last executing test programs:

14.920733722s ago: executing program 1 (id=1087):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
pipe(&(0x7f0000000300))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100f700850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x40046207, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0xfcff, 0x1000000000000, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x260, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x2)

13.751110517s ago: executing program 1 (id=1090):
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)

13.700062075s ago: executing program 4 (id=1092):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

12.17431973s ago: executing program 1 (id=1095):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r4}, 0x10)
getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x9c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x9c}}, 0x0)

11.822271892s ago: executing program 4 (id=1098):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r4, 0x118, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

10.890777686s ago: executing program 3 (id=1100):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}})

10.666312549s ago: executing program 3 (id=1101):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240)={[{@nobarrier}, {@grpid}, {@journal_path={'journal_path', 0x3d, './bus'}}, {}]}, 0x1, 0x500, &(0x7f0000000500)="$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")

10.509899952s ago: executing program 3 (id=1102):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0)

9.369853839s ago: executing program 2 (id=1103):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

9.307716727s ago: executing program 0 (id=1104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mremap(&(0x7f0000a88000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

9.18985585s ago: executing program 2 (id=1105):
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)

8.821899857s ago: executing program 1 (id=1106):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00286a53ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
syz_open_dev$usbfs(0x0, 0x20076, 0x24000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000003c0)={0x0, "f7b17c6d73ff447e239ef2c6156e422ea5954fe9153b6fc91d876303d3e6277868fb2b8a81b0e71e86de066689582049d6a174cc078eb568fe67f4ed0b7dfe99", 0x3b}, 0x48, 0xffffffffffffffff)
r8 = add_key$fscrypt_provisioning(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x3}, &(0x7f0000001980)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffc)
keyctl$instantiate_iov(0x14, r7, &(0x7f0000001840), 0x0, r8)
dup3(r6, r1, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000b32c71ff54ad9d0eddefe63b8fe6929a27ccc4285e6b30f06a032b47d5ad8df488883b2668dd16b05485259bfb710a4c06e0695e0fd8e8674f449b491eb3ed455c8011533c2e32c04bc1cfc39f753477ccccbd456e720802ca4c229240766c4ec220e563398db71dea30f7", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

8.200164439s ago: executing program 2 (id=1107):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)

8.166872092s ago: executing program 4 (id=1108):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)={0x18, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x20000, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000340)=""/118, 0x76, 0x0, &(0x7f00000003c0)=""/68, 0x44}}, 0x10)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x88}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000680001000000000000000000000000000000000006000300000000001400020002"], 0x34}}, 0x0)

8.018313913s ago: executing program 3 (id=1109):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create1(0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c696f636861727365743d63703933322c636f6465706167653d3835372c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c696f636861727365743d6575632d6a702c757466383d302c646f733178666c6f7070792c726f6469722c726f6469722c003fc604f8ff7d2b25d49c2bd2ac7ab8337b339de1ab71d62b2a6d60505e1d35e457f71de2567bf294092274d5bdbfe577f4189dad762567e7da2ad7b21b2377e7837945228bf549b93ca2c899e28253186632e400252f53db8277d503b621abb159d96790ba64b2938b7c7a712e96753dd7c83feb96a43d03515b03a2085b396541b7241b0e860b"], 0x1, 0x217, &(0x7f0000000700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000400817e76de0ff4c0f173c17a31140dc4143d9de44822450ca05588e8aa31f41035dfba37b690490147c3fd128ac60bf636af2002fa05fc3b9bf3381ed1fb72278d6b9066d0ff38c94ffaf95dcfbce49106c51f51668af084b46425d7a9064bd617660d6bc9927aecaa989fe57a9b0df67d689f3bd86a01a9c7eff3c4289bc0a5783f535a171ec0c7a382d7ae37f98c8f353741b4d95a"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
epoll_create(0x1ff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @mcast1}, 0x1c)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3b8)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_SET(r5, 0x5452, &(0x7f0000000040)={0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020)

7.028091769s ago: executing program 4 (id=1110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0xb, {0xb, 0x0, "d0aa674f92f8414874"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15)

6.983435167s ago: executing program 0 (id=1111):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@test_dummy_encryption}, {@grpjquota}, {@test_dummy_encryption}, {@mblk_io_submit}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@resgid}, {@data_err_abort}]}, 0xe, 0x5e9, &(0x7f0000001340)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r4, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x1)
open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0)

5.777369206s ago: executing program 0 (id=1112):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000056fcb50700bee5bc587538a1551a481e604f975cfa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00')
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5)
sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x1c, r6, 0xb01, 0x0, 0x400, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x68, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x240008c2}, 0x20000890)

4.426210793s ago: executing program 0 (id=1113):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x77f, &(0x7f0000002080))
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r5=>0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r5, &(0x7f00000001c0), 0x5005)

3.277801749s ago: executing program 1 (id=1114):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x2}}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e23, @loopback}, 0xde, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200})
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002500)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003c80)='}', 0x1}], 0x1}}], 0x2, 0x16da)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x28}}, 0x0)

3.276132135s ago: executing program 4 (id=1115):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4400, 0x0)

3.178989473s ago: executing program 0 (id=1116):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x5, &(0x7f0000000000)='BBBBB')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000001d20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200))
rt_sigsuspend(&(0x7f0000000000), 0x8)
tkill(r2, 0x16)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x0)

3.178273377s ago: executing program 3 (id=1117):
socket$inet(0x2, 0x1, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
getpriority(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {0x0}, {&(0x7f00000004c0)}], 0x3, 0x8)

3.065605196s ago: executing program 2 (id=1118):
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x5, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)

2.778291794s ago: executing program 4 (id=1119):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00llow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000005,fmask=00000000000000000000006,fmask=00000000000000000000003,iocharset=cp864,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$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")
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2.306935287s ago: executing program 1 (id=1120):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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")
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffd11, &(0x7f00000001c0)='*', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfed8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

1.876098212s ago: executing program 2 (id=1121):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000423149637c28052ab2efc0a5f3733e5ba394736a06e7604b3a05000000000000000000"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000240)=@generic={0x2, 0x7, 0x4})

1.058348302s ago: executing program 0 (id=1122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef)

286.618939ms ago: executing program 2 (id=1123):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000006480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1000, 0x6, 0x9, 0x831, r0, 0x5, '\x00', 0x0, r1, 0x4, 0x4, 0x4, 0x6, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x0, 0x65, 0x12, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0x9}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x7, [@typedef={0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x5}, @union={0x5, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x4, 0x4, 0x6}, {0xe, 0x4, 0x8}, {0x10, 0x2, 0x2}, {0x9, 0xd, 0x9}, {0xc, 0x7}, {0xc, 0x2, 0x9}]}, @struct={0xa, 0x8, 0x0, 0x4, 0x1, 0x7, [{0x9, 0x1, 0x2000000}, {0x1, 0x1, 0x5}, {0x3, 0x2, 0x4}, {0xb, 0x4, 0x1}, {0xe, 0x4, 0x7fffffff}, {0x1, 0x2, 0xe}, {0xd, 0x5, 0x1ff}, {0x3, 0x5, 0x9}]}]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f, 0x61]}}, &(0x7f00000005c0)=""/143, 0xf7, 0x8f, 0x0, 0xb, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x7}, 0x8)

0s ago: executing program 3 (id=1124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

em 00000000-0000-0000-0000-000000000000.
[  325.966310][ T7987] BTRFS info (device loop0): disabling free space tree
[  325.999146][ T7987] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  326.003359][ T8031] loop3: detected capacity change from 0 to 2048
[  326.013440][ T7987] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  326.017784][   T54] Bluetooth: hci2: command tx timeout
[  326.066387][ T7999] loop1: detected capacity change from 0 to 40427
[  326.113370][ T7999] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  326.121915][ T7999] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  326.188363][ T8031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.214216][ T7999] F2FS-fs (loop1): Found nat_bits in checkpoint
[  326.360122][ T8045] loop2: detected capacity change from 0 to 256
[  326.381358][ T8031] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  326.468811][ T8031] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  326.502636][ T7999] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  326.563998][ T7999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  326.573074][ T8031] EXT4-fs (loop3): This should not happen!! Data will be lost
[  326.573074][ T8031] 
[  326.639224][ T8031] EXT4-fs (loop3): Total free blocks count 0
[  326.646623][ T8031] EXT4-fs (loop3): Free/Dirty block details
[  326.689358][ T8031] EXT4-fs (loop3): free_blocks=2415919104
[  327.369181][ T1113] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  327.539416][ T8031] EXT4-fs (loop3): dirty_blocks=16
[  327.628815][ T8053] xt_CT: No such helper "syz1"
[  327.746159][ T6184] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  327.779142][ T8031] EXT4-fs (loop3): Block reservation details
[  327.785181][ T8031] EXT4-fs (loop3): i_reserved_data_blocks=1
[  328.090272][   T54] Bluetooth: hci2: command tx timeout
[  329.459675][ T8066] loop2: detected capacity change from 0 to 8192
[  329.941139][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.183815][   T54] Bluetooth: hci2: command tx timeout
[  330.239425][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.493299][   T12] bond0 (unregistering): Released all slaves
[  330.941373][ T7988] chnl_net:caif_netlink_parms(): no params data found
[  331.388393][ T8077] loop1: detected capacity change from 0 to 40427
[  331.438104][ T8077] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  331.446416][ T8077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  331.531593][ T8077] F2FS-fs (loop1): invalid crc value
[  331.658065][ T8077] F2FS-fs (loop1): Found nat_bits in checkpoint
[  331.684952][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.748119][ T8101] loop2: detected capacity change from 0 to 2048
[  331.792613][ T8077] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  331.800190][ T8077] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  331.815153][   T12] hsr_slave_0: left promiscuous mode
[  331.826528][   T12] hsr_slave_1: left promiscuous mode
[  331.834234][ T8101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.901000][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  331.933700][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.968352][ T8077] syz.1.587: attempt to access beyond end of device
[  331.968352][ T8077] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  332.124089][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.136390][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.186400][ T6919] syz-executor: attempt to access beyond end of device
[  332.186400][ T6919] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  332.208600][   T12] veth1_macvtap: left promiscuous mode
[  332.223893][ T6919] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  332.310076][   T12] veth0_macvtap: left promiscuous mode
[  332.330455][ T5344] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  332.339423][   T54] Bluetooth: hci2: command tx timeout
[  332.431014][   T12] veth1_vlan: left promiscuous mode
[  332.721128][   T12] veth0_vlan: left promiscuous mode
[  332.740961][ T5344] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.772043][ T5344] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  332.863009][ T5344] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  332.921177][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.944437][ T6396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.996977][ T5344] usb 4-1: config 0 descriptor??
[  333.034830][ T5344] gspca_main: spca561-2.14.0 probing abcd:cdee
[  333.229802][ T5344] spca561 4-1:0.0: probe with driver spca561 failed with error -22
[  333.260560][ T5344] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  333.288335][ T5344] usb 4-1: MIDIStreaming interface descriptor not found
[  333.496749][ T5344] usb 4-1: USB disconnect, device number 7
[  333.564844][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  333.619342][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  333.619362][   T29] audit: type=1326 audit(1727533460.907:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09be97dff9 code=0x7ffc0000
[  333.709271][   T29] audit: type=1326 audit(1727533460.907:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f09be97dff9 code=0x7ffc0000
[  333.739270][   T29] audit: type=1326 audit(1727533460.907:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09be97dff9 code=0x7ffc0000
[  333.763282][   T29] audit: type=1326 audit(1727533460.917:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09be97dff9 code=0x7ffc0000
[  333.773764][ T8112] loop0: detected capacity change from 0 to 40427
[  333.838307][ T8127] loop1: detected capacity change from 0 to 512
[  333.845023][ T8112] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  333.870872][ T8127] EXT4-fs: Ignoring removed mblk_io_submit option
[  333.877401][ T8127] ext3: Unknown parameter 'obj_user'
[  333.890803][ T8112] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  333.940668][ T8112] F2FS-fs (loop0): invalid crc value
[  333.995981][ T8112] F2FS-fs (loop0): Found nat_bits in checkpoint
[  334.245652][ T8112] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  334.433216][ T8135] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  334.530939][   T61] Bluetooth: hci4: Frame reassembly failed (-84)
[  334.593497][   T61] Bluetooth: hci4: Frame reassembly failed (-84)
[  334.716034][ T8112] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  335.757489][   T12] team0 (unregistering): Port device team_slave_1 removed
[  335.949975][   T12] team0 (unregistering): Port device team_slave_0 removed
[  336.489143][   T54] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  337.281534][ T2916] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  337.303964][ T2916] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  338.550259][ T8163] loop1: detected capacity change from 0 to 256
[  338.653842][ T8163] FAT-fs (loop1): Directory bread(block 64) failed
[  338.689443][ T8163] FAT-fs (loop1): Directory bread(block 65) failed
[  338.745184][ T8163] FAT-fs (loop1): Directory bread(block 66) failed
[  338.779283][ T8163] FAT-fs (loop1): Directory bread(block 67) failed
[  338.804231][ T8163] FAT-fs (loop1): Directory bread(block 68) failed
[  338.834755][ T8163] FAT-fs (loop1): Directory bread(block 69) failed
[  338.842178][ T8163] FAT-fs (loop1): Directory bread(block 70) failed
[  338.848755][ T8163] FAT-fs (loop1): Directory bread(block 71) failed
[  338.855437][ T8163] FAT-fs (loop1): Directory bread(block 72) failed
[  338.862039][ T8163] FAT-fs (loop1): Directory bread(block 73) failed
[  340.018329][ T5253] Bluetooth: hci3: command 0x0406 tx timeout
[  340.148139][ T8175] loop0: detected capacity change from 0 to 4096
[  340.206005][ T8175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.395220][ T8166] loop2: detected capacity change from 0 to 32768
[  340.402768][ T8166] btrfs: Deprecated parameter 'usebackuproot'
[  340.408888][ T8166] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  340.424958][ T8166] btrfs: Unknown parameter 'permit_directio'
[  340.459757][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.476555][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.500459][ T5289] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  340.504479][ T7988] bridge_slave_0: entered allmulticast mode
[  340.535224][ T7988] bridge_slave_0: entered promiscuous mode
[  340.659308][ T5289] usb 1-1: Using ep0 maxpacket: 16
[  340.680764][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.684213][ T5289] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  340.687964][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.719997][ T7988] bridge_slave_1: entered allmulticast mode
[  340.744788][ T7988] bridge_slave_1: entered promiscuous mode
[  340.744872][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.809270][ T5289] usb 1-1: Product: syz
[  340.829124][ T5289] usb 1-1: Manufacturer: syz
[  340.850809][ T5289] usb 1-1: SerialNumber: syz
[  340.877347][ T5289] usb 1-1: config 0 descriptor??
[  340.915717][ T5289] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  340.954778][ T5289] usb 1-1: Detected FT232H
[  340.984766][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.022492][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.112922][ T5289] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  341.181807][ T8188] loop1: detected capacity change from 0 to 128
[  341.226419][ T7988] team0: Port device team_slave_0 added
[  341.283950][ T7988] team0: Port device team_slave_1 added
[  341.344642][ T5289] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5
[  341.380052][ T5289] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  341.479632][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.544355][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.605498][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.876137][   T29] audit: type=1326 audit(1727533468.967:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.228596][   T29] audit: type=1326 audit(1727533468.967:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.317796][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.376130][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.419151][ T5237] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  342.419817][   T29] audit: type=1326 audit(1727533468.977:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.460703][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.549415][   T29] audit: type=1326 audit(1727533469.517:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.599551][ T5237] usb 4-1: Using ep0 maxpacket: 16
[  342.607264][ T5237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.629579][   T29] audit: type=1326 audit(1727533469.517:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.657526][ T5237] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  342.681811][ T5237] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  342.709170][ T5237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.725805][   T29] audit: type=1326 audit(1727533469.527:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.736978][ T7988] hsr_slave_0: entered promiscuous mode
[  342.760096][ T5237] usb 4-1: config 0 descriptor??
[  342.779120][   T29] audit: type=1326 audit(1727533469.527:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.787893][ T5237] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  342.811043][ T7988] hsr_slave_1: entered promiscuous mode
[  342.821239][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.835901][   T29] audit: type=1326 audit(1727533469.527:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.864367][ T7988] Cannot create hsr debugfs directory
[  342.892614][ T5344] usb 1-1: USB disconnect, device number 10
[  342.913048][ T5344] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  342.934051][   T29] audit: type=1326 audit(1727533469.537:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  342.969378][ T5344] ftdi_sio 1-1:0.0: device disconnected
[  342.987022][   T29] audit: type=1326 audit(1727533469.537:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.0.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53057dff9 code=0x7ffc0000
[  343.617555][ T6184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.670382][ T8225] loop1: detected capacity change from 0 to 256
[  343.716922][ T8225] FAT-fs (loop1): Directory bread(block 64) failed
[  343.728740][ T8225] FAT-fs (loop1): Directory bread(block 65) failed
[  343.736853][ T8225] FAT-fs (loop1): Directory bread(block 66) failed
[  343.749189][ T8225] FAT-fs (loop1): Directory bread(block 67) failed
[  343.764089][ T8225] FAT-fs (loop1): Directory bread(block 68) failed
[  343.772124][ T8225] FAT-fs (loop1): Directory bread(block 69) failed
[  343.778913][ T8225] FAT-fs (loop1): Directory bread(block 70) failed
[  343.792763][ T8225] FAT-fs (loop1): Directory bread(block 71) failed
[  343.802877][ T8225] FAT-fs (loop1): Directory bread(block 72) failed
[  343.894065][ T8225] FAT-fs (loop1): Directory bread(block 73) failed
[  344.147338][ T8237] loop2: detected capacity change from 0 to 128
[  345.362700][ T7988] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  345.408587][ T8256] loop1: detected capacity change from 0 to 256
[  345.414838][ T5289] usb 4-1: USB disconnect, device number 8
[  345.417909][ T7988] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  345.444791][ T7988] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  345.578534][ T7988] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  346.547820][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.717860][ T7988] 8021q: adding VLAN 0 to HW filter on device team0
[  346.765707][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.772921][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.831062][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.838296][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.537247][ T7988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  347.629132][ T7988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  347.734048][ T8258] loop0: detected capacity change from 0 to 32768
[  347.741513][ T8258] btrfs: Deprecated parameter 'usebackuproot'
[  347.747729][ T8258] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  347.757219][ T8258] btrfs: Unknown parameter 'permit_directio'
[  349.975595][ T8295] loop3: detected capacity change from 0 to 2048
[  350.128203][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.173004][ T8295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.231918][ T8295] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.130591][ T8296] loop0: detected capacity change from 0 to 40427
[  351.175017][ T8296] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  351.192085][ T8296] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  351.326958][ T8296] F2FS-fs (loop0): Found nat_bits in checkpoint
[  351.548910][ T8296] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  351.584056][ T8296] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  351.617766][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.352091][ T7988] veth0_vlan: entered promiscuous mode
[  352.375107][ T8339] loop3: detected capacity change from 0 to 256
[  352.388008][ T7988] veth1_vlan: entered promiscuous mode
[  353.005460][ T7988] veth0_macvtap: entered promiscuous mode
[  353.300234][ T7988] veth1_macvtap: entered promiscuous mode
[  353.547613][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.643845][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.655167][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.724714][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.765373][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.815807][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.859039][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.902053][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.970805][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.989170][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  353.998772][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.010543][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.024780][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.035816][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.047815][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.086031][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.106519][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.127850][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.172509][    T9] usb 2-1: Using ep0 maxpacket: 16
[  354.191649][    T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  354.210853][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.237519][    T9] usb 2-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config
[  354.269441][ T7988] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.278718][ T7988] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.287867][ T7988] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.298768][ T7988] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.370431][    T9] usb 2-1: config 0 has no interface number 0
[  354.377203][    T9] usb 2-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  354.442682][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  354.477872][    T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  354.535008][    T9] usb 2-1: Product: syz
[  354.549567][    T9] usb 2-1: SerialNumber: syz
[  354.566363][    T9] usb 2-1: config 0 descriptor??
[  354.606298][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.640624][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.724162][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.756031][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.875841][ T8349] loop1: detected capacity change from 0 to 1024
[  354.912230][ T8349] EXT4-fs: Ignoring removed nobh option
[  354.961759][ T8349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.970708][ T8378] loop4: detected capacity change from 0 to 1024
[  355.361935][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  355.361983][   T29] audit: type=1800 audit(1727533482.647:104): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.635" name="bus" dev="loop1" ino=18 res=0 errno=0
[  355.716637][ T8378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.060900][ T8378] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.573: attempt to clear invalid blocks 1886221359 len 1
[  356.245689][ T8354] loop3: detected capacity change from 0 to 40427
[  356.280516][ T8354] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  356.287864][ T8354] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  356.347420][ T8354] F2FS-fs (loop3): invalid crc value
[  356.374699][ T8354] F2FS-fs (loop3): Found nat_bits in checkpoint
[  356.392628][ T7988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.623923][ T8354] F2FS-fs (loop3): Start checkpoint disabled!
[  356.805865][ T8406] veth0_vlan: entered allmulticast mode
[  357.455770][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  357.470921][ T8374] loop0: detected capacity change from 0 to 40427
[  357.478184][    T9] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -2
[  357.515218][ T8374] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  357.520109][ T6919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.546824][ T8374] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  357.559579][    T9] usb 2-1: USB disconnect, device number 10
[  357.721865][ T5358] udevd[5358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  357.756380][ T8374] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4)
[  359.056574][ T8422] loop1: detected capacity change from 0 to 256
[  360.271296][ T8435] xt_CT: No such helper "syz1"
[  360.712521][ T8424] loop4: detected capacity change from 0 to 40427
[  360.745412][ T8424] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  360.774909][ T8424] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  360.884749][ T8424] F2FS-fs (loop4): Found nat_bits in checkpoint
[  361.040033][ T8424] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  361.057866][ T8424] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  362.842371][ T8476] veth0_vlan: entered allmulticast mode
[  364.117388][ T8474] loop0: detected capacity change from 0 to 40427
[  364.131273][ T8474] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  364.138274][ T8474] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  364.152327][ T8474] F2FS-fs (loop0): invalid crc value
[  364.161145][ T8474] F2FS-fs (loop0): Found nat_bits in checkpoint
[  364.232248][ T8474] F2FS-fs (loop0): Start checkpoint disabled!
[  364.240836][ T8474] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  364.247922][ T8474] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  364.728179][ T2903] kworker/u8:8: attempt to access beyond end of device
[  364.728179][ T2903] loop0: rw=1, sector=53248, nr_sectors = 128 limit=40427
[  364.799754][ T2903] kworker/u8:8: attempt to access beyond end of device
[  364.799754][ T2903] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  364.809835][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  364.845365][ T2903] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  364.859727][ T2903] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  364.867135][ T2903] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  364.874246][ T2903] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  364.885409][ T8478] loop3: detected capacity change from 0 to 40427
[  364.909693][ T8478] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  364.917534][ T8478] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  365.190616][    T9] usb 3-1: Using ep0 maxpacket: 8
[  365.196173][ T8478] F2FS-fs (loop3): Found nat_bits in checkpoint
[  365.215051][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.226311][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.240024][    T9] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  365.606325][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.634495][    T9] usb 3-1: config 0 descriptor??
[  365.896867][ T8478] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  365.927278][ T8478] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  365.997669][ T8520] loop0: detected capacity change from 0 to 128
[  366.075011][    T9] elecom 0003:056E:010C.0009: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0
[  367.497720][ T8502] syz.2.659[8502] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  367.497817][ T8502] syz.2.659[8502] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  367.518905][ T8502] syz.2.659[8502] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  367.655856][    T9] usb 3-1: USB disconnect, device number 9
[  368.738288][ T8541] loop1: detected capacity change from 0 to 40427
[  368.834583][ T8541] F2FS-fs (loop1): invalid crc value
[  368.842559][ T8551] loop4: detected capacity change from 0 to 256
[  368.945497][ T8541] F2FS-fs (loop1): Found nat_bits in checkpoint
[  369.035405][ T8551] FAT-fs (loop4): Directory bread(block 64) failed
[  369.042305][ T8551] FAT-fs (loop4): Directory bread(block 65) failed
[  369.048945][ T8551] FAT-fs (loop4): Directory bread(block 66) failed
[  369.055766][ T8551] FAT-fs (loop4): Directory bread(block 67) failed
[  369.062410][ T8551] FAT-fs (loop4): Directory bread(block 68) failed
[  369.069214][ T8551] FAT-fs (loop4): Directory bread(block 69) failed
[  369.075868][ T8551] FAT-fs (loop4): Directory bread(block 70) failed
[  369.082607][ T8551] FAT-fs (loop4): Directory bread(block 71) failed
[  369.089291][ T8551] FAT-fs (loop4): Directory bread(block 72) failed
[  369.095855][ T8551] FAT-fs (loop4): Directory bread(block 73) failed
[  369.166244][ T8541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  369.397955][ T8562] loop4: detected capacity change from 0 to 256
[  370.519636][ T8568] xt_CT: No such helper "syz1"
[  372.465805][ T8574] loop3: detected capacity change from 0 to 32768
[  372.475783][ T8565] loop2: detected capacity change from 0 to 40427
[  372.495457][ T8574] btrfs: Deprecated parameter 'usebackuproot'
[  372.501871][ T8565] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  372.511676][ T8574] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  372.524517][ T8565] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  372.533532][ T8574] btrfs: Unknown parameter 'permit_directio'
[  372.541291][ T6919] syz-executor: attempt to access beyond end of device
[  372.541291][ T6919] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  372.571717][ T8565] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4)
[  372.572922][ T6919] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  372.984514][ T8590] loop4: detected capacity change from 0 to 512
[  373.048458][ T8590] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.684: invalid indirect mapped block 256 (level 2)
[  373.068372][ T8590] EXT4-fs (loop4): 2 truncates cleaned up
[  373.075913][ T8590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.379473][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  373.474820][ T8594] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  373.484495][ T8594] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  373.613185][    T9] usb 3-1: Using ep0 maxpacket: 8
[  373.926787][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.974853][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.035578][    T9] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  374.051646][ T7988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.104457][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.172168][    T9] usb 3-1: config 0 descriptor??
[  374.510669][ T8609] loop3: detected capacity change from 0 to 16
[  374.546522][ T8609] erofs: (device loop3): mounted with root inode @ nid 36.
[  374.632390][    T9] elecom 0003:056E:010C.000A: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0
[  374.900490][ T8613] syz.2.683[8613] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  374.900584][ T8613] syz.2.683[8613] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  374.911672][ T8612] overlay: filesystem on ./file0 is read-only
[  374.939560][ T8613] syz.2.683[8613] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  374.991993][   T25] usb 3-1: USB disconnect, device number 10
[  375.060524][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  375.244226][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.274200][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.305904][    T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  375.335171][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.378311][    T9] usb 2-1: config 0 descriptor??
[  375.492800][ T8607] loop0: detected capacity change from 0 to 40427
[  375.509100][ T8607] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  375.518037][ T8607] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  375.746557][ T8607] F2FS-fs (loop0): invalid crc value
[  376.131899][ T8607] F2FS-fs (loop0): Found nat_bits in checkpoint
[  376.346034][    T9] sony 0003:054C:0268.000B: unknown main item tag 0x0
[  376.354425][    T9] sony 0003:054C:0268.000B: unknown main item tag 0x0
[  376.362515][ T8607] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  376.366161][    T9] sony 0003:054C:0268.000B: unknown main item tag 0x0
[  376.383539][ T8607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  376.389268][    T9] sony 0003:054C:0268.000B: unknown main item tag 0x0
[  376.412521][    T9] sony 0003:054C:0268.000B: unknown main item tag 0x0
[  376.439561][    T9] sony 0003:054C:0268.000B: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0
[  376.487123][    T9] sony 0003:054C:0268.000B: failed to claim input
[  376.670118][    T9] usb 2-1: USB disconnect, device number 11
[  377.257161][ T8630] usb usb8: usbfs: process 8630 (syz.0.688) did not claim interface 0 before use
[  378.064656][ T8622] loop2: detected capacity change from 0 to 40427
[  378.273242][ T8628] loop4: detected capacity change from 0 to 40427
[  378.287671][ T8628] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  378.296982][ T8628] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  378.925962][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  378.932462][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  378.951706][ T8622] F2FS-fs (loop2): invalid crc value
[  379.005736][ T8622] F2FS-fs (loop2): Found nat_bits in checkpoint
[  379.026392][ T8628] F2FS-fs (loop4): Found nat_bits in checkpoint
[  379.432858][ T2983] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  379.494623][ T2983] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  379.525632][ T8628] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  379.591934][ T8651] loop3: detected capacity change from 0 to 128
[  379.594087][ T8628] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  380.933831][ T8652] overlayfs: failed to resolve './file2': -2
[  380.959749][ T8660] binder: 8657:8660 ioctl 4018620d 0 returned -22
[  382.534604][ T8675] loop1: detected capacity change from 0 to 16
[  382.605136][ T8675] erofs: (device loop1): mounted with root inode @ nid 36.
[  382.696517][ T8656] loop2: detected capacity change from 0 to 32768
[  382.707715][ T8656] btrfs: Deprecated parameter 'usebackuproot'
[  382.771292][ T8656] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  382.814850][ T8656] btrfs: Unknown parameter 'permit_directio'
[  383.093183][ T8681] overlay: filesystem on ./file0 is read-only
[  386.142467][ T8696] loop4: detected capacity change from 0 to 2048
[  386.144483][ T8701] loop2: detected capacity change from 0 to 256
[  386.423630][ T8696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  386.452512][ T8696] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.097549][ T8707] xt_CT: No such helper "syz1"
[  387.359107][ T5289] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  387.529221][ T5289] usb 1-1: Using ep0 maxpacket: 16
[  387.540301][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  387.566060][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  387.591233][ T5289] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  387.605917][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.630379][ T5289] usb 1-1: Product: syz
[  387.638443][ T5289] usb 1-1: Manufacturer: syz
[  387.659373][ T5289] usb 1-1: SerialNumber: syz
[  387.689904][ T5289] usb 1-1: config 0 descriptor??
[  387.716132][ T5289] hub 1-1:0.0: bad descriptor, ignoring hub
[  387.729204][ T5289] hub 1-1:0.0: probe with driver hub failed with error -5
[  387.748798][ T8711] loop2: detected capacity change from 0 to 40427
[  387.763667][ T5289] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  387.776151][ T8711] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  387.799148][ T8711] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  387.827078][ T8711] F2FS-fs (loop2): Found nat_bits in checkpoint
[  387.867395][ T7988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.978740][ T5289] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12
[  388.010778][ T5358] udevd[5358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  388.021195][ T5289] usb 1-1: USB disconnect, device number 11
[  388.050984][ T8711] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  388.058590][ T8711] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  388.133807][ T8698] loop3: detected capacity change from 0 to 40427
[  388.211312][ T8698] F2FS-fs (loop3): invalid crc value
[  388.244035][ T8698] F2FS-fs (loop3): Found nat_bits in checkpoint
[  388.308842][ T8698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  389.375436][ T8730] overlayfs: failed to resolve './file2': -2
[  389.715869][ T8735] loop1: detected capacity change from 0 to 2048
[  389.716460][ T5231] syz-executor: attempt to access beyond end of device
[  389.716460][ T5231] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  389.769266][ T5231] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  389.904673][ T8735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.392696][ T8749] loop4: detected capacity change from 0 to 256
[  391.996753][ T8754] xt_CT: No such helper "syz1"
[  392.295208][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'.
[  392.788201][ T8761] loop0: detected capacity change from 0 to 2048
[  392.858727][ T8761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.527139][ T6919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.807206][ T6184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.844606][ T8772] loop2: detected capacity change from 0 to 32768
[  393.867673][ T8772] btrfs: Deprecated parameter 'usebackuproot'
[  393.874769][ T8772] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  393.951277][ T8772] btrfs: Unknown parameter 'permit_directio'
[  394.169321][ T5316] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  394.353427][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.724'.
[  394.363041][ T5316] usb 2-1: Using ep0 maxpacket: 16
[  394.379456][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  394.410959][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  394.450393][ T5316] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  394.475199][ T5316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.495457][ T5316] usb 2-1: Product: syz
[  394.505580][ T5316] usb 2-1: Manufacturer: syz
[  394.530068][ T5316] usb 2-1: SerialNumber: syz
[  394.565985][ T5316] usb 2-1: config 0 descriptor??
[  394.576829][ T5316] hub 2-1:0.0: bad descriptor, ignoring hub
[  394.589150][ T5316] hub 2-1:0.0: probe with driver hub failed with error -5
[  394.626916][ T5316] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  394.714380][ T5316] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12
[  394.792474][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  394.841760][ T8772] loop2: detected capacity change from 0 to 32768
[  394.889813][ T5316] usb 2-1: USB disconnect, device number 12
[  394.981647][ T8772] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  395.066898][ T8779] loop3: detected capacity change from 0 to 40427
[  395.135039][ T8779] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  395.143683][ T8779] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  395.277130][ T8779] F2FS-fs (loop3): Found nat_bits in checkpoint
[  395.613607][ T8803] loop4: detected capacity change from 0 to 256
[  395.693756][ T8779] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  395.709870][ T8779] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  395.767450][ T6396] ocfs2: Unmounting device (7,2) on (node local)
[  396.945794][ T8808] xt_CT: No such helper "syz1"
[  399.261201][ T8828] xt_bpf: check failed: parse error
[  400.101923][   T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  400.279633][   T25] usb 4-1: Using ep0 maxpacket: 16
[  400.313022][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.578944][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.779185][ T5289] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  400.894582][ T8849] loop4: detected capacity change from 0 to 256
[  400.939940][ T5289] usb 3-1: Using ep0 maxpacket: 16
[  400.957480][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  401.024963][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  401.027673][   T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  401.046970][   T25] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  401.057330][   T25] usb 4-1: Product: syz
[  401.062302][   T25] usb 4-1: Manufacturer: syz
[  401.078399][ T5289] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  401.090306][   T25] usb 4-1: config 0 descriptor??
[  401.098114][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.116855][ T5289] usb 3-1: Product: syz
[  401.131969][ T5289] usb 3-1: Manufacturer: syz
[  401.146398][ T5289] usb 3-1: SerialNumber: syz
[  401.170373][ T5289] usb 3-1: config 0 descriptor??
[  401.187307][ T5289] hub 3-1:0.0: bad descriptor, ignoring hub
[  401.207220][ T5289] hub 3-1:0.0: probe with driver hub failed with error -5
[  401.234368][ T5289] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  402.340692][ T8854] xt_CT: No such helper "syz1"
[  402.889266][   T25] kovaplus 0003:1E7D:2D50.000C: item fetching failed at offset 5/7
[  402.903811][   T25] kovaplus 0003:1E7D:2D50.000C: parse failed
[  402.910661][   T25] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -22
[  403.036534][   T25] usb 4-1: USB disconnect, device number 9
[  403.242539][ T5289] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12
[  403.262361][ T8865] loop4: detected capacity change from 0 to 128
[  403.270158][ T5289] usb 3-1: USB disconnect, device number 11
[  403.471724][ T8869] veth0_vlan: left promiscuous mode
[  403.476998][ T8869] veth0_vlan: entered promiscuous mode
[  403.482708][ T8869] veth0_vlan: left allmulticast mode
[  404.145344][ T5487] udevd[5487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.187357][ T8875] loop1: detected capacity change from 0 to 16
[  404.262591][ T8875] erofs: (device loop1): mounted with root inode @ nid 36.
[  404.511237][ T8877] xt_bpf: check failed: parse error
[  404.703334][ T8882] overlay: filesystem on ./file0 is read-only
[  405.380612][ T8890] loop3: detected capacity change from 0 to 128
[  407.886518][ T8914] syz.3.762[8914] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  407.886620][ T8914] syz.3.762[8914] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  407.932260][ T8914] syz.3.762[8914] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  408.189091][ T5344] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  408.382264][ T5344] usb 2-1: Using ep0 maxpacket: 16
[  408.398749][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  408.413553][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  408.438059][ T5344] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  408.453216][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.471292][ T5344] usb 2-1: Product: syz
[  408.480229][ T5344] usb 2-1: Manufacturer: syz
[  408.490674][ T5344] usb 2-1: SerialNumber: syz
[  408.504223][ T5344] usb 2-1: config 0 descriptor??
[  408.518877][ T5344] hub 2-1:0.0: bad descriptor, ignoring hub
[  408.533155][ T5344] hub 2-1:0.0: probe with driver hub failed with error -5
[  408.552992][ T5344] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  408.596869][ T5344] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12
[  408.689385][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  408.770761][ T8917] loop0: detected capacity change from 0 to 32768
[  408.798246][ T8917] btrfs: Deprecated parameter 'usebackuproot'
[  408.824326][ T8917] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  408.836913][ T8917] btrfs: Unknown parameter 'permit_directio'
[  408.839625][ T5344] usb 2-1: USB disconnect, device number 13
[  409.064511][ T8914] loop3: detected capacity change from 0 to 40427
[  409.089178][ T8914] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  409.134659][ T8914] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  409.205805][ T8914] F2FS-fs (loop3): invalid crc value
[  409.270358][ T8914] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  409.417510][ T8914] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  409.570799][ T8935] xt_bpf: check failed: parse error
[  410.386025][ T8914] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  410.393975][ T8914] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  410.497818][ T8917] loop0: detected capacity change from 0 to 32768
[  410.553104][ T8917] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  410.630920][  T116] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  410.639245][ T5344] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  410.754296][ T6184] ocfs2: Unmounting device (7,0) on (node local)
[  410.799991][ T5344] usb 5-1: Using ep0 maxpacket: 32
[  410.818320][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.822232][  T116] usb 3-1: config 0 has no interfaces?
[  410.838770][  T116] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  410.847917][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.847967][ T5344] usb 5-1: New USB device found, idVendor=3b06, idProduct=0118, bcdDevice= 0.00
[  410.847989][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.877303][ T5344] usb 5-1: config 0 descriptor??
[  410.908770][  T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.925498][  T116] usb 3-1: config 0 descriptor??
[  411.022357][ T8948] loop0: detected capacity change from 0 to 2048
[  411.067705][ T8948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  411.083233][ T8950] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  411.152625][ T5289] usb 3-1: USB disconnect, device number 12
[  412.428120][ T6184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.493371][ T8966] loop1: detected capacity change from 0 to 256
[  413.552742][ T5344] usbhid 5-1:0.0: can't add hid device: -71
[  413.558836][ T5344] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  413.591421][ T5344] usb 5-1: USB disconnect, device number 9
[  415.010627][ T8972] xt_CT: No such helper "syz1"
[  415.083798][ T8980] loop3: detected capacity change from 0 to 2048
[  415.297593][ T8980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.528418][ T8989] xt_bpf: check failed: parse error
[  416.572133][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.934257][ T9007] loop0: detected capacity change from 0 to 512
[  416.951948][ T9007] EXT4-fs: Ignoring removed mblk_io_submit option
[  416.978804][ T9007] ext3: Unknown parameter 'obj_user'
[  417.289366][ T5237] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  417.459129][ T5237] usb 2-1: Using ep0 maxpacket: 16
[  417.471072][ T5237] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.500254][ T5237] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  417.535309][ T5237] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  417.566695][ T5237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.597034][ T5237] usb 2-1: Product: syz
[  417.612518][ T5237] usb 2-1: Manufacturer: syz
[  417.622745][ T5237] usb 2-1: SerialNumber: syz
[  417.745668][ T9002] loop3: detected capacity change from 0 to 32768
[  417.765879][ T9002] btrfs: Deprecated parameter 'usebackuproot'
[  417.810444][ T9002] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  417.852304][ T9002] btrfs: Unknown parameter 'permit_directio'
[  419.114835][ T8996] loop4: detected capacity change from 0 to 40427
[  419.134798][ T8996] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  419.181069][ T8996] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  419.629929][ T8996] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[  420.135510][ T9029] loop3: detected capacity change from 0 to 2048
[  420.549453][ T5237] usb 2-1: 0:2 : does not exist
[  420.598137][ T5237] usb 2-1: USB disconnect, device number 14
[  420.640028][ T9029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.777343][ T5358] udevd[5358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  420.864201][ T5344] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  421.029922][ T5344] usb 5-1: config 1 interface 0 has no altsetting 0
[  421.256061][ T5344] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  421.309366][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.345393][ T5344] usb 5-1: Product: syz
[  421.380689][ T5344] usb 5-1: Manufacturer: syz
[  421.531961][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.588021][ T5344] usb 5-1: SerialNumber: syz
[  422.426663][ T5344] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  423.889030][ T5344] usb 5-1: USB disconnect, device number 10
[  424.475302][ T5344] usblp0: removed
[  424.765862][ T9060] loop3: detected capacity change from 0 to 40427
[  424.774038][ T9060] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  424.781956][ T9060] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  424.797205][ T9060] F2FS-fs (loop3): Found nat_bits in checkpoint
[  424.937847][ T9060] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  424.946267][ T9060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  426.033328][ T5344] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  426.329074][ T9085] loop3: detected capacity change from 0 to 128
[  426.489500][ T9085] EXT4-fs (loop3): Test dummy encryption mode enabled
[  426.581892][ T9085] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  426.606512][ T9085] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  426.669055][ T5344] usb 5-1: Using ep0 maxpacket: 16
[  426.680269][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.694406][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.714511][ T5344] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  426.744313][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.764792][ T5344] usb 5-1: config 0 descriptor??
[  427.064022][ T9085] overlayfs: failed to resolve './file0': -2
[  427.272656][ T5344] ntrig 0003:1B96:0008.000D: unknown main item tag 0x0
[  427.297826][ T5344] ntrig 0003:1B96:0008.000D: unknown main item tag 0x0
[  427.337540][ T5344] ntrig 0003:1B96:0008.000D: unknown main item tag 0x0
[  427.382398][ T5344] ntrig 0003:1B96:0008.000D: unknown main item tag 0x0
[  427.425093][ T5344] ntrig 0003:1B96:0008.000D: unknown main item tag 0x0
[  427.452584][ T5344] ntrig 0003:1B96:0008.000D: unknown main item tag 0x0
[  427.493303][ T5344] ntrig 0003:1B96:0008.000D: unbalanced collection at end of report description
[  427.552116][ T5344] ntrig 0003:1B96:0008.000D: parse failed
[  427.587179][ T5344] ntrig 0003:1B96:0008.000D: probe with driver ntrig failed with error -22
[  427.640833][ T5344] usb 5-1: USB disconnect, device number 11
[  427.678180][ T5231] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  427.858557][ T9108] loop3: detected capacity change from 0 to 256
[  427.962768][ T9108] FAT-fs (loop3): Directory bread(block 64) failed
[  428.014706][ T9108] FAT-fs (loop3): Directory bread(block 65) failed
[  428.170712][ T9108] FAT-fs (loop3): Directory bread(block 66) failed
[  428.190109][ T9108] FAT-fs (loop3): Directory bread(block 67) failed
[  428.217383][ T9108] FAT-fs (loop3): Directory bread(block 68) failed
[  428.233217][ T9108] FAT-fs (loop3): Directory bread(block 69) failed
[  428.242832][ T9108] FAT-fs (loop3): Directory bread(block 70) failed
[  428.253858][ T9108] FAT-fs (loop3): Directory bread(block 71) failed
[  428.263177][ T9108] FAT-fs (loop3): Directory bread(block 72) failed
[  428.273836][ T9108] FAT-fs (loop3): Directory bread(block 73) failed
[  429.345334][ T9120] loop4: detected capacity change from 0 to 512
[  429.515615][ T9104] loop0: detected capacity change from 0 to 40427
[  429.938103][ T9104] F2FS-fs (loop0): invalid crc value
[  430.069304][   T29] audit: type=1326 audit(1727533557.337:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  430.118334][ T9120] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.818: invalid indirect mapped block 256 (level 2)
[  430.140594][ T9120] EXT4-fs (loop4): 2 truncates cleaned up
[  430.147327][ T9120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.180100][   T29] audit: type=1326 audit(1727533557.337:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  430.202683][   T29] audit: type=1326 audit(1727533557.337:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  430.225050][   T29] audit: type=1326 audit(1727533557.337:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  430.248076][   T29] audit: type=1326 audit(1727533557.337:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  430.270993][   T29] audit: type=1326 audit(1727533557.337:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  430.294369][   T29] audit: type=1326 audit(1727533557.337:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  430.328752][ T9104] F2FS-fs (loop0): Found nat_bits in checkpoint
[  430.439262][ T9104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  430.962007][ T9143] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  430.972059][ T9143] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  431.289153][ T9124] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  431.490213][ T7988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.408421][ T9141] loop3: detected capacity change from 0 to 40427
[  432.489831][ T9141] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  432.504975][ T9141] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  432.535994][ T9141] F2FS-fs (loop3): invalid crc value
[  432.558535][ T9141] F2FS-fs (loop3): Found nat_bits in checkpoint
[  432.715886][ T9161] xt_bpf: check failed: parse error
[  432.771531][ T9141] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  432.778628][ T9141] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  433.817576][ T9167] xt_TPROXY: Can be used only with -p tcp or -p udp
[  434.018305][ T5237] kernel write not supported for file bpf-prog (pid: 5237 comm: kworker/0:3)
[  434.609759][ T9177] loop2: detected capacity change from 0 to 256
[  434.849804][ T6184] syz-executor: attempt to access beyond end of device
[  434.849804][ T6184] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  434.894823][ T6184] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  435.447470][ T9190] xt_CT: No such helper "syz1"
[  435.755238][ T9196] loop0: detected capacity change from 0 to 512
[  435.838876][ T9197] netlink: 'syz.1.835': attribute type 13 has an invalid length.
[  435.875712][ T9196] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  435.924684][ T9196] EXT4-fs (loop0): blocks per group (3008) and clusters per group (32768) inconsistent
[  437.304620][ T9203] xt_bpf: check failed: parse error
[  437.324334][ T9204] loop3: detected capacity change from 0 to 512
[  437.369796][ T9208] loop0: detected capacity change from 0 to 512
[  437.394158][ T9208] EXT4-fs: Ignoring removed bh option
[  437.416638][ T9208] EXT4-fs: Ignoring removed i_version option
[  437.443217][ T9208] ext4: Unknown parameter 'smackfsdef'
[  437.496731][ T9204] EXT4-fs: Ignoring removed mblk_io_submit option
[  437.527667][ T9204] ext3: Unknown parameter 'obj_user'
[  437.953754][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'.
[  439.029113][  T116] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  439.200152][  T116] usb 1-1: Using ep0 maxpacket: 16
[  439.213739][  T116] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  439.228844][  T116] usb 1-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config
[  439.261417][  T116] usb 1-1: config 0 has no interface number 0
[  439.283787][  T116] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  439.337363][  T116] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  439.357121][  T116] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  439.401149][  T116] usb 1-1: Product: syz
[  439.415900][  T116] usb 1-1: SerialNumber: syz
[  439.435771][  T116] usb 1-1: config 0 descriptor??
[  440.217842][ T9219] loop0: detected capacity change from 0 to 1024
[  440.249819][ T9219] EXT4-fs: Ignoring removed nobh option
[  440.390467][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  440.396912][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  440.505120][ T9219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.069150][   T29] audit: type=1800 audit(1727533568.297:112): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.846" name="bus" dev="loop0" ino=18 res=0 errno=0
[  441.974551][ T9240] loop1: detected capacity change from 0 to 256
[  443.070691][ T9245] xt_CT: No such helper "syz1"
[  443.106738][  T116] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  443.123207][  T116] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -2
[  443.136972][  T116] usb 1-1: USB disconnect, device number 12
[  443.283486][ T5358] udevd[5358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  443.494257][ T6184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.525896][ T9254] loop1: detected capacity change from 0 to 256
[  443.585807][ T9254] vfat: Unknown parameter '00000000000000000000��'
[  443.639111][ T5344] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  443.866189][ T9260] xt_bpf: check failed: parse error
[  443.965572][ T5344] usb 5-1: Using ep0 maxpacket: 16
[  444.175180][ T5344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  444.327703][ T5344] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  444.337613][ T5344] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  444.347519][ T5344] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  444.357435][ T5344] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  444.368475][ T5344] usb 5-1: config 1 interface 0 has no altsetting 0
[  444.376093][ T5344] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  444.385626][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.413660][ T9268] loop0: detected capacity change from 0 to 512
[  444.418003][ T5344] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  444.421983][ T9268] EXT4-fs: Ignoring removed mblk_io_submit option
[  444.429986][ T9267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'.
[  444.447189][ T9268] ext3: Unknown parameter 'obj_user'
[  444.458163][ T9267] tipc: Started in network mode
[  444.502055][ T9267] tipc: Node identity 8cb94f01, cluster identity 4711
[  444.748744][ T9267] tipc: Node number set to 2360954625
[  444.771779][ T5344] scsi host1: usb-storage 5-1:1.0
[  445.365156][ T5344] usb 5-1: USB disconnect, device number 12
[  445.548061][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'.
[  445.559353][ T9275] netlink: 84 bytes leftover after parsing attributes in process `syz.0.858'.
[  447.297291][ T9291] loop1: detected capacity change from 0 to 256
[  447.538379][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  447.578323][ T9295] syz.2.865: attempt to access beyond end of device
[  447.578323][ T9295] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[  447.591663][ T9295] FAT-fs (loop2): unable to read boot sector
[  447.702144][ T9291] FAT-fs (loop1): Directory bread(block 64) failed
[  447.713897][ T9291] FAT-fs (loop1): Directory bread(block 65) failed
[  447.726586][ T9291] FAT-fs (loop1): Directory bread(block 66) failed
[  447.772096][ T9291] FAT-fs (loop1): Directory bread(block 67) failed
[  447.798695][ T9291] FAT-fs (loop1): Directory bread(block 68) failed
[  448.214814][ T9300] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  448.282920][ T9291] FAT-fs (loop1): Directory bread(block 69) failed
[  448.398902][ T9299] veth0_vlan: entered allmulticast mode
[  448.570364][ T9291] FAT-fs (loop1): Directory bread(block 70) failed
[  448.576967][ T9291] FAT-fs (loop1): Directory bread(block 71) failed
[  448.854170][ T9291] FAT-fs (loop1): Directory bread(block 72) failed
[  448.863846][ T9291] FAT-fs (loop1): Directory bread(block 73) failed
[  450.132629][ T9314] loop4: detected capacity change from 0 to 256
[  450.416095][ T9317] xt_bpf: check failed: parse error
[  451.405308][ T5344] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  451.730515][ T9323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.872'.
[  451.859329][ T5344] usb 3-1: Using ep0 maxpacket: 16
[  451.925571][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  451.961591][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  452.313815][ T5344] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  452.917705][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.925863][ T5344] usb 3-1: Product: syz
[  452.930106][ T5344] usb 3-1: Manufacturer: syz
[  452.934810][ T5344] usb 3-1: SerialNumber: syz
[  452.942484][ T5344] usb 3-1: config 0 descriptor??
[  452.954070][ T5344] hub 3-1:0.0: bad descriptor, ignoring hub
[  452.960198][ T5344] hub 3-1:0.0: probe with driver hub failed with error -5
[  452.970129][ T5344] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  454.573313][ T5344] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12
[  454.600104][ T5344] usb 3-1: USB disconnect, device number 13
[  454.885585][ T5289] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  455.835615][ T5242] udevd[5242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  455.886435][ T9350] loop0: detected capacity change from 0 to 512
[  455.930109][ T9350] EXT4-fs (loop0): Test dummy encryption mode enabled
[  455.979641][ T9350] EXT4-fs error (device loop0): __ext4_iget:4952: inode #11: block 1: comm syz.0.880: invalid block
[  456.028100][ T9350] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.880: couldn't read orphan inode 11 (err -117)
[  456.040501][ T5289] usb 4-1: Using ep0 maxpacket: 16
[  456.057334][ T9350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.086030][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.115044][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.127977][ T5289] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  456.145877][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.171564][ T9350] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.880: Directory hole found for htree leaf block 0
[  456.190229][ T5289] usb 4-1: config 0 descriptor??
[  457.227599][ T9364] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.880: Directory hole found for htree leaf block 0
[  457.689148][ T6184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.712840][ T9368] xt_bpf: check failed: parse error
[  457.819710][ T5289] usbhid 4-1:0.0: can't add hid device: -71
[  457.835164][ T5289] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  457.946453][ T5289] usb 4-1: USB disconnect, device number 10
[  459.403475][ T9359] loop1: detected capacity change from 0 to 40427
[  462.717031][ T9409] loop2: detected capacity change from 0 to 128
[  463.028835][ T9413] loop4: detected capacity change from 0 to 1024
[  463.131512][ T9413] journal_path: Lookup failure for './file0'
[  463.163644][ T9413] EXT4-fs: error: could not find journal device path
[  463.941787][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.900'.
[  463.950786][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.900'.
[  465.553667][ T9434] xt_bpf: check failed: parse error
[  465.801989][ T9432] loop3: detected capacity change from 0 to 40427
[  465.859867][ T9432] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  465.867658][ T9432] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  465.938674][ T9432] F2FS-fs (loop3): Found nat_bits in checkpoint
[  466.067139][ T9432] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  466.083555][ T9432] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  467.203384][ T9449] syzkaller0: entered promiscuous mode
[  467.222864][ T9449] syzkaller0: entered allmulticast mode
[  467.247839][ T9450] syz.2.906[9450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  467.247937][ T9450] syz.2.906[9450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  467.353508][ T9436] loop1: detected capacity change from 0 to 40427
[  467.385938][ T9450] syz.2.906[9450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  467.411645][ T9436] F2FS-fs (loop1): invalid crc value
[  467.437389][ T9436] F2FS-fs (loop1): Found nat_bits in checkpoint
[  467.552631][ T9436] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  468.412310][ T9461] loop0: detected capacity change from 0 to 2048
[  468.475255][ T9461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.518039][ T9461] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.689280][ T6184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.092295][ T9471] loop0: detected capacity change from 0 to 128
[  470.249809][ T9471] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  470.285550][ T9471] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  470.318797][ T6919] syz-executor: attempt to access beyond end of device
[  470.318797][ T6919] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  470.341774][ T6919] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  470.429759][ T6184] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  470.455702][ T6184] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  470.476811][ T6184] EXT4-fs error (device loop0): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  470.502150][ T6184] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  470.523138][ T6184] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  470.544131][ T6184] EXT4-fs error (device loop0): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  470.708112][ T6184] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  470.741625][ T9474] loop3: detected capacity change from 0 to 40427
[  470.755307][ T6184] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  470.772346][ T9474] F2FS-fs (loop3): invalid crc value
[  470.794773][ T9474] F2FS-fs (loop3): Found nat_bits in checkpoint
[  470.838815][ T6184] EXT4-fs error (device loop0): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  470.875472][ T6184] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  470.883844][ T9474] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  471.926665][ T5231] syz-executor: attempt to access beyond end of device
[  471.926665][ T5231] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  471.941704][ T5231] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  472.415937][ T9484] loop3: detected capacity change from 0 to 2048
[  472.493928][ T9484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.481034][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.672761][ T9494] loop3: detected capacity change from 0 to 256
[  473.710036][ T9494] FAT-fs (loop3): Directory bread(block 64) failed
[  473.729922][ T9494] FAT-fs (loop3): Directory bread(block 65) failed
[  473.738267][ T9494] FAT-fs (loop3): Directory bread(block 66) failed
[  473.751664][ T9494] FAT-fs (loop3): Directory bread(block 67) failed
[  473.763770][ T9494] FAT-fs (loop3): Directory bread(block 68) failed
[  473.777542][ T9494] FAT-fs (loop3): Directory bread(block 69) failed
[  473.787042][ T9494] FAT-fs (loop3): Directory bread(block 70) failed
[  473.794748][ T9494] FAT-fs (loop3): Directory bread(block 71) failed
[  473.801772][ T9494] FAT-fs (loop3): Directory bread(block 72) failed
[  473.808663][ T9494] FAT-fs (loop3): Directory bread(block 73) failed
[  475.458140][ T9502] loop4: detected capacity change from 0 to 16
[  475.502455][ T9502] erofs: (device loop4): mounted with root inode @ nid 36.
[  475.506678][ T9504] loop2: detected capacity change from 0 to 16
[  475.552191][ T9504] erofs: (device loop2): mounted with root inode @ nid 36.
[  475.616427][ T6184] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  476.045375][   T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.115714][ T9511] overlay: filesystem on ./file0 is read-only
[  477.089621][ T9519] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  477.102187][ T9519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  477.111485][ T9519] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  477.125526][   T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.168716][ T9519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  477.251092][ T9519] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  477.259612][ T9519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  478.493617][   T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.770256][ T9534] xt_bpf: check failed: parse error
[  478.780670][ T9535] overlay: filesystem on ./file0 is read-only
[  478.814924][   T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.411340][ T5253] Bluetooth: hci4: command tx timeout
[  479.746262][ T9518] chnl_net:caif_netlink_parms(): no params data found
[  480.707007][   T61] bridge_slave_1: left allmulticast mode
[  480.725310][   T61] bridge_slave_1: left promiscuous mode
[  480.741614][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.825067][   T61] bridge_slave_0: left allmulticast mode
[  480.860482][   T61] bridge_slave_0: left promiscuous mode
[  480.878659][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.461752][ T5253] Bluetooth: hci4: command tx timeout
[  482.088156][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  482.129414][ T9541] loop3: detected capacity change from 0 to 40427
[  482.159445][ T9552] loop1: detected capacity change from 0 to 32768
[  482.166720][ T9552] btrfs: Deprecated parameter 'usebackuproot'
[  482.173741][ T9552] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  482.184323][ T9552] btrfs: Unknown parameter 'permit_directio'
[  482.193715][ T9541] F2FS-fs (loop3): Found nat_bits in checkpoint
[  482.269728][    T9] usb 5-1: Using ep0 maxpacket: 16
[  482.286049][    T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  482.299227][ T9541] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  482.314334][    T9] usb 5-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config
[  482.370316][    T9] usb 5-1: config 0 has no interface number 0
[  482.379830][    T9] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  482.420472][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  482.430665][    T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  482.461207][    T9] usb 5-1: Product: syz
[  482.469150][    T9] usb 5-1: SerialNumber: syz
[  482.492457][    T9] usb 5-1: config 0 descriptor??
[  483.102169][ T9567] loop4: detected capacity change from 0 to 1024
[  483.152095][ T9567] EXT4-fs: Ignoring removed nobh option
[  483.346797][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  483.393348][ T9552] loop1: detected capacity change from 0 to 32768
[  483.400851][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  483.425502][ T9567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.454317][   T61] bond0 (unregistering): Released all slaves
[  483.501880][ T9576] syz.3.926: attempt to access beyond end of device
[  483.501880][ T9576] loop3: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[  483.531901][ T5253] Bluetooth: hci4: command tx timeout
[  483.706922][ T9552] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  483.952559][   T29] audit: type=1800 audit(2000000032.629:113): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.932" name="bus" dev="loop4" ino=18 res=0 errno=0
[  484.537683][ T9576] syz.3.926: attempt to access beyond end of device
[  484.537683][ T9576] loop3: rw=2049, sector=49152, nr_sectors = 2896 limit=40427
[  484.641083][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.648628][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.661798][ T9518] bridge_slave_0: entered allmulticast mode
[  484.675111][ T5231] syz-executor: attempt to access beyond end of device
[  484.675111][ T5231] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  484.681578][ T9518] bridge_slave_0: entered promiscuous mode
[  484.695611][ T5231] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  484.707659][ T5231] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  484.804224][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.839663][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.846399][ T6919] ocfs2: Unmounting device (7,1) on (node local)
[  484.857078][ T9518] bridge_slave_1: entered allmulticast mode
[  484.870238][ T9518] bridge_slave_1: entered promiscuous mode
[  485.110377][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.160828][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.248779][   T61] hsr_slave_0: left promiscuous mode
[  485.266068][   T61] hsr_slave_1: left promiscuous mode
[  485.286858][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  485.319398][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  485.392190][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.438189][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.482589][   T61] veth1_macvtap: left promiscuous mode
[  485.498842][   T61] veth0_macvtap: left promiscuous mode
[  485.518913][   T61] veth1_vlan: left promiscuous mode
[  485.599169][ T5286] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  485.629061][ T5253] Bluetooth: hci4: command tx timeout
[  485.641584][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  485.699828][ T7988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.729439][ T9604] loop3: detected capacity change from 0 to 16
[  485.766220][ T9593] loop2: detected capacity change from 0 to 40427
[  485.798526][    T9] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -2
[  485.811233][ T9604] erofs: (device loop3): mounted with root inode @ nid 36.
[  485.820084][ T9593] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  485.827780][ T9593] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  485.834718][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.869094][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  485.875089][    T9] usb 5-1: USB disconnect, device number 13
[  485.949472][ T5286] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  485.968141][ T9593] F2FS-fs (loop2): invalid crc value
[  485.980557][ T5358] udevd[5358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  485.996725][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.183320][ T9593] F2FS-fs (loop2): Found nat_bits in checkpoint
[  486.244557][ T9613] xt_bpf: check failed: parse error
[  486.365180][ T5286] usb 2-1: config 0 descriptor??
[  486.487722][ T9593] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  486.498443][ T9593] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  486.660762][ T9623] overlay: filesystem on ./file0 is read-only
[  487.018621][ T5286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  487.030112][ T5286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  487.038369][ T5286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  487.068741][ T5286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  487.095045][ T5286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  487.101075][ T5237] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  487.109340][ T5286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  487.117881][ T5286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  487.136106][ T5286] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  487.211582][ T5286] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  487.279298][ T5237] usb 3-1: Using ep0 maxpacket: 8
[  487.290155][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.334208][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.347615][ T5286] usb 2-1: USB disconnect, device number 15
[  487.356774][ T5237] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  487.379351][ T5237] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  487.458818][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.498751][ T5237] usb 3-1: config 0 descriptor??
[  487.658039][   T61] team0 (unregistering): Port device team_slave_1 removed
[  487.851551][   T61] team0 (unregistering): Port device team_slave_0 removed
[  487.938375][ T5237] pyra 0003:1E7D:2C24.000F: unknown main item tag 0x0
[  487.951148][ T5237] pyra 0003:1E7D:2C24.000F: unknown main item tag 0x0
[  487.963662][ T5237] pyra 0003:1E7D:2C24.000F: unknown main item tag 0x0
[  487.975114][ T5237] pyra 0003:1E7D:2C24.000F: unknown main item tag 0x0
[  487.986877][ T5237] pyra 0003:1E7D:2C24.000F: unknown main item tag 0x0
[  487.998278][ T5237] pyra 0003:1E7D:2C24.000F: unknown main item tag 0x0
[  488.013553][ T5237] pyra 0003:1E7D:2C24.000F: unknown main item tag 0x0
[  488.024901][ T5237] pyra 0003:1E7D:2C24.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.2-1/input0
[  488.170008][ T9624] futex_wake_op: syz.2.935 tries to shift op by -1; fix this program
[  488.548448][ T9629] loop3: detected capacity change from 0 to 40427
[  488.588722][ T9629] F2FS-fs (loop3): invalid crc value
[  488.615832][ T9629] F2FS-fs (loop3): Found nat_bits in checkpoint
[  488.697562][ T9629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  489.279074][    T9] usb 3-1: USB disconnect, device number 14
[  489.366319][ T9518] team0: Port device team_slave_0 added
[  489.500782][ T9518] team0: Port device team_slave_1 added
[  489.540937][ T5231] syz-executor: attempt to access beyond end of device
[  489.540937][ T5231] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  489.608676][ T6396] syz-executor: attempt to access beyond end of device
[  489.608676][ T6396] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  489.629435][ T5231] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  489.685238][ T6396] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  489.841125][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.848122][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.938653][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.011055][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.059568][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.089221][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  490.110071][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.410245][    T9] usb 2-1: Using ep0 maxpacket: 32
[  490.444409][    T9] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  490.456869][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.485478][    T9] usb 2-1: Product: syz
[  490.501588][    T9] usb 2-1: Manufacturer: syz
[  490.524283][    T9] usb 2-1: SerialNumber: syz
[  490.526972][ T9655] loop3: detected capacity change from 0 to 256
[  490.549363][ T9518] hsr_slave_0: entered promiscuous mode
[  490.585464][    T9] usb 2-1: config 0 descriptor??
[  490.604001][ T9518] hsr_slave_1: entered promiscuous mode
[  490.623705][ T9518] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  490.639468][ T9518] Cannot create hsr debugfs directory
[  490.784818][ T9655] FAT-fs (loop3): Directory bread(block 64) failed
[  490.800860][ T9655] FAT-fs (loop3): Directory bread(block 65) failed
[  490.807652][ T9655] FAT-fs (loop3): Directory bread(block 66) failed
[  490.845312][ T9655] FAT-fs (loop3): Directory bread(block 67) failed
[  490.879267][ T9655] FAT-fs (loop3): Directory bread(block 68) failed
[  490.886078][ T9655] FAT-fs (loop3): Directory bread(block 69) failed
[  490.911844][ T9655] FAT-fs (loop3): Directory bread(block 70) failed
[  490.922122][ T9655] FAT-fs (loop3): Directory bread(block 71) failed
[  490.952903][ T9655] FAT-fs (loop3): Directory bread(block 72) failed
[  490.967861][ T9655] FAT-fs (loop3): Directory bread(block 73) failed
[  491.104883][ T9662] binder_alloc: 9661: binder_alloc_buf size -624 failed, no address space
[  491.114480][ T9662] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176)
[  491.213219][ T9667] loop3: detected capacity change from 0 to 512
[  491.225222][    T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3e:bb:f2:b3:c4:c1
[  491.268009][ T9667] EXT4-fs (loop3): Test dummy encryption mode enabled
[  491.314810][    T9] rtl8150 2-1:0.0: eth3: rtl8150 is detected
[  491.396118][ T9667] EXT4-fs error (device loop3): __ext4_iget:4952: inode #11: block 1: comm syz.3.946: invalid block
[  491.429156][    T9] usb 2-1: USB disconnect, device number 16
[  491.439100][ T9667] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.946: couldn't read orphan inode 11 (err -117)
[  491.593625][ T9667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.862928][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.009888][ T9683] xt_bpf: check failed: parse error
[  493.572581][ T9684] loop1: detected capacity change from 0 to 256
[  493.611462][ T9684] vfat: Bad value for 'fmask'
[  493.661699][   T29] audit: type=1326 audit(2000000042.379:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  493.757142][   T29] audit: type=1326 audit(2000000042.379:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  493.831984][ T9518] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  493.872962][   T29] audit: type=1326 audit(2000000042.379:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  493.879311][ T9693] loop3: detected capacity change from 0 to 512
[  493.931209][ T9518] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  493.983468][ T9518] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  494.001470][   T29] audit: type=1326 audit(2000000042.379:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  494.040767][ T9518] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  494.060069][ T9693] EXT4-fs (loop3): blocks per group (8192) and clusters per group (2304) inconsistent
[  494.074997][ T9699] loop1: detected capacity change from 0 to 1024
[  494.130006][ T9699] EXT4-fs: Ignoring removed mblk_io_submit option
[  494.134713][   T29] audit: type=1326 audit(2000000042.379:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3837dff9 code=0x7ffc0000
[  494.168447][ T9699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  494.182312][ T9700] xt_bpf: check failed: parse error
[  494.200008][ T9699] EXT4-fs (loop1): Test dummy encryption mode enabled
[  494.212399][ T9693] loop3: detected capacity change from 0 to 512
[  494.241085][ T9693] ext4: Bad value for 'max_batch_time'
[  494.266685][ T9699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.634577][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.712795][ T9518] 8021q: adding VLAN 0 to HW filter on device team0
[  494.947054][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.954253][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.391468][ T9518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  495.402088][ T9518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  495.518019][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.525404][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  495.529172][   T29] audit: type=1326 audit(2000000044.189:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a8d7dff9 code=0x7ffc0000
[  495.580101][ T6919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.616359][   T29] audit: type=1326 audit(2000000044.189:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a8d7dff9 code=0x7ffc0000
[  495.749081][   T29] audit: type=1326 audit(2000000044.189:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f65a8d7dff9 code=0x7ffc0000
[  495.840198][   T29] audit: type=1326 audit(2000000044.189:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a8d7dff9 code=0x7ffc0000
[  495.933756][   T29] audit: type=1326 audit(2000000044.189:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a8d7dff9 code=0x7ffc0000
[  496.033626][ T9518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.049412][ T5289] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  496.153531][ T9518] veth0_vlan: entered promiscuous mode
[  496.174825][ T9518] veth1_vlan: entered promiscuous mode
[  496.224520][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  496.259158][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  496.275592][ T9518] veth0_macvtap: entered promiscuous mode
[  496.306403][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  496.332323][ T9518] veth1_macvtap: entered promiscuous mode
[  496.362120][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.373097][ T5289] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  496.404242][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.418571][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.447584][ T5289] usb 2-1: config 0 descriptor??
[  496.453081][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.475788][ T9723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  496.488424][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.510959][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.530394][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.546809][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  496.570450][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.590830][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  496.653767][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.681720][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.706017][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.725600][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.759906][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.788015][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.819502][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.846543][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.868408][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.903890][ T5289] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd
[  496.929285][ T9751] loop3: detected capacity change from 0 to 256
[  496.937869][ T5289] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  496.948184][ T9518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.973257][ T9518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.986962][ T5289] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  497.008230][ T9518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.027934][ T9751] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  497.034504][ T9518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.205472][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.224424][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.317543][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.348818][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.487661][ T9763] loop3: detected capacity change from 0 to 2048
[  497.580268][ T9763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.617158][ T9768] loop0: detected capacity change from 0 to 512
[  497.672081][ T9768] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  497.684459][ T9763] ext4: Unknown parameter 'grpjq'
[  497.716116][ T9768] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent
[  497.738239][ T5288] usb 2-1: USB disconnect, device number 17
[  497.817628][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.869879][ T9798] loop2: detected capacity change from 0 to 40427
[  499.930544][ T9798] F2FS-fs (loop2): invalid crc value
[  499.953267][ T9798] F2FS-fs (loop2): Found nat_bits in checkpoint
[  500.036921][ T9798] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  500.316731][ T9813] overlayfs: failed to resolve './file0': -2
[  500.582427][ T6396] syz-executor: attempt to access beyond end of device
[  500.582427][ T6396] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  500.669112][ T6396] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  501.597263][ T9826] loop3: detected capacity change from 0 to 512
[  501.799853][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  501.806405][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  501.879824][ T9826] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.972: invalid indirect mapped block 256 (level 2)
[  501.961985][ T9826] EXT4-fs (loop3): 2 truncates cleaned up
[  501.969365][ T9826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.179108][ T9843] loop0: detected capacity change from 0 to 256
[  502.214136][ T9810] loop4: detected capacity change from 0 to 40427
[  503.214558][ T9810] F2FS-fs (loop4): invalid crc value
[  503.335682][ T9846] xt_CT: No such helper "syz1"
[  503.389607][ T9810] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4)
[  503.732908][ T9854] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  503.742673][ T9854] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  504.243115][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.368490][   T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  504.735364][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  504.877139][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  505.101162][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  505.352498][   T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  505.429076][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.530138][   T25] usb 2-1: config 0 descriptor??
[  505.559637][ T9856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  505.819188][ T5237] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  505.827001][ T5289] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  505.863464][ T9859] loop0: detected capacity change from 0 to 40427
[  505.908169][ T9859] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  505.924587][ T9859] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  505.982702][ T5237] usb 5-1: Using ep0 maxpacket: 8
[  505.991039][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  505.997183][ T9859] F2FS-fs (loop0): Found nat_bits in checkpoint
[  506.014415][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.044118][ T5289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  506.064795][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  506.079682][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  506.089522][ T5237] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  506.098590][ T5237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.106725][ T5289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  506.145515][ T5237] usb 5-1: config 0 descriptor??
[  506.154324][   T25] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd
[  506.244012][ T5289] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  506.253005][   T25] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  506.254664][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.275508][ T9859] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  506.296005][ T5289] usb 4-1: Product: syz
[  506.298606][   T25] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  506.303448][ T5289] usb 4-1: Manufacturer: syz
[  506.329834][ T9859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  506.372781][ T5289] usb 4-1: SerialNumber: syz
[  506.398493][ T5289] usb 4-1: config 0 descriptor??
[  506.427572][ T5289] ums-isd200 4-1:0.0: USB Mass Storage device detected
[  506.578573][ T5237] elecom 0003:056E:010C.0012: hidraw1: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.4-1/input0
[  506.666571][ T5289] scsi host1: usb-storage 4-1:0.0
[  506.678787][ T5289] usb 4-1: USB disconnect, device number 11
[  507.338550][    T9] usb 5-1: USB disconnect, device number 14
[  507.810614][ T9915] loop3: detected capacity change from 0 to 512
[  507.845209][ T9915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.860326][ T9915] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  508.798902][ T9928] 9p: Unknown access argument 18446744073709551615: -34
[  509.036784][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.070907][ T5288] usb 2-1: reset high-speed USB device number 18 using dummy_hcd
[  510.069016][   T25] usb 2-1: USB disconnect, device number 18
[  510.508772][ T9951] loop0: detected capacity change from 0 to 256
[  510.556569][ T9931] loop2: detected capacity change from 0 to 40427
[  510.582231][ T9931] F2FS-fs (loop2): invalid crc value
[  510.689800][ T9931] F2FS-fs (loop2): Found nat_bits in checkpoint
[  510.719494][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'.
[  510.932526][ T9931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  512.262628][ T9966] loop4: detected capacity change from 0 to 256
[  512.341119][ T6396] syz-executor: attempt to access beyond end of device
[  512.341119][ T6396] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  512.402613][ T9972] xt_CT: No such helper "syz1"
[  512.416199][ T6396] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  512.440892][ T9966] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  512.507244][ T9979] loop3: detected capacity change from 0 to 512
[  512.610614][ T9979] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1002: invalid indirect mapped block 256 (level 2)
[  512.660880][ T9979] EXT4-fs (loop3): 2 truncates cleaned up
[  512.677825][ T9979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.485699][ T9986] loop1: detected capacity change from 0 to 128
[  513.557402][ T9986] vfat: Unknown parameter 'sched_switch'
[  514.533956][ T9996] 9p: Unknown access argument 18446744073709551615: -34
[  514.726923][ T9998] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  514.736933][ T9998] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  516.034918][T10011] loop0: detected capacity change from 0 to 4096
[  516.322458][T10011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.569049][ T9981] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  517.712252][ T9518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.846724][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  517.974918][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.033408][    T9] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  518.056306][    T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  518.083889][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.456738][T10028] loop4: detected capacity change from 0 to 2048
[  518.489069][T10026] xt_bpf: check failed: parse error
[  518.513346][    T9] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1
[  518.636688][T10028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.708482][T10038] loop3: detected capacity change from 0 to 128
[  518.725760][T10038] EXT4-fs (loop3): Test dummy encryption mode enabled
[  518.734014][ T5237] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  518.748218][ T5289] usb 3-1: USB disconnect, device number 15
[  518.767248][T10038] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  518.786173][T10038] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  519.020563][ T7988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.049588][ T5237] usb 2-1: Using ep0 maxpacket: 16
[  519.063060][ T5237] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  519.073345][ T5237] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  519.090199][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  519.098777][T10041] overlayfs: failed to resolve './file0': -2
[  519.112333][ T5237] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  519.126358][ T5237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.135557][ T5237] usb 2-1: Product: syz
[  519.140776][ T5237] usb 2-1: Manufacturer: syz
[  519.145410][ T5237] usb 2-1: SerialNumber: syz
[  519.183904][T10043] veth0_vlan: left promiscuous mode
[  519.189460][T10043] veth0_vlan: entered promiscuous mode
[  519.195126][T10043] veth0_vlan: left allmulticast mode
[  519.256037][    T9] usb 1-1: Using ep0 maxpacket: 8
[  519.265624][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.277839][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.289813][    T9] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  519.299762][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.312197][    T9] usb 1-1: config 0 descriptor??
[  519.821207][ T5231] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  521.046243][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  521.071750][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  521.332176][T10055] binfmt_misc: register: failed to install interpreter file ./file0
[  521.569092][    T9] usb 1-1: USB disconnect, device number 13
[  522.971566][T10067] loop0: detected capacity change from 0 to 1024
[  522.979180][T10067] EXT4-fs: Ignoring removed mblk_io_submit option
[  523.021607][T10067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  523.030258][T10067] EXT4-fs (loop0): Test dummy encryption mode enabled
[  523.063704][ T5237] usb 2-1: 0:2 : does not exist
[  523.080201][ T5237] usb 2-1: USB disconnect, device number 19
[  523.227740][T10067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.400681][ T5358] udevd[5358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  524.014060][T10087] loop3: detected capacity change from 0 to 256
[  524.024493][T10085] loop1: detected capacity change from 0 to 2048
[  524.070299][T10087] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  524.122017][ T9518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.134740][T10085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.614066][ T6919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.193030][T10101] tipc: Started in network mode
[  525.313398][T10101] tipc: Node identity 1, cluster identity 4711
[  525.435122][T10101] tipc: Node number set to 1
[  526.064557][T10107] veth0_vlan: entered allmulticast mode
[  526.109982][T10107] veth0_vlan: left promiscuous mode
[  526.115780][T10107] veth0_vlan: entered promiscuous mode
[  526.121751][T10107] veth0_vlan: left allmulticast mode
[  527.989998][T10129] binder: 10123:10129 ioctl 4018620d 0 returned -22
[  528.043193][T10129] sch_tbf: burst 53766 is lower than device lo mtu (65550) !
[  528.286492][T10135] loop4: detected capacity change from 0 to 256
[  528.379681][T10135] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  528.453937][T10137] loop2: detected capacity change from 0 to 2048
[  528.468185][T10139] loop1: detected capacity change from 0 to 128
[  528.533598][T10139] EXT4-fs (loop1): Test dummy encryption mode enabled
[  528.559509][T10137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  528.597097][T10139] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  528.645741][T10139] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  529.253054][ T6396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.596443][T10147] overlayfs: failed to resolve './file0': -2
[  529.855870][T10150] veth0_vlan: entered allmulticast mode
[  529.891347][ T6919] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  532.695229][ T5237] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  532.862081][ T5237] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  532.878365][ T5237] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  532.905192][ T5237] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  532.915135][ T5237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.960894][T10170] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  533.410947][ T5237] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  533.496856][ T5237] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input12
[  533.631805][ T5237] usb 2-1: USB disconnect, device number 20
[  533.637806][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  536.151983][T10154] veth0_vlan: left promiscuous mode
[  536.157394][T10154] veth0_vlan: entered promiscuous mode
[  536.163335][T10154] veth0_vlan: left allmulticast mode
[  536.444706][T10187] loop2: detected capacity change from 0 to 256
[  536.494512][T10187] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  536.535613][T10191] loop4: detected capacity change from 0 to 512
[  536.578045][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1058'.
[  536.683295][T10191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.707771][T10191] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.967313][ T7988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.993956][T10185] loop3: detected capacity change from 0 to 40427
[  539.004363][T10185] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  539.016275][T10185] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  539.063543][T10185] F2FS-fs (loop3): invalid crc value
[  539.077446][T10185] F2FS-fs (loop3): Found nat_bits in checkpoint
[  539.162805][T10185] F2FS-fs (loop3): Start checkpoint disabled!
[  539.184339][T10185] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  539.198355][T10185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  539.441918][   T29] audit: type=1800 audit(2000000087.959:124): pid=10185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1055" name="bus" dev="loop3" ino=10 res=0 errno=0
[  539.487787][T10185] syz.3.1055: attempt to access beyond end of device
[  539.487787][T10185] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  539.502845][T10185] syz.3.1055: attempt to access beyond end of device
[  539.502845][T10185] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427
[  539.517600][T10185] syz.3.1055: attempt to access beyond end of device
[  539.517600][T10185] loop3: rw=2049, sector=53264, nr_sectors = 8 limit=40427
[  539.532291][T10185] syz.3.1055: attempt to access beyond end of device
[  539.532291][T10185] loop3: rw=2049, sector=53272, nr_sectors = 8 limit=40427
[  539.546525][T10185] syz.3.1055: attempt to access beyond end of device
[  539.546525][T10185] loop3: rw=2049, sector=53280, nr_sectors = 8 limit=40427
[  539.560917][T10185] syz.3.1055: attempt to access beyond end of device
[  539.560917][T10185] loop3: rw=2049, sector=53288, nr_sectors = 8 limit=40427
[  539.575159][T10185] syz.3.1055: attempt to access beyond end of device
[  539.575159][T10185] loop3: rw=2049, sector=53296, nr_sectors = 8 limit=40427
[  539.589394][T10185] syz.3.1055: attempt to access beyond end of device
[  539.589394][T10185] loop3: rw=2049, sector=53304, nr_sectors = 8 limit=40427
[  539.604378][T10185] syz.3.1055: attempt to access beyond end of device
[  539.604378][T10185] loop3: rw=2049, sector=53312, nr_sectors = 8 limit=40427
[  539.618559][T10185] syz.3.1055: attempt to access beyond end of device
[  539.618559][T10185] loop3: rw=2049, sector=53320, nr_sectors = 8 limit=40427
[  539.873675][ T2948] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  539.905241][ T2948] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  539.939509][ T2948] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  539.972248][ T2948] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  540.114379][T10212] loop2: detected capacity change from 0 to 40427
[  540.126956][T10212] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  540.155544][T10212] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  540.210343][T10212] F2FS-fs (loop2): invalid crc value
[  540.243057][T10212] F2FS-fs (loop2): Found nat_bits in checkpoint
[  540.360834][T10212] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  540.369080][T10212] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  540.416502][T10234] loop3: detected capacity change from 0 to 512
[  540.436853][T10234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  540.487248][T10234] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1066: Unimplemented hash flags: 0x0001
[  540.522675][T10234] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1066: Corrupt directory, running e2fsck is recommended
[  540.601646][T10234] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1066: Unimplemented hash flags: 0x0001
[  540.642096][T10234] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1066: Corrupt directory, running e2fsck is recommended
[  540.732610][T10237] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1066: Unimplemented hash flags: 0x0001
[  540.779605][T10237] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1066: Corrupt directory, running e2fsck is recommended
[  540.809670][T10234] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1066: Unimplemented hash flags: 0x0001
[  540.832523][T10234] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1066: Corrupt directory, running e2fsck is recommended
[  540.889531][T10237] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1066: Unimplemented hash flags: 0x0001
[  540.998593][T10242] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1066: Unimplemented hash flags: 0x0001
[  541.900928][T10247] loop1: detected capacity change from 0 to 256
[  542.009730][T10253] loop0: detected capacity change from 0 to 256
[  542.021069][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.126188][T10253] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  542.790206][T10247] xt_CT: No such helper "syz1"
[  542.855276][T10266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1071'.
[  543.534814][ T2948] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  543.547784][ T2948] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  544.695350][T10286] loop4: detected capacity change from 0 to 512
[  544.855547][T10286] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1081: invalid indirect mapped block 256 (level 2)
[  544.894890][T10286] EXT4-fs (loop4): 2 truncates cleaned up
[  545.424330][T10286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  545.599140][T10290] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  546.065200][T10302] loop2: detected capacity change from 0 to 2048
[  546.516506][T10302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  546.609204][T10302] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  546.660470][T10310] loop0: detected capacity change from 0 to 256
[  547.068407][T10286] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  547.079077][T10286] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  547.240462][T10302] syz.2.1085 (10302) used greatest stack depth: 18328 bytes left
[  547.270519][T10320] xt_CT: No such helper "syz1"
[  547.338473][ T6396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.132562][ T7988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.325027][T10331] binfmt_misc: register: failed to install interpreter file ./file0
[  548.397145][T10332] xt_bpf: check failed: parse error
[  549.675510][T10345] loop3: detected capacity change from 0 to 1024
[  549.698636][T10345] EXT4-fs: Ignoring removed mblk_io_submit option
[  549.710155][T10345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  549.773134][T10345] EXT4-fs (loop3): Test dummy encryption mode enabled
[  550.038485][T10345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.259991][T10360] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  550.382642][T10360] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  550.870204][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.125911][T10367] loop3: detected capacity change from 0 to 512
[  551.139869][T10367] journal_path: Lookup failure for './bus'
[  551.156287][T10367] EXT4-fs: error: could not find journal device path
[  551.697843][T10374] loop0: detected capacity change from 0 to 16
[  551.709920][T10374] erofs: Unknown parameter '������������������0x0000000000000058]����#[8����+K���W��䶓�?�҇�987'
[  552.163639][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'.
[  552.910209][T10386] xt_bpf: check failed: parse error
[  553.727915][T10399] loop3: detected capacity change from 0 to 256
[  554.877188][T10408] loop0: detected capacity change from 0 to 1024
[  554.890544][T10408] EXT4-fs: Ignoring removed mblk_io_submit option
[  554.940946][T10408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  554.984013][T10408] EXT4-fs (loop0): Test dummy encryption mode enabled
[  555.082103][T10408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  555.352465][   T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  555.509107][   T25] usb 5-1: Using ep0 maxpacket: 8
[  555.745573][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.819046][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.901729][   T25] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  555.975421][T10401] xt_CT: No such helper "syz1"
[  555.991182][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.031392][   T25] usb 5-1: config 0 descriptor??
[  556.052657][ T9518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.572685][   T25] elecom 0003:056E:010C.0013: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.4-1/input0
[  557.201167][   T25] usb 5-1: USB disconnect, device number 15
[  559.235797][T10442] xt_bpf: check failed: parse error
[  559.436538][T10444] loop4: detected capacity change from 0 to 256
[  559.480768][T10446] loop1: detected capacity change from 0 to 256
[  559.501849][T10446] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  559.534196][T10446] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  559.585956][T10446] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  559.598523][T10444] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  560.069390][   T29] audit: type=1804 audit(2000000108.699:125): pid=10450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1119" name="/newroot/108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=1048685 res=1 errno=0
[  561.821959][T10462] mmap: syz.3.1124 (10462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  561.848899][T10462] 
[  561.851261][T10462] ======================================================
[  561.858288][T10462] WARNING: possible circular locking dependency detected
[  561.865355][T10462] 6.11.0-next-20240927-syzkaller #0 Not tainted
[  561.871605][T10462] ------------------------------------------------------
[  561.879152][T10462] syz.3.1124/10462 is trying to acquire lock:
[  561.885225][T10462] ffff8880749f5128 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x439/0x1fb0
[  561.896168][T10462] 
[  561.896168][T10462] but task is already holding lock:
[  561.903720][T10462] ffff88807cdeea18 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50
[  561.913771][T10462] 
[  561.913771][T10462] which lock already depends on the new lock.
[  561.913771][T10462] 
[  561.924275][T10462] 
[  561.924275][T10462] the existing dependency chain (in reverse order) is:
[  561.933305][T10462] 
[  561.933305][T10462] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[  561.940900][T10462]        lock_acquire+0x1ed/0x550
[  561.945955][T10462]        down_read_killable+0xca/0xd30
[  561.951437][T10462]        mmap_read_lock_killable+0x1d/0x70
[  561.957280][T10462]        lock_mm_and_find_vma+0x29c/0x2f0
[  561.963053][T10462]        exc_page_fault+0x1bf/0x8c0
[  561.968368][T10462]        asm_exc_page_fault+0x26/0x30
[  561.973769][T10462]        fault_in_readable+0x165/0x2b0
[  561.979252][T10462]        fault_in_iov_iter_readable+0x229/0x280
[  561.985620][T10462]        generic_perform_write+0x259/0x6d0
[  561.991459][T10462]        shmem_file_write_iter+0xf9/0x120
[  561.997275][T10462]        vfs_write+0xa6d/0xc90
[  562.002057][T10462]        ksys_write+0x183/0x2b0
[  562.006951][T10462]        do_syscall_64+0xf3/0x230
[  562.012000][T10462]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.018454][T10462] 
[  562.018454][T10462] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}:
[  562.027544][T10462]        validate_chain+0x18ef/0x5920
[  562.032959][T10462]        __lock_acquire+0x1384/0x2050
[  562.038357][T10462]        lock_acquire+0x1ed/0x550
[  562.043414][T10462]        down_write+0x99/0x220
[  562.048206][T10462]        process_measurement+0x439/0x1fb0
[  562.053957][T10462]        ima_file_mmap+0x13d/0x2b0
[  562.059100][T10462]        security_mmap_file+0x7e7/0xa40
[  562.064676][T10462]        __se_sys_remap_file_pages+0x6e6/0xa50
[  562.070854][T10462]        do_syscall_64+0xf3/0x230
[  562.075907][T10462]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.082352][T10462] 
[  562.082352][T10462] other info that might help us debug this:
[  562.082352][T10462] 
[  562.092597][T10462]  Possible unsafe locking scenario:
[  562.092597][T10462] 
[  562.100076][T10462]        CPU0                    CPU1
[  562.105455][T10462]        ----                    ----
[  562.110834][T10462]   lock(&mm->mmap_lock);
[  562.115193][T10462]                                lock(&sb->s_type->i_mutex_key#12);
[  562.123209][T10462]                                lock(&mm->mmap_lock);
[  562.130349][T10462]   lock(&sb->s_type->i_mutex_key#12);
[  562.135847][T10462] 
[  562.135847][T10462]  *** DEADLOCK ***
[  562.135847][T10462] 
[  562.144008][T10462] 1 lock held by syz.3.1124/10462:
[  562.149140][T10462]  #0: ffff88807cdeea18 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50
[  562.159639][T10462] 
[  562.159639][T10462] stack backtrace:
[  562.165561][T10462] CPU: 0 UID: 0 PID: 10462 Comm: syz.3.1124 Not tainted 6.11.0-next-20240927-syzkaller #0
[  562.175494][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  562.185584][T10462] Call Trace:
[  562.188926][T10462]  <TASK>
[  562.191881][T10462]  dump_stack_lvl+0x241/0x360
[  562.196676][T10462]  ? __pfx_dump_stack_lvl+0x10/0x10
[  562.201985][T10462]  ? __pfx__printk+0x10/0x10
[  562.203399][T10460] loop2: detected capacity change from 0 to 40427
[  562.206582][T10462]  print_circular_bug+0x13a/0x1b0
[  562.218121][T10462]  check_noncircular+0x36a/0x4a0
[  562.223180][T10462]  ? __pfx_check_noncircular+0x10/0x10
[  562.227478][T10460] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  562.228670][T10462]  ? queued_spin_lock_slowpath+0x42/0x50
[  562.237695][T10460] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  562.242077][T10462]  ? lockdep_lock+0x1b0/0x2b0
[  562.242118][T10462]  validate_chain+0x18ef/0x5920
[  562.242143][T10462]  ? do_raw_spin_lock+0x14f/0x370
[  562.242167][T10462]  ? __pfx_validate_chain+0x10/0x10
[  562.242184][T10462]  ? mark_lock+0x9a/0x360
[  562.242203][T10462]  ? __lock_acquire+0x1384/0x2050
[  562.242223][T10462]  ? look_up_lock_class+0x77/0x170
[  562.254805][T10460] F2FS-fs (loop2): invalid crc value
[  562.255117][T10462]  ? register_lock_class+0x102/0x980
[  562.288553][T10460] F2FS-fs (loop2): Found nat_bits in checkpoint
[  562.290357][T10462]  ? __pfx_register_lock_class+0x10/0x10
[  562.290395][T10462]  ? mark_lock+0x9a/0x360
[  562.290411][T10462]  ? ima_match_policy+0x115/0x22f0
[  562.290438][T10462]  __lock_acquire+0x1384/0x2050
[  562.290463][T10462]  lock_acquire+0x1ed/0x550
[  562.290488][T10462]  ? process_measurement+0x439/0x1fb0
[  562.290514][T10462]  ? __pfx_lock_acquire+0x10/0x10
[  562.336994][T10462]  ? __pfx___might_resched+0x10/0x10
[  562.337370][T10460] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  562.342296][T10462]  ? ima_match_policy+0x115/0x22f0
[  562.342327][T10462]  ? __pfx_ima_match_policy+0x10/0x10
[  562.342348][T10462]  ? __schedule+0x189d/0x4b30
[  562.342368][T10462]  down_write+0x99/0x220
[  562.350538][T10460] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  562.354724][T10462]  ? process_measurement+0x439/0x1fb0
[  562.354756][T10462]  ? __pfx_down_write+0x10/0x10
[  562.386818][T10462]  ? ima_get_action+0x75/0xb0
[  562.391718][T10462]  process_measurement+0x439/0x1fb0
[  562.396951][T10462]  ? __pfx_process_measurement+0x10/0x10
[  562.402599][T10462]  ? __pfx_lock_acquire+0x10/0x10
[  562.407846][T10462]  ? aa_file_perm+0x137/0xf50
[  562.412727][T10462]  ? mtree_load+0x8a1/0x9c0
[  562.417334][T10462]  ? apparmor_current_getsecid_subj+0xde/0x1b0
[  562.423489][T10462]  ima_file_mmap+0x13d/0x2b0
[  562.428608][T10462]  ? __pfx_mtree_load+0x10/0x10
[  562.433461][T10462]  ? __pfx_ima_file_mmap+0x10/0x10
[  562.438676][T10462]  ? end_current_label_crit_section+0x151/0x180
[  562.445146][T10462]  ? common_file_perm+0x1a6/0x210
[  562.450346][T10462]  security_mmap_file+0x7e7/0xa40
[  562.455375][T10462]  __se_sys_remap_file_pages+0x6e6/0xa50
[  562.461005][T10462]  ? __pfx_do_futex+0x10/0x10
[  562.465700][T10462]  ? __pfx___se_sys_remap_file_pages+0x10/0x10
[  562.471860][T10462]  ? __pfx_bpf_trace_run2+0x10/0x10
[  562.477058][T10462]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  562.483048][T10462]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  562.489494][T10462]  ? rcu_is_watching+0x15/0xb0
[  562.494282][T10462]  ? __x64_sys_remap_file_pages+0x20/0xc0
[  562.500003][T10462]  do_syscall_64+0xf3/0x230
[  562.504508][T10462]  ? clear_bhb_loop+0x35/0x90
[  562.509298][T10462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.515218][T10462] RIP: 0033:0x7f2c3837dff9
[  562.519635][T10462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  562.539349][T10462] RSP: 002b:00007f2c390c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  562.547769][T10462] RAX: ffffffffffffffda RBX: 00007f2c38535f80 RCX: 00007f2c3837dff9
[  562.555743][T10462] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020491000
[  562.563819][T10462] RBP: 00007f2c383f0296 R08: 0000000000000000 R09: 0000000000000000
[  562.571885][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  562.579883][T10462] R13: 0000000000000000 R14: 00007f2c38535f80 R15: 00007ffdf53dc4e8
[  562.587872][T10462]  </TASK>
[  562.968637][T10468] bio_check_eod: 7 callbacks suppressed
[  562.968672][T10468] syz.2.1123: attempt to access beyond end of device
[  562.968672][T10468] loop2: rw=2049, sector=45096, nr_sectors = 120 limit=40427
[  563.219206][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  563.225529][ T1267] ieee802154 phy1 wpan1: encryption failed: -22