][T13095]  panic+0x4e2/0xcf0
[ 1056.980601][T13095]  ? kmsan_get_metadata+0x131/0x1c0
[ 1056.986039][T13095]  kmsan_report+0x2c7/0x2d0
[ 1056.990759][T13095]  ? vprintk_default+0x3e/0x50
[ 1056.995706][T13095]  ? __msan_warning+0x95/0x120
[ 1057.000670][T13095]  ? hfs_brec_find+0x65e/0x980
[ 1057.005590][T13095]  ? hfs_brec_read+0x3f/0x1a0
[ 1057.010417][T13095]  ? hfs_lookup+0x1ce/0x3d0
[ 1057.015091][T13095]  ? __lookup_slow+0x506/0x6e0
[ 1057.020017][T13095]  ? lookup_slow+0x6a/0xd0
[ 1057.024595][T13095]  ? link_path_walk+0xf16/0x1400
[ 1057.029738][T13095]  ? __filename_parentat+0x253/0x8e0
[ 1057.035197][T13095]  ? filename_create+0xbb/0x6e0
[ 1057.040224][T13095]  ? do_mkdirat+0x69/0x810
[ 1057.044816][T13095]  ? __x64_sys_mkdirat+0xc6/0x120
[ 1057.050026][T13095]  ? x64_sys_call+0x3a81/0x3ba0
[ 1057.055071][T13095]  ? do_syscall_64+0xcd/0x1e0
[ 1057.059933][T13095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.066238][T13095]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1057.071659][T13095]  ? hfs_brec_keylen+0x398/0x610
[ 1057.076784][T13095]  ? hfs_brec_keylen+0x58f/0x610
[ 1057.081902][T13095]  ? __hfs_brec_find+0x426/0x830
[ 1057.086996][T13095]  ? __pfx_hfs_cat_keycmp+0x10/0x10
[ 1057.092372][T13095]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1057.097783][T13095]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1057.103818][T13095]  __msan_warning+0x95/0x120
[ 1057.108605][T13095]  hfs_brec_find+0x65e/0x980
[ 1057.113369][T13095]  hfs_brec_read+0x3f/0x1a0
[ 1057.118028][T13095]  ? hfs_cat_build_key+0xa5/0xd0
[ 1057.123149][T13095]  hfs_lookup+0x1ce/0x3d0
[ 1057.127664][T13095]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1057.133126][T13095]  ? __pfx_hfs_lookup+0x10/0x10
[ 1057.138164][T13095]  __lookup_slow+0x506/0x6e0
[ 1057.142939][T13095]  lookup_slow+0x6a/0xd0
[ 1057.147353][T13095]  link_path_walk+0xf16/0x1400
[ 1057.152355][T13095]  __filename_parentat+0x253/0x8e0
[ 1057.157637][T13095]  ? filter_irq_stacks+0x164/0x1a0
[ 1057.162974][T13095]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1057.168392][T13095]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 1057.174946][T13095]  filename_create+0xbb/0x6e0
[ 1057.179818][T13095]  ? do_mkdirat+0x40/0x810
[ 1057.184404][T13095]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1057.190434][T13095]  do_mkdirat+0x69/0x810
[ 1057.194865][T13095]  ? getname_flags+0x5df/0xa30
[ 1057.199856][T13095]  __x64_sys_mkdirat+0xc6/0x120
[ 1057.204895][T13095]  x64_sys_call+0x3a81/0x3ba0
[ 1057.209800][T13095]  do_syscall_64+0xcd/0x1e0
[ 1057.214516][T13095]  ? clear_bhb_loop+0x25/0x80
[ 1057.219377][T13095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.225515][T13095] RIP: 0033:0x7f13edd7dff9
[ 1057.230078][T13095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1057.249915][T13095] RSP: 002b:00007f13eebf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1057.258521][T13095] RAX: ffffffffffffffda RBX: 00007f13edf35f80 RCX: 00007f13edd7dff9
[ 1057.266647][T13095] RDX: 000000000000008b RSI: 0000000020000640 RDI: ffffffffffffff9c
[ 1057.274767][T13095] RBP: 00007f13eddf0296 R08: 0000000000000000 R09: 0000000000000000
[ 1057.282881][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1057.290987][T13095] R13: 0000000000000000 R14: 00007f13edf35f80 R15: 00007ffcff377168
[ 1057.299154][T13095]  </TASK>
[ 1057.302560][T13095] Kernel Offset: disabled
[ 1057.306951][T13095] Rebooting in 86400 seconds..