last executing test programs:

1m54.290029844s ago: executing program 0 (id=750):
syz_open_procfs(0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x28020, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2a, 0x354, &(0x7f00000002c0)="$eJzs3TtsW9UbAPDPuYmdRv/+kwGpgsmwVUJVE8QAU6KqSBUZoMjitRBoyiPXVIqFpTDUyQJiBLEgwcTWAcbOiAEBGwMrRUIFxEK3SK24yL439vUDGkBuePx+g/XpnO/zOffkKL6x4uPnVmPrwlxcvHHjeszPV2J29cxq7FdiKWYiidxuAAD/JvtZFj9nudtnv7NwEFWnPC8AYHp6r/8vHh801AZhJeLkF88/fCTzAgCm5zB//ycRj03suDTNmQEA07IfI6//9w11j7zNP9v/nwAA4J/riaefeXRtPeJ8vT4f0Xyz3Wg3ovSW/9rFeDnS2IzTsRi3IvIbhfxuofv4yLn1s6frXd8vRaNb0W5ENDvtRn6nsJb06muxHIuxVNRn/fqkW7/cq69HxG6nN340K+3GXCwU43+zEJuxEotx11h9xLn1syv14gkazYP6TsRezB9cRHf+p2IxvnohLkUaF6JbO5j/5eV6/Uy2PlTfvlLr5QEAAAAAAAAAAAAAAAAAAAAAwDScqvct9c+/yZqd9hvnRxOWhs7HaeTdxflAe/n5QFnt4HSet5LR84GGz+dpN2Zj5kivHAAAAAAAAAAAAAAAAAAAAP4+WjvV2EjTze3Wzutb5aBTann1848+PRajOa8kg5aYzZ9uKKdoi1JVEv3yrF+eJUM5RZBEDJKvXO3PuJxT61/FWHk3qI11VYo5baTp8Xu/e39S1S+DliTGlmU4qBTjl7qa/8+bfqfqt4OV2+Rcy7JsYld3Iu+NV0UlYnbsB/dXgmoRfHb9pbsfaJ14sNf1SXHow8n7F5+89u6HP25tpFEsTZpWt1u3sj89aFLaP5VinXcn7ITJwd6gZW+7tbORfP3TU/e8/eVIcjJ5/2TllteGukrbOE0/Hh29mgfdFTjMlc5N2PyTg2dv9nfvH1/MEx+sbly9/O0Ph60q/ZJwUAcAAAAAAAAAAAAAAAAAANwRpc+KH0r+se6HHo+I6nRnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3zuD7/0vB3ljLYYKbnRjvqm1ut+J/Y8PO9B6PHcEFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwn/RrAAAA//+7Pncd")
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2e2c43, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r0)
pipe2$9p(&(0x7f0000000240), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1m53.331170594s ago: executing program 0 (id=755):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000003ac0)={0x0, 0x8001})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, r5)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x20000023896)

1m51.217733073s ago: executing program 0 (id=760):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r4)
fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
preadv(r0, &(0x7f0000000500)=[{0x0, 0xfa}, {&(0x7f0000000340)=""/250, 0xfa}], 0x2, 0x0, 0x0)

1m49.856116005s ago: executing program 0 (id=764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x26, 0x775, &(0x7f0000000280)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009140)={0x2020, 0x0, <r5=>0x0}, 0x2020)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
write$FUSE_INTERRUPT(r4, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10)

1m45.969618161s ago: executing program 0 (id=775):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'gre0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)

1m45.567088706s ago: executing program 0 (id=779):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300)

1m45.17336856s ago: executing program 32 (id=779):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300)

1m3.533609297s ago: executing program 5 (id=908):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40}}, 0x18}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0xa, 0x8, 0x0, 0x8001, 0xc, 0xd7, 0x10, 0xfc, 0xc9, 0xe3, 0xc5, 0x0, 0xff, 0x5, 0x7f, 0x79, 0x7, 0x3, '\x00', 0x92, 0x84})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m3.205054322s ago: executing program 5 (id=912):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1m3.037369127s ago: executing program 5 (id=914):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r2}, 0x10)
write$cgroup_int(r1, &(0x7f0000000200), 0x43451)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x43451)

1m2.804532592s ago: executing program 5 (id=916):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8011, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
chroot(&(0x7f00000007c0)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

1m2.430986747s ago: executing program 5 (id=919):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x453, 0x100, 0x70bd2d, 0x25dfdbfd, "931b"}, 0x14}, 0x1, 0x0, 0x0, 0x10040000}, 0x40)

1m0.869546206s ago: executing program 5 (id=921):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r1, 0x0, 0x0, 0x40804, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', r3, 0x40, 0x1, 0x6, 0xc, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, {[@noop, @timestamp_addr={0x44, 0x4, 0xe4, 0x1, 0x9}, @end]}}}}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x401c2103, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000002040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xb00, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x8}}}}}}, 0x0)
getrandom(0x0, 0x0, 0x2)

1m0.327233308s ago: executing program 33 (id=921):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r1, 0x0, 0x0, 0x40804, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', r3, 0x40, 0x1, 0x6, 0xc, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, {[@noop, @timestamp_addr={0x44, 0x4, 0xe4, 0x1, 0x9}, @end]}}}}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x401c2103, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000002040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xb00, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x8}}}}}}, 0x0)
getrandom(0x0, 0x0, 0x2)

35.7226823s ago: executing program 1 (id=993):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48)
socket(0x10, 0x3, 0x9)
keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000280)='ceph\x00', 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x22, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000000032139653d50c72ca00ed00fb8d6afea24ad8f03f26af3bc9198973215eebd9a500181abc98240c8a2680e540e44d816ba3f00e20baee6c24cd2f3682eb4ed46b4cbc9c854383c5b6c45fb650", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a000000000000000000000000000077631800040000008520000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000850000003e0000009500000000000000185000000e0000000000000000000000180000000100000000000000090000004a471000f0ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"])
ioctl$KVM_RUN(r8, 0xae80, 0x0)

34.271055295s ago: executing program 1 (id=995):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x141601)
fcntl$setstatus(r1, 0x4, 0x102800)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000000000), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r7}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

33.238317394s ago: executing program 1 (id=999):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000000080)=ANY=[], 0x0, 0x1fb, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0)
unshare(0x22020600)
fadvise64(r0, 0x3, 0xff39, 0x3)

32.997539996s ago: executing program 1 (id=1001):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x51c, &(0x7f0000000c00)="$eJzs3U+MG1cZAPBvZv/YSbfZFHoAVGgohYCi2LtOG1W9UE4VQpUQPXJIl11ntYodr9be0l1y2By5I1GJE5w4I4HEAakn7kgc4MalHJAKRKAuEgdXHo9T7x/HVrK2m/XvJ438Zp4933uZzHvOZ2VeADPrSkQcRMRiRLwTEcv58STf4o3u1nnfxw/urR8+uLeeRLv99r+SrL5zLPo+0/FMfs5iRPzgzYgfJceC/jmiubd/Z61Wq+7kh8qt+na5ubd/fau+tlndrN6tVG6u3lx57carlTPr64v133x0ISL+8Psvf/ing2/9pNOspbyuvx9nqdv1hYdxOuYj4nvjCDYFc3l/Fh/nw4/1Ic5SGhGfi4iXsvt/Oeayq3nU0cv07Qm2DgAYh3Z7OdrL/fsAwHmXZjmwJC3luYClSNNSqZvDez4uprVGs3XtdmP37kY3V3Y5FtLbW7XqSp4rvBwLye2t+epqVu7t16qVY/s3IuK5iPhZ4UK2X1pv1Dam+cUHAGbYM8fm//8WuvM/AHDOFT8tFqbZDgBgcorTbgAAMHFD5v/l306qIQDAxPj3PwDMHvM/AMwe8z8AzB7zPwDMlO+/9VZnax/mz7/eeHdv907j3esb1eadUn13vbTe2NkubTYam9kze+rDzldrNLZXX4nd98qtarNVbu7t36o3du+2bmXP9b5VXZhIrwCAR3nuxQ/+mkTEwesXsi36nvc/dK5+YdytA8YpnXYDgKmZm3YDgKk5udoXMCvk44G+JXrv9x0unigc9/5Ip0+tGwqfPVe/+AT5f+CpJv8Ps+vx8v++y8N5IP8Ps6vdTqz5DwAzRo4fSIbU9//+v9Lu2xny+//ikzQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPuOWsi1JS/la4EuRpqVSxLMRcTkWkttbtepKRFyKiL8UFgqd/dWIsG4QADzN0n8k+fpfV5dfXjpeu1j4XyHydbx+/Iu3f/7eWqu1sxqxmPz74fHW+/nxyjTaDwAM05une/N4z8cP7q33tkm256PvdBcX7cQ9zLduzXzMZ6/FLNdw8T9Jvt/V+b4ydwbxD+5HxBdO63+S5UYu5yufHo/fif3sROOnR+KnWV33tfNn8fkzaAvMmg86488bp91/aVzJXk+//4vZCPXkeuPf4YnxL304/s0NGP+ujBrjlT9+98TB9nK37n7El+YjDnsn7xt/evGTAfFfHjH+3174ykuD6tq/jLgap/U/ORKr3Kpvl5t7+9e36mub1c3q3Url5urNldduvFopZznqci9TfdI/X792aVD8Tv8vDohfHNL/r4/Y/1/9/50ffvUR8b/5tdOv//OPiN+ZE78xYvy1i78rDqrrxN8Y0P9h1//aiPE//Pv+xohvBQAmoLm3f2etVqvujLuQjj9EVkgiDibQnW6h8OufvjmWMxfiLE94ach7YhJ/AY4VFkd+81xMtGEK3cK0RyZg3D696afdEgAAAAAAAAAAAAAAYJBJ/HeiafcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8+uTAAAA//8vzNK1")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x800714, &(0x7f0000000040), 0x1, 0x4a9, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
fsync(r0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigpending(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x7)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, ')', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x29)

32.733586333s ago: executing program 1 (id=1004):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48)
socket(0x10, 0x3, 0x9)
keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000280)='ceph\x00', 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x22, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000000032139653d50c72ca00ed00fb8d6afea24ad8f03f26af3bc9198973215eebd9a500181abc98240c8a2680e540e44d816ba3f00e20baee6c24cd2f3682eb4ed46b4cbc9c854383c5b6c45fb650", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a000000000000000000000000000077631800040000008520000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000850000003e0000009500000000000000185000000e0000000000000000000000180000000100000000000000090000004a471000f0ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"])
ioctl$KVM_RUN(r8, 0xae80, 0x0)

32.401812466s ago: executing program 1 (id=1007):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r4 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

31.932211968s ago: executing program 34 (id=1007):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r4 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

8.885574138s ago: executing program 3 (id=1084):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000001080)={[{@test_dummy_encryption_v1}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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")
pipe2(0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x407, 0xa0018ce0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r3)

8.283620275s ago: executing program 4 (id=1088):
syz_open_procfs(0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x241, &(0x7f00000023c0)="$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")
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0)

8.161590183s ago: executing program 4 (id=1089):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000009c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x31, 0x66, 0x62, 0x65, 0x31, 0x33, 0x66], 0x2d, [0x0, 0x35, 0x62, 0x61], 0x2d, [0x33, 0x37, 0x39, 0x33], 0x2d, [0x38, 0x34, 0x36, 0x37], 0x2d, [0x62, 0x62, 0x30, 0x32, 0x64, 0x62, 0x34, 0x38]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xe, 0x0, 0x0, 0xfffffffffffffffe, 0x3}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)

5.747023266s ago: executing program 7 (id=1100):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0)

5.587604959s ago: executing program 7 (id=1101):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086604, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

5.376192757s ago: executing program 2 (id=1103):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x58, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x58}}, 0x20044000)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0)

5.36933087s ago: executing program 3 (id=1104):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)

5.141691241s ago: executing program 7 (id=1106):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r2 = epoll_create1(0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004})

5.089382668s ago: executing program 6 (id=1107):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

5.089126422s ago: executing program 3 (id=1108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r6, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r6)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r2)
syz_open_dev$usbfs(0x0, 0x12, 0x80801)

4.343383658s ago: executing program 6 (id=1109):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

4.293763039s ago: executing program 7 (id=1110):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.229949644s ago: executing program 2 (id=1111):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x299d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580))
setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2, 0x10}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

4.191470775s ago: executing program 4 (id=1112):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x209, &(0x7f0000000740)="$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")
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000024c0)=[{{0x0, 0x803e, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0)

3.543065737s ago: executing program 3 (id=1113):
r0 = syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x223, &(0x7f0000000240)="$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")
lseek(r0, 0x2, 0x1)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x30000c6, &(0x7f00000000c0)={[{@minixdf}, {@abort}, {@dax_inode}]}, 0x1, 0x562, &(0x7f0000000840)="$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")
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)

3.47764613s ago: executing program 7 (id=1114):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='jqfmt=vfsv1,heap,active_logs=6,checkpoint=enable,flush_merge,fault_injection=00000000000000000023,disc\frd,noacl,fsync_mode=posix,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000016777214,\x00'], 0x21, 0x5505, &(0x7f0000000340)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

3.461356918s ago: executing program 2 (id=1115):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018170000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000aff60073ba218c8068e5e1e2c8403c9b0bc644793b78f4b9a8b555f2106e19fdfc7771eb06a53a2d6da073db5f8cc2d4f0130a858ff10d8d51eaa17e1ba7fa63da554078ec0a883c63ae5b512a85cab73cf3d3df7b234624728ddef870f1dc"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r7, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}, 0x10)

3.262643282s ago: executing program 6 (id=1116):
r0 = epoll_create1(0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60002002})

2.390452999s ago: executing program 2 (id=1117):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
close(r0)

2.313884299s ago: executing program 6 (id=1118):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x5)
r3 = eventfd(0x5)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x7, 0x2, r2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x6, 0x2, r3})
socket$nl_generic(0x10, 0x3, 0x10)

1.658958252s ago: executing program 4 (id=1119):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ptrace$setregset(0x4205, 0x0, 0x4, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
pipe2$9p(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0)

1.539562933s ago: executing program 2 (id=1120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, 0x0, &(0x7f0000001800)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"})
write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r3 = syz_open_pts(r2, 0x8182)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x100, 0x4)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x4, 0x0, &(0x7f0000000000))
dup3(r3, r2, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x3, 0x1ceff53e, 0x7, 0x6, 0x200, 0xffffffffffffffff})

1.417716785s ago: executing program 6 (id=1121):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_INPUT2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\f\x00\x00'], 0x6)

1.325346387s ago: executing program 6 (id=1122):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r3, r4, 0x0)

1.047359568s ago: executing program 4 (id=1123):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r6, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r6)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r2)
syz_open_dev$usbfs(0x0, 0x12, 0x80801)

1.029403551s ago: executing program 3 (id=1124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)
ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180))

665.744643ms ago: executing program 3 (id=1125):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108590000224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3)

564.739µs ago: executing program 7 (id=1126):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x26, 0x775, &(0x7f0000000280)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

351.971µs ago: executing program 2 (id=1127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x18)
unshare(0x42000000)

0s ago: executing program 4 (id=1128):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0}, 0x40c0)

kernel console output (not intermixed with test programs):

[  258.239540][    T9] usb 1-1: Using ep0 maxpacket: 16
[  258.245002][   T30] audit: type=1326 audit(1755133818.259:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33e3d85ba7 code=0x7ffc0000
[  258.302130][ T7833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.449'.
[  258.347560][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'.
[  258.381105][    T9] usb 1-1: device descriptor read/all, error -71
[  258.583397][   T30] audit: type=1326 audit(1755133818.259:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e3d2add9 code=0x7ffc0000
[  258.653752][   T30] audit: type=1326 audit(1755133818.259:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33e3d85ba7 code=0x7ffc0000
[  258.710579][ T5953] usb 3-1: device descriptor read/all, error -71
[  258.737804][   T30] audit: type=1326 audit(1755133818.259:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e3d2add9 code=0x7ffc0000
[  258.767604][   T30] audit: type=1326 audit(1755133818.259:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33e3d85ba7 code=0x7ffc0000
[  258.845262][   T30] audit: type=1326 audit(1755133818.259:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e3d2add9 code=0x7ffc0000
[  258.941110][   T30] audit: type=1326 audit(1755133818.259:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33e3d85ba7 code=0x7ffc0000
[  259.005686][   T30] audit: type=1326 audit(1755133818.259:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e3d2add9 code=0x7ffc0000
[  259.138627][ T7842] netlink: 44 bytes leftover after parsing attributes in process `syz.0.450'.
[  259.282388][   T30] audit: type=1326 audit(1755133818.259:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33e3d85ba7 code=0x7ffc0000
[  259.306267][   T30] audit: type=1326 audit(1755133818.259:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e3d2add9 code=0x7ffc0000
[  260.737613][ T5881] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  260.744278][ T5880] Bluetooth: hci2: command 0x0401 tx timeout
[  261.491225][ T7856] loop2: detected capacity change from 0 to 64
[  261.511008][ T7856] hfs: unable to locate alternate MDB
[  261.523880][ T7856] hfs: continuing without an alternate MDB
[  262.130502][ T7844] loop0: detected capacity change from 0 to 32768
[  262.495292][ T7867] loop3: detected capacity change from 0 to 512
[  262.587558][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  262.795640][ T7874] random: crng reseeded on system resumption
[  263.066010][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.092310][    T9] usb 1-1: config 0 has no interfaces?
[  263.099646][    T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  263.109752][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.120800][    T9] usb 1-1: config 0 descriptor??
[  263.146049][ T7867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.171819][ T7867] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.245388][  T979] usb 1-1: USB disconnect, device number 15
[  264.333590][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'.
[  264.343345][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.461'.
[  264.352287][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.461'.
[  264.507567][ T5939] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  264.789317][ T5939] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  264.837835][ T5939] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.421144][ T5939] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.440489][ T5939] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  265.450683][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.580805][ T5939] usb 4-1: config 0 descriptor??
[  266.834013][ T7910] random: crng reseeded on system resumption
[  267.636517][ T5939] usb 4-1: can't set config #0, error -71
[  267.661393][ T5939] usb 4-1: USB disconnect, device number 22
[  267.713784][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.895100][ T7916] loop3: detected capacity change from 0 to 128
[  267.944473][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[  267.969406][ T7916] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  267.999954][ T7916] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  268.287990][ T5865] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.502665][ T7937] loop3: detected capacity change from 0 to 2048
[  269.543559][ T7922] loop1: detected capacity change from 0 to 1024
[  269.552599][ T7937] NILFS (loop3): invalid segment: Inconsistency found
[  269.604192][ T7937] NILFS (loop3): trying rollback from an earlier position
[  269.656278][ T7937] NILFS (loop3): recovery complete
[  269.679620][ T7922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.707829][ T7922] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.725209][ T7947] loop2: detected capacity change from 0 to 64
[  269.731629][ T7948] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  269.755798][ T7918] loop0: detected capacity change from 0 to 32768
[  269.915495][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.933457][ T7947] hfs: get root inode failed
[  269.995282][ T7918] JBD2: Ignoring recovery information on journal
[  270.664371][ T7946] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  270.995118][ T7918] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  271.216700][ T7961] random: crng reseeded on system resumption
[  272.198344][ T5862] ocfs2: Unmounting device (7,0) on (node local)
[  276.980248][  T927] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  277.165959][ T7977] loop0: detected capacity change from 0 to 32768
[  277.179590][  T927] usb 2-1: config 0 has an invalid interface number: 60 but max is 0
[  277.188592][ T7977] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.485 (7977)
[  277.205118][  T927] usb 2-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config
[  277.239829][  T927] usb 2-1: config 0 has no interface number 0
[  277.252432][  T927] usb 2-1: too many endpoints for config 0 interface 60 altsetting 153: 45, using maximum allowed: 30
[  277.265668][  T927] usb 2-1: config 0 interface 60 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 45
[  277.279941][ T7977] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  277.293335][ T7977] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  277.298781][  T979] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  277.302204][ T7977] BTRFS info (device loop0): using free-space-tree
[  277.315966][  T927] usb 2-1: config 0 interface 60 has no altsetting 0
[  277.329991][  T927] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  277.342615][  T927] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  277.356712][  T927] usb 2-1: Product: syz
[  277.361451][  T927] usb 2-1: Manufacturer: syz
[  277.366070][  T927] usb 2-1: SerialNumber: syz
[  277.376904][  T927] usb 2-1: config 0 descriptor??
[  277.467440][ T7977] BTRFS info (device loop0): rebuilding free space tree
[  277.474848][  T979] usb 3-1: Using ep0 maxpacket: 8
[  277.491140][  T979] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  277.505686][  T979] usb 3-1: config 2 has no interface number 0
[  277.517885][  T979] usb 3-1: config 2 interface 31 has no altsetting 0
[  277.540049][  T979] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  277.552320][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.561460][  T979] usb 3-1: Product: syz
[  277.562520][   T30] kauditd_printk_skb: 61 callbacks suppressed
[  277.562557][   T30] audit: type=1800 audit(1755133837.589:122): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.485" name="file2" dev="loop0" ino=261 res=0 errno=0
[  277.570999][  T979] usb 3-1: Manufacturer: syz
[  277.640419][  T979] usb 3-1: SerialNumber: syz
[  277.647098][ T5862] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.108802][  T979] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22
[  278.165096][  T979] usb 3-1: USB disconnect, device number 13
[  278.277143][ T8016] random: crng reseeded on system resumption
[  278.303881][ T8011] loop3: detected capacity change from 0 to 32768
[  278.331859][ T8011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.494 (8011)
[  278.422872][ T8011] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.450075][ T8011] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  278.520599][ T8011] BTRFS info (device loop3): using free-space-tree
[  279.296861][ T8011] evm: overlay not supported
[  279.364563][  T927] usb 2-1: USB disconnect, device number 26
[  279.488409][ T5865] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  280.632608][ T8061] loop3: detected capacity change from 0 to 512
[  280.669855][ T8061] EXT4-fs: Ignoring removed i_version option
[  280.934973][ T8061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.572834][ T8045] loop2: detected capacity change from 0 to 32768
[  281.655174][ T8045] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  281.655174][ T8045] 
[  281.677646][ T8045] xtLookup: xtSearch returned -5
[  281.684141][ T8045] add_index: get/read_metapage failed!
[  281.711307][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.122351][  T979] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  282.451849][  T979] usb 1-1: config 0 has an invalid interface number: 60 but max is 0
[  282.469848][  T979] usb 1-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config
[  282.492015][ T8083] loop3: detected capacity change from 0 to 2048
[  282.496668][  T979] usb 1-1: config 0 has no interface number 0
[  282.515135][ T8083] udf: Bad value for 'umask'
[  282.528978][  T979] usb 1-1: too many endpoints for config 0 interface 60 altsetting 153: 45, using maximum allowed: 30
[  282.552674][  T979] usb 1-1: config 0 interface 60 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 45
[  282.586155][  T979] usb 1-1: config 0 interface 60 has no altsetting 0
[  282.612921][  T979] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  282.631896][  T979] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  282.649952][  T979] usb 1-1: Product: syz
[  282.658524][  T979] usb 1-1: Manufacturer: syz
[  282.668513][  T979] usb 1-1: SerialNumber: syz
[  282.686850][  T979] usb 1-1: config 0 descriptor??
[  282.729583][ T8087] loop2: detected capacity change from 0 to 256
[  283.048468][ T5953] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  283.157277][ T8103] loop1: detected capacity change from 0 to 4096
[  283.176550][ T8103] NILFS (loop1): invalid segment: Inconsistency found
[  283.194311][ T8104] loop3: detected capacity change from 0 to 512
[  283.205702][ T8103] NILFS (loop1): trying rollback from an earlier position
[  283.256358][ T8103] NILFS (loop1): recovery complete
[  283.267149][ T8104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.810681][ T8104] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.822085][ T5953] usb 3-1: Using ep0 maxpacket: 16
[  283.834734][ T8111] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.892640][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  283.906327][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  283.926464][ T5953] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  283.943884][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.954980][ T5953] usb 3-1: Product: syz
[  283.965977][ T5953] usb 3-1: Manufacturer: syz
[  283.973738][ T5953] usb 3-1: SerialNumber: syz
[  284.052692][ T5953] usb 3-1: config 0 descriptor??
[  284.081212][ T8113] loop1: detected capacity change from 0 to 512
[  284.091527][ T5953] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  284.101275][ T5953] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  284.117624][ T5984] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  284.138719][ T8113] EXT4-fs: Ignoring removed i_version option
[  284.175219][ T8113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.407280][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.426269][ T5984] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  284.437988][ T5984] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.460730][ T5984] usb 4-1: config 0 interface 0 has no altsetting 0
[  284.507013][ T5984] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  284.554262][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.570460][ T5984] usb 4-1: config 0 descriptor??
[  284.753663][  T979] usb 1-1: USB disconnect, device number 16
[  284.796503][ T5953] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  284.847847][ T5953] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  285.052584][ T5984] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0
[  285.125870][ T5953] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  285.133209][ T5953] em28xx 3-1:0.0: No AC97 audio processor
[  285.184132][ T8122] random: crng reseeded on system resumption
[  285.402498][ T5984] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0
[  285.411895][ T5984] hid-steam 0003:28DE:1102.0011: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0
[  285.487638][ T5984] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected
[  285.507361][ T5984] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0011/input/input18
[  285.566494][ T5984] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0
[  285.593360][ T5984] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0
[  285.648089][ T5984] hid-steam 0003:28DE:1102.0012: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0
[  286.162283][ T5953] usb 3-1: USB disconnect, device number 14
[  286.170284][ T5953] em28xx 3-1:0.0: Disconnecting em28xx
[  286.198226][ T5953] em28xx 3-1:0.0: Freeing device
[  287.127762][ T5984] usb 4-1: reset full-speed USB device number 23 using dummy_hcd
[  287.168588][ T8128] loop1: detected capacity change from 0 to 32768
[  287.218003][ T8128] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt
[  287.218003][ T8128] 
[  287.242719][ T8128] xtLookup: xtSearch returned -5
[  287.267332][ T8128] add_index: get/read_metapage failed!
[  287.562592][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.853162][ T8144] loop3: detected capacity change from 0 to 512
[  287.898859][ T8144] EXT4-fs: Ignoring removed i_version option
[  288.159366][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.213372][ T8144] 9p: Unknown access argument 18446744073709551615: -34
[  288.297082][ T8152] loop1: detected capacity change from 0 to 64
[  288.344771][ T5939] usb 4-1: USB disconnect, device number 23
[  288.801183][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.155265][ T5939] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected
[  289.407772][ T8162] random: crng reseeded on system resumption
[  290.514805][ T8177] loop2: detected capacity change from 0 to 8
[  290.910929][ T8177] unable to read fragment index table
[  290.950682][ T8176] loop2: detected capacity change from 0 to 256
[  290.957322][ T8176] exfat: Deprecated parameter 'namecase'
[  290.963112][ T8176] exfat: Deprecated parameter 'namecase'
[  290.968901][ T8176] exfat: Deprecated parameter 'utf8'
[  290.988172][ T8176] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  291.041949][ T8179] random: crng reseeded on system resumption
[  292.196976][ T8197] loop0: detected capacity change from 0 to 512
[  292.245793][ T8193] netlink: 272 bytes leftover after parsing attributes in process `syz.2.540'.
[  292.379000][ T8197] EXT4-fs: Ignoring removed i_version option
[  292.461150][ T8197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.562633][ T8197] 9p: Unknown access argument 18446744073709551615: -34
[  293.512531][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.673196][ T8213] random: crng reseeded on system resumption
[  293.970810][ T8218] loop2: detected capacity change from 0 to 128
[  293.992102][ T8218] FAT-fs (loop2): Directory bread(block 32) failed
[  293.999374][ T8218] FAT-fs (loop2): Directory bread(block 33) failed
[  294.006436][ T8218] FAT-fs (loop2): Directory bread(block 34) failed
[  294.013009][ T8218] FAT-fs (loop2): Directory bread(block 35) failed
[  294.019632][ T8218] FAT-fs (loop2): Directory bread(block 36) failed
[  294.026157][ T8218] FAT-fs (loop2): Directory bread(block 37) failed
[  294.032752][ T8218] FAT-fs (loop2): Directory bread(block 38) failed
[  294.039273][ T8218] FAT-fs (loop2): Directory bread(block 39) failed
[  294.045857][ T8218] FAT-fs (loop2): Directory bread(block 40) failed
[  294.052438][ T8218] FAT-fs (loop2): Directory bread(block 41) failed
[  294.108341][ T8217] syz.2.547: attempt to access beyond end of device
[  294.108341][ T8217] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128
[  294.121834][ T8217] Buffer I/O error on dev loop2, logical block 1028, async page read
[  294.130053][ T8217] syz.2.547: attempt to access beyond end of device
[  294.130053][ T8217] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128
[  294.143379][ T8217] Buffer I/O error on dev loop2, logical block 41991, async page read
[  294.151733][ T8217] FAT-fs (loop2): Filesystem has been set read-only
[  294.158578][ T8217] syz.2.547: attempt to access beyond end of device
[  294.158578][ T8217] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128
[  294.173037][ T8217] Buffer I/O error on dev loop2, logical block 1028, async page read
[  294.181431][ T8217] syz.2.547: attempt to access beyond end of device
[  294.181431][ T8217] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128
[  294.194826][ T8217] Buffer I/O error on dev loop2, logical block 41991, async page read
[  294.203446][   T30] audit: type=1800 audit(1755133854.229:123): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.547" name="file2" dev="loop2" ino=1048608 res=0 errno=0
[  295.147592][ T5953] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  295.220173][ T8230] vxcan1: entered allmulticast mode
[  295.606781][ T8224] loop1: detected capacity change from 0 to 32768
[  295.621437][ T8224] bcachefs (/dev/loop1): error validating superblock: Invalid superblock layout: max_size_bits too high
[  295.632773][ T8224] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_sb_max_size_bits
[  295.710397][ T5953] usb 4-1: config 0 has an invalid interface number: 60 but max is 0
[  295.723926][ T5953] usb 4-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config
[  295.744630][ T5953] usb 4-1: config 0 has no interface number 0
[  295.768066][ T5953] usb 4-1: too many endpoints for config 0 interface 60 altsetting 153: 45, using maximum allowed: 30
[  295.787170][ T8232] loop2: detected capacity change from 0 to 512
[  295.810791][ T5953] usb 4-1: config 0 interface 60 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 45
[  295.887586][ T5953] usb 4-1: config 0 interface 60 has no altsetting 0
[  295.901508][ T5953] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  295.952205][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  295.977679][ T5953] usb 4-1: Product: syz
[  295.979491][ T8232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.996289][ T5953] usb 4-1: Manufacturer: syz
[  295.996309][ T5953] usb 4-1: SerialNumber: syz
[  296.007934][ T8232] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.025492][ T5953] usb 4-1: config 0 descriptor??
[  296.060784][ T8215] loop0: detected capacity change from 0 to 32768
[  296.070997][ T8215] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.546 (8215)
[  296.111847][ T8215] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  296.129608][ T8215] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  296.140163][ T8215] BTRFS info (device loop0): using free-space-tree
[  296.621866][ T5984] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  296.741385][ T8215] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  296.745478][ T8215] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  296.791509][ T8215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  296.906427][ T8215] BTRFS error (device loop0): open_ctree failed: -12
[  296.970844][ T5984] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  296.982919][ T5984] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.994364][ T5984] usb 3-1: config 0 interface 0 has no altsetting 0
[  297.189280][ T5984] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  297.262777][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.336246][ T5984] usb 3-1: config 0 descriptor??
[  297.379927][ T5953] usb 4-1: USB disconnect, device number 24
[  297.487374][ T8259] loop0: detected capacity change from 0 to 512
[  297.496302][ T8259] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  297.656255][ T8259] EXT4-fs (loop0): 1 truncate cleaned up
[  297.679420][ T8259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.771524][ T8263] loop3: detected capacity change from 0 to 128
[  298.419554][ T8263] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  298.462176][ T8262] FAT-fs (loop3): FAT read failed (blocknr 128)
[  298.484847][ T8259] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.553: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  298.509885][ T8259] EXT4-fs (loop0): Remounting filesystem read-only
[  298.727972][ T8259] EXT4-fs warning (device loop0): ext4_rename_delete:3733: inode #2: comm syz.0.553: Deleting old file: nlink 4, error=-117
[  298.870452][ T5984] usbhid 3-1:0.0: can't add hid device: -71
[  298.880782][ T5984] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  298.926073][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.938202][ T5984] usb 3-1: USB disconnect, device number 15
[  299.479116][ T8287] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  300.379477][ T8292] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  301.017085][ T8298] netlink: 6 bytes leftover after parsing attributes in process `syz.2.565'.
[  301.047124][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.565'.
[  301.235908][ T8302] netlink: 'syz.1.567': attribute type 7 has an invalid length.
[  301.279591][ T8302] netlink: 'syz.1.567': attribute type 8 has an invalid length.
[  301.301117][ T8304] usb usb8: usbfs: process 8304 (syz.3.568) did not claim interface 0 before use
[  301.311662][ T8302] netlink: 'syz.1.567': attribute type 6 has an invalid length.
[  301.393090][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.123935][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'.
[  303.184714][ T8302] loop1: detected capacity change from 0 to 32768
[  303.210179][ T8302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.567 (8302)
[  303.253028][ T8302] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  303.263337][ T8302] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  303.273863][ T8302] BTRFS info (device loop1): using free-space-tree
[  303.288248][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.332025][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.461990][ T8327] bridge0: port 3(netdevsim0) entered disabled state
[  303.920467][ T8349] program syz.0.577 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  303.939313][ T8349] program syz.0.577 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  303.949439][ T8349] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  303.950243][ T8323] loop2: detected capacity change from 0 to 32768
[  304.548517][ T5868] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  304.719987][ T8323] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  304.719987][ T8323] 
[  304.759845][ T8323] xtLookup: xtSearch returned -5
[  304.764843][ T8323] add_index: get/read_metapage failed!
[  304.809771][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'.
[  305.126277][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'.
[  305.215938][ T8361] capability: warning: `syz.1.578' uses deprecated v2 capabilities in a way that may be insecure
[  305.748578][ T8369] loop1: detected capacity change from 0 to 128
[  305.870283][ T8369] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  305.913492][ T8367] FAT-fs (loop1): FAT read failed (blocknr 128)
[  306.129270][ T8371] loop3: detected capacity change from 0 to 4096
[  307.643627][ T8390] loop0: detected capacity change from 0 to 64
[  307.661818][ T8390] hfs: Unknown parameter ''
[  308.589135][ T8398] random: crng reseeded on system resumption
[  309.087648][ T5953] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  309.396358][ T8409] loop0: detected capacity change from 0 to 32768
[  309.418009][ T5953] usb 4-1: Using ep0 maxpacket: 8
[  309.452485][ T8416] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  309.463586][ T8409] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  309.515821][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  309.588216][ T5953] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  309.599945][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.614584][ T5953] usb 4-1: config 0 descriptor??
[  309.696364][ T8409] XFS (loop0): Ending clean mount
[  309.739175][ T8416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.592'.
[  309.829032][ T5953] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  310.054585][ T6689] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  310.074783][ T6689] XFS (loop0): Unmount and run xfs_repair
[  310.088568][ T8431] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  310.101562][ T8430] loop1: detected capacity change from 0 to 8
[  310.118894][ T8430] Page size > filesystem block size (96).  This is currently not supported!
[  310.143495][ T8430] netlink: 'syz.1.597': attribute type 3 has an invalid length.
[  310.177509][ T6689] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  310.177711][ T8430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.597'.
[  310.214315][ T6689] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  310.234820][ T5984] usb 4-1: USB disconnect, device number 25
[  310.271403][ T6689] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  310.287515][ T6689] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  310.441001][ T6689] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  310.458007][ T6689] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  310.467083][ T6689] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  310.490724][ T6689] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  311.031975][ T6689] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  311.041423][ T6689] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  311.053762][ T6689] XFS (loop0): page discard on page ffffea0001373a00, inode 0x2449, pos 0.
[  311.080448][ T5862] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.164306][ T5953] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  311.164415][ T5862] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  311.502206][ T5953] usb 2-1: Using ep0 maxpacket: 32
[  312.457625][ T5953] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  312.490855][ T5953] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  312.506215][ T5953] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  312.517426][ T5953] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  312.762202][ T5953] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  312.796188][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.804538][ T5953] usb 2-1: Product: syz
[  312.810237][ T5953] usb 2-1: Manufacturer: syz
[  312.817677][ T5953] usb 2-1: SerialNumber: syz
[  312.850857][ T5953] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input19
[  312.942388][ T5953] imon:send_packet: packet tx failed (-71)
[  312.977656][ T5953] imon 2-1:155.0: panel buttons/knobs setup failed
[  313.010090][ T5953] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  313.022330][ T5953]  (id 0x00)
[  313.088319][ T8460] random: crng reseeded on system resumption
[  313.160816][ T8457] loop0: detected capacity change from 0 to 4096
[  313.576497][ T8457] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  313.784966][ T8457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.811971][ T8467] loop1: detected capacity change from 0 to 2048
[  313.825068][ T8472] loop3: detected capacity change from 0 to 512
[  313.830607][ T5953] rc_core: IR keymap rc-imon-pad not found
[  313.840865][ T8472] EXT4-fs: Ignoring removed i_version option
[  313.849937][ T5953] Registered IR keymap rc-empty
[  313.879485][ T5953] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  313.882246][ T8472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.898796][ T8467]  loop1: p1 < > p4
[  313.906442][ T5953] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  313.931892][ T8467] loop1: p4 size 722688 extends beyond EOD, truncated
[  313.968257][ T5953] imon:send_packet: packet tx failed (-71)
[  313.981400][ T8472] 9p: Unknown access argument 18446744073709551615: -34
[  314.061993][ T5953] imon 2-1:155.0: remote input dev register failed
[  314.069180][ T5953] imon 2-1:155.0: imon_init_intf0: rc device setup failed
[  314.141292][ T5953] imon 2-1:155.0: unable to initialize intf0, err 0
[  314.161169][ T5953] imon:imon_probe: failed to initialize context!
[  314.178269][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'.
[  314.187196][ T5953] imon 2-1:155.0: unable to register, err -19
[  314.199335][ T5953] usb 2-1: USB disconnect, device number 27
[  314.204360][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.327891][ T5988] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  314.511522][ T5988] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  314.594642][ T5988] usb 1-1: config 0 has no interface number 0
[  314.712020][ T8473] loop2: detected capacity change from 0 to 32768
[  314.770650][ T5988] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  314.826238][ T8473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.608 (8473)
[  314.845491][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.902314][ T5988] usb 1-1: Product: syz
[  314.930573][ T5988] usb 1-1: Manufacturer: syz
[  314.955286][ T5939] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  314.984524][ T5988] usb 1-1: SerialNumber: syz
[  315.037097][ T8473] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  315.094272][ T5988] usb 1-1: config 0 descriptor??
[  315.126106][ T8473] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  315.211866][ T8473] BTRFS info (device loop2): disk space caching is enabled
[  315.371304][ T8473] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  315.411138][ T5988] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  315.422256][ T5939] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  315.440595][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.452352][ T5988] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  315.462731][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.473577][ T5988] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  315.481686][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  315.494800][ T5988] usb 1-1: media controller created
[  315.509779][ T5939] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  315.519320][ T5939] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  315.530277][ T5939] usb 4-1: Manufacturer: syz
[  315.550192][ T5939] usb 4-1: config 0 descriptor??
[  315.571173][ T5988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  315.636811][ T8473] BTRFS info (device loop2): rebuilding free space tree
[  315.671285][ T8473] BTRFS info (device loop2): disabling free space tree
[  315.681534][ T8473] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  315.698707][ T8473] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  315.866866][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.875668][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.029451][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.038396][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.346195][ T8513] loop1: detected capacity change from 0 to 32768
[  316.389066][ T8513] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  316.475998][ T8513] XFS (loop1): Ending clean mount
[  316.492408][ T8513] XFS (loop1): Quotacheck needed: Please wait.
[  316.546334][ T8513] XFS (loop1): Quotacheck: Done.
[  316.741999][ T5868] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  317.069061][    T9] usb 1-1: USB disconnect, device number 17
[  317.197436][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.219242][    C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  317.307876][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  317.315625][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  317.524835][ T5939] usbhid 4-1:0.0: can't add hid device: -71
[  317.531001][ T5939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  317.565725][ T5939] usb 4-1: USB disconnect, device number 26
[  317.786212][ T5874] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  318.685543][ T8558] random: crng reseeded on system resumption
[  318.999654][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.623'.
[  319.623905][ T8575] program syz.2.627 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.639820][ T8575] netlink: 256 bytes leftover after parsing attributes in process `syz.2.627'.
[  320.476329][ T8577] loop3: detected capacity change from 0 to 512
[  320.494877][ T8577] EXT4-fs (loop3): orphan cleanup on readonly fs
[  320.502177][ T8577] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  320.526330][ T8577] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  320.541992][ T8577] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  320.572777][ T8577] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.633: bg 0: block 248: padding at end of block bitmap is not set
[  320.721265][ T8577] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  320.859832][ T8577] EXT4-fs (loop3): 1 orphan inode deleted
[  320.870215][ T8577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  320.902150][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'.
[  320.962441][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.974703][ T8588] FAULT_INJECTION: forcing a failure.
[  320.974703][ T8588] name failslab, interval 1, probability 0, space 0, times 0
[  321.459762][ T8588] CPU: 1 UID: 0 PID: 8588 Comm: syz.1.636 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) 
[  321.459780][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  321.459787][ T8588] Call Trace:
[  321.459792][ T8588]  <TASK>
[  321.459798][ T8588]  dump_stack_lvl+0x189/0x250
[  321.459815][ T8588]  ? __pfx____ratelimit+0x10/0x10
[  321.459832][ T8588]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.459844][ T8588]  ? __pfx__printk+0x10/0x10
[  321.459861][ T8588]  ? __pfx___might_resched+0x10/0x10
[  321.459870][ T8588]  ? fs_reclaim_acquire+0x7d/0x100
[  321.459883][ T8588]  should_fail_ex+0x414/0x560
[  321.459901][ T8588]  should_failslab+0xa8/0x100
[  321.459917][ T8588]  __kmalloc_noprof+0xcb/0x4f0
[  321.459931][ T8588]  ? tomoyo_encode+0x28b/0x550
[  321.459944][ T8588]  tomoyo_encode+0x28b/0x550
[  321.459957][ T8588]  tomoyo_realpath_from_path+0x58d/0x5d0
[  321.459968][ T8588]  ? tomoyo_domain+0xd9/0x130
[  321.459981][ T8588]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  321.459996][ T8588]  tomoyo_path_number_perm+0x1e8/0x5a0
[  321.460011][ T8588]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  321.460034][ T8588]  ? __lock_acquire+0xab9/0xd20
[  321.460061][ T8588]  ? __fget_files+0x2a/0x420
[  321.460078][ T8588]  ? __fget_files+0x2a/0x420
[  321.460092][ T8588]  ? __fget_files+0x3a0/0x420
[  321.460106][ T8588]  ? __fget_files+0x2a/0x420
[  321.460123][ T8588]  security_file_ioctl+0xcb/0x2d0
[  321.460138][ T8588]  __se_sys_ioctl+0x47/0x170
[  321.460153][ T8588]  do_syscall_64+0xfa/0x3b0
[  321.460163][ T8588]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.460179][ T8588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.460189][ T8588]  ? clear_bhb_loop+0x60/0xb0
[  321.460201][ T8588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.460211][ T8588] RIP: 0033:0x7f7e16b8ebe9
[  321.460222][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.460230][ T8588] RSP: 002b:00007f7e17979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  321.460242][ T8588] RAX: ffffffffffffffda RBX: 00007f7e16db5fa0 RCX: 00007f7e16b8ebe9
[  321.460250][ T8588] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  321.460256][ T8588] RBP: 00007f7e17979090 R08: 0000000000000000 R09: 0000000000000000
[  321.460262][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.460268][ T8588] R13: 00007f7e16db6038 R14: 00007f7e16db5fa0 R15: 00007ffc5792af98
[  321.460285][ T8588]  </TASK>
[  321.460297][ T8588] ERROR: Out of memory at tomoyo_realpath_from_path.
[  322.086188][ T8598] loop3: detected capacity change from 0 to 128
[  322.095062][ T8598] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  322.129936][ T8598] FAT-fs (loop3): FAT read failed (blocknr 128)
[  322.554208][ T8597] loop2: detected capacity change from 0 to 2048
[  322.596716][ T8600] loop1: detected capacity change from 0 to 512
[  322.604613][ T8597]  loop2: p1 < > p4
[  322.604613][ T8597]  p4: <netbsd: >
[  322.613903][ T8597] loop2: p4 size 722688 extends beyond EOD, truncated
[  322.652153][ T8600] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  322.665019][ T8600] System zones: 0-2, 18-18, 34-34
[  322.797773][ T8600] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.640: bg 0: block 248: padding at end of block bitmap is not set
[  322.838967][ T8600] Quota error (device loop1): write_blk: dquota write failed
[  322.883346][ T8600] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  322.909190][ T8606] random: crng reseeded on system resumption
[  322.943072][ T8600] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.640: Failed to acquire dquot type 1
[  322.974720][ T8600] EXT4-fs (loop1): 1 truncate cleaned up
[  322.989393][ T8600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.005927][ T8600] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.109677][ T8600] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.640: deleted inode referenced: 12
[  323.194741][ T5868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.325756][ T8618] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  323.607810][ T8616] loop3: detected capacity change from 0 to 8192
[  324.274800][ T8636] loop0: detected capacity change from 0 to 128
[  324.776507][ T8636] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  324.808612][ T8636] FAT-fs (loop0): FAT read failed (blocknr 128)
[  325.487617][ T5953] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  326.500261][ T8632] loop1: detected capacity change from 0 to 32768
[  326.507205][ T8632] XFS: attr2 mount option is deprecated.
[  326.513504][ T5953] usb 4-1: Using ep0 maxpacket: 32
[  326.533095][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  326.546039][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  326.569996][ T8632] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.585712][ T5953] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22
[  326.613090][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.626023][ T5953] usb 4-1: Product: syz
[  326.639871][ T5953] usb 4-1: Manufacturer: syz
[  326.644599][ T5953] usb 4-1: SerialNumber: syz
[  326.653497][ T5953] usb 4-1: config 0 descriptor??
[  326.656362][ T8632] XFS (loop1): Ending clean mount
[  326.673459][ T8632] XFS (loop1): Quotacheck needed: Please wait.
[  326.681797][ T5953] usbserial_generic 4-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  326.704664][ T5953] usbserial_generic 4-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  326.715673][ T5953] usbserial_generic 4-1:0.0: generic converter detected
[  326.725496][ T5953] usb 4-1: generic converter now attached to ttyUSB0
[  326.732904][ T8632] XFS (loop1): Quotacheck: Done.
[  326.807597][ T5984] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  326.881629][   T24] usb 4-1: USB disconnect, device number 27
[  326.919694][ T5868] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.930033][   T24] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  326.958474][   T24] usbserial_generic 4-1:0.0: device disconnected
[  327.004563][ T5984] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  327.018720][ T5984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  327.035782][ T5984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  327.077680][ T5984] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  327.103214][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.141012][ T5984] usb 1-1: config 0 descriptor??
[  327.322877][ T5984] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -12
[  327.541116][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.698258][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.763718][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.913171][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.925040][ T8683] loop2: detected capacity change from 0 to 128
[  327.933099][ T8683] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  327.955430][ T8683] FAT-fs (loop2): FAT read failed (blocknr 128)
[  327.980675][ T5984] usb 1-1: USB disconnect, device number 18
[  328.118228][ T8692] loop3: detected capacity change from 0 to 512
[  328.125960][ T8692] EXT4-fs: inline encryption not supported
[  328.135655][ T8692] EXT4-fs (loop3): Invalid log cluster size: 32
[  328.317302][ T8694] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.667'.
[  328.362813][ T8698] loop3: detected capacity change from 0 to 512
[  328.373928][ T8694] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  328.394648][ T8698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.439568][ T8694] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  328.485057][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.727576][  T979] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  329.303854][  T979] usb 1-1: Using ep0 maxpacket: 32
[  329.325962][  T979] usb 1-1: unable to get BOS descriptor or descriptor too short
[  329.346390][  T979] usb 1-1: config 2 has an invalid descriptor of length 34, skipping remainder of the config
[  329.358546][  T979] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  329.371192][  T979] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=d1.f9
[  329.393149][  T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.429103][  T979] usb 1-1: Product: syz
[  329.447177][  T979] usb 1-1: Manufacturer: syz
[  329.475227][  T979] usb 1-1: SerialNumber: syz
[  329.528568][ T5953] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  329.797657][ T5953] usb 4-1: Using ep0 maxpacket: 8
[  329.804527][  T979] usb 1-1: USB disconnect, device number 19
[  329.817818][ T5953] usb 4-1: config 162 has an invalid interface number: 161 but max is 1
[  329.829759][ T5953] usb 4-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[  329.843741][ T5953] usb 4-1: config 162 has 1 interface, different from the descriptor's value: 2
[  329.862414][ T5953] usb 4-1: config 162 has no interface number 0
[  329.874018][ T5953] usb 4-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7
[  329.883249][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.891280][ T5953] usb 4-1: Product: syz
[  329.895430][ T5953] usb 4-1: Manufacturer: syz
[  329.900076][ T5953] usb 4-1: SerialNumber: syz
[  329.924954][ T5953] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  330.122021][  T979] usb 4-1: USB disconnect, device number 28
[  330.136514][ T8726] fuse: Unknown parameter '000000000000000000000040x0000000000000003'
[  330.849147][ T8742] loop9: detected capacity change from 0 to 7
[  330.860153][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.868936][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.877529][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.886089][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.896353][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.905215][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.913796][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.922180][ T8742] ldm_validate_partition_table(): Disk read failed.
[  330.929218][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.939257][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.948656][ T8742] Buffer I/O error on dev loop9, logical block 0, async page read
[  330.957947][ T8742] Dev loop9: unable to read RDB block 0
[  330.965351][ T8742]  loop9: unable to read partition table
[  330.972341][ T8742] loop9: partition table beyond EOD, truncated
[  330.978861][ T8742] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  330.978861][ T8742] 
) failed (rc=-5)
[  331.579403][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.686'.
[  331.588526][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'.
[  332.777964][  T979] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  333.046009][ T8764] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  333.099891][  T979] usb 2-1: config 0 has an invalid interface number: 60 but max is 0
[  333.141815][  T979] usb 2-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config
[  333.175297][  T979] usb 2-1: config 0 has no interface number 0
[  333.190335][  T979] usb 2-1: too many endpoints for config 0 interface 60 altsetting 153: 45, using maximum allowed: 30
[  333.214653][  T979] usb 2-1: config 0 interface 60 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 45
[  333.371652][  T979] usb 2-1: config 0 interface 60 has no altsetting 0
[  333.722543][ T8768] cgroup: fork rejected by pids controller in /syz3
[  334.317616][  T979] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  334.326694][  T979] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  334.338318][  T979] usb 2-1: Product: syz
[  334.342542][  T979] usb 2-1: Manufacturer: syz
[  334.347151][  T979] usb 2-1: SerialNumber: syz
[  334.354602][  T979] usb 2-1: config 0 descriptor??
[  334.645116][ T8884] loop2: detected capacity change from 0 to 1024
[  334.662965][ T8884] EXT4-fs: Ignoring removed nobh option
[  334.669829][ T8884] EXT4-fs: Ignoring removed bh option
[  334.696692][ T8884] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  334.991925][  T998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.366751][  T998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.577718][  T998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.666735][  T979] usb 2-1: USB disconnect, device number 28
[  335.756848][  T998] bridge0: port 3(netdevsim0) entered disabled state
[  335.836684][  T998] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  335.879983][  T998] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  335.922338][  T998] bridge0: port 3(netdevsim0) entered disabled state
[  335.980575][  T998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.191108][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'.
[  336.200084][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'.
[  337.006769][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  337.018520][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  337.028279][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  337.037393][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  337.045281][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  337.101369][ T8921] lo speed is unknown, defaulting to 1000
[  337.688576][   T11] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  338.700828][  T998] bridge_slave_1: left allmulticast mode
[  338.719247][  T998] bridge_slave_1: left promiscuous mode
[  338.728951][  T998] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.731475][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'.
[  338.745994][ T8945] netlink: 'syz.1.717': attribute type 1 has an invalid length.
[  338.753648][ T8945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.717'.
[  338.780188][   T11] usb 3-1: config 0 has an invalid interface number: 60 but max is 0
[  338.789652][   T11] usb 3-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config
[  338.813781][ T8945] ALSA: mixer_oss: invalid OSS volume ''
[  338.834563][   T11] usb 3-1: config 0 has no interface number 0
[  338.854330][   T11] usb 3-1: too many endpoints for config 0 interface 60 altsetting 153: 45, using maximum allowed: 30
[  338.871024][   T11] usb 3-1: config 0 interface 60 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 45
[  338.885740][  T998] bridge_slave_0: left allmulticast mode
[  338.894388][  T998] bridge_slave_0: left promiscuous mode
[  338.907763][  T998] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.915749][   T11] usb 3-1: config 0 interface 60 has no altsetting 0
[  338.988753][   T11] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  339.019334][   T11] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  339.048832][   T11] usb 3-1: Product: syz
[  339.059278][   T11] usb 3-1: Manufacturer: syz
[  339.068951][   T11] usb 3-1: SerialNumber: syz
[  339.095591][   T11] usb 3-1: config 0 descriptor??
[  339.138025][ T5881] Bluetooth: hci1: command tx timeout
[  339.233088][ T8954] loop1: detected capacity change from 0 to 256
[  339.257107][ T8954] exfat: Deprecated parameter 'utf8'
[  339.295448][ T8954] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbc51571d, utbl_chksum : 0xe619d30d)
[  340.015812][ T8962] loop0: detected capacity change from 0 to 164
[  340.716838][   T11] usb 3-1: USB disconnect, device number 16
[  341.217865][ T5881] Bluetooth: hci1: command tx timeout
[  341.404424][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.725'.
[  341.413707][ T8976] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  342.156089][  T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  342.167857][  T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  342.189945][  T998] bond0 (unregistering): Released all slaves
[  342.261101][ T8975] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  342.316419][ T8975] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  342.375632][ T8985] FAULT_INJECTION: forcing a failure.
[  342.375632][ T8985] name failslab, interval 1, probability 0, space 0, times 0
[  342.398249][ T8975] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  342.405481][ T8985] CPU: 1 UID: 0 PID: 8985 Comm: syz.2.728 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) 
[  342.405516][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  342.405529][ T8985] Call Trace:
[  342.405536][ T8985]  <TASK>
[  342.405545][ T8985]  dump_stack_lvl+0x189/0x250
[  342.405573][ T8985]  ? __pfx____ratelimit+0x10/0x10
[  342.405602][ T8985]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.405624][ T8985]  ? __pfx__printk+0x10/0x10
[  342.405655][ T8985]  ? __pfx___might_resched+0x10/0x10
[  342.405679][ T8985]  should_fail_ex+0x414/0x560
[  342.405711][ T8985]  should_failslab+0xa8/0x100
[  342.405739][ T8985]  kmem_cache_alloc_noprof+0x73/0x3c0
[  342.405763][ T8985]  ? security_file_alloc+0x34/0x330
[  342.405792][ T8985]  security_file_alloc+0x34/0x330
[  342.405817][ T8985]  init_file+0x93/0x2f0
[  342.405840][ T8985]  alloc_file_pseudo_noaccount+0x15b/0x2c0
[  342.405864][ T8985]  ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10
[  342.405900][ T8985]  bdev_file_open_by_dev+0x181/0x240
[  342.405932][ T8985]  setup_bdev_super+0x5a/0x5b0
[  342.405960][ T8985]  get_tree_bdev_flags+0x366/0x4d0
[  342.405986][ T8985]  ? __pfx_vxfs_fill_super+0x10/0x10
[  342.406011][ T8985]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  342.406048][ T8985]  vfs_get_tree+0x92/0x2b0
[  342.406075][ T8985]  do_new_mount+0x2a2/0xa30
[  342.406106][ T8985]  ? ns_capable+0x8a/0xf0
[  342.406124][ T8985]  ? __pfx_do_new_mount+0x10/0x10
[  342.406149][ T8985]  ? path_mount+0x61c/0xfe0
[  342.406174][ T8985]  ? user_path_at+0x44/0x60
[  342.406203][ T8985]  __se_sys_mount+0x317/0x410
[  342.406237][ T8985]  ? __pfx___se_sys_mount+0x10/0x10
[  342.406261][ T8985]  ? rcu_is_watching+0x15/0xb0
[  342.406285][ T8985]  ? do_syscall_64+0xbe/0x3b0
[  342.406302][ T8985]  ? __x64_sys_mount+0x20/0xc0
[  342.406331][ T8985]  do_syscall_64+0xfa/0x3b0
[  342.406348][ T8985]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.406381][ T8985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.406400][ T8985]  ? clear_bhb_loop+0x60/0xb0
[  342.406423][ T8985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.406441][ T8985] RIP: 0033:0x7fd6db38ebe9
[  342.406457][ T8985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.406479][ T8985] RSP: 002b:00007fd6dc182038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  342.406499][ T8985] RAX: ffffffffffffffda RBX: 00007fd6db5b5fa0 RCX: 00007fd6db38ebe9
[  342.406514][ T8985] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000240
[  342.406527][ T8985] RBP: 00007fd6dc182090 R08: 0000000000000000 R09: 0000000000000000
[  342.406538][ T8985] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002
[  342.406550][ T8985] R13: 00007fd6db5b6038 R14: 00007fd6db5b5fa0 R15: 00007ffe80c6f318
[  342.406581][ T8985]  </TASK>
[  342.406999][ T8985] /dev/nullb0: Can't open blockdev
[  342.697382][ T8921] chnl_net:caif_netlink_parms(): no params data found
[  342.745610][  T998] tipc: Left network mode
[  342.972036][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'.
[  342.982952][ T8988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.730'.
[  343.187558][ T5984] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  343.251397][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.264862][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.272577][ T8921] bridge_slave_0: entered allmulticast mode
[  343.283173][ T8921] bridge_slave_0: entered promiscuous mode
[  343.292446][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.297762][ T5881] Bluetooth: hci1: command tx timeout
[  343.300795][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.312584][ T8921] bridge_slave_1: entered allmulticast mode
[  343.320753][ T8921] bridge_slave_1: entered promiscuous mode
[  343.344479][ T5984] usb 2-1: device descriptor read/64, error -71
[  343.468865][ T8921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.490969][  T998] hsr_slave_0: left promiscuous mode
[  343.498065][  T998] hsr_slave_1: left promiscuous mode
[  343.505124][  T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  343.513552][  T998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  343.522189][  T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.530576][  T998] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.713634][ T5984] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  343.877408][  T998] veth1_macvtap: left promiscuous mode
[  343.882160][ T5984] usb 2-1: device descriptor read/64, error -71
[  343.883457][  T998] veth0_macvtap: left promiscuous mode
[  343.895144][  T998] veth1_vlan: left promiscuous mode
[  343.900620][  T998] veth0_vlan: left promiscuous mode
[  344.031643][ T5984] usb usb2-port1: attempt power cycle
[  344.438138][ T5984] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  344.509339][ T5984] usb 2-1: device descriptor read/8, error -71
[  345.447831][ T5881] Bluetooth: hci1: command tx timeout
[  345.470699][ T5984] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  346.126670][ T5984] usb 2-1: device descriptor read/8, error -71
[  346.267219][ T5984] usb usb2-port1: unable to enumerate USB device
[  347.160076][ T9024] loop0: detected capacity change from 0 to 40427
[  347.168968][ T9024] f2fs: Unknown parameter 'whint_mode'
[  347.285050][  T998] team0 (unregistering): Port device team_slave_1 removed
[  347.351135][  T998] team0 (unregistering): Port device team_slave_0 removed
[  347.784834][ T8921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.800266][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.922300][ T8921] team0: Port device team_slave_0 added
[  347.985397][ T8921] team0: Port device team_slave_1 added
[  348.212150][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.233569][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.291665][ T8921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.323141][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.366753][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.415030][ T8921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.514659][ T9051] loop0: detected capacity change from 0 to 256
[  348.657219][ T8921] hsr_slave_0: entered promiscuous mode
[  348.671952][ T8921] hsr_slave_1: entered promiscuous mode
[  348.708961][ T8921] debugfs: 'hsr0' already exists in 'hsr'
[  348.745289][ T8921] Cannot create hsr debugfs directory
[  348.822913][ T9057] hub 8-0:1.0: USB hub found
[  348.823223][ T9057] hub 8-0:1.0: 1 port detected
[  350.411006][ T9072] loop2: detected capacity change from 0 to 1024
[  350.429194][ T9072] EXT4-fs: Ignoring removed bh option
[  350.434659][ T9072] EXT4-fs: inline encryption not supported
[  350.451717][ T9072] EXT4-fs: Ignoring removed orlov option
[  350.482490][ T9072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  350.494831][ T9072] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  350.549439][ T9072] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e028, mo2=0000]
[  350.574588][ T9072] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.757: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 2, max 0(0), depth 0(0)
[  350.632755][ T9072] EXT4-fs (loop2): Remounting filesystem read-only
[  350.654525][ T9072] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  350.684752][ T9072] EXT4-fs (loop2): mount failed
[  351.385807][ T9080] syz.4.759 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  352.981005][ T9093] loop0: detected capacity change from 0 to 2048
[  353.012525][ T9094] loop2: detected capacity change from 0 to 256
[  353.029925][ T9094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  353.046467][ T9093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.104316][ T9093] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.161844][ T9093] ext4: Unknown parameter '�'
[  355.059481][ T9098] ext4: Unknown parameter '�cQ��k�w&$��`_n߉��c[ϿO�3��>�'
[  356.716493][ T5862] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /149/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  356.850112][ T5862] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  356.885842][ T5862] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  356.953625][ T8348] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.056101][ T9135] loop1: detected capacity change from 0 to 256
[  357.071044][ T9135] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  357.083813][ T9135] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  357.343576][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.534145][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.609930][ T8921] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  357.746423][   T30] audit: type=1326 audit(1755133917.769:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  357.851980][ T9147] loop1: detected capacity change from 0 to 256
[  357.858796][   T30] audit: type=1326 audit(1755133917.769:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  357.899450][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.930576][ T8921] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  358.190268][ T9147] FAT-fs (loop1): Directory bread(block 64) failed
[  358.286960][ T9147] FAT-fs (loop1): Directory bread(block 65) failed
[  358.372591][ T9147] FAT-fs (loop1): Directory bread(block 66) failed
[  358.459054][ T9147] FAT-fs (loop1): Directory bread(block 67) failed
[  358.578861][ T9147] FAT-fs (loop1): Directory bread(block 68) failed
[  358.607709][ T9147] FAT-fs (loop1): Directory bread(block 69) failed
[  358.617829][ T9147] FAT-fs (loop1): Directory bread(block 70) failed
[  358.624373][ T9147] FAT-fs (loop1): Directory bread(block 71) failed
[  358.668533][ T9147] FAT-fs (loop1): Directory bread(block 72) failed
[  358.685513][ T9147] FAT-fs (loop1): Directory bread(block 73) failed
[  358.907794][   T30] audit: type=1326 audit(1755133917.769:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  358.930213][   T30] audit: type=1326 audit(1755133917.769:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  358.981072][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  358.994892][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  359.003141][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  359.011236][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  359.573100][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  359.621813][ T8921] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  359.732897][ T8921] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  359.778313][ T1151] bridge0: port 3(netdevsim0) entered disabled state
[  359.835370][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  359.858187][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  359.885805][ T1151] bridge0: port 3(netdevsim0) entered disabled state
[  359.916062][   T30] audit: type=1326 audit(1755133917.769:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  359.944271][   T30] audit: type=1326 audit(1755133917.769:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  360.052669][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.083254][   T30] audit: type=1326 audit(1755133917.769:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  360.161084][   T30] audit: type=1326 audit(1755133917.769:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  360.260246][ T9152] lo speed is unknown, defaulting to 1000
[  360.277714][   T30] audit: type=1326 audit(1755133917.769:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9142 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  360.309051][   T30] audit: type=1326 audit(1755133918.129:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9149 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  360.569962][ T8921] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.595917][ T8921] 8021q: adding VLAN 0 to HW filter on device team0
[  360.685558][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.692887][ T6285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.320495][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.328238][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.472062][ T1151] bridge_slave_1: left allmulticast mode
[  361.486306][ T1151] bridge_slave_1: left promiscuous mode
[  361.500902][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.529918][ T1151] bridge_slave_0: left allmulticast mode
[  361.535694][ T1151] bridge_slave_0: left promiscuous mode
[  361.563095][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.618391][ T5881] Bluetooth: hci0: command tx timeout
[  361.851963][ T9189] overlayfs: missing 'lowerdir'
[  362.920015][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.943685][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.959754][ T1151] bond0 (unregistering): Released all slaves
[  363.031247][ T9194] bridge: RTM_NEWNEIGH with invalid ether address
[  363.412617][ T9152] chnl_net:caif_netlink_parms(): no params data found
[  363.808997][ T5881] Bluetooth: hci0: command tx timeout
[  363.942503][ T1151] tipc: Left network mode
[  365.762429][ T9152] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.779437][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.786718][ T9152] bridge_slave_0: entered allmulticast mode
[  365.813224][ T9152] bridge_slave_0: entered promiscuous mode
[  365.865858][ T5881] Bluetooth: hci0: command tx timeout
[  365.886724][ T8921] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.897194][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.907158][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.914584][ T9152] bridge_slave_1: entered allmulticast mode
[  365.923267][ T9152] bridge_slave_1: entered promiscuous mode
[  365.983041][ T9152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.034173][ T9237] loop2: detected capacity change from 0 to 2048
[  366.069760][ T9237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  366.082492][ T9237] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.108997][ T9152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.204766][ T9152] team0: Port device team_slave_0 added
[  366.223341][ T9152] team0: Port device team_slave_1 added
[  366.342216][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.002179][ T1151] hsr_slave_0: left promiscuous mode
[  367.018909][ T1151] hsr_slave_1: left promiscuous mode
[  367.033627][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.046254][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  367.067440][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.074954][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.117901][ T1151] veth1_macvtap: left promiscuous mode
[  367.123484][ T1151] veth0_macvtap: left promiscuous mode
[  367.129242][ T1151] veth1_vlan: left promiscuous mode
[  367.134574][ T1151] veth0_vlan: left promiscuous mode
[  367.157639][  T979] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  367.329851][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.347311][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.359584][  T979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  367.372559][  T979] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  367.381998][  T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.393910][  T979] usb 3-1: config 0 descriptor??
[  367.721825][ T1151] team0 (unregistering): Port device team_slave_1 removed
[  367.776131][ T1151] team0 (unregistering): Port device team_slave_0 removed
[  367.808531][  T979] plantronics 0003:047F:FFFF.0013: unbalanced collection at end of report description
[  367.819227][  T979] plantronics 0003:047F:FFFF.0013: parse failed
[  367.825732][  T979] plantronics 0003:047F:FFFF.0013: probe with driver plantronics failed with error -22
[  367.937882][ T5881] Bluetooth: hci0: command tx timeout
[  368.012300][  T979] usb 3-1: USB disconnect, device number 17
[  368.491822][ T9152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.506903][ T9152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.535895][ T9152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.577321][ T9152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.598326][ T9152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.630333][ T9152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.609217][ T9152] hsr_slave_0: entered promiscuous mode
[  369.648886][ T9152] hsr_slave_1: entered promiscuous mode
[  370.220763][ T9279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.821'.
[  370.796904][ T8921] veth0_vlan: entered promiscuous mode
[  371.200930][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  371.200970][   T30] audit: type=1326 audit(1755133931.119:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.484935][   T30] audit: type=1326 audit(1755133931.259:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.584377][   T30] audit: type=1326 audit(1755133931.439:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.631372][   T30] audit: type=1326 audit(1755133931.439:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.654211][   T30] audit: type=1326 audit(1755133931.439:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.682652][   T30] audit: type=1326 audit(1755133931.449:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.741325][   T30] audit: type=1326 audit(1755133931.449:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.807584][   T30] audit: type=1326 audit(1755133931.449:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.835027][   T30] audit: type=1326 audit(1755133931.449:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.871940][   T30] audit: type=1326 audit(1755133931.449:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2d938ebe9 code=0x7ffc0000
[  371.962982][ T8921] veth1_vlan: entered promiscuous mode
[  372.120625][ T8921] veth0_macvtap: entered promiscuous mode
[  372.144328][ T8921] veth1_macvtap: entered promiscuous mode
[  372.236512][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.476551][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.548255][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.560567][ T6285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.639520][ T6285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.654173][ T6285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.846029][ T9152] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  372.949636][ T9152] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  372.988087][ T9152] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  373.033996][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.051531][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.065731][ T9152] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  373.819973][ T6152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.843082][ T6152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.795182][ T9152] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.081619][ T9152] 8021q: adding VLAN 0 to HW filter on device team0
[  375.112433][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.119656][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.788496][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.795759][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.096524][ T9356] loop2: detected capacity change from 0 to 512
[  376.969311][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  376.969328][   T30] audit: type=1326 audit(1755133936.999:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  377.068477][   T30] audit: type=1326 audit(1755133937.029:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  377.116961][   T30] audit: type=1326 audit(1755133937.029:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  377.186317][   T30] audit: type=1326 audit(1755133937.029:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  377.210355][   T30] audit: type=1326 audit(1755133937.029:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  377.256879][ T9152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.264691][   T30] audit: type=1326 audit(1755133937.029:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  377.294213][   T30] audit: type=1326 audit(1755133937.029:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6db38d550 code=0x7ffc0000
[  377.455791][   T30] audit: type=1326 audit(1755133937.029:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  377.770203][ T9386] loop2: detected capacity change from 0 to 512
[  377.838192][ T9386] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  377.973705][ T9386] EXT4-fs (loop2): 1 truncate cleaned up
[  377.994602][ T9386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.218151][ T9386] EXT4-fs error (device loop2): __ext4_iget:5464: inode #12: block 2: comm syz.2.851: invalid block
[  378.294979][ T9386] EXT4-fs error (device loop2): __ext4_iget:5464: inode #12: block 2: comm syz.2.851: invalid block
[  378.338338][ T9386] overlay: ./file1 is not a directory
[  378.581564][   T30] audit: type=1326 audit(1755133937.039:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  378.642653][   T30] audit: type=1326 audit(1755133937.039:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  378.728166][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  378.734696][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  378.809871][ T9380] lo speed is unknown, defaulting to 1000
[  378.865742][ T9383] lo speed is unknown, defaulting to 1000
[  379.429969][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.719684][ T9395] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  379.745385][ T9398] loop2: detected capacity change from 0 to 2048
[  379.751745][ T9395] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  379.829974][ T9398] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  379.923676][ T9152] veth0_vlan: entered promiscuous mode
[  380.010486][ T9152] veth1_vlan: entered promiscuous mode
[  380.617187][ T9152] veth0_macvtap: entered promiscuous mode
[  380.758094][ T9152] veth1_macvtap: entered promiscuous mode
[  380.779178][ T9152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.791279][ T9152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.871423][ T6152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.908134][ T6152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.937265][ T6152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.946296][ T6152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.687642][ T6152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.705095][ T6152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.774246][ T6152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.845116][ T6152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.853559][ T9419] loop2: detected capacity change from 0 to 1024
[  381.876176][ T9419] EXT4-fs: Ignoring removed orlov option
[  381.943764][ T9419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.104386][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  382.104404][   T30] audit: type=1804 audit(1755133942.129:188): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.862" name="/newroot/191/bus/bus" dev="loop2" ino=18 res=1 errno=0
[  382.347322][ T9434] loop5: detected capacity change from 0 to 16
[  382.380938][ T9420] lo speed is unknown, defaulting to 1000
[  382.413470][ T9434] erofs (device loop5): negative i_size @ nid 36
[  382.800074][ T9440] loop3: detected capacity change from 0 to 512
[  383.649892][ T9440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  383.668526][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.623130][  T982] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  384.660378][ T9440] EXT4-fs (loop3): 1 truncate cleaned up
[  384.667872][ T9440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.822859][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8
[  384.847312][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33032, setting to 1024
[  384.854751][ T9447] loop2: detected capacity change from 0 to 1024
[  384.872391][  T982] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  384.888750][  T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.903194][  T982] usb 6-1: config 0 descriptor??
[  384.916842][ T9447] EXT4-fs: Ignoring removed orlov option
[  384.961056][  T927] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  384.972113][ T9447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.044436][   T30] audit: type=1804 audit(1755133945.069:189): pid=9447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.869" name="/newroot/192/bus/bus" dev="loop2" ino=18 res=1 errno=0
[  385.142246][  T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.166335][  T927] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[  385.180674][  T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.206955][  T927] usb 4-1: config 0 descriptor??
[  385.345755][  T982] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor
[  385.361057][  T982] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0014/input/input22
[  385.484895][  T982] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  385.545400][    C0] usb 6-1: input irq status -75 received
[  385.793122][  T979] usb 6-1: USB disconnect, device number 2
[  385.979422][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.962387][  T927] usbhid 4-1:0.0: can't add hid device: -71
[  386.992118][  T927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  387.038876][ T8921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.065510][  T927] usb 4-1: USB disconnect, device number 29
[  388.560757][   T30] audit: type=1107 audit(1755133948.579:190): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  389.447881][ T9499] loop2: detected capacity change from 0 to 128
[  390.422380][ T9502] overlayfs: failed to clone upperpath
[  390.466805][ T9506] cgroup: Unknown subsys name 'cpuset'
[  390.476963][ T9506] binder: 9500:9506 ioctl 4018620d 0 returned -22
[  391.991635][ T9499] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  392.263184][ T9499] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  392.691147][ T5874] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  393.011983][ T9522] loop5: detected capacity change from 0 to 512
[  393.070367][ T9522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  393.102950][ T9522] EXT4-fs (loop5): orphan cleanup on readonly fs
[  393.122784][ T9522] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[  393.132990][ T9522] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  393.142707][ T9522] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.893: Failed to acquire dquot type 1
[  393.191325][ T9522] EXT4-fs (loop5): 1 truncate cleaned up
[  393.219304][ T9522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  395.463496][ T9152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.609108][ T9541] loop2: detected capacity change from 0 to 512
[  395.671672][ T9541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  395.717304][ T9541] EXT4-fs (loop2): orphan cleanup on readonly fs
[  395.763921][ T9541] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.899: bg 0: block 248: padding at end of block bitmap is not set
[  395.823520][ T9541] Quota error (device loop2): write_blk: dquota write failed
[  395.831504][ T9541] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  395.841780][ T9541] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.899: Failed to acquire dquot type 1
[  395.870684][ T9541] EXT4-fs (loop2): 1 truncate cleaned up
[  396.013820][ T9541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  397.939463][ T9556] loop5: detected capacity change from 0 to 256
[  397.950135][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.053797][ T9556] FAT-fs (loop5): Directory bread(block 64) failed
[  398.071774][ T9556] FAT-fs (loop5): Directory bread(block 65) failed
[  398.103602][ T9556] FAT-fs (loop5): Directory bread(block 66) failed
[  398.128969][ T9556] FAT-fs (loop5): Directory bread(block 67) failed
[  398.147221][ T9558] loop2: detected capacity change from 0 to 256
[  398.150395][ T9556] FAT-fs (loop5): Directory bread(block 68) failed
[  398.162138][ T9558] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  398.172869][ T9558] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  398.193604][ T9556] FAT-fs (loop5): Directory bread(block 69) failed
[  398.204659][ T9558] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  398.216220][ T9556] FAT-fs (loop5): Directory bread(block 70) failed
[  398.246360][ T9556] FAT-fs (loop5): Directory bread(block 71) failed
[  398.273332][ T9556] FAT-fs (loop5): Directory bread(block 72) failed
[  398.311701][ T9556] FAT-fs (loop5): Directory bread(block 73) failed
[  398.855233][   T30] audit: type=1107 audit(1755133958.799:191): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  399.573141][ T9573] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  401.525556][ T9598] loop3: detected capacity change from 0 to 512
[  401.615957][ T9598] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.920: iget: bad i_size value: 38620345925642
[  401.688644][ T9598] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.920: couldn't read orphan inode 15 (err -117)
[  401.749114][ T9598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.844992][ T9576] overlayfs: failed to clone upperpath
[  401.903689][ T6286] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.016551][ T8921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.165163][ T6286] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.381955][ T6286] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.600751][ T6286] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.610541][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  403.622786][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  403.632270][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  403.645871][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  403.655691][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  403.710787][ T6286] bridge_slave_1: left allmulticast mode
[  403.716474][ T6286] bridge_slave_1: left promiscuous mode
[  403.768165][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.916657][ T6286] bridge_slave_0: left allmulticast mode
[  403.946333][ T6286] bridge_slave_0: left promiscuous mode
[  403.966779][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.140701][ T9627] loop3: detected capacity change from 0 to 128
[  405.017750][ T9627] EXT4-fs (loop3): Test dummy encryption mode enabled
[  405.068284][ T9627] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  405.117651][ T9627] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  405.836424][ T5881] Bluetooth: hci0: command tx timeout
[  406.605078][ T8921] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  406.683840][   T30] audit: type=1107 audit(1755133966.709:192): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  407.518604][ T9650] loop3: detected capacity change from 0 to 256
[  407.799577][ T9650] FAT-fs (loop3): Directory bread(block 64) failed
[  407.806351][ T9650] FAT-fs (loop3): Directory bread(block 65) failed
[  407.813810][ T9650] FAT-fs (loop3): Directory bread(block 66) failed
[  407.820576][ T9650] FAT-fs (loop3): Directory bread(block 67) failed
[  407.828211][ T9650] FAT-fs (loop3): Directory bread(block 68) failed
[  407.834908][ T9650] FAT-fs (loop3): Directory bread(block 69) failed
[  407.843974][ T9650] FAT-fs (loop3): Directory bread(block 70) failed
[  407.850824][ T9650] FAT-fs (loop3): Directory bread(block 71) failed
[  407.858408][ T9650] FAT-fs (loop3): Directory bread(block 72) failed
[  407.865214][ T9650] FAT-fs (loop3): Directory bread(block 73) failed
[  407.952651][ T5881] Bluetooth: hci0: command tx timeout
[  410.018543][ T5880] Bluetooth: hci0: command tx timeout
[  410.461695][ T6286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.478129][ T6286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.489263][ T6286] bond0 (unregistering): Released all slaves
[  410.518474][   T30] audit: type=1107 audit(1755133970.539:193): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  410.541591][ T9659] tipc: Invalid UDP bearer configuration
[  410.541675][ T9659] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  410.645871][ T9619] lo speed is unknown, defaulting to 1000
[  410.759923][   T30] audit: type=1326 audit(1755133970.779:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9668 comm="syz.3.942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fd258ebe9 code=0x0
[  410.907658][ T9674] binder: 9670:9674 ioctl c0306201 200000000180 returned -22
[  412.097753][ T5880] Bluetooth: hci0: command tx timeout
[  412.234968][ T6286] hsr_slave_0: left promiscuous mode
[  412.276903][ T6286] hsr_slave_1: left promiscuous mode
[  412.301444][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.329606][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.368612][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.396411][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.515690][ T6286] veth1_macvtap: left promiscuous mode
[  412.556634][ T6286] veth0_macvtap: left promiscuous mode
[  412.567296][ T6286] veth1_vlan: left promiscuous mode
[  412.597213][ T6286] veth0_vlan: left promiscuous mode
[  414.351374][ T9700] loop2: detected capacity change from 0 to 1024
[  414.378530][ T9700] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[  414.516221][   T30] audit: type=1107 audit(1755133974.519:195): pid=9695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  414.947213][ T9700] loop2: detected capacity change from 0 to 1024
[  414.956468][ T9700] EXT4-fs: Ignoring removed bh option
[  415.091199][ T9700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  415.183939][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  415.332156][ T9714] loop2: detected capacity change from 0 to 4096
[  415.347402][ T9714] EXT4-fs (loop2): Test dummy encryption mode enabled
[  415.381684][ T9714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.588815][ T9714] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  415.733459][ T6286] team0 (unregistering): Port device team_slave_1 removed
[  415.744744][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.810156][ T9716] loop3: detected capacity change from 0 to 40427
[  415.838414][ T9716] f2fs: Unknown parameter 'whint_mode'
[  415.895679][ T6286] team0 (unregistering): Port device team_slave_0 removed
[  417.074280][ T9733] loop2: detected capacity change from 0 to 512
[  417.175077][ T9733] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  417.214259][ T9733] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  417.245141][ T9733] EXT4-fs (loop2): 1 truncate cleaned up
[  417.271350][ T9733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.824787][ T9733] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  418.538251][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.623893][ T9748] loop2: detected capacity change from 0 to 256
[  418.656518][ T9748] FAT-fs (loop2): Directory bread(block 64) failed
[  418.665502][ T9748] FAT-fs (loop2): Directory bread(block 65) failed
[  418.673036][ T9748] FAT-fs (loop2): Directory bread(block 66) failed
[  418.684978][ T9748] FAT-fs (loop2): Directory bread(block 67) failed
[  418.718533][ T9748] FAT-fs (loop2): Directory bread(block 68) failed
[  418.725190][ T9748] FAT-fs (loop2): Directory bread(block 69) failed
[  418.725969][ T9692] netlink: 96 bytes leftover after parsing attributes in process `syz.1.950'.
[  418.732076][ T9748] FAT-fs (loop2): Directory bread(block 70) failed
[  418.747577][ T9748] FAT-fs (loop2): Directory bread(block 71) failed
[  418.754823][ T9748] FAT-fs (loop2): Directory bread(block 72) failed
[  418.761769][ T9748] FAT-fs (loop2): Directory bread(block 73) failed
[  419.644888][   T30] audit: type=1107 audit(1755133979.359:196): pid=9747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  420.184045][ T9619] chnl_net:caif_netlink_parms(): no params data found
[  420.255379][ T9762] overlayfs: failed to resolve './file0': -2
[  421.403990][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.432925][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.440387][ T9619] bridge_slave_0: entered allmulticast mode
[  421.468182][ T9619] bridge_slave_0: entered promiscuous mode
[  421.492076][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.510694][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.557812][ T9619] bridge_slave_1: entered allmulticast mode
[  421.565627][ T9619] bridge_slave_1: entered promiscuous mode
[  421.770492][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.800277][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.525698][ T9619] team0: Port device team_slave_0 added
[  422.559690][ T9619] team0: Port device team_slave_1 added
[  422.682071][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.716378][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.835640][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.932314][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.939571][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.967669][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.292757][ T9619] hsr_slave_0: entered promiscuous mode
[  424.333960][ T9619] hsr_slave_1: entered promiscuous mode
[  425.368170][   T30] audit: type=1326 audit(1755133985.369:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  425.424914][   T30] audit: type=1326 audit(1755133985.369:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  425.522058][ T9619] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  425.531531][   T30] audit: type=1326 audit(1755133985.369:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  425.554988][   T30] audit: type=1326 audit(1755133985.369:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  425.601562][ T9619] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  425.613791][   T30] audit: type=1326 audit(1755133985.369:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  425.637585][   T30] audit: type=1326 audit(1755133985.369:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  425.753075][ T9619] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  425.768392][   T30] audit: type=1326 audit(1755133985.379:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  425.795151][ T9619] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  425.860929][ T9833] loop2: detected capacity change from 0 to 1024
[  425.869516][ T9833] EXT4-fs: Ignoring removed i_version option
[  425.883268][ T9833] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  425.935820][   T30] audit: type=1326 audit(1755133985.379:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.2.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6db38ebe9 code=0x7ffc0000
[  425.989440][ T9833] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.991: Invalid block bitmap block 0 in block_group 0
[  426.011178][ T9833] Quota error (device loop2): write_blk: dquota write failed
[  426.019820][ T9833] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  426.030221][ T9833] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.991: Failed to acquire dquot type 0
[  426.082988][ T9833] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.991: Freeing blocks not in datazone - block = 0, count = 4096
[  426.103161][ T9833] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.991: Invalid inode bitmap blk 0 in block_group 0
[  426.117520][ T9833] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  426.127721][ T9833] EXT4-fs (loop2): 1 orphan inode deleted
[  426.145889][ T9833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.852871][ T5880] Bluetooth: hci4: command 0x0405 tx timeout
[  426.890689][ T6286] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  428.023500][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.148623][ T9619] 8021q: adding VLAN 0 to HW filter on device team0
[  428.233676][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.240925][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.286402][ T9825] loop3: detected capacity change from 0 to 40427
[  428.348305][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.355520][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.389936][ T9825] F2FS-fs (loop3): Image doesn't support compression
[  428.407838][ T9825] F2FS-fs (loop3): build fault injection rate: 691
[  428.479474][ T9825] F2FS-fs (loop3): invalid crc value
[  428.488839][ T9825] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4)
[  429.722102][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.481634][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.661275][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.760510][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.928455][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.986194][ T9619] veth0_vlan: entered promiscuous mode
[  431.130332][ T9894] syzkaller0: entered promiscuous mode
[  431.135946][ T9894] syzkaller0: entered allmulticast mode
[  431.159902][ T9619] veth1_vlan: entered promiscuous mode
[  431.425252][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  431.436778][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  431.468569][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  431.483499][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  431.494002][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  432.835473][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.618534][ T5881] Bluetooth: hci2: command tx timeout
[  433.957823][ T9901] lo speed is unknown, defaulting to 1000
[  433.971315][ T9619] veth0_macvtap: entered promiscuous mode
[  434.010965][ T9619] veth1_macvtap: entered promiscuous mode
[  434.056005][   T49] bridge_slave_1: left allmulticast mode
[  434.063835][   T49] bridge_slave_1: left promiscuous mode
[  434.069949][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.080534][   T49] bridge_slave_0: left allmulticast mode
[  434.086299][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  434.086315][   T30] audit: type=1326 audit(1755133994.109:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  434.189134][   T49] bridge_slave_0: left promiscuous mode
[  434.195137][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.206271][   T30] audit: type=1326 audit(1755133994.109:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  434.233581][   T30] audit: type=1326 audit(1755133994.109:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  434.266037][ T9926] loop3: detected capacity change from 0 to 16
[  434.282317][   T30] audit: type=1326 audit(1755133994.109:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  434.302154][ T9926] erofs: Unknown parameter 'w_�~�{6I�c'
[  434.312143][   T30] audit: type=1326 audit(1755133994.109:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  435.127634][   T30] audit: type=1326 audit(1755133994.109:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  435.189414][   T30] audit: type=1326 audit(1755133994.109:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  435.287188][   T30] audit: type=1326 audit(1755133994.109:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  435.343676][   T30] audit: type=1326 audit(1755133994.109:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  435.384443][   T30] audit: type=1326 audit(1755133994.119:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd258ebe9 code=0x7ffc0000
[  435.704949][ T5881] Bluetooth: hci2: command tx timeout
[  436.777905][ T5939] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  436.957559][ T5939] usb 3-1: Using ep0 maxpacket: 32
[  436.982001][ T5939] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8
[  436.997572][ T5939] usb 3-1: config 1 interface 0 has no altsetting 0
[  437.020729][ T5939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  437.030280][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.057969][ T5939] usb 3-1: Product: 뚎耷ᔰ⩅ኲ҆汽௏㩡铳礒탪ꈤ셱Ｒ䵴﬩鬫鍜₊놙ퟳ융肏◿⸨釦必ᓬ滘⭘ाᕮ醄耶凥䨅튷⦝
[  437.082655][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.091520][ T5939] usb 3-1: Manufacturer: ఉ
[  437.096340][ T5939] usb 3-1: SerialNumber: Ж
[  437.111708][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  437.119676][ T9941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  437.140324][   T49] bond0 (unregistering): Released all slaves
[  437.241357][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.302621][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.359075][ T5939] usb 3-1: USB disconnect, device number 18
[  437.433823][ T6285] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.450138][ T6285] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.666543][ T6285] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.797103][ T5881] Bluetooth: hci2: command tx timeout
[  438.381051][   T49] hsr_slave_0: left promiscuous mode
[  438.437611][   T49] hsr_slave_1: left promiscuous mode
[  438.443657][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  438.473806][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  438.492945][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  438.524888][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  438.573674][   T49] veth1_macvtap: left promiscuous mode
[  438.593922][   T49] veth0_macvtap: left promiscuous mode
[  438.628277][   T49] veth1_vlan: left promiscuous mode
[  438.633673][   T49] veth0_vlan: left promiscuous mode
[  438.820218][ T9962] overlayfs: failed to clone upperpath
[  439.742049][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  439.742067][   T30] audit: type=1326 audit(1755133999.769:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6db38ebe9 code=0x0
[  439.858199][ T5881] Bluetooth: hci2: command tx timeout
[  440.111084][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  440.119497][   T49] team0 (unregistering): Port device team_slave_1 removed
[  440.126726][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  440.186811][   T49] team0 (unregistering): Port device team_slave_0 removed
[  440.792757][ T9985] loop3: detected capacity change from 0 to 512
[  440.804767][ T9985] ext4: Unknown parameter 'nouser_xattr'
[  441.446635][  T998] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.499180][  T982] lo speed is unknown, defaulting to 1000
[  441.524174][  T982] infiniband syz2: ib_query_port failed (-19)
[  441.585481][ T9970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  441.919737][  T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.940404][  T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.174014][ T6689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.227564][ T6689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.343583][ T9901] chnl_net:caif_netlink_parms(): no params data found
[  442.475656][T10017] loop6: detected capacity change from 0 to 512
[  442.483103][T10017] EXT4-fs: Conflicting test_dummy_encryption options
[  442.600004][T10019] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  444.426180][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.444554][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.453419][ T9901] bridge_slave_0: entered allmulticast mode
[  444.468948][ T9901] bridge_slave_0: entered promiscuous mode
[  444.493050][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.511442][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.524359][ T9901] bridge_slave_1: entered allmulticast mode
[  444.539069][ T9901] bridge_slave_1: entered promiscuous mode
[  444.952680][ T9901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.522574][ T9901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.810285][ T9901] team0: Port device team_slave_0 added
[  445.839302][ T9901] team0: Port device team_slave_1 added
[  446.888970][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.908381][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.934498][ T9901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.079697][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.117555][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.175692][ T9901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.404514][ T9901] hsr_slave_0: entered promiscuous mode
[  447.419159][ T9901] hsr_slave_1: entered promiscuous mode
[  447.434266][T10076] loop6: detected capacity change from 0 to 128
[  447.434317][ T9901] debugfs: 'hsr0' already exists in 'hsr'
[  447.447413][ T9901] Cannot create hsr debugfs directory
[  447.477357][T10076] EXT4-fs (loop6): Test dummy encryption mode enabled
[  447.527411][T10076] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  447.560710][T10076] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  447.622100][T10076] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  447.966746][T10076] overlayfs: failed to resolve './file0': -2
[  448.550152][ T9901] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  448.592510][ T9901] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  448.622909][ T9901] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  448.635287][ T9619] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  448.672640][ T9901] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  449.039610][ T9901] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.070023][T10087] loop3: detected capacity change from 0 to 40427
[  449.086605][ T9901] 8021q: adding VLAN 0 to HW filter on device team0
[  449.097413][T10087] F2FS-fs (loop3): Image doesn't support compression
[  449.116970][T10087] F2FS-fs (loop3): invalid crc value
[  449.132487][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.139862][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.176904][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.184207][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.360297][T10087] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  449.518198][T10087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  450.136408][ T9901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.438417][T10122] loop2: detected capacity change from 0 to 128
[  450.458662][T10122] vfat: Bad value for 'gid'
[  450.463378][T10122] vfat: Bad value for 'gid'
[  452.110102][T10134] loop2: detected capacity change from 0 to 256
[  452.316157][ T9901] veth0_vlan: entered promiscuous mode
[  452.364286][ T9901] veth1_vlan: entered promiscuous mode
[  452.471212][ T9901] veth0_macvtap: entered promiscuous mode
[  452.495966][ T9901] veth1_macvtap: entered promiscuous mode
[  452.547829][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.782766][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.063073][T10151] overlayfs: failed to clone upperpath
[  453.318788][ T1348] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.393967][ T1348] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.462633][ T1348] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.501466][ T1348] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.902782][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.929565][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.967887][T10166] loop3: detected capacity change from 0 to 512
[  453.988332][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.008171][T10166] EXT4-fs: Conflicting test_dummy_encryption options
[  454.021852][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.417002][T10184] loop2: detected capacity change from 0 to 256
[  455.478057][T10184] debugfs: Bad value for 'mode'
[  455.680648][T10192] usb usb7: usbfs: process 10192 (syz.7.1093) did not claim interface 0 before use
[  455.694596][T10192] usb usb7: usbfs: process 10192 (syz.7.1093) did not claim interface 0 before use
[  456.822546][T10207] input: syz1 as /devices/virtual/input/input23
[  457.309168][T10217] loop7: detected capacity change from 0 to 2048
[  457.391513][T10217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.412649][T10217] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.633437][ T9901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.271941][T10250] loop3: detected capacity change from 0 to 16
[  459.320343][T10250] erofs (device loop3): mounted with root inode @ nid 36.
[  460.479096][T10258] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  460.502362][T10258] erofs (device loop3): failed to decompress -3 in[47, 4049] out[1851]
[  460.511392][T10258] erofs (device loop3): read error -117 @ 43 of nid 36
[  461.353017][ T5939] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  461.367111][ T5939] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  461.392641][T10251] loop7: detected capacity change from 0 to 40427
[  461.400384][T10251] F2FS-fs: heap/no_heap options were deprecated
[  461.406832][T10251] f2fs: Unknown parameter 'discrd'
[  461.954828][T10251] ./file0: Can't lookup blockdev
[  462.667995][ T5880] Bluetooth: hci1: command 0x0406 tx timeout
[  462.763353][T10284] 
[  462.765764][T10284] ======================================================
[  462.772780][T10284] WARNING: possible circular locking dependency detected
[  462.779797][T10284] 6.17.0-rc1-next-20250812-syzkaller #0 Not tainted
[  462.786370][T10284] ------------------------------------------------------
[  462.793386][T10284] syz.3.1125/10284 is trying to acquire lock:
[  462.799866][T10284] ffff88801b2ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450
[  462.810138][T10284] 
[  462.810138][T10284] but task is already holding lock:
[  462.817488][T10284] ffff888024ba62c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00
[  462.827259][T10284] 
[  462.827259][T10284] which lock already depends on the new lock.
[  462.827259][T10284] 
[  462.837651][T10284] 
[  462.837651][T10284] the existing dependency chain (in reverse order) is:
[  462.846653][T10284] 
[  462.846653][T10284] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}:
[  462.855252][T10284]        lock_acquire+0x120/0x360
[  462.860276][T10284]        blk_alloc_queue+0x538/0x620
[  462.865562][T10284]        __blk_mq_alloc_disk+0x15c/0x340
[  462.871178][T10284]        loop_add+0x411/0xad0
[  462.875843][T10284]        loop_init+0xd9/0x170
[  462.880511][T10284]        do_one_initcall+0x233/0x820
[  462.885791][T10284]        do_initcall_level+0x104/0x190
[  462.891245][T10284]        do_initcalls+0x59/0xa0
[  462.896079][T10284]        kernel_init_freeable+0x334/0x4b0
[  462.901784][T10284]        kernel_init+0x1d/0x1d0
[  462.906625][T10284]        ret_from_fork+0x3f9/0x770
[  462.911723][T10284]        ret_from_fork_asm+0x1a/0x30
[  462.917001][T10284] 
[  462.917001][T10284] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  462.924201][T10284]        lock_acquire+0x120/0x360
[  462.929224][T10284]        fs_reclaim_acquire+0x72/0x100
[  462.934673][T10284]        kmem_cache_alloc_noprof+0x44/0x3c0
[  462.940688][T10284]        __kernfs_iattrs+0xd9/0x320
[  462.945875][T10284]        kernfs_iop_setattr+0xea/0x3f0
[  462.951326][T10284]        notify_change+0xb33/0xe40
[  462.956426][T10284]        do_truncate+0x1a4/0x220
[  462.961370][T10284]        path_openat+0x306c/0x3830
[  462.966487][T10284]        do_filp_open+0x1fa/0x410
[  462.971504][T10284]        do_sys_openat2+0x121/0x1c0
[  462.976697][T10284]        __x64_sys_openat+0x138/0x170
[  462.982063][T10284]        do_syscall_64+0xfa/0x3b0
[  462.987080][T10284]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.993580][T10284] 
[  462.993580][T10284] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  463.002101][T10284]        validate_chain+0xb9b/0x2140
[  463.007391][T10284]        __lock_acquire+0xab9/0xd20
[  463.012598][T10284]        lock_acquire+0x120/0x360
[  463.017628][T10284]        down_read+0x46/0x2e0
[  463.022297][T10284]        kernfs_iop_getattr+0x9e/0x450
[  463.027754][T10284]        vfs_getattr_nosec+0x2e1/0x430
[  463.033214][T10284]        loop_assign_backing_file+0x222/0x400
[  463.039286][T10284]        lo_ioctl+0x1860/0x1d00
[  463.044137][T10284]        blkdev_ioctl+0x5a8/0x6d0
[  463.049168][T10284]        __se_sys_ioctl+0xfc/0x170
[  463.054275][T10284]        do_syscall_64+0xfa/0x3b0
[  463.059305][T10284]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.065714][T10284] 
[  463.065714][T10284] other info that might help us debug this:
[  463.065714][T10284] 
[  463.075924][T10284] Chain exists of:
[  463.075924][T10284]   &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24
[  463.075924][T10284] 
[  463.090442][T10284]  Possible unsafe locking scenario:
[  463.090442][T10284] 
[  463.098051][T10284]        CPU0                    CPU1
[  463.103427][T10284]        ----                    ----
[  463.109051][T10284]   lock(&q->q_usage_counter(io)#24);
[  463.114662][T10284]                                lock(fs_reclaim);
[  463.121165][T10284]                                lock(&q->q_usage_counter(io)#24);
[  463.129153][T10284]   rlock(&root->kernfs_iattr_rwsem);
[  463.134528][T10284] 
[  463.134528][T10284]  *** DEADLOCK ***
[  463.134528][T10284] 
[  463.142662][T10284] 3 locks held by syz.3.1125/10284:
[  463.147936][T10284]  #0: ffff888142b9f400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xfbf/0x1d00
[  463.156915][T10284]  #1: ffff888024ba62c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00
[  463.167108][T10284]  #2: ffff888024ba6300 (&q->q_usage_counter(queue)#22){+.+.}-{0:0}, at: lo_ioctl+0x17f2/0x1d00
[  463.177555][T10284] 
[  463.177555][T10284] stack backtrace:
[  463.183533][T10284] CPU: 0 UID: 0 PID: 10284 Comm: syz.3.1125 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) 
[  463.183556][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  463.183571][T10284] Call Trace:
[  463.183579][T10284]  <TASK>
[  463.183587][T10284]  dump_stack_lvl+0x189/0x250
[  463.183610][T10284]  ? __pfx_dump_stack_lvl+0x10/0x10
[  463.183629][T10284]  ? __pfx__printk+0x10/0x10
[  463.183656][T10284]  print_circular_bug+0x2ee/0x310
[  463.183676][T10284]  check_noncircular+0x134/0x160
[  463.183696][T10284]  validate_chain+0xb9b/0x2140
[  463.183713][T10284]  ? tomoyo_path_perm+0x1e3/0x4b0
[  463.183742][T10284]  __lock_acquire+0xab9/0xd20
[  463.183794][T10284]  ? kernfs_iop_getattr+0x9e/0x450
[  463.183811][T10284]  lock_acquire+0x120/0x360
[  463.183833][T10284]  ? kernfs_iop_getattr+0x9e/0x450
[  463.183854][T10284]  down_read+0x46/0x2e0
[  463.183871][T10284]  ? kernfs_iop_getattr+0x9e/0x450
[  463.183889][T10284]  kernfs_iop_getattr+0x9e/0x450
[  463.183908][T10284]  vfs_getattr_nosec+0x2e1/0x430
[  463.183925][T10284]  loop_assign_backing_file+0x222/0x400
[  463.183950][T10284]  ? __pfx_loop_assign_backing_file+0x10/0x10
[  463.183973][T10284]  ? schedule+0x91/0x360
[  463.184001][T10284]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  463.184023][T10284]  lo_ioctl+0x1860/0x1d00
[  463.184049][T10284]  ? __pfx_lo_ioctl+0x10/0x10
[  463.184073][T10284]  ? __lock_acquire+0xab9/0xd20
[  463.184098][T10284]  ? __lock_acquire+0xab9/0xd20
[  463.184125][T10284]  ? __lock_acquire+0xab9/0xd20
[  463.184152][T10284]  ? __lock_acquire+0xab9/0xd20
[  463.184182][T10284]  ? is_bpf_text_address+0x26/0x2b0
[  463.184207][T10284]  ? is_bpf_text_address+0x292/0x2b0
[  463.184230][T10284]  ? is_bpf_text_address+0x26/0x2b0
[  463.184254][T10284]  ? kernel_text_address+0xa5/0xe0
[  463.184277][T10284]  ? __kernel_text_address+0xd/0x40
[  463.184298][T10284]  ? unwind_get_return_address+0x4d/0x90
[  463.184317][T10284]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  463.184337][T10284]  ? arch_stack_walk+0xfc/0x150
[  463.184361][T10284]  ? stack_trace_save+0x9c/0xe0
[  463.184379][T10284]  ? __pfx_stack_trace_save+0x10/0x10
[  463.184398][T10284]  ? stack_depot_save_flags+0x40/0x860
[  463.184425][T10284]  ? kasan_save_track+0x4f/0x80
[  463.184444][T10284]  ? kasan_save_track+0x3e/0x80
[  463.184462][T10284]  ? kasan_save_free_info+0x46/0x50
[  463.184478][T10284]  ? __kasan_slab_free+0x5b/0x80
[  463.184498][T10284]  ? kfree+0x18e/0x440
[  463.184517][T10284]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  463.184538][T10284]  ? security_file_ioctl+0xcb/0x2d0
[  463.184557][T10284]  ? __se_sys_ioctl+0x47/0x170
[  463.184575][T10284]  ? do_syscall_64+0xfa/0x3b0
[  463.184590][T10284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.184615][T10284]  ? __asan_memset+0x22/0x50
[  463.184632][T10284]  ? blk_get_meta_cap+0x140/0x710
[  463.184658][T10284]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  463.184680][T10284]  ? kasan_quarantine_put+0xdd/0x220
[  463.184703][T10284]  ? blkdev_common_ioctl+0xff7/0x2550
[  463.184719][T10284]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  463.184741][T10284]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  463.184780][T10284]  ? do_vfs_ioctl+0xbe8/0x1430
[  463.184799][T10284]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  463.184823][T10284]  ? __lock_acquire+0xab9/0xd20
[  463.184853][T10284]  ? __pfx_lo_ioctl+0x10/0x10
[  463.184874][T10284]  blkdev_ioctl+0x5a8/0x6d0
[  463.184899][T10284]  ? __pfx_blkdev_ioctl+0x10/0x10
[  463.184923][T10284]  ? __fget_files+0x2a/0x420
[  463.184948][T10284]  ? bpf_lsm_file_ioctl+0x9/0x20
[  463.184969][T10284]  ? __pfx_blkdev_ioctl+0x10/0x10
[  463.184993][T10284]  __se_sys_ioctl+0xfc/0x170
[  463.185012][T10284]  do_syscall_64+0xfa/0x3b0
[  463.185027][T10284]  ? lockdep_hardirqs_on+0x9c/0x150
[  463.185052][T10284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.185067][T10284]  ? clear_bhb_loop+0x60/0xb0
[  463.185084][T10284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.185104][T10284] RIP: 0033:0x7f7fd258ebe9
[  463.185120][T10284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.185134][T10284] RSP: 002b:00007f7fd07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  463.185151][T10284] RAX: ffffffffffffffda RBX: 00007f7fd27b5fa0 RCX: 00007f7fd258ebe9
[  463.185165][T10284] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000003
[  463.185174][T10284] RBP: 00007f7fd2611e19 R08: 0000000000000000 R09: 0000000000000000
[  463.185185][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.185195][T10284] R13: 00007f7fd27b6038 R14: 00007f7fd27b5fa0 R15: 00007fffdd524c78
[  463.185213][T10284]  </TASK>
[  463.699848][T10291] loop7: detected capacity change from 0 to 2048
[  463.726262][T10291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  463.738669][T10291] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.753301][T10291] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  464.011530][T10291] ext4: Unknown parameter '�cQ��k�w&$��`_n߉��c[ϿO�3��>�'
[  464.029151][ T9901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.