last executing test programs:

17.997760079s ago: executing program 3 (id=3514):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000001a00)=ANY=[], 0x1, 0x1dd, &(0x7f0000000900)="$eJzsmb/L00AYx793ydu+vojg4uDiYMWKNk1SlS4dKrgL9edmsbFU01baCG3Bobi4ODoIrv4DDg6dHNzcXHVQQXCwo5twctdrciRGrFVBfD7Qp988d3nu7in5FloQBPHf8uH9l3cPz9UvngKwHyUUdf6Tlczhxvy3j++efNQ4/+TZm6cvBwfuLdL1ihuuL2u/aFqIsE9nhDDHSyoyW84s6dwlcJzQ+goYjml9HRyXtQ7AcE3rW4YerpcJA+fGMOzc7IWBK4Mngy9DzVzfBrCcM3QA7KrdCcGM8fF0drsdhsEoLXbEep3M0KbiR/1T+2tyNOLuCSF7evXB/bm8dnTeNfrngcPTugaGltZ1FOE4TtIS4/yH7aS+9TPn/23C+vXbD1b+5MZI/KOCpTPygY4zh5aLV9m7Pm6/Ovtrj0xKKOMCkBl6vbdd5YI+0XfnJP4k3fu44U827Ng/qlH/TnU8nVV6/XY36AYD36+ddU+77hm/qoxoFTO+9zX2v13lT3tG/Z0cryywAibtKBp5EyAaefG1v4qG47aeDz+re7jyP47y0VUN+SGqY+d80TH94updqrKVsx2CIAiCIAiCIAiCIAiCIIgNOQKmfgXVf1SJHPwLava3AAAA//+9nGIr")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0x2000000})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)

17.037707257s ago: executing program 3 (id=3518):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000080000dcea050843dd3cf736ef0ee30d26a020448ac14db286dca438997fdcc2fad37e0b1a1f60eaf7bd9850988789f94e9a4b5e562533e0049f517629d548d50b66b441d0d83eb83faecee9758d7fca6c019411806c9a65b59fadcaa0a8c2050c3bfc950bf1c9639474f5e03f087d1a5f810dc1d4e715341790fd7af68b324dff156d58d505d65afda48f0722934e6958cecddcc7ad20500f3eaa0121bf24a22fc690bb86a320bd81d68c84d04e471b0d0096728f4f2f72af481f078b34dd2392a994857f92f71d3d69df47815911d9f20"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001418110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r4}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx  \x00'}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r7}, 0x69)

17.009640409s ago: executing program 3 (id=3519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000840)=""/253, 0x3a, 0xfd, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="ddcb1db20e8d137021070fdf7c7d3cff9d985ee4a03a37ea5227e5733547c0598d3b7336f8433f5291b738878e89e75be12930f04484ed90c3e2c0849de5db093391"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x49c09af425efe604, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime')
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
accept$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000440)=0x1c)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")

16.118724021s ago: executing program 3 (id=3523):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="0918db7152848a841b85612c6b"])
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000540)='./bus\x00', 0xae)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

15.224914193s ago: executing program 3 (id=3528):
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x138)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4)

14.778912414s ago: executing program 4 (id=3529):
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc836], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, 0x45c)
r4 = dup(r3)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r8 = openat$cgroup_procs(r6, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
sendfile(r8, r7, 0x0, 0xc)
sendfile(r7, r8, 0x0, 0x3)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x5514, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0)

12.934436843s ago: executing program 4 (id=3532):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x0, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x68030000, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0)

12.933846893s ago: executing program 4 (id=3533):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x7)
sendto$inet(r2, &(0x7f0000001740)="cb", 0x1, 0x8001, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x219}], 0x1}}], 0x1, 0x4008095)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

11.591891316s ago: executing program 3 (id=3539):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r3=>0x0}) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f00000008c0)}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800008, 0x2000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r5 = getpid()
getpriority(0x2, r5) (async)
sched_setaffinity(0x0, 0xfffffffffffffea9, &(0x7f0000000240)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x40000000, 0x0) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070000000000000000ac1e000100000000001414aa000000000000000000000000000000000000000002000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0)
sysinfo(0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
unshare(0x20000400) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)

11.128751839s ago: executing program 4 (id=3542):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000080000dcea050843dd3cf736ef0ee30d26a020448ac14db286dca438997fdcc2fad37e0b1a1f60eaf7bd9850988789f94e9a4b5e562533e0049f517629d548d50b66b441d0d83eb83faecee9758d7fca6c019411806c9a65b59fadcaa0a8c2050c3bfc950bf1c9639474f5e03f087d1a5f810dc1d4e715341790fd7af68b324dff156d58d505d65afda48f0722934e6958cecddcc7ad20500f3eaa0121bf24a22fc690bb86a320bd81d68c84d04e471b0d0096728f4f2f72af481f078b34dd2392a994857f92f71d3d69df47815911d9f20"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001418110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r3}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx  \x00'}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0x69)

10.617992965s ago: executing program 4 (id=3545):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000611109e8000000000000002e26f7d06f6184eb45fa297b42317c0daf1fc062a2e8bc001264a9d51fdd5cbde5c62575e7104a383d96f689a97acf91d2805c84d15aa5bf5be62070a3d227b36f9c6bd08805d4fa90ebfdb11dfc467324a7d5b9c9fbf2f3c4a80af1f2a8f583a1263e73cd7614109782a1fb211a782e3cc77da9e2adf7816298a5d777842a8b3727c4cac6a90000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10)
statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)=""/174)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000"])
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000003d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x32}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xe6, &(0x7f0000000600)=""/230, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x8, 0x9, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x2, 0x1, 0x6, 0x5}], 0x10, 0x3ff, @void, @value}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup=r2, 0x37, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r2, r8, 0x21, 0x4, r2, @void, @value=r5, @void, @void, r9}, 0x20)

10.010506471s ago: executing program 4 (id=3547):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYRES32], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x4}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0))
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4004000)
r2 = eventfd(0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$eventfd(r2, &(0x7f00000001c0), 0x8)
ptrace(0x10, 0x1)
syz_usb_connect(0x5, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0)

9.291310527s ago: executing program 1 (id=3548):
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x138)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4)

8.474359482s ago: executing program 2 (id=3550):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fgetxattr(r1, &(0x7f0000000100)=@known='security.selinux\x00', 0x0, 0x0)

7.569410356s ago: executing program 1 (id=3552):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="dc08c547000200004d0cb008d778bc30670000000000592d940c72f4fdc8818d47e0a3773dd5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000290000000000000018120000a05e594b0230545fb7794333ac9c1f1e8bc60f6f5a8bf5e287ceebe1278d051540acf1913594984d880b7db4", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffc9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x42)
openat$selinux_avc_cache_threshold(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a)

7.568570755s ago: executing program 2 (id=3553):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000300000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0)

6.546985359s ago: executing program 0 (id=3554):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, <r5=>0x0}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x0, @val=@target_btf_id=r5}, 0x40)
socket(0x1, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_procfs$userns(r2, &(0x7f0000000380))
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f00000012c0)={0x2020}, 0x2020)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r9 = socket(0x10, 0x803, 0x0)
write(r9, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0", 0x19)
setsockopt$sock_int(r9, 0x1, 0x8, 0x0, 0x0)
sendto(r9, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, 0x0, 0x0, 0x0, 0x0)

6.546640279s ago: executing program 1 (id=3555):
r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdir(0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x90, 0x50, 0x6, @loopback, @rand_addr=' \x01\x00', 0x0, 0x8000, 0x8, 0x2}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)

6.546336719s ago: executing program 2 (id=3556):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000250001002abd7000fedbdf250c0000001782634614c8d56cf045f4b828afd85f76b68f"], 0x14}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
mknod$loop(0x0, 0x0, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000007d5e1c1b258bc1fb56dcfca9abb78bbd5d1d3d3a32a3c10a3da820ac982facb6a06b02cd21264f2455", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000050000000100010009000000010000001a22b86567b5483c4a4d6c8fa7c445d9f438e6a1af7c01b5341628d37b4788bb5759a265aef9088af309cd1d973599d9f073d0ea86653887dd0da0b5c029c80545c0a4716c47b7663b8b7b38dcf98538c2c91af500"/116, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f00000003c0), &(0x7f00000004c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r10, &(0x7f000000c600)={0x2020}, 0x2020)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
eventfd2(0x0, 0x0)

5.393322275s ago: executing program 0 (id=3557):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1210086, &(0x7f0000001240)=ANY=[@ANYBLOB='errors=continue,errors=continue,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=euc-jp,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmas0020000000000000007\x00\x00\x00\x00\x00\x00'], 0x5, 0x152f, &(0x7f0000002f80)="$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")
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r5, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

5.392850445s ago: executing program 2 (id=3558):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file3\x00', 0x414, &(0x7f00000003c0)={[{@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [], 0x81, "7464fbe08eb369"})
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69)

4.224567042s ago: executing program 0 (id=3559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x508, &(0x7f0000000a00)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x51e, &(0x7f0000000100)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES32=0x0, @ANYRES32=<r7=>0xffffffffffffffff, @ANYBLOB='\x00'/16], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES16=r6, @ANYRESHEX=r7], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='sched_switch\x00', r8}, 0x18)
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd})
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})

4.223945452s ago: executing program 2 (id=3560):
r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdir(0x0, 0x1c0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r2 = syz_clone(0x400, &(0x7f0000000240)="7dfa946df0d34f241f3cbd662bdb242ec3f2d7b886268d52d829399d68353ae550e87842ef30870f6e697831bb9ac2f48adf1fb0173543be5cafb36f82197990e5feb64a3d724e468d18db32deb30f8bb00fb08da3fc6c2113b79b1486b3bd3958715eb8cbec7b71acf4266744521b1e2c6c69b839c3dd143acfd935b53a840ac7ce00e690b0e88fca99f07816d8a2665595ccfde28b644dc4d935ebf788c9ee11e464e43e1c01e940c3d15f60cd9308bc512c8b02bb79f28282215e3f4e7ed5fbd38fb4a809fbc88c01fad412e9d8d822bd4a77ef8b25", 0xd7, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000003c0)="1ae96e830d145218d0e79e3033b09de9939b4cee80b65101655e9c4dc22bdab4650645f45a05401538a667b2b6f777158323b078cdb4bfb439753214137f8dc24bc1170083464113787ea68070b5ba")
sched_setscheduler(r2, 0x3, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x0, [0x7c2a, 0x0, 0x7]}, &(0x7f0000000840)=0x44)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x90, 0x50, 0x6, @loopback, @rand_addr=' \x01\x00', 0x0, 0x8000, 0x8, 0x2}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)

2.915530473s ago: executing program 0 (id=3561):
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000008005400000054000000060000000500000001000005ff7f00000a00000005000000ca34ffff050000000000000c020000000c00000000000009030000000900000003000006040000000800000000100000040000000002000004000000070000000061302e6100"], 0x0, 0x72, 0x0, 0x0, 0x400, 0x0, @void, @value}, 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b80000002300050b0000000000000000fe8000000000000000000000000000aaac1414bb00000000000600000000000000007590a3447ffda909a5364a8cd3517aeb2e7c7a474d77d44dfc456570ff1392b3569bbf41279be1ba5d09007666dad51968c746911ed913a2241fe819c7df5fe75cfd020964598e4fdf7c97ce4944b5f713a0f0878d1a572b647f21e2451be30451a46194f15961a88516d97f24eeda", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000080000000000e7000700201018170000", @ANYRES32=0x1, @ANYBLOB="000000000000000085100000000000000d73800001000000850000009b000000186100000c00000000000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0xdc, &(0x7f0000000480)=""/220, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xf, 0x67a7e410}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2], 0x0, 0x10, 0x1000, @void, @value}, 0x94)
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="32e2", 0x2}], 0x1, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a0800450000280000000000069078ac3614bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000"], 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
clock_gettime(0xffffffc4, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/unix\x00')
preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x0, 0x3)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
getdents64(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x3, 0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/config\x00')
preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000140)=""/112, 0x70}, {&(0x7f0000000380)=""/251, 0xfb}], 0x2, 0x2, 0x3ff)
getdents64(0xffffffffffffffff, 0x0, 0x0)

2.912832903s ago: executing program 1 (id=3562):
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x138)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4)

1.507107722s ago: executing program 0 (id=3563):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xc008ae09, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
open(0x0, 0x14927e, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0221000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1, 0x0, 0x0, @void, @value}, 0x28)

1.506403232s ago: executing program 1 (id=3564):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

747.6µs ago: executing program 0 (id=3565):
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380))
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="15001000000800395032303030ae75000000000000"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800a, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@privport}, {@version_L}, {@privport}], [{@fsname}, {@obj_type={'obj_type', 0x3d, '/dev/snd/timer\x00'}}, {@measure}, {@euid_gt={'euid>', r3}}, {@dont_hash}]}})
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x1000}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10)
sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}}}, 0x10, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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")
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x10, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_none}], [], 0x6b}})

296.03µs ago: executing program 1 (id=3566):
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'wg0\x00', &(0x7f00000003c0)=@ethtool_rx_ntuple={0x35, {0x1f, @udp_ip4_spec={@local, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e22, 0x4e20, 0x5}, @ah_ip4_spec={@broadcast, @loopback, 0x9, 0xfe}, 0x9, 0x9, 0x81, 0x0, 0xffffffffffffffff}}})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000))
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr\x00')
getdents(r2, &(0x7f0000001440)=""/228, 0xe4)
openat(r2, &(0x7f0000000040)='./file0\x00', 0x2, 0xc5)
dup(0xffffffffffffffff)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000180)={'icmp\x00', 0x2}, &(0x7f00000001c0)=0x1e)

0s ago: executing program 2 (id=3567):
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00'], 0x138)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x1000}, 0x20)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00')
write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4)

kernel console output (not intermixed with test programs):

49]  </TASK>
[  957.758879][T14263] loop1: detected capacity change from 0 to 1024
[  957.808261][T14263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  957.836837][T12099] EXT4-fs (loop1): unmounting filesystem.
[  957.853008][T14270] loop1: detected capacity change from 0 to 256
[  957.859500][T14270] FAT-fs (loop1): Unrecognized mount option "uni_xlate0" or missing value
[  958.333304][T14281] loop3: detected capacity change from 0 to 40427
[  958.340168][T14281] F2FS-fs (loop3): Unrecognized mount option "��" or missing value
[  958.414228][T14282] loop3: detected capacity change from 0 to 2048
[  958.456819][T10370] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  958.488725][ T3544] usb 3-1: USB disconnect, device number 94
[  958.489948][T14284] loop4: detected capacity change from 0 to 512
[  958.509437][T14284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  958.520074][T14284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  958.528853][T14284] System zones: 1-12
[  958.533882][T14284] EXT4-fs (loop4): 1 truncate cleaned up
[  958.539660][T14284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  958.550164][T10909] EXT4-fs (loop2): unmounting filesystem.
[  958.576553][   T10] Quota error (device loop2): do_check_range: Getting block 3925999616 out of range 1-5
[  958.588476][   T10] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:1: Failed to release dquot type 0
[  958.600430][   T10] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  958.610990][   T10] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:1: Failed to release dquot type 1
[  958.931082][T14297] loop1: detected capacity change from 0 to 512
[  958.948926][T14297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  958.961319][T14297] EXT4-fs (loop1): 1 truncate cleaned up
[  958.967058][T14297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  959.544112][T12303] EXT4-fs (loop4): unmounting filesystem.
[  959.778817][T12099] EXT4-fs (loop1): unmounting filesystem.
[  959.882239][T14321] loop1: detected capacity change from 0 to 256
[  959.899927][T14321] FAT-fs (loop1): Unrecognized mount option "uid=" or missing value
[  959.967509][T14323] FAULT_INJECTION: forcing a failure.
[  959.967509][T14323] name failslab, interval 1, probability 0, space 0, times 0
[  960.010586][T14323] CPU: 0 PID: 14323 Comm: syz.3.3348 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0
[  960.020225][T14323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  960.030118][T14323] Call Trace:
[  960.033242][T14323]  <TASK>
[  960.036018][T14323]  dump_stack_lvl+0x151/0x1b7
[  960.040534][T14323]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  960.045831][T14323]  dump_stack+0x15/0x1c
[  960.049816][T14323]  should_fail_ex+0x3d0/0x520
[  960.054331][T14323]  ? __se_sys_mount+0x156/0x3b0
[  960.059018][T14323]  __should_failslab+0xaf/0xf0
[  960.063622][T14323]  should_failslab+0x9/0x20
[  960.067962][T14323]  __kmem_cache_alloc_node+0x3d/0x250
[  960.073167][T14323]  ? __kasan_check_write+0x14/0x20
[  960.078112][T14323]  ? _copy_from_user+0x90/0xc0
[  960.082711][T14323]  ? __se_sys_mount+0x156/0x3b0
[  960.087397][T14323]  kmalloc_trace+0x2a/0xa0
[  960.091651][T14323]  __se_sys_mount+0x156/0x3b0
[  960.096163][T14323]  ? __this_cpu_preempt_check+0x13/0x20
[  960.101549][T14323]  ? __x64_sys_mount+0xd0/0xd0
[  960.106145][T14323]  ? debug_smp_processor_id+0x17/0x20
[  960.111355][T14323]  __x64_sys_mount+0xbf/0xd0
[  960.115782][T14323]  x64_sys_call+0x49d/0x9a0
[  960.120118][T14323]  do_syscall_64+0x3b/0xb0
[  960.124371][T14323]  ? clear_bhb_loop+0x55/0xb0
[  960.128888][T14323]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  960.134613][T14323] RIP: 0033:0x7f9975d7dff9
[  960.138868][T14323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  960.158397][T14323] RSP: 002b:00007f9976b2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  960.166641][T14323] RAX: ffffffffffffffda RBX: 00007f9975f35f80 RCX: 00007f9975d7dff9
[  960.174453][T14323] RDX: 0000000020000340 RSI: 0000000020000280 RDI: 0000000020000200
[  960.182263][T14323] RBP: 00007f9976b2d090 R08: 0000000020000880 R09: 0000000000000000
[  960.190077][T14323] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  960.197888][T14323] R13: 0000000000000000 R14: 00007f9975f35f80 R15: 00007ffea795e7f8
[  960.205703][T14323]  </TASK>
[  960.231236][T14325] loop1: detected capacity change from 0 to 40427
[  960.247306][T14325] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  960.254324][T14325] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  960.263184][T14325] F2FS-fs (loop1): Unrecognized mount option "aqfmt=vfsv��H�" or missing value
[  960.284995][   T28] audit: type=1400 audit(2000000094.759:19911): avc:  denied  { map } for  pid=14324 comm="syz.1.3349" path="socket:[98383]" dev="sockfs" ino=98383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  960.310530][T14325] loop1: detected capacity change from 0 to 128
[  960.326447][T14329] loop2: detected capacity change from 0 to 1024
[  960.331042][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x4
[  960.351063][   T28] audit: type=1400 audit(2000000094.759:19912): avc:  denied  { read } for  pid=14324 comm="syz.1.3349" path="socket:[98383]" dev="sockfs" ino=98383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  960.356150][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x2
[  960.392342][T14329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  960.473664][T14338] loop3: detected capacity change from 0 to 512
[  960.480543][T14338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  960.497786][T14338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  960.506725][T14338] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038 (0x7fffffff)
[  960.520657][T14338] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  960.539646][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  960.556155][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  960.563623][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  960.574616][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  960.582351][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.167939][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.176493][   T28] audit: type=1400 audit(2000000095.609:19913): avc:  denied  { connect } for  pid=14335 comm="syz.0.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  961.417547][T10909] EXT4-fs (loop2): unmounting filesystem.
[  961.430786][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.462445][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.496941][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.526799][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.534600][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.565263][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.595159][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.607891][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.635783][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.645865][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.663598][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.671932][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.684541][T14349] loop4: detected capacity change from 0 to 1024
[  961.690869][  T866] hid-generic 0000:3000000:0000.012F: unknown main item tag 0x0
[  961.699737][  T866] hid-generic 0000:3000000:0000.012F: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  961.744976][T14349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  961.756199][ T3544] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  962.394530][ T5612] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  962.452076][T14360] loop1: detected capacity change from 0 to 512
[  962.474254][T14360] ext4: Unknown parameter 'uid<00000000000000000000'
[  962.533564][ T3544] usb 4-1: Using ep0 maxpacket: 16
[  962.542534][T12303] EXT4-fs (loop4): unmounting filesystem.
[  962.572389][T14362] loop4: detected capacity change from 0 to 512
[  962.586898][T14362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  962.622633][T14362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  962.631893][T14362] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038 (0x7fffffff)
[  962.648516][T14362] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  962.662943][ T5612] usb 1-1: Using ep0 maxpacket: 16
[  962.667970][ T3544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  962.678746][ T3544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  962.689807][ T3544] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  962.698902][ T3544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.716697][ T3544] usb 4-1: config 0 descriptor??
[  962.796190][ T5612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  962.816124][ T5612] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  962.887200][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x4
[  962.894674][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x2
[  962.902500][ T5612] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  962.911791][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  962.919935][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.927680][ T5612] usb 1-1: SerialNumber: syz
[  962.932484][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.940124][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.947698][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.955288][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.967402][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.974861][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.983103][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.990714][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  962.998343][  T300] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  963.005750][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.014067][ T5612] usb 1-1: 0:2 : does not exist
[  963.019384][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.026133][ T1931] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  963.027238][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.042246][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.049914][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.057451][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.064901][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.072588][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.080272][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.087887][  T434] hid-generic 0000:3000000:0000.0130: unknown main item tag 0x0
[  963.100602][  T434] hid-generic 0000:3000000:0000.0130: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  963.197058][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0
[  963.204570][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0
[  963.212271][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0
[  963.222744][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0
[  963.230346][ T3544] hid-multitouch 0003:1FD2:6007.0131: unknown main item tag 0x0
[  963.243098][ T3544] hid-multitouch 0003:1FD2:6007.0131: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  963.255010][  T300] usb 5-1: Using ep0 maxpacket: 16
[  963.276146][ T1931] usb 2-1: Using ep0 maxpacket: 32
[  963.386191][  T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  963.396966][  T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  963.401617][  T866] usb 4-1: USB disconnect, device number 62
[  963.406736][  T300] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  963.422015][  T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.430552][  T300] usb 5-1: config 0 descriptor??
[  963.556249][ T1931] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  963.565168][ T1931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.573217][ T1931] usb 2-1: Product: syz
[  963.577305][ T1931] usb 2-1: Manufacturer: syz
[  963.581728][ T1931] usb 2-1: SerialNumber: syz
[  963.586946][ T1931] usb 2-1: config 0 descriptor??
[  963.741112][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x4
[  963.748666][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x2
[  963.756407][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.763919][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.771549][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.779178][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.786989][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.794493][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.802220][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.810443][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.818093][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.825648][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.835054][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.842612][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.849997][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.857472][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.864934][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.872417][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.879912][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.887325][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.894779][  T434] hid-generic 0000:3000000:0000.0132: unknown main item tag 0x0
[  963.904632][  T434] hid-generic 0000:3000000:0000.0132: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  963.949806][T12054] EXT4-fs (loop3): unmounting filesystem.
[  964.096194][  T300] usbhid 5-1:0.0: can't add hid device: -71
[  964.102016][  T300] usbhid: probe of 5-1:0.0 failed with error -71
[  964.109267][  T300] usb 5-1: USB disconnect, device number 95
[  964.278873][ T5612] usb 1-1: USB disconnect, device number 94
[  964.346177][  T866] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  964.416435][T12303] EXT4-fs (loop4): unmounting filesystem.
[  964.615802][T14386] loop2: detected capacity change from 0 to 512
[  964.646930][T14386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  964.656638][T14386] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038 (0x7fffffff)
[  964.886223][  T866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  965.056509][  T866] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  965.065713][  T866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.073590][  T866] usb 4-1: Product: syz
[  965.078834][  T866] usb 4-1: Manufacturer: syz
[  965.096077][  T866] usb 4-1: SerialNumber: syz
[  965.107019][  T866] usb 4-1: config 0 descriptor??
[  965.329160][T14398] loop4: detected capacity change from 0 to 16
[  965.335728][T14398] erofs: (device loop4): mounted with root inode @ nid 36.
[  965.387540][  T866] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  965.395216][  T866] usb 4-1: USB disconnect, device number 63
[  965.401330][T10370] udevd[10370]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  965.446936][T14399] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  965.455860][T14399] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  965.464909][T14399] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  965.473809][T14399] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  965.504690][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x4
[  965.528366][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x2
[  965.529186][T10909] EXT4-fs (loop2): unmounting filesystem.
[  965.535898][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.535920][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.535939][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.535958][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.535976][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.557827][T14403] loop2: detected capacity change from 0 to 512
[  965.564244][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.588183][T14403] EXT4-fs (loop2): 1 orphan inode deleted
[  965.598122][T14403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  965.607425][T14403] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038 (0x7fffffff)
[  965.614967][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.684621][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.694824][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.702599][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.710157][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.717651][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.725307][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.733250][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.740866][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  965.748674][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  966.033122][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  966.040656][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  966.048324][T11880] hid-generic 0000:3000000:0000.0133: unknown main item tag 0x0
[  966.056413][T11880] hid-generic 0000:3000000:0000.0133: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  966.187738][T14419] loop4: detected capacity change from 0 to 1024
[  966.201543][T14419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  966.219831][T12303] EXT4-fs (loop4): unmounting filesystem.
[  966.236793][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x4
[  966.244414][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x2
[  966.251998][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.259955][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.267697][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.275357][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.283530][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.303456][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.311166][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.318680][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.326176][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.333582][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.341112][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.356169][T11880] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  966.629698][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.637246][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.648651][T10909] EXT4-fs (loop2): unmounting filesystem.
[  966.656664][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.664201][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.671935][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.679618][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.687270][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.694786][ T5612] hid-generic 0000:3000000:0000.0134: unknown main item tag 0x0
[  966.703164][ T5612] hid-generic 0000:3000000:0000.0134: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[  966.856308][T11880] usb 1-1: Using ep0 maxpacket: 16
[  966.898522][T14435] incfs: Options parsing error. -22
[  966.903789][T14435] incfs: mount failed -22
[  966.976328][T11880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  966.987904][T11880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  967.008846][T14437] loop1: detected capacity change from 0 to 1024
[  967.015188][T11880] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  967.024805][T11880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.034746][T11880] usb 1-1: config 0 descriptor??
[  967.056947][T10370] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  967.057865][T14441] loop3: detected capacity change from 0 to 512
[  967.097259][T14441] EXT4-fs: Ignoring removed mblk_io_submit option
[  967.103512][T14441] EXT4-fs: Ignoring removed i_version option
[  967.127109][T14441] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.3378: invalid block
[  967.149795][T14441] EXT4-fs (loop3): Remounting filesystem read-only
[  967.179433][T14441] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.3378: couldn't read orphan inode 11 (err -117)
[  967.211747][T14441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  967.334997][T12054] EXT4-fs (loop3): unmounting filesystem.
[  967.382879][T14437] loop1: detected capacity change from 0 to 40427
[  967.386239][T11880] usbhid 1-1:0.0: can't add hid device: -71
[  967.394895][T11880] usbhid: probe of 1-1:0.0 failed with error -71
[  967.404612][T14437] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12
[  967.412168][T14437] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  967.417024][T11880] usb 1-1: USB disconnect, device number 95
[  967.426933][T14437] F2FS-fs (loop1): invalid crc value
[  967.435215][T14437] F2FS-fs (loop1): Found nat_bits in checkpoint
[  967.466188][  T434] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  967.474449][T14437] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  967.481382][T14437] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  967.509348][T12099] syz-executor: attempt to access beyond end of device
[  967.509348][T12099] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  967.556185][ T1931] rtl8150 2-1:0.0: couldn't reset the device
[  967.562110][ T1931] rtl8150: probe of 2-1:0.0 failed with error -5
[  967.587377][ T1931] usb 2-1: USB disconnect, device number 104
[  967.631012][T14456] loop1: detected capacity change from 0 to 1024
[  967.646213][ T5612] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  967.647670][T14456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  967.671373][T12099] EXT4-fs (loop1): unmounting filesystem.
[  967.702834][T14461] loop1: detected capacity change from 0 to 1024
[  967.716248][  T434] usb 5-1: Using ep0 maxpacket: 16
[  967.717914][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x4
[  967.725050][T14461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  967.736165][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x2
[  967.744394][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.745457][T14461] FAULT_INJECTION: forcing a failure.
[  967.745457][T14461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  967.764991][T14461] CPU: 0 PID: 14461 Comm: syz.1.3383 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0
[  967.766214][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.774606][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  967.791971][T14461] Call Trace:
[  967.795185][T14461]  <TASK>
[  967.796145][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.797955][T14461]  dump_stack_lvl+0x151/0x1b7
[  967.805437][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.809932][T14461]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  967.809949][T14461]  ? __stack_depot_save+0x36/0x480
[  967.809969][T14461]  dump_stack+0x15/0x1c
[  967.809983][T14461]  should_fail_ex+0x3d0/0x520
[  967.826153][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.827647][T14461]  should_fail+0xb/0x10
[  967.831644][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.836400][T14461]  should_fail_usercopy+0x1a/0x20
[  967.836430][T14461]  _copy_to_user+0x1e/0x90
[  967.836450][T14461]  simple_read_from_buffer+0xc7/0x150
[  967.851538][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.855519][T14461]  proc_fail_nth_read+0x1a3/0x210
[  967.860619][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.864632][T14461]  ? proc_fault_inject_write+0x390/0x390
[  967.870033][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.877305][T14461]  ? fsnotify_perm+0x269/0x5b0
[  967.877335][T14461]  ? security_file_permission+0x86/0xb0
[  967.877349][T14461]  ? proc_fault_inject_write+0x390/0x390
[  967.877367][T14461]  vfs_read+0x26c/0xae0
[  967.882558][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.889628][T14461]  ? kernel_read+0x1f0/0x1f0
[  967.889652][T14461]  ? mutex_lock+0xb1/0x1e0
[  967.895331][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  967.902561][T14461]  ? bit_wait_io_timeout+0x120/0x120
[  967.902587][T14461]  ? __fdget_pos+0x2e2/0x390
[  967.902607][T14461]  ? ksys_read+0x77/0x2c0
[  967.959327][T14461]  ksys_read+0x199/0x2c0
[  967.963399][T14461]  ? __this_cpu_preempt_check+0x13/0x20
[  967.968783][T14461]  ? vfs_write+0xed0/0xed0
[  967.973034][T14461]  ? debug_smp_processor_id+0x17/0x20
[  967.978241][T14461]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  967.984144][T14461]  __x64_sys_read+0x7b/0x90
[  967.988482][T14461]  x64_sys_call+0x28/0x9a0
[  967.992734][T14461]  do_syscall_64+0x3b/0xb0
[  967.996987][T14461]  ? clear_bhb_loop+0x55/0xb0
[  968.001500][T14461]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  968.007229][T14461] RIP: 0033:0x7fad7097ca3c
[  968.011481][T14461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  968.030923][T14461] RSP: 002b:00007fad71740030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  968.039168][T14461] RAX: ffffffffffffffda RBX: 00007fad70b35f80 RCX: 00007fad7097ca3c
[  968.046982][T14461] RDX: 000000000000000f RSI: 00007fad717400a0 RDI: 0000000000000006
[  968.054791][T14461] RBP: 00007fad71740090 R08: 0000000000000000 R09: 0000000000000000
[  968.062600][T14461] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  968.070413][T14461] R13: 0000000000000000 R14: 00007fad70b35f80 R15: 00007ffe2fcf9e98
[  968.078229][T14461]  </TASK>
[  968.082067][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  968.091788][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  968.099420][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  968.107103][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  968.114579][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  968.122083][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  968.129519][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  968.137162][  T866] hid-generic 0000:3000000:0000.0135: unknown main item tag 0x0
[  968.145837][  T866] hid-generic 0000:3000000:0000.0135: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  968.160549][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.186394][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.205859][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.217791][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.239917][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.259535][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.271136][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.305528][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.325109][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.336515][  T434] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  968.346033][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.368275][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  968.378204][  T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.386305][  T434] usb 5-1: Product: syz
[  968.390303][  T434] usb 5-1: Manufacturer: syz
[  968.394711][  T434] usb 5-1: SerialNumber: syz
[  968.400455][  T434] usb 5-1: config 0 descriptor??
[  968.406376][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.436786][  T434] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  968.444634][  T434] usb 5-1: Detected FT232H
[  968.456395][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.476303][T12099] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /122/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.498658][T12099] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  968.517766][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.529469][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.541206][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.546184][ T5612] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  968.552826][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.561639][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.573049][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.580544][ T5612] usb 4-1: Product: syz
[  968.592186][T12099] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  968.596214][ T5612] usb 4-1: Manufacturer: syz
[  968.611279][ T5612] usb 4-1: SerialNumber: syz
[  968.619360][ T5612] usb 4-1: config 0 descriptor??
[  968.656233][T14478] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3389'.
[  968.695686][T14478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14478 comm=syz.2.3389
[  968.718781][  T434] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  968.727708][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x4
[  968.737095][T12099] EXT4-fs (loop1): unmounting filesystem.
[  968.817949][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x2
[  968.825529][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.833044][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.840628][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.848522][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.856060][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.863679][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.871211][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.878689][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.886225][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.893677][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.901122][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.969709][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.978230][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.985821][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  968.995789][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  969.003475][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  969.008180][ T5612] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  969.020184][ T5612] usb 4-1: USB disconnect, device number 64
[  969.022735][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  969.039672][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  969.047982][  T866] hid-generic 0000:3000000:0000.0136: unknown main item tag 0x0
[  969.057558][  T866] hid-generic 0000:3000000:0000.0136: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[  969.207824][  T434] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  969.226629][T12657] udevd[12657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  969.337734][   T10] device bridge_slave_1 left promiscuous mode
[  969.343960][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.351445][   T10] device bridge_slave_0 left promiscuous mode
[  969.357509][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.365338][   T10] device veth1_macvtap left promiscuous mode
[  969.371401][   T10] device veth0_vlan left promiscuous mode
[  969.407958][  T866] usb 5-1: USB disconnect, device number 96
[  969.431324][  T866] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  969.472259][  T866] ftdi_sio 5-1:0.0: device disconnected
[  969.490648][T14499] loop3: detected capacity change from 0 to 512
[  969.497374][T14499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  969.507906][T14493] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.514791][T14493] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.522236][T14493] device bridge_slave_0 entered promiscuous mode
[  969.523214][T14499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  969.529385][T14493] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.537293][T14499] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038 (0x7fffffff)
[  969.544234][T14493] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.561110][T14493] device bridge_slave_1 entered promiscuous mode
[  969.606021][T14499] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  969.648048][T14493] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.654912][T14493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  969.662011][T14493] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.668794][T14493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  969.677119][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x4
[  969.684581][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x2
[  969.725119][T14493] device veth0_vlan entered promiscuous mode
[  969.747376][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  969.754774][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  969.763050][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.770966][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.779522][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  969.779711][T12054] EXT4-fs (loop3): unmounting filesystem.
[  969.787559][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.802393][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.810254][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  969.820675][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  969.829142][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.838438][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  969.847043][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.854584][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.864274][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  969.928321][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.935849][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.945983][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  969.953989][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  969.963158][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  969.971089][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.018986][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.033916][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.044600][T14493] device veth1_macvtap entered promiscuous mode
[  970.049695][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.067457][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.077857][T14517] loop1: detected capacity change from 0 to 1024
[  970.083135][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.092110][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.099786][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.107573][T11880] hid-generic 0000:3000000:0000.0137: unknown main item tag 0x0
[  970.115643][T11880] hid-generic 0000:3000000:0000.0137: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[  970.126332][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  970.134308][T14517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  970.135297][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  970.151141][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  970.159608][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  970.167890][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  970.176072][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  970.184269][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  970.210584][T14493] EXT4-fs (loop1): unmounting filesystem.
[  970.370605][T14515] loop2: detected capacity change from 0 to 40427
[  970.386509][T14515] F2FS-fs (loop2): invalid crc value
[  970.393184][T14515] F2FS-fs (loop2): Found nat_bits in checkpoint
[  970.424060][T14515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  970.520684][T14537] loop3: detected capacity change from 0 to 512
[  970.540480][T14537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  970.550494][   T28] audit: type=1400 audit(2000000105.029:19914): avc:  denied  { map } for  pid=14534 comm="syz.0.3406" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  970.550662][T14535] binder: BINDER_SET_CONTEXT_MGR already set
[  970.584314][T14535] binder: 14534:14535 ioctl 4018620d 200002c0 returned -16
[  970.595023][T14535] binder: 14534:14535 ioctl c0306201 20000300 returned -14
[  970.598458][T14537] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038 (0x7fffffff)
[  970.619721][T14537] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  970.648749][   T28] audit: type=1400 audit(2000000105.129:19915): avc:  denied  { setopt } for  pid=14514 comm="syz.2.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  970.674969][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3406'.
[  970.675490][   T28] audit: type=1400 audit(2000000105.149:19916): avc:  denied  { bind } for  pid=14514 comm="syz.2.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  970.893984][T10909] syz-executor: attempt to access beyond end of device
[  970.893984][T10909] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  970.936203][  T866] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  970.963656][T14547] device ip6tnl0 entered promiscuous mode
[  970.970720][T14547] bridge0: port 3(vlan2) entered blocking state
[  970.976915][T14547] bridge0: port 3(vlan2) entered disabled state
[  971.017265][T14546] device ip6tnl0 left promiscuous mode
[  971.071853][T14554] loop2: detected capacity change from 0 to 512
[  971.086735][T14554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  971.098541][T14554] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038 (0x7fffffff)
[  971.119065][T14554] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  971.176713][  T866] usb 4-1: Using ep0 maxpacket: 16
[  971.179729][T14566] loop2: detected capacity change from 0 to 128
[  971.188357][T14558] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  971.198748][T14558] SELinux: failed to load policy
[  971.207116][T14566] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  971.227889][T14566] EXT4-fs: error: could not find journal device path
[  971.336249][  T866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  971.352324][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x4
[  971.357445][  T866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  971.361449][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x2
[  971.369435][  T866] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  971.385818][  T866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.502793][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  971.512186][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  971.534269][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  971.541498][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  971.548201][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.553211][  T866] usb 4-1: config 0 descriptor??
[  971.566596][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.574080][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.583098][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.584185][T14577] tipc: Started in network mode
[  971.595487][T14577] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711
[  971.600927][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.609537][T14577] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  971.612002][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.627855][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.635566][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.651495][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.659304][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.666877][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.676717][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.684195][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.692095][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.699751][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.707442][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.714945][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.722680][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.730325][ T3544] hid-generic 0000:3000000:0000.0138: unknown main item tag 0x0
[  971.742870][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  971.756525][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  971.764365][ T3544] hid-generic 0000:3000000:0000.0138: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  971.774655][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  971.783636][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  971.793093][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  971.801290][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  971.809484][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  971.817418][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  971.883510][T14583] incfs: Options parsing error. -22
[  971.889125][T14583] incfs: mount failed -22
[  972.052805][T14591] loop1: detected capacity change from 0 to 256
[  972.061659][T14591] FAT-fs (loop1): invalid media value (0x29)
[  972.064553][T14593] FAULT_INJECTION: forcing a failure.
[  972.064553][T14593] name failslab, interval 1, probability 0, space 0, times 0
[  972.067925][T14591] FAT-fs (loop1): Can't find a valid FAT filesystem
[  972.092094][T14593] CPU: 0 PID: 14593 Comm: syz.2.3420 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0
[  972.101716][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  972.111609][T14593] Call Trace:
[  972.114734][T14593]  <TASK>
[  972.116313][  T866] usbhid 4-1:0.0: can't add hid device: -71
[  972.117512][T14593]  dump_stack_lvl+0x151/0x1b7
[  972.123306][  T866] usbhid: probe of 4-1:0.0 failed with error -71
[  972.127753][T14593]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  972.127776][T14593]  dump_stack+0x15/0x1c
[  972.127789][T14593]  should_fail_ex+0x3d0/0x520
[  972.127810][T14593]  ? vfs_parse_fs_string+0x119/0x220
[  972.127826][T14593]  __should_failslab+0xaf/0xf0
[  972.127842][T14593]  should_failslab+0x9/0x20
[  972.127861][T14593]  __kmem_cache_alloc_node+0x3d/0x250
[  972.143945][  T866] usb 4-1: USB disconnect, device number 65
[  972.147723][T14593]  ? vfs_parse_fs_string+0x119/0x220
[  972.147747][T14593]  __kmalloc_node_track_caller+0xa2/0x1e0
[  972.147770][T14593]  kmemdup_nul+0x2f/0xa0
[  972.187470][T14593]  vfs_parse_fs_string+0x119/0x220
[  972.192414][T14593]  ? vfs_parse_fs_param+0x4a0/0x4a0
[  972.197449][T14593]  ? module_put+0xeb/0x220
[  972.201701][T14593]  do_new_mount+0x257/0xb30
[  972.206040][T14593]  ? do_move_mount_old+0x160/0x160
[  972.210986][T14593]  ? security_capable+0x87/0xb0
[  972.215675][T14593]  ? ns_capable+0x89/0xe0
[  972.219843][T14593]  path_mount+0x671/0x1070
[  972.224101][T14593]  ? user_path_at_empty+0x14e/0x1a0
[  972.229127][T14593]  __se_sys_mount+0x2c4/0x3b0
[  972.233636][T14593]  ? __this_cpu_preempt_check+0x13/0x20
[  972.239020][T14593]  ? __x64_sys_mount+0xd0/0xd0
[  972.243620][T14593]  ? debug_smp_processor_id+0x17/0x20
[  972.248834][T14593]  __x64_sys_mount+0xbf/0xd0
[  972.253260][T14593]  x64_sys_call+0x49d/0x9a0
[  972.257593][T14593]  do_syscall_64+0x3b/0xb0
[  972.261846][T14593]  ? clear_bhb_loop+0x55/0xb0
[  972.266359][T14593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.272086][T14593] RIP: 0033:0x7f2043b7dff9
[  972.276341][T14593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  972.295783][T14593] RSP: 002b:00007f20448bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  972.304031][T14593] RAX: ffffffffffffffda RBX: 00007f2043d35f80 RCX: 00007f2043b7dff9
[  972.311837][T14593] RDX: 0000000020000340 RSI: 0000000020000280 RDI: 0000000020000200
[  972.319652][T14593] RBP: 00007f20448bc090 R08: 0000000020000880 R09: 0000000000000000
[  972.327460][T14593] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[  972.335269][T14593] R13: 0000000000000000 R14: 00007f2043d35f80 R15: 00007ffeb9d84298
[  972.343088][T14593]  </TASK>
[  973.282258][T12054] EXT4-fs unmount: 3 callbacks suppressed
[  973.282272][T12054] EXT4-fs (loop3): unmounting filesystem.
[  973.347182][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x4
[  973.360132][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x2
[  973.377765][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.390812][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.399188][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.412065][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.430146][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.445640][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.475200][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.493844][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.503914][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.518261][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.535866][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.550610][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.566340][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.581001][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.590382][T14628] loop2: detected capacity change from 0 to 40427
[  973.595888][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.599069][T14628] F2FS-fs (loop2): Unrecognized mount option "0xffffffffffffffff��������" or missing value
[  973.607335][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.621576][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.629070][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.636647][ T3544] hid-generic 0000:3000000:0000.0139: unknown main item tag 0x0
[  973.646266][ T3544] hid-generic 0000:3000000:0000.0139: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  973.671391][T14639] loop3: detected capacity change from 0 to 512
[  973.688727][T14639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  973.714156][T14628] loop2: detected capacity change from 0 to 512
[  973.721452][T14639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  973.733534][T14639] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038 (0x7fffffff)
[  973.745477][T14628] EXT4-fs: Ignoring removed mblk_io_submit option
[  973.752020][T14628] EXT4-fs: Ignoring removed i_version option
[  973.762522][T14639] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  973.763803][T14628] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.3430: invalid block
[  973.797127][T12054] EXT4-fs (loop3): unmounting filesystem.
[  973.809522][T14628] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.3430: couldn't read orphan inode 11 (err -117)
[  973.816799][T14646] loop4: detected capacity change from 0 to 16
[  973.827952][T14628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  973.850086][T14646] erofs: (device loop4): mounted with root inode @ nid 36.
[  973.963295][T14653] FAULT_INJECTION: forcing a failure.
[  973.963295][T14653] name failslab, interval 1, probability 0, space 0, times 0
[  973.976006][T14653] CPU: 1 PID: 14653 Comm: syz.1.3439 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0
[  973.985621][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  973.995522][T14653] Call Trace:
[  973.998640][T14653]  <TASK>
[  974.001416][T14653]  dump_stack_lvl+0x151/0x1b7
[  974.005937][T14653]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  974.011228][T14653]  ? __kasan_check_write+0x14/0x20
[  974.016191][T14653]  ? node_tag_clear+0x1ff/0x320
[  974.020865][T14653]  dump_stack+0x15/0x1c
[  974.024852][T14653]  should_fail_ex+0x3d0/0x520
[  974.029367][T14653]  ? kstrdup_const+0x41/0x50
[  974.033790][T14653]  __should_failslab+0xaf/0xf0
[  974.038393][T14653]  should_failslab+0x9/0x20
[  974.042732][T14653]  __kmem_cache_alloc_node+0x3d/0x250
[  974.047938][T14653]  ? kstrdup_const+0x41/0x50
[  974.052363][T14653]  __kmalloc_node_track_caller+0xa2/0x1e0
[  974.057919][T14653]  kstrdup+0x39/0x70
[  974.061652][T14653]  kstrdup_const+0x41/0x50
[  974.065902][T14653]  __kernfs_new_node+0x99/0x700
[  974.070592][T14653]  ? up_write+0x7d/0x2a0
[  974.074670][T14653]  ? rwsem_write_trylock+0x153/0x340
[  974.079789][T14653]  ? kernfs_new_node+0x230/0x230
[  974.084563][T14653]  ? rwsem_mark_wake+0x770/0x770
[  974.089340][T14653]  ? up_write+0x7d/0x2a0
[  974.093415][T14653]  kernfs_new_node+0x130/0x230
[  974.098017][T14653]  kernfs_create_link+0xba/0x210
[  974.102789][T14653]  sysfs_do_create_link_sd+0x89/0x110
[  974.107999][T14653]  sysfs_create_link+0x68/0x80
[  974.112769][T14653]  device_add+0x7bf/0xf10
[  974.116941][T14653]  netdev_register_kobject+0x177/0x320
[  974.122239][T14653]  ? raw_notifier_call_chain+0xdf/0xf0
[  974.127524][T14653]  register_netdevice+0xe43/0x1490
[  974.132478][T14653]  ? netif_stacked_transfer_operstate+0x240/0x240
[  974.138722][T14653]  ? __mutex_lock_slowpath+0x10/0x10
[  974.143841][T14653]  ? radix_tree_lookup+0x284/0x290
[  974.148790][T14653]  ppp_dev_configure+0x804/0xa90
[  974.153564][T14653]  ppp_ioctl+0x604/0x1990
[  974.157727][T14653]  ? __mutex_lock_slowpath+0x10/0x10
[  974.162848][T14653]  ? ppp_poll+0x250/0x250
[  974.167021][T14653]  ? security_file_ioctl+0x84/0xb0
[  974.171962][T14653]  ? ppp_poll+0x250/0x250
[  974.176129][T14653]  __se_sys_ioctl+0x114/0x190
[  974.180728][T14653]  __x64_sys_ioctl+0x7b/0x90
[  974.185328][T14653]  x64_sys_call+0x98/0x9a0
[  974.189586][T14653]  do_syscall_64+0x3b/0xb0
[  974.193842][T14653]  ? clear_bhb_loop+0x55/0xb0
[  974.198434][T14653]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  974.204161][T14653] RIP: 0033:0x7fc1e977dff9
[  974.208415][T14653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  974.227856][T14653] RSP: 002b:00007fc1ea5e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  974.236104][T14653] RAX: ffffffffffffffda RBX: 00007fc1e9935f80 RCX: 00007fc1e977dff9
[  974.243914][T14653] RDX: 0000000020001439 RSI: 00000000c004743e RDI: 0000000000000005
[  974.251723][T14653] RBP: 00007fc1ea5e2090 R08: 0000000000000000 R09: 0000000000000000
[  974.259534][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  974.267346][T14653] R13: 0000000000000000 R14: 00007fc1e9935f80 R15: 00007fff8985be88
[  974.275162][T14653]  </TASK>
[  974.752350][T10909] EXT4-fs (loop2): unmounting filesystem.
[  974.784952][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x4
[  974.797658][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x2
[  974.821027][T14665] loop1: detected capacity change from 0 to 512
[  974.832741][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.849504][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.857305][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.865570][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.873151][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.884463][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.899268][T14671] loop3: detected capacity change from 0 to 16
[  974.906488][T14665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  974.915130][T14671] erofs: (device loop3): mounted with root inode @ nid 36.
[  974.922699][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.930381][T14665] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff)
[  974.950382][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.967315][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  974.986633][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.002776][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.018969][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.032927][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.041059][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.049140][T14677] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=46
[  975.049810][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.057947][T14677] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=46
[  975.057992][T14677] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=46
[  975.072495][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.090415][T14677] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=46
[  975.134117][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.149833][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.157599][ T3544] hid-generic 0000:3000000:0000.013A: unknown main item tag 0x0
[  975.166019][ T3544] hid-generic 0000:3000000:0000.013A: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[  975.416574][T14684] loop4: detected capacity change from 0 to 512
[  975.476325][T14684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  975.486151][ T3544] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  975.502944][T14684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  975.512266][T14684] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038 (0x7fffffff)
[  975.538855][T14684] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  975.571540][T12303] EXT4-fs (loop4): unmounting filesystem.
[  975.647691][T14690] serio: Serial port ptm0
[  975.683748][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x4
[  975.691684][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x2
[  975.699732][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.724127][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.744308][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.759948][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.768350][T14698] loop3: detected capacity change from 0 to 512
[  975.788579][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.796052][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.820113][T14698] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  975.830245][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.830993][T14698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  975.841084][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.845593][T14698] System zones: 1-12
[  975.853233][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.864336][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.864607][T14698] EXT4-fs (loop3): 1 truncate cleaned up
[  975.872043][ T3544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  975.888175][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.895624][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.903499][T14698] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  975.913958][ T3544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  975.928714][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.937856][ T3544] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  975.950860][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.958538][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.966272][ T3544] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  975.975177][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.982961][ T3544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.990992][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  975.999335][ T3544] usb 2-1: config 0 descriptor??
[  976.004175][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  976.011961][  T434] hid-generic 0000:3000000:0000.013B: unknown main item tag 0x0
[  976.020128][  T434] hid-generic 0000:3000000:0000.013B: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  976.497289][ T3544] plantronics 0003:047F:FFFF.013C: No inputs registered, leaving
[  976.509491][ T3544] plantronics 0003:047F:FFFF.013C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  976.563101][   T28] audit: type=1400 audit(2000000111.039:19917): avc:  denied  { mounton } for  pid=14708 comm="syz.0.3453" path="/129/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  976.636171][T14713] FAULT_INJECTION: forcing a failure.
[  976.636171][T14713] name failslab, interval 1, probability 0, space 0, times 0
[  976.656153][T14713] CPU: 0 PID: 14713 Comm: syz.4.3454 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0
[  976.665788][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  976.675683][T14713] Call Trace:
[  976.678804][T14713]  <TASK>
[  976.681582][T14713]  dump_stack_lvl+0x151/0x1b7
[  976.686095][T14713]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  976.691386][T14713]  ? stack_trace_save+0x113/0x1c0
[  976.696249][T14713]  ? stack_trace_snprint+0xf0/0xf0
[  976.701200][T14713]  dump_stack+0x15/0x1c
[  976.705187][T14713]  should_fail_ex+0x3d0/0x520
[  976.709701][T14713]  ? parse_opts+0x17a/0x690
[  976.714041][T14713]  __should_failslab+0xaf/0xf0
[  976.714766][T14707] loop2: detected capacity change from 0 to 40427
[  976.718636][T14713]  should_failslab+0x9/0x20
[  976.718658][T14713]  __kmem_cache_alloc_node+0x3d/0x250
[  976.718674][T14713]  ? v9fs_session_init+0x1f2/0x1950
[  976.718690][T14713]  ? legacy_get_tree+0xf1/0x190
[  976.744595][T14713]  ? vfs_get_tree+0x88/0x290
[  976.749019][T14713]  ? parse_opts+0x17a/0x690
[  976.753353][T14713]  __kmalloc_node_track_caller+0xa2/0x1e0
[  976.758911][T14713]  kstrdup+0x39/0x70
[  976.762640][T14713]  parse_opts+0x17a/0x690
[  976.766808][T14713]  ? p9_fd_show_options+0x1b0/0x1b0
[  976.771841][T14713]  ? debug_smp_processor_id+0x17/0x20
[  976.777047][T14713]  p9_fd_create+0x8d/0x520
[  976.781302][T14713]  ? p9_fd_create_unix+0x480/0x480
[  976.786247][T14713]  ? p9_client_create+0x770/0x11c0
[  976.791198][T14713]  ? p9_client_create+0x770/0x11c0
[  976.796141][T14713]  p9_client_create+0x867/0x11c0
[  976.800918][T14713]  ? do_trace_9p_fid_put+0x110/0x110
[  976.806038][T14713]  ? kstrdup+0x54/0x70
[  976.809946][T14713]  v9fs_session_init+0x1f2/0x1950
[  976.814805][T14713]  ? v9fs_show_options+0x570/0x570
[  976.819761][T14713]  ? kasan_save_alloc_info+0x1f/0x30
[  976.824869][T14713]  ? __kasan_kmalloc+0x9c/0xb0
[  976.829471][T14713]  ? kmalloc_trace+0x44/0xa0
[  976.833895][T14713]  v9fs_mount+0xca/0xb60
[  976.837976][T14713]  ? incfs_get_verity_signature+0x420/0x420
[  976.843702][T14713]  ? cap_capable+0x1d2/0x270
[  976.848133][T14713]  legacy_get_tree+0xf1/0x190
[  976.852642][T14713]  ? incfs_get_verity_signature+0x420/0x420
[  976.858372][T14713]  vfs_get_tree+0x88/0x290
[  976.862624][T14713]  do_new_mount+0x2ba/0xb30
[  976.866964][T14713]  ? do_move_mount_old+0x160/0x160
[  976.871909][T14713]  ? security_capable+0x87/0xb0
[  976.876598][T14713]  ? ns_capable+0x89/0xe0
[  976.880763][T14713]  path_mount+0x671/0x1070
[  976.885016][T14713]  ? user_path_at_empty+0x14e/0x1a0
[  976.890062][T14713]  __se_sys_mount+0x2c4/0x3b0
[  976.894565][T14713]  ? __this_cpu_preempt_check+0x13/0x20
[  976.899952][T14713]  ? __x64_sys_mount+0xd0/0xd0
[  976.904546][T14713]  ? debug_smp_processor_id+0x17/0x20
[  976.909753][T14713]  __x64_sys_mount+0xbf/0xd0
[  976.914181][T14713]  x64_sys_call+0x49d/0x9a0
[  976.918528][T14713]  do_syscall_64+0x3b/0xb0
[  976.922771][T14713]  ? clear_bhb_loop+0x55/0xb0
[  976.927288][T14713]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  976.933015][T14713] RIP: 0033:0x7f08f317dff9
[  976.937268][T14713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  976.956709][T14713] RSP: 002b:00007f08f3eec038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  976.964951][T14713] RAX: ffffffffffffffda RBX: 00007f08f3335f80 RCX: 00007f08f317dff9
[  976.972765][T14713] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000
[  976.980572][T14713] RBP: 00007f08f3eec090 R08: 0000000020000140 R09: 0000000000000000
[  976.988385][T14713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  976.996196][T14713] R13: 0000000000000000 R14: 00007f08f3335f80 R15: 00007ffe953e2ca8
[  977.004013][T14713]  </TASK>
[  977.017684][T12054] EXT4-fs (loop3): unmounting filesystem.
[  977.024722][T14707] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  977.034603][T14707] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  977.055395][T14707] F2FS-fs (loop2): Found nat_bits in checkpoint
[  977.070806][T14725] loop4: detected capacity change from 0 to 512
[  977.096256][T14725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  977.105045][T14707] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  977.112002][T14707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  977.130922][T14725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  977.140607][T14725] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038 (0x7fffffff)
[  977.165396][T14725] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  977.192418][T12303] EXT4-fs (loop4): unmounting filesystem.
[  977.259830][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x4
[  977.276154][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x2
[  977.283800][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.306141][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.306158][ T5612] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  977.313625][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.337499][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.344962][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.366395][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.373879][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.381749][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.389464][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.397030][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.404485][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.409995][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x4
[  977.412300][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.426502][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x2
[  977.427128][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.449138][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.463208][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.477420][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.486951][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.492779][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.494451][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.508468][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.509539][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.521217][  T866] hid-generic 0000:3000000:0000.013D: unknown main item tag 0x0
[  977.524272][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.539523][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.540248][  T866] hid-generic 0000:3000000:0000.013D: hidraw1: <UNKNOWN> HID v0.00 Device [] on 
[  977.547040][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.563927][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.579063][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.587051][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.594607][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.602099][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.609733][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.617326][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.624877][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.632598][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.640173][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.648094][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.655638][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.663443][  T434] hid-generic 0000:3000000:0000.013E: unknown main item tag 0x0
[  977.672883][  T434] hid-generic 0000:3000000:0000.013E: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  977.686268][   T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  977.736826][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  977.747675][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  977.758252][ T5612] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[  977.767680][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.778138][ T5612] usb 1-1: config 0 descriptor??
[  977.946165][   T24] usb 3-1: Using ep0 maxpacket: 8
[  978.066270][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  978.236342][   T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  978.249305][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.257410][   T24] usb 3-1: Product: syz
[  978.261375][   T24] usb 3-1: Manufacturer: syz
[  978.265803][   T24] usb 3-1: SerialNumber: syz
[  978.288150][T14493] EXT4-fs (loop1): unmounting filesystem.
[  978.297079][   T24] usb 3-1: config 0 descriptor??
[  978.341400][ T5612] sony 0003:12BA:0100.013F: hidraw1: USB HID vff.ff Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0
[  978.352688][ T5612] sony 0003:12BA:0100.013F: failed to claim input
[  978.586216][   T24] usb 3-1: Found UVC 0.00 device syz (8086:0b03)
[  978.592425][   T24] usb 3-1: No valid video chain found.
[  978.788207][ T5612] usb 3-1: USB disconnect, device number 95
[  978.956478][  T866] usb 2-1: USB disconnect, device number 105
[  978.966196][   T24] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  979.208578][   T24] usb 5-1: Using ep0 maxpacket: 16
[  979.214632][T14762] loop3: detected capacity change from 0 to 512
[  979.221470][T14762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  979.231791][T14762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  979.239721][T14762] System zones: 1-12
[  979.244638][T14762] EXT4-fs (loop3): 1 truncate cleaned up
[  979.250141][T14762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  979.326184][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  979.336999][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  979.356248][   T24] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  979.366341][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.375757][   T24] usb 5-1: config 0 descriptor??
[  979.403640][T14773] loop1: detected capacity change from 0 to 512
[  979.423683][T14773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  979.437783][T14773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  979.446575][T14773] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff)
[  979.463058][T14773] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  979.490729][T14493] EXT4-fs (loop1): unmounting filesystem.
[  979.626150][ T5612] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  979.765651][T14782] loop4: detected capacity change from 0 to 256
[  979.773781][T14782] FAT-fs (loop4): Unrecognized mount option "dont_measure" or missing value
[  980.001580][T12657] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  980.044447][  T710] usb 1-1: USB disconnect, device number 96
[  980.087872][T12054] EXT4-fs (loop3): unmounting filesystem.
[  980.129820][T14789] FAULT_INJECTION: forcing a failure.
[  980.129820][T14789] name failslab, interval 1, probability 0, space 0, times 0
[  980.142352][T14789] CPU: 1 PID: 14789 Comm: syz.3.3473 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0
[  980.151966][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  980.161864][T14789] Call Trace:
[  980.164987][T14789]  <TASK>
[  980.167762][T14789]  dump_stack_lvl+0x151/0x1b7
[  980.172277][T14789]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  980.177570][T14789]  dump_stack+0x15/0x1c
[  980.181562][T14789]  should_fail_ex+0x3d0/0x520
[  980.186075][T14789]  ? security_inode_alloc+0x29/0x120
[  980.191194][T14789]  __should_failslab+0xaf/0xf0
[  980.195796][T14789]  should_failslab+0x9/0x20
[  980.200134][T14789]  kmem_cache_alloc+0x3b/0x2c0
[  980.204735][T14789]  security_inode_alloc+0x29/0x120
[  980.209680][T14789]  inode_init_always+0x720/0x970
[  980.214455][T14789]  ? shmem_match+0x180/0x180
[  980.218880][T14789]  new_inode_pseudo+0x98/0x1d0
[  980.223507][T14789]  new_inode+0x28/0x1c0
[  980.227497][T14789]  shmem_get_inode+0x32d/0xc20
[  980.232084][T14789]  __shmem_file_setup+0x111/0x2a0
[  980.236939][T14789]  shmem_file_setup+0x2f/0x40
[  980.241459][T14789]  __se_sys_memfd_create+0x1e1/0x3e0
[  980.246575][T14789]  __x64_sys_memfd_create+0x5b/0x70
[  980.251604][T14789]  x64_sys_call+0x871/0x9a0
[  980.255943][T14789]  do_syscall_64+0x3b/0xb0
[  980.260196][T14789]  ? clear_bhb_loop+0x55/0xb0
[  980.264707][T14789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.270438][T14789] RIP: 0033:0x7f9975d7dff9
[  980.274689][T14789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  980.294132][T14789] RSP: 002b:00007f9976b2ce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  980.302376][T14789] RAX: ffffffffffffffda RBX: 0000000000005505 RCX: 00007f9975d7dff9
[  980.310186][T14789] RDX: 00007f9976b2cef0 RSI: 0000000000000000 RDI: 00007f9975df0b02
[  980.317996][T14789] RBP: 0000000020002480 R08: 00007f9976b2cbb7 R09: 00007f9976b2ce40
[  980.325810][T14789] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0
[  980.333707][T14789] R13: 00007f9976b2cef0 R14: 00007f9976b2ceb0 R15: 00000000200002c0
[  980.341521][T14789]  </TASK>
[  980.355049][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x4
[  980.362607][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x2
[  980.376144][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.376499][ T5612] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.383615][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.383644][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.435688][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.443413][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.451097][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.466232][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.480834][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.489233][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.496884][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.515458][T14796] loop1: detected capacity change from 0 to 1024
[  980.528129][T14796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  980.545494][T14493] EXT4-fs (loop1): unmounting filesystem.
[  980.562401][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.570041][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.577715][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.585264][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.592871][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.600464][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.615737][ T5612] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  980.624816][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.632777][ T5612] usb 3-1: Product: syz
[  980.636825][ T5612] usb 3-1: Manufacturer: syz
[  980.641224][ T5612] usb 3-1: SerialNumber: syz
[  980.647275][ T5612] usb 3-1: config 0 descriptor??
[  980.655431][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.663120][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.670798][  T866] hid-generic 0000:3000000:0000.0140: unknown main item tag 0x0
[  980.678780][  T866] hid-generic 0000:3000000:0000.0140: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[  980.836167][   T28] audit: type=1400 audit(2000000115.309:19918): avc:  denied  { mounton } for  pid=14800 comm="syz.1.3476" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  980.907808][ T5612] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  980.916970][ T5612] usb 3-1: USB disconnect, device number 96
[  981.306370][T12657] udevd[12657]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  981.420050][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x4
[  981.427874][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x2
[  981.435409][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.443044][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.463001][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.471036][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.478392][T14814] loop2: detected capacity change from 0 to 512
[  981.478780][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.492229][T14814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  981.495386][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.507671][T14814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  981.508118][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.517130][T14814] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038 (0x7fffffff)
[  981.524704][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.541682][  T866] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  981.601577][T14814] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  981.786903][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.794551][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.803930][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.812129][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.812794][T10909] EXT4-fs (loop2): unmounting filesystem.
[  981.819659][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.819681][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.819700][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.840174][  T866] usb 4-1: Using ep0 maxpacket: 8
[  981.856342][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  981.862120][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.862144][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.862163][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.886293][   T24] usbhid: probe of 5-1:0.0 failed with error -71
[  981.894597][ T5612] hid-generic 0000:3000000:0000.0141: unknown main item tag 0x0
[  981.899452][   T24] usb 5-1: USB disconnect, device number 97
[  981.904597][ T5612] hid-generic 0000:3000000:0000.0141: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  982.006226][  T866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  982.016140][T14827] loop2: detected capacity change from 0 to 512
[  982.025446][  T866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  982.026269][T14827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  982.034766][  T866] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  982.057722][T14827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  982.065527][T14827] System zones: 1-12
[  982.070727][T14827] EXT4-fs (loop2): 1 truncate cleaned up
[  982.076537][T14827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  982.226363][  T866] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  982.297901][T14822] loop4: detected capacity change from 0 to 40427
[  982.305982][T14822] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(12288)
[  982.313648][  T866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.323517][  T866] usb 4-1: Product: syz
[  982.326742][T14822] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  982.327887][  T866] usb 4-1: Manufacturer: syz
[  982.340278][  T866] usb 4-1: SerialNumber: syz
[  982.342890][T14822] F2FS-fs (loop4): Unrecognized mount option "usrquota=fsync_mode=strict" or missing value
[  982.383786][T14834] loop4: detected capacity change from 0 to 1024
[  982.386547][  T866] cdc_ncm 4-1:1.0: skipping garbage
[  982.399041][  T866] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  982.408185][  T866] cdc_ncm 4-1:1.0: bind() failure
[  982.416615][T14834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  982.434152][T12303] EXT4-fs (loop4): unmounting filesystem.
[  982.644454][   T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  982.850193][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x4
[  982.860850][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x2
[  982.876630][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.891347][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.907074][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.916128][   T24] usb 2-1: Using ep0 maxpacket: 32
[  982.916625][T10909] EXT4-fs (loop2): unmounting filesystem.
[  982.926945][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.942560][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.953956][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.961573][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.969110][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.976762][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.984225][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.991723][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  982.999253][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  983.006861][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  983.014299][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  983.022171][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  983.029717][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  983.037247][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  983.048050][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  983.057733][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  983.065265][   T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00
[  983.074172][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  983.083456][  T866] hid-generic 0000:3000000:0000.0142: unknown main item tag 0x0
[  983.091000][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.157537][   T24] usb 2-1: config 0 descriptor??
[  983.162442][  T866] hid-generic 0000:3000000:0000.0142: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[  983.647122][   T24] wacom 0003:056A:00CC.0143: unknown main item tag 0x0
[  983.654418][   T24] wacom 0003:056A:00CC.0143: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.1-1/input0
[  983.850352][T14832] loop1: detected capacity change from 0 to 256
[  983.865046][T14859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  983.893210][T14832] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d)
[  983.906016][T14859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  984.033550][T14862] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  984.207372][T14862] loop4: detected capacity change from 0 to 1024
[  984.215140][T14862] EXT4-fs: Ignoring removed bh option
[  984.577153][T14862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  984.604873][T14861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32625 sclass=netlink_route_socket pid=14861 comm=syz.4.3491
[  984.658648][T14872] FAULT_INJECTION: forcing a failure.
[  984.658648][T14872] name failslab, interval 1, probability 0, space 0, times 0
[  984.671123][T14872] CPU: 0 PID: 14872 Comm: syz.2.3492 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0
[  984.680695][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  984.690588][T14872] Call Trace:
[  984.693712][T14872]  <TASK>
[  984.696493][T14872]  dump_stack_lvl+0x151/0x1b7
[  984.701006][T14872]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  984.706307][T14872]  ? stack_trace_save+0x113/0x1c0
[  984.711163][T14872]  ? stack_trace_snprint+0xf0/0xf0
[  984.716104][T14872]  dump_stack+0x15/0x1c
[  984.720097][T14872]  should_fail_ex+0x3d0/0x520
[  984.724612][T14872]  ? parse_opts+0x17a/0x690
[  984.728952][T14872]  __should_failslab+0xaf/0xf0
[  984.733552][T14872]  should_failslab+0x9/0x20
[  984.737887][T14872]  __kmem_cache_alloc_node+0x3d/0x250
[  984.743093][T14872]  ? v9fs_session_init+0x1f2/0x1950
[  984.748129][T14872]  ? legacy_get_tree+0xf1/0x190
[  984.752900][T14872]  ? vfs_get_tree+0x88/0x290
[  984.757328][T14872]  ? parse_opts+0x17a/0x690
[  984.761671][T14872]  __kmalloc_node_track_caller+0xa2/0x1e0
[  984.767221][T14872]  kstrdup+0x39/0x70
[  984.770953][T14872]  parse_opts+0x17a/0x690
[  984.775119][T14872]  ? p9_fd_show_options+0x1b0/0x1b0
[  984.780160][T14872]  ? debug_smp_processor_id+0x17/0x20
[  984.785367][T14872]  p9_fd_create+0x8d/0x520
[  984.789618][T14872]  ? p9_fd_create_unix+0x480/0x480
[  984.794563][T14872]  ? p9_client_create+0x770/0x11c0
[  984.799509][T14872]  ? p9_client_create+0x770/0x11c0
[  984.804454][T14872]  p9_client_create+0x867/0x11c0
[  984.809236][T14872]  ? do_trace_9p_fid_put+0x110/0x110
[  984.814350][T14872]  ? kstrdup+0x54/0x70
[  984.818260][T14872]  v9fs_session_init+0x1f2/0x1950
[  984.823120][T14872]  ? v9fs_show_options+0x570/0x570
[  984.828066][T14872]  ? kasan_save_alloc_info+0x1f/0x30
[  984.833183][T14872]  ? __kasan_kmalloc+0x9c/0xb0
[  984.837782][T14872]  ? kmalloc_trace+0x44/0xa0
[  984.842297][T14872]  v9fs_mount+0xca/0xb60
[  984.846376][T14872]  ? incfs_get_verity_signature+0x420/0x420
[  984.852103][T14872]  ? cap_capable+0x1d2/0x270
[  984.856533][T14872]  legacy_get_tree+0xf1/0x190
[  984.861059][T14872]  ? incfs_get_verity_signature+0x420/0x420
[  984.867040][T14872]  vfs_get_tree+0x88/0x290
[  984.871294][T14872]  do_new_mount+0x2ba/0xb30
[  984.875642][T14872]  ? do_move_mount_old+0x160/0x160
[  984.880580][T14872]  ? security_capable+0x87/0xb0
[  984.885270][T14872]  ? ns_capable+0x89/0xe0
[  984.889434][T14872]  path_mount+0x671/0x1070
[  984.893690][T14872]  ? user_path_at_empty+0x14e/0x1a0
[  984.898725][T14872]  __se_sys_mount+0x2c4/0x3b0
[  984.903233][T14872]  ? __this_cpu_preempt_check+0x13/0x20
[  984.908621][T14872]  ? __x64_sys_mount+0xd0/0xd0
[  984.913243][T14872]  ? debug_smp_processor_id+0x17/0x20
[  984.918425][T14872]  __x64_sys_mount+0xbf/0xd0
[  984.922847][T14872]  x64_sys_call+0x49d/0x9a0
[  984.927187][T14872]  do_syscall_64+0x3b/0xb0
[  984.931441][T14872]  ? clear_bhb_loop+0x55/0xb0
[  984.935953][T14872]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  984.941691][T14872] RIP: 0033:0x7f2043b7dff9
[  984.945934][T14872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  984.965376][T14872] RSP: 002b:00007f20448bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  984.973619][T14872] RAX: ffffffffffffffda RBX: 00007f2043d35f80 RCX: 00007f2043b7dff9
[  984.981430][T14872] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000
[  984.989240][T14872] RBP: 00007f20448bc090 R08: 0000000020000140 R09: 0000000000000000
[  984.997052][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  985.004863][T14872] R13: 0000000000000000 R14: 00007f2043d35f80 R15: 00007ffeb9d84298
[  985.012680][T14872]  </TASK>
[  985.048382][T12303] EXT4-fs (loop4): unmounting filesystem.
[  985.054872][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x4
[  985.062785][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x2
[  985.070667][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.078346][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.085895][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.093585][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.101823][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.110021][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.123134][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.133233][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.140888][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.150376][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.158110][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.167887][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.175393][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.187698][  T866] usb 4-1: USB disconnect, device number 66
[  985.381102][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.386618][T14894] loop4: detected capacity change from 0 to 512
[  985.399845][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.401315][T14892] loop3: detected capacity change from 0 to 512
[  985.427361][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.434919][T14894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  985.444602][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.445294][T14892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  985.452147][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.467950][  T434] hid-generic 0000:3000000:0000.0144: unknown main item tag 0x0
[  985.476602][  T434] hid-generic 0000:3000000:0000.0144: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  985.486820][T14894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  985.494678][T14894] System zones: 1-12
[  985.507940][T14894] EXT4-fs (loop4): 1 truncate cleaned up
[  985.516989][T14894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  985.607369][T14892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  985.635509][T14892] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038 (0x7fffffff)
[  985.645088][  T434] usb 2-1: USB disconnect, device number 106
[  985.761658][T14892] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  985.791524][T12054] EXT4-fs (loop3): unmounting filesystem.
[  985.867490][T14902] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3500'.
[  986.097970][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x4
[  986.108553][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x2
[  986.125295][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.142121][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.156371][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.169322][T14909] loop2: detected capacity change from 0 to 1024
[  986.175527][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.183937][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.191719][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.199661][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.207408][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.219156][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.227738][T14909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  986.238179][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.252463][T10909] EXT4-fs (loop2): unmounting filesystem.
[  986.263229][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.356129][  T866] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  986.423808][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.433192][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.435883][T14916] loop2: detected capacity change from 0 to 512
[  986.440734][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.440758][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.440777][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.460191][T14916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  986.461762][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.484869][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.492481][ T3544] hid-generic 0000:3000000:0000.0145: unknown main item tag 0x0
[  986.498778][T14916] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  986.508934][ T3544] hid-generic 0000:3000000:0000.0145: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[  986.508995][T14916] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038 (0x7fffffff)
[  986.564343][T14916] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  986.593064][T12303] EXT4-fs (loop4): unmounting filesystem.
[  986.600621][T10909] EXT4-fs (loop2): unmounting filesystem.
[  986.643548][T14922] loop4: detected capacity change from 0 to 4096
[  986.654654][T14922] EXT4-fs: Ignoring removed nomblk_io_submit option
[  986.662421][T14922] EXT4-fs (loop4): Test dummy encryption mode enabled
[  986.674061][T14922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  987.266681][  T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  987.279158][  T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  987.300720][  T866] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  987.380515][  T866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.425739][  T866] usb 1-1: config 0 descriptor??
[  987.495213][T12303] EXT4-fs (loop4): unmounting filesystem.
[  987.627990][T14947] loop2: detected capacity change from 0 to 512
[  987.648339][T14947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  987.661062][T14947] EXT4-fs (loop2): 1 truncate cleaned up
[  987.666940][T14947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  987.689856][T14947] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  987.698826][T14947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  987.768881][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3511'.
[  987.908201][  T866] arvo 0003:1E7D:30D4.0146: item fetching failed at offset 5/7
[  987.918916][  T866] arvo 0003:1E7D:30D4.0146: parse failed
[  987.927632][  T866] arvo: probe of 0003:1E7D:30D4.0146 failed with error -22
[  987.941262][T10909] EXT4-fs (loop2): unmounting filesystem.
[  987.969203][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x4
[  987.992494][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x2
[  988.009356][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.024812][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.039598][T14953] loop2: detected capacity change from 0 to 512
[  988.045946][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.054438][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.062348][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.070091][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.073378][T14953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  988.077664][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.086524][T14953] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038 (0x7fffffff)
[  988.129738][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.143040][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.223653][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.295157][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.904963][T14961] loop3: detected capacity change from 0 to 16
[  988.911089][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.917579][T14961] erofs: (device loop3): mounted with root inode @ nid 36.
[  988.931629][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.944111][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.944928][T14961] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 1 for nid 36
[  988.961276][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.970391][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.977983][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.985531][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  988.993105][ T5612] hid-generic 0000:3000000:0000.0147: unknown main item tag 0x0
[  989.034574][T10909] EXT4-fs (loop2): unmounting filesystem.
[  989.042978][ T5612] hid-generic 0000:3000000:0000.0147: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  989.113298][T14971] loop1: detected capacity change from 0 to 512
[  989.128032][T14971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  989.156535][T14971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  989.172488][T14971] System zones: 1-12
[  989.182650][T14971] EXT4-fs (loop1): 1 truncate cleaned up
[  989.199421][T14971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  989.254662][T14967] loop4: detected capacity change from 0 to 40427
[  989.276052][T14967] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  989.292930][T14967] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  989.307511][T14967] F2FS-fs (loop4): invalid crc value
[  989.323571][T14967] F2FS-fs (loop4): Found nat_bits in checkpoint
[  989.398412][T14967] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  989.405389][T14967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  989.425788][T14969] loop2: detected capacity change from 0 to 40427
[  989.467262][T14984] tmpfs: Unknown parameter 'nolazytime��'
[  989.497309][T14984] loop3: detected capacity change from 0 to 512
[  989.539391][T14969] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  989.608686][T14969] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  989.628214][T14984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  989.637028][T14984] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038 (0x7fffffff)
[  989.647553][T14984] EXT4-fs (loop3): unmounting filesystem.
[  989.656619][T14969] F2FS-fs (loop2): Found nat_bits in checkpoint
[  989.796315][T14969] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  989.805971][T14969] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  989.995642][ T5612] usb 1-1: USB disconnect, device number 97
[  990.173734][T15007] 9pnet_fd: Insufficient options for proto=fd
[  990.193099][T15007] loop3: detected capacity change from 0 to 512
[  990.269381][T15007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  990.278667][T14493] EXT4-fs (loop1): unmounting filesystem.
[  990.284306][T15007] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff)
[  990.373049][T15007] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.3523: corrupted inode contents
[  990.430491][   T28] audit: type=1400 audit(2000000124.909:19919): avc:  denied  { write } for  pid=15012 comm="syz.1.3525" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  990.512879][T15007] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.3523: mark_inode_dirty error
[  990.536542][T15007] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.3523: corrupted inode contents
[  990.556146][T15007] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.3523: mark_inode_dirty error
[  990.846670][ T1931] usb 2-1: new low-speed USB device number 107 using dummy_hcd
[  990.991836][T15005] loop4: detected capacity change from 0 to 40427
[  991.007496][T15005] F2FS-fs (loop4): invalid crc value
[  991.023767][T15005] F2FS-fs (loop4): Found nat_bits in checkpoint
[  991.039705][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  991.119249][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  991.141895][T15005] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  991.276335][ T1931] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  991.294509][ T1931] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  991.326621][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  991.392669][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  991.410159][ T1931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  991.413372][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  991.442224][T12054] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  991.464071][T12303] syz-executor: attempt to access beyond end of device
[  991.464071][T12303] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  991.637441][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x4
[  991.649085][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x2
[  991.664799][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.679476][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.687102][ T1931] usb 2-1: string descriptor 0 read error: -22
[  991.693139][ T1931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  991.755154][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.762720][ T1931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.770828][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.779919][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.788482][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.796020][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.803513][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.811140][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  991.819144][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  992.927883][ T1931] usb 2-1: 0:2 : does not exist
[  992.932876][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  992.942359][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  992.993343][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  993.055229][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  993.062819][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  993.070357][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  993.078003][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  993.085440][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  993.093026][  T866] hid-generic 0000:3000000:0000.0148: unknown main item tag 0x0
[  993.170108][  T300] usb 2-1: USB disconnect, device number 107
[  993.172515][T15045] xt_bpf: check failed: parse error
[  993.183451][  T866] hid-generic 0000:3000000:0000.0148: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[  993.496138][  T866] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  993.616450][T10370] udevd[10370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  993.866172][  T866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  993.931213][T15054] loop2: detected capacity change from 0 to 40427
[  993.958836][T15054] F2FS-fs (loop2): Unrecognized mount option "0xffffffffffffffff��������" or missing value
[  994.036788][T15054] loop2: detected capacity change from 0 to 512
[  994.043134][T15054] EXT4-fs: Ignoring removed mblk_io_submit option
[  994.049635][  T866] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  994.058787][  T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.066791][T15054] EXT4-fs: Ignoring removed i_version option
[  994.072609][  T866] usb 5-1: Product: syz
[  994.077218][  T866] usb 5-1: Manufacturer: syz
[  994.081623][  T866] usb 5-1: SerialNumber: syz
[  994.087504][  T866] usb 5-1: config 0 descriptor??
[  994.092863][T15054] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.3535: invalid block
[  994.103849][T15054] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.3535: couldn't read orphan inode 11 (err -117)
[  994.115775][T15054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  994.347690][  T866] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  994.357841][  T866] usb 5-1: USB disconnect, device number 98
[  994.364903][T12054] EXT4-fs (loop3): unmounting filesystem.
[  994.380869][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x4
[  994.391286][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x2
[  994.399365][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.406881][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.414534][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.422910][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.435996][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.443688][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.451509][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.465225][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.476928][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.484484][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.491903][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.499425][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.510598][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.518121][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.525576][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.533045][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.540621][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.550460][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.557992][ T5612] hid-generic 0000:3000000:0000.0149: unknown main item tag 0x0
[  994.570765][ T5612] hid-generic 0000:3000000:0000.0149: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  994.618812][T10370] udevd[10370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  994.668302][T10909] EXT4-fs (loop2): unmounting filesystem.
[  994.956141][  T866] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  995.006798][  T320] device bridge_slave_1 left promiscuous mode
[  995.012728][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.020000][  T320] device bridge_slave_0 left promiscuous mode
[  995.025948][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[  995.033439][  T320] device veth1_macvtap left promiscuous mode
[  995.039428][  T320] device veth0_vlan left promiscuous mode
[  995.164301][T15076] loop2: detected capacity change from 0 to 512
[  995.177242][T15076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  995.187666][T15076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  995.196711][T15076] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038 (0x7fffffff)
[  995.209930][T15076] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  995.238833][T10909] EXT4-fs (loop2): unmounting filesystem.
[  995.316187][  T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  995.326952][  T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  995.336467][  T866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  995.349252][  T866] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  995.358067][  T866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.366319][  T866] usb 1-1: config 0 descriptor??
[  995.677273][T15083] loop1: detected capacity change from 0 to 512
[  995.698859][   T28] audit: type=1400 audit(2000000130.179:19920): avc:  denied  { call } for  pid=15085 comm="syz.2.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  995.719497][T15083] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  995.728578][T15083] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff)
[  995.847285][  T866] plantronics 0003:047F:FFFF.014A: No inputs registered, leaving
[  995.868445][  T866] plantronics 0003:047F:FFFF.014A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  996.290133][T15100] loop2: detected capacity change from 0 to 16
[  996.297839][T15100] erofs: (device loop2): mounted with root inode @ nid 36.
[  996.564940][T14493] EXT4-fs (loop1): unmounting filesystem.
[  996.616158][  T300] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  996.906129][  T300] usb 5-1: device descriptor read/64, error -71
[  996.998025][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x4
[  997.005595][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x2
[  997.013063][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.051843][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.059481][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.067168][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.074613][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.082132][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.089560][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.097513][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.104963][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.112475][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.119991][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.127663][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.135202][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.142754][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.150401][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.158005][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.165519][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.183345][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.215136][  T866] hid-generic 0000:3000000:0000.014B: unknown main item tag 0x0
[  997.241081][  T866] hid-generic 0000:3000000:0000.014B: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  997.396132][ T1931] usb 1-1: reset high-speed USB device number 98 using dummy_hcd
[  997.416167][  T300] usb 5-1: device descriptor read/64, error -71
[  997.706145][  T300] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  997.817181][T15114] loop2: detected capacity change from 0 to 512
[  997.823917][T15114] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  997.843248][T15114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  997.852364][T15114] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038 (0x7fffffff)
[  997.879150][T15114] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  997.902405][T10909] EXT4-fs (loop2): unmounting filesystem.
[  998.180957][  T300] usb 5-1: device descriptor read/64, error -71
[  998.596152][  T300] usb 5-1: device descriptor read/64, error -71
[  998.661627][  T866] usb 1-1: USB disconnect, device number 98
[  998.720550][T15122] loop1: detected capacity change from 0 to 512
[  998.720984][  T300] usb usb5-port1: attempt power cycle
[  998.736488][T15122] EXT4-fs (loop1): Test dummy encryption mode enabled
[  998.802342][T15122] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.3552: invalid block
[  998.813869][T15122] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.3552: couldn't read orphan inode 11 (err -117)
[  998.825889][T15122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  998.856375][T14493] EXT4-fs (loop1): unmounting filesystem.
[  998.937332][T15129] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3553'.
[  999.156135][  T300] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  999.336182][  T300] usb 5-1: device descriptor read/8, error -71
[  999.616181][  T300] usb 5-1: device descriptor read/8, error -71
[  999.745139][   T28] audit: type=1400 audit(2000000134.219:19921): avc:  denied  { nlmsg_read } for  pid=15136 comm="syz.2.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  999.746961][T15137] netem: change failed
[ 1000.077199][  T300] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1000.286169][  T300] usb 5-1: device descriptor read/8, error -71
[ 1000.603402][  T300] usb 5-1: device descriptor read/8, error -71
[ 1000.726196][  T300] usb usb5-port1: unable to enumerate USB device
[ 1000.854236][T15148] loop2: detected capacity change from 0 to 512
[ 1000.868033][T15148] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1000.878740][T15148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[ 1000.887039][T15148] System zones: 1-12
[ 1000.892594][T15148] EXT4-fs (loop2): 1 truncate cleaned up
[ 1000.898729][T15148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1000.969192][T10909] EXT4-fs (loop2): unmounting filesystem.
[ 1003.375563][T15166] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3561'.
[ 1003.376677][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x4
[ 1003.447018][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x2
[ 1003.454690][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.462494][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.470074][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.477693][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.485146][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.492798][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.500646][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.508710][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.516602][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.524276][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.532289][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.540316][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.548307][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.563470][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.571674][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.579649][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.587698][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.595289][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.603417][  T866] hid-generic 0000:3000000:0000.014C: unknown main item tag 0x0
[ 1003.625922][  T866] hid-generic 0000:3000000:0000.014C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[ 1006.297421][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x4
[ 1006.304905][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x2
[ 1006.313753][T15189] 9pnet_fd: Insufficient options for proto=fd
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: repeatedly failed to execute the program
proc=3 req=3540 state=1 status=67 (errno 9: Bad file descriptor)
[ 1006.418824][   T28] audit: type=1400 audit(2000000140.899:19922): avc:  denied  { write } for  pid=282 comm="syz-executor" path="pipe:[13863]" dev="pipefs" ino=13863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1006.436155][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.476140][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.489825][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.514242][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.526175][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.533643][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.556172][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.576327][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.583825][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.600760][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.610142][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.618843][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.626484][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.633934][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.641762][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.649387][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.657229][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.664673][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.672354][ T1931] hid-generic 0000:3000000:0000.014D: unknown main item tag 0x0
[ 1006.683552][  T320] tipc: Disabling bearer <udp:syz0>
[ 1006.688994][  T320] tipc: Left network mode
[ 1006.689435][ T1931] hid-generic 0000:3000000:0000.014D: hidraw0: <UNKNOWN> HID v0.00 Device [] on 
[ 1006.795070][T15206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.802016][T15206] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.809263][T15206] device bridge_slave_0 entered promiscuous mode
[ 1006.815988][T15206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1006.823144][T15206] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.830335][T15206] device bridge_slave_1 entered promiscuous mode
[ 1006.868147][T15206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1006.874983][T15206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1006.882111][T15206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.888883][T15206] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1006.908412][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1006.915747][  T300] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.922804][  T300] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.937728][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1006.945603][  T866] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.952386][  T866] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1006.959769][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1006.967733][  T866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1006.974545][  T866] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1006.981783][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1006.989495][  T866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1007.004298][T15206] device veth0_vlan entered promiscuous mode
[ 1007.010494][  T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1007.018745][  T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1007.026457][  T434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1007.033582][  T434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1007.045772][T15206] device veth1_macvtap entered promiscuous mode
[ 1007.052699][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1007.063138][  T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1007.072395][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1007.386639][  T320] device bridge_slave_1 left promiscuous mode
[ 1007.392548][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.399946][  T320] device bridge_slave_0 left promiscuous mode
[ 1007.405844][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.413391][  T320] device veth1_macvtap left promiscuous mode
[ 1007.419259][  T320] device veth0_vlan left promiscuous mode
[ 1008.236627][  T320] device bridge_slave_1 left promiscuous mode
[ 1008.242535][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1008.249830][  T320] device bridge_slave_0 left promiscuous mode
[ 1008.255721][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.263408][  T320] device bridge_slave_1 left promiscuous mode
[ 1008.269366][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1008.276572][  T320] device bridge_slave_0 left promiscuous mode
[ 1008.282464][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.290211][  T320] device veth1_macvtap left promiscuous mode
[ 1008.296007][  T320] device veth0_vlan left promiscuous mode
[ 1008.301981][  T320] device veth1_macvtap left promiscuous mode
[ 1008.307871][  T320] device veth0_vlan left promiscuous mode