last executing test programs:

53m26.723999379s ago: executing program 32 (id=34):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f00000000c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)

51m39.082666667s ago: executing program 33 (id=278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r4 = syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x91)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/56)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000000)={0x0, [0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x2, 0xc, 0xff, 0x0, 0x0, 0x43, 0x6, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11], 0x9})
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000a80)=""/4096, &(0x7f0000000280)=0x1000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
read$hidraw(0xffffffffffffffff, &(0x7f0000000240)=""/15, 0xf)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x822b01)
ioctl$EVIOCGRAB(r7, 0x40044590, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$char_usb(r7, &(0x7f0000000040)="e2", 0x1068)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2000]}}]}]}]}, 0x38}}, 0x0)

45m17.917062555s ago: executing program 34 (id=1078):
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
userfaultfd(0x0)

44m45.493036921s ago: executing program 35 (id=1145):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFO40AUhv8ZZxPtaoutVogGJCIRkHBsBxANRQp6JAiIjoiYKOAkKHFBIlFQcQUaCk7ABSgoOAIHCFQ0oaM2sj1JhggIBSAh/q9487/x83jmWfotGYSQH8vd7WOn4188GAD+Io2Umr83BjVSq/9/XSulTlbGLm+OZs8Kp/nh9QSAIHj/8xMArvIGfJUHwfO702pch+zrAiRmlN6EgKn0NiQ2lHYhsKX0nqbrYb1p7lY819ype6VQWGGww+CEITe8v+6xQEnbn9CuN1vt/aLnuY1PFKP6181LLGv7099XrzeW1j8bErbSOQisKb2EVK83cUu0848nBusbX3x+CgqK7yYG/hScC0xr/pTQ/CPrVw+yzVZ7rlItlt2yW3Oc3KI1b1kLTjYyoji+4X+/I3/6o63/65XapEjisOj7DTuO/dyJ40uOm4z8TyIzFedCzelE34N/YjIcMobKCSGEEEIIIYQQQggh5MOZgIj+go7AWY2qnwIAAP//ntd3Nw==")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000c00"], 0x34}}, 0x0)

44m28.971169886s ago: executing program 36 (id=1188):
mlockall(0x7)
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x1, 0xab5, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80306e85, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})

43m35.884624829s ago: executing program 37 (id=1298):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
close(r0)

42m28.322671033s ago: executing program 38 (id=1416):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000240)={r1}, 0x8)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/718], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000), 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

42m15.521754616s ago: executing program 39 (id=1441):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./bus\x00', 0x0)

41m56.902788405s ago: executing program 40 (id=1475):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

41m52.60601021s ago: executing program 41 (id=1485):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x5, &(0x7f00000002c0))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x7)
read$dsp(r3, &(0x7f0000002200)=""/4121, 0x1019)
socket$nl_generic(0x10, 0x3, 0x10)

41m45.414567667s ago: executing program 42 (id=1493):
socket$inet6(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x4000}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x23b)

41m18.418446042s ago: executing program 43 (id=1507):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r7, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222})

41m13.250060224s ago: executing program 44 (id=1520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00')
read(r4, &(0x7f0000001a00)=""/177, 0xb1)

41m2.347597056s ago: executing program 45 (id=1540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002600)=""/46, 0x2e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4085, 0xff5}], 0x3)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
sendmsg$inet(r3, 0x0, 0x20040010)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000040))

40m54.19038996s ago: executing program 46 (id=1561):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x4, 0xd}, {0x1, 0xa}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010140)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x40}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

39m39.826902077s ago: executing program 47 (id=1704):
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42c481, 0x49)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280)

39m37.006183778s ago: executing program 48 (id=1711):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = syz_open_dev$dri(0x0, 0x0, 0x0)
r2 = syz_open_dev$dri(0x0, 0xb, 0x0)
r3 = socket(0xa, 0x801, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsmount(r5, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000300)={'gretap0\x00', <r6=>0x0, 0x7800, 0x8000, 0x10000, 0x200, {{0xf, 0x4, 0x3, 0x14, 0x3c, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @empty, {[@generic={0xd37ad7464843daaf, 0xd, "a8e59d267ce8784ec25688"}, @cipso={0x86, 0x1a, 0x1, [{0x0, 0x9, "f93d0d19c26724"}, {0x5, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3, "d8"}]}]}}}}})
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x2, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080))

35m7.234024636s ago: executing program 49 (id=2309):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
syz_io_uring_setup(0x4170, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x2, "6ce5747de00037b015ae922528523aaca610db088e5724148464b429db167d8e"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x305, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])

32m38.960118071s ago: executing program 50 (id=2611):
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x107382)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x1, {0x0, 0x0, 0x0, 0xffffffffffffff86, 0x7, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2984fcaf1860b5a61f8e2078de86be39f1bb99370491de6bb2c742bcf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ccfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca0206d8b02266a0443e8ae6", [0x3b, 0x4]}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000340)={0x5, 0x4}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000440)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x99, 0x5, 0xffffffff, 0xa5b, 0x4, 0x8, 0xcc}, 0x1c)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000400)=')\r', 0x2, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
fcntl$getown(r5, 0x9)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
close(0xffffffffffffffff)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r6}, 0x8)
symlink(&(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000f80)='./file0\x00')
renameat(0xffffffffffffff9c, &(0x7f0000001200)='./file0/file0\x00', 0xffffffffffffffff, 0x0)

31m22.858324251s ago: executing program 51 (id=2773):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x166b1ab5eb710134)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x187001, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

31m0.08893311s ago: executing program 52 (id=2830):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @private=0xa010101}, 0x10)
listen(r0, 0x8)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x10000000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$caif_stream(0x25, 0x1, 0x5)
recvmmsg(r2, 0x0, 0x0, 0x2000, &(0x7f0000002240)={0x77359400})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f00000000c0)=0x100, 0x4)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x200, 0x0, 0x4000, <r4=>0x0}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e1f, 0x7, @empty, 0x800}}, 0x0, 0x9875}, &(0x7f0000000000)=0x90)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)

30m14.235908292s ago: executing program 53 (id=2919):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect(0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000050bf2920d219acf24f840102030109022f000100000000090400000002060000052406000105240000000d240f0100000000000000e0ff05241a"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000400)='./file1\x00', 0xa2)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x9)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x810)
syz_io_uring_setup(0x237, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb863, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='contention_end\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$midi(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x68040200)
syz_usb_connect$uac1(0x3, 0xb7, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x7, 0x0, 0x2d, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x5}, [@extension_unit={0xb, 0x24, 0x8, 0x5, 0x1, 0x8, "d7cf8c6b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x51c, 0xed, 0x2, "44c9b806755373"}, @as_header={0x7, 0x24, 0x1, 0xf7, 0x9, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x7, 0x1, {0x7, 0x25, 0x1, 0x0, 0xf3, 0xf800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xbc, 0x7, 0x5}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x6, 0x0, "", '\x00'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x1, 0x8, "d6046c"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x3, 0x5e}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x6, 0x9, {0x7, 0x25, 0x1, 0x82, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x2, 0x7f, 0x1, 0xff, 0x3}, 0x3d, &(0x7f0000000580)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0xa, "e12eebca45d394ac7a5889555c36b9a316bbff137d2250c4da50b50f1539df068319d7d5ed550ef6a9d315cd5f2b36d57f0a8e9406"}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x1c, &(0x7f0000000640)=@string={0x1c, 0x3, "5b7da22be317e3d29ff959c3def867152969d1f647837583a6ee"}}]})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f"], 0x0)

23m53.835427747s ago: executing program 54 (id=2866):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$inet(0x2, 0x3, 0x6)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

20m32.388979884s ago: executing program 1 (id=4009):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = dup(0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendfile(r6, r1, 0x0, 0x8a002)

20m31.044353793s ago: executing program 1 (id=4012):
socket$kcm(0x10, 0x2, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x410, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}})
add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary)
r5 = socket$key(0xf, 0x3, 0x2)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000000000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x2, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$key(r5, &(0x7f00000001c0)={0x520, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)={0x0, 0x0, @auto=[0x3e, 0x2d, 0x2f, 0x32, 0x35, 0x38, 0x38, 0x23, 0x11, 0x1e]}, 0x12, 0xfffffffffffffff9)
add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r4)

20m27.492156695s ago: executing program 1 (id=4018):
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

20m24.99694947s ago: executing program 1 (id=4023):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
pipe2$watch_queue(0x0, 0x80)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
io_uring_setup(0x26ce, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="b8a3eb209aa0aaaaaaaaaa0086dd6000010000183afffe800000000000000000000000000000ff020000000000000000000000000001860090780000000000000000000000000000010021000000c0a5f7e42c"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendmmsg$inet(r5, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/213, &(0x7f0000000180)=0xd5)

20m20.490117389s ago: executing program 1 (id=4029):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000201000000000000095000000070000000d7741fdeff136d1bc5a7ece69cc4878dac1f05f7c50a6511c23943e0b4283e9f2a1a18c276d29bdffef8cb8d8ca2fabd537877c6689fe9b764f5cdf9aefa8364305532e206b73d6b2b70d25895a5c2b7508c7e87787f877dca24caff0a61e8da8b99009478b509e8d8dfd472e0cbea3f6ab473b05cf30e4237192a701231c1f21430b2166e1e6af2af741cc775f037210532c806d40a2c91de440f98930013f1959a61ef57be5f3251a9d98374ad8ddd93bc547b186879e6405002e78bd6880b3c92b0407"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x5, @mcast2, 0x135}}, 0x9, 0x8}, &(0x7f0000000040)=0x9c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long}, 0xa)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x20, 0x4000}]})
write$ppp(r4, &(0x7f0000000480)='\x00\x00', 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f020})

20m16.307659297s ago: executing program 1 (id=4036):
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

20m0.312688425s ago: executing program 55 (id=4036):
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

19m48.66762797s ago: executing program 9 (id=4091):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@iv={0x20, 0x117, 0x2, 0x5, "fd61396020"}], 0x20, 0x48844}], 0x1, 0x4800)

19m48.314308832s ago: executing program 9 (id=4093):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mkdir(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=<r4=>0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xa}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
r6 = dup(r5)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

19m47.057361541s ago: executing program 9 (id=4095):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x404080, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000900, 0x0, 0x0)

19m45.666367991s ago: executing program 9 (id=4097):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="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", 0x101}, {&(0x7f0000000380)="08d69fe50cd7a79471d8419b0bb9ae9b86ca44a80d0bd986922f24a62dd8eec5a0b561b310cdaa32d1cf3a8aa7e804b357ae5dd9eeb928195a18529d312903a94064febfa8ccfc631a0cded488fa8ca30ab8250663c2b424cf00c0ae599a053846d0c7bc4324a699599efa42", 0x6c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f473bd20961055d421dddedefb9ae7d19d2e90794b7c3451cdeaa1686532da2bb4242f67d0ca994160489a907022d9eba15b6b20a3bd9c0f5fffbeb0afd938ad450965d029a21acd778434ccbbd22acbf6ef365cefd4b961859e375d2c030b79f473b315826d873d28ca4440606b", 0x6e}], 0x1}}], 0x2, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)

19m44.65385351s ago: executing program 9 (id=4102):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c5e9abdb17bd8f26356887bcd2f78aeec77d079ed499cf32e3ac447e64f4dd0cbc510a7bc28fdd1a11905e4318e1db9ed93fbdf59ce2710d9ae7be87f82c647d98c6501b59666500000002904a5d79aed38d8a071d176f95daef0bce85efbb111f2d118175000000010100000000000000d8cce1fc88a333a08d964e29718cbba0239c0eaaecdf57c1bcfa6270d1f383eedd515713d1c48ed7e976b80cf0d9e60e1d359fa02a1cdd4ed4b27275bae516be6b4aef0cb030c23b8b05c7742ade4eaa66084820ac46c0672e253fac91bc36fde2473bf66bba7145c4d241d53d50ff7f0000000000005236b941f8f4232fc063d3f7d449e0d00f381502eb01ea1e54096eddf872dc277456edbc0519dbf7bd9308d8b2be27c894b9ce66c37d153af8872aa5356aecff710cc8247f21e2a3cf1011ff0e0e489837991a25dd89828f85d1477c25329a683ca60a192195a8b6ecde5ac6e210f85a8592f6c90535140517e8fd7052fdee8266d518ae9fdf927ca71053fc2898a00fc66d58acf7d1a13a8a519f08a4e87abf666fa9923173f6c38edf08e6ed56acee6f1ab94e0770f3e2397c63dc8c4476f6b373dc7ea47fb54a5ff3842bb201a8fd0b90eac6597a0fc9d8be2adea17e831b30b90f49f5300c58c82b2bb0"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='sched_switch\x00', r3, 0x0, 0xed}, 0x18)
socket(0x10, 0x803, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000900)=0x15)
writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2)

19m42.402315413s ago: executing program 9 (id=4104):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x100008d}, 0x0)
syz_open_dev$media(&(0x7f0000000180), 0x2, 0x400)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x34}, 0x90)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0xffff)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x8208204)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)

19m26.596559647s ago: executing program 56 (id=4104):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x100008d}, 0x0)
syz_open_dev$media(&(0x7f0000000180), 0x2, 0x400)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x34}, 0x90)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0xffff)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x8208204)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)

19m22.403718654s ago: executing program 2 (id=4137):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES16=r1, @ANYBLOB], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

19m19.712538654s ago: executing program 2 (id=4141):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222})

19m18.116977292s ago: executing program 2 (id=4144):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r5, 0xfbff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000440)=0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16)
shmctl$SHM_LOCK(r7, 0xb)

19m13.765985272s ago: executing program 2 (id=4149):
signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8)
r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=<r1=>0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=<r2=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r2, r1, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)

19m10.157189971s ago: executing program 2 (id=4158):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mremap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f0000789000/0x1000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1)

19m5.204297572s ago: executing program 2 (id=4165):
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})

18m49.955449642s ago: executing program 57 (id=4165):
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})

15m39.017390396s ago: executing program 8 (id=4496):
socket$kcm(0x10, 0x2, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x410, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}})
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary)
r5 = socket$key(0xf, 0x3, 0x2)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000000000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x2, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$key(r5, &(0x7f00000001c0)={0x520, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0)
r7 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)={0x0, 0x0, @auto=[0x3e, 0x2d, 0x2f, 0x32, 0x35, 0x38, 0x38, 0x23, 0x11, 0x1e]}, 0x12, 0xfffffffffffffff9)
r8 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r4)
keyctl$unlink(0x9, r7, r8)

15m35.429631313s ago: executing program 8 (id=4499):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

15m33.916902368s ago: executing program 8 (id=4502):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(0x0, 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x1000000, 0x0, 0x34324241}})

15m31.707530366s ago: executing program 8 (id=4505):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000100)='./file0\x00')
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

15m31.057255666s ago: executing program 8 (id=4506):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505331, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c884}, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e1600081400c800291f"], 0x3f)
semget$private(0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x45}, "5b2977bf4cee8bf7e8319894a03d4bf0af1acd04b9f5a4941885d54210f9a11705214ab204fcc76d9eecaf3805428c8a822cdabb01d20cbd5cb1d2bdf5d77c3a941c50fa30"}, 0x49)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10)
r4 = socket(0x10, 0x802, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80), 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0xfffffffffffffe55, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
write(r4, &(0x7f0000000140)="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", 0xfc)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

15m30.234268418s ago: executing program 8 (id=4508):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
keyctl$session_to_parent(0x12)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00\x00\f\x00', "030100", "e859ad13", ["8bada940edff000a00", "f460734b0000008000", "000000ff0000000000000020", "0000000000000000000100"]})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

15m14.42011805s ago: executing program 58 (id=4508):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
keyctl$session_to_parent(0x12)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00\x00\f\x00', "030100", "e859ad13", ["8bada940edff000a00", "f460734b0000008000", "000000ff0000000000000020", "0000000000000000000100"]})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

13.041958258s ago: executing program 7 (id=6439):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

12.536724673s ago: executing program 5 (id=6443):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)={'macvlan1\x00'})

12.04287225s ago: executing program 5 (id=6446):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "bcceaaba4545b04e69b917c9945696bdd308351c59b24331321c0d22cbe700358571f15b1daff8c0c3069002b95fd75c2bdb10a35d3e178c55f33d6afa0964dd", 0x26}, 0x48, 0xfffffffffffffffd)
keyctl$setperm(0x5, r0, 0x4021022)
keyctl$read(0xb, r0, 0x0, 0x0)
open(0x0, 0x400141042, 0x1d2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r5, r4, 0x0, 0x20000023893)

9.814559264s ago: executing program 5 (id=6452):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0)

8.754375483s ago: executing program 5 (id=6454):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x88a, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)
pwritev2(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x7, 0x0, 0x0)

8.311155189s ago: executing program 0 (id=6458):
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000004c0)='./bus\x00', r0, &(0x7f0000000340)='./file3\x00', 0x0)

7.698725866s ago: executing program 6 (id=6459):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00')
socket$kcm(0x21, 0x2, 0x2)
read$FUSE(r0, &(0x7f000000b040)={0x2020}, 0x2020)

7.698097171s ago: executing program 7 (id=6460):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r0, 0xffffffffffffffff, 0x0)
close_range(r0, r0, 0x2)

7.442254527s ago: executing program 6 (id=6461):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000600)="fd"})

7.396011689s ago: executing program 6 (id=6462):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_io_uring_setup(0x112, 0x0, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
r5 = dup(r4)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

6.292227583s ago: executing program 7 (id=6463):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x380, 0x1c0, 0x0, 0x1c0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private, 0x21}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x520}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)

6.280113366s ago: executing program 6 (id=6464):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10)

6.236456695s ago: executing program 0 (id=6466):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
read$alg(r4, 0x0, 0x0)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f97224fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))

6.103735017s ago: executing program 4 (id=6467):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0)

6.002371697s ago: executing program 6 (id=6468):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0)

6.002086513s ago: executing program 7 (id=6469):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2)

5.178724118s ago: executing program 7 (id=6471):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfd, &(0x7f0000001480))
syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)={{0x12, 0x1, 0x0, 0xa9, 0x3a, 0x5d, 0x8, 0x4c1, 0x9d, 0x1f14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0x91, 0x2f, 0x2f}}, {{0x9, 0x4, 0x11, 0x0, 0x0, 0xb9, 0xd4, 0xa1}}]}}]}}, 0x0)
userfaultfd(0x801)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000)
socket(0x2, 0x80805, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
unshare(0x8000000)
semget$private(0x0, 0x3, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x76bb, 0x1000}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xprtrdma_post_recvs_err\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18)
unshare(0x8040080)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r1)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b7a567497331968265e8a776637552544718006dcbec2b2213de5ed7b0df23a7e8", 0x21, r1)

4.87959528s ago: executing program 0 (id=6473):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
close(r0)

4.839917682s ago: executing program 4 (id=6474):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000600)="fd"})

4.669735322s ago: executing program 5 (id=6476):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00224f00000015a840"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x40, 0x14, 0x8b, "c3f6076dca17b04beea5e4495d26adb2a2f07b378bea6e1bceaa38bf77fc256c1ae2b1ad1a96435b1b6e0cf2c9ca01673870c469d46978ae2862a7a676b57bb5466bf1c45fa5be4ed524d862fc553272a1cfb204844098424500e3e811dc4116ffb051db42f3e34581941eb9d1a9f4930d2abcc7aa67e5e5322000df1a901124a191913492d14e8e0b6d46"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x1, 0xda, "67e33b71a798a1dca05d83f33d57af2dae55a0fc1ac91ed8e66ea010c4db49405708572314fe00e48173a4b025e80c7dc9cced539263dd0541484ef0b780060dffb325ccdcaf8cb51c21d613fbfb304abcc83f3c254c4d976781cb2bcf1eb422a1ecec479e87a435dc652d6c36b9bb429e18af0a678a1ccd1c831689e7af7998f630ddb3d679dbc10fb11bc62639ac5b1ce347cb6a977750742f23039d8bdf9ae784163740386876d781c4d86b447d7f51221b24afbeacd2fdbffbf2c206d98bbceae2f62084a5b76b5130c1da314e19056d9291ffd56aa21ed3"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x2}})
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000940), 0x62bd21be, 0x28000)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x100})
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xd, @string={0xd, 0x3, "6924fab2ca16542aaec0a3"}}, 0x0, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x57f}}}}, 0x0)

4.406304936s ago: executing program 4 (id=6477):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_io_uring_setup(0x112, 0x0, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
r5 = dup(r4)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

4.313563119s ago: executing program 0 (id=6479):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket(0x2, 0x1, 0x0)
r2 = dup(r1)
listen(r2, 0x0)
accept(r2, 0x0, 0x0)
shutdown(r2, 0x1)

3.231464202s ago: executing program 3 (id=6480):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000240)="240000001e005f1814fffffffffffff807000000010000000000000006000500c4cb0b02", 0x24)

3.1581048s ago: executing program 4 (id=6481):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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")
r0 = creat(0x0, 0x0)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808b", 0x4)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f726f636b2c00a70f2ae3fbd771a1d3"], 0x1, 0x53e, &(0x7f0000000ac0)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

2.973823235s ago: executing program 3 (id=6482):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

2.809190741s ago: executing program 6 (id=6483):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[], 0x5, 0xa68, &(0x7f0000001b40)="$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")
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x1000, 0x2006fc)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x2)

2.514300214s ago: executing program 3 (id=6484):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

2.447514289s ago: executing program 4 (id=6485):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYRES16=r1, @ANYBLOB], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r12 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r12, 0x1200, 0x7, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}, 0x1, 0x0, 0x0, 0x24048080}, 0x0)

2.368287065s ago: executing program 3 (id=6486):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
read$alg(r4, 0x0, 0x0)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f97224fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))

2.310660072s ago: executing program 0 (id=6487):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r0, 0x0, 0x0)

2.244820827s ago: executing program 0 (id=6488):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x88a, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)
pwritev2(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x7, 0x0, 0x0)

769.685279ms ago: executing program 3 (id=6489):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000600)="fd"})

230.170993ms ago: executing program 7 (id=6490):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
write$P9_RMKDIR(r0, &(0x7f00000003c0)={0x14, 0x49, 0x2, {0x20, 0x2, 0x2}}, 0x14)

46.669644ms ago: executing program 5 (id=6491):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x3505, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0)

33.529449ms ago: executing program 4 (id=6492):
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000004c0)='./bus\x00', r0, &(0x7f0000000340)='./file3\x00', 0x0)

0s ago: executing program 3 (id=6493):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_io_uring_setup(0x112, 0x0, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
r5 = dup(r4)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

kernel console output (not intermixed with test programs):

[ 2996.136485][   T25] usb 7-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 2996.200142][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2996.235102][   T25] usb 7-1: config 0 descriptor??
[ 2996.896451][T12873] usb 7-1: USB disconnect, device number 47
[ 2999.725591][T27989] vivid-000: =================  START STATUS  =================
[ 2999.733511][T27989] vivid-000: Generate PTS: true
[ 2999.738437][T27989] vivid-000: Generate SCR: true
[ 2999.743608][T27989] tpg source WxH: 720x576 (R'G'B)
[ 2999.748669][T27989] tpg field: 4
[ 2999.752108][T27989] tpg crop: 720x64@0x0
[ 2999.756216][T27989] tpg compose: 2880x16@0x0
[ 2999.760753][T27989] tpg colorspace: 1
[ 2999.764586][T27989] tpg transfer function: 0/0
[ 2999.769210][T27989] tpg quantization: 0/0
[ 2999.773852][T27989] tpg RGB range: 0/2
[ 2999.777808][T27989] vivid-000: ==================  END STATUS  ==================
[ 3000.991945][T28001] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3000.997547][T28001] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜ
[ 3001.008065][T28001] [U] 
[ 3001.010829][T28001] [U] 
[ 3001.014396][T28001] [U] 
[ 3001.017168][T28001] [U] 
[ 3001.019929][T28001] [U] 
[ 3001.022684][T28001] [U] 
[ 3001.059898][T28001] [U] 
[ 3001.062709][T28001] [U] 
[ 3001.065472][T28001] [U] 
[ 3001.068232][T28001] [U] 
[ 3001.070996][T28001] [U] 
[ 3001.103434][T28001] [U] 
[ 3001.106242][T28001] [U] 
[ 3001.109006][T28001] [U] 
[ 3001.111766][T28001] [U] 
[ 3001.156508][T28001] [U] 
[ 3001.159315][T28001] [U] 
[ 3001.162078][T28001] [U] 
[ 3001.164833][T28001] [U] 
[ 3001.212198][T28001] [U] 
[ 3001.215021][T28001] [U] 
[ 3001.217778][T28001] [U] 
[ 3001.220544][T28001] [U] 
[ 3001.349951][T28001] [U] 
[ 3001.352757][T28001] [U] 
[ 3001.355522][T28001] [U] 
[ 3001.358288][T28001] [U] 
[ 3001.380004][T28001] [U] 
[ 3001.382815][T28001] [U] 
[ 3001.385579][T28001] [U] 
[ 3001.388343][T28001] [U] 
[ 3001.449952][T28001] [U] 
[ 3001.452757][T28001] [U] 
[ 3001.455521][T28001] [U] 
[ 3001.458312][T28001] [U] 
[ 3001.649840][T28001] [U] 
[ 3001.652679][T28001] [U] 
[ 3001.655437][T28001] [U] 
[ 3001.658193][T28001] [U] 
[ 3001.686344][T28001] [U] 
[ 3004.212199][T28044] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[ 3004.218902][T28043] IPVS: stopping master sync thread 28044 ...
[ 3004.236016][T28041] vivid-000: =================  START STATUS  =================
[ 3004.243804][T28041] vivid-000: Generate PTS: true
[ 3004.248802][T28041] vivid-000: Generate SCR: true
[ 3004.253791][T28041] tpg source WxH: 720x576 (R'G'B)
[ 3004.258863][T28041] tpg field: 4
[ 3004.262337][T28041] tpg crop: 720x64@0x0
[ 3004.266555][T28041] tpg compose: 2880x16@0x0
[ 3004.271102][T28041] tpg colorspace: 1
[ 3004.274947][T28041] tpg transfer function: 0/0
[ 3004.279575][T28041] tpg quantization: 0/0
[ 3004.283942][T28041] tpg RGB range: 0/2
[ 3004.287879][T28041] vivid-000: ==================  END STATUS  ==================
[ 3006.175608][T28071] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3006.181207][T28071] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜ
[ 3006.191730][T28071] [U] 
[ 3006.194495][T28071] [U] 
[ 3006.222778][T28071] [U] 
[ 3006.225591][T28071] [U] 
[ 3006.228360][T28071] [U] 
[ 3006.231122][T28071] [U] 
[ 3006.244419][T28071] [U] 
[ 3006.247212][T28071] [U] 
[ 3006.249981][T28071] [U] 
[ 3006.252742][T28071] [U] 
[ 3006.255502][T28071] [U] 
[ 3006.275331][T28071] [U] 
[ 3006.278132][T28071] [U] 
[ 3006.280912][T28071] [U] 
[ 3006.283662][T28071] [U] 
[ 3006.399979][T28071] [U] 
[ 3006.402788][T28071] [U] 
[ 3006.405549][T28071] [U] 
[ 3006.408308][T28071] [U] 
[ 3006.411254][T28071] [U] 
[ 3006.414034][T28071] [U] 
[ 3006.416791][T28071] [U] 
[ 3006.419550][T28071] [U] 
[ 3006.422471][T28071] [U] 
[ 3006.425233][T28071] [U] 
[ 3006.428005][T28071] [U] 
[ 3006.430771][T28071] [U] 
[ 3006.433789][T28071] [U] 
[ 3006.436563][T28071] [U] 
[ 3006.439322][T28071] [U] 
[ 3006.442076][T28071] [U] 
[ 3006.445011][T28071] [U] 
[ 3006.447783][T28071] [U] 
[ 3006.450543][T28071] [U] 
[ 3006.453302][T28071] [U] 
[ 3006.459825][T28071] [U] 
[ 3006.462603][T28071] [U] 
[ 3006.465366][T28071] [U] 
[ 3006.468118][T28071] [U] 
[ 3006.479771][T28071] [U] 
[ 3006.482555][T28071] [U] 
[ 3006.485318][T28071] [U] 
[ 3006.488087][T28071] [U] 
[ 3006.534292][T28071] [U] 
[ 3006.537095][T28071] [U] 
[ 3006.539880][T28071] [U] 
[ 3006.542644][T28071] [U] 
[ 3006.595285][T28071] [U] 
[ 3006.598099][T28071] [U] 
[ 3006.600944][T28071] [U] 
[ 3006.603702][T28071] [U] 
[ 3006.659822][T28071] [U] 
[ 3006.662629][T28071] [U] 
[ 3006.665570][T28071] [U] 
[ 3006.668418][T28071] [U] 
[ 3006.700169][T22376] Bluetooth: hci4: command 0x0406 tx timeout
[ 3006.729309][T28071] [U] 
[ 3006.732196][T28071] [U] 
[ 3006.734956][T28071] [U] 
[ 3006.737716][T28071] [U] 
[ 3007.014084][T28071] [U] 
[ 3007.016899][T28071] [U] 
[ 3007.019661][T28071] [U] 
[ 3007.022413][T28071] [U] 
[ 3007.028637][T28071] [U] 
[ 3007.031416][T28071] [U] 
[ 3007.034177][T28071] [U] 
[ 3007.036938][T28071] [U] 
[ 3007.040031][T28071] [U] 
[ 3007.042797][T28071] [U] 
[ 3007.045559][T28071] [U] 
[ 3007.048325][T28071] [U] 
[ 3007.051435][T28071] [U] 
[ 3007.478926][T28084] loop7: detected capacity change from 0 to 32768
[ 3007.515675][T28084] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 3007.902371][T27156] ocfs2: Unmounting device (7,7) on (node local)
[ 3011.339940][T12873] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[ 3011.515379][T12873] usb 1-1: config 0 has no interfaces?
[ 3011.525125][T12873] usb 1-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3011.554188][T28141] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3011.554634][T12873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3011.559757][T28141] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜ
[ 3011.559842][T28141] [U] 
[ 3011.581078][T28141] [U] 
[ 3011.600628][T12873] usb 1-1: config 0 descriptor??
[ 3012.609734][T28141] [U] 
[ 3012.612542][T28141] [U] 
[ 3012.615305][T28141] [U] 
[ 3012.618056][T28141] [U] 
[ 3013.823738][T28141] [U] 
[ 3013.827949][T18669] usb 1-1: USB disconnect, device number 31
[ 3014.045687][T28161] binder: 28160:28161 ioctl c0306201 200002c0 returned -14
[ 3019.209767][T12873] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[ 3019.411692][T28214] binder: 28212:28214 ioctl c0306201 200002c0 returned -14
[ 3020.187885][T28221] loop5: detected capacity change from 0 to 32768
[ 3021.222220][T28221] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 3021.361568][T22373] ocfs2: Unmounting device (7,5) on (node local)
[ 3021.590174][T28242] loop4: detected capacity change from 0 to 1024
[ 3022.968105][T28247] loop6: detected capacity change from 0 to 4096
[ 3022.986010][T28247] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[ 3023.062769][   T35] hfsplus: b-tree write err: -5, ino 4
[ 3023.103600][T28247] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 3023.192579][T28262] loop7: detected capacity change from 0 to 2048
[ 3023.290008][T18669] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 3023.416950][T28265] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3024.240094][T18669] usb 6-1: Using ep0 maxpacket: 8
[ 3024.252381][T18669] usb 6-1: config 0 has an invalid interface number: 112 but max is 1
[ 3024.552324][T18669] usb 6-1: config 0 has an invalid interface number: 17 but max is 1
[ 3024.581073][T18669] usb 6-1: config 0 has no interface number 0
[ 3024.595485][T18669] usb 6-1: config 0 has no interface number 1
[ 3024.614916][T28272] binder: 28271:28272 ioctl c0046209 0 returned -22
[ 3025.539767][T18669] usb 6-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3025.549263][T18669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3025.558200][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 3025.564817][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 3025.579741][T18669] usb 6-1: Product: syz
[ 3025.583998][T18669] usb 6-1: Manufacturer: syz
[ 3025.588732][T18669] usb 6-1: SerialNumber: syz
[ 3025.660902][T18669] usb 6-1: config 0 descriptor??
[ 3026.635470][   T25] usb 6-1: USB disconnect, device number 32
[ 3026.798552][T28293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5717'.
[ 3027.104372][T28295] loop6: detected capacity change from 0 to 128
[ 3027.170996][T28295] VFS: Found a Xenix FS (block size = 512) on device loop6
[ 3027.243671][T28295] sysv_count_free_blocks: cannot read free-list block
[ 3027.335717][T28295] sysv_count_free_inodes: unable to read inode table
[ 3027.374438][T12985] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 3028.359044][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[ 3028.463898][T12985] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3028.480922][T28298] sysv_count_free_blocks: cannot read free-list block
[ 3028.954254][T12985] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 3028.963866][T12985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3028.973985][T12985] usb 4-1: config 0 descriptor??
[ 3029.007976][T12985] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 3031.060560][T28298] sysv_count_free_inodes: unable to read inode table
[ 3031.965059][ T6012] usb 4-1: USB disconnect, device number 5
[ 3032.128234][T28322] binder: BINDER_SET_CONTEXT_MGR already set
[ 3032.152203][T28322] binder: 28320:28322 ioctl 4018620d 200001c0 returned -16
[ 3032.931967][T21122] sysv_free_block: trying to free block not in datazone
[ 3032.950162][T21122] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 3033.559610][T28332] binder: 28331:28332 ioctl c0046209 0 returned -22
[ 3033.616420][T28341] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3033.622011][T28341] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜŒD
[ 3033.632693][T28341] [U] 
[ 3033.635456][T28341] [U] 
[ 3033.679317][T28341] [U] 
[ 3033.682126][T28341] [U] 
[ 3033.684891][T28341] [U] 
[ 3033.687653][T28341] [U] 
[ 3033.710302][T28341] [U] 
[ 3033.713108][T28341] [U] 
[ 3033.715873][T28341] [U] 
[ 3033.718636][T28341] [U] 
[ 3033.721397][T28341] [U] 
[ 3033.740249][T28341] [U] 
[ 3033.743053][T28341] [U] 
[ 3033.745810][T28341] [U] 
[ 3033.748567][T28341] [U] 
[ 3033.773329][T28341] [U] 
[ 3033.776133][T28341] [U] 
[ 3033.778934][T28341] [U] 
[ 3033.781732][T28341] [U] 
[ 3033.811807][T28341] [U] 
[ 3033.814607][T28341] [U] 
[ 3033.817367][T28341] [U] 
[ 3033.819841][T22376] Bluetooth: hci5: command 0x0406 tx timeout
[ 3033.820109][T28341] [U] 
[ 3033.861118][T28341] [U] 
[ 3033.863919][T28341] [U] 
[ 3033.866681][T28341] [U] 
[ 3033.869449][T28341] [U] 
[ 3033.890628][T28341] [U] 
[ 3033.893517][T28341] [U] 
[ 3033.896282][T28341] [U] 
[ 3033.899062][T28341] [U] 
[ 3033.915931][T28341] [U] 
[ 3033.918733][T28341] [U] 
[ 3033.921504][T28341] [U] 
[ 3033.924269][T28341] [U] 
[ 3033.928820][T28341] [U] 
[ 3033.931598][T28341] [U] 
[ 3033.934367][T28341] [U] 
[ 3033.937138][T28341] [U] 
[ 3034.186742][T28341] [U] 
[ 3034.190536][T28341] [U] 
[ 3034.193503][T28341] [U] 
[ 3034.196271][T28341] [U] 
[ 3034.199427][T28341] [U] 
[ 3034.202197][T28341] [U] 
[ 3034.204957][T28341] [U] 
[ 3034.207799][T28341] [U] 
[ 3034.213473][T28341] [U] 
[ 3034.216254][T28341] [U] 
[ 3034.219028][T28341] [U] 
[ 3034.221780][T28341] [U] 
[ 3034.227483][T28341] [U] 
[ 3034.230261][T28341] [U] 
[ 3034.233024][T28341] [U] 
[ 3034.236312][T28341] [U] 
[ 3034.244978][T28341] [U] 
[ 3034.247861][T28341] [U] 
[ 3034.250624][T28341] [U] 
[ 3034.253382][T28341] [U] 
[ 3034.259694][    T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 3034.344784][ T6012] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 3034.582048][T28341] [U] 
[ 3034.584828][T28341] [U] 
[ 3034.587550][T28341] [U] 
[ 3034.590272][T28341] [U] 
[ 3034.603017][    T8] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3034.613247][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3034.660302][    T8] usb 1-1: config 0 descriptor??
[ 3034.685672][ T6012] usb 7-1: Using ep0 maxpacket: 8
[ 3034.715061][ T6012] usb 7-1: config 0 has an invalid interface number: 112 but max is 1
[ 3034.733162][ T6012] usb 7-1: config 0 has an invalid interface number: 17 but max is 1
[ 3034.748318][ T6012] usb 7-1: config 0 has no interface number 0
[ 3034.756469][ T6012] usb 7-1: config 0 has no interface number 1
[ 3034.769316][T28341] [U] 
[ 3034.772070][T28341] [U] 
[ 3034.774787][T28341] [U] 
[ 3034.777507][T28341] [U] 
[ 3035.251362][T28341] [U] 
[ 3035.379854][ T6012] usb 7-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3035.662704][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3035.671117][ T6012] usb 7-1: Product: syz
[ 3035.675950][ T6012] usb 7-1: Manufacturer: syz
[ 3035.680799][ T6012] usb 7-1: SerialNumber: syz
[ 3036.676930][    T8] hackrf 1-1:0.0: usb_control_msg() failed -110 request 0e
[ 3036.678628][ T6012] usb 7-1: config 0 descriptor??
[ 3036.684319][    T8] hackrf 1-1:0.0: Could not detect board
[ 3036.695458][    T8] hackrf 1-1:0.0: probe with driver hackrf failed with error -110
[ 3037.303250][ T6012] usb 7-1: can't set config #0, error -71
[ 3037.310641][ T6012] usb 7-1: USB disconnect, device number 49
[ 3037.540419][T25340] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 3037.701889][T25340] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3037.719952][T25340] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 3037.749453][T28368] tmpfs: Bad value for 'mpol'
[ 3037.790729][T25340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3037.851073][T25340] usb 6-1: config 0 descriptor??
[ 3037.862034][T25340] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3038.405126][T25340] usb 1-1: USB disconnect, device number 32
[ 3038.483003][T28380] binder: 28379:28380 ioctl c0046209 0 returned -22
[ 3040.140124][T25340] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 3041.633259][T28403] 9pnet_fd: Insufficient options for proto=fd
[ 3043.012454][T25340] usb 1-1: device descriptor read/all, error -61
[ 3044.417662][T25340] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 3046.180384][T28420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3046.233533][T28419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3048.855141][T28437] loop6: detected capacity change from 0 to 32768
[ 3048.931907][T25340] usb 6-1: USB disconnect, device number 33
[ 3048.966324][T28437] 
[ 3048.966324][T28437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 3048.966324][T28437] 
[ 3049.010611][T28437] non-latin1 character 0x3ff found in JFS file name
[ 3049.017568][T28437] mount with iocharset=utf8 to access
[ 3049.204204][T28445] loop3: detected capacity change from 0 to 2048
[ 3050.223577][ T5983] 
[ 3050.223577][ T5983]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 3050.223577][ T5983] 
[ 3050.287752][ T5983] 
[ 3050.287752][ T5983]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 3050.287752][ T5983] 
[ 3050.321021][T21122] 
[ 3050.321021][T21122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 3050.321021][T21122] 
[ 3050.349251][T28445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 3050.378986][  T109] 
[ 3050.378986][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 3050.378986][  T109] 
[ 3050.399871][T21122] 
[ 3050.399871][T21122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 3050.399871][T21122] 
[ 3050.468309][T28461] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5780'.
[ 3050.516043][T28461] sg_read: process 204 (syz.4.5780) changed security contexts after opening file descriptor, this is not allowed.
[ 3050.542441][T28440] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[ 3050.595223][T28440] File: /57/file1/bus PID: 28440 Comm: syz.3.5773
[ 3052.770507][T27141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 3055.379891][   T25] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 3055.558393][   T25] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3055.605604][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3055.668865][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3055.735550][   T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3055.779821][T12873] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 3055.822527][   T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3055.870573][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3055.908301][   T25] usb 7-1: config 0 descriptor??
[ 3055.961918][T12873] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3055.995815][T12873] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 3056.024297][T12873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3056.062846][T12873] usb 1-1: config 0 descriptor??
[ 3056.095154][T12873] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3056.187706][T28512] loop4: detected capacity change from 0 to 512
[ 3056.396585][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3056.481562][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3056.579261][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3056.824440][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.052172][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.060012][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.067516][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.075511][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.083520][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.097601][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.110460][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.118153][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.125956][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.133638][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.141276][   T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[ 3057.166663][   T25] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[ 3057.306690][T28512] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=3
[ 3057.362484][T28512] EXT4-fs warning (device loop4): ext4_enable_quotas:7152: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[ 3057.388160][T28512] EXT4-fs (loop4): mount failed
[ 3058.090896][   T25] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 3058.120038][   T25] usb 7-1: USB disconnect, device number 50
[ 3061.565735][T28532] loop4: detected capacity change from 0 to 32768
[ 3061.599381][T25340] usb 1-1: USB disconnect, device number 35
[ 3061.623615][T28532] JBD2: Ignoring recovery information on journal
[ 3061.634131][T28532] jbd2_journal_bmap: journal block not found at offset 64 on loop4-27
[ 3061.642824][T28532] JBD2: bad block at offset 64
[ 3061.841159][T28532] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 3061.887888][T28532] OCFS2: ERROR (device loop4): ocfs2_claim_suballoc_bits: Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[ 3061.902655][T28532] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 3061.912799][T28532] OCFS2: Returning error to the calling process.
[ 3061.919164][T28532] (syz.4.5803,28532,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5
[ 3061.927725][T28532] (syz.4.5803,28532,1):__ocfs2_claim_clusters:2412 ERROR: status = -5
[ 3061.936080][T28532] (syz.4.5803,28532,1):__ocfs2_claim_clusters:2420 ERROR: status = -5
[ 3061.944354][T28532] (syz.4.5803,28532,1):ocfs2_block_group_alloc_contig:437 ERROR: status = -5
[ 3061.953236][T28532] (syz.4.5803,28532,1):ocfs2_block_group_alloc:709 ERROR: status = -5
[ 3061.963018][T28532] (syz.4.5803,28532,1):ocfs2_block_group_alloc:762 ERROR: status = -5
[ 3061.971741][T28532] (syz.4.5803,28532,1):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5
[ 3061.980594][T28532] (syz.4.5803,28532,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5
[ 3061.989158][T28532] (syz.4.5803,28532,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5
[ 3061.998428][T28532] (syz.4.5803,28532,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5
[ 3062.008027][T28532] (syz.4.5803,28532,1):ocfs2_expand_inline_dir:2822 ERROR: status = -5
[ 3062.016393][T28532] (syz.4.5803,28532,1):ocfs2_extend_dir:3186 ERROR: status = -5
[ 3062.024474][T28532] (syz.4.5803,28532,1):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -5
[ 3062.033386][T28532] (syz.4.5803,28532,1):ocfs2_symlink:1875 ERROR: status = -5
[ 3062.040889][T28532] (syz.4.5803,28532,1):ocfs2_symlink:2076 ERROR: status = -5
[ 3062.210078][    T8] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 3062.398889][    T8] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3062.438167][T28538] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3062.443730][T28538] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜŒDv
[ 3062.454666][T28538] [U] 
[ 3062.457423][T28538] [U] 
[ 3062.461030][T28538] [U] 
[ 3062.463793][T28538] [U] 
[ 3062.466551][T28538] [U] 
[ 3062.469303][T28538] [U] 
[ 3062.538268][T28538] [U] 
[ 3062.541063][T28538] [U] 
[ 3062.543817][T28538] [U] 
[ 3062.546570][T28538] [U] 
[ 3062.549331][T28538] [U] 
[ 3062.552350][T28538] [U] 
[ 3062.555107][T28538] [U] 
[ 3062.557861][T28538] [U] 
[ 3062.560618][T28538] [U] 
[ 3062.563503][T28538] [U] 
[ 3062.566262][T28538] [U] 
[ 3062.569018][T28538] [U] 
[ 3062.571774][T28538] [U] 
[ 3062.576001][T28538] [U] 
[ 3062.578767][T28538] [U] 
[ 3062.581522][T28538] [U] 
[ 3062.584276][T28538] [U] 
[ 3062.587103][T28538] [U] 
[ 3062.589862][T28538] [U] 
[ 3062.592614][T28538] [U] 
[ 3062.595374][T28538] [U] 
[ 3062.598167][T28538] [U] 
[ 3062.600929][T28538] [U] 
[ 3062.603685][T28538] [U] 
[ 3062.606444][T28538] [U] 
[ 3062.609273][T28538] [U] 
[ 3062.612036][T28538] [U] 
[ 3062.614793][T28538] [U] 
[ 3062.617548][T28538] [U] 
[ 3062.620399][T28538] [U] 
[ 3062.623158][T28538] [U] 
[ 3062.625911][T28538] [U] 
[ 3062.628666][T28538] [U] 
[ 3062.631482][T28538] [U] 
[ 3062.634244][T28538] [U] 
[ 3062.637006][T28538] [U] 
[ 3062.639851][T28538] [U] 
[ 3062.642684][T28538] [U] 
[ 3062.645453][T28538] [U] 
[ 3062.648209][T28538] [U] 
[ 3062.650967][T28538] [U] 
[ 3062.653786][T28538] [U] 
[ 3062.656543][T28538] [U] 
[ 3062.659298][T28538] [U] 
[ 3062.662063][T28538] [U] 
[ 3062.665203][T28538] [U] 
[ 3062.667967][T28538] [U] 
[ 3062.670725][T28538] [U] 
[ 3062.673478][T28538] [U] 
[ 3062.677791][T28538] [U] 
[ 3062.680558][T28538] [U] 
[ 3062.683315][T28538] [U] 
[ 3062.686072][T28538] [U] 
[ 3062.688878][T28538] [U] 
[ 3062.691639][T28538] [U] 
[ 3062.694397][T28538] [U] 
[ 3062.697150][T28538] [U] 
[ 3062.700048][T28538] [U] 
[ 3062.702805][T28538] [U] 
[ 3062.705564][T28538] [U] 
[ 3062.708328][T28538] [U] 
[ 3062.711120][T28538] [U] 
[ 3062.713877][T28538] [U] 
[ 3062.716630][T28538] [U] 
[ 3062.719391][T28538] [U] 
[ 3062.722223][T28538] [U] 
[ 3062.724979][T28538] [U] 
[ 3062.727734][T28538] [U] 
[ 3062.730488][T28538] [U] 
[ 3062.733301][T28538] [U] 
[ 3062.736064][T28538] [U] 
[ 3062.738821][T28538] [U] 
[ 3062.741576][T28538] [U] 
[ 3062.744400][T28538] [U] 
[ 3062.747158][T28538] [U] 
[ 3062.749919][T28538] [U] 
[ 3062.752678][T28538] [U] 
[ 3062.755500][T28538] [U] 
[ 3062.758261][T28538] [U] 
[ 3062.761019][T28538] [U] 
[ 3062.763780][T28538] [U] 
[ 3062.766641][T28538] [U] 
[ 3062.769404][T28538] [U] 
[ 3062.772250][T28538] [U] 
[ 3062.775007][T28538] [U] 
[ 3062.777830][T28538] [U] 
[ 3062.780593][T28538] [U] 
[ 3062.783362][T28538] [U] 
[ 3062.786114][T28538] [U] 
[ 3062.789941][T28538] [U] 
[ 3062.792705][T28538] [U] 
[ 3062.795690][T28538] [U] 
[ 3062.798446][T28538] [U] 
[ 3062.801989][T28538] [U] 
[ 3062.804757][T28538] [U] 
[ 3062.807509][T28538] [U] 
[ 3062.810266][T28538] [U] 
[ 3062.813106][T28538] [U] 
[ 3062.815864][T28538] [U] 
[ 3062.818618][T28538] [U] 
[ 3062.821380][T28538] [U] 
[ 3062.824201][T28538] [U] 
[ 3062.826961][T28538] [U] 
[ 3062.829721][T28538] [U] 
[ 3062.832483][T28538] [U] 
[ 3062.835348][T28538] [U] 
[ 3062.838101][T28538] [U] 
[ 3062.840843][T28538] [U] 
[ 3062.843586][T28538] [U] 
[ 3062.846380][T28538] [U] 
[ 3062.849133][T28538] [U] 
[ 3062.851877][T28538] [U] 
[ 3062.854620][T28538] [U] 
[ 3062.857452][T28538] [U] 
[ 3062.860221][T28538] [U] 
[ 3062.862972][T28538] [U] 
[ 3062.865715][T28538] [U] 
[ 3062.868730][T28538] [U] 
[ 3062.871484][T28538] [U] 
[ 3062.874236][T28538] [U] 
[ 3062.877135][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3062.951012][    T8] usb 7-1: config 0 descriptor??
[ 3063.013542][T26973] ocfs2: Unmounting device (7,4) on (node local)
[ 3063.033717][T28537] [U] 
[ 3063.479695][T28549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5807'.
[ 3064.461265][    T8] hackrf 7-1:0.0: usb_control_msg() failed -110 request 0e
[ 3064.468545][    T8] hackrf 7-1:0.0: Could not detect board
[ 3064.474361][    T8] hackrf 7-1:0.0: probe with driver hackrf failed with error -110
[ 3065.044768][T28567] vivid-000: =================  START STATUS  =================
[ 3065.052596][T28567] vivid-000: Generate PTS: true
[ 3065.057693][T28567] vivid-000: Generate SCR: true
[ 3065.062872][T28567] tpg source WxH: 720x576 (R'G'B)
[ 3065.068167][T28567] tpg field: 4
[ 3065.071826][T28567] tpg crop: 720x64@0x0
[ 3065.075997][T28567] tpg compose: 2880x16@0x0
[ 3065.080585][T28567] tpg colorspace: 1
[ 3065.084482][T28567] tpg transfer function: 0/0
[ 3065.089158][T28567] tpg quantization: 0/0
[ 3065.093442][T28567] tpg RGB range: 0/2
[ 3065.097452][T28567] vivid-000: ==================  END STATUS  ==================
[ 3065.768901][T28570] binder: 28566:28570 ioctl c0306201 200002c0 returned -14
[ 3065.980468][   T25] usb 7-1: USB disconnect, device number 51
[ 3067.724257][T28601] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3067.729843][T28601] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜŒDv
[ 3067.740601][T28601] [U] 
[ 3067.743357][T28601] [U] 
[ 3067.829955][T28601] [U] 
[ 3067.832753][T28601] [U] 
[ 3067.835509][T28601] [U] 
[ 3067.838267][T28601] [U] 
[ 3067.871964][T28601] [U] 
[ 3067.874826][T28601] [U] 
[ 3067.877587][T28601] [U] 
[ 3067.880348][T28601] [U] 
[ 3067.883114][T28601] [U] 
[ 3067.980422][T28601] [U] 
[ 3067.983222][T28601] [U] 
[ 3067.985981][T28601] [U] 
[ 3067.988743][T28601] [U] 
[ 3068.064354][T28601] [U] 
[ 3068.127342][T28602] loop6: detected capacity change from 0 to 32768
[ 3068.412421][    T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[ 3068.784070][    T8] usb 4-1: config 0 has no interfaces?
[ 3068.789613][    T8] usb 4-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3068.833350][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3068.862592][    T8] usb 4-1: config 0 descriptor??
[ 3068.928013][T28602] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 3069.486454][T21122] ocfs2: Unmounting device (7,6) on (node local)
[ 3069.493113][T18669] usb 4-1: USB disconnect, device number 6
[ 3069.635641][T28615] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5828'.
[ 3069.999884][ T5909] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 3070.161791][ T5909] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3070.186833][T28626] loop6: detected capacity change from 0 to 512
[ 3070.193292][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3070.241490][ T5909] usb 1-1: config 0 descriptor??
[ 3070.328739][T28626] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 3071.001316][T28626] EXT4-fs warning (device loop6): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop6.
[ 3071.895405][T28640] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5834'.
[ 3071.916478][ T5909] hackrf 1-1:0.0: usb_control_msg() failed -110 request 0e
[ 3071.924152][ T5909] hackrf 1-1:0.0: Could not detect board
[ 3071.929971][ T5909] hackrf 1-1:0.0: probe with driver hackrf failed with error -110
[ 3073.233042][T18669] usb 1-1: USB disconnect, device number 36
[ 3073.524601][T28653] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3073.530198][T28653] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜŒDv
[ 3073.541012][T28653] [U] 
[ 3073.543780][T28653] [U] 
[ 3073.571119][T21122] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 3073.774234][T28653] [U] 
[ 3073.777029][T28653] [U] 
[ 3073.779788][T28653] [U] 
[ 3073.782648][T28653] [U] 
[ 3073.788810][T28653] [U] 
[ 3073.791586][T28653] [U] 
[ 3073.794351][T28653] [U] 
[ 3073.797106][T28653] [U] 
[ 3073.799865][T28653] [U] 
[ 3073.819859][T28653] [U] 
[ 3073.822659][T28653] [U] 
[ 3073.825422][T28653] [U] 
[ 3073.828180][T28653] [U] 
[ 3073.851664][T28653] [U] 
[ 3073.854465][T28653] [U] 
[ 3073.857224][T28653] [U] 
[ 3073.859983][T28653] [U] 
[ 3073.919995][T28653] [U] 
[ 3073.922804][T28653] [U] 
[ 3073.925569][T28653] [U] 
[ 3073.928329][T28653] [U] 
[ 3073.969882][T28653] [U] 
[ 3073.972689][T28653] [U] 
[ 3073.975447][T28653] [U] 
[ 3073.978204][T28653] [U] 
[ 3074.022262][T28653] [U] 
[ 3074.025059][T28653] [U] 
[ 3074.027817][T28653] [U] 
[ 3074.030752][T28653] [U] 
[ 3074.359963][T28653] [U] 
[ 3074.362754][T28653] [U] 
[ 3074.365501][T28653] [U] 
[ 3074.368219][T28653] [U] 
[ 3074.489927][T28653] [U] 
[ 3074.492719][T28653] [U] 
[ 3074.495476][T28653] [U] 
[ 3074.498241][T28653] [U] 
[ 3074.590053][T28653] [U] 
[ 3074.746853][T28666] loop3: detected capacity change from 0 to 128
[ 3074.949989][T28666] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 3074.959964][T28666] sysv_free_block: trying to free block not in datazone
[ 3075.000316][T28666] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 3075.841447][T28680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5848'.
[ 3077.997001][T28697] loop5: detected capacity change from 0 to 4096
[ 3078.107958][T28697] NILFS (loop5): invalid segment: Checksum error in segment payload
[ 3078.120365][T28707] binder_alloc: 28704: binder_alloc_buf, no vma
[ 3078.147456][T28697] NILFS (loop5): trying rollback from an earlier position
[ 3078.169500][T28707] binder: 28704:28707 ioctl c0306201 200002c0 returned -14
[ 3078.259016][T28697] NILFS (loop5): recovery complete
[ 3078.295615][T28711] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3079.002722][T28723] loop5: detected capacity change from 0 to 128
[ 3079.051484][T28723] VFS: Found a Xenix FS (block size = 512) on device loop5
[ 3079.070179][T28723] sysv_free_block: trying to free block not in datazone
[ 3079.123438][T28723] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 3081.039379][T28738] loop5: detected capacity change from 0 to 4096
[ 3081.227343][T28738] NILFS (loop5): invalid segment: Checksum error in segment payload
[ 3081.272811][T28738] NILFS (loop5): trying rollback from an earlier position
[ 3081.388426][T28738] NILFS (loop5): recovery complete
[ 3081.398476][T28742] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3081.493975][   T29] audit: type=1800 audit(1732247351.364:106): pid=28738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5869" name="bus" dev="loop5" ino=12 res=0 errno=0
[ 3081.557102][T28748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5868'.
[ 3082.123616][T28756] vivid-000: =================  START STATUS  =================
[ 3082.132462][T28756] vivid-000: Generate PTS: true
[ 3082.137424][T28756] vivid-000: Generate SCR: true
[ 3082.142919][T28756] tpg source WxH: 720x576 (R'G'B)
[ 3082.148142][T28756] tpg field: 4
[ 3082.151664][T28756] tpg crop: 720x64@0x0
[ 3082.156092][T28756] tpg compose: 2880x16@0x0
[ 3082.160673][T28756] tpg colorspace: 1
[ 3082.165460][T28756] tpg transfer function: 0/0
[ 3082.170300][T28756] tpg quantization: 0/0
[ 3082.174660][T28756] tpg RGB range: 0/2
[ 3082.178647][T28756] vivid-000: ==================  END STATUS  ==================
[ 3083.232775][T28759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3083.267001][T28759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3084.071797][T28763] loop3: detected capacity change from 0 to 4096
[ 3084.891588][T28763] ntfs3(loop3): MFT: r=1e, expect seq=1 instead of 0!
[ 3084.983033][T28772] binder_alloc: 28771: binder_alloc_buf, no vma
[ 3085.011555][T28772] binder: 28771:28772 ioctl c0306201 200002c0 returned -14
[ 3086.555345][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 3086.561878][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 3086.920434][T12873] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 3086.956641][T28801] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5888'.
[ 3087.114759][T12873] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3087.124801][T12873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3087.389538][T12873] usb 4-1: config 0 descriptor??
[ 3088.284186][T12873] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e
[ 3088.334302][T12873] hackrf 4-1:0.0: Could not detect board
[ 3088.369842][T12873] hackrf 4-1:0.0: probe with driver hackrf failed with error -71
[ 3088.614493][T12873] usb 4-1: USB disconnect, device number 7
[ 3089.753723][T28829] binder: 28819:28829 ioctl c0306201 200002c0 returned -14
[ 3090.550018][T28841] loop3: detected capacity change from 0 to 2048
[ 3090.574209][T28842] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3090.608089][   T29] audit: type=1800 audit(1732247360.474:107): pid=28841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5904" name="file2" dev="loop3" ino=16 res=0 errno=0
[ 3090.746282][T28841] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 5)
[ 3090.758102][T28841] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16)
[ 3090.789906][T28841] Remounting filesystem read-only
[ 3090.897092][T27141] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[ 3091.401105][T28851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5907'.
[ 3094.309782][T12873] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[ 3094.477628][T12873] usb 4-1: config 0 has no interfaces?
[ 3094.483592][T12873] usb 4-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3094.503119][T12873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3094.535946][T12873] usb 4-1: config 0 descriptor??
[ 3094.716456][T28874] binder: 28873:28874 ioctl c0306201 200002c0 returned -14
[ 3095.033092][T12873] usb 4-1: USB disconnect, device number 8
[ 3101.674217][T28905] binder: 28903:28905 ioctl c0306201 200002c0 returned -14
[ 3101.681782][T18669] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 3102.369889][T17466] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[ 3102.662447][T18669] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3102.671632][T18669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3102.691662][T18669] usb 6-1: config 0 descriptor??
[ 3103.045969][T28916] loop4: detected capacity change from 0 to 8
[ 3103.076372][T18669] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e
[ 3103.112176][T18669] hackrf 6-1:0.0: Could not detect board
[ 3103.117894][T18669] hackrf 6-1:0.0: probe with driver hackrf failed with error -71
[ 3103.149768][T18669] usb 6-1: USB disconnect, device number 34
[ 3104.029746][T17466] usb 4-1: device not accepting address 9, error -71
[ 3104.198119][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 3104.374695][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 3104.391646][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 3104.410124][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 3104.422302][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 3104.439956][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 3106.540027][ T5856] Bluetooth: hci0: command tx timeout
[ 3106.651264][ T5983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3106.825222][T28962] loop5: detected capacity change from 0 to 4096
[ 3106.838015][T28958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5946'.
[ 3106.872087][T28962] NILFS (loop5): invalid segment: Checksum error in segment payload
[ 3106.883995][ T5983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3106.895823][T18669] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 3106.925554][T28962] NILFS (loop5): trying rollback from an earlier position
[ 3107.086805][T28962] NILFS (loop5): recovery complete
[ 3107.102013][T18669] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3107.111552][T18669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3107.119847][T28972] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3107.160995][T18669] usb 5-1: config 0 descriptor??
[ 3108.098580][ T5983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3108.509867][T18669] hackrf 5-1:0.0: usb_control_msg() failed -110 request 0e
[ 3108.517300][T18669] hackrf 5-1:0.0: Could not detect board
[ 3108.523239][T18669] hackrf 5-1:0.0: probe with driver hackrf failed with error -110
[ 3108.619964][ T5856] Bluetooth: hci0: command tx timeout
[ 3108.761516][T28983] loop7: detected capacity change from 0 to 7
[ 3108.788683][ T5983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3108.814639][T28983] buffer_io_error: 7 callbacks suppressed
[ 3108.814661][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3108.900815][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3108.926115][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3108.990830][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3109.088147][ T5983] bridge_slave_1: left allmulticast mode
[ 3109.099911][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3109.115395][ T5983] bridge_slave_1: left promiscuous mode
[ 3109.145098][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3109.180733][ T5983] bridge_slave_0: left allmulticast mode
[ 3109.189836][ T5983] bridge_slave_0: left promiscuous mode
[ 3109.200405][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3109.212679][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3109.224620][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3109.242539][T28983] ldm_validate_partition_table(): Disk read failed.
[ 3109.272993][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3109.312761][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3109.385797][T28983] Buffer I/O error on dev loop7, logical block 0, async page read
[ 3109.409421][T28983] Dev loop7: unable to read RDB block 0
[ 3109.422595][T28983]  loop7: unable to read partition table
[ 3109.737512][T28983] loop7: partition table beyond EOD, truncated
[ 3109.794206][T28983] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[ 3109.794206][T28983] 
) failed (rc=-5)
[ 3110.495401][T17558] usb 5-1: USB disconnect, device number 20
[ 3110.704460][T28995] loop6: detected capacity change from 0 to 2048
[ 3110.711072][ T5856] Bluetooth: hci0: command tx timeout
[ 3110.747982][T28995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3111.590799][T28995] [syz.6.5957/28995] FS: loop6 File: /cpuacct.usage_percpu_user would truncate fibmap result
[ 3112.789825][ T5856] Bluetooth: hci0: command tx timeout
[ 3113.272693][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5966'.
[ 3113.471774][T12985] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 3113.630242][T12985] usb 6-1: Using ep0 maxpacket: 8
[ 3113.650954][T12985] usb 6-1: config 0 has an invalid interface number: 112 but max is 1
[ 3113.660196][T12985] usb 6-1: config 0 has an invalid interface number: 17 but max is 1
[ 3113.668361][T12985] usb 6-1: config 0 has no interface number 0
[ 3113.730026][T12985] usb 6-1: config 0 has no interface number 1
[ 3113.796762][T12985] usb 6-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3113.811070][T29025] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.5968'.
[ 3113.830315][T12985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3113.838521][T12985] usb 6-1: Product: syz
[ 3113.918090][T12985] usb 6-1: Manufacturer: syz
[ 3113.934507][T12985] usb 6-1: SerialNumber: syz
[ 3113.946317][T12985] usb 6-1: config 0 descriptor??
[ 3114.409988][T17558] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 3114.792381][T17466] usb 6-1: USB disconnect, device number 35
[ 3114.826109][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3114.841506][T17558] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3114.863708][T17558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3114.885877][ T5983] bond0 (unregistering): Released all slaves
[ 3114.910391][T17558] usb 5-1: config 0 descriptor??
[ 3115.024754][T29035] binder: BINDER_SET_CONTEXT_MGR already set
[ 3115.043876][T28931] chnl_net:caif_netlink_parms(): no params data found
[ 3115.065406][T29035] binder: 29034:29035 ioctl 4018620d 200001c0 returned -16
[ 3116.448639][T17558] hackrf 5-1:0.0: usb_control_msg() failed -110 request 0e
[ 3116.457890][T17558] hackrf 5-1:0.0: Could not detect board
[ 3116.473242][T17558] hackrf 5-1:0.0: probe with driver hackrf failed with error -110
[ 3117.596346][T29042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3117.611035][T29042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3117.659375][T18669] usb 5-1: USB disconnect, device number 21
[ 3118.703739][T29053] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3118.719963][T29053] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜŒDv
[ 3118.730866][T29053] [U] 
[ 3118.733636][T29053] [U] 
[ 3118.760056][T29053] [U] 
[ 3118.762874][T29053] [U] 
[ 3118.765654][T29053] [U] 
[ 3118.768422][T29053] [U] 
[ 3118.771552][T29053] [U] 
[ 3118.774294][T29053] [U] 
[ 3118.777031][T29053] [U] 
[ 3118.779808][T29053] [U] 
[ 3118.782582][T29053] [U] 
[ 3118.805411][T29053] [U] 
[ 3118.808225][T29053] [U] 
[ 3118.810994][T29053] [U] 
[ 3118.813752][T29053] [U] 
[ 3118.823336][T29053] [U] 
[ 3118.826119][T29053] [U] 
[ 3118.828887][T29053] [U] 
[ 3118.831659][T29053] [U] 
[ 3118.843754][T29053] [U] 
[ 3118.846535][T29053] [U] 
[ 3118.849293][T29053] [U] 
[ 3118.852054][T29053] [U] 
[ 3118.867515][T29053] [U] 
[ 3118.870326][T29053] [U] 
[ 3118.873094][T29053] [U] 
[ 3118.875856][T29053] [U] 
[ 3119.003979][T29053] [U] 
[ 3119.006891][T29053] [U] 
[ 3119.009666][T29053] [U] 
[ 3119.012445][T29053] [U] 
[ 3119.023704][T28931] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3119.051978][T29053] [U] 
[ 3119.054793][T29053] [U] 
[ 3119.057564][T29053] [U] 
[ 3119.060337][T29053] [U] 
[ 3119.079339][T28931] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3119.140474][T29053] [U] 
[ 3119.143726][T28931] bridge_slave_0: entered allmulticast mode
[ 3119.250923][T28931] bridge_slave_0: entered promiscuous mode
[ 3119.555897][ T5983] hsr_slave_0: left promiscuous mode
[ 3119.666836][ T5983] hsr_slave_1: left promiscuous mode
[ 3119.796960][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3119.804829][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3119.825722][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3119.837250][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3119.882528][ T5983] vlan0: left promiscuous mode
[ 3119.890169][ T5983] veth1_macvtap: left promiscuous mode
[ 3119.908254][ T5983] veth0_macvtap: left promiscuous mode
[ 3119.957447][ T5983] veth1_vlan: left promiscuous mode
[ 3119.981438][ T5983] veth0_vlan: left promiscuous mode
[ 3120.009883][    T8] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[ 3120.175809][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5981'.
[ 3120.190223][    T8] usb 5-1: config 0 has no interfaces?
[ 3120.202786][    T8] usb 5-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3120.324930][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3120.356328][    T8] usb 5-1: config 0 descriptor??
[ 3120.905127][T17466] usb 5-1: USB disconnect, device number 22
[ 3121.140172][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 3121.149571][T12985] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 3121.299875][    T8] usb 4-1: Using ep0 maxpacket: 8
[ 3121.327639][    T8] usb 4-1: config 0 has an invalid interface number: 112 but max is 1
[ 3121.341224][T12985] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3121.350616][    T8] usb 4-1: config 0 has an invalid interface number: 17 but max is 1
[ 3121.360175][T12985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3121.372777][    T8] usb 4-1: config 0 has no interface number 0
[ 3121.381728][T12985] usb 6-1: config 0 descriptor??
[ 3121.389786][    T8] usb 4-1: config 0 has no interface number 1
[ 3121.411906][    T8] usb 4-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3121.421805][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3121.431318][    T8] usb 4-1: Product: syz
[ 3121.454656][    T8] usb 4-1: Manufacturer: syz
[ 3121.480241][    T8] usb 4-1: SerialNumber: syz
[ 3121.564959][    T8] usb 4-1: config 0 descriptor??
[ 3122.879521][T12985] hackrf 6-1:0.0: usb_control_msg() failed -110 request 0e
[ 3122.889014][T12985] hackrf 6-1:0.0: Could not detect board
[ 3122.901854][T12985] hackrf 6-1:0.0: probe with driver hackrf failed with error -110
[ 3123.796098][T17558] usb 4-1: USB disconnect, device number 11
[ 3124.165494][T29099] [U] È$!â£ÏÿH˜7™%݉‚�…ÑG|%2šh<¦
[ 3124.280686][T12985] usb 6-1: USB disconnect, device number 36
[ 3124.323898][T29099] [U] !•¨¶ìÞZÆâøZ…’öÉ5èýpRýî‚fÕ®Ÿß’|§Sü(˜ ÆmX¬÷Ñ¡:ŠQŸ¤èz¿fo©’1söÃŽßæíV¬îo¹Npóâ9|cÜŒDv
[ 3124.334749][T29099] [U] 
[ 3124.337537][T29099] [U] 
[ 3124.341499][T29099] [U] 
[ 3124.344278][T29099] [U] 
[ 3124.347041][T29099] [U] 
[ 3124.349838][T29099] [U] 
[ 3124.353075][T29099] [U] 
[ 3124.355840][T29099] [U] 
[ 3124.358596][T29099] [U] 
[ 3124.361353][T29099] [U] 
[ 3124.364138][T29099] [U] 
[ 3124.369261][T29099] [U] 
[ 3124.372032][T29099] [U] 
[ 3124.374879][T29099] [U] 
[ 3124.377673][T29099] [U] 
[ 3124.428614][T29099] [U] 
[ 3124.431374][T29099] [U] 
[ 3124.434137][T29099] [U] 
[ 3124.436898][T29099] [U] 
[ 3124.454297][T29099] [U] 
[ 3124.457086][T29099] [U] 
[ 3124.459851][T29099] [U] 
[ 3124.462606][T29099] [U] 
[ 3124.513335][T29099] [U] 
[ 3124.516227][T29099] [U] 
[ 3124.518989][T29099] [U] 
[ 3124.521753][T29099] [U] 
[ 3124.720486][T29099] [U] 
[ 3124.723313][T29099] [U] 
[ 3124.726179][T29099] [U] 
[ 3124.728956][T29099] [U] 
[ 3124.886155][T29099] [U] 
[ 3124.889006][T29099] [U] 
[ 3124.891775][T29099] [U] 
[ 3124.894551][T29099] [U] 
[ 3124.996067][T29099] [U] 
[ 3126.531367][T29141] loop4: detected capacity change from 0 to 4096
[ 3126.582779][ T5983] team0 (unregistering): Port device team_slave_1 removed
[ 3126.641341][T29141] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[ 3126.660739][ T5983] team0 (unregistering): Port device C removed
[ 3126.703134][T29141] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 3126.753606][T29141] ntfs3(loop4): Failed to load $Extend (-22).
[ 3126.760042][T29141] ntfs3(loop4): Failed to initialize $Extend.
[ 3126.788866][T29113] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 3126.844956][T12985] usb 7-1: new full-speed USB device number 52 using dummy_hcd
[ 3126.991478][T29113] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3127.001212][T29113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3127.011081][T12985] usb 7-1: config 0 has no interfaces?
[ 3127.017886][T29113] usb 6-1: config 0 descriptor??
[ 3127.021181][T12985] usb 7-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3127.050510][T12985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3127.080417][T12985] usb 7-1: config 0 descriptor??
[ 3128.488415][T29113] hackrf 6-1:0.0: usb_control_msg() failed -110 request 0e
[ 3128.495939][T29113] hackrf 6-1:0.0: Could not detect board
[ 3128.520036][T29113] hackrf 6-1:0.0: probe with driver hackrf failed with error -110
[ 3128.739968][   T25] usb 7-1: USB disconnect, device number 52
[ 3129.036228][T28931] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3129.054778][T28931] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3129.063659][T28931] bridge_slave_1: entered allmulticast mode
[ 3129.073840][T28931] bridge_slave_1: entered promiscuous mode
[ 3129.179619][T28931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3129.222466][T28931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3129.386210][T28931] team0: Port device team_slave_0 added
[ 3129.442154][T28931] team0: Port device team_slave_1 added
[ 3129.611705][T17466] usb 6-1: USB disconnect, device number 37
[ 3130.142791][T28931] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3130.155106][T28931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3130.310928][T28931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3130.351808][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 3130.591913][T28931] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3130.629720][T28931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3130.701254][T29170] loop3: detected capacity change from 0 to 2048
[ 3130.748624][T29170] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 3130.759941][T28931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3130.816927][T29170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3131.093663][T28931] hsr_slave_0: entered promiscuous mode
[ 3131.300278][T28931] hsr_slave_1: entered promiscuous mode
[ 3132.156803][T29181] loop3: detected capacity change from 0 to 128
[ 3132.932702][T29187] vivid-000: =================  START STATUS  =================
[ 3132.940485][T29187] vivid-000: Generate PTS: true
[ 3132.945408][T29187] vivid-000: Generate SCR: true
[ 3132.950402][T29187] tpg source WxH: 720x576 (R'G'B)
[ 3132.955463][T29187] tpg field: 4
[ 3132.958860][T29187] tpg crop: 720x64@0x0
[ 3132.963004][T29187] tpg compose: 2880x16@0x0
[ 3132.967460][T29187] tpg colorspace: 1
[ 3132.971340][T29187] tpg transfer function: 0/0
[ 3132.976065][T29187] tpg quantization: 0/0
[ 3132.980871][T29187] tpg RGB range: 0/2
[ 3132.984857][T29187] vivid-000: ==================  END STATUS  ==================
[ 3133.211256][T29181] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 3133.353767][T29181] sysv_count_free_blocks: cannot read free-list block
[ 3133.547196][T29181] sysv_count_free_inodes: unable to read inode table
[ 3133.840709][T27141] sysv_free_block: trying to free block not in datazone
[ 3133.873367][T27141] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 3134.044988][T29195] loop4: detected capacity change from 0 to 4096
[ 3134.069750][ T5909] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 3134.081857][T29195] NILFS (loop4): invalid segment: Checksum error in segment payload
[ 3134.090421][T29195] NILFS (loop4): trying rollback from an earlier position
[ 3134.123977][T29195] NILFS (loop4): recovery complete
[ 3134.138497][T29198] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3134.215004][T28931] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 3134.233973][ T5909] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3134.254750][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3134.269764][T17466] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 3134.311854][T28931] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 3134.381330][ T5909] usb 7-1: config 0 descriptor??
[ 3134.407055][T28931] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 3134.433888][T28931] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 3134.529738][T17466] usb 4-1: device descriptor read/64, error -71
[ 3134.641074][T28931] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3134.659308][T28931] 8021q: adding VLAN 0 to HW filter on device team0
[ 3134.688494][T13306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3134.695819][T13306] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3134.708724][T13306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3134.716085][T13306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3136.066886][ T5909] hackrf 7-1:0.0: usb_control_msg() failed -110 request 0e
[ 3136.074445][ T5909] hackrf 7-1:0.0: Could not detect board
[ 3136.080280][ T5909] hackrf 7-1:0.0: probe with driver hackrf failed with error -110
[ 3136.119826][T17466] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 3136.255445][T17466] usb 4-1: device descriptor read/64, error -71
[ 3136.319767][    T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 3136.370285][T17466] usb usb4-port1: attempt power cycle
[ 3136.425833][T28931] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3136.469802][    T8] usb 5-1: Using ep0 maxpacket: 8
[ 3136.483334][    T8] usb 5-1: config 0 has an invalid interface number: 112 but max is 1
[ 3136.505663][    T8] usb 5-1: config 0 has an invalid interface number: 17 but max is 1
[ 3136.529736][    T8] usb 5-1: config 0 has no interface number 0
[ 3136.534962][T28931] veth0_vlan: entered promiscuous mode
[ 3136.535867][    T8] usb 5-1: config 0 has no interface number 1
[ 3136.543633][    T8] usb 5-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3136.569734][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3136.578027][    T8] usb 5-1: Product: syz
[ 3136.586001][T28931] veth1_vlan: entered promiscuous mode
[ 3136.588170][    T8] usb 5-1: Manufacturer: syz
[ 3136.599806][    T8] usb 5-1: SerialNumber: syz
[ 3136.617857][    T8] usb 5-1: config 0 descriptor??
[ 3136.675356][T28931] veth0_macvtap: entered promiscuous mode
[ 3136.689057][T28931] veth1_macvtap: entered promiscuous mode
[ 3136.709878][T17466] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 3136.725498][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3136.740973][T17466] usb 4-1: device descriptor read/8, error -71
[ 3136.745805][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3136.767981][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3136.788116][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3136.809121][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3136.835095][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3136.855961][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3136.868133][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3136.881693][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3136.905305][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3136.935217][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3136.979228][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3137.012937][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3137.073804][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3137.228188][T28931] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3137.269993][T17466] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 3138.253679][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3138.291261][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3138.315916][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3138.331867][T29220] loop7: detected capacity change from 0 to 32768
[ 3138.375756][    T8] usb 7-1: USB disconnect, device number 53
[ 3138.404109][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3138.420186][T17466] usb 4-1: device descriptor read/8, error -71
[ 3138.429868][T29220] JBD2: Ignoring recovery information on journal
[ 3138.448250][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3138.468106][T29220] jbd2_journal_bmap: journal block not found at offset 64 on loop7-27
[ 3138.480049][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3138.494111][T29220] JBD2: bad block at offset 64
[ 3138.503878][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3138.543228][T29220] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 3138.556776][T17466] usb usb4-port1: unable to enumerate USB device
[ 3138.577220][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3138.649273][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3138.711219][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3138.762848][T29220] OCFS2: ERROR (device loop7): ocfs2_claim_suballoc_bits: Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[ 3138.789945][T29220] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 3138.790903][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3138.817013][T29220] OCFS2: Returning error to the calling process.
[ 3138.828891][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3138.841655][T28931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3138.852677][T29220] (syz.7.6034,29220,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5
[ 3138.864946][T28931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3138.876897][T29220] (syz.7.6034,29220,0):__ocfs2_claim_clusters:2412 ERROR: status = -5
[ 3138.887494][T28931] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3138.899090][T29220] (syz.7.6034,29220,0):__ocfs2_claim_clusters:2420 ERROR: status = -5
[ 3138.918664][T28931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3138.928371][T29220] (syz.7.6034,29220,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -5
[ 3138.959387][T28931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3138.979536][T29220] (syz.7.6034,29220,0):ocfs2_block_group_alloc:709 ERROR: status = -5
[ 3138.987416][T28931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3138.988490][T29220] (syz.7.6034,29220,0):ocfs2_block_group_alloc:762 ERROR: status = -5
[ 3139.017730][T28931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3139.111067][T29220] (syz.7.6034,29220,0):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5
[ 3139.123693][T29220] (syz.7.6034,29220,0):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5
[ 3139.136835][T29220] (syz.7.6034,29220,0):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5
[ 3139.154792][T29220] (syz.7.6034,29220,0):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5
[ 3139.241330][T29220] (syz.7.6034,29220,0):ocfs2_expand_inline_dir:2822 ERROR: status = -5
[ 3139.282171][T29220] (syz.7.6034,29220,0):ocfs2_extend_dir:3186 ERROR: status = -5
[ 3139.320577][T29220] (syz.7.6034,29220,0):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -5
[ 3139.335102][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3139.339381][T29220] (syz.7.6034,29220,0):ocfs2_symlink:1875 ERROR: status = -5
[ 3139.434052][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3139.468356][T29220] (syz.7.6034,29220,0):ocfs2_symlink:2076 ERROR: status = -5
[ 3139.675675][T17810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3139.699092][T17810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3139.753285][T29233] loop5: detected capacity change from 0 to 128
[ 3139.766139][T29233] VFS: Found a Xenix FS (block size = 512) on device loop5
[ 3139.828774][T27156] ocfs2: Unmounting device (7,7) on (node local)
[ 3139.932006][T29233] sysv_count_free_blocks: cannot read free-list block
[ 3140.050984][T29233] sysv_count_free_inodes: unable to read inode table
[ 3140.176362][T22373] sysv_free_block: trying to free block not in datazone
[ 3140.196764][T22373] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 3141.028743][T29113] usb 5-1: USB disconnect, device number 23
[ 3141.500739][T29113] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 3142.224253][T29113] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3142.233999][T29113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3142.356701][T29113] usb 5-1: config 0 descriptor??
[ 3142.959841][    T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 3143.100709][    T8] usb 1-1: device descriptor read/64, error -71
[ 3143.125299][T29113] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e
[ 3143.134867][T29113] hackrf 5-1:0.0: Could not detect board
[ 3143.142102][T29113] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[ 3143.154420][T29113] usb 5-1: USB disconnect, device number 24
[ 3144.589808][    T8] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 3144.653767][T29281] loop3: detected capacity change from 0 to 2048
[ 3145.352882][T29288] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3146.040034][    T8] usb 1-1: device descriptor read/64, error -71
[ 3146.150110][    T8] usb usb1-port1: attempt power cycle
[ 3147.209816][ T6012] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[ 3147.391745][ T6012] usb 6-1: config 0 has no interfaces?
[ 3147.397773][ T6012] usb 6-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3147.413907][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3147.479103][ T6012] usb 6-1: config 0 descriptor??
[ 3147.992297][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 3147.999044][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 3148.122287][T17466] usb 6-1: USB disconnect, device number 38
[ 3151.909783][T12985] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 3151.963064][T29353] loop5: detected capacity change from 0 to 1764
[ 3152.061179][T12985] usb 5-1: no configurations
[ 3152.086249][T12985] usb 5-1: can't read configurations, error -22
[ 3152.258930][T12985] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 3152.407878][T29360] siw: device registration error -23
[ 3152.430625][T12985] usb 5-1: no configurations
[ 3152.435404][T12985] usb 5-1: can't read configurations, error -22
[ 3152.444088][T12985] usb usb5-port1: attempt power cycle
[ 3152.503134][T29343] loop3: detected capacity change from 0 to 32768
[ 3152.559916][T29343] JBD2: Ignoring recovery information on journal
[ 3152.589812][T29113] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 3152.606391][T29343] jbd2_journal_bmap: journal block not found at offset 64 on loop3-27
[ 3152.656270][T29343] JBD2: bad block at offset 64
[ 3152.687365][T29343] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 3152.761659][T29113] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3152.769187][T29343] OCFS2: ERROR (device loop3): ocfs2_claim_suballoc_bits: Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[ 3152.800005][T12985] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 3152.809097][T29343] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 3152.822758][T29113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3152.842847][T12985] usb 5-1: no configurations
[ 3152.847021][T29113] usb 6-1: config 0 descriptor??
[ 3152.849777][T29343] OCFS2: Returning error to the calling process.
[ 3152.859256][T12985] usb 5-1: can't read configurations, error -22
[ 3152.879704][T29343] (syz.3.6068,29343,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5
[ 3152.888286][T29343] (syz.3.6068,29343,0):__ocfs2_claim_clusters:2412 ERROR: status = -5
[ 3152.946894][T29343] (syz.3.6068,29343,0):__ocfs2_claim_clusters:2420 ERROR: status = -5
[ 3152.965895][T29343] (syz.3.6068,29343,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -5
[ 3152.989904][T29343] (syz.3.6068,29343,0):ocfs2_block_group_alloc:709 ERROR: status = -5
[ 3153.025365][T29343] (syz.3.6068,29343,0):ocfs2_block_group_alloc:762 ERROR: status = -5
[ 3153.042352][T12985] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 3153.070949][T29343] (syz.3.6068,29343,0):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5
[ 3153.102951][T12985] usb 5-1: no configurations
[ 3153.107737][T12985] usb 5-1: can't read configurations, error -22
[ 3153.119792][T29343] (syz.3.6068,29343,0):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5
[ 3153.145849][T12985] usb usb5-port1: unable to enumerate USB device
[ 3153.162670][T29343] (syz.3.6068,29343,0):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5
[ 3153.200654][T29343] (syz.3.6068,29343,0):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5
[ 3153.493079][T29343] (syz.3.6068,29343,1):ocfs2_expand_inline_dir:2822 ERROR: status = -5
[ 3153.575667][T29343] (syz.3.6068,29343,1):ocfs2_extend_dir:3186 ERROR: status = -5
[ 3153.992636][T29343] (syz.3.6068,29343,0):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -5
[ 3154.021250][T29343] (syz.3.6068,29343,0):ocfs2_symlink:1875 ERROR: status = -5
[ 3154.071112][T29343] (syz.3.6068,29343,0):ocfs2_symlink:2076 ERROR: status = -5
[ 3154.230965][T29113] hackrf 6-1:0.0: usb_control_msg() failed -110 request 0e
[ 3154.242581][T29113] hackrf 6-1:0.0: Could not detect board
[ 3154.248797][T29113] hackrf 6-1:0.0: probe with driver hackrf failed with error -110
[ 3154.287513][T29113] usb 6-1: USB disconnect, device number 39
[ 3154.393695][T27141] ocfs2: Unmounting device (7,3) on (node local)
[ 3155.098208][T29362] loop6: detected capacity change from 0 to 32768
[ 3155.341602][T29362] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 3156.531930][T21122] ocfs2: Unmounting device (7,6) on (node local)
[ 3157.629541][T29391] loop4: detected capacity change from 0 to 4096
[ 3157.668827][T29391] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[ 3157.917371][T29391] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 3157.938284][T29391] ntfs3(loop4): Failed to load $Extend (-22).
[ 3157.960299][T29391] ntfs3(loop4): Failed to initialize $Extend.
[ 3158.035077][T29391] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB
[ 3158.094623][T29404] binder: 29403:29404 ioctl c0306201 200002c0 returned -14
[ 3158.332731][T29398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6086'.
[ 3161.018238][T29431] loop4: detected capacity change from 0 to 4096
[ 3161.105957][T29431] NILFS (loop4): invalid segment: Checksum error in segment payload
[ 3161.159906][T29431] NILFS (loop4): trying rollback from an earlier position
[ 3161.239369][T29437] loop3: detected capacity change from 0 to 128
[ 3161.249072][T29437] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 3161.259864][T29437] sysv_count_free_blocks: cannot read free-list block
[ 3161.273091][T29431] NILFS (loop4): recovery complete
[ 3161.294963][T29440] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3161.390234][T29437] sysv_count_free_inodes: unable to read inode table
[ 3161.563641][T27141] sysv_free_block: trying to free block not in datazone
[ 3161.597204][T27141] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 3161.817897][T29450] binder: BINDER_SET_CONTEXT_MGR already set
[ 3161.834811][T29450] binder: 29447:29450 ioctl 4018620d 200001c0 returned -16
[ 3163.171657][T17558] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 3163.310699][T12985] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 3163.331731][T17558] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3163.377499][T17558] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 3163.396694][T17558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3163.540732][T17558] usb 1-1: config 0 descriptor??
[ 3163.559361][T17558] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3163.679956][    T8] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[ 3164.681564][T12985] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3164.697546][T12985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3164.914466][    T8] usb 5-1: config 0 has no interfaces?
[ 3164.931073][T12985] usb 6-1: config 0 descriptor??
[ 3164.945373][    T8] usb 5-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3165.008009][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3165.073009][    T8] usb 5-1: config 0 descriptor??
[ 3166.876966][T12985] hackrf 6-1:0.0: usb_control_msg() failed -110 request 0e
[ 3166.884669][T12985] hackrf 6-1:0.0: Could not detect board
[ 3166.890486][T12985] hackrf 6-1:0.0: probe with driver hackrf failed with error -110
[ 3167.244100][T12985] usb 5-1: USB disconnect, device number 29
[ 3168.021526][T29479] netlink: 904 bytes leftover after parsing attributes in process `syz.7.6116'.
[ 3168.191601][ T6012] usb 6-1: USB disconnect, device number 40
[ 3168.579872][T29113] usb 1-1: USB disconnect, device number 40
[ 3170.305387][T29113] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 3170.489770][T29113] usb 4-1: Using ep0 maxpacket: 8
[ 3170.532568][T29113] usb 4-1: config 0 has an invalid interface number: 112 but max is 1
[ 3170.560192][T29113] usb 4-1: config 0 has an invalid interface number: 17 but max is 1
[ 3170.600954][T29113] usb 4-1: config 0 has no interface number 0
[ 3170.899972][T29113] usb 4-1: config 0 has no interface number 1
[ 3170.970060][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6119'.
[ 3172.813478][T29113] usb 4-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3172.824595][T29113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3172.855230][T29113] usb 4-1: config 0 descriptor??
[ 3172.884284][T29113] usb 4-1: can't set config #0, error -71
[ 3173.180115][T29113] usb 4-1: USB disconnect, device number 16
[ 3174.359929][T17558] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 3174.651823][T17558] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3174.699700][T17558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3174.724566][T17558] usb 1-1: config 0 descriptor??
[ 3175.340513][T29113] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 3175.620115][T29113] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3176.042789][T29113] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 3176.066130][T29113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3176.079560][T17558] hackrf 1-1:0.0: usb_control_msg() failed -110 request 0e
[ 3176.087181][T17558] hackrf 1-1:0.0: Could not detect board
[ 3176.093437][T17558] hackrf 1-1:0.0: probe with driver hackrf failed with error -110
[ 3176.455016][T29113] usb 5-1: config 0 descriptor??
[ 3177.317873][T29113] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3178.115109][T12985] usb 1-1: USB disconnect, device number 41
[ 3179.767879][T17558] usb 5-1: USB disconnect, device number 30
[ 3180.685435][T29577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6140'.
[ 3180.839847][T12985] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[ 3181.034312][T12985] usb 1-1: config 0 has no interfaces?
[ 3181.065421][T12985] usb 1-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3181.126994][T12985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3181.191100][T12985] usb 1-1: config 0 descriptor??
[ 3185.237080][T12985] usb 1-1: can't set config #0, error -71
[ 3185.244634][T12985] usb 1-1: USB disconnect, device number 42
[ 3185.892289][T29594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3185.911784][T29594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3185.932276][T29529] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 3186.539734][T17558] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 3186.661347][T29529] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3186.670622][T29529] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3186.711304][T29529] usb 7-1: config 0 descriptor??
[ 3186.712709][T17558] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 3186.729220][T17558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3186.752637][T17558] usb 6-1: config 0 descriptor??
[ 3186.819905][ T5909] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 3187.068289][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3187.119983][ T5909] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 3187.180941][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3187.233172][ T5909] usb 5-1: config 0 descriptor??
[ 3187.275449][ T5909] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3187.897179][T17558] hackrf 6-1:0.0: usb_control_msg() failed -110 request 0e
[ 3187.904761][T17558] hackrf 6-1:0.0: Could not detect board
[ 3188.504632][T29529] hackrf 7-1:0.0: usb_control_msg() failed -110 request 0e
[ 3188.513050][T29529] hackrf 7-1:0.0: Could not detect board
[ 3188.518856][T29529] hackrf 7-1:0.0: probe with driver hackrf failed with error -110
[ 3188.854850][T17558] hackrf 6-1:0.0: probe with driver hackrf failed with error -110
[ 3189.009297][T29205] usb 7-1: USB disconnect, device number 54
[ 3189.164873][T29529] usb 5-1: USB disconnect, device number 31
[ 3189.189820][T17558] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 3189.667764][T17558] usb 1-1: no configurations
[ 3189.701089][T17558] usb 1-1: can't read configurations, error -22
[ 3190.001807][ T6012] usb 6-1: USB disconnect, device number 41
[ 3190.200036][T17558] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 3190.415567][T17558] usb 1-1: no configurations
[ 3190.423059][T17558] usb 1-1: can't read configurations, error -22
[ 3190.454025][T17558] usb usb1-port1: attempt power cycle
[ 3190.917780][T17558] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 3191.017434][T17558] usb 1-1: no configurations
[ 3191.022677][T17558] usb 1-1: can't read configurations, error -22
[ 3191.410194][T17558] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 3192.640130][ T5909] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[ 3192.753388][T17558] usb 1-1: device descriptor read/8, error -71
[ 3192.813338][ T5909] usb 5-1: config 0 has no interfaces?
[ 3192.819396][ T5909] usb 5-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3192.930978][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3192.933980][T17558] usb usb1-port1: unable to enumerate USB device
[ 3192.941712][ T5909] usb 5-1: config 0 descriptor??
[ 3193.169757][T29648] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6165'.
[ 3194.656343][ T5909] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 3195.399933][T17558] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 3197.371020][ T5909] usb 6-1: unable to read config index 0 descriptor/all
[ 3198.179823][ T5909] usb 6-1: can't read configurations, error -71
[ 3198.187649][T12985] usb 5-1: USB disconnect, device number 32
[ 3201.308711][T17558] usb 1-1: device descriptor read/64, error -71
[ 3202.686666][T17558] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 3206.029827][ T6012] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 3206.199838][ T6012] usb 6-1: Using ep0 maxpacket: 8
[ 3206.205164][T17558] usb 1-1: device not accepting address 48, error -71
[ 3206.212432][T12873] usb 7-1: new full-speed USB device number 55 using dummy_hcd
[ 3206.251176][T17558] usb usb1-port1: attempt power cycle
[ 3206.276389][ T6012] usb 6-1: config 0 has an invalid interface number: 112 but max is 1
[ 3206.284864][ T6012] usb 6-1: config 0 has an invalid interface number: 17 but max is 1
[ 3206.293180][ T6012] usb 6-1: config 0 has no interface number 0
[ 3206.299500][ T6012] usb 6-1: config 0 has no interface number 1
[ 3206.407530][ T6012] usb 6-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3206.427413][T12873] usb 7-1: config 0 has no interfaces?
[ 3206.440577][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3206.450714][T12873] usb 7-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3206.492087][ T6012] usb 6-1: Product: syz
[ 3206.496410][T12873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3206.515117][ T6012] usb 6-1: Manufacturer: syz
[ 3206.528582][ T6012] usb 6-1: SerialNumber: syz
[ 3206.554676][T12873] usb 7-1: config 0 descriptor??
[ 3206.575515][ T6012] usb 6-1: config 0 descriptor??
[ 3206.679810][T17558] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 3206.700612][T17558] usb 1-1: Using ep0 maxpacket: 16
[ 3206.718908][T17558] usb 1-1: no configurations
[ 3206.747525][T17558] usb 1-1: can't read configurations, error -22
[ 3207.355339][T12873] usb 6-1: USB disconnect, device number 44
[ 3207.455182][T17558] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 3207.496514][T17558] usb 1-1: Using ep0 maxpacket: 16
[ 3207.509963][T17558] usb 1-1: no configurations
[ 3207.514762][T17558] usb 1-1: can't read configurations, error -22
[ 3207.523407][T17558] usb usb1-port1: unable to enumerate USB device
[ 3209.429517][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 3209.451897][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 3209.532506][ T5909] usb 7-1: USB disconnect, device number 55
[ 3212.619911][T17558] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 3212.995001][T17558] usb 6-1: no configurations
[ 3213.000718][T17558] usb 6-1: can't read configurations, error -22
[ 3213.129979][T17558] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 3213.661355][T17558] usb 6-1: no configurations
[ 3213.674526][T17558] usb 6-1: can't read configurations, error -22
[ 3213.944727][T17558] usb usb6-port1: attempt power cycle
[ 3214.419861][T17558] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 3215.503756][T17558] usb 6-1: device descriptor read/8, error -71
[ 3219.050207][T22376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 3219.086864][T22376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 3220.805433][T22376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 3220.999901][T22376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 3221.129786][T17558] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 3221.137517][ T6012] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[ 3221.231030][T22376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 3221.241428][T22376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 3221.299847][T17558] usb 5-1: Using ep0 maxpacket: 8
[ 3221.308733][T17558] usb 5-1: config 0 has an invalid interface number: 112 but max is 1
[ 3221.321299][T17558] usb 5-1: config 0 has an invalid interface number: 17 but max is 1
[ 3221.329586][T17558] usb 5-1: config 0 has no interface number 0
[ 3221.336057][T17558] usb 5-1: config 0 has no interface number 1
[ 3222.344131][T17558] usb 5-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3222.353469][T17558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3222.361724][T17558] usb 5-1: Product: syz
[ 3222.365962][T17558] usb 5-1: Manufacturer: syz
[ 3222.371643][T17558] usb 5-1: SerialNumber: syz
[ 3222.403277][T17558] usb 5-1: config 0 descriptor??
[ 3223.340331][T22376] Bluetooth: hci2: command tx timeout
[ 3224.319256][T17558] usb 5-1: can't set config #0, error -71
[ 3224.328838][T17558] usb 5-1: USB disconnect, device number 33
[ 3225.789930][ T5856] Bluetooth: hci2: command tx timeout
[ 3227.279793][ T6012] usb 6-1: device descriptor read/64, error -110
[ 3227.926985][T22621] Bluetooth: hci2: command tx timeout
[ 3227.932640][T22621] Bluetooth: hci0: command 0x0406 tx timeout
[ 3230.021084][T22376] Bluetooth: hci2: command tx timeout
[ 3230.422609][ T6645] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3232.007293][T17558] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[ 3232.036448][ T6645] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3233.898825][T17558] usb 4-1: config 0 has no interfaces?
[ 3233.904570][T17558] usb 4-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3233.914002][T17558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3233.930274][T17558] usb 4-1: config 0 descriptor??
[ 3234.146266][T17558] usb 4-1: can't set config #0, error -71
[ 3234.240809][T17558] usb 4-1: USB disconnect, device number 17
[ 3234.291666][ T6645] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3236.152920][T17558] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[ 3236.400933][ T6645] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3237.151563][T17558] usb 4-1: config 0 has no interfaces?
[ 3237.157372][T17558] usb 4-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3237.171853][T17558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3237.911978][T17558] usb 4-1: config 0 descriptor??
[ 3238.944211][T29799] chnl_net:caif_netlink_parms(): no params data found
[ 3241.438761][T17558] usb 4-1: can't set config #0, error -71
[ 3241.446347][T17558] usb 4-1: USB disconnect, device number 18
[ 3241.483077][T29799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3241.504535][T29799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3241.529131][T29799] bridge_slave_0: entered allmulticast mode
[ 3241.552325][T29799] bridge_slave_0: entered promiscuous mode
[ 3241.587926][ T6645] bridge_slave_1: left allmulticast mode
[ 3241.594027][ T6645] bridge_slave_1: left promiscuous mode
[ 3241.600187][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3241.861065][T17558] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[ 3241.862331][T29949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3241.930142][T29949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3242.327436][ T6645] bridge_slave_0: left allmulticast mode
[ 3242.333509][ T6645] bridge_slave_0: left promiscuous mode
[ 3242.359975][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3242.440555][T17558] usb 5-1: config 0 has no interfaces?
[ 3242.453063][T17558] usb 5-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3242.498926][T17558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3242.551815][T17558] usb 5-1: config 0 descriptor??
[ 3245.308250][T12985] usb 5-1: USB disconnect, device number 34
[ 3245.320311][T17558] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 3245.479809][T17558] usb 4-1: Using ep0 maxpacket: 8
[ 3245.690178][T17558] usb 4-1: config 0 has an invalid interface number: 112 but max is 1
[ 3245.886303][T17558] usb 4-1: config 0 has an invalid interface number: 17 but max is 1
[ 3246.024253][T17558] usb 4-1: config 0 has no interface number 0
[ 3246.133235][T17558] usb 4-1: config 0 has no interface number 1
[ 3246.268519][T17558] usb 4-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[ 3246.319496][T17558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3246.350591][T17558] usb 4-1: Product: syz
[ 3246.354847][T17558] usb 4-1: Manufacturer: syz
[ 3246.480182][T17558] usb 4-1: SerialNumber: syz
[ 3246.532585][T17558] usb 4-1: config 0 descriptor??
[ 3247.775798][T17558] usb 4-1: USB disconnect, device number 19
[ 3248.132050][ T6645] team0: Port device geneve1 removed
[ 3248.169531][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6255'.
[ 3253.811084][T30021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3257.148719][ T6645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3257.249819][T29529] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[ 3257.310716][ T6645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3257.352855][ T6645] bond0 (unregistering): Released all slaves
[ 3257.366106][T29799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3257.381711][T29799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3257.432974][T29799] bridge_slave_1: entered allmulticast mode
[ 3257.444476][T29529] usb 4-1: config 0 has no interfaces?
[ 3257.454622][T29529] usb 4-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3257.470591][T29799] bridge_slave_1: entered promiscuous mode
[ 3257.483743][T29529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3257.513212][T29529] usb 4-1: config 0 descriptor??
[ 3257.601761][ T6645] tipc: Left network mode
[ 3257.667060][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6271'.
[ 3257.680264][T29799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3258.756045][T29799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3258.940663][T29799] team0: Port device team_slave_0 added
[ 3259.048682][T29799] team0: Port device team_slave_1 added
[ 3260.267214][T29205] usb 4-1: USB disconnect, device number 20
[ 3260.969204][T29799] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3261.152814][T29799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3261.179306][T29799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3261.221092][T29799] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3261.228394][T29799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3261.585712][T29799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3263.579883][T12985] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 3263.758149][T12985] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3263.927377][T12985] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 3263.936615][T12985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3263.948501][T12985] usb 4-1: config 0 descriptor??
[ 3263.960647][T12985] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 3263.971814][ T6645] hsr_slave_0: left promiscuous mode
[ 3264.013851][ T6645] hsr_slave_1: left promiscuous mode
[ 3264.072291][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3264.099832][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3264.123352][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3264.151452][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3265.905142][ T6645] veth1_macvtap: left promiscuous mode
[ 3265.911291][ T6645] veth0_macvtap: left promiscuous mode
[ 3265.917101][ T6645] veth1_vlan: left promiscuous mode
[ 3265.922927][ T6645] veth0_vlan: left promiscuous mode
[ 3266.226708][T30092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3266.278464][T30095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3266.921102][T12985] usb 4-1: USB disconnect, device number 21
[ 3270.119960][T29113] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[ 3270.532288][T30113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6285'.
[ 3270.655185][T29113] usb 4-1: device descriptor read/all, error -71
[ 3270.862439][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 3270.869124][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 3271.863655][T29113] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 3272.028479][T29113] usb 4-1: Using ep0 maxpacket: 16
[ 3272.038738][T29113] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3272.056938][T29113] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 3272.075508][T29113] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 3272.091699][T29113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3272.119393][T29113] usb 4-1: config 0 descriptor??
[ 3273.327690][ T6645] team0 (unregistering): Port device team_slave_1 removed
[ 3273.402316][ T6645] team0 (unregistering): Port device team_slave_0 removed
[ 3273.469944][T29113] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 3273.623721][T29113] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3273.637299][T29113] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 3273.646640][T29113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3273.666545][T29113] usb 6-1: config 0 descriptor??
[ 3273.694864][T29113] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3275.180018][T29113] usb 4-1: USB disconnect, device number 23
[ 3275.973313][T30153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3276.002870][T30148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3276.343241][T29113] usb 6-1: USB disconnect, device number 51
[ 3277.826623][T29799] hsr_slave_0: entered promiscuous mode
[ 3277.865819][T29799] hsr_slave_1: entered promiscuous mode
[ 3277.888430][T29799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3278.050048][T29799] Cannot create hsr debugfs directory
[ 3279.420462][T17558] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[ 3279.576801][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 3279.593281][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 3279.604429][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 3279.612822][T17558] usb 5-1: config 0 has no interfaces?
[ 3279.619766][T17558] usb 5-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3279.630429][T17558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3279.644917][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 3279.653093][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 3279.660797][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 3279.684197][T17558] usb 5-1: config 0 descriptor??
[ 3280.026777][T30184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6308'.
[ 3281.763558][T29205] usb 5-1: USB disconnect, device number 35
[ 3281.849789][ T5909] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 3282.042337][ T5909] usb 6-1: no configurations
[ 3282.056688][T13307] bridge_slave_1: left allmulticast mode
[ 3282.059719][ T5909] usb 6-1: can't read configurations, error -22
[ 3282.063194][T22376] Bluetooth: hci3: command tx timeout
[ 3282.149496][T13307] bridge_slave_1: left promiscuous mode
[ 3282.158176][T13307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3282.178089][T13307] bridge_slave_0: left allmulticast mode
[ 3282.184892][T13307] bridge_slave_0: left promiscuous mode
[ 3282.193358][T13307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3282.714950][T30202] 9pnet_fd: Insufficient options for proto=fd
[ 3282.739708][ T5909] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 3284.120487][ T5909] usb 6-1: no configurations
[ 3284.125174][ T5909] usb 6-1: can't read configurations, error -22
[ 3284.378665][T22376] Bluetooth: hci3: command tx timeout
[ 3285.022486][ T5909] usb usb6-port1: attempt power cycle
[ 3285.171091][T30208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3285.359780][ T5909] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 3285.427287][ T5909] usb 6-1: device descriptor read/8, error -71
[ 3285.440241][T30217] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6317'.
[ 3285.472312][T30207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3286.101162][T13307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3286.463248][T22376] Bluetooth: hci3: command tx timeout
[ 3286.509960][T30222] loop4: detected capacity change from 0 to 4096
[ 3286.846300][T13307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3286.948983][T13307] bond0 (unregistering): Released all slaves
[ 3287.701152][T30239] binder: BINDER_SET_CONTEXT_MGR already set
[ 3287.707216][T30239] binder: 30238:30239 ioctl 4018620d 200001c0 returned -16
[ 3288.570742][T30251] loop3: detected capacity change from 0 to 32768
[ 3288.599876][T22376] Bluetooth: hci3: command tx timeout
[ 3288.683139][T13307] hsr_slave_0: left promiscuous mode
[ 3288.746711][T30251] JBD2: Ignoring recovery information on journal
[ 3288.757529][T30251] jbd2_journal_bmap: journal block not found at offset 64 on loop3-27
[ 3288.765886][T30251] JBD2: bad block at offset 64
[ 3288.953747][T13307] hsr_slave_1: left promiscuous mode
[ 3288.960807][T30251] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 3288.971381][T17558] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 3288.983065][T30251] OCFS2: ERROR (device loop3): ocfs2_claim_suballoc_bits: Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[ 3288.994697][T30263] loop5: detected capacity change from 0 to 128
[ 3288.996962][T30251] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 3289.013379][T30251] OCFS2: Returning error to the calling process.
[ 3289.013977][T30263] VFS: Found a Xenix FS (block size = 512) on device loop5
[ 3289.020176][T30251] (syz.3.6328,30251,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5
[ 3289.035859][T30251] (syz.3.6328,30251,1):__ocfs2_claim_clusters:2412 ERROR: status = -5
[ 3289.037175][T30263] sysv_free_block: trying to free block not in datazone
[ 3289.044134][T30251] (syz.3.6328,30251,1):__ocfs2_claim_clusters:2420 ERROR: status = -5
[ 3289.044203][T30251] (syz.3.6328,30251,1):ocfs2_block_group_alloc_contig:437 ERROR: status = -5
[ 3289.044271][T30251] (syz.3.6328,30251,1):ocfs2_block_group_alloc:709 ERROR: status = -5
[ 3289.044374][T30251] (syz.3.6328,30251,1):ocfs2_block_group_alloc:762 ERROR: status = -5
[ 3289.044434][T30251] (syz.3.6328,30251,1):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5
[ 3289.094657][T30251] (syz.3.6328,30251,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5
[ 3289.104084][T30251] (syz.3.6328,30251,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5
[ 3289.104435][T13307] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3289.113254][T30251] (syz.3.6328,30251,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5
[ 3289.113364][T30251] (syz.3.6328,30251,1):ocfs2_expand_inline_dir:2822 ERROR: status = -5
[ 3289.113424][T30251] (syz.3.6328,30251,1):ocfs2_extend_dir:3186 ERROR: status = -5
[ 3289.113485][T30251] (syz.3.6328,30251,1):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -5
[ 3289.113548][T30251] (syz.3.6328,30251,1):ocfs2_symlink:1875 ERROR: status = -5
[ 3289.113616][T30251] (syz.3.6328,30251,1):ocfs2_symlink:2076 ERROR: status = -5
[ 3289.177497][T30263] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 3289.222700][T13307] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3289.255030][T27141] ocfs2: Unmounting device (7,3) on (node local)
[ 3289.298684][T17558] usb 1-1: no configurations
[ 3289.303534][T17558] usb 1-1: can't read configurations, error -22
[ 3289.345515][T30265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6333'.
[ 3289.439811][T17558] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 3289.620849][T17558] usb 1-1: no configurations
[ 3289.631349][T17558] usb 1-1: can't read configurations, error -22
[ 3290.384575][T13307] team0 (unregistering): Port device team_slave_1 removed
[ 3290.574486][T17558] usb usb1-port1: attempt power cycle
[ 3290.652695][T13307] team0 (unregistering): Port device team_slave_0 removed
[ 3290.781457][T30260] loop7: detected capacity change from 0 to 32768
[ 3290.830478][T30260] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 3290.951772][T17558] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 3291.156885][T17558] usb 1-1: no configurations
[ 3291.162179][T17558] usb 1-1: can't read configurations, error -22
[ 3291.256241][T27156] ocfs2: Unmounting device (7,7) on (node local)
[ 3291.299834][T17558] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 3291.343153][T17558] usb 1-1: no configurations
[ 3291.347828][T17558] usb 1-1: can't read configurations, error -22
[ 3291.860110][T17558] usb usb1-port1: unable to enumerate USB device
[ 3291.958661][T30179] chnl_net:caif_netlink_parms(): no params data found
[ 3292.586786][T30302] binder: 30300:30302 ioctl c0306201 200002c0 returned -14
[ 3292.618189][T30179] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3292.634143][T30179] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3292.668927][T30179] bridge_slave_0: entered allmulticast mode
[ 3292.702786][T30179] bridge_slave_0: entered promiscuous mode
[ 3292.737559][T30179] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3292.782425][T30179] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3293.050366][T30179] bridge_slave_1: entered allmulticast mode
[ 3293.061344][T30179] bridge_slave_1: entered promiscuous mode
[ 3294.490687][T30179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3294.576092][T30179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3294.913706][T30179] team0: Port device team_slave_0 added
[ 3294.966493][T30179] team0: Port device team_slave_1 added
[ 3295.012228][T30328] loop5: detected capacity change from 0 to 256
[ 3295.063362][T30328] MINIX-fs: mounting file system with errors, running fsck is recommended
[ 3295.143175][T30179] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3295.161474][T30179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3295.199483][T30324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6350'.
[ 3295.283605][T30179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3295.309971][T12985] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 3295.340956][T30179] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3295.348065][T30179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3295.453699][T30179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3295.478085][T30326] loop7: detected capacity change from 0 to 32768
[ 3295.536562][T12985] usb 5-1: no configurations
[ 3295.544185][T12985] usb 5-1: can't read configurations, error -22
[ 3296.172059][T12985] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 3296.265497][T30326] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 3296.520580][T12985] usb 5-1: no configurations
[ 3296.525936][T12985] usb 5-1: can't read configurations, error -22
[ 3296.547792][T30179] hsr_slave_0: entered promiscuous mode
[ 3296.556243][T12985] usb usb5-port1: attempt power cycle
[ 3296.574973][T30179] hsr_slave_1: entered promiscuous mode
[ 3296.595126][T30179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3296.623876][T30179] Cannot create hsr debugfs directory
[ 3296.670381][T27156] ocfs2: Unmounting device (7,7) on (node local)
[ 3298.047218][T12985] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 3298.556421][T12985] usb 5-1: device descriptor read/8, error -71
[ 3298.887860][T30372] delete_channel: no stack
[ 3298.970489][T29113] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[ 3299.415380][T29113] usb 6-1: config 0 has no interfaces?
[ 3299.421483][T29113] usb 6-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[ 3299.434761][T29113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3299.452770][T29113] usb 6-1: config 0 descriptor??
[ 3300.053150][T25340] usb 6-1: USB disconnect, device number 56
[ 3300.503327][T30179] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 3300.533597][T30387] binder: 30386:30387 ioctl c0306201 200002c0 returned -14
[ 3300.662287][T30179] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 3301.772516][T30179] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 3301.841779][T30179] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 3302.538623][T30401] loop3: detected capacity change from 0 to 32768
[ 3302.553382][T30179] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3302.601559][T30401] read_mapping_page failed!
[ 3302.606511][T30401] ERROR: (device loop3): txAbort: 
[ 3302.606511][T30401] 
[ 3302.660129][T30179] 8021q: adding VLAN 0 to HW filter on device team0
[ 3302.741267][T22456] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3302.748511][T22456] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3302.801468][T22456] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3302.808720][T22456] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3302.913681][T27141] ERROR: (device loop3): diFree: numfree > numinos
[ 3302.913681][T27141] 
[ 3303.385408][T12985] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 3303.613273][T30416] loop4: detected capacity change from 0 to 1024
[ 3303.657197][T30179] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3303.801258][T30416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 3303.907597][T12985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3303.929795][T12985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3303.942361][T12985] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3303.955487][T12985] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3303.964641][T12985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3304.052743][T12985] usb 1-1: config 0 descriptor??
[ 3304.286243][T30179] veth0_vlan: entered promiscuous mode
[ 3304.305377][T30179] veth1_vlan: entered promiscuous mode
[ 3304.401386][T30179] veth0_macvtap: entered promiscuous mode
[ 3304.427187][T30179] veth1_macvtap: entered promiscuous mode
[ 3304.480931][T26973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 3304.491788][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.499492][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.507940][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.513933][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3304.515403][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.533759][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.541423][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.550452][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.559075][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.566716][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.574342][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.580666][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3304.581932][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.602421][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.609972][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.617457][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.625564][T12985] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 3304.625576][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3304.625614][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3304.633771][T12985] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[ 3304.665856][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3304.698327][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3304.699986][T12985] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 3304.719769][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3304.753229][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3304.809909][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3304.839801][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3304.860115][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3304.891891][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3304.919863][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3304.939717][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3304.957789][T30179] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3304.973815][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3304.984901][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3305.037417][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3305.073281][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3305.105903][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3305.128041][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3305.168834][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3305.203102][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3305.230249][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3305.260022][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3305.309687][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3305.340485][T12985] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 3305.360116][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3305.392246][T30179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3305.423271][T30179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3305.458019][T30179] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3305.507125][T30179] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3305.518715][T12985] usb 4-1: Using ep0 maxpacket: 8
[ 3305.532164][T12985] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3305.556346][T30179] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3305.572247][T12985] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[ 3305.586564][T30179] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3305.606312][T12985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3305.613316][T30179] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3305.628555][T12985] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 3305.682506][T12985] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[ 3305.732898][T12985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3305.734930][T30446] loop7: detected capacity change from 0 to 4096
[ 3305.802959][T30446] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[ 3305.838005][T12985] usb 4-1: Product: syz
[ 3305.845452][T12985] usb 4-1: Manufacturer: syz
[ 3305.850251][T29683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3305.858449][T12985] usb 4-1: SerialNumber: syz
[ 3305.874113][T29683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3305.892191][T12985] usb 4-1: config 0 descriptor??
[ 3305.953356][T13307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3305.980557][T13307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3306.024107][T12985] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24
[ 3306.133557][T30437] usb 1-1: string descriptor 0 read error: -71
[ 3306.400641][T30436] loop5: detected capacity change from 0 to 32768
[ 3306.419804][T30431] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 3306.426421][T30431] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 3306.442587][T30450] loop7: detected capacity change from 0 to 256
[ 3306.469130][T30436] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 3306.505770][T30431] vhci_hcd vhci_hcd.0: Device attached
[ 3306.579782][T30450] FAT-fs (loop7): Directory bread(block 64) failed
[ 3306.589209][T30450] FAT-fs (loop7): Directory bread(block 65) failed
[ 3306.597666][T30450] FAT-fs (loop7): Directory bread(block 66) failed
[ 3306.599059][T30451] vhci_hcd: connection closed
[ 3306.606517][T12985] imon:send_packet: packet tx failed (-71)
[ 3306.617773][T30450] FAT-fs (loop7): Directory bread(block 67) failed
[ 3306.617947][   T67] vhci_hcd: stop threads
[ 3306.624562][T30450] FAT-fs (loop7): Directory bread(block 68) failed
[ 3306.637352][T30450] FAT-fs (loop7): Directory bread(block 69) failed
[ 3306.649578][T30450] FAT-fs (loop7): Directory bread(block 70) failed
[ 3306.659620][T30450] FAT-fs (loop7): Directory bread(block 71) failed
[ 3306.659846][T12985] imon 4-1:0.0: panel buttons/knobs setup failed
[ 3306.673746][T30450] FAT-fs (loop7): Directory bread(block 72) failed
[ 3306.683619][   T67] vhci_hcd: release socket
[ 3306.713577][   T67] vhci_hcd: disconnect device
[ 3306.717129][T30450] FAT-fs (loop7): Directory bread(block 73) failed
[ 3306.767466][T22373] ocfs2: Unmounting device (7,5) on (node local)
[ 3306.901452][T12985] rc_core: IR keymap rc-imon-pad not found
[ 3306.910141][T25340] usb 1-1: USB disconnect, device number 55
[ 3306.925058][T12985] Registered IR keymap rc-empty
[ 3306.961905][T12985] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 3307.035027][T12985] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 3307.095980][T12985] imon:send_packet: packet tx failed (-71)
[ 3307.170156][T12985] imon 4-1:0.0: remote input dev register failed
[ 3307.181192][T12985] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[ 3308.721987][T30470] loop4: detected capacity change from 0 to 8
[ 3308.907736][T30475] loop7: detected capacity change from 0 to 8
[ 3309.141463][T30477] loop6: detected capacity change from 0 to 512
[ 3309.149186][T30477] EXT4-fs: Ignoring removed oldalloc option
[ 3309.223434][T29205] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 3309.295425][T30477] EXT4-fs: Invalid want_extra_isize 8
acpid: input device has been disconnected, fd 3
[ 3310.348199][T12985] imon 4-1:0.0: unable to initialize intf0, err 0
[ 3310.354822][T12985] imon:imon_probe: failed to initialize context!
[ 3310.361279][T12985] imon 4-1:0.0: unable to register, err -19
[ 3310.383962][T12985] usb 4-1: USB disconnect, device number 24
[ 3311.797472][T29205] usb 6-1: device descriptor read/all, error -71
[ 3312.282939][T29529] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 3312.498453][T29529] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[ 3312.518889][T29529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3312.569717][T29529] usb 5-1: Product: syz
[ 3312.586392][T29529] usb 5-1: Manufacturer: syz
[ 3312.604562][T29529] usb 5-1: SerialNumber: syz
[ 3312.642146][T29529] usb 5-1: config 0 descriptor??
[ 3313.081046][T30517] loop6: detected capacity change from 0 to 8
[ 3313.144489][T29529] usb 5-1: USB disconnect, device number 40
[ 3314.554409][T30532] loop4: detected capacity change from 0 to 256
[ 3314.602437][T30532] MINIX-fs: mounting file system with errors, running fsck is recommended
[ 3316.741860][T30553] loop7: detected capacity change from 0 to 8
[ 3316.839769][T12873] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 3317.030028][T12873] usb 5-1: no configurations
[ 3317.034728][T12873] usb 5-1: can't read configurations, error -22
[ 3317.057027][T30555] loop6: detected capacity change from 0 to 4096
[ 3317.093407][T30555] NILFS (loop6): invalid segment: Checksum error in segment payload
[ 3317.109813][T30555] NILFS (loop6): trying rollback from an earlier position
[ 3317.248666][T12873] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 3317.378738][T29625] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 3317.523148][T12873] usb 5-1: no configurations
[ 3317.563077][T12873] usb 5-1: can't read configurations, error -22
[ 3317.677036][T29625] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[ 3317.744974][T12873] usb usb5-port1: attempt power cycle
[ 3317.838687][T30555] NILFS (loop6): recovery complete
[ 3317.851733][T29625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3317.938378][T30564] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3317.960236][T29625] usb 1-1: Product: syz
[ 3317.964477][T29625] usb 1-1: Manufacturer: syz
[ 3317.969124][T29625] usb 1-1: SerialNumber: syz
[ 3318.042657][T29625] usb 1-1: config 0 descriptor??
[ 3318.144258][T30568] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6435'.
[ 3318.539552][T12873] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 3318.554173][T29625] usb 1-1: USB disconnect, device number 56
[ 3318.571373][T12873] usb 5-1: no configurations
[ 3318.587629][T12873] usb 5-1: can't read configurations, error -22
[ 3319.977034][T30572] loop6: detected capacity change from 0 to 32768
[ 3320.068197][T30575] loop3: detected capacity change from 0 to 4096
[ 3320.077364][T30575] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[ 3320.089099][T30575] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 3320.118609][T30575] ntfs3(loop3): Failed to load $LogFile (-22).
[ 3320.170108][T30572] JBD2: Ignoring recovery information on journal
[ 3320.209821][T12873] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 3320.244596][T30572] jbd2_journal_bmap: journal block not found at offset 64 on loop6-27
[ 3320.276695][T30572] JBD2: bad block at offset 64
[ 3320.464554][T30572] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 3320.491820][T30572] OCFS2: ERROR (device loop6): ocfs2_claim_suballoc_bits: Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[ 3320.499412][T12873] usb 5-1: device not accepting address 44, error -71
[ 3320.514220][T30572] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 3320.543688][T12873] usb usb5-port1: unable to enumerate USB device
[ 3320.548639][T30572] OCFS2: Returning error to the calling process.
[ 3320.595602][T30572] (syz.6.6436,30572,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5
[ 3320.640032][T30572] (syz.6.6436,30572,1):__ocfs2_claim_clusters:2412 ERROR: status = -5
[ 3320.649555][T30572] (syz.6.6436,30572,1):__ocfs2_claim_clusters:2420 ERROR: status = -5
[ 3320.685060][T30572] (syz.6.6436,30572,1):ocfs2_block_group_alloc_contig:437 ERROR: status = -5
[ 3320.740859][T30572] (syz.6.6436,30572,1):ocfs2_block_group_alloc:709 ERROR: status = -5
[ 3320.749194][T30572] (syz.6.6436,30572,1):ocfs2_block_group_alloc:762 ERROR: status = -5
[ 3320.809504][T30572] (syz.6.6436,30572,1):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5
[ 3320.841379][T30572] (syz.6.6436,30572,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5
[ 3320.881447][T30572] (syz.6.6436,30572,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5
[ 3320.908806][T30572] (syz.6.6436,30572,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5
[ 3320.940004][T30572] (syz.6.6436,30572,1):ocfs2_expand_inline_dir:2822 ERROR: status = -5
[ 3320.951479][T30572] (syz.6.6436,30572,1):ocfs2_extend_dir:3186 ERROR: status = -5
[ 3320.959212][T30572] (syz.6.6436,30572,1):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -5
[ 3320.998764][T30572] (syz.6.6436,30572,1):ocfs2_symlink:1875 ERROR: status = -5
[ 3321.029156][T30572] (syz.6.6436,30572,1):ocfs2_symlink:2076 ERROR: status = -5
[ 3321.268097][T30179] ocfs2: Unmounting device (7,6) on (node local)
[ 3323.750073][T25340] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 3324.021162][T25340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3324.204763][T25340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3324.272823][T25340] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[ 3324.344510][T25340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3324.421102][T25340] usb 4-1: config 0 descriptor??
[ 3324.810263][T30635] loop4: detected capacity change from 0 to 2048
[ 3324.879045][T30638] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3325.453271][T25340] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0
[ 3325.653555][T25340] logitech-hidpp-device 0003:046D:C086.000C: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0
[ 3325.668850][T25340] usb 4-1: USB disconnect, device number 25
[ 3326.721696][T30638] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 3326.796512][T30638] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 3326.866226][T30638] Remounting filesystem read-only
[ 3327.172259][T26973] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[ 3327.183257][T26973] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[ 3328.360388][T29529] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 3328.534464][T29529] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[ 3328.545467][T29529] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3328.581046][T29529] usb 7-1: Product: syz
[ 3328.602853][T29529] usb 7-1: Manufacturer: syz
[ 3328.633773][T29529] usb 7-1: SerialNumber: syz
[ 3328.651502][T29529] usb 7-1: config 0 descriptor??
[ 3328.870021][T29529] usb 7-1: USB disconnect, device number 56
[ 3329.876729][T29205] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 3330.052087][T29205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3330.069718][T29205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3330.087862][T29205] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3330.132676][T29205] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3330.166860][T29205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3330.209362][T29205] usb 6-1: config 0 descriptor??
[ 3330.473118][T30699] loop4: detected capacity change from 0 to 32768
[ 3330.500718][T30699] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 3330.529071][T30699] (syz.4.6481,30699,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[ 3330.538789][T30699] (syz.4.6481,30699,1):ocfs2_get_suballoc_slot_bit:2785 ERROR: read block 124554051584 failed -12
[ 3330.550230][T30699] (syz.4.6481,30699,1):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12
[ 3330.560230][T30699] (syz.4.6481,30699,1):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12
[ 3330.570455][T30699] (syz.4.6481,30699,1):ocfs2_test_inode_bit:2941 ERROR: status = -12
[ 3330.578642][T30699] (syz.4.6481,30699,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[ 3330.670126][T30705] loop3: detected capacity change from 0 to 256
[ 3330.724661][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x4
[ 3330.774967][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3330.802187][T26973] ocfs2: Unmounting device (7,4) on (node local)
[ 3330.815628][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3330.901317][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3330.924220][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3330.979842][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3330.991444][T30707] loop6: detected capacity change from 0 to 2048
[ 3331.013712][T30707] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 3331.019771][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3331.059836][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3331.085059][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3331.097170][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3331.105444][T30714] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 3331.119899][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3331.127443][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3331.149909][T29205] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 3331.158225][T29205] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[ 3332.370302][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 3332.404088][T29205] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 3332.710624][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 3332.852315][T30725] binder: 30724:30725 ioctl 4018620d 0 returned -22
[ 3332.922290][T30725] binder: 30724:30725 ioctl c0306201 200002c0 returned -14
[ 3333.104637][T29113] usb 6-1: USB disconnect, device number 59
[ 3333.182559][T30727] loop7: detected capacity change from 0 to 1024
[ 3333.403301][T30728] ------------[ cut here ]------------
[ 3333.410370][T30728] WARNING: CPU: 1 PID: 30728 at security/landlock/fs.c:955 get_mode_access+0xae/0xc0
[ 3333.420434][T30728] Modules linked in:
[ 3333.425060][T30728] CPU: 1 UID: 0 PID: 30728 Comm: syz.6.6483 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[ 3333.436347][T30728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 3333.446648][T30728] RIP: 0010:get_mode_access+0xae/0xc0
[ 3333.452372][T30728] Code: c2 66 81 fb 00 10 75 1c bd 00 04 00 00 eb b4 66 81 fb 00 80 75 0e bd 00 01 00 00 eb a6 bd 00 08 00 00 eb 9f e8 13 e6 39 fd 90 <0f> 0b 90 31 ed eb 92 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90
[ 3333.472299][T30728] RSP: 0018:ffffc900046afb58 EFLAGS: 00010283
[ 3333.478478][T30728] RAX: 0000000000002562 RBX: 000000000000f000 RCX: ffffc90012d3b000
[ 3333.486906][T30728] RDX: 0000000000080000 RSI: ffffffff8454059d RDI: 0000000000000003
[ 3333.495083][T30728] RBP: 0000000000001000 R08: 0000000000000003 R09: 000000000000c000
[ 3333.503604][T30728] R10: 000000000000f000 R11: 0000000000000003 R12: 0000000000000001
[ 3333.511758][T30728] R13: ffff88804a16adf8 R14: 0000000000500000 R15: ffff88805933a758
[ 3333.519861][T30728] FS:  00007f860678e6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 3333.529609][T30728] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3333.537117][T30728] CR2: 000055558c432808 CR3: 000000006afd0000 CR4: 0000000000350ef0
[ 3333.545371][T30728] Call Trace:
[ 3333.548734][T30728]  <TASK>
[ 3333.551906][T30728]  ? __warn+0xea/0x3d0
[ 3333.556106][T30728]  ? get_mode_access+0xae/0xc0
[ 3333.561197][T30728]  ? report_bug+0x3c0/0x580
[ 3333.565857][T30728]  ? handle_bug+0x54/0xa0
[ 3333.570355][T30728]  ? exc_invalid_op+0x17/0x50
[ 3333.575146][T30728]  ? asm_exc_invalid_op+0x1a/0x20
[ 3333.581322][T30728]  ? get_mode_access+0xad/0xc0
[ 3333.586185][T30728]  ? get_mode_access+0xae/0xc0
[ 3333.591502][T30728]  ? get_mode_access+0xad/0xc0
[ 3333.596455][T30728]  current_check_refer_path+0x36e/0x710
[ 3333.602330][T30728]  ? __pfx_current_check_refer_path+0x10/0x10
[ 3333.608540][T30728]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 3333.614631][T30728]  ? __d_lookup+0x266/0x4a0
[ 3333.619234][T30728]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 3333.625014][T30728]  ? d_lookup+0xe9/0x180
[ 3333.629930][T30728]  security_path_rename+0x160/0x3c0
[ 3333.635239][T30728]  do_renameat2+0x7a0/0xdd0
[ 3333.640990][T30728]  ? __pfx_do_renameat2+0x10/0x10
[ 3333.646276][T30728]  ? trace_lock_acquire+0x14a/0x1d0
[ 3333.652052][T30728]  ? lock_acquire+0x2f/0xb0
[ 3333.656644][T30728]  ? __might_fault+0xe3/0x190
[ 3333.661694][T30728]  ? __might_fault+0xe3/0x190
[ 3333.666450][T30728]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 3333.672637][T30728]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 3333.678385][T30728]  ? getname_flags.part.0+0x1c5/0x550
[ 3333.684310][T30728]  __x64_sys_renameat2+0xe7/0x130
[ 3333.689478][T30728]  do_syscall_64+0xcd/0x250
[ 3333.694491][T30728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3333.700970][T30728] RIP: 0033:0x7f860597e819
[ 3333.705449][T30728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3333.725720][T30728] RSP: 002b:00007f860678e038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 3333.735419][T30728] RAX: ffffffffffffffda RBX: 00007f8605b36080 RCX: 00007f860597e819
[ 3333.745041][T30728] RDX: ffffffffffffff9c RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 3333.753767][T30728] RBP: 00007f86059f175e R08: 0000000000000002 R09: 0000000000000000
[ 3333.762268][T30728] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000000
[ 3333.770774][T30728] R13: 0000000000000000 R14: 00007f8605b36080 R15: 00007ffc826ef738
[ 3333.779037][T30728]  </TASK>
[ 3333.782550][T30728] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 3333.789923][T30728] CPU: 1 UID: 0 PID: 30728 Comm: syz.6.6483 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0
[ 3333.800641][T30728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 3333.810831][T30728] Call Trace:
[ 3333.814262][T30728]  <TASK>
[ 3333.817261][T30728]  dump_stack_lvl+0x3d/0x1f0
[ 3333.821999][T30728]  panic+0x71d/0x800
[ 3333.826025][T30728]  ? __pfx_panic+0x10/0x10
[ 3333.830563][T30728]  ? show_trace_log_lvl+0x29d/0x3d0
[ 3333.836393][T30728]  ? get_mode_access+0xae/0xc0
[ 3333.841229][T30728]  check_panic_on_warn+0xab/0xb0
[ 3333.846290][T30728]  __warn+0xf6/0x3d0
[ 3333.850266][T30728]  ? get_mode_access+0xae/0xc0
[ 3333.855172][T30728]  report_bug+0x3c0/0x580
[ 3333.859616][T30728]  handle_bug+0x54/0xa0
[ 3333.863836][T30728]  exc_invalid_op+0x17/0x50
[ 3333.868396][T30728]  asm_exc_invalid_op+0x1a/0x20
[ 3333.873315][T30728] RIP: 0010:get_mode_access+0xae/0xc0
[ 3333.878747][T30728] Code: c2 66 81 fb 00 10 75 1c bd 00 04 00 00 eb b4 66 81 fb 00 80 75 0e bd 00 01 00 00 eb a6 bd 00 08 00 00 eb 9f e8 13 e6 39 fd 90 <0f> 0b 90 31 ed eb 92 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90
[ 3333.898474][T30728] RSP: 0018:ffffc900046afb58 EFLAGS: 00010283
[ 3333.904609][T30728] RAX: 0000000000002562 RBX: 000000000000f000 RCX: ffffc90012d3b000
[ 3333.912634][T30728] RDX: 0000000000080000 RSI: ffffffff8454059d RDI: 0000000000000003
[ 3333.920655][T30728] RBP: 0000000000001000 R08: 0000000000000003 R09: 000000000000c000
[ 3333.928673][T30728] R10: 000000000000f000 R11: 0000000000000003 R12: 0000000000000001
[ 3333.936724][T30728] R13: ffff88804a16adf8 R14: 0000000000500000 R15: ffff88805933a758
[ 3333.944902][T30728]  ? get_mode_access+0xad/0xc0
[ 3333.949743][T30728]  ? get_mode_access+0xad/0xc0
[ 3333.954605][T30728]  current_check_refer_path+0x36e/0x710
[ 3333.960220][T30728]  ? __pfx_current_check_refer_path+0x10/0x10
[ 3333.966357][T30728]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 3333.972043][T30728]  ? __d_lookup+0x266/0x4a0
[ 3333.976595][T30728]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 3333.982277][T30728]  ? d_lookup+0xe9/0x180
[ 3333.986587][T30728]  security_path_rename+0x160/0x3c0
[ 3333.991858][T30728]  do_renameat2+0x7a0/0xdd0
[ 3333.996449][T30728]  ? __pfx_do_renameat2+0x10/0x10
[ 3334.001538][T30728]  ? trace_lock_acquire+0x14a/0x1d0
[ 3334.006810][T30728]  ? lock_acquire+0x2f/0xb0
[ 3334.011532][T30728]  ? __might_fault+0xe3/0x190
[ 3334.016254][T30728]  ? __might_fault+0xe3/0x190
[ 3334.020977][T30728]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 3334.026677][T30728]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 3334.032358][T30728]  ? getname_flags.part.0+0x1c5/0x550
[ 3334.037818][T30728]  __x64_sys_renameat2+0xe7/0x130
[ 3334.042912][T30728]  do_syscall_64+0xcd/0x250
[ 3334.047491][T30728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3334.053462][T30728] RIP: 0033:0x7f860597e819
[ 3334.057916][T30728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3334.077674][T30728] RSP: 002b:00007f860678e038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 3334.086147][T30728] RAX: ffffffffffffffda RBX: 00007f8605b36080 RCX: 00007f860597e819
[ 3334.094161][T30728] RDX: ffffffffffffff9c RSI: 0000000020000000 RDI: ffffffffffffff9c
[ 3334.102175][T30728] RBP: 00007f86059f175e R08: 0000000000000002 R09: 0000000000000000
[ 3334.110182][T30728] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000000
[ 3334.118188][T30728] R13: 0000000000000000 R14: 00007f8605b36080 R15: 00007ffc826ef738
[ 3334.126226][T30728]  </TASK>
[ 3334.129664][T30728] Kernel Offset: disabled
[ 3334.134121][T30728] Rebooting in 86400 seconds..