last executing test programs:

5m0.759578474s ago: executing program 2 (id=6):
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200), &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'xcbc(twofish-asm)\x00'}}, 0x0, 0x0)

5m0.304150564s ago: executing program 2 (id=8):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x81000)

4m59.729066586s ago: executing program 2 (id=11):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)

4m57.07840167s ago: executing program 2 (id=14):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

4m55.468556098s ago: executing program 2 (id=22):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ustat(0x8, 0x0)

4m54.983778014s ago: executing program 2 (id=25):
syz_open_dev$loop(0x0, 0x3, 0x6100)
socket$can_raw(0x1d, 0x3, 0x1)
syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000240)='./file2\x00', 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)

4m39.636151521s ago: executing program 32 (id=25):
syz_open_dev$loop(0x0, 0x3, 0x6100)
socket$can_raw(0x1d, 0x3, 0x1)
syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000240)='./file2\x00', 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)

4m25.782546149s ago: executing program 4 (id=69):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xc8)
write$UHID_CREATE2(r0, &(0x7f0000001e00)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0xc904, 0x5, 0x7, 0xeb, 0x1}}, 0x118)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

4m22.878304961s ago: executing program 4 (id=71):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000000a0100"])

4m21.255835439s ago: executing program 4 (id=74):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000aed08e00000000080000005fb202c9cc3ff5c08ed9d07301ae1573fae7b45d7cf7c78b3de2b56e998e531a742796fc00000000904cc5656d2ece61e3153fba25f70625bb5e06a6c2def6afce6fa746b1586bc300ce04fed16d0bb4471b27ac89c50d696a2a2207c213a9969833218a7ecfbfcbf89a01907fdb5413477e7f8bb77806cba12903a49b79b6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
preadv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/223, 0xdf}, {&(0x7f0000000040)=""/3, 0x3}], 0x5, 0x2, 0x3)
syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x3, 0x16, 0x30, 0x67, 0x0, 0x13, 0x21, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}, {[@ssrr={0x89, 0x7, 0x49, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x3, 0xf6}]}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0x1, 0x0, 0x0, 0x7, 0x6, "0cd4d0", 0x2, "d9790e"}}}}}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00')
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1001f0)
fallocate(r2, 0x3, 0x1001, 0x10000)
pread64(r1, &(0x7f0000003640)=""/4083, 0xff3, 0x3)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

4m17.810211346s ago: executing program 4 (id=79):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0)

4m17.643390424s ago: executing program 4 (id=80):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4)
syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0)

4m16.478202324s ago: executing program 4 (id=82):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@data_err_ignore}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES32=r4, @ANYRES8, @ANYRES8, @ANYRES64, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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")

4m1.178616103s ago: executing program 33 (id=82):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@data_err_ignore}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES32=r4, @ANYRES8, @ANYRES8, @ANYRES64, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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")

3m49.148446758s ago: executing program 0 (id=126):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14)

3m48.559205112s ago: executing program 0 (id=128):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000c40), 0xa, 0x4f6, &(0x7f0000000c80)="$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")

3m47.649432997s ago: executing program 0 (id=130):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000001380)=""/74, 0x4a}, {&(0x7f0000001400)=""/143, 0x8f}, {&(0x7f00000014c0)=""/94, 0x5e}], 0x9}, 0x6e04}], 0x2, 0x0, 0x0)

3m46.906624909s ago: executing program 0 (id=132):
pipe(&(0x7f0000000100))
syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$eJzs27FqU1EYB/B/alpv7GAHJ1EMdHEq6hMYpIIYECoZdDJQXVoR0iUKYp/HWfAVfBmXDtItcnujbWMKrWmaGn8/OJyPfDnkuwfCd4ZzX916u7X5bufN4se9FLVmFpKH2U9WymioNpyLg3gpx9QyiR8TrQYA/srGRreVfJ11GUxRr9fq3lhdHpPpfJ5BOQAAAAAAAAAAAJyDs9z/X0g+jd7/373gegGAyVX3/5lHjeHc67W6t6vz2wj3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDZ2R8Mrg/KUQzn4biapEjSSHItST1J+fms6wUAJrc/ON73T+r/SWpJ9H8AmAPPX7x82mq31zeazSL5vtvv9DvVXOUfP2mv32seWDlctdfvd64kKUd7/X6Vbx7PLx6cG8r1D8bml3J3tcqXuUfP2iP55WxexAYAwH9orfnbkf7+q7cna2vj8mV/rqIj54OR/l3PzfrYn1yY0qMAAKe08/7DVnd7+3Xv3IPa2VY1hgWd/J0v9WmVOmnQmPpmXorgW+0ylJFcjt34h4PidPsMzLfDP/1opphNQQAAAAAAAAAAAAAAwB8u4pWjJHdm/ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyXnwEAAP//2d9NhA==")
open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"})
rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00')

3m43.463813907s ago: executing program 0 (id=137):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300), 0x1000)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
r3 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x36)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20)

3m42.411084553s ago: executing program 0 (id=138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x88affda4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0xe}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x48}}, 0x0)

3m41.503209482s ago: executing program 34 (id=138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x88affda4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0xe}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x48}}, 0x0)

16.781046482s ago: executing program 1 (id=561):
socket$inet6(0xa, 0x5, 0x401)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0)
close(r0)

16.033341597s ago: executing program 5 (id=562):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b04000000000000000002000000140080100001800c000100636f756e746572000900010073797a30000000000900020073797a3200000000050007401d000000140000001100010000000000000000000200000a"], 0x70}}, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000002c0)=0x9)
bind$alg(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d)
sendto$unix(0xffffffffffffffff, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x5}, 0x8)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000002b)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x84bf, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fa, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

16.015055479s ago: executing program 3 (id=563):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES16, @ANYBLOB="000425bd7000fddbdf25010000000c00060001"], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600800ebbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

14.484412247s ago: executing program 1 (id=565):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080))

13.986725104s ago: executing program 5 (id=566):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1808497, &(0x7f0000000540), 0x0, 0x51a, &(0x7f0000000580)="$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")
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8})
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]})

13.179526439s ago: executing program 3 (id=567):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102d71509021b00010000c005090423000103000000090585"], 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r2, 0x0, 0x3, 0x1}}, 0x20)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)={0x0, 0x10, 0x3, "8a332c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.880007008s ago: executing program 1 (id=568):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
poll(&(0x7f0000000240)=[{r3}], 0x1, 0x10000)
dup3(r0, r1, 0x0)

11.396102886s ago: executing program 7 (id=570):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x11}]}, 0x30}}, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000200000001000100090000000100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000f2ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f0000000280)=ANY=[], 0x60)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r9, @ANYBLOB="400002803c"], 0x5c}, 0x1, 0xf000}, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@local, r9}, 0x14)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r11, 0x0)

10.810362584s ago: executing program 6 (id=571):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='nilfs2_transaction_transition\x00', r0, 0x0, 0xc0b}, 0x18)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f00000000c0)='./file2\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x4, 0xd9c, &(0x7f0000001dc0)="$eJzs3ctvXNX9APBzx544L35xiPnFTdPYJaW4j9gkWKW7GildoEqoEn8BSgMNNfQRugAFKWHRbSMh/oAiuu6izyyQIlap2LTqP4BYdZMiJNpGlcCV7XPG429memcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux9ri4OF2l9Patty7emxn/9+qUmVaO2bXH8Ty2lFJqtuZLaTIsb2liPf3sk2uX2tPPc1qlC6lKVWt6evZua94jKaXraTbdTpPpuY9P3nzpg2eW3ztx48TFN+bu7EzrAQBgtNz73rs//fPj3712/D+/ObOUJlrTy/b5Uh4/mrf7l6r18Zy0/gdUbWnVNl4cCPnG89AI+cY65GsvpxnyjXcp/0BYbrNLvoma8sfapnVqNwyzjf/xVWN+03ijMT+//p981YdjB6r5V64sv3B1QBUFtt2nM3kXn8FgGLlh5dig10AA6+Jxw/tcj3sWHkxraeO9lX/36Ubn+WEb7PbnX/nDVf67N6xx2D779dNU2lW+R0fzeDyOMB7m6/f7X5YXj0c0e6xnt+MIw3J8oVs9x3a5HlvVrf7xc7FffSmn5XU4E+Lt35/4ng7Lewx0ds/+f4NhZIeVQa+AgD0rnje3kpV4PK8vxidq4gdr4odq4odr4kdq4jDKfvvqL9PNauN/fvxP3+/+sLKf7aGc/l+f9Yn7I/stP573268HLT+eTwx72ty/Tn/689t/ief/fx7O/z+bf0sn8wqi7C+M+9Vb5/6HC4MbXfI9HKrzUIf8a8+nNuerpjaWk9rWM/fVY3rzfMe65Tu9Od9kyHc4b4scDPWN2yeHw3xl+6OsV8vrNR7a2wztOBDqUd6Z4zk9GNpzvFu7wo7sAyFfMw8nQrumQrseCfP9f2hXNb25XXH/eanPyTA9Hicp+cLbdt/vUnwv4nUZj+b0zZy+k9P3c/pRh3JHUfk8djv/v3w+p1OzeuHK8uUn8nj5nN4Za06sTj+/y/UGHlyv1/9Mp83X/xxtTW822tcLxzamV+3rhckw/UKX6U/m8fJ79sOxQ2vT5y/9ePkH2914GHFXX3v9R88vL1/+mSeeeOJJ68mg10zATlt49eWfLFx97fVzV15+/sXLL15+5fwT3/7Wk089tbiwtlW/0L5tD+wvGz/6g64JAAAAAAAAAAAA0LPqUOfJOa27v225nrxcnx6vj2c4lPetfBrKfQzK9Z/d7utSrt88vgt1ZPvtxuVEg24j0Nk/3P/XYBjZYWXFXfyBvWHQ/f+V+x6W9Oi5vx1fHUq2u09vXl/G+xfCg9jr/c8pf3/1/9fq/6rn9V/oMWtya+X+7t6hv7YVm071Wn5sf7kP7FR/5f8+l19a81jqrfyVX4Xy441Ke/SHUP7hHsu/r/2nt1b+H3P55WWbO9tr+es1rhqb6xH3G5f7AMb9xsWfQvvLvf36bv8WO2q7lcuHUTYs/Uz2a1j6/+ymLLesB/PquXWcrtx/O/Z30G/9y32/y+/AI2H5Vc3vm/4/h1td/5/l87eg/0/Ydz50/M9gGNlhZWVloF2fjGq/K3vFoF//QW9DDrr8Qb/+dWL/n/H/Uuz/M8Zj/58xHvv/jPHYv1aMx/4/4+sZ+/+M8ZNhubF/0Oma+Bdq4qdq4l+siZ+uiV/59f+Oz9bMf6YmPlMTf7gm/mhN/GxN/Cs18cdq4o/XxOdq4vvdl3M6qu2HURb7jfT9h9FRjv90+/5P1cSB4RX7dY7f76/WxIHhVc7z8P2GEVR1vmNH3N9e9uO+mdN3cvp+Tj/asQqyG76W06/n9Bs5/WZOz+V0PqcLOdU35HD7xd9PnblZbZzndyzEez2fNF4PEO8Tc77H+sTjc/2ez3qyx3J2qvwtXg4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQaa4+Li9NVSm/feuviP6e+8/3VKTOtHLNrj+N5bCml1EwpVXl8PCzv+sR6+tkn1y51Sqt0Ye2xjKdn77bmPbI6f5pNt9Nkeu7jkzdf+uCZ5fdO3Dhx8Y25OzvTegAAABgN/w0AAP//Wabmsg==")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

10.525836604s ago: executing program 5 (id=572):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x15, 0x0, 0x0, 0x12c0, 0xffffffffffffffff, 0xfffffff4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xd, @void, @value, @void, @value}, 0x50)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xd4, 0x0, 0x0, 0x5, 0x14, 0x10, 0x43, 0x8})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x20000000, 0x89c4675})

9.477997887s ago: executing program 7 (id=573):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r2, 0x917}, 0x14}}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) (async)
sendmmsg$inet(r4, &(0x7f0000000440), 0x0, 0x0) (async)
r5 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x81, 0x0, &(0x7f00000010c0)) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x800)
sendmsg$netlink(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001f64e0881e00230700000000000000000b00a980401c4c4500a9b700"], 0x1c}], 0x1, 0x0, 0x0, 0x24008015}, 0x20000850) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10) (async)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in6=@private0, 0x4e20, 0xfd, 0x4e22, 0x6, 0x2, 0xa0, 0xc0, 0x4, r8, r9}, {0x6, 0x5, 0x5, 0x38c, 0x7ff, 0x3, 0x3498, 0x8000000000000000}, {0x3, 0x7, 0xf04, 0x3408}, 0x100, 0x6e6bb2, 0x1, 0x0, 0x1, 0x3}, {{@in=@private=0xa010101, 0x4d6, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3503, 0x1, 0x1, 0x5, 0xae, 0x7, 0x800}}, 0xe8)

9.379367226s ago: executing program 3 (id=574):
r0 = creat(&(0x7f0000000480)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="85000000a70000009500000000000000e53bf28a87fefbedad0b8038b2e9716e1de7467c8646329ee6c010dc78ada5060000000000000009b24a9db070bb2133b8b2d6c11d6093663e4df1176166487b58f54af27a418552177ade20f09e2e703b8985af5e6335e0832a6b6a8b65db0f62de38b4aa66938eab7ca6067200809a2de900251b24cc4b7fbdc2c45b23be13648f17a3887cd9ed1b6072655710ebda2359859ed2e62ac027"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={r2}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x1d)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x85, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x3930)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010100}]}, 0x24}}, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0)

9.041566903s ago: executing program 1 (id=575):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006980c70000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
sendto$inet6(r0, &(0x7f0000002380)="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", 0x1000, 0x400c881, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)

8.698400087s ago: executing program 3 (id=576):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b04000000000000000002000000140080100001800c000100636f756e746572000900010073797a30000000000900020073797a3200000000050007401d000000140000001100010000000000000000000200000a"], 0x70}}, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000002c0)=0x9)
bind$alg(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d)
sendto$unix(0xffffffffffffffff, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x5}, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002b)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$uinput_user_dev(r4, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x84bf, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fa, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

7.483817449s ago: executing program 7 (id=577):
r0 = socket(0x11, 0x800000003, 0x0)
bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', <r1=>0x0, 0x20, 0x7800, 0x6, 0x8000, {{0x44, 0x4, 0x3, 0x1b, 0x110, 0x64, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local, {[@cipso={0x86, 0x11, 0x3, [{0x0, 0xb, "ede5697d85a37854a2"}]}, @timestamp_prespec={0x44, 0x54, 0x66, 0x3, 0x6, [{@loopback, 0x4}, {@local, 0x6}, {@multicast2, 0x7}, {@private=0xa010101, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@multicast2, 0x8df5}]}, @timestamp={0x44, 0x20, 0xb7, 0x0, 0x6, [0x3e, 0xfffffff7, 0x4, 0x2, 0x2, 0x1, 0xa]}, @timestamp_prespec={0x44, 0x3c, 0x1d, 0x3, 0x7, [{@multicast1, 0xffff}, {@multicast2, 0x100}, {@loopback, 0x1}, {@loopback, 0x2}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x1}, {@loopback, 0xcf5}]}, @cipso={0x86, 0x34, 0x1, [{0x0, 0x7, "cf15a9739d"}, {0x0, 0xb, "55e4a6ba00342761c6"}, {0x5, 0xc, "26b5039da4c2ee15c7aa"}, {0x7, 0x2}, {0x5, 0xe, "ced9ae776e9ffae47f52bfe3"}]}, @ra={0x94, 0x4}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000600)={'wg0\x00', <r2=>0x0})
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000640)={@rand_addr, <r3=>0x0}, &(0x7f0000000740)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'erspan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x4, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4045}, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f0000000340)={&(0x7f0000000780), 0x0})
r9 = dup3(r7, r8, 0x0)
ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000000), &(0x7f0000001780)=""/4109, 0x100d})

7.221157375s ago: executing program 6 (id=578):
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080))

6.58380941s ago: executing program 3 (id=579):
r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f0003010000000904000000010100000a24010000000201020904010000010200000924010101010200000905010900000000000725010000000009040200000102000009040201010102000009058209000000000007250100000000"], 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8002, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x3, 0x2a0, &(0x7f0000000940)="$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")
syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003aa000000aa03447c6dd79821375b27c0381b2728a0255229f11d8768c772f21a15cbd0872524adb4e85a62e00202043dbbfd00000100c395b47d1c755845f83ca77afb2954a5c14fa3d337c15047bc8d761539128c30d76766e771bdc3fcdebfaea8df2bad8c41f267e6904d576e4d3d1d09004ee609a6304685b9277a258e6066ef6d5d5fed008b9995f070cdefa8924d8026dbc9a774df44df000000000000"]}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
ftruncate(r1, 0xc17a)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000003c0)=0x9ad)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000000))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x2, 0x557, &(0x7f0000000940)="$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")
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
mount$9p_fd(0x0, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x810)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2c, 0x0, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000)

6.43134084s ago: executing program 6 (id=580):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000004c0)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @local}, 0x14)
bind$packet(r1, &(0x7f0000000380)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = socket(0x2a, 0x2, 0xfe59)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r5=>0x0, @rand_addr, @multicast1}, &(0x7f0000000100)=0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f0000000100))
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x55, 0x93d, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x2, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x0, {@ip4=@local, 0x86dd}}}]}, 0x58}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x40)
syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[@ANYBLOB="01"], 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

5.902536792s ago: executing program 5 (id=581):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001c00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="e83884cb28bd5a", 0x7}])
ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

5.840838095s ago: executing program 7 (id=582):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1808497, &(0x7f0000000540), 0x0, 0x51a, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvOHE2adJNVnCAldhdYFG2gtrJRrsbcWiLhLhVApV7CYkTRXHiKnbaJqpoKv4AJIQAiRNcuCDBHQlV4sIRIVXAGQQIhKCFA0jQQbbHaZrYSUgdO00+H2k674fH3/fsznjezGQmgHPrWjY9TdP0UkSMZ+W5bPpEPbMd8VZEPHl8b74+JZGmN/6WRJKVtd4rbXglRpuLNJav+2qyP251c2tlrlwurWf5Ym31VrG6uXV5eXVuqbRUWpuZmX5/9oPZ92anXqR7i6NZ4mJEXPn8n779jR9+4crPPnPn9zf/8s7Xkmab78eefvyfBg+qbHY9H8N7ytaPGew0GtydGDnaMg+a/0UAAOix4V376ZdiPAYO3p0FAAAAXkLp1bH4T9I6d7fPUIdyAAAA4CWSi4ixSH6SZNcBjEUuVyhE4xreD8eFXLlSrX16sbKxtlCvi5iIfG5xuVyayq4Vnoh8Us9PN9LP8u/uyc9ExGsR8a3xkUa+MF8pL/T74AcAAACcE6PN8X+ukI3//zneHP8DAAAAZ8xEvxsAAAAAnDjjfwAAADj7jjP+v3oC7QAAAABOxBevX69Paev51wu3NzdWKrcvL5SqK4XVjfnCfGX9VmGpUllq3LNv9cA323l04NrG3WKtVK0Vq5tbN1crG2u1m8vPPQIbAAAA6KHX3nz42yQitj870pjqhnbV/zt7TkDfGgicmJ1DdpFk86H9L/rdq835H3vUKKAnBvrdAKBvBjuUJxHbPW4K0GP5fjcA6LvkkPqOF+/8Mpt/vLvtAQAAum/yo53P/+cOXHL74Grg1LMSw/nl/D+cX43z/20u+WvLzgKcKXl7AHDuvfD5/0P5GyIAAOi3scaU5ArZ4b2xyOUKhYiLjccC5JPF5XJpKiJejYjfjOdfqeenG0smh44ZAAAAAAAAAAAAAAAAAAAAAAAAAICmNE0iBQAAAM60iNyfk5837+U/Of722N7jA0PJv8Yje0Tone/d+M7duVptfbpe/ved8tp3s/J3+3EEAwAAANirNU5vjeMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJuePL4335p6Gfevn4uIiXbxB2O4MR+OfERc+EcSg7uWSyJioAvxtx9ExEfaxU/qzdoJ2S7+yMnHj4nsU2gXf7QL8eE8e1jf/lxrt/7l4q3GvP36NxjxXP64Om//Ymf7N9Bh/b94xBivP/pxsWP8BxGvD7bf/rTiJx3if/KI8b/y5a2tTnXp9yMm2/7+JM/FKtZWbxWrm1uXl1fnlkpLpbWZmen3Zz+YfW92qri4XC5l/7aN8c2P/fTpQf2/0CH+xCH9f/uI/f/vo7uPP9RM5vfH/3X2Ne6J/4sfZK/YHz+X/fZ9KkvX6ydb6e1merc3fvSrNw7q/0KH/h/2/b9zxP5f+tLX/3DElwIAPVDd3FqZK5dL62c2UR+ln4JmvISJ+j7eKWjGCSbu76968/hdTtM0ra9TL9CwpN8feLJT0u8tEwAA0G3P9v773RIAAAAAAAAAAAAAAAAAAAA4v3pxX7G9Mbd3Ukk3bqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAV/wsAAP//KYfmkw==")
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8})
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]})

5.791697723s ago: executing program 1 (id=583):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c756d61736b3d30303030303030303030303030303030303030303030362c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d25b5e9122c6e6f6465636f6d706f73652c6e6f626172726965722c666f7263652c7569643d", @ANYRESHEX, @ANYBLOB="2c6372626172726965722c6e6f621a32b86172726965722c646f6e745f6d65617375757365723d3b5e283a232c0000000000000000"], 0x1, 0x6da, &(0x7f0000000300)="$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")
r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000100)=r7}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000300), 0x0}, 0x20)

4.764158071s ago: executing program 6 (id=584):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000500)=[{0x3d}, {0x1d, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x7ffffeb9}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x90)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)

3.782043211s ago: executing program 5 (id=585):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
poll(&(0x7f0000000240)=[{r3}], 0x1, 0x10000)
dup3(r0, r1, 0x0)

3.655375728s ago: executing program 7 (id=586):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e3000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000, 0x0, 0xfdfd})

3.525264839s ago: executing program 6 (id=587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000280)={0x89d, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0xfff, {<r1=>0x0}, {}, 0x4, 0x2})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0)='cgr\xd4\xf8\x9f\xa9~\xea\x00'}, 0x30)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
socket$rds(0x15, 0x5, 0x0)

1.788774788s ago: executing program 7 (id=588):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='nilfs2_transaction_transition\x00', r0, 0x0, 0xc0b}, 0x18)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f00000000c0)='./file2\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x4, 0xd9c, &(0x7f0000001dc0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)

1.519049742s ago: executing program 5 (id=589):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b04000000000000000002000000140080100001800c000100636f756e746572000900010073797a30000000000900020073797a3200000000050007401d000000140000001100010000000000000000000200000a"], 0x70}}, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000002c0)=0x9)
bind$alg(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d)
sendto$unix(0xffffffffffffffff, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x5}, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002b)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$uinput_user_dev(r4, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x84bf, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fa, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

1.452246673s ago: executing program 6 (id=590):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
listen(r5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
r6 = accept4$unix(r5, 0x0, 0x0, 0x0)
recvfrom$unix(r6, &(0x7f0000000280)=""/258, 0xffffffffffffff75, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)
socket$kcm(0x21, 0x2, 0xa)
recvmsg$kcm(r4, 0x0, 0x0)

1.364253777s ago: executing program 3 (id=591):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x15, 0x0, 0x0, 0x12c0, 0xffffffffffffffff, 0xfffffff4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xd, @void, @value, @void, @value}, 0x50)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xd4, 0x0, 0x0, 0x5, 0x14, 0x10, 0x43, 0x8})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x20000000, 0x89c4675})

0s ago: executing program 1 (id=592):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000340)={&(0x7f0000000780), 0x0})
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000000), &(0x7f0000001780)=""/4109, 0x100d})

kernel console output (not intermixed with test programs):

06.419310][ T5092] Bluetooth: hci1: command tx timeout
[  306.664977][ T1131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.848681][ T6385] chnl_net:caif_netlink_parms(): no params data found
[  306.921003][ T1131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.089476][ T1131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.394200][ T1131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.464433][ T6416] loop3: detected capacity change from 0 to 512
[  307.486196][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.495043][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.594158][ T6416] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent
[  307.862847][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.873513][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.092859][ T1131] bridge_slave_1: left allmulticast mode
[  308.098763][ T1131] bridge_slave_1: left promiscuous mode
[  308.106359][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.246902][ T1131] bridge_slave_0: left allmulticast mode
[  308.252822][ T1131] bridge_slave_0: left promiscuous mode
[  308.259688][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.364223][ T5092] Bluetooth: hci1: command tx timeout
[  309.168817][   T29] audit: type=1326 audit(1730861989.908:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.3.110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccce17e719 code=0x0
[  309.319580][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.372767][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.404518][ T1131] bond0 (unregistering): Released all slaves
[  310.463747][ T5092] Bluetooth: hci1: command tx timeout
[  311.024463][ T6449] loop1: detected capacity change from 0 to 128
[  311.390647][ T6449] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  311.532814][ T6449] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  312.117972][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.127866][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.137097][ T6385] bridge_slave_0: entered allmulticast mode
[  312.148348][ T6385] bridge_slave_0: entered promiscuous mode
[  312.368668][ T1131] hsr_slave_0: left promiscuous mode
[  312.414975][ T5092] Bluetooth: hci1: command tx timeout
[  312.431756][ T1131] hsr_slave_1: left promiscuous mode
[  312.504675][   T29] audit: type=1326 audit(1730861993.288:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce17e719 code=0x7ffc0000
[  312.527828][   T29] audit: type=1326 audit(1730861993.288:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce17e719 code=0x7ffc0000
[  312.559435][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.567281][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  312.680559][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.688451][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.909525][ T5799] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  312.926760][ T1131] veth1_macvtap: left promiscuous mode
[  312.934716][ T1131] veth0_macvtap: left promiscuous mode
[  312.942028][ T1131] veth1_vlan: left promiscuous mode
[  312.949488][ T1131] veth0_vlan: left promiscuous mode
[  313.427873][ T6462] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  314.140581][   T29] audit: type=1326 audit(1730861995.125:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.5.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f530337e719 code=0x0
[  314.394408][ T6473] netlink: 68 bytes leftover after parsing attributes in process `syz.0.122'.
[  314.422812][ T1131] team0 (unregistering): Port device team_slave_1 removed
[  314.648732][ T1131] team0 (unregistering): Port device team_slave_0 removed
[  314.974929][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.983233][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.991146][ T6385] bridge_slave_1: entered allmulticast mode
[  315.002711][ T6385] bridge_slave_1: entered promiscuous mode
[  315.523356][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.543777][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.173424][ T6385] team0: Port device team_slave_0 added
[  316.218821][ T6385] team0: Port device team_slave_1 added
[  316.396591][ T6491] loop0: detected capacity change from 0 to 512
[  316.433335][ T6495] xt_hashlimit: size too large, truncated to 1048576
[  316.494505][ T6491] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  316.504154][ T6491] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent
[  316.555623][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.564149][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.591548][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.834054][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.841470][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.869713][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.662765][ T6385] hsr_slave_0: entered promiscuous mode
[  317.713301][ T6385] hsr_slave_1: entered promiscuous mode
[  317.755388][ T6508] loop1: detected capacity change from 0 to 1024
[  317.771113][ T6385] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.779297][ T6385] Cannot create hsr debugfs directory
[  317.814135][ T6508] EXT4-fs: Ignoring removed i_version option
[  318.026118][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.137293][ T6515] loop0: detected capacity change from 0 to 256
[  318.477293][ T6385] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  318.508683][ T6385] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  318.513405][ T6515] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  318.555920][ T6385] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  318.579178][ T6385] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  318.742535][   T29] audit: type=1800 audit(1730861999.944:56): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.132" name="file1" dev="loop0" ino=1048605 res=0 errno=0
[  319.221189][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.941325][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.990917][ T6385] 8021q: adding VLAN 0 to HW filter on device team0
[  320.104915][ T6385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  320.115707][ T6385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  320.239524][ T2888] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.247320][ T2888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.264904][ T2888] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.272678][ T2888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.321944][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.134'.
[  320.980605][ T6515] loop0: detected capacity change from 256 to 64
[  321.163472][ T5796] FAT-fs (loop0): Directory bread(block 42) failed
[  321.170788][ T5796] FAT-fs (loop0): Directory bread(block 36) failed
[  321.178949][ T5796] syz-executor: attempt to access beyond end of device
[  321.178949][ T5796] loop0: rw=2049, sector=160, nr_sectors = 4 limit=64
[  321.193191][ T5796] Buffer I/O error on dev loop0, logical block 40, lost sync page write
[  321.359646][ T6538] loop1: detected capacity change from 0 to 1024
[  321.377832][ T6538] EXT4-fs: Ignoring removed orlov option
[  321.524207][ T6538] EXT4-fs (loop1): Test dummy encryption mode enabled
[  321.699325][ T6538] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  321.766831][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.244768][ T6544] EXT4-fs (loop1): shut down requested (2)
[  322.283409][ T6532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  322.356499][ T4411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.584825][ T4411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.887797][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.017056][ T4411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.280116][ T4411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.449620][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.627264][ T6549] loop3: detected capacity change from 0 to 512
[  323.811689][   T29] audit: type=1326 audit(1730862005.276:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  323.957239][   T29] audit: type=1326 audit(1730862005.350:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  323.982040][   T29] audit: type=1326 audit(1730862005.350:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  324.005746][   T29] audit: type=1326 audit(1730862005.350:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  324.216938][ T4411] bridge_slave_1: left allmulticast mode
[  324.224911][ T4411] bridge_slave_1: left promiscuous mode
[  324.232270][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.297009][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.298476][ T4411] bridge_slave_0: left allmulticast mode
[  324.306791][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.310076][ T4411] bridge_slave_0: left promiscuous mode
[  324.324787][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.330652][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.332704][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.343658][ T5815] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  324.397010][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.554435][ T6549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.568226][ T6549] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.975064][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.080004][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  325.196617][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  325.302920][ T4411] bond0 (unregistering): Released all slaves
[  325.852967][ T6574] loop3: detected capacity change from 0 to 2048
[  325.944670][ T5969]  loop3: p3 < > p4 < >
[  326.352442][ T5815] Bluetooth: hci0: command tx timeout
[  326.400862][ T6574]  loop3: p3 < > p4 < >
[  326.659066][ T4411] hsr_slave_0: left promiscuous mode
[  326.707864][ T4411] hsr_slave_1: left promiscuous mode
[  326.745600][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.754274][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.838434][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.846477][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.953134][ T4411] veth1_macvtap: left promiscuous mode
[  326.959103][ T4411] veth0_macvtap: left promiscuous mode
[  326.965298][ T4411] veth1_vlan: left promiscuous mode
[  326.970933][ T4411] veth0_vlan: left promiscuous mode
[  327.315336][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  327.364105][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  327.624668][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  327.652627][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  328.215066][ T6603] loop3: detected capacity change from 0 to 256
[  328.268736][ T4411] team0 (unregistering): Port device team_slave_1 removed
[  328.304126][ T4411] team0 (unregistering): Port device team_slave_0 removed
[  328.326727][ T5815] Bluetooth: hci0: command tx timeout
[  328.385014][ T6603] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  329.357061][ T6609] loop1: detected capacity change from 0 to 512
[  329.458253][ T5876] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  329.504339][ T6385] veth0_vlan: entered promiscuous mode
[  329.554177][ T6385] veth1_vlan: entered promiscuous mode
[  329.598454][ T6609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.612224][ T6609] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.697492][ T5876] usb 6-1: Using ep0 maxpacket: 8
[  329.792612][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.805183][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.815744][ T5876] usb 6-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  329.828471][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.843160][ T6385] veth0_macvtap: entered promiscuous mode
[  329.932377][ T6385] veth1_macvtap: entered promiscuous mode
[  329.997930][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.084143][ T6618] syz.3.152[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  330.085021][ T6618] syz.3.152[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  330.097362][ T6618] syz.3.152[6618] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  330.792715][ T5876] usb 6-1: config 0 descriptor??
[  330.815117][ T5815] Bluetooth: hci0: command tx timeout
[  331.121637][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.132746][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.143087][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.154783][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.165128][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.176094][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.197828][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.224887][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.235872][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.246487][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.257426][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.267961][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.278801][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.300431][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.325410][ T6385] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.334753][ T6385] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.344135][ T6385] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.353414][ T6385] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.508041][ T6560] chnl_net:caif_netlink_parms(): no params data found
[  332.755545][ T5815] Bluetooth: hci0: command tx timeout
[  333.072445][ T5876] usbhid 6-1:0.0: can't add hid device: -71
[  333.079314][ T5876] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  333.130644][ T5876] usb 6-1: USB disconnect, device number 2
[  333.861417][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.869515][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.877300][ T6560] bridge_slave_0: entered allmulticast mode
[  333.886765][ T6560] bridge_slave_0: entered promiscuous mode
[  333.958272][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  334.054506][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.062872][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.070860][ T6560] bridge_slave_1: entered allmulticast mode
[  334.080146][ T6560] bridge_slave_1: entered promiscuous mode
[  334.162223][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.173720][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.183981][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  334.197432][ T5876] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  334.206895][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.247762][ T6653] veth1_macvtap: left promiscuous mode
[  334.331306][ T5876] usb 6-1: config 0 descriptor??
[  334.631555][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.748458][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.898064][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'.
[  334.980547][ T5876] acrux 0003:1A34:0802.0005: item fetching failed at offset 3/5
[  335.065061][ T5876] acrux 0003:1A34:0802.0005: parse failed
[  335.072370][ T5876] acrux 0003:1A34:0802.0005: probe with driver acrux failed with error -22
[  335.210350][ T5876] usb 6-1: USB disconnect, device number 3
[  335.222606][ T6560] team0: Port device team_slave_0 added
[  335.330678][ T6560] team0: Port device team_slave_1 added
[  335.538908][ T6665] loop3: detected capacity change from 0 to 512
[  335.651440][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.658633][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.688122][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.718730][ T6665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.731939][ T6665] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.815079][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.822791][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.849700][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.313097][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.334735][ T6560] hsr_slave_0: entered promiscuous mode
[  336.347920][ T6560] hsr_slave_1: entered promiscuous mode
[  336.366415][ T6560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  336.374461][ T6560] Cannot create hsr debugfs directory
[  336.880560][   T29] audit: type=1326 audit(1730862018.829:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce17e719 code=0x7ffc0000
[  336.903578][   T29] audit: type=1326 audit(1730862018.850:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fccce17e719 code=0x7ffc0000
[  336.926894][   T29] audit: type=1326 audit(1730862018.850:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce17e719 code=0x7ffc0000
[  336.952476][   T29] audit: type=1326 audit(1730862018.860:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fccce17e719 code=0x7ffc0000
[  336.976370][   T29] audit: type=1326 audit(1730862018.860:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fccce17e753 code=0x7ffc0000
[  336.998921][   T29] audit: type=1326 audit(1730862018.976:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fccce17d1ff code=0x7ffc0000
[  337.284526][ T6679] loop3: detected capacity change from 0 to 2048
[  337.382136][ T6679] Alternate GPT is invalid, using primary GPT.
[  337.389530][ T6679]  loop3: p1 p2 p3
[  337.421724][   T29] audit: type=1326 audit(1730862019.396:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fccce17e7a7 code=0x7ffc0000
[  337.447310][   T29] audit: type=1326 audit(1730862019.417:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccce17d0b0 code=0x7ffc0000
[  337.470934][   T29] audit: type=1326 audit(1730862019.427:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccce17e31b code=0x7ffc0000
[  337.494090][   T29] audit: type=1326 audit(1730862019.490:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fccce17d3aa code=0x7ffc0000
[  337.825285][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  337.832814][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  337.906085][ T6676] loop1: detected capacity change from 0 to 4096
[  337.960037][ T6676] EXT4-fs: Ignoring removed nomblk_io_submit option
[  337.972443][ T6560] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  338.153606][ T6560] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  338.210289][ T6676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.218480][ T6560] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  338.350031][ T6676] EXT4-fs error (device loop1): ext4_readdir:261: inode #12: block 80: comm syz.1.164: path /47/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  338.384304][ T6560] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  338.834237][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.567247][ T4082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.578524][ T4082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.579630][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.594338][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.690244][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.747091][ T6560] 8021q: adding VLAN 0 to HW filter on device team0
[  339.771908][ T5815] Bluetooth: hci3: command 0x0406 tx timeout
[  339.781286][ T5815] Bluetooth: hci2: command 0x0406 tx timeout
[  339.799458][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.807201][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.822837][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.830479][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.111697][ T6560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  340.122576][ T6560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  340.792300][ T6723] loop3: detected capacity change from 0 to 512
[  340.988881][ T6723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.002093][ T6723] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.121897][ T6725] loop6: detected capacity change from 0 to 128
[  341.715593][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.776521][ T6736] syz.6.103: attempt to access beyond end of device
[  341.776521][ T6736] loop6: rw=2049, sector=145, nr_sectors = 96 limit=128
[  341.891686][ T5876] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.899752][ T5876] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.977078][ T5876] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  342.831545][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.888916][ T6746] loop5: detected capacity change from 0 to 512
[  343.092726][ T6746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.106027][ T6746] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.230248][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  343.230323][   T29] audit: type=1800 audit(1730862025.663:95): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.178" name="file1" dev="loop5" ino=15 res=0 errno=0
[  343.302289][   T13] kworker/u8:1: attempt to access beyond end of device
[  343.302289][   T13] loop6: rw=1, sector=177, nr_sectors = 1 limit=128
[  343.309613][   T29] audit: type=1800 audit(1730862025.747:96): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.178" name="file2" dev="loop5" ino=16 res=0 errno=0
[  343.598622][ T6129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.445972][ T6775] loop3: detected capacity change from 0 to 512
[  344.853611][ T6775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.869781][ T6775] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.902794][   T29] audit: type=1326 audit(1730862027.385:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  344.926178][   T29] audit: type=1326 audit(1730862027.395:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  344.951231][   T29] audit: type=1326 audit(1730862027.406:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  344.974431][   T29] audit: type=1326 audit(1730862027.406:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  344.997234][   T29] audit: type=1326 audit(1730862027.406:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  345.429950][ T6560] veth0_vlan: entered promiscuous mode
[  345.490045][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.506444][ T6560] veth1_vlan: entered promiscuous mode
[  345.648020][ T6560] veth0_macvtap: entered promiscuous mode
[  345.669298][ T6560] veth1_macvtap: entered promiscuous mode
[  345.747630][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.758396][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.768500][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.779893][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.791028][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.801752][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.811940][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.825624][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.842192][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.168810][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.168910][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.168973][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.169059][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.169129][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.169213][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.169281][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.169366][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.173900][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.213616][ T6560] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.213830][ T6560] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.214037][ T6560] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.214240][ T6560] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.911140][   T29] audit: type=1326 audit(1730862028.487:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.1.189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x0
[  348.567342][ T5876] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  349.257971][ T6806] loop3: detected capacity change from 0 to 128
[  350.671219][ T4167] kworker/u8:20: attempt to access beyond end of device
[  350.671219][ T4167] loop3: rw=1, sector=145, nr_sectors = 33 limit=128
[  351.119815][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  351.847095][ T5858] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  351.855175][ T5858] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  352.074249][ T5858] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  352.097550][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.109624][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.121023][    T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  352.130553][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.070168][    T8] usb 2-1: config 0 descriptor??
[  354.998286][    T8] usb 2-1: can't set config #0, error -71
[  355.996720][    T8] usb 2-1: USB disconnect, device number 4
[  359.085076][ T5858] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  359.136903][ T6851] loop5: detected capacity change from 0 to 512
[  359.294996][ T6855] loop1: detected capacity change from 0 to 256
[  359.327325][ T6851] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  359.335927][ T6851] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  359.378669][ T5858] usb 7-1: Using ep0 maxpacket: 16
[  359.404106][ T6851] EXT4-fs (loop5): 1 truncate cleaned up
[  359.411872][ T6851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.429405][ T5858] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  359.438190][ T5858] usb 7-1: config 0 has no interface number 0
[  359.444590][ T5858] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  359.455015][ T5858] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  359.465407][ T5858] usb 7-1: config 0 interface 41 has no altsetting 0
[  359.622089][ T6851] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  359.643702][ T5858] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  359.654650][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.662933][ T5858] usb 7-1: Product: syz
[  359.669951][ T5858] usb 7-1: Manufacturer: syz
[  359.675674][ T5858] usb 7-1: SerialNumber: syz
[  359.723501][ T5858] usb 7-1: config 0 descriptor??
[  359.746195][ T6852] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  359.778387][ T6852] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  359.797686][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  359.899628][ T6855] FAT-fs (loop1): Directory bread(block 64) failed
[  359.907497][ T6855] FAT-fs (loop1): Directory bread(block 65) failed
[  359.914777][ T6855] FAT-fs (loop1): Directory bread(block 66) failed
[  359.921815][ T6855] FAT-fs (loop1): Directory bread(block 67) failed
[  359.928741][ T6855] FAT-fs (loop1): Directory bread(block 68) failed
[  359.935688][ T6855] FAT-fs (loop1): Directory bread(block 69) failed
[  359.943315][ T6855] FAT-fs (loop1): Directory bread(block 70) failed
[  359.950376][ T6855] FAT-fs (loop1): Directory bread(block 71) failed
[  359.957322][ T6855] FAT-fs (loop1): Directory bread(block 72) failed
[  359.969096][ T6855] FAT-fs (loop1): Directory bread(block 73) failed
[  360.026719][ T6852] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  360.074456][ T6129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.103583][ T6852] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  360.109395][    T8] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  360.120453][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.232317][    T8] usb 4-1: config 0 descriptor??
[  360.557517][ T6861] loop3: detected capacity change from 0 to 1024
[  360.599592][ T6861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.394009][ T6873] loop5: detected capacity change from 0 to 128
[  365.147066][    T8] usbhid 4-1:0.0: can't add hid device: -32
[  365.155482][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  365.239069][ T5858] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -110
[  365.647459][    T8] usb 4-1: USB disconnect, device number 3
[  365.788646][ T5858] usb 7-1: USB disconnect, device number 3
[  366.012876][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.758219][ T6902] loop3: detected capacity change from 0 to 256
[  367.173071][ T5881] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  367.340625][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.351299][ T5881] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  367.360653][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.378699][ T6902] FAT-fs (loop3): Directory bread(block 64) failed
[  367.385829][ T6902] FAT-fs (loop3): Directory bread(block 65) failed
[  367.399882][ T6902] FAT-fs (loop3): Directory bread(block 66) failed
[  367.406691][ T6902] FAT-fs (loop3): Directory bread(block 67) failed
[  367.414074][ T6902] FAT-fs (loop3): Directory bread(block 68) failed
[  367.421325][ T6902] FAT-fs (loop3): Directory bread(block 69) failed
[  367.428491][ T6902] FAT-fs (loop3): Directory bread(block 70) failed
[  367.435297][ T6902] FAT-fs (loop3): Directory bread(block 71) failed
[  367.442510][ T6902] FAT-fs (loop3): Directory bread(block 72) failed
[  367.449474][ T6902] FAT-fs (loop3): Directory bread(block 73) failed
[  367.611487][ T5881] usb 6-1: config 0 descriptor??
[  368.066316][ T4167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.074399][ T4167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.201781][ T5881] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0
[  368.209561][ T5881] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0
[  368.215332][ T4167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.216747][ T5881] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0
[  368.224938][ T4167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.243518][ T5881] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0
[  368.259070][ T5881] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0
[  368.293478][ T5881] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0
[  368.728902][ T5881] lenovo 0003:17EF:6047.0008: Failed to switch middle button: -71
[  368.773318][ T5881] lenovo 0003:17EF:6047.0008: Fn-lock setting failed: -71
[  368.815440][ T5881] lenovo 0003:17EF:6047.0008: Sensitivity setting failed: -71
[  368.886710][ T5881] usb 6-1: USB disconnect, device number 4
[  369.465512][ T6928] overlayfs: invalid redirect ((null))
[  369.878437][ T6932] loop6: detected capacity change from 0 to 128
[  370.034609][ T5858] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.042546][ T5858] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  370.079085][ T5858] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  373.948259][   T58] kworker/u8:3: attempt to access beyond end of device
[  373.948259][   T58] loop6: rw=1, sector=145, nr_sectors = 33 limit=128
[  375.789344][ T5881] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  376.130804][ T5881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.141699][ T5881] usb 8-1: config 0 has no interfaces?
[  376.147780][ T5881] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  376.161119][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.213431][    T8] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  376.222803][    T8] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  376.323731][    T8] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  376.413673][ T5881] usb 8-1: config 0 descriptor??
[  377.186913][    T8] usb 8-1: USB disconnect, device number 2
[  379.194432][ T5858] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  379.203990][ T5858] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  379.295335][ T5858] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  379.933707][ T7035] loop5: detected capacity change from 0 to 512
[  380.184748][ T7035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.028115][ T6129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.255973][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  381.551870][ T5858] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  381.562211][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.580766][ T5858] usb 4-1: config 0 descriptor??
[  381.864032][ T5858] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[  381.918754][ T7063] netlink: 'syz.5.255': attribute type 10 has an invalid length.
[  382.000405][ T7066] netlink: 'syz.5.255': attribute type 11 has an invalid length.
[  382.173917][ T7063] team0: Failed to send options change via netlink (err -105)
[  382.181764][ T7063] team0: Port device netdevsim3 added
[  382.320017][   T58] team0: Failed to send port change of device netdevsim3 via netlink (err -105)
[  382.945593][    T8] usb 4-1: USB disconnect, device number 4
[  383.651122][ T5813] Bluetooth: hci5: command 0x0406 tx timeout
[  384.065318][ T7091] loop5: detected capacity change from 0 to 256
[  384.166785][ T7091] vfat: Unknown parameter 'rodi^'
[  385.195817][ T7103] loop6: detected capacity change from 0 to 64
[  385.964839][ T5858] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  386.166927][ T5858] usb 7-1: Invalid ep0 maxpacket: 64
[  386.336458][ T5858] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[  386.579129][ T5858] usb 7-1: Invalid ep0 maxpacket: 64
[  386.671476][ T5858] usb usb7-port1: attempt power cycle
[  387.104552][ T5858] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  387.182903][ T7120] loop5: detected capacity change from 0 to 1024
[  387.788861][ T5815] Bluetooth: hci5: unexpected event for opcode 0x0428
[  387.951529][ T5858] usb 7-1: Invalid ep0 maxpacket: 64
[  388.124848][ T5858] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  388.643884][ T5858] usb 7-1: device descriptor read/8, error -71
[  388.755568][ T5858] usb usb7-port1: unable to enumerate USB device
[  388.769365][ T4411] hfsplus: b-tree write err: -5, ino 4
[  391.668039][ T5815] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  391.676753][ T5815] Bluetooth: hci5: Injecting HCI hardware error event
[  391.685988][ T5815] Bluetooth: hci5: hardware error 0x00
[  391.876697][ T7154] syz.3.280 uses obsolete (PF_INET,SOCK_PACKET)
[  391.922422][ T7154] loop3: detected capacity change from 0 to 1024
[  393.663273][ T5815] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  394.768668][ T7166] loop7: detected capacity change from 0 to 256
[  394.918491][ T7172] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[  395.117860][ T7166] vfat: Unknown parameter 'rodi^'
[  395.186806][   T29] audit: type=1326 audit(1730862080.168:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7168 comm="syz.3.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccce17e719 code=0x0
[  395.196091][ T7172] loop1: detected capacity change from 0 to 4096
[  395.441327][ T7177] loop6: detected capacity change from 0 to 64
[  395.529291][ T7179] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  395.642081][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[  396.504588][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  396.511679][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  400.239188][ T7224] loop5: detected capacity change from 0 to 8
[  400.339382][ T5875] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  400.447776][ T7224] SQUASHFS error: zlib decompression failed, data probably corrupt
[  400.456153][ T7224] SQUASHFS error: Failed to read block 0x9b: -5
[  400.462615][ T7224] SQUASHFS error: Unable to read metadata cache entry [99]
[  400.470219][ T7224] SQUASHFS error: Unable to read inode 0x127
[  400.991825][ T7227] netlink: 104 bytes leftover after parsing attributes in process `syz.6.297'.
[  401.063193][ T5875] usb 2-1: Using ep0 maxpacket: 8
[  401.188914][ T5875] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  401.198687][ T5875] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  401.209314][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  401.624680][ T5875] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  401.634802][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.643092][ T5875] usb 2-1: Product: syz
[  401.647671][ T5875] usb 2-1: Manufacturer: syz
[  401.652502][ T5875] usb 2-1: SerialNumber: syz
[  401.936337][ T7237] loop6: detected capacity change from 0 to 256
[  401.949651][ T7237] vfat: Unknown parameter 'rodi^'
[  402.255356][ T7224] loop5: detected capacity change from 0 to 4096
[  402.430308][ T7220] loop1: detected capacity change from 0 to 512
[  402.873404][ T7224] NILFS (loop5): error -4 creating segctord thread
[  403.630309][ T7252] loop3: detected capacity change from 0 to 64
[  404.108892][ T7220] loop1: detected capacity change from 0 to 512
[  404.466855][ T5858] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  404.613027][ T7220] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1.
[  404.683137][ T5858] usb 4-1: Invalid ep0 maxpacket: 64
[  404.865173][ T5858] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  405.093097][ T5858] usb 4-1: Invalid ep0 maxpacket: 64
[  405.142734][ T5858] usb usb4-port1: attempt power cycle
[  405.261559][ T7262] loop6: detected capacity change from 0 to 512
[  405.460781][ T5875] usb 2-1: 0:2 : does not exist
[  405.532057][ T7262] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent
[  405.560386][ T5858] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  405.794699][ T5875] usb 2-1: USB disconnect, device number 5
[  406.483542][ T5858] usb 4-1: device descriptor read/8, error -71
[  407.902179][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  408.277277][ T7278] loop1: detected capacity change from 0 to 512
[  408.392354][ T7278] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  408.415641][ T7278] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  408.703542][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.311'.
[  408.712825][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.720566][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.424515][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.432542][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.185759][ T7295] loop6: detected capacity change from 0 to 128
[  410.381387][ T5815] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  410.395600][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: kworker/u9:9 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  410.406792][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  410.417138][ T5815] Workqueue: hci0 hci_rx_work
[  410.422182][ T5815] Call Trace:
[  410.425665][ T5815]  <TASK>
[  410.428808][ T5815]  dump_stack_lvl+0x216/0x2d0
[  410.433827][ T5815]  dump_stack+0x1e/0x30
[  410.438317][ T5815]  sysfs_create_dir_ns+0x45f/0x4c0
[  410.443789][ T5815]  kobject_add_internal+0xfe7/0x1900
[  410.449393][ T5815]  kobject_add+0x28c/0x3c0
[  410.454091][ T5815]  ? kmsan_get_metadata+0x13e/0x1c0
[  410.459579][ T5815]  device_add+0xa90/0x1ba0
[  410.464331][ T5815]  hci_conn_add_sysfs+0x161/0x2c0
[  410.469680][ T5815]  le_conn_complete_evt+0x1ae1/0x1fa0
[  410.475373][ T5815]  hci_le_conn_complete_evt+0x15a/0x210
[  410.481235][ T5815]  hci_le_meta_evt+0x600/0x850
[  410.486300][ T5815]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  410.492694][ T5815]  hci_event_packet+0x11df/0x1c20
[  410.498064][ T5815]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  410.503683][ T5815]  hci_rx_work+0x9d1/0x11f0
[  410.508474][ T5815]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  410.514573][ T5815]  ? __pfx_hci_rx_work+0x10/0x10
[  410.519800][ T5815]  ? __pfx_hci_rx_work+0x10/0x10
[  410.525024][ T5815]  process_scheduled_works+0xae0/0x1c40
[  410.530925][ T5815]  worker_thread+0xea7/0x14f0
[  410.535922][ T5815]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  410.542032][ T5815]  kthread+0x3e2/0x540
[  410.546415][ T5815]  ? __pfx_worker_thread+0x10/0x10
[  410.551855][ T5815]  ? __pfx_kthread+0x10/0x10
[  410.556796][ T5815]  ret_from_fork+0x6d/0x90
[  410.561512][ T5815]  ? __pfx_kthread+0x10/0x10
[  410.566437][ T5815]  ret_from_fork_asm+0x1a/0x30
[  410.571536][ T5815]  </TASK>
[  410.582103][ T5815] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  410.602347][ T5815] Bluetooth: hci0: failed to register connection device
[  411.230001][ T7295] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  411.238995][ T7295] FAT-fs (loop6): Filesystem has been set read-only
[  411.247153][ T7295] syz.6.312: attempt to access beyond end of device
[  411.247153][ T7295] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  411.261298][ T7295] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  411.277298][ T7295] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  411.614080][ T7295] syz.6.312: attempt to access beyond end of device
[  411.614080][ T7295] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[  411.647512][   T29] audit: type=1800 audit(1730862097.468:104): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.312" name="file2" dev="loop6" ino=1048621 res=0 errno=0
[  412.077608][ T7316] loop3: detected capacity change from 0 to 64
[  412.271024][ T7295] syz.6.312 (7295) used greatest stack depth: 3784 bytes left
[  412.845535][ T7307] loop7: detected capacity change from 0 to 1764
[  413.296420][ T5875] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  413.528081][    T8] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  413.797720][ T7327] loop5: detected capacity change from 0 to 128
[  413.944943][ T5875] usb 2-1: Using ep0 maxpacket: 8
[  414.011636][ T7323] loop6: detected capacity change from 0 to 512
[  414.536939][ T7323] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent
[  414.609230][    T8] usb 4-1: Invalid ep0 maxpacket: 64
[  414.620313][ T7323] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  414.847131][ T5875] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  414.856111][ T5875] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  414.867466][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  415.238413][    T8] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  415.430050][ T5875] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  415.440403][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.738640][ T5875] usb 2-1: can't set config #1, error -71
[  415.749195][ T7340] loop1: detected capacity change from 0 to 512
[  415.808971][ T7340] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  415.822739][ T5875] usb 2-1: USB disconnect, device number 6
[  416.507753][ T5815] Bluetooth: hci0: command 0x0406 tx timeout
[  416.661579][ T7340] EXT4-fs (loop1): 1 truncate cleaned up
[  416.669350][ T7340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.800251][ T5856] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  417.005986][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  417.018279][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  417.034585][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  417.049476][ T5856] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  417.059029][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.282237][ T7352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.327'.
[  417.364223][ T5856] usb 7-1: config 0 descriptor??
[  417.372360][ T7338] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  417.853694][ T5856] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd
[  417.968099][ T5856] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  418.144847][ T5856] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  418.499556][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.142182][   T29] audit: type=1326 audit(1730862105.352:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.165133][   T29] audit: type=1326 audit(1730862105.352:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.191971][   T29] audit: type=1326 audit(1730862105.352:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.215859][   T29] audit: type=1326 audit(1730862105.363:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.238994][   T29] audit: type=1326 audit(1730862105.373:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.261672][   T29] audit: type=1326 audit(1730862105.447:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.287959][   T29] audit: type=1326 audit(1730862105.447:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.311720][   T29] audit: type=1326 audit(1730862105.457:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.334386][   T29] audit: type=1326 audit(1730862105.457:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.357031][   T29] audit: type=1326 audit(1730862105.457:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff35757e719 code=0x7ffc0000
[  419.572224][ T5856] usb 7-1: reset high-speed USB device number 9 using dummy_hcd
[  420.495933][ T7387] sp0: Synchronizing with TNC
[  420.689590][ T7390] loop5: detected capacity change from 0 to 512
[  420.771895][    T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  420.837759][ T7390] EXT4-fs (loop5): blocks per group (34) and clusters per group (32768) inconsistent
[  420.924209][    T8] usb 8-1: Using ep0 maxpacket: 8
[  420.964754][    T8] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  420.974105][    T8] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  420.984685][    T8] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  421.268194][ T7390] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  421.481422][    T8] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  421.491086][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.500010][    T8] usb 8-1: Product: syz
[  421.504407][    T8] usb 8-1: Manufacturer: syz
[  421.514752][    T8] usb 8-1: SerialNumber: syz
[  422.402788][ T5858] usb 7-1: USB disconnect, device number 9
[  422.528350][ T7391] loop7: detected capacity change from 0 to 512
[  422.688214][ T5813] Bluetooth: hci1: command 0x0406 tx timeout
[  423.703604][ T7391] loop7: detected capacity change from 0 to 512
[  423.790222][ T7411] loop1: detected capacity change from 0 to 2048
[  424.172829][ T7411] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  424.288469][ T7409] loop3: detected capacity change from 0 to 4096
[  424.350651][ T7409] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  424.488134][ T7391] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  424.488360][ T7391] EXT4-fs: failed to create workqueue
[  424.488419][ T7391] EXT4-fs (loop7): mount failed
[  424.528131][ T7418] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  425.744737][ T7409] ntfs3(loop3): Failed to read $UpCase (-4).
[  425.845022][    T8] usb 8-1: 0:2 : does not exist
[  426.038312][ T7427] netlink: 388 bytes leftover after parsing attributes in process `syz.5.344'.
[  426.311519][    T8] usb 8-1: USB disconnect, device number 3
[  426.525645][ T7435] loop1: detected capacity change from 0 to 128
[  426.647556][ T7435] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  426.827019][ T7435] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  427.263734][ T7280] udevd[7280]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  428.611945][ T7458] loop3: detected capacity change from 0 to 256
[  428.718776][ T7458] vfat: Unknown parameter 'rodi^'
[  428.956673][ T7459] syzkaller0: entered promiscuous mode
[  428.962407][ T7459] syzkaller0: entered allmulticast mode
[  429.286098][ T7462] loop6: detected capacity change from 0 to 256
[  429.407484][ T7462] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  429.447021][ T7450] loop5: detected capacity change from 0 to 2048
[  429.526608][ T7437] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  429.945032][ T5858] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  430.197547][ T5858] usb 4-1: Using ep0 maxpacket: 8
[  430.228391][ T5858] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  430.238533][ T5858] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  430.249048][ T5858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  430.339466][ T5858] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  430.349229][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.358086][ T5858] usb 4-1: Product: syz
[  430.362487][ T5858] usb 4-1: Manufacturer: syz
[  430.368959][ T5858] usb 4-1: SerialNumber: syz
[  430.443635][ T7450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.916692][ T7464] loop3: detected capacity change from 0 to 512
[  431.001394][ T7462] netlink: 52 bytes leftover after parsing attributes in process `syz.6.352'.
[  431.010855][ T7462] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  431.573643][ T7464] loop3: detected capacity change from 0 to 512
[  431.584705][ T5799] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  431.709701][ T6129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.027945][ T7464] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  432.036549][ T7464] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  432.165709][ T7464] System zones: 0-1, 15-15, 18-18, 34-34
[  432.172762][ T7464] EXT4-fs (loop3): orphan cleanup on readonly fs
[  432.179697][ T7464] __quota_error: 45 callbacks suppressed
[  432.179773][ T7464] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  432.195958][ T7464] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  432.210968][ T7464] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  432.499278][ T7464] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.353: bg 0: block 40: padding at end of block bitmap is not set
[  432.606633][ T7464] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  432.680288][ T7464] EXT4-fs (loop3): 1 truncate cleaned up
[  432.749096][ T7464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  432.993240][    T8] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  433.027318][    T8] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  433.358118][    T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  433.659001][ T5858] usb 4-1: 0:2 : does not exist
[  433.679112][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.690534][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.700795][    T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  433.718032][    T8] usb 8-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  433.729502][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.781917][ T7491] ipvlan2: entered promiscuous mode
[  433.798143][ T7491] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  433.817035][ T7491] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  433.824248][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.863954][ T5858] usb 4-1: USB disconnect, device number 11
[  434.167321][    T8] usb 8-1: config 0 descriptor??
[  434.225868][   T29] audit: type=1326 audit(1730862121.141:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.6.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f337997e719 code=0x0
[  434.369496][ T6122] udevd[6122]: failed to send result of seq 13501 to main daemon: Connection refused
[  434.382219][ T6933] udevd[6933]: failed to send result of seq 13496 to main daemon: Transport endpoint is not connected
[  434.478671][ T5969] udevd[5969]: failed to send result of seq 13478 to main daemon: Transport endpoint is not connected
[  434.521361][ T6006] udevd[6006]: failed to send result of seq 13489 to main daemon: Transport endpoint is not connected
[  434.570724][ T6139] udevd[6139]: failed to send result of seq 13498 to main daemon: Transport endpoint is not connected
[  434.592554][ T7280] udevd[7280]: failed to send result of seq 13465 to main daemon: Transport endpoint is not connected
[  434.702676][ T6004] udevd[6004]: failed to send result of seq 13494 to main daemon: Transport endpoint is not connected
[  435.101250][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.108753][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.116136][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.123698][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.131137][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.139090][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.146495][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x1
[  435.154827][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.162276][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.176134][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.185150][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.192477][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.199872][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.207483][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.214892][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.222481][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.229785][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.237197][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.244666][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.252230][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.259534][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.273676][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.282915][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.290454][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.297729][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.305249][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.312673][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.325562][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.337056][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.344388][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.351905][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.359314][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.373010][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.381979][    T8] elecom 0003:056E:010C.000E: unknown main item tag 0x0
[  435.611609][ T7508] loop6: detected capacity change from 0 to 256
[  435.637732][ T7508] vfat: Unknown parameter 'rodi^'
[  435.835636][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.844849][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.042508][    T8] elecom 0003:056E:010C.000E: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.7-1/input0
[  436.199282][ T7286] udevd[7286]: failed to send result of seq 13521 to main daemon: Transport endpoint is not connected
[  436.512711][ T7519] loop1: detected capacity change from 0 to 1024
[  436.535736][ T7519] hfsplus: unable to parse mount options
[  436.733904][ T7522] loop5: detected capacity change from 0 to 128
[  436.878807][ T7503] loop7: detected capacity change from 0 to 256
[  437.211281][ T7503] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  437.256195][ T7524] syzkaller0: entered promiscuous mode
[  437.262073][ T7524] syzkaller0: entered allmulticast mode
[  437.382573][ T7522] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  437.514577][ T7522] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.546675][ T7536] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  438.363202][    T8] usb 8-1: USB disconnect, device number 4
[  439.171482][ T5858] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  439.510438][ T5858] usb 7-1: Using ep0 maxpacket: 8
[  439.686658][ T5858] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  439.695872][ T5858] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  439.706559][ T5858] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  439.880553][ T5858] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  439.890142][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.898438][ T5858] usb 7-1: Product: syz
[  439.904265][ T5858] usb 7-1: Manufacturer: syz
[  439.909327][ T5858] usb 7-1: SerialNumber: syz
[  440.504972][ T7547] loop6: detected capacity change from 0 to 512
[  440.589252][ T6129] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  441.053645][ T7547] loop6: detected capacity change from 0 to 512
[  441.224278][ T7547] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  441.232457][ T7547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  441.254018][ T7569] loop5: detected capacity change from 0 to 256
[  441.263925][ T7569] vfat: Unknown parameter 'rodi^'
[  441.390907][ T7547] System zones: 0-1, 15-15, 18-18, 34-34
[  441.469549][ T7547] EXT4-fs (loop6): orphan cleanup on readonly fs
[  441.476481][ T7547] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  441.486530][ T7547] EXT4-fs warning (device loop6): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  441.501642][ T7547] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  441.862540][ T7547] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.370: bg 0: block 40: padding at end of block bitmap is not set
[  441.920314][ T7547] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  441.980033][ T7547] EXT4-fs (loop6): 1 truncate cleaned up
[  441.988436][ T7547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  442.194607][ T5813] Bluetooth: hci0: command 0x0406 tx timeout
[  442.337680][ T6385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.538783][ T5858] usb 7-1: 0:2 : does not exist
[  443.141777][ T5858] usb 7-1: USB disconnect, device number 10
[  443.705319][ T7585] loop7: detected capacity change from 0 to 2048
[  443.776073][ T7597] syzkaller0: entered promiscuous mode
[  443.781953][ T7597] syzkaller0: entered allmulticast mode
[  444.502053][ T7585] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  444.512903][ T7612] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  444.570926][ T7611] netlink: 3 bytes leftover after parsing attributes in process `syz.5.385'.
[  444.580607][ T7611] 0ªX¹¦À: renamed from caif0
[  444.624495][ T7611] 0ªX¹¦À: entered allmulticast mode
[  444.637803][ T7611] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  444.721998][ T7585] Remounting filesystem read-only
[  444.842277][ T7610] loop3: detected capacity change from 0 to 128
[  445.202937][ T7610] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  445.405692][ T7610] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.680918][ T7585] loop7: detected capacity change from 0 to 64
[  445.790126][ T7623] loop1: detected capacity change from 0 to 256
[  446.234512][ T5858] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  446.321871][ T7623] vfat: Unknown parameter 'rodi^'
[  446.485585][ T5858] usb 7-1: Using ep0 maxpacket: 8
[  446.722826][ T5858] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  446.732131][ T5858] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  446.742839][ T5858] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  446.843068][ T5858] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  446.852746][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.861016][ T5858] usb 7-1: Product: syz
[  446.866093][ T5858] usb 7-1: Manufacturer: syz
[  446.874713][ T5858] usb 7-1: SerialNumber: syz
[  447.312759][ T7625] loop6: detected capacity change from 0 to 512
[  448.107040][ T7625] loop6: detected capacity change from 0 to 512
[  449.067878][ T7625] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  449.077365][ T7625] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  449.273287][ T7625] System zones: 0-1, 15-15, 18-18, 34-34
[  449.280294][ T7625] EXT4-fs (loop6): orphan cleanup on readonly fs
[  449.287262][ T7625] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  449.297065][ T7625] EXT4-fs warning (device loop6): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  449.316874][ T7625] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  449.452629][ T7625] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.390: bg 0: block 40: padding at end of block bitmap is not set
[  449.957061][ T7625] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  451.301357][   T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  451.321454][ T7625] EXT4-fs (loop6): 1 truncate cleaned up
[  451.329237][ T7625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  451.426438][ T7617] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  451.486263][   T44] usb 2-1: Using ep0 maxpacket: 32
[  451.520181][   T44] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52
[  451.529903][   T44] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  451.538358][   T44] usb 2-1: Manufacturer: syz
[  451.544792][   T44] usb 2-1: SerialNumber: syz
[  451.547744][ T5803] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  451.707672][ T7650] loop7: detected capacity change from 0 to 64
[  451.844145][   T44] usb 2-1: config 0 descriptor??
[  452.075384][ T5858] usb 7-1: 0:2 : does not exist
[  452.093974][   T44] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32
[  452.124314][   T44] usb 2-1: USB disconnect, device number 7
[  452.137409][ T6385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.160561][ T5858] usb 7-1: USB disconnect, device number 11
[  453.489949][ T7671] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  453.633113][ T7674] syzkaller0: entered promiscuous mode
[  453.641089][ T7674] syzkaller0: entered allmulticast mode
[  454.863365][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  454.873158][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  455.000179][ T7695] loop3: detected capacity change from 0 to 256
[  455.144339][ T7695] vfat: Unknown parameter 'rodi^'
[  455.969349][ T5875] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  456.179176][ T5875] usb 6-1: Using ep0 maxpacket: 8
[  456.207566][ T5875] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  456.217016][ T5875] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  456.227499][ T5875] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  456.359335][ T5875] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  456.369090][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.377376][ T5875] usb 6-1: Product: syz
[  456.382109][ T5875] usb 6-1: Manufacturer: syz
[  456.386972][ T5875] usb 6-1: SerialNumber: syz
[  457.082154][ T7705] loop5: detected capacity change from 0 to 512
[  458.895870][ T7705] loop5: detected capacity change from 0 to 512
[  459.353740][ T7705] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  459.366409][ T7705] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  459.450858][ T7705] System zones: 0-1, 15-15, 18-18, 34-34
[  459.537240][ T7705] EXT4-fs (loop5): orphan cleanup on readonly fs
[  459.544560][ T7705] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  459.559179][ T7705] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  459.575666][ T7705] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  459.931701][ T7705] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.406: bg 0: block 40: padding at end of block bitmap is not set
[  460.096026][ T7705] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  460.169212][ T7705] EXT4-fs (loop5): 1 truncate cleaned up
[  460.177219][ T7705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  460.513195][ T5858] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  460.715314][ T5858] usb 2-1: Using ep0 maxpacket: 8
[  460.764861][ T5858] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  460.774088][ T5858] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  460.784642][ T5858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  461.001162][ T5858] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  461.010927][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.023260][ T5858] usb 2-1: Product: syz
[  461.029152][ T5858] usb 2-1: Manufacturer: syz
[  461.034079][ T5858] usb 2-1: SerialNumber: syz
[  461.184288][ T5875] usb 6-1: 0:2 : does not exist
[  461.333036][ T5875] usb 6-1: USB disconnect, device number 5
[  461.343935][ T6129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.473426][ T7736] loop1: detected capacity change from 0 to 512
[  461.933756][ T7743] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  461.964422][ T5858] usb 2-1: 0:2 : does not exist
[  462.020705][ T5858] usb 2-1: USB disconnect, device number 8
[  462.413405][ T7750] syzkaller0: entered promiscuous mode
[  462.419265][ T7750] syzkaller0: entered allmulticast mode
[  462.843847][ T7759] loop7: detected capacity change from 0 to 256
[  462.980314][ T7759] vfat: Unknown parameter 'rodi^'
[  463.555878][ T5858] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  463.772366][ T5858] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  463.783074][ T5858] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  463.792669][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.915639][ T5858] gspca_main: stv0680-2.14.0 probing 041e:4007
[  464.775405][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.419'.
[  464.785031][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'.
[  464.913946][ T5858] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  464.928642][ T5858] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  464.977163][ T7782] loop1: detected capacity change from 0 to 512
[  465.045830][ T5858] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  465.275989][ T7782] Quota error (device loop1): write_blk: dquota write failed
[  465.284088][ T7782] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  465.294644][ T7782] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.419: Failed to acquire dquot type 1
[  465.398058][ T7782] EXT4-fs (loop1): 1 truncate cleaned up
[  465.410351][ T7782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.425026][ T7782] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.687551][    T8] usb 2-1: USB disconnect, device number 9
[  466.585528][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.695123][    T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  468.087382][    T8] usb 6-1: Using ep0 maxpacket: 8
[  468.187327][ T7812] loop6: detected capacity change from 0 to 512
[  468.406688][ T7812] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent
[  468.408505][    T8] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  468.425951][    T8] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  468.440328][    T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  468.543702][    T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  468.553497][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.561774][    T8] usb 6-1: Product: syz
[  468.566747][    T8] usb 6-1: Manufacturer: syz
[  468.571805][    T8] usb 6-1: SerialNumber: syz
[  468.745350][ T7812] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  469.089122][ T7819] loop1: detected capacity change from 0 to 256
[  469.130658][ T7808] loop5: detected capacity change from 0 to 512
[  469.185862][ T7819] vfat: Unknown parameter 'rodi^'
[  469.738115][    T8] usb 6-1: 0:2 : does not exist
[  469.764916][    T8] usb 6-1: USB disconnect, device number 6
[  470.328011][ T7829] FAULT_INJECTION: forcing a failure.
[  470.328011][ T7829] name failslab, interval 1, probability 0, space 0, times 1
[  470.341102][ T7829] CPU: 1 UID: 0 PID: 7829 Comm: syz.1.437 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  470.352017][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  470.362400][ T7829] Call Trace:
[  470.365872][ T7829]  <TASK>
[  470.368983][ T7829]  dump_stack_lvl+0x216/0x2d0
[  470.374336][ T7829]  dump_stack+0x1e/0x30
[  470.378790][ T7829]  should_fail_ex+0x748/0x7f0
[  470.383783][ T7829]  should_failslab+0x17f/0x210
[  470.388829][ T7829]  kmem_cache_alloc_noprof+0xe2/0xb20
[  470.394523][ T7829]  ? skb_clone+0x303/0x550
[  470.399254][ T7829]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  470.405349][ T7829]  skb_clone+0x303/0x550
[  470.409905][ T7829]  dev_queue_xmit_nit+0x4d0/0x12a0
[  470.415311][ T7829]  ? __dev_queue_xmit+0xac/0x56d0
[  470.420645][ T7829]  ? kmsan_get_metadata+0x13e/0x1c0
[  470.426121][ T7829]  dev_hard_start_xmit+0x17d/0xa20
[  470.431541][ T7829]  __dev_queue_xmit+0x3562/0x56d0
[  470.436868][ T7829]  ? kmsan_get_metadata+0x13e/0x1c0
[  470.442336][ T7829]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  470.448975][ T7829]  ? kmsan_get_metadata+0x13e/0x1c0
[  470.454439][ T7829]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  470.460523][ T7829]  ? __dev_queue_xmit+0x355/0x56d0
[  470.465970][ T7829]  __netlink_deliver_tap+0x84c/0xc90
[  470.471595][ T7829]  ? kmsan_get_metadata+0x13e/0x1c0
[  470.477082][ T7829]  netlink_unicast+0x1103/0x1260
[  470.482370][ T7829]  netlink_sendmsg+0x10da/0x11e0
[  470.487664][ T7829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.493271][ T7829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.498879][ T7829]  __sock_sendmsg+0x30f/0x380
[  470.503847][ T7829]  ____sys_sendmsg+0x877/0xb60
[  470.508940][ T7829]  ___sys_sendmsg+0x28d/0x3c0
[  470.513931][ T7829]  ? kmsan_get_metadata+0x13e/0x1c0
[  470.519401][ T7829]  ? __rcu_read_unlock+0x7b/0xe0
[  470.524634][ T7829]  ? __fget_files+0x4f5/0x5c0
[  470.529641][ T7829]  ? kmsan_get_metadata+0x13e/0x1c0
[  470.535285][ T7829]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  470.541363][ T7829]  __x64_sys_sendmsg+0x300/0x4a0
[  470.546606][ T7829]  ? perf_mmap+0x1400/0x28d0
[  470.551508][ T7829]  x64_sys_call+0x2da0/0x3ba0
[  470.556526][ T7829]  do_syscall_64+0xcd/0x1e0
[  470.561324][ T7829]  ? clear_bhb_loop+0x25/0x80
[  470.566296][ T7829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.572497][ T7829] RIP: 0033:0x7ff35757e719
[  470.577160][ T7829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.597067][ T7829] RSP: 002b:00007ff3583a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.605780][ T7829] RAX: ffffffffffffffda RBX: 00007ff357735f80 RCX: 00007ff35757e719
[  470.614001][ T7829] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000043
[  470.622191][ T7829] RBP: 00007ff3583a2090 R08: 0000000000000000 R09: 0000000000000000
[  470.630384][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.638672][ T7829] R13: 0000000000000000 R14: 00007ff357735f80 R15: 00007ffd5b5cec58
[  470.646890][ T7829]  </TASK>
[  474.169691][ T7844] loop5: detected capacity change from 0 to 32768
[  474.455841][ T7857] loop7: detected capacity change from 0 to 512
[  474.546277][ T7859] xt_bpf: check failed: parse error
[  474.601710][ T7857] EXT4-fs (loop7): blocks per group (34) and clusters per group (32768) inconsistent
[  474.784655][ T7857] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  474.929739][ T7862] loop3: detected capacity change from 0 to 128
[  475.190611][ T7862] hpfs: bad mount options.
[  475.396583][ T7868] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  475.479739][ T7867] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  475.860462][ T7871] netlink: 324 bytes leftover after parsing attributes in process `syz.6.449'.
[  476.129868][ T7881] netlink: 492 bytes leftover after parsing attributes in process `syz.1.452'.
[  477.734615][ T7900] loop1: detected capacity change from 0 to 512
[  477.805968][ T7900] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent
[  477.858900][    T8] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  477.875491][ T7900] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  478.047520][    T8] usb 8-1: Using ep0 maxpacket: 8
[  478.124373][    T8] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  478.134208][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.142734][    T8] usb 8-1: Product: syz
[  478.147395][    T8] usb 8-1: Manufacturer: syz
[  478.152226][    T8] usb 8-1: SerialNumber: syz
[  478.251825][    T8] usb 8-1: config 0 descriptor??
[  478.515543][    T8] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  478.746439][ T7911] loop9: detected capacity change from 0 to 7
[  479.066172][ T7911]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  479.072731][ T7911] loop9: partition table partially beyond EOD, truncated
[  479.080482][ T7911] loop9: p1 size 1139518251 extends beyond EOD, truncated
[  479.142415][ T7897] loop7: detected capacity change from 0 to 512
[  479.279585][ T7897] EXT4-fs (loop7): filesystem is read-only
[  479.352056][ T7897] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (5426!=0)
[  479.477302][ T7897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  479.837628][ T7920] netlink: 'syz.3.459': attribute type 9 has an invalid length.
[  480.049782][ T5875] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  480.122748][ T7927] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  480.287382][ T5875] usb 2-1: device descriptor read/64, error -71
[  480.594016][ T5875] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  480.842945][ T5875] usb 2-1: device descriptor read/64, error -71
[  480.878991][    T8] usb write operation failed. (-71)
[  480.945650][    T8] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  480.957766][    T8] dvbdev: DVB: registering new adapter (Terratec H7)
[  480.965011][    T8] usb 8-1: media controller created
[  481.008451][ T5875] usb usb2-port1: attempt power cycle
[  481.158796][    T8] usb read operation failed. (-71)
[  481.231602][    T8] usb write operation failed. (-71)
[  481.347348][    T8] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  481.397276][    T8] usb 8-1: USB disconnect, device number 5
[  481.421939][ T5875] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  481.546682][ T5875] usb 2-1: device descriptor read/8, error -71
[  481.806774][ T5875] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  481.939491][ T5875] usb 2-1: device descriptor read/8, error -71
[  482.024475][ T6560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.083189][ T5875] usb usb2-port1: unable to enumerate USB device
[  482.166826][ T7927] loop5: detected capacity change from 0 to 32768
[  482.295686][ T7927] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  482.541174][ T7944] loop7: detected capacity change from 0 to 16
[  482.652399][ T7944] erofs: (device loop7): erofs_superblock_csum_verify: invalid checksum 0x7674643a, 0x02d6543f expected
[  482.884244][ T7927] XFS (loop5): Ending clean mount
[  482.895980][ T7927] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  483.185558][ T7950] loop1: detected capacity change from 0 to 128
[  483.281983][ T7950] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  483.333860][ T7944] loop7: detected capacity change from 0 to 2048
[  483.470272][ T7944] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  483.604363][ T7950] FAT-fs (loop1): FAT read failed (blocknr 128)
[  483.713646][ T7954] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  484.725873][ T7961] loop3: detected capacity change from 0 to 512
[  485.078195][ T7961] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent
[  485.289861][   T44] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  485.323759][ T7977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.477'.
[  485.463667][   T44] usb 8-1: device descriptor read/64, error -71
[  485.767220][   T44] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  485.918445][   T44] usb 8-1: device descriptor read/64, error -71
[  486.034842][   T44] usb usb8-port1: attempt power cycle
[  486.470706][   T44] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  486.562422][   T44] usb 8-1: device descriptor read/8, error -71
[  486.816459][   T44] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  486.883238][ T7994] loop1: detected capacity change from 0 to 256
[  486.910700][   T44] usb 8-1: device descriptor read/8, error -71
[  486.942448][ T7994] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  487.025431][   T44] usb usb8-port1: unable to enumerate USB device
[  487.129557][ T7996] Zero length message leads to an empty skb
[  487.577131][ T7994] netlink: 52 bytes leftover after parsing attributes in process `syz.1.480'.
[  487.586730][ T7994] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  488.632660][ T5875] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  488.846150][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  488.859454][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  488.871669][ T5875] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  488.885081][ T5875] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  488.894654][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.994942][ T5875] usb 8-1: config 0 descriptor??
[  489.002946][ T8011] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  489.427508][ T5875] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd
[  489.550645][ T5875] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  489.936498][ T8024] syzkaller0: entered promiscuous mode
[  489.942743][ T8024] syzkaller0: entered allmulticast mode
[  490.042644][ T5875] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  490.126915][ T5875] usb 8-1: USB disconnect, device number 10
[  490.949856][ T5881] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  490.998134][ T8037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.490'.
[  491.166959][ T5881] usb 6-1: Using ep0 maxpacket: 8
[  491.190691][ T5881] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  491.199968][ T5881] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  491.205586][ T8040] loop7: detected capacity change from 0 to 512
[  491.210499][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  491.331097][ T8040] EXT4-fs (loop7): blocks per group (34) and clusters per group (32768) inconsistent
[  491.573730][ T5881] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  491.583360][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.592040][ T5881] usb 6-1: Product: syz
[  491.596637][ T5881] usb 6-1: Manufacturer: syz
[  491.601471][ T5881] usb 6-1: SerialNumber: syz
[  492.031922][ T8034] loop5: detected capacity change from 0 to 512
[  492.631853][ T8034] loop5: detected capacity change from 0 to 512
[  492.909923][ T8034] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  492.922617][ T8034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  493.100831][ T8034] System zones: 0-1, 15-15, 18-18, 34-34
[  493.162625][ T8034] EXT4-fs (loop5): orphan cleanup on readonly fs
[  493.169560][ T8034] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  493.179450][ T8034] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  493.194638][ T8034] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  493.289004][ T8034] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.491: bg 0: block 40: padding at end of block bitmap is not set
[  493.881682][ T8034] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  493.978399][ T8034] EXT4-fs (loop5): 1 truncate cleaned up
[  493.990537][ T8034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  494.246390][ T8057] loop1: detected capacity change from 0 to 256
[  494.447655][ T5881] usb 6-1: 0:2 : does not exist
[  494.502594][ T5881] usb 6-1: USB disconnect, device number 7
[  494.508082][ T6129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.711161][ T8057] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  495.046549][ T8063] netlink: 60 bytes leftover after parsing attributes in process `syz.5.499'.
[  496.663762][ T8057] netlink: 52 bytes leftover after parsing attributes in process `syz.1.496'.
[  496.673411][ T8057] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  496.977709][   T29] audit: type=1326 audit(1730862187.037:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.5.501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f530337e719 code=0x0
[  497.486623][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  497.943784][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  497.955545][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  497.967658][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  497.981249][ T5881] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  497.994458][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.088653][ T8077] loop7: detected capacity change from 0 to 32768
[  498.478362][ T5881] usb 7-1: config 0 descriptor??
[  498.495047][ T8082] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  498.685523][ T8090] loop5: detected capacity change from 0 to 512
[  498.977729][ T8090] EXT4-fs (loop5): blocks per group (34) and clusters per group (32768) inconsistent
[  499.077463][ T5881] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd
[  499.229106][ T5881] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  499.455294][ T5881] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  499.715566][ T5881] usb 7-1: USB disconnect, device number 12
[  499.889362][ T8117] loop5: detected capacity change from 0 to 64
[  499.918679][ T8116] netlink: 32 bytes leftover after parsing attributes in process `syz.1.506'.
[  503.789603][   T44] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  504.398275][   T44] usb 4-1: Using ep0 maxpacket: 8
[  504.723715][ T8157] netlink: 830 bytes leftover after parsing attributes in process `syz.6.513'.
[  505.297730][   T44] usb 4-1: device descriptor read/all, error -71
[  505.405578][ T8177] loop5: detected capacity change from 0 to 256
[  505.661779][ T8177] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  506.431939][ T8195] loop3: detected capacity change from 0 to 512
[  506.530615][ T8177] netlink: 52 bytes leftover after parsing attributes in process `syz.5.516'.
[  506.541706][ T8177] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  506.652121][ T5881] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  506.662261][ T8195] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent
[  506.845098][ T8177] netlink: 60 bytes leftover after parsing attributes in process `syz.5.516'.
[  507.225893][ T5881] usb 8-1: Using ep0 maxpacket: 32
[  507.466871][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.5.522'.
[  507.484354][ T5881] usb 8-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.495885][ T5881] usb 8-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  507.506149][ T5881] usb 8-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  507.516768][ T5881] usb 8-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  507.530645][ T5881] usb 8-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  507.540179][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.655863][   T44] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  508.842714][ T5881] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  508.852357][ T5881] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  508.861622][ T5881] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  508.870192][ T5881] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  508.878401][ T5881] ntrig 0003:1B96:000A.0011: unknown main item tag 0x0
[  508.930904][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  508.946128][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  508.958898][   T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  508.973318][   T44] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  508.985930][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.098849][ T5881] ntrig 0003:1B96:000A.0011: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.7-1/input0
[  509.207286][   T44] usb 7-1: config 0 descriptor??
[  509.260971][ T8216] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  509.294715][ T5881] usb 8-1: USB disconnect, device number 11
[  509.745869][   T44] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd
[  509.811907][   T44] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  509.827561][   T44] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  509.994383][ T5881] usb 7-1: USB disconnect, device number 13
[  511.246856][ T5856] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  511.524899][ T5856] usb 4-1: Using ep0 maxpacket: 8
[  511.623837][ T8295] loop7: detected capacity change from 0 to 256
[  511.691308][ T8295] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  511.753574][ T5856] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  511.765460][ T5856] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  511.776313][ T5856] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  511.961480][ T5856] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  511.971222][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.979519][ T5856] usb 4-1: Product: syz
[  511.984192][ T5856] usb 4-1: Manufacturer: syz
[  511.989046][ T5856] usb 4-1: SerialNumber: syz
[  512.063599][ T8296] FAULT_INJECTION: forcing a failure.
[  512.063599][ T8296] name failslab, interval 1, probability 0, space 0, times 0
[  512.076784][ T8296] CPU: 1 UID: 0 PID: 8296 Comm: syz.6.531 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  512.087693][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  512.098241][ T8296] Call Trace:
[  512.101931][ T8296]  <TASK>
[  512.105162][ T8296]  dump_stack_lvl+0x216/0x2d0
[  512.110435][ T8296]  dump_stack+0x1e/0x30
[  512.114953][ T8296]  should_fail_ex+0x748/0x7f0
[  512.119967][ T8296]  should_failslab+0x17f/0x210
[  512.125039][ T8296]  __kmalloc_cache_noprof+0xbf/0xb00
[  512.130670][ T8296]  ? sctp_add_bind_addr+0xc0/0x650
[  512.136142][ T8296]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  512.142309][ T8296]  sctp_add_bind_addr+0xc0/0x650
[  512.147928][ T8296]  ? sctp_bind_addr_state+0x27b/0x330
[  512.153756][ T8296]  sctp_copy_local_addr_list+0x335/0x500
[  512.159925][ T8296]  sctp_copy_one_addr+0x122/0x6b0
[  512.165276][ T8296]  sctp_bind_addr_copy+0xde/0x890
[  512.170610][ T8296]  ? sctp_association_new+0x32a0/0x3330
[  512.176565][ T8296]  ? kmsan_get_metadata+0x13e/0x1c0
[  512.182159][ T8296]  sctp_assoc_set_bind_addr_from_ep+0x1f3/0x260
[  512.188751][ T8296]  sctp_connect_new_asoc+0x51b/0xb30
[  512.194461][ T8296]  sctp_sendmsg+0x3c92/0x4a80
[  512.199438][ T8296]  ? kmsan_get_metadata+0x13e/0x1c0
[  512.205004][ T8296]  ? __pfx_udp_sendmsg+0x10/0x10
[  512.210304][ T8296]  ? __pfx_sctp_sendmsg+0x10/0x10
[  512.215663][ T8296]  inet_sendmsg+0x25a/0x280
[  512.220483][ T8296]  ? __pfx_inet_sendmsg+0x10/0x10
[  512.225811][ T8296]  __sock_sendmsg+0x267/0x380
[  512.230816][ T8296]  __sys_sendto+0x645/0x7f0
[  512.235759][ T8296]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  512.242490][ T8296]  ? fput+0x286/0x320
[  512.246742][ T8296]  __x64_sys_sendto+0x125/0x1d0
[  512.251906][ T8296]  x64_sys_call+0x3373/0x3ba0
[  512.256892][ T8296]  do_syscall_64+0xcd/0x1e0
[  512.261714][ T8296]  ? clear_bhb_loop+0x25/0x80
[  512.266760][ T8296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.272935][ T8296] RIP: 0033:0x7f337997e719
[  512.277664][ T8296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.297645][ T8296] RSP: 002b:00007f337a731038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  512.306384][ T8296] RAX: ffffffffffffffda RBX: 00007f3379b35f80 RCX: 00007f337997e719
[  512.314821][ T8296] RDX: 0000000000034000 RSI: 0000000020847fff RDI: 0000000000000004
[  512.323038][ T8296] RBP: 00007f337a731090 R08: 000000002005ffe4 R09: 000000000000001c
[  512.331257][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  512.339476][ T8296] R13: 0000000000000000 R14: 00007f3379b35f80 R15: 00007ffd5621cff8
[  512.347793][ T8296]  </TASK>
[  513.411936][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  513.418944][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  513.798082][ T8316] loop6: detected capacity change from 0 to 512
[  513.870201][ T8318] netlink: 32 bytes leftover after parsing attributes in process `syz.7.536'.
[  513.917799][ T8316] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent
[  514.004505][ T8286] loop3: detected capacity change from 0 to 512
[  514.587567][ T8286] loop3: detected capacity change from 0 to 512
[  514.936487][ T8335] loop5: detected capacity change from 0 to 16
[  515.165885][ T8335] erofs: (device loop5): mounted with root inode @ nid 36.
[  515.351361][ T8286] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[  516.137979][ T8340] loop1: detected capacity change from 0 to 512
[  517.012032][ T8340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.025716][ T8340] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  517.124247][ T5881] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  517.127158][ T5856] usb 4-1: 0:2 : does not exist
[  517.155624][ T5856] usb 4-1: USB disconnect, device number 14
[  517.305687][   T29] audit: type=1800 audit(1730862208.390:162): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.537" name="file2" dev="loop1" ino=16 res=0 errno=0
[  517.422982][ T5881] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  517.432639][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.441133][ T5881] usb 7-1: Product: syz
[  517.445538][ T5881] usb 7-1: Manufacturer: syz
[  517.449059][   T29] audit: type=1800 audit(1730862208.474:163): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.537" name="file1" dev="loop1" ino=15 res=0 errno=0
[  517.450523][ T5881] usb 7-1: SerialNumber: syz
[  517.478534][ T5858] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  517.541514][ T5881] usb 7-1: config 0 descriptor??
[  517.905147][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  517.917129][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  517.928909][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  517.942262][ T5858] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  517.951676][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.001147][ T5881] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  518.236902][ T5858] usb 6-1: config 0 descriptor??
[  518.299191][ T8351] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  518.362235][    T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  518.409509][ T8352] netlink: 36 bytes leftover after parsing attributes in process `syz.6.542'.
[  518.561991][    T8] usb 4-1: Using ep0 maxpacket: 8
[  518.632319][    T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  518.642306][    T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  518.653039][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  518.724318][ T5881] gspca_sunplus: reg_w_riv err -110
[  518.730058][ T5881] sunplus 7-1:0.0: probe with driver sunplus failed with error -110
[  518.799558][ T5858] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd
[  518.878902][    T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  518.888408][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.896859][    T8] usb 4-1: Product: syz
[  518.900498][ T5858] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  518.901173][    T8] usb 4-1: Manufacturer: syz
[  518.913960][    T8] usb 4-1: SerialNumber: syz
[  519.050315][ T5858] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  519.187120][ T5858] usb 6-1: USB disconnect, device number 8
[  519.592159][ T8388] loop3: detected capacity change from 0 to 512
[  519.721495][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.458322][ T8388] loop3: detected capacity change from 0 to 512
[  520.640230][ T8437] netlink: 76 bytes leftover after parsing attributes in process `syz.6.548'.
[  520.649886][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.6.548'.
[  520.796634][ T5881] usb 7-1: USB disconnect, device number 14
[  521.013036][ T8442] netlink: 32 bytes leftover after parsing attributes in process `syz.6.550'.
[  521.273638][ T8450] netlink: 104 bytes leftover after parsing attributes in process `syz.1.546'.
[  521.587313][ T8388] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[  521.712885][ T8453] loop7: detected capacity change from 0 to 512
[  521.928789][ T8453] EXT4-fs (loop7): blocks per group (34) and clusters per group (32768) inconsistent
[  522.528259][    T8] usb 4-1: 0:2 : does not exist
[  522.803726][    T8] usb 4-1: USB disconnect, device number 15
[  523.650726][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.555'.
[  523.813611][ T5858] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  523.894443][ T8497] loop6: detected capacity change from 0 to 128
[  523.895685][ T8505] loop7: detected capacity change from 0 to 512
[  524.087583][ T5858] usb 4-1: config 0 has no interfaces?
[  524.093410][ T5858] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  524.103101][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.187417][ T5858] usb 4-1: config 0 descriptor??
[  524.196870][ T8492] loop1: detected capacity change from 0 to 128
[  524.255727][ T8497] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  524.300774][ T8497] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  524.424798][ T8505] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.556: Parent and EA inode have the same ino 15
[  524.650803][ T8505] EXT4-fs (loop7): 1 orphan inode deleted
[  524.658423][ T8505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.049144][ T8492] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  525.268978][ T8505] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.556: invalid indirect mapped block 234881024 (level 0)
[  525.906818][ T5856] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  525.992352][ T5858] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  526.248642][ T5856] usb 2-1: device descriptor read/64, error -71
[  526.475689][    T8] usb 4-1: USB disconnect, device number 16
[  526.476464][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  526.493611][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  526.505196][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  526.518589][ T5858] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  526.528326][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.547794][ T6385] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  526.612572][ T5856] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  526.881032][ T5858] usb 6-1: config 0 descriptor??
[  526.897631][ T8519] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  527.628341][ T5858] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd
[  527.650210][ T6560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.681576][ T5858] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  527.740265][ T5858] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  527.828301][ T5858] usb 6-1: USB disconnect, device number 9
[  528.848180][ T8578] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  529.221806][   T44] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  529.345124][ T5856] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  529.384762][ T8592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.562'.
[  529.595722][   T44] usb 7-1: Using ep0 maxpacket: 8
[  529.664190][   T44] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  529.673580][   T44] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  529.688170][   T44] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  529.728583][ T5856] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.739401][ T5856] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  529.752892][ T5856] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  529.762526][ T5856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.946891][   T44] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  529.956520][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.965005][   T44] usb 7-1: Product: syz
[  529.969413][   T44] usb 7-1: Manufacturer: syz
[  529.974522][   T44] usb 7-1: SerialNumber: syz
[  530.014156][ T5856] usb 8-1: config 0 descriptor??
[  530.524512][ T8581] loop6: detected capacity change from 0 to 512
[  530.950078][ T5856] usb 8-1: USB disconnect, device number 12
[  531.730007][ T8581] loop6: detected capacity change from 0 to 512
[  532.317146][ T5858] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  532.556492][ T8626] loop5: detected capacity change from 0 to 512
[  532.643278][ T8581] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6.
[  532.650648][ T5858] usb 4-1: Using ep0 maxpacket: 32
[  532.736415][ T5858] usb 4-1: too many configurations: 21, using maximum allowed: 8
[  532.765488][ T5858] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  532.774333][ T5858] usb 4-1: config 0 has no interface number 0
[  532.780874][ T5858] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  532.880071][   T44] usb 7-1: 0:2 : does not exist
[  532.962502][   T44] usb 7-1: USB disconnect, device number 15
[  532.980420][ T8626] EXT4-fs (loop5): blocks per group (34) and clusters per group (32768) inconsistent
[  532.992011][ T5858] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  533.004955][ T5858] usb 4-1: config 0 has no interface number 0
[  533.011434][ T5858] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  533.217014][ T5858] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  533.225809][ T5858] usb 4-1: config 0 has no interface number 0
[  533.233190][ T5858] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  533.321251][ T8626] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  533.340529][ T5858] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  533.349273][ T5858] usb 4-1: config 0 has no interface number 0
[  533.356002][ T5858] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  533.454056][ T5858] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  533.462651][ T5858] usb 4-1: config 0 has no interface number 0
[  533.469032][ T5858] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  533.547941][ T5858] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  533.558132][ T5858] usb 4-1: config 0 has no interface number 0
[  533.564508][ T5858] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  533.654727][ T5858] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  533.663275][ T5858] usb 4-1: config 0 has no interface number 0
[  533.669782][ T5858] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  533.766830][ T5858] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  533.775428][ T5858] usb 4-1: config 0 has no interface number 0
[  533.785645][ T5858] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  533.870392][ T5858] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  533.884348][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=215
[  533.897529][ T5858] usb 4-1: Product: syz
[  533.904426][ T5858] usb 4-1: Manufacturer: syz
[  533.909530][ T5858] usb 4-1: SerialNumber: syz
[  533.997391][ T5858] usb 4-1: config 0 descriptor??
[  534.123145][ T5858] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  534.131894][ T5858] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  534.281679][ T5858] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  534.348855][ T8675] fuse: Bad value for 'group_id'
[  534.354249][ T8675] fuse: Bad value for 'group_id'
[  534.489040][ T5858] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71)
[  534.528350][ T5858] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  534.560461][ T5858] usb 4-1: USB disconnect, device number 17
[  534.572559][ T5858] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  535.643439][ T5858] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  535.864779][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  535.876719][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  535.888380][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  535.901743][ T5858] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  535.911381][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.037772][ T8680] loop6: detected capacity change from 0 to 4096
[  536.046746][ T5858] usb 6-1: config 0 descriptor??
[  536.068813][ T8699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  536.248925][ T8680] NILFS (loop6): invalid segment: Checksum error in segment payload
[  536.257942][ T8680] NILFS (loop6): trying rollback from an earlier position
[  536.465530][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.576'.
[  536.501875][ T8680] NILFS (loop6): recovery complete
[  536.533267][ T8723] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  536.568317][ T8724] vivid-007: =================  START STATUS  =================
[  536.577576][ T8724] vivid-007: Enable Output Cropping: true
[  536.583648][ T8724] vivid-007: Enable Output Composing: true
[  536.590581][ T8724] vivid-007: Enable Output Scaler: true
[  536.596891][ T8724] vivid-007: Tx RGB Quantization Range: Automatic
[  536.604384][ T8724] vivid-007: Transmit Mode: HDMI
[  536.614022][ T8724] vivid-007: Hotplug Present: 0x00000000
[  536.621453][ T8724] vivid-007: RxSense Present: 0x00000000
[  536.627735][ T8724] vivid-007: EDID Present: 0x00000000
[  536.633894][ T8724] vivid-007: ==================  END STATUS  ==================
[  536.752157][ T5858] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd
[  536.802729][ T5858] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  537.027504][ T5858] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  537.060007][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'.
[  537.186792][ T5858] usb 6-1: USB disconnect, device number 10
[  538.947329][ T5858] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  539.166101][ T5858] usb 4-1: Using ep0 maxpacket: 8
[  539.280832][ T5858] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  539.290028][ T5858] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  539.301165][ T5858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  539.483152][ T5858] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  539.494379][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.503086][ T5858] usb 4-1: Product: syz
[  539.507504][ T5858] usb 4-1: Manufacturer: syz
[  539.512525][ T5858] usb 4-1: SerialNumber: syz
[  539.655188][ T8776] loop7: detected capacity change from 0 to 512
[  539.936206][ T8776] EXT4-fs (loop7): blocks per group (34) and clusters per group (32768) inconsistent
[  540.111979][ T8766] loop3: detected capacity change from 0 to 512
[  541.384027][ T8766] loop3: detected capacity change from 0 to 512
[  541.403883][ T8788] loop1: detected capacity change from 0 to 1024
[  541.674039][ T8798] fuse: Bad value for 'group_id'
[  541.679235][ T8798] fuse: Bad value for 'group_id'
[  542.203949][ T8766] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  542.212389][ T8766] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  542.407698][ T8766] System zones: 0-1, 15-15, 18-18, 34-34
[  542.534252][ T8766] EXT4-fs (loop3): orphan cleanup on readonly fs
[  542.541506][ T8766] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  542.551450][ T8766] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  542.570966][ T8766] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  543.003596][ T8766] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.579: bg 0: block 40: padding at end of block bitmap is not set
[  543.097057][ T8766] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  543.123675][ T8766] EXT4-fs (loop3): 1 truncate cleaned up
[  543.132366][ T8766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  543.370817][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.712175][ T5858] usb 4-1: 0:2 : does not exist
[  543.946780][ T5858] usb 4-1: USB disconnect, device number 18
[  544.297807][ T5858] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  544.396945][ T8842] netlink: 32 bytes leftover after parsing attributes in process `syz.5.589'.
[  544.540143][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  544.552079][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  544.563718][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  544.577277][ T5858] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  544.586850][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.688020][ T5799] hfsplus: bad catalog entry type
[  544.788263][ T5858] usb 4-1: config 0 descriptor??
[  544.858052][ T8820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  544.896609][ T5799] =====================================================
[  544.908863][ T5799] BUG: KMSAN: uninit-value in hfsplus_strcasecmp+0x1ca/0x770
[  544.918194][ T5799]  hfsplus_strcasecmp+0x1ca/0x770
[  544.923607][ T5799]  hfsplus_cat_case_cmp_key+0xde/0x190
[  544.929421][ T5799]  hfs_find_rec_by_key+0xb1/0x240
[  544.934654][ T5799]  __hfsplus_brec_find+0x26f/0x7b0
[  544.940113][ T5799]  hfsplus_brec_find+0x445/0x970
[  544.945253][ T5799]  hfsplus_brec_read+0x46/0x1a0
[  544.950466][ T5799]  hfsplus_find_cat+0xdb/0x460
[  544.955440][ T5799]  hfsplus_iget+0x729/0xae0
[  544.960317][ T5799]  hfsplus_lookup+0xcde/0xef0
[  544.965172][ T5799]  __lookup_slow+0x506/0x6e0
[  544.970595][ T5799]  lookup_slow+0x6a/0xd0
[  544.975015][ T5799]  walk_component+0x467/0x650
[  544.980123][ T5799]  path_lookupat+0x27d/0x6f0
[  544.984900][ T5799]  filename_lookup+0x22f/0x750
[  544.990019][ T5799]  user_path_at+0x85/0x390
[  544.994614][ T5799]  __x64_sys_umount+0x146/0x240
[  545.004799][ T5799]  x64_sys_call+0x2bbd/0x3ba0
[  545.011209][ T5799]  do_syscall_64+0xcd/0x1e0
[  545.016070][ T5799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.022160][ T5799] 
[  545.024735][ T5799] Uninit was created at:
[  545.029229][ T5799]  __kmalloc_noprof+0x661/0xf30
[  545.034451][ T5799]  hfsplus_find_init+0x95/0x1d0
[  545.039505][ T5799]  hfsplus_iget+0x3c4/0xae0
[  545.044336][ T5799]  hfsplus_lookup+0xcde/0xef0
[  545.049195][ T5799]  __lookup_slow+0x506/0x6e0
[  545.054232][ T5799]  lookup_slow+0x6a/0xd0
[  545.058651][ T5799]  walk_component+0x467/0x650
[  545.063630][ T5799]  path_lookupat+0x27d/0x6f0
[  545.068393][ T5799]  filename_lookup+0x22f/0x750
[  545.073586][ T5799]  user_path_at+0x85/0x390
[  545.078176][ T5799]  __x64_sys_umount+0x146/0x240
[  545.083435][ T5799]  x64_sys_call+0x2bbd/0x3ba0
[  545.088308][ T5799]  do_syscall_64+0xcd/0x1e0
[  545.093172][ T5799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.104482][ T5799] 
[  545.106920][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz-executor Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  545.119642][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  545.130166][ T5799] =====================================================
[  545.137218][ T5799] Disabling lock debugging due to kernel taint
[  545.143690][ T5799] Kernel panic - not syncing: kmsan.panic set ...
[  545.150258][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz-executor Tainted: G    B              6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  545.162832][ T5799] Tainted: [B]=BAD_PAGE
[  545.167104][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  545.177314][ T5799] Call Trace:
[  545.180710][ T5799]  <TASK>
[  545.183748][ T5799]  dump_stack_lvl+0x216/0x2d0
[  545.188645][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.194642][ T5799]  dump_stack+0x1e/0x30
[  545.199006][ T5799]  panic+0x4e2/0xcf0
[  545.203124][ T5799]  ? kmsan_get_metadata+0x131/0x1c0
[  545.208514][ T5799]  kmsan_report+0x2c7/0x2d0
[  545.213256][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.218629][ T5799]  ? __msan_warning+0x95/0x120
[  545.223595][ T5799]  ? hfsplus_strcasecmp+0x1ca/0x770
[  545.229007][ T5799]  ? hfsplus_cat_case_cmp_key+0xde/0x190
[  545.234840][ T5799]  ? hfs_find_rec_by_key+0xb1/0x240
[  545.240250][ T5799]  ? __hfsplus_brec_find+0x26f/0x7b0
[  545.245748][ T5799]  ? hfsplus_brec_find+0x445/0x970
[  545.251065][ T5799]  ? hfsplus_brec_read+0x46/0x1a0
[  545.256294][ T5799]  ? hfsplus_find_cat+0xdb/0x460
[  545.261419][ T5799]  ? hfsplus_iget+0x729/0xae0
[  545.266302][ T5799]  ? hfsplus_lookup+0xcde/0xef0
[  545.271349][ T5799]  ? __lookup_slow+0x506/0x6e0
[  545.276297][ T5799]  ? lookup_slow+0x6a/0xd0
[  545.280894][ T5799]  ? walk_component+0x467/0x650
[  545.285919][ T5799]  ? path_lookupat+0x27d/0x6f0
[  545.290857][ T5799]  ? filename_lookup+0x22f/0x750
[  545.295968][ T5799]  ? user_path_at+0x85/0x390
[  545.300732][ T5799]  ? __x64_sys_umount+0x146/0x240
[  545.306034][ T5799]  ? x64_sys_call+0x2bbd/0x3ba0
[  545.311092][ T5799]  ? do_syscall_64+0xcd/0x1e0
[  545.315976][ T5799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.322242][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.327622][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.333612][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.338987][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.344367][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.349800][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.355821][ T5799]  ? hfsplus_bnode_read_u16+0x3e/0x2b0
[  545.361502][ T5799]  ? filter_irq_stacks+0x60/0x1a0
[  545.366741][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.372109][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.378126][ T5799]  __msan_warning+0x95/0x120
[  545.382937][ T5799]  hfsplus_strcasecmp+0x1ca/0x770
[  545.388180][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.393565][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.398952][ T5799]  hfsplus_cat_case_cmp_key+0xde/0x190
[  545.404612][ T5799]  hfs_find_rec_by_key+0xb1/0x240
[  545.409843][ T5799]  ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10
[  545.416118][ T5799]  __hfsplus_brec_find+0x26f/0x7b0
[  545.421452][ T5799]  ? __pfx_hfs_find_rec_by_key+0x10/0x10
[  545.427306][ T5799]  hfsplus_brec_find+0x445/0x970
[  545.432459][ T5799]  ? __pfx_hfs_find_rec_by_key+0x10/0x10
[  545.438328][ T5799]  hfsplus_brec_read+0x46/0x1a0
[  545.443402][ T5799]  hfsplus_find_cat+0xdb/0x460
[  545.448352][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.453725][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.459734][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.465109][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.471114][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.476499][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.482493][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.487874][ T5799]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  545.494436][ T5799]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  545.500733][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.506103][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.512148][ T5799]  hfsplus_iget+0x729/0xae0
[  545.516905][ T5799]  hfsplus_lookup+0xcde/0xef0
[  545.521802][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.527224][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.532612][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.538605][ T5799]  ? __pfx_hfsplus_lookup+0x10/0x10
[  545.543995][ T5799]  ? __pfx_hfsplus_lookup+0x10/0x10
[  545.549385][ T5799]  __lookup_slow+0x506/0x6e0
[  545.554169][ T5799]  lookup_slow+0x6a/0xd0
[  545.558605][ T5799]  walk_component+0x467/0x650
[  545.563451][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.568918][ T5799]  path_lookupat+0x27d/0x6f0
[  545.573696][ T5799]  filename_lookup+0x22f/0x750
[  545.578651][ T5799]  ? kmsan_get_metadata+0x13e/0x1c0
[  545.584025][ T5799]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  545.590039][ T5799]  user_path_at+0x85/0x390
[  545.594638][ T5799]  ? __x64_sys_umount+0x6d/0x240
[  545.599773][ T5799]  __x64_sys_umount+0x146/0x240
[  545.604824][ T5799]  x64_sys_call+0x2bbd/0x3ba0
[  545.609791][ T5799]  do_syscall_64+0xcd/0x1e0
[  545.614510][ T5799]  ? clear_bhb_loop+0x25/0x80
[  545.619384][ T5799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.625485][ T5799] RIP: 0033:0x7ff35757fa47
[  545.630050][ T5799] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  545.649867][ T5799] RSP: 002b:00007ffd5b5cbd18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  545.658486][ T5799] RAX: ffffffffffffffda RBX: 00007ff3575f123c RCX: 00007ff35757fa47
[  545.666630][ T5799] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5b5cbdd0
[  545.674765][ T5799] RBP: 00007ffd5b5cbdd0 R08: 0000000000000000 R09: 0000000000000000
[  545.682896][ T5799] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5b5ccec0
[  545.691027][ T5799] R13: 00007ff3575f123c R14: 0000000000087561 R15: 00007ffd5b5cf070
[  545.699214][ T5799]  </TASK>
[  545.702661][ T5799] Kernel Offset: disabled
[  545.707057][ T5799] Rebooting in 86400 seconds..