last executing test programs:

11m26.430977662s ago: executing program 3 (id=142):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'})
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x28, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10)
close(r9)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)

11m21.944081346s ago: executing program 3 (id=144):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0xd})
msgsnd(0x0, 0x0, 0x8, 0x800)
msgrcv(0x0, 0x0, 0x1d, 0x2, 0x1800)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004000e00080017"], 0x20}, 0x1, 0x0, 0x0, 0x20042810}, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0x5, 0x45, 0x0, 0x13, 0x1000006, 'U\x00', "7e060040", "0725eade", "e4eecc1a", ["aabe8459c622244757ac8da7", "0450e33ef9bf070000e1d1c9", "fa04d10000000000002000"]})

11m19.108373471s ago: executing program 3 (id=148):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
lseek(r1, 0x4, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f00000000c0)='logon\x00', 0x0, &(0x7f0000000140)='![\'[\'^-.-]{$5#\x00', 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, 0x0})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_open_procfs$pagemap(r0, 0x0)

11m15.270241356s ago: executing program 3 (id=151):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x166, &(0x7f0000000440)="$eJzs2rFKw0AYB/BPGq3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BH6Oimi4MvEUlzhCQWzSDmhP9vyZ9+afLlEr7pWv7Ya7OgRbQ3uT153/THXr1jH/ZZm/Uo1iWiehTmYXiv0xevSX0ekr7khHJtf8THxu5QHF8zlztW2S0BAAAAAAAAAAAAAAAAAAAAAEBBzZoMtZHwrpjLnXaqGjS0sx7njh+kflz/4xZL1azLPVzEBH+I1sfOnnC6IYMrjvyobmb/fyfDzkjwt/z6GhfexAims5br9YbO0Dm3LLtj7pvmgWUsrmXkr9h8lD3RPHwydQqlpJ7ab/ZSZL+ZfP/alituLvN3C6Yz+f4VCCtqtFEwVIhIgTZUCl1NsS/q34QKKdFGKiQjYm3pVNF+nDuqqK3Gx0HVbjxH80/vj/lAFhfPWqVfWjN5J8qWynpwAPjeZwAAAP//YO838g==")
symlink(0x0, &(0x7f000001fb00)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
socket$netlink(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x200800, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x23}], 0x2)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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")
openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
write$UHID_INPUT(r1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_nolock}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2)
open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0)

11m12.374901943s ago: executing program 3 (id=156):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x68, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x68}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x22cb00, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000840)={"b30ab7af0277d7e2de35ec2548bd108b751ebaab0d5281885e41e5fe4353", 0x0, 0x3, 0x1, 0x5a, 0x2, 0x101, 0xcd, 0x9, [0x9, 0x1, 0xc5b, 0x1, 0x8, 0x3, 0x7, 0x80000001, 0x0, 0x7, 0x8, 0x100, 0x3, 0x7, 0x0, 0x9, 0x81, 0x4, 0x5]})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r10, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020)
ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000006c0)=""/224)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1ef, &(0x7f00000002c0)="$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")

11m10.15280022s ago: executing program 3 (id=160):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4c90, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2a0, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open$dir(0x0, 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
getpgid(0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8c0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x24, &(0x7f00000005c0)={0x2, 0x2, 0xffffffffffffffff, 0x2, 0xffffffffffffffff})
pipe(&(0x7f0000000500))
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000008000000620000006"], 0x50)

10m54.845247729s ago: executing program 32 (id=160):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4c90, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2a0, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open$dir(0x0, 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
getpgid(0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8c0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x24, &(0x7f00000005c0)={0x2, 0x2, 0xffffffffffffffff, 0x2, 0xffffffffffffffff})
pipe(&(0x7f0000000500))
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000008000000620000006"], 0x50)

9m12.11123262s ago: executing program 0 (id=313):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x166, &(0x7f0000000440)="$eJzs2rFKw0AYB/BPGq3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BH6Oimi4MvEUlzhCQWzSDmhP9vyZ9+afLlEr7pWv7Ya7OgRbQ3uT153/THXr1jH/ZZm/Uo1iWiehTmYXiv0xevSX0ekr7khHJtf8THxu5QHF8zlztW2S0BAAAAAAAAAAAAAAAAAAAAAEBBzZoMtZHwrpjLnXaqGjS0sx7njh+kflz/4xZL1azLPVzEBH+I1sfOnnC6IYMrjvyobmb/fyfDzkjwt/z6GhfexAims5br9YbO0Dm3LLtj7pvmgWUsrmXkr9h8lD3RPHwydQqlpJ7ab/ZSZL+ZfP/alituLvN3C6Yz+f4VCCtqtFEwVIhIgTZUCl1NsS/q34QKKdFGKiQjYm3pVNF+nDuqqK3Gx0HVbjxH80/vj/lAFhfPWqVfWjN5J8qWynpwAPjeZwAAAP//YO838g==")
symlink(0x0, &(0x7f000001fb00)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
socket$netlink(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x200800, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
writev(r0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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")
openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
write$UHID_INPUT(r1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_nolock}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2)
open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0)

9m10.643756784s ago: executing program 0 (id=306):
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0)
openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
r1 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x249, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x4000002, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0xef8, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x4, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8d0, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0x8, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0xfffffffe, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xc000000b})
signalfd4(r3, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
r5 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x3, 0xa, 0x0, "fbda6b21f1d747979779531871c838f51ef5dfaee256e99c476c937d00", 0x43353039})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

9m7.572172916s ago: executing program 0 (id=310):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0}, 0x0)
openat$tun(0xffffff9c, &(0x7f0000000080), 0x3001, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000180)={0x23, 0xffffffff})
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8)

9m2.44070673s ago: executing program 0 (id=317):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c)
listen(r5, 0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000004e40), 0x4)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3)

9m1.290475784s ago: executing program 0 (id=319):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fsmount(r4, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}})

8m57.77403229s ago: executing program 0 (id=324):
io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
socket$packet(0x11, 0x2, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}})
ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x1)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000014000180050002000100000008000600"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)
sendfile(r1, r2, 0x0, 0x6)

8m41.43165135s ago: executing program 33 (id=324):
io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
socket$packet(0x11, 0x2, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}})
ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x1)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000014000180050002000100000008000600"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)
sendfile(r1, r2, 0x0, 0x6)

7m49.527163456s ago: executing program 6 (id=333):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800cd0af57fbf504a94192f7f0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xcb37, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x10000f, @mcast2, 0x9}, 0x1c)
sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
ftruncate(r4, 0x2000009)
getresuid(&(0x7f0000000040), &(0x7f0000000080), 0x0)
fchownat(r4, 0x0, 0x0, 0x0, 0x1000)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x197, &(0x7f0000000800)="$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")

7m46.39741332s ago: executing program 6 (id=381):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r1, &(0x7f00000001c0)='1', 0x1)
write$6lowpan_control(r0, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket(0x10, 0x800, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x5, @remote, 0x7}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x14, r6, 0x1, 0x70bd2c, 0x1200}, 0x14}}, 0x4)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x2}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x4)
ioctl$sock_ifreq(r8, 0x8937, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000140)="41d1311e676f2fa7bc8867091918675ef2c7201df7e62ca56362ea7df33cd505"})

7m41.489296417s ago: executing program 6 (id=389):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fsmount(r3, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}})

7m38.068034359s ago: executing program 6 (id=396):
epoll_create1(0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0xa, 0x4f24, 0xe799, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0x3}}], 0x18}}], 0x1, 0x60004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8})
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x80002, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0}, 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
mbind(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x1, &(0x7f0000000180)=0x9, 0x7, 0x6)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r11, 0x0, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804)

7m21.437715418s ago: executing program 34 (id=396):
epoll_create1(0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0xa, 0x4f24, 0xe799, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0x3}}], 0x18}}], 0x1, 0x60004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8})
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x80002, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0}, 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
mbind(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x1, &(0x7f0000000180)=0x9, 0x7, 0x6)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r11, 0x0, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804)

41.98239147s ago: executing program 7 (id=1619):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

41.740226508s ago: executing program 7 (id=1622):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbd2, &(0x7f00000017c0)="$eJzs3M1rHOcZAPBnRqsvW+7KpZS6F6uUYkPpWnaRqU2hdnHppYdCey1YyCsjtP5AUnEl67Bq/4HS9lzopdDGJPgQn31JINdcEucak0PABMVKIIREYfZDWku7kmytNIr0+8Grfd95Zud9Hs2uZl7QbgBH1kj2I404FRHXk4hiY3saEX213kBEtb7fyvLixOfLixNJrK7+4ZMkkoh4vrw40TxW0ng83hgMRMS7v07iu3/bPO/s/ML0eKVSnmmMz83duntudn7hZ1O3xm+Wb5Zvn7/4i7ELYxdHL411rdYvPrzy6LMf/faj6pf//+rBp//8bxJXYqgRa62jUfWujcTI2u+kVSEixrtw/IOgp1FPa51JYfN+/a2DdB8SAwCgrbTlHu77UYyeWL95K8Zb7+WaHAAAANAVqz0RqwAAAMAhl1j/AwAAwCHX/D+A58uLE82W738k7K9nVyNiuF7/SqPVI4Wo1h4Hojcijj1PovVjrUn9abs2EhFPP7j0RtaizeeQ91p1KSJ+0O78J7X6hxufhN5YfxoRo12Yf2TD+NtU/5UuzJ93/QAcTY+v1i9km69/6dr9T7S5/hXaXLteRd7Xv+b938qm+7/1+ns63P/9fodz3P/fv+91imX1//LRb15vtmz+7HFXRb2EZ0sRPyy0qz9Zqz/pUP/1Hc5R/PpeuVMs7/pX/xNxJtrX35Rs/f1E5yanKuXR+s+2cyy9M/Zap/nzrj87/8ca9Q/Gjs//QLbt7gtH6vylPn+6du1hp9j29acf9yV/rPX6Glv+Mj43N3M+oi/53ebtF7aut7lP8xhZ/Wd/vPX7v93rP/ubUG28NrLKlxqP2fivG+b81YP7b25Vf7b2y/P83+jw+t/u/f/3Hc7xk7f/cbZTrHX9m7Vs/qdJfS0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE1pRAxFkpYiIqn107RUijgeEd+LY2nlzuzcTyfv/Pn2jSwWMRy96eRUpTwaEcX6OMnG52v99fGFDeOfR8TJiPhXcbA2Lk3cqdzIu3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWHI+IoUjSUkSkEbFSTNNSKe+sAAAAgK4bzjsBAAAAYM9Z/wMAAMDhZ/0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHjt5+vGTJCKqlwdrLdPXiPXmmhmw19K8EwBy05N3AkBuCnknAOTmJdf4bhfgEEq2iQ90jPR3PRcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq4zpx4/SSKienmw1jJ9jVhv22ec3sfsgL2U5p0AkJuerYKF/csD2H+v/BY/0d08gP3Xfo0PHCXJNvGB9X2qL0b69ywnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6eoVpL0lJEpLV+mpZKESciYjh6k8mpSnk0Ir4TEe8Xe/uzcX/eSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB1s/ML0+OVSnnmVTrJ7p6uo3MEO4WIaB9KDkiGtU7ef5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD7PzC9HilUp6ZzTsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+z8wvT45VKeWYHnYcvs3NLJ+8aAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIzzcBAAD//7r5CaM=")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

40.32609136s ago: executing program 7 (id=1631):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x40)

39.897154403s ago: executing program 7 (id=1633):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x406, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@resgid}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlink(&(0x7f0000000100)='./file0/file1\x00')

38.910175093s ago: executing program 7 (id=1638):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[], 0x1, 0x5516, &(0x7f0000002840)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
sync_file_range(r0, 0x2, 0x10000000000002, 0x3)

35.867872794s ago: executing program 7 (id=1648):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x3, 0x0, 0x489, 0x4, 0x6, 0xd1b}]})

35.476970906s ago: executing program 35 (id=1648):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x3, 0x0, 0x489, 0x4, 0x6, 0xd1b}]})

28.615479591s ago: executing program 4 (id=1678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
pipe2$watch_queue(0x0, 0x80)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224)
keyctl$clear(0x7, r5)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)
socket$nl_route(0x10, 0x3, 0x0)

24.062073408s ago: executing program 4 (id=1694):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010400, &(0x7f0000000080)={[{@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@numtail}, {@fat=@quiet}]}, 0x1, 0x37b, &(0x7f0000000940)="$eJzs3U1om2UcAPB/+uajG2p7kwlC9Cbo2HbTixvSwbAXleDHQQysU0mq0GLZdlhWD4pHwaOevKnowYN4UwRFvIs3J8hUPOhuA4eP5P1IsiTrxqSV4u9Hm/z7fPyf533zNnkb3jx94Xj0TjfizJUrl2NxsRb1448dj6u1WI4sKhdjVnNOGQCwP1xNKf5Mhem6xfxrRm1vZgYA7Jb89f/FiGjHclHy+tc7tU9e/QFg3yv//j+wU5t5bwLkXt2VKQEAu2zm/f/7r6tu5t/16sf6xFUBAMB+9dSzzz1+YjXiyXZ7MWL9za3OViceGdefOBMvRz/W4kgsxbWI4kRheFPLb0+eWl050m63B/HLcnQiYqHs2CnOFE5kef+lOBpLsVz2L882UkrZyU9XV462cxFxcZCPH+u1rU4jDpbj/3gw1sYnHlWS/C7i1OrKsXaZoLNe9R9EbI8vVOjHWqMMqzQpVVcwrq5cOFpNetx/q9OK06O9cMN3QAAAAAAAAAAAAAAAAAAAAAAA4LYcbo8sj9bPScP7YqWcw4fn1Ofr4xT9y/WBtov1gVIrRUp/nH2o81YW160PNL0+z5aFBAEAAAAAAAAAAAAAAAAAAGBk81wzuv3+2sbmufO9yWCwsXluISKGJa98+/FXB2K2zWxw9o4ibV5SL+JWxGiIdjns+V43ZVWvlEXMJsyGaaqSDz4bzXiyTWu0FXPn07pxVb9/530/v3u+d+iLIsO9WZX573GbLOZvaTYxjUenMq/fVSS8yY6aHxybLGnNjn4ppTRR8sZk9wvPzyaMWkT9lh64qWAhbtwmDYNvLr90qNr73S9T4YEHl56+9M77v/W6/eHI+YHQb25sXku9bq1qfAujl+lS/hAUx8YPH0XUomhTmzwS6jsl3L6+pJt9//sz97z93U12QrnH0mTVa8PjeapxVmzOJ9N5mkUwnOZU1YFx90ZUvymNOQf/zYLbeEzvfu/zD1P66ddbHmJsYeZpo/Zvn3cAAAAAAAAAAAAAAAAAAIBZE58VLz90PSgqGjv1eviJPZoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyJ8f//nwi2L8YwWJpTtUPw1yBmq1prG5sRzf96MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+J/7JwAA//+hwF41")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

23.360559659s ago: executing program 4 (id=1697):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0xcc8, 0x4)

22.097520087s ago: executing program 4 (id=1700):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x406, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@resgid}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlink(&(0x7f0000000100)='./file0/file1\x00')

21.316218361s ago: executing program 4 (id=1702):
timer_create(0x0, &(0x7f0000000040)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_pidfd_open(0x0, 0x0)
lchown(0x0, 0x0, 0xffffffffffffffff)

19.452267117s ago: executing program 4 (id=1705):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0xfffffffffffffffc, 0x1, 0x1}, &(0x7f0000000200)=[{}])

19.053499109s ago: executing program 36 (id=1705):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0xfffffffffffffffc, 0x1, 0x1}, &(0x7f0000000200)=[{}])

11.65540647s ago: executing program 1 (id=1725):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @broadcast}, @channel_switch={0x0, 0x4, {{0x25, 0xfffffffffffffd8f, {0x0, 0x9d}}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0)

10.601084012s ago: executing program 5 (id=1726):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fsmount(r4, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}})

10.374825849s ago: executing program 1 (id=1728):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r2, 0x200, 0x7, 0x6}, &(0x7f0000000240)=0x10)

8.438993836s ago: executing program 1 (id=1729):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$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")
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

7.288331781s ago: executing program 5 (id=1730):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@errors_remount}, {@acl}, {@noblock_validity}]}, 0x1, 0x451, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b)
open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6)

7.135444826s ago: executing program 2 (id=1731):
unshare(0x2a060400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04000000000000000002000000540004802c0001800b000100736f636b657400001c000280080002400000000b08000140000000030800030000000009240001800a000100717565756500000014000280080004400000000206000340000100000900010073797a30000000000900020073797a32"], 0xa8}}, 0x0)

7.039278809s ago: executing program 1 (id=1732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
pipe2$watch_queue(0x0, 0x80)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224)
keyctl$clear(0x7, r5)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)
socket$nl_route(0x10, 0x3, 0x0)

6.864839574s ago: executing program 2 (id=1733):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000002, &(0x7f0000000340), 0x9, 0x558, &(0x7f0000001a80)="$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")
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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")
truncate(&(0x7f0000000080)='./file2\x00', 0x400327c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioprio_get$uid(0x3, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x181000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0xd, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x1, 0x0, 0x5, 0x4, 0x0, 0x3, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x5, 0xe6e1, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x2, 0x3, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffff5, 0x3, 0x0, 0x0, 0x5, 0x7ff, 0xd, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x3, 0x8, 0xd, 0x6, 0xc, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x4, 0x3, 0x3, 0x81, 0x9, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0xb4, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x0, 0x6d01, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xb9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x9, 0x0, 0x80000000, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb34, 0x7, 0xd, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x562, 0x7fff, 0x180000, 0xa620, 0x2, 0x5, 0xfffffffe, 0x2, 0x14c, 0x60a7, 0x6, 0x100016, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10004, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0xb, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1d, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff3441, 0x1000]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x5, 0x3, 0x40300000, 0xe7, 0x8, 0x8, 0xa82, 0x4000ff46, 0x100, 0xcf3, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x1, 0x10087, 0x3, 0x0, 0x2, 0x80000001, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8, 0xfffffffc]})
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x117)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000880)={[{@nombcache}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@grpid}, {@auto_da_alloc}]}, 0x9, 0x624, &(0x7f00000013c0)="$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")
getpid()
ioctl$VT_ACTIVATE(r0, 0x560d, 0x10000000000004)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00')

6.295399841s ago: executing program 5 (id=1734):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)={0x48, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

5.835680985s ago: executing program 2 (id=1735):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fsmount(r4, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}})

4.598480182s ago: executing program 2 (id=1736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800)

2.102448377s ago: executing program 5 (id=1737):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x20008d0, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000007,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp936,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0xc32, &(0x7f0000009100)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

1.940116851s ago: executing program 2 (id=1738):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0xdddd0000, 0x1, 0x3, 0x3, 0x0, [{0xaf, 0x1, 0x7, '\x00', 0x6}, {0x1, 0x5, 0xb}, {0x9f, 0xfd, 0x2, '\x00', 0xf9}, {0x0, 0xd1, 0xf, '\x00', 0x6}, {0xac, 0x3, 0xc0, '\x00', 0x6}, {0x82, 0x6, 0x3, '\x00', 0x1}, {0x8, 0x7, 0x4, '\x00', 0x10}, {0x44, 0x5, 0x1, '\x00', 0x8c}, {0x8, 0x6, 0x0, '\x00', 0x3c}, {0x2, 0x80, 0xf, '\x00', 0x90}, {0xfc, 0xf, 0x5}, {0x8, 0x0, 0x4, '\x00', 0x9}, {0x0, 0x3, 0x1a, '\x00', 0xf3}, {0x9f, 0xe0, 0x3, '\x00', 0xe}, {0xec, 0x8, 0x0, '\x00', 0x2}, {0x3, 0x4, 0xfd, '\x00', 0x2}, {0x9, 0x7, 0x73, '\x00', 0xa}, {0x7, 0xa1, 0x9, '\x00', 0x4}, {0x8, 0x9, 0x0, '\x00', 0x9}, {0x2, 0xcc, 0x1, '\x00', 0x6}, {0x0, 0x3, 0x7, '\x00', 0x7}, {0xf, 0x7, 0x7, '\x00', 0x10}, {0xa, 0x5, 0x2, '\x00', 0xd1}, {0xa9, 0xf, 0xc6, '\x00', 0x4}]}})

1.811280955s ago: executing program 1 (id=1739):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fsmount(r4, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}})

700.804909ms ago: executing program 2 (id=1740):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fsmount(r4, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}})

618.571521ms ago: executing program 5 (id=1741):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x100)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0)
unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200)

454.102586ms ago: executing program 1 (id=1742):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="a62f"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_PMK={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

0s ago: executing program 5 (id=1743):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x4c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

736.128638][ T9892] loop4: detected capacity change from 0 to 32768
[  736.147199][ T9892] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  736.248566][  T125] usb 2-1: USB disconnect, device number 12
[  736.291020][  T125] usblp0: removed
[  736.316845][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1213'.
[  736.401489][ T9907] loop2: detected capacity change from 0 to 64
[  736.471680][ T9907] hfs: bad catalog folder thread
[  736.745151][ T9912] usb usb7: usbfs: process 9912 (syz.7.1217) did not claim interface 0 before use
[  737.664614][ T6892] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  737.760010][ T9924] loop1: detected capacity change from 0 to 512
[  737.799864][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1221'.
[  737.896067][ T9924] EXT4-fs (loop1): 1 truncate cleaned up
[  737.934259][ T9924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  738.214968][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  738.347954][ T9942] loop2: detected capacity change from 0 to 24
[  738.393293][ T9942] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  738.405130][ T9943] smc: net device vcan0 applied user defined pnetid SYZ1
[  738.461653][ T9942] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  738.531242][ T6424] Bluetooth: hci1: unexpected event for opcode 0x080f
[  738.722714][ T9953] loop5: detected capacity change from 0 to 24
[  738.998315][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1237'.
[  739.047486][ T9964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'.
[  739.071348][ T9963] loop2: detected capacity change from 0 to 2048
[  739.101577][ T9967] loop7: detected capacity change from 0 to 64
[  739.131917][ T9963] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  739.139635][ T9963] UDF-fs: Scanning with blocksize 512 failed
[  739.239410][ T9963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  739.257150][ T9967] hfs: request for non-existent node 196608 in B*Tree
[  739.334065][ T9967] hfs: request for non-existent node 196608 in B*Tree
[  739.697732][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1245'.
[  739.857269][ T9986] device bridge0 entered promiscuous mode
[  739.908552][ T9986] bridge0: port 4(macvlan2) entered blocking state
[  739.954008][ T9986] bridge0: port 4(macvlan2) entered disabled state
[  739.973468][ T9986] device bridge0 left promiscuous mode
[  739.991286][ T9990] loop7: detected capacity change from 0 to 512
[  740.078369][ T9990] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  740.132472][ T9990] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  740.235769][ T9981] loop5: detected capacity change from 0 to 32768
[  740.264877][ T9981] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1246 (9981)
[  740.277298][ T4759] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  740.327584][ T9981] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  740.369280][ T9981] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  740.389220][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  740.432509][ T9981] BTRFS info (device loop5): setting nodatasum
[  740.464187][ T9996] loop4: detected capacity change from 0 to 512
[  740.471161][ T9981] BTRFS info (device loop5): force zlib compression, level 3
[  740.490747][ T4759] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  740.514245][ T4759] usb 2-1: config 0 has no interface number 0
[  740.520938][ T9981] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  740.530206][ T9981] BTRFS info (device loop5): use lzo compression, level 0
[  740.541908][ T4759] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  740.564477][ T4759] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  740.577390][ T9996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  740.584662][ T9981] BTRFS info (device loop5): turning on flush-on-commit
[  740.593380][ T9981] BTRFS info (device loop5): enabling auto defrag
[  740.599960][ T4759] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  740.613365][ T9981] BTRFS info (device loop5): max_inline at 4096
[  740.621927][ T9996] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  740.627365][ T4759] usb 2-1: Manufacturer: syz
[  740.637149][ T9981] BTRFS info (device loop5): using free space tree
[  740.650138][ T4759] usb 2-1: SerialNumber: syz
[  740.666635][ T4759] usb 2-1: config 0 descriptor??
[  741.100346][T10015] loop7: detected capacity change from 0 to 8
[  741.456551][ T4759] usbtouchscreen: probe of 2-1:0.214 failed with error -71
[  741.469056][T10015] SQUASHFS error: zlib decompression failed, data probably corrupt
[  741.503404][ T9981] BTRFS info (device loop5): enabling ssd optimizations
[  741.527313][ T4759] usb 2-1: USB disconnect, device number 13
[  741.544508][T10015] SQUASHFS error: Failed to read block 0x74: -5
[  741.621217][T10015] SQUASHFS error: zlib decompression failed, data probably corrupt
[  741.646994][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  741.674381][T10015] SQUASHFS error: Failed to read block 0x74: -5
[  741.780102][ T5281] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  742.054615][T10038] loop7: detected capacity change from 0 to 512
[  742.183397][T10038] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  742.216738][T10038] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  742.430899][T10050] ext3: Unknown parameter 'euid'
[  743.494060][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  743.665340][ T9523] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  743.752141][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'.
[  744.018973][ T9523] usb 2-1: unable to get BOS descriptor or descriptor too short
[  744.067561][ T9523] usb 2-1: unable to read config index 0 descriptor/start: -71
[  744.110183][ T9523] usb 2-1: can't read configurations, error -71
[  744.239523][T10059] set_capacity_and_notify: 1 callbacks suppressed
[  744.239540][T10059] loop7: detected capacity change from 0 to 512
[  744.294426][T10059] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  744.318943][T10065] loop2: detected capacity change from 0 to 512
[  744.330178][T10059] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  744.406332][T10065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  744.495745][T10065] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  745.907921][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  745.915570][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  746.334083][   T26] audit: type=1326 audit(1778680412.015:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  746.443591][T10086] loop5: detected capacity change from 0 to 512
[  746.500505][T10088] loop2: detected capacity change from 0 to 16
[  746.562388][   T26] audit: type=1326 audit(1778680412.053:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  746.631213][T10088] erofs: (device loop2): mounted with root inode @ nid 36.
[  746.655879][T10086] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  746.739581][T10086] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  746.905242][   T26] audit: type=1326 audit(1778680412.053:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  747.145644][   T26] audit: type=1326 audit(1778680412.053:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  747.417016][T10100] loop4: detected capacity change from 0 to 512
[  747.472869][T10100] ext3: Unknown parameter 'euid'
[  747.704907][T10102] loop2: detected capacity change from 0 to 512
[  747.744524][   T26] audit: type=1326 audit(1778680412.053:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  747.768766][   T26] audit: type=1326 audit(1778680412.053:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  747.793932][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  747.842750][T10102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  747.856600][T10102] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  747.868998][   T26] audit: type=1326 audit(1778680412.053:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  747.918980][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1278'.
[  748.208083][   T26] audit: type=1326 audit(1778680412.053:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  748.583877][T10108] loop7: detected capacity change from 0 to 512
[  748.606432][   T26] audit: type=1326 audit(1778680412.053:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.1.1272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff795f9ce59 code=0x7ffc0000
[  748.990215][   T26] audit: type=1800 audit(1778680412.437:108): pid=10088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1270" name="file1" dev="loop2" ino=86 res=0 errno=0
[  749.120486][T10108] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  749.175671][T10108] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  749.218702][T10117] loop5: detected capacity change from 0 to 1024
[  749.493972][T10117] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  749.510281][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  749.924680][T10122] loop4: detected capacity change from 0 to 1024
[  750.165683][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  750.200302][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  750.582815][T10126] loop7: detected capacity change from 0 to 4096
[  750.999121][T10126] ntfs: volume version 3.1.
[  751.603214][T10142] loop7: detected capacity change from 0 to 512
[  751.611593][T10124] loop2: detected capacity change from 0 to 32768
[  751.624858][T10124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1282 (10124)
[  751.643788][T10124] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  751.662170][T10124] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  751.671869][T10124] BTRFS info (device loop2): turning on sync discard
[  751.679325][T10124] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  751.690009][T10124] BTRFS info (device loop2): use zstd compression, level 3
[  751.697293][T10124] BTRFS info (device loop2): turning on async discard
[  751.719290][T10124] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  751.741711][T10124] BTRFS info (device loop2): trying to use backup root at mount time
[  751.774774][T10124] BTRFS info (device loop2): enabling auto defrag
[  751.782912][T10142] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  751.794378][T10142] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  751.805054][T10124] BTRFS info (device loop2): using free space tree
[  752.330893][T10156] loop4: detected capacity change from 0 to 512
[  752.441873][T10164] loop5: detected capacity change from 0 to 512
[  752.525469][   T56] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  752.559424][T10156] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  752.603051][T10156] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  752.617071][T10124] BTRFS error (device loop2): failed to load root extent
[  752.628798][T10164] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  752.654744][T10124] BTRFS warning (device loop2): try to load backup roots slot 1
[  752.669579][T10164] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  752.709263][   T56] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  752.767975][T10124] BTRFS warning (device loop2): couldn't read tree root
[  752.789927][T10124] BTRFS warning (device loop2): try to load backup roots slot 2
[  752.913273][T10124] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  752.935493][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  753.431983][T10124] BTRFS warning (device loop2): couldn't read tree root
[  753.457022][T10124] BTRFS warning (device loop2): try to load backup roots slot 3
[  753.627631][T10124] BTRFS error (device loop2): open_ctree failed: -22
[  753.656337][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  753.929203][T10184] loop7: detected capacity change from 0 to 64
[  754.109353][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  754.179641][T10184] syz.7.1296: attempt to access beyond end of device
[  754.179641][T10184] loop7: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  754.214714][T10190] loop4: detected capacity change from 0 to 512
[  754.263193][T10184] Buffer I/O error on dev loop7, logical block 134217734, async page read
[  754.303035][T10184] syz.7.1296: attempt to access beyond end of device
[  754.303035][T10184] loop7: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  754.362010][T10190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  754.390984][T10190] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  754.451841][T10194] loop5: detected capacity change from 0 to 512
[  754.465119][T10184] Buffer I/O error on dev loop7, logical block 134217734, async page read
[  754.722087][T10194] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  754.731116][T10194] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  754.857100][T10194] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #2: comm syz.5.1298: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  755.243508][T10208] loop1: detected capacity change from 0 to 1024
[  755.267864][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  755.296351][T10210] loop2: detected capacity change from 0 to 512
[  755.362523][T10210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  755.418276][T10212] loop7: detected capacity change from 0 to 1024
[  755.425658][T10212] EXT4-fs: Ignoring removed nomblk_io_submit option
[  755.434848][T10210] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  755.491352][T10212] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  756.019209][T10212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  756.057816][T10212] System zones: 0-1, 3-36
[  756.280484][T10212] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  756.406352][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  756.510222][T10225] loop1: detected capacity change from 0 to 512
[  756.620224][T10225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  756.717435][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  756.739952][T10225] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  757.077314][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  757.742403][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  757.793323][T10246] loop2: detected capacity change from 0 to 1024
[  758.013412][ T9523] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  758.295819][ T9523] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  758.310760][ T9523] usb 6-1: config 0 has no interface number 0
[  758.333301][ T9523] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  758.359225][T10242] loop7: detected capacity change from 0 to 32768
[  758.378415][ T9523] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  758.393116][ T9523] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  758.404439][ T9523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.418074][T10242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1314 (10242)
[  758.450416][ T9523] usb 6-1: config 0 descriptor??
[  758.481400][T10242] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  758.516297][T10242] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  758.525813][T10242] BTRFS info (device loop7): setting nodatasum
[  758.532870][T10242] BTRFS info (device loop7): force zlib compression, level 3
[  758.538530][T10252] mkiss: ax0: crc mode is auto.
[  758.543696][T10242] BTRFS info (device loop7): turning on flush-on-commit
[  758.565931][T10242] BTRFS info (device loop7): max_inline at 4096
[  758.624841][T10242] BTRFS info (device loop7): using free space tree
[  758.755118][T10242] BTRFS info (device loop7): enabling ssd optimizations
[  758.917065][ T9523] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1
[  758.982901][ T9523] hid_prodikeys: hid-prodikeys: failed to find output report
[  758.982901][ T9523] 
[  758.998483][ T6774] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  759.065163][T10279] loop2: detected capacity change from 0 to 512
[  759.171735][ T8136] usb 6-1: USB disconnect, device number 9
[  759.190939][T10280] fido_id[10280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  759.264408][T10279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  759.283411][T10279] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  759.470060][T10259] loop4: detected capacity change from 0 to 32768
[  759.515793][T10259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1320 (10259)
[  759.990304][T10259] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  760.032628][T10259] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  760.249122][T10259] BTRFS info (device loop4): using free space tree
[  760.312574][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  760.659123][T10259] BTRFS info (device loop4): enabling ssd optimizations
[  760.788112][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  761.099742][T10324] loop1: detected capacity change from 0 to 256
[  761.211722][T10324] FAT-fs (loop1): Directory bread(block 64) failed
[  761.218352][T10324] FAT-fs (loop1): Directory bread(block 65) failed
[  761.257853][T10324] FAT-fs (loop1): Directory bread(block 66) failed
[  761.279383][T10324] FAT-fs (loop1): Directory bread(block 67) failed
[  761.318891][T10324] FAT-fs (loop1): Directory bread(block 68) failed
[  761.361408][T10324] FAT-fs (loop1): Directory bread(block 69) failed
[  761.368126][T10324] FAT-fs (loop1): Directory bread(block 70) failed
[  761.429037][T10324] FAT-fs (loop1): Directory bread(block 71) failed
[  761.441672][T10324] FAT-fs (loop1): Directory bread(block 72) failed
[  761.470343][T10324] FAT-fs (loop1): Directory bread(block 73) failed
[  761.774986][ T8434] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  761.867996][T10314] loop2: detected capacity change from 0 to 32768
[  761.903246][T10314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1324 (10314)
[  761.965642][T10314] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  761.983377][ T8434] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  761.999142][ T8434] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.034571][ T8434] usb 6-1: Product: syz
[  762.038904][ T8434] usb 6-1: Manufacturer: syz
[  762.047420][T10338] loop7: detected capacity change from 0 to 512
[  762.051940][T10314] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  762.070792][T10314] BTRFS info (device loop2): using free space tree
[  762.074176][ T8434] usb 6-1: SerialNumber: syz
[  762.106241][ T8434] usb 6-1: config 0 descriptor??
[  762.130483][ T8434] ch341 6-1:0.0: ch341-uart converter detected
[  762.149254][T10338] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  762.202479][T10338] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  762.415961][T10314] BTRFS info (device loop2): enabling ssd optimizations
[  762.703919][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  762.794467][ T8434] usb 6-1: failed to send control message: -71
[  762.803162][ T8434] ch341-uart: probe of ttyUSB0 failed with error -71
[  762.850172][ T8434] usb 6-1: USB disconnect, device number 10
[  762.862865][ T8434] ch341 6-1:0.0: device disconnected
[  762.878682][ T6719] udevd[6719]: setting mode of /dev/bus/usb/006/010 to 020664 failed: No such file or directory
[  762.926206][T10341] loop1: detected capacity change from 0 to 32768
[  762.933084][ T6719] udevd[6719]: setting owner of /dev/bus/usb/006/010 to uid=0, gid=0 failed: No such file or directory
[  763.231642][T10341] XFS (loop1): Mounting V5 Filesystem
[  763.351171][T10341] XFS (loop1): Ending clean mount
[  763.726808][ T4284] XFS (loop1): Unmounting Filesystem
[  763.990100][ T8435] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  764.223746][ T8435] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  764.242388][ T8435] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  764.268899][ T8435] usb 3-1: config 220 has no interface number 2
[  764.280910][ T8435] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  764.333183][ T8435] usb 3-1: config 220 interface 0 has no altsetting 0
[  764.352134][ T8435] usb 3-1: config 220 interface 76 has no altsetting 0
[  764.370555][ T8435] usb 3-1: config 220 interface 1 has no altsetting 0
[  764.399139][ T8435] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  764.415409][T10393] loop5: detected capacity change from 0 to 512
[  764.422330][ T8435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.439200][ T8435] usb 3-1: Product: syz
[  764.448200][ T8435] usb 3-1: Manufacturer: syz
[  764.454751][T10393] EXT4-fs (loop5): 1 truncate cleaned up
[  764.459035][ T8435] usb 3-1: SerialNumber: syz
[  764.467776][T10393] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  764.576770][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  764.576787][   T26] audit: type=1800 audit(1778680429.094:109): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1344" name="file0" dev="overlay" ino=13 res=0 errno=0
[  764.658259][ T5281] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  764.704837][ T5281] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set
[  764.731474][ T5281] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  764.745249][ T5281] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0)
[  764.761907][ T8435] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  764.774481][ T8435] usb 3-1: No valid video chain found.
[  764.784487][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  764.790335][ T8435] usb 3-1: selecting invalid altsetting 0
[  764.826049][ T8435] usb 3-1: selecting invalid altsetting 0
[  764.836615][ T8435] usbtest: probe of 3-1:220.1 failed with error -22
[  764.865999][ T8435] usb 3-1: USB disconnect, device number 9
[  764.959578][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  766.906298][T10404] loop1: detected capacity change from 0 to 512
[  766.981640][T10404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  767.000538][T10404] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  767.027183][T10409] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  767.033821][T10409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  767.088880][T10409] vhci_hcd vhci_hcd.0: Device attached
[  767.099126][ T8429] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  767.246566][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  767.253027][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  767.309200][ T8429] usb 8-1: Using ep0 maxpacket: 32
[  767.314569][ T8437] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  767.478492][ T8429] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  767.494271][ T8429] usb 8-1: config 0 interface 0 has no altsetting 0
[  767.501272][ T8429] usb 8-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  767.511681][ T8429] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.536594][ T8429] usb 8-1: config 0 descriptor??
[  767.888927][ T8437] usb 3-1: Using ep0 maxpacket: 8
[  767.943590][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  768.065105][T10410] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0
[  768.068978][ T8136] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  768.112482][ T4622] vhci_hcd: stop threads
[  768.116935][ T4622] vhci_hcd: release socket
[  768.118219][ T8437] usb 3-1: unable to get BOS descriptor or descriptor too short
[  768.152036][ T8437] usb 3-1: no configurations
[  768.163155][ T8437] usb 3-1: can't read configurations, error -22
[  768.190117][ T4622] vhci_hcd: disconnect device
[  768.201293][ T8429] aureal 0003:0755:2626.0008: unknown main item tag 0x4
[  768.220280][ T8429] aureal 0003:0755:2626.0008: collection stack underflow
[  768.227510][ T8429] aureal 0003:0755:2626.0008: item 0 4 0 12 parsing failed
[  768.251667][ T8429] aureal: probe of 0003:0755:2626.0008 failed with error -22
[  768.421308][T10426] loop5: detected capacity change from 0 to 512
[  768.458975][ T8429] usb 8-1: USB disconnect, device number 7
[  768.491098][T10426] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  768.539223][T10426] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  769.597317][T10436] loop1: detected capacity change from 0 to 512
[  769.598550][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  769.891104][T10436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  769.906996][ T9518] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  769.914960][T10436] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  770.171588][ T9518] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  770.210093][ T9518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.236917][ T9518] usb 3-1: Product: syz
[  770.252828][ T9518] usb 3-1: Manufacturer: syz
[  770.263469][ T9518] usb 3-1: SerialNumber: syz
[  770.276162][ T9518] usb 3-1: config 0 descriptor??
[  770.585581][ T8429] usb 3-1: USB disconnect, device number 12
[  770.739691][T10443] loop5: detected capacity change from 0 to 32768
[  770.790068][T10443] JBD2: Ignoring recovery information on journal
[  770.883050][ T6725] udevd[6725]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  770.978337][T10456] loop7: detected capacity change from 0 to 512
[  771.014489][T10456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002]
[  771.023389][T10443] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  771.052486][T10456] System zones: 1-12
[  771.096299][T10456] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.1361: corrupted in-inode xattr
[  771.151513][T10456] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1361: couldn't read orphan inode 15 (err -117)
[  771.210244][T10456] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  771.437904][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  771.504242][ T5281] ocfs2: Unmounting device (7,5) on (node local)
[  771.889553][T10472] loop7: detected capacity change from 0 to 1024
[  771.918518][T10472] EXT4-fs: Ignoring removed orlov option
[  771.947625][T10472] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  772.060169][T10472] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  772.069513][T10475] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  772.083691][T10475] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  772.195154][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  772.384375][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  772.427788][T10462] loop2: detected capacity change from 0 to 40427
[  772.452137][T10462] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  772.459730][T10462] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  772.487474][T10462] F2FS-fs (loop2): invalid crc value
[  772.503322][T10462] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  772.570834][T10462] F2FS-fs (loop2): Start checkpoint disabled!
[  772.599987][ T9518] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  772.605619][T10462] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  772.614995][T10462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  772.653155][ T8437] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  772.760113][ T8429] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  772.819954][ T9518] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  772.829594][ T9518] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  772.840388][ T9518] usb 6-1: config 0 has no interface number 0
[  772.850582][ T9518] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  772.856529][ T8437] usb 8-1: Using ep0 maxpacket: 8
[  772.861296][ T9518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.873405][ T9518] usb 6-1: Product: syz
[  772.878587][ T9518] usb 6-1: Manufacturer: syz
[  772.883231][ T9518] usb 6-1: SerialNumber: syz
[  772.891827][ T8437] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  772.900976][ T9518] usb 6-1: config 0 descriptor??
[  772.920417][ T8437] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.928479][ T8437] usb 8-1: Product: syz
[  772.952471][ T8437] usb 8-1: Manufacturer: syz
[  772.957141][ T8437] usb 8-1: SerialNumber: syz
[  772.973845][ T8429] usb 2-1: Using ep0 maxpacket: 32
[  772.980890][ T8429] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  772.989871][ T8437] usb 8-1: config 0 descriptor??
[  772.995289][ T8429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  773.027240][ T8429] usb 2-1: config 0 has no interface number 0
[  773.033544][ T8429] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  773.072613][ T8429] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  773.102002][ T8429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.110219][ T8429] usb 2-1: Product: syz
[  773.114520][ T8429] usb 2-1: Manufacturer: syz
[  773.119188][ T8429] usb 2-1: SerialNumber: syz
[  773.131517][ T8429] usb 2-1: config 0 descriptor??
[  773.142841][ T8429] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  773.150742][ T8429] radio-si470x: probe of 2-1:0.35 failed with error -5
[  773.161438][   T26] audit: type=1326 audit(1778680437.123:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa539ce59 code=0x7ffc0000
[  773.209206][   T26] audit: type=1326 audit(1778680437.123:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa539ce59 code=0x7ffc0000
[  773.241751][ T8437] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  773.262291][   T26] audit: type=1326 audit(1778680437.132:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f8fa539ce59 code=0x7ffc0000
[  773.294580][   T26] audit: type=1326 audit(1778680437.142:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa539ce59 code=0x7ffc0000
[  773.326148][   T26] audit: type=1326 audit(1778680437.151:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa539ce59 code=0x7ffc0000
[  773.361924][   T26] audit: type=1326 audit(1778680437.151:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f8fa539ce59 code=0x7ffc0000
[  773.369878][ T9518] usb 6-1: Found UVC 0.00 device syz (046d:0823)
[  773.394343][ T8429] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  773.408087][   T26] audit: type=1326 audit(1778680437.151:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa539ce59 code=0x7ffc0000
[  773.438971][   T26] audit: type=1326 audit(1778680437.151:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa539ce59 code=0x7ffc0000
[  773.471630][ T9518] usb 6-1: No valid video chain found.
[  773.561648][ T8136] vhci_hcd: vhci_device speed not set
[  773.604784][ T9518] usb 6-1: USB disconnect, device number 11
[  773.635061][ T8429] radio-raremono 2-1:0.35: V4L2 device registered as radio48
[  773.685654][ T8437] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71
[  773.710213][ T8437] usb 8-1: USB disconnect, device number 8
[  773.856591][ T8429] usb 2-1: USB disconnect, device number 16
[  773.868042][ T8429] radio-raremono 2-1:0.35: Thanko's Raremono disconnected
[  773.922717][T10497] loop2: detected capacity change from 0 to 512
[  773.930845][T10497] EXT4-fs: Ignoring removed mblk_io_submit option
[  773.943806][T10497] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  773.955667][T10497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e800e028, mo2=0002]
[  773.969476][T10497] System zones: 1-12
[  773.974821][T10497] EXT4-fs (loop2): orphan cleanup on readonly fs
[  773.987267][T10497] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1377: bg 0: block 361: padding at end of block bitmap is not set
[  774.011038][T10497] EXT4-fs (loop2): Remounting filesystem read-only
[  774.017796][T10497] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  774.028962][T10497] EXT4-fs (loop2): Remounting filesystem read-only
[  774.036736][T10497] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1377: attempt to clear invalid blocks 33619980 len 1
[  774.050692][T10497] EXT4-fs (loop2): Remounting filesystem read-only
[  774.060986][T10497] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1377: invalid indirect mapped block 1811939328 (level 0)
[  774.083991][T10497] EXT4-fs (loop2): Remounting filesystem read-only
[  774.092940][T10497] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1377: invalid indirect mapped block 2 (level 2)
[  774.108948][T10497] EXT4-fs (loop2): Remounting filesystem read-only
[  774.115720][T10497] EXT4-fs (loop2): 1 truncate cleaned up
[  774.121540][T10497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  774.233395][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  776.589446][T10516] loop2: detected capacity change from 0 to 8192
[  776.627181][T10516] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  776.643758][T10516] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  776.654104][T10516] REISERFS (device loop2): using ordered data mode
[  776.660892][T10516] reiserfs: using flush barriers
[  776.675617][T10508] loop1: detected capacity change from 0 to 32768
[  776.685089][T10521] loop7: detected capacity change from 0 to 1024
[  776.703368][T10516] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  776.724177][T10516] REISERFS (device loop2): checking transaction log (loop2)
[  776.735353][ T8136] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  776.755907][T10516] REISERFS (device loop2): Using r5 hash to sort names
[  776.771429][T10516] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  776.789213][T10516] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  776.861156][T10508] XFS (loop1): Mounting V5 Filesystem
[  776.879613][T10521] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5
[  776.906365][T10521] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  776.942564][T10521] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1386: Failed to acquire dquot type 0
[  776.962721][ T8136] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  776.983840][ T8136] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  776.997998][ T8136] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  777.012550][ T8136] usb 6-1: config 0 interface 0 has no altsetting 0
[  777.036472][T10521] EXT4-fs error (device loop7): mb_free_blocks:1839: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  777.045298][ T8136] usb 6-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00
[  777.066645][T10508] XFS (loop1): Ending clean mount
[  777.073692][T10521] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #13: comm syz.7.1386: corrupted inode contents
[  777.091943][T10521] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #13: comm syz.7.1386: mark_inode_dirty error
[  777.098670][ T8136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.108479][T10521] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #13: comm syz.7.1386: corrupted inode contents
[  777.133792][T10521] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #13: comm syz.7.1386: mark_inode_dirty error
[  777.150161][T10521] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #13: comm syz.7.1386: corrupted inode contents
[  777.153498][ T8136] usb 6-1: config 0 descriptor??
[  777.174723][T10521] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  777.183881][T10521] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #13: comm syz.7.1386: corrupted inode contents
[  777.251476][T10521] EXT4-fs error (device loop7): ext4_truncate:4325: inode #13: comm syz.7.1386: mark_inode_dirty error
[  777.286671][T10521] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  777.328359][T10521] EXT4-fs (loop7): 1 truncate cleaned up
[  777.343704][T10521] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  777.375015][ T4284] XFS (loop1): Unmounting Filesystem
[  777.464697][T10521] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1386: Failed to acquire dquot type 0
[  777.577450][T10534] loop2: detected capacity change from 0 to 512
[  777.628088][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  777.652119][ T8136] sony 0003:054C:0374.0009: unknown main item tag 0x1
[  777.689498][ T8136] sony 0003:054C:0374.0009: global environment stack underflow
[  777.702914][ T8136] sony 0003:054C:0374.0009: item 0 4 1 11 parsing failed
[  777.740282][ T8136] sony 0003:054C:0374.0009: parse failed
[  777.746018][ T8136] sony: probe of 0003:054C:0374.0009 failed with error -22
[  777.897820][T10536] loop2: detected capacity change from 0 to 128
[  777.916890][ T8136] usb 6-1: USB disconnect, device number 12
[  777.923455][T10536] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  777.959974][T10536] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  778.023083][T10540] loop1: detected capacity change from 0 to 512
[  778.055726][T10540] ext3: Unknown parameter 'euid'
[  778.193050][ T8429] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  778.486879][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'.
[  779.136736][ T8437] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  779.148406][ T8429] usb 8-1: config 0 has an invalid interface number: 117 but max is 0
[  779.156874][ T8429] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  779.167103][ T8429] usb 8-1: config 0 has no interface number 0
[  779.181359][ T8429] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  779.191413][ T8429] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  779.207356][ T8429] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  779.216868][ T8429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.224920][ T8429] usb 8-1: Product: syz
[  779.229227][ T8429] usb 8-1: Manufacturer: syz
[  779.233868][ T8429] usb 8-1: SerialNumber: syz
[  779.241045][ T8429] usb 8-1: config 0 descriptor??
[  779.342742][ T8437] usb 3-1: Using ep0 maxpacket: 16
[  779.386810][ T8437] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  779.458526][ T8437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.572368][ T8437] usb 3-1: Product: syz
[  779.625057][ T8437] usb 3-1: Manufacturer: syz
[  779.671454][ T8437] usb 3-1: SerialNumber: syz
[  779.786901][ T8437] r8152-cfgselector 3-1: config 0 descriptor??
[  780.206606][ T8437] r8152-cfgselector 3-1: Unknown version 0x0000
[  780.216524][ T8136] usb 8-1: USB disconnect, device number 9
[  780.332960][T10555] bridge0: port 4(veth1_to_bridge) entered blocking state
[  780.340771][T10555] bridge0: port 4(veth1_to_bridge) entered disabled state
[  780.349321][T10555] device veth1_to_bridge entered promiscuous mode
[  780.357993][T10555] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  780.371946][T10555] bridge0: port 4(veth1_to_bridge) entered blocking state
[  780.379218][T10555] bridge0: port 4(veth1_to_bridge) entered forwarding state
[  780.446248][ T8437] r8152-cfgselector 3-1: Unknown version 0x0000
[  780.470855][ T8437] r8152-cfgselector 3-1: USB disconnect, device number 13
[  780.694514][T10563] loop4: detected capacity change from 0 to 4096
[  780.715239][T10563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  780.943257][T10574] netlink: 'syz.1.1403': attribute type 4 has an invalid length.
[  780.967763][T10574] netlink: 'syz.1.1403': attribute type 4 has an invalid length.
[  780.999175][ T8136] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  781.129719][T10576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1404'.
[  781.212872][ T8437] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  781.213210][ T8136] usb 6-1: Using ep0 maxpacket: 8
[  781.239878][ T8136] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  781.253485][ T8136] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  781.263086][ T8136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.274629][ T8136] usb 6-1: Product: syz
[  781.279317][ T8136] usb 6-1: Manufacturer: syz
[  781.284033][ T8136] usb 6-1: SerialNumber: syz
[  781.291271][ T8136] usb 6-1: config 0 descriptor??
[  781.299067][ T8136] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  781.307253][ T8136] usb 6-1: setting power ON
[  781.311901][ T8136] dvb-usb: bulk message failed: -22 (2/0)
[  781.319736][ T8136] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  781.329562][ T8136] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  781.338399][ T8136] usb 6-1: media controller created
[  781.355273][ T8136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  781.395984][ T8136] usb 6-1: selecting invalid altsetting 6
[  781.401780][ T8136] usb 6-1: digital interface selection failed (-22)
[  781.415818][ T8437] usb 8-1: Using ep0 maxpacket: 16
[  781.422067][ T8136] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  781.428779][ T8437] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[  781.441309][ T8136] usb 6-1: setting power OFF
[  781.443571][ T8437] usb 8-1: config 0 has no interface number 0
[  781.450209][ T8136] dvb-usb: bulk message failed: -22 (2/0)
[  781.453327][ T8437] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  781.457729][ T8136] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  781.478152][ T9523] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  781.479340][ T8437] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  781.486103][ T8136] (NULL device *): no alternate interface
[  781.508642][ T8437] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  781.526624][ T8136] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  781.553371][ T8136] usb 6-1: USB disconnect, device number 13
[  781.562799][ T8437] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  781.577799][ T8437] usb 8-1: Product: syz
[  781.582024][ T8437] usb 8-1: SerialNumber: syz
[  781.593363][ T8437] usb 8-1: config 0 descriptor??
[  781.606227][ T8437] cm109 8-1:0.8: invalid payload size 0, expected 4
[  781.616148][ T8437] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input15
[  781.619217][ T9518] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  781.684706][ T9523] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  781.698206][ T9523] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  781.709414][ T9523] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  781.719343][ T9523] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  781.730972][ T9523] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024
[  781.753459][ T9523] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  781.764389][ T9523] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  781.775552][ T9523] usb 3-1: Product: syz
[  781.780100][ T9523] usb 3-1: Manufacturer: syz
[  781.789111][ T9523] cdc_wdm 3-1:1.0: skipping garbage
[  781.795004][ T9523] cdc_wdm 3-1:1.0: skipping garbage
[  781.813321][ T9523] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  781.824106][ T9518] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  781.834556][ T9523] cdc_wdm 3-1:1.0: Unknown control protocol
[  781.841084][ T9518] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  781.858776][ T9518] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  781.880809][ T9518] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  781.895612][ T9518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.904190][ T9518] usb 2-1: Product: syz
[  781.908641][ T9518] usb 2-1: Manufacturer: syz
[  781.913286][ T9518] usb 2-1: SerialNumber: syz
[  781.923263][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  781.926151][ T9518] cdc_mbim 2-1:1.0: skipping garbage
[  781.936545][ T9518] usb 2-1: selecting invalid altsetting 1
[  781.942988][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  781.950320][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  781.957514][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  781.963094][ T9523] usb 8-1: USB disconnect, device number 10
[  781.964476][    C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  781.993362][ T9523] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  782.378069][ T9518] usb 2-1: selecting invalid altsetting 1
[  782.387759][ T9518] cdc_mbim 2-1:1.0: bind() failure
[  782.527560][ T9518] usb 3-1: USB disconnect, device number 14
[  783.120757][ T9518] usb 2-1: USB disconnect, device number 17
[  785.033971][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  785.230959][ T8433] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  785.242247][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'.
[  785.436942][ T8433] usb 6-1: Using ep0 maxpacket: 16
[  785.445099][T10601] loop2: detected capacity change from 0 to 8192
[  785.446298][ T8433] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.518041][T10606] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  785.540497][ T8433] usb 6-1: config 0 interface 0 has no altsetting 0
[  785.557231][ T8433] usb 6-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00
[  785.597083][ T8433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.610854][T10608] loop1: detected capacity change from 0 to 128
[  785.632573][ T8433] usb 6-1: config 0 descriptor??
[  785.635548][T10608] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  785.678175][T10595] loop7: detected capacity change from 0 to 32768
[  785.714765][T10608] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  785.782520][T10595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1411 (10595)
[  785.850960][T10595] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  785.897079][T10595] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  785.914772][T10595] BTRFS info (device loop7): using free space tree
[  786.064244][ T9518] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  786.091780][ T8433] ntrig 0003:1B96:0001.000A: collection stack underflow
[  786.118571][ T8433] ntrig 0003:1B96:0001.000A: item 0 0 0 12 parsing failed
[  786.135923][T10595] BTRFS info (device loop7): enabling ssd optimizations
[  786.146396][ T8433] ntrig 0003:1B96:0001.000A: parse failed
[  786.156763][ T8433] ntrig: probe of 0003:1B96:0001.000A failed with error -22
[  786.277994][ T9518] usb 2-1: Using ep0 maxpacket: 8
[  786.285147][ T9518] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  786.317343][ T9518] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  786.338207][ T9518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.361494][ T9518] usb 2-1: config 0 descriptor??
[  786.368467][ T6774] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  786.379318][ T8433] usb 6-1: USB disconnect, device number 14
[  786.413234][ T9518] usb 2-1: bad CDC descriptors
[  786.433647][ T9518] usb 2-1: bad CDC descriptors
[  786.450908][ T9518] cdc_acm 2-1:0.0: Control and data interfaces are not separated!
[  786.466935][ T9518] cdc_acm 2-1:0.0: This needs exactly 3 endpoints
[  786.474443][ T9518] cdc_acm: probe of 2-1:0.0 failed with error -22
[  786.538781][ T6892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop7 scanned by udevd (6892)
[  786.910486][  T128] usb 2-1: USB disconnect, device number 18
[  787.679095][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1424'.
[  787.688181][T10647] team0: Cannot enslave team device to itself
[  788.276683][ T8433] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  788.538268][ T8433] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  788.631778][ T8433] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  788.777530][ T8433] usb 3-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[  788.892473][ T8433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.069526][ T8433] usb 3-1: Product: syz
[  789.148911][ T8433] usb 3-1: Manufacturer: syz
[  789.225316][ T8433] usb 3-1: SerialNumber: syz
[  789.654207][ T8433] usb 3-1: unit 5 not found!
[  789.679724][ T8433] usb 3-1: unit 3 not found!
[  789.733241][ T8433] usb 3-1: USB disconnect, device number 15
[  789.741812][T10664] device bridge0 entered promiscuous mode
[  789.751324][T10664] device macsec1 entered promiscuous mode
[  789.762555][T10662] loop7: detected capacity change from 0 to 1024
[  789.839566][T10662] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  790.079404][ T6725] udevd[6725]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  790.754567][T10675] loop5: detected capacity change from 0 to 256
[  790.831423][T10675] exfat: Deprecated parameter 'utf8'
[  790.867019][T10675] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  791.275086][T10679] loop1: detected capacity change from 0 to 8192
[  791.306861][T10679] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  791.333661][T10679] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  791.354386][T10679] REISERFS (device loop1): using ordered data mode
[  791.362222][T10679] reiserfs: using flush barriers
[  791.382045][T10679] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  791.404147][T10679] REISERFS (device loop1): checking transaction log (loop1)
[  791.424644][T10679] REISERFS (device loop1): Using r5 hash to sort names
[  791.432140][T10679] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  791.450320][T10679] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  791.482013][ T8433] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  791.622792][T10643] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  791.697054][ T8433] usb 6-1: Using ep0 maxpacket: 8
[  791.727858][ T8433] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  791.737195][ T8433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.771290][ T8433] usb 6-1: Product: syz
[  791.775678][ T8433] usb 6-1: Manufacturer: syz
[  791.808033][ T8433] usb 6-1: SerialNumber: syz
[  791.827971][T10643] usb 3-1: Using ep0 maxpacket: 32
[  791.846003][ T8433] usb 6-1: config 0 descriptor??
[  791.856531][ T8433] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  791.858454][T10643] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  791.865395][ T8433] dvb-usb: bulk message failed: -22 (2/0)
[  791.892228][T10643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.902502][T10643] usb 3-1: Product: syz
[  791.906866][T10643] usb 3-1: Manufacturer: syz
[  791.916029][T10643] usb 3-1: SerialNumber: syz
[  791.923927][ T8433] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  791.952644][T10643] usb 3-1: config 0 descriptor??
[  791.957487][ T8433] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  791.977130][T10643] dw2102: su3000_identify_state
[  791.977587][ T8433] usb 6-1: media controller created
[  792.006295][T10643] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  792.026274][T10643] dw2102: su3000_power_ctrl: 1, initialized 0
[  792.037105][T10643] dvb-usb: bulk message failed: -22 (2/0)
[  792.055966][ T8433] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  792.066886][T10643] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  792.092757][T10683] dvb-usb: bulk message failed: -22 (3/0)
[  792.119399][T10643] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  792.131639][ T8433] cxusb: set interface failed
[  792.137515][ T8433] dvb-usb: bulk message failed: -22 (1/0)
[  792.158983][T10643] usb 3-1: media controller created
[  792.166972][T10643] dvb-usb: bulk message failed: -22 (6/0)
[  792.176272][T10643] dw2102: i2c transfer failed.
[  792.208473][T10686] dvb-usb: bulk message failed: -22 (4/0)
[  792.219183][T10643] dvb-usb: bulk message failed: -22 (6/0)
[  792.227088][T10643] dw2102: i2c transfer failed.
[  792.245729][T10643] dvb-usb: bulk message failed: -22 (6/0)
[  792.269743][T10643] dw2102: i2c transfer failed.
[  792.293853][T10643] dvb-usb: bulk message failed: -22 (6/0)
[  792.308719][T10643] dw2102: i2c transfer failed.
[  792.313885][T10643] dvb-usb: bulk message failed: -22 (6/0)
[  792.320224][T10643] dw2102: i2c transfer failed.
[  792.325287][T10643] dvb-usb: bulk message failed: -22 (6/0)
[  792.332083][T10643] dw2102: i2c transfer failed.
[  792.386580][T10643] dvb-usb: MAC address: 02:02:02:02:02:02
[  792.617562][ T8433] DVB: Unable to find symbol mt352_attach()
[  793.101941][T10643] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  793.745739][T10643] dvb-usb: bulk message failed: -22 (3/0)
[  793.871356][T10643] dw2102: command 0x0e transfer failed.
[  793.960117][ T8433] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  794.003507][T10643] dvb-usb: bulk message failed: -22 (3/0)
[  794.104503][T10643] dw2102: command 0x0e transfer failed.
[  794.527861][T10643] dvb-usb: bulk message failed: -22 (3/0)
[  794.533949][T10643] dw2102: command 0x0e transfer failed.
[  794.666574][ T9521] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  795.450354][T10643] dvb-usb: bulk message failed: -22 (3/0)
[  795.456844][T10643] dw2102: command 0x0e transfer failed.
[  795.463528][T10643] dvb-usb: bulk message failed: -22 (1/0)
[  795.469911][T10643] dw2102: command 0x51 transfer failed.
[  795.573327][T10643] DVB: Unable to find symbol ds3000_attach()
[  795.579985][T10643] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  795.628193][ T8433] rc_core: IR keymap rc-dvico-portable not found
[  795.638890][ T9521] usb 2-1: Using ep0 maxpacket: 16
[  795.639081][ T8433] Registered IR keymap rc-empty
[  795.656683][ T9521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  795.687781][ T8433] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  795.702381][ T9521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  795.732072][ T9521] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  795.762666][ T8433] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input16
[  795.776758][ T9521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.791409][T10722] loop7: detected capacity change from 0 to 512
[  795.800501][ T8433] dvb-usb: schedule remote query interval to 100 msecs.
[  795.809966][T10643] rc_core: IR keymap rc-su3000 not found
[  795.816204][T10643] Registered IR keymap rc-empty
[  795.819084][ T8433] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  795.833086][T10643] rc rc1: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1
[  795.859389][T10720] loop2: detected capacity change from 0 to 4096
[  795.866185][ T9521] usb 2-1: config 0 descriptor??
[  795.882902][ T8433] usb 6-1: USB disconnect, device number 15
[  795.905000][T10722] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  795.914933][T10720] __ntfs_error: 2 callbacks suppressed
[  795.914949][T10720] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  795.932096][T10643] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1/input17
[  795.950125][T10722] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  795.989013][T10720] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  796.015739][T10643] dvb-usb: schedule remote query interval to 150 msecs.
[  796.033834][T10643] dw2102: su3000_power_ctrl: 0, initialized 1
[  796.050823][ T8433] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  796.087895][T10720] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  796.099905][T10643] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  796.133574][T10720] ntfs: volume version 3.1.
[  796.208191][T10643] usb 3-1: USB disconnect, device number 16
[  796.292951][T10643] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  796.354087][ T9521] razer 0003:1532:011B.000B: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0
[  796.488330][ T4272] ntfs: (device loop2): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  796.525851][ T8433] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  796.592694][T10643] usb 2-1: USB disconnect, device number 19
[  796.698372][T10729] fido_id[10729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  796.869666][ T8433] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  796.881797][ T8433] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  797.703658][ T8433] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  797.776557][ T8433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  797.785693][ T8433] usb 6-1: SerialNumber: syz
[  797.865915][ T8433] usb 6-1: can't set config #1, error -71
[  797.897891][T10739] loop1: detected capacity change from 0 to 512
[  797.915659][ T8433] usb 6-1: USB disconnect, device number 16
[  798.009129][T10739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  798.075557][T10739] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  798.937930][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  799.045095][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  799.100175][ T8433] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  799.151610][T10752] loop7: detected capacity change from 0 to 1024
[  799.175226][T10752] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  799.310981][T10752] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  799.329527][ T8433] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  799.394042][ T8433] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  799.576256][ T8433] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  799.696166][ T8433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  800.317985][ T8433] usb 6-1: SerialNumber: syz
[  800.646686][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  800.679320][T10763] loop2: detected capacity change from 0 to 1024
[  800.707682][T10763] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[  800.742567][T10763] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  800.786807][ T8433] usb 6-1: 0:2 : does not exist
[  800.826327][T10763] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1458: Failed to acquire dquot type 0
[  800.857672][T10763] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  800.883021][ T8433] usb 6-1: USB disconnect, device number 17
[  801.016408][T10763] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #13: comm syz.2.1458: corrupted inode contents
[  801.162458][T10763] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #13: comm syz.2.1458: mark_inode_dirty error
[  801.291181][T10763] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #13: comm syz.2.1458: corrupted inode contents
[  801.535835][T10763] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.1458: mark_inode_dirty error
[  801.794717][T10763] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #13: comm syz.2.1458: corrupted inode contents
[  801.850830][T10763] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  801.912130][T10763] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #13: comm syz.2.1458: corrupted inode contents
[  801.976165][T10763] EXT4-fs error (device loop2): ext4_truncate:4325: inode #13: comm syz.2.1458: mark_inode_dirty error
[  802.027278][T10763] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  802.060609][T10763] EXT4-fs (loop2): 1 truncate cleaned up
[  802.113944][T10763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  802.160586][T10763] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[  802.176879][T10763] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  802.186836][T10763] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1458: Failed to acquire dquot type 0
[  802.253755][ T8437] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  802.296527][ T8433] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  802.319472][ T8429] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  802.324345][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  802.456574][ T8437] usb 2-1: Using ep0 maxpacket: 16
[  802.464244][ T8437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  802.486792][ T8437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  802.510239][ T8437] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  802.531463][ T8429] usb 8-1: Using ep0 maxpacket: 16
[  802.536778][ T8433] usb 6-1: Using ep0 maxpacket: 32
[  802.544562][ T8429] usb 8-1: config index 0 descriptor too short (expected 51443, got 18)
[  802.554503][ T8433] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  802.562651][ T8433] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  802.579116][ T8437] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  802.595273][ T8429] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  802.604893][ T8437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.613768][ T8429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.622366][ T8433] usb 6-1: config 0 has no interface number 0
[  802.629571][ T8433] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  802.645217][ T8437] usb 2-1: config 0 descriptor??
[  802.650318][ T8429] usb 8-1: Product: syz
[  802.654552][ T8429] usb 8-1: Manufacturer: syz
[  802.663729][ T8429] usb 8-1: SerialNumber: syz
[  802.675959][ T8433] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  802.692702][ T8433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.705899][ T8433] usb 6-1: Product: syz
[  802.710375][ T8433] usb 6-1: Manufacturer: syz
[  802.720235][ T8429] r8152-cfgselector 8-1: config 0 descriptor??
[  802.728076][ T8433] usb 6-1: SerialNumber: syz
[  802.739164][ T8433] usb 6-1: config 0 descriptor??
[  802.751247][ T8433] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[  802.759529][ T8433] radio-si470x: probe of 6-1:0.35 failed with error -5
[  802.988935][ T8433] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  803.042835][ T8429] r8152-cfgselector 8-1: Unknown version 0x0000
[  803.063973][ T8429] r8152-cfgselector 8-1: Unknown version 0x0000
[  803.072269][ T8429] r8152-cfgselector 8-1: bad CDC descriptors
[  803.097246][ T8429] usbip-host 8-1: 8-1 is not in match_busid table... skip!
[  803.107880][ T4407] usb 8-1: config 0 descriptor??
[  803.392396][ T8433] radio-raremono 6-1:0.35: V4L2 device registered as radio48
[  803.688945][ T4407] usb 8-1: can't set config #0, error -71
[  803.690902][T10643] usb 8-1: USB disconnect, device number 11
[  803.706559][ T6892] udevd[6892]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  803.728512][ T8433] usb 6-1: USB disconnect, device number 18
[  803.755350][ T8437] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input18
[  803.779862][ T8433] radio-raremono 6-1:0.35: Thanko's Raremono disconnected
[  803.897414][ T8437] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  803.922865][ T8437] usb 2-1: USB disconnect, device number 20
[  804.047915][T10793] fido_id[10793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  804.583262][ T9521] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  805.302603][T10805] loop7: detected capacity change from 0 to 512
[  805.543253][ T9521] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  806.544237][ T9521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.564326][ T9521] usb 6-1: config 0 descriptor??
[  806.572978][ T9521] gspca_main: cpia1-2.14.0 probing 0813:0001
[  806.819069][T10813] loop1: detected capacity change from 0 to 1024
[  807.002472][T10813] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[  807.018981][ T9521] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  807.041044][T10813] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  807.056217][T10813] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1476: Failed to acquire dquot type 0
[  807.122744][T10813] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  807.157458][T10813] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #13: comm syz.1.1476: corrupted inode contents
[  807.171351][T10813] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #13: comm syz.1.1476: mark_inode_dirty error
[  807.183989][T10813] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #13: comm syz.1.1476: corrupted inode contents
[  807.197318][T10813] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.1476: mark_inode_dirty error
[  807.210054][T10813] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #13: comm syz.1.1476: corrupted inode contents
[  807.241930][ T9521] gspca_cpia1: usb_control_msg 01, error -32
[  807.250526][ T9521] gspca_cpia1: usb_control_msg 01, error -71
[  807.260835][T10813] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  807.274892][ T9521] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  807.283607][T10813] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #13: comm syz.1.1476: corrupted inode contents
[  807.312802][ T9521] usb 6-1: USB disconnect, device number 19
[  807.327928][T10813] EXT4-fs error (device loop1): ext4_truncate:4325: inode #13: comm syz.1.1476: mark_inode_dirty error
[  807.343836][T10813] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  807.364573][T10813] EXT4-fs (loop1): 1 truncate cleaned up
[  807.370545][T10813] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  807.435802][T10813] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[  807.466928][T10813] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  807.483986][T10813] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1476: Failed to acquire dquot type 0
[  807.535830][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  807.634942][T10817] loop7: detected capacity change from 0 to 32768
[  807.653895][T10829] loop1: detected capacity change from 0 to 512
[  807.710130][T10817] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  807.723188][T10829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  807.746604][T10817] JBD2: Ignoring recovery information on journal
[  807.754758][T10829] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  807.835434][T10817] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  808.734078][ T6774] ocfs2: Unmounting device (7,7) on (node local)
[  809.211435][T10827] loop2: detected capacity change from 0 to 32768
[  809.612589][T10827] JBD2: Ignoring recovery information on journal
[  810.605606][T10827] JBD2: recovery failed
[  810.655730][T10827] (syz.2.1481,10827,0):ocfs2_journal_load:1134 ERROR: Failed to load journal!
[  810.778074][T10827] (syz.2.1481,10827,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5
[  810.896022][T10827] (syz.2.1481,10827,0):ocfs2_check_volume:2489 ERROR: status = -5
[  811.056813][T10827] (syz.2.1481,10827,0):ocfs2_mount_volume:1821 ERROR: status = -5
[  811.489710][T10827] (syz.2.1481,10827,0):ocfs2_fill_super:1176 ERROR: status = -5
[  811.527863][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  812.038021][T10846] loop4: detected capacity change from 0 to 1024
[  813.724907][T10846] EXT4-fs: Ignoring removed nomblk_io_submit option
[  813.812932][T10849] loop7: detected capacity change from 0 to 4096
[  813.874545][T10846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  814.277374][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  814.733522][T10849] EXT4-fs (loop7): Test dummy encryption mode enabled
[  814.757931][T10849] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  814.788382][T10849] System zones: 0-5
[  814.803552][T10849] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  815.069763][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  815.271438][T10870] loop5: detected capacity change from 0 to 32768
[  815.279543][T10870] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  815.640794][ T6892] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  816.989913][ T8437] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  817.251444][ T8437] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  817.341590][ T8437] usb 6-1: config 0 interface 0 has no altsetting 0
[  817.463819][ T8437] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  817.579615][ T8437] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  817.704458][ T8437] usb 6-1: Product: syz
[  817.793490][ T8437] usb 6-1: Manufacturer: syz
[  817.873301][ T8437] usb 6-1: SerialNumber: syz
[  818.039389][ T8437] usb 6-1: config 0 descriptor??
[  818.252511][ T8437] usb 6-1: selecting invalid altsetting 0
[  819.112101][ T8437] usb 6-1: USB disconnect, device number 20
[  819.234079][ T6799] udevd[6799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  819.463006][T10910] loop7: detected capacity change from 0 to 512
[  819.517856][T10910] EXT4-fs: Ignoring removed nomblk_io_submit option
[  819.576362][T10910] EXT4-fs: Ignoring removed mblk_io_submit option
[  819.654576][T10910] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  819.679941][T10910] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  819.705252][T10916] syzkaller0: tun_chr_ioctl cmd 1074025677
[  819.746767][T10916] syzkaller0: linktype set to 825
[  819.755443][T10910] EXT4-fs (loop7): 1 truncate cleaned up
[  819.768078][T10910] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  819.852399][T10910] EXT4-fs (loop7): shut down requested (2)
[  820.019410][T10920] loop1: detected capacity change from 0 to 1024
[  820.031518][T10920] EXT4-fs: Ignoring removed orlov option
[  820.080344][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  820.097731][T10922] loop5: detected capacity change from 0 to 512
[  820.204705][T10920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  820.222182][T10920] System zones: 0-1, 3-12
[  820.263775][T10920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  821.225360][T10933] loop7: detected capacity change from 0 to 2048
[  821.257443][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  821.299130][T10936] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  821.361558][   T26] audit: type=1800 audit(1778680482.228:118): pid=10933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1514" name="file1" dev="loop7" ino=15 res=0 errno=0
[  821.382680][    C0] vkms_vblank_simulate: vblank timer overrun
[  823.886240][T10936] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  824.081811][T10936] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  824.373776][T10936] Remounting filesystem read-only
[  824.410925][T10941] NILFS (loop7): mounting fs with errors
[  824.438349][T10936] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  824.494563][T10936] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  824.534573][T10936] Remounting filesystem read-only
[  824.565219][ T6774] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  824.903898][ T5117] Bluetooth: hci2: Frame reassembly failed (-84)
[  825.456527][ T8437] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  825.613917][T10978] loop1: detected capacity change from 0 to 512
[  825.666692][ T8437] usb 8-1: Using ep0 maxpacket: 16
[  825.674759][T10978] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  825.686131][ T8437] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  825.723439][T10978] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  825.731050][ T8437] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  825.754838][ T8437] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  825.764750][ T8437] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.794165][ T8437] usb 8-1: config 0 descriptor??
[  825.872431][T10989] serio: Serial port ttyS3
[  826.122359][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  826.864977][ T8437] usb 8-1: string descriptor 0 read error: -71
[  826.962360][ T8437] usb 8-1: Max retries (5) exceeded reading string descriptor 200
[  826.993463][ T8437] letsketch: probe of 0003:6161:4D15.000D failed with error -32
[  827.077308][ T6424] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  827.202804][ T8437] usb 8-1: USB disconnect, device number 12
[  828.390041][T11014] loop2: detected capacity change from 0 to 164
[  829.787229][T11035] loop5: detected capacity change from 0 to 256
[  829.912958][T11035] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  831.372016][T11054] loop1: detected capacity change from 0 to 512
[  831.504962][T11054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  831.578641][T11054] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  832.329758][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'.
[  832.396376][T11077] loop4: detected capacity change from 0 to 256
[  832.890569][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  832.900951][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  833.809130][T11089] device syz_tun entered promiscuous mode
[  833.855628][T11089] device syz_tun left promiscuous mode
[  835.112227][T11102] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1573'.
[  835.126050][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  835.736745][T11109] loop4: detected capacity change from 0 to 512
[  835.905448][T11109] EXT4-fs: Ignoring removed orlov option
[  836.023633][T11109] EXT4-fs (loop4): Test dummy encryption mode enabled
[  836.188960][T11109] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  836.343150][T11109] EXT4-fs (loop4): 1 truncate cleaned up
[  836.348948][T11109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  836.504443][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'.
[  836.695735][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  836.995717][T11104] loop5: detected capacity change from 0 to 32768
[  837.028948][ T8435] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  837.181527][T11104] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1575 (11104)
[  837.315416][ T8435] usb 2-1: Using ep0 maxpacket: 32
[  837.348119][ T8435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024
[  837.523987][ T8435] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  837.607390][T11104] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  837.692505][ T8435] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  837.762067][T11104] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  837.813628][ T8435] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  837.884853][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'.
[  837.899856][T11104] BTRFS info (device loop5): enabling auto defrag
[  837.929201][ T8435] usb 2-1: Product: syz
[  837.975111][ T8435] usb 2-1: Manufacturer: syz
[  837.988503][T11104] BTRFS info (device loop5): force clearing of disk cache
[  838.048291][ T8435] usb 2-1: SerialNumber: syz
[  838.079125][T11104] BTRFS info (device loop5): turning on sync discard
[  838.169510][T11104] BTRFS info (device loop5): enabling disk space caching
[  838.181407][ T8435] usb 2-1: config 0 descriptor??
[  838.187517][T11104] BTRFS info (device loop5): setting nodatacow, compression disabled
[  838.197042][T11104] BTRFS info (device loop5): disk space caching is enabled
[  838.205089][T11124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  838.579230][T11150] loop4: detected capacity change from 0 to 512
[  838.637087][T11150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  838.687839][T11150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  838.785933][T11150] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  839.011976][T11155] loop2: detected capacity change from 0 to 512
[  839.179023][ T9516] usb 2-1: USB disconnect, device number 21
[  839.250587][T11104] BTRFS error (device loop5): open_ctree failed: -22
[  839.285349][T11155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  839.305408][T11155] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  839.319685][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  839.486831][T11021] syz.7.1545 (11021): drop_caches: 1
[  839.995901][T11170] loop5: detected capacity change from 0 to 512
[  840.323969][T11170] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  840.513940][T11170] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  841.666030][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  842.640896][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1606'.
[  842.882140][ T8435] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  842.948069][T11222] loop4: detected capacity change from 0 to 128
[  843.026299][T11222] EXT4-fs (loop4): Test dummy encryption mode enabled
[  843.041182][T11224] loop1: detected capacity change from 0 to 64
[  843.066213][T11222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  843.078965][T11222] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  843.085278][ T8435] usb 6-1: Using ep0 maxpacket: 32
[  843.116002][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  843.122622][ T8435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024
[  843.155828][T11224] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  843.171789][ T8435] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  843.203536][T11228] loop7: detected capacity change from 0 to 512
[  843.234548][T11228] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  843.255149][ T8435] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  843.310454][ T8435] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  843.346371][ T8435] usb 6-1: Product: syz
[  843.353803][ T8435] usb 6-1: Manufacturer: syz
[  843.359557][ T8435] usb 6-1: SerialNumber: syz
[  843.389435][ T8435] usb 6-1: config 0 descriptor??
[  843.396242][T11214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  843.429029][T11228] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1611: bg 0: block 104: invalid block bitmap
[  843.512458][T11228] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  843.522200][T11228] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1611: invalid indirect mapped block 1 (level 1)
[  843.541048][T11228] EXT4-fs (loop7): 1 truncate cleaned up
[  843.548000][T11228] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  843.645306][ T8437] usb 6-1: USB disconnect, device number 21
[  843.707405][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  843.753570][  T128] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  843.969678][T11222] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  843.982756][  T128] usb 3-1: Using ep0 maxpacket: 32
[  844.018400][  T128] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  844.057668][  T128] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  844.098375][  T128] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  844.119540][  T128] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  844.139430][  T128] usb 3-1: Product: syz
[  844.144236][  T128] usb 3-1: Manufacturer: syz
[  844.150209][  T128] usb 3-1: SerialNumber: syz
[  844.162736][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  844.307108][  T128] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input19
[  844.861721][ T9516] usb 3-1: USB disconnect, device number 17
[  845.386048][ T9516] appletouch 3-1:1.0: input: appletouch disconnected
[  845.517102][T11237] loop1: detected capacity change from 0 to 32768
[  845.604843][T11237] ERROR: (device loop1): diWrite: ixpxd invalid
[  845.604843][T11237] 
[  845.668394][T11237] ERROR: (device loop1): remounting filesystem as read-only
[  845.702199][T11237] ERROR: (device loop1): txCommit: 
[  845.702199][T11237] 
[  845.944395][T11259] loop7: detected capacity change from 0 to 4096
[  845.993911][T11259] EXT4-fs: inline encryption not supported
[  846.006177][T11259] EXT4-fs (loop7): Test dummy encryption mode enabled
[  846.059168][T11259] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  846.077280][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1623'.
[  846.079879][T11259] System zones: 0-5
[  846.130056][T11259] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  846.173323][T11262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1623'.
[  846.210219][T11265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1624'.
[  846.210545][T11270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1623'.
[  846.263192][T11270] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1623'.
[  846.432405][T11249] loop4: detected capacity change from 0 to 32768
[  846.494997][T11249] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1617 (11249)
[  846.586117][T11249] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  846.635335][T11249] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  846.669615][T11249] BTRFS info (device loop4): enabling auto defrag
[  846.688402][T11249] BTRFS info (device loop4): use no compression
[  846.694876][T11249] BTRFS info (device loop4): max_inline at 4096
[  846.778712][T11249] BTRFS info (device loop4): using free space tree
[  846.810264][T11259] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  846.825735][T11259] overlayfs: upper fs does not support tmpfile.
[  846.927040][T11259] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  847.136143][T11249] BTRFS info (device loop4): enabling ssd optimizations
[  847.207332][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  847.698209][T11318] loop7: detected capacity change from 0 to 1024
[  847.728159][T11321] loop1: detected capacity change from 0 to 64
[  847.769961][T11318] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[  847.835369][T11318] System zones: 0-1, 3-36
[  847.857484][ T4283] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  847.910351][T11318] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.1633: bad orphan inode 134217728
[  847.992884][   T26] audit: type=1800 audit(1778680507.149:119): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1634" name="file1" dev="loop1" ino=21 res=0 errno=0
[  848.042119][T11318] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  849.208175][ T6424] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  849.215977][ T4278] Bluetooth: hci2: command 0x1003 tx timeout
[  849.557052][T11330] loop2: detected capacity change from 0 to 512
[  849.615920][ T6774] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr
[  849.668594][ T6774] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr
[  849.814383][T11330] FAT-fs (loop2): FAT read failed (blocknr 128)
[  850.151542][T11339] loop5: detected capacity change from 0 to 64
[  850.725132][ T9516] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  850.725160][T11343] loop5: detected capacity change from 0 to 256
[  850.815212][T11345] loop1: detected capacity change from 0 to 512
[  850.849331][T11343] FAT-fs (loop5): Directory bread(block 64) failed
[  850.879809][T11343] FAT-fs (loop5): Directory bread(block 65) failed
[  850.905726][T11343] FAT-fs (loop5): Directory bread(block 66) failed
[  850.934237][T11343] FAT-fs (loop5): Directory bread(block 67) failed
[  850.950084][ T9516] usb 3-1: Using ep0 maxpacket: 32
[  850.962076][T11343] FAT-fs (loop5): Directory bread(block 68) failed
[  850.979946][ T9516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  850.983466][T11343] FAT-fs (loop5): Directory bread(block 69) failed
[  851.024439][ T9516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  851.045137][T11343] FAT-fs (loop5): Directory bread(block 70) failed
[  851.067368][ T9516] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  851.076672][ T9516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.089338][T11343] FAT-fs (loop5): Directory bread(block 71) failed
[  851.118457][T11343] FAT-fs (loop5): Directory bread(block 72) failed
[  851.123400][ T9516] usb 3-1: config 0 descriptor??
[  851.152398][T11343] FAT-fs (loop5): Directory bread(block 73) failed
[  851.199699][T11337] loop4: detected capacity change from 0 to 32768
[  851.253380][T11337] find_entry called with index >= next_index
[  851.272292][T11337] find_entry called with index >= next_index
[  851.279217][T11337] find_entry called with index >= next_index
[  851.285899][T11337] find_entry called with index >= next_index
[  851.292274][T11337] find_entry called with index >= next_index
[  851.298458][T11337] add_index: next_index = 0.  Resetting!
[  851.378232][T11337] find_entry called with index >= next_index
[  851.409743][T11337] find_entry called with index >= next_index
[  851.415940][T11337] find_entry called with index >= next_index
[  851.488987][ T6774] EXT4-fs (loop7): unmounting filesystem.
[  851.495191][T11337] non-latin1 character 0x3ff found in JFS file name
[  851.502983][T11337] mount with iocharset=utf8 to access
[  851.619676][ T9516] nintendo 0003:057E:200E.000E: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0
[  851.807489][ T9516] nintendo 0003:057E:200E.000E: Failed charging grip handshake
[  851.840477][ T9516] nintendo 0003:057E:200E.000E: Failed to initialize controller; ret=-110
[  851.902203][ T9516] nintendo 0003:057E:200E.000E: probe - fail = -110
[  851.914409][ T4622] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  851.952485][ T9516] nintendo: probe of 0003:057E:200E.000E failed with error -110
[  852.012847][ T9516] usb 3-1: USB disconnect, device number 18
[  852.026690][ T4622] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.321650][ T4622] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  852.371740][ T4622] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.737630][T11357] fido_id[11357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  853.422516][ T4622] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  853.502380][ T4622] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.585172][T11374] loop1: detected capacity change from 0 to 512
[  853.703483][T11374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  853.751486][ T4622] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  853.771241][T11374] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  853.804609][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  853.821550][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  853.827550][ T4622] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.840665][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  853.849853][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  853.860892][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  853.871358][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  854.001406][T11378] lo speed is unknown, defaulting to 1000
[  854.096321][T11383] loop2: detected capacity change from 0 to 256
[  854.109693][T11386] loop4: detected capacity change from 0 to 512
[  854.121194][T11383] exfat: Deprecated parameter 'utf8'
[  854.167981][T11383] exfat: Deprecated parameter 'utf8'
[  854.198076][T11383] exfat: Deprecated parameter 'utf8'
[  854.206044][T11383] exfat: Deprecated parameter 'utf8'
[  854.215909][T11386] FAT-fs (loop4): Directory bread(block 199916) failed
[  854.238897][T11386] FAT-fs (loop4): Directory bread(block 199917) failed
[  854.263824][T11386] FAT-fs (loop4): Directory bread(block 199918) failed
[  854.284263][T11386] FAT-fs (loop4): Directory bread(block 199919) failed
[  854.294268][T11386] FAT-fs (loop4): Directory bread(block 199920) failed
[  854.301723][T11386] FAT-fs (loop4): Directory bread(block 199921) failed
[  854.308992][T11386] FAT-fs (loop4): Directory bread(block 199922) failed
[  854.316306][T11386] FAT-fs (loop4): Directory bread(block 199923) failed
[  854.339804][T11383] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  854.425794][T11386] FAT-fs (loop4): Directory bread(block 199916) failed
[  854.561996][T11386] FAT-fs (loop4): Directory bread(block 199917) failed
[  854.571376][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  854.589542][T11388] loop5: detected capacity change from 0 to 512
[  854.757120][T11388] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  854.830808][T11388] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  854.977559][ T4622] tipc: Left network mode
[  855.367012][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  855.956719][T11411] loop5: detected capacity change from 0 to 128
[  856.047198][ T6424] Bluetooth: hci1: command 0x0409 tx timeout
[  856.106413][T11408] loop1: detected capacity change from 0 to 1024
[  856.234085][T11408] EXT4-fs: Ignoring removed orlov option
[  856.435869][T11378] chnl_net:caif_netlink_parms(): no params data found
[  856.459812][T11411] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  856.493224][T11408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  856.498939][T11411] hpfs: filesystem error: improperly stopped
[  856.529695][T11411] hpfs: You really don't want any checks? You are crazy...
[  856.537947][T11411] hpfs: hpfs_map_sector(): read error
[  856.554290][T11411] hpfs: code page support is disabled
[  856.562385][T11411] hpfs: hpfs_map_4sectors(): unaligned read
[  856.569082][T11411] hpfs: hpfs_map_4sectors(): unaligned read
[  856.575739][T11411] hpfs: filesystem error: unable to find root dir
[  856.848282][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  857.142523][T11428] loop2: detected capacity change from 0 to 512
[  857.198365][T11431] loop1: detected capacity change from 0 to 64
[  857.227042][T11428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  857.300607][T11428] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  857.561550][T11438] loop4: detected capacity change from 0 to 64
[  857.831505][T11378] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.840061][T11378] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.865055][T11378] device bridge_slave_0 entered promiscuous mode
[  857.933807][T11449] loop1: detected capacity change from 0 to 256
[  857.975515][T11449] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  858.051848][T11448] loop4: detected capacity change from 0 to 512
[  858.087657][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  858.107995][   T26] audit: type=1800 audit(1778680516.610:120): pid=11449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1674" name="file1" dev="loop1" ino=1048732 res=0 errno=0
[  858.139236][T11378] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.190972][T11378] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.270095][ T6424] Bluetooth: hci1: command 0x041b tx timeout
[  858.293626][T11448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  858.312394][T11378] device bridge_slave_1 entered promiscuous mode
[  858.462298][T11448] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  858.890279][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  859.024097][T11460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1676'.
[  859.145074][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  859.187054][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  859.688580][T11378] team0: Port device team_slave_0 added
[  859.938628][T11457] loop1: detected capacity change from 0 to 32768
[  860.124841][ T4622] bond0: (slave wlan1): Releasing backup interface
[  860.145268][T11378] team0: Port device team_slave_1 added
[  860.492586][ T6424] Bluetooth: hci1: command 0x040f tx timeout
[  860.835678][T11497] loop1: detected capacity change from 0 to 512
[  860.854545][T11497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  860.957690][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  860.969920][T11497] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  861.028140][T11497] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  861.056734][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  861.090765][T11497] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  861.125756][T11497] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  861.141385][T11497] EXT4-fs (loop1): orphan cleanup on readonly fs
[  861.196717][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  861.216695][T11497] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1688: bg 0: block 34: padding at end of block bitmap is not set
[  861.278416][T11497] Quota error (device loop1): write_blk: dquota write failed
[  861.315667][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  861.363433][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  861.436168][T11497] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  861.540060][T11497] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1688: Failed to acquire dquot type 1
[  861.604042][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  861.617075][T11497] EXT4-fs (loop1): 1 truncate cleaned up
[  861.678329][T11497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  862.370755][T11497] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.1688: deleted inode referenced: 12
[  862.715389][ T6424] Bluetooth: hci1: command 0x0419 tx timeout
[  862.777883][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  862.789720][T11378] device hsr_slave_0 entered promiscuous mode
[  862.894281][T11378] device hsr_slave_1 entered promiscuous mode
[  862.915133][T11511] loop1: detected capacity change from 0 to 128
[  862.922057][T11378] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  862.975003][T11378] Cannot create hsr debugfs directory
[  862.989102][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1690'.
[  862.997700][T11511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  863.057731][T11511] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  863.111947][T11511] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x19)
[  863.130162][ T4622] device hsr_slave_0 left promiscuous mode
[  863.147648][ T4622] device hsr_slave_1 left promiscuous mode
[  863.168256][ T4622] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  863.191845][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_0
[  863.210474][ T4622] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  863.225529][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_1
[  863.237011][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  863.246850][ T4622] device bridge_slave_1 left promiscuous mode
[  863.296935][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.338401][ T4622] device bridge_slave_0 left promiscuous mode
[  863.346762][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.547050][T11527] loop4: detected capacity change from 0 to 256
[  863.563761][ T4622] device veth1_macvtap left promiscuous mode
[  863.594202][ T4622] device veth0_macvtap left promiscuous mode
[  863.617036][ T4622] device veth1_vlan left promiscuous mode
[  863.661471][T11527] FAT-fs (loop4): Directory bread(block 64) failed
[  863.698385][T11527] FAT-fs (loop4): Directory bread(block 65) failed
[  863.723939][T11527] FAT-fs (loop4): Directory bread(block 66) failed
[  863.752989][T11527] FAT-fs (loop4): Directory bread(block 67) failed
[  863.759722][T11527] FAT-fs (loop4): Directory bread(block 68) failed
[  863.797873][T11527] FAT-fs (loop4): Directory bread(block 69) failed
[  863.804625][T11527] FAT-fs (loop4): Directory bread(block 70) failed
[  863.852047][T11527] FAT-fs (loop4): Directory bread(block 71) failed
[  863.873259][T11527] FAT-fs (loop4): Directory bread(block 72) failed
[  863.889534][T11527] FAT-fs (loop4): Directory bread(block 73) failed
[  863.916202][T11534] loop1: detected capacity change from 0 to 512
[  864.039447][T11534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  864.070783][T11534] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  864.881747][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  865.032313][T11546] loop1: detected capacity change from 0 to 512
[  865.125404][T11546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  865.135362][T11546] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  865.438038][T11551] loop4: detected capacity change from 0 to 1024
[  865.524153][T11551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[  865.533926][T11551] System zones: 0-1, 3-36
[  865.564083][T11551] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.1700: bad orphan inode 134217728
[  865.588720][T11551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  865.719677][T11551] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1700: corrupted in-inode xattr
[  865.972228][ T4622] team0 (unregistering): Port device team_slave_1 removed
[  866.033366][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  866.109531][ T4622] team0 (unregistering): Port device team_slave_0 removed
[  866.227815][ T4622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  866.255948][ T4283] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr
[  866.306928][ T4283] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr
[  866.354712][ T4622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.417975][ T6780] EXT4-fs (loop4): unmounting filesystem.
[  867.400412][ T4622] bond0 (unregistering): Released all slaves
[  868.360978][T11378] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  868.446055][T11378] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  868.521153][T11378] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  868.546738][T11570] loop5: detected capacity change from 0 to 512
[  868.563535][T11378] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  868.655314][T11572] loop1: detected capacity change from 0 to 4096
[  868.705347][T11570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  868.748915][T11570] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  869.186292][T11378] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.232969][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  869.306191][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  869.440330][T11378] 8021q: adding VLAN 0 to HW filter on device team0
[  869.515946][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  869.569485][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  869.629790][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  869.638676][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.645940][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  869.718645][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  869.964486][T11592] loop5: detected capacity change from 0 to 32768
[  869.995097][T11592] (syz.5.1712,11592,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  870.011262][T11592] (syz.5.1712,11592,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  870.079111][ T6424] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  870.091736][ T6424] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  870.101843][ T6424] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  870.112697][ T6424] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  870.160347][ T4622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  870.203009][T11592] (syz.5.1712,11592,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  870.237137][T11592] JBD2: Ignoring recovery information on journal
[  870.341520][ T6424] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  870.402516][ T6424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  870.704079][ T4622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.767622][T11592] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  870.977037][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  870.986542][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  870.998550][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.006444][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  871.015861][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  871.041604][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  871.063833][T11592] (syz.5.1712,11592,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  871.079074][T11592] (syz.5.1712,11592,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  871.093460][T11592] (syz.5.1712,11592,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  871.104366][T11592] (syz.5.1712,11592,0):ocfs2_quota_read:201 ERROR: status = -5
[  871.112049][T11592] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 5
[  871.121861][T11592] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  871.131608][T11592] (syz.5.1712,11592,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  871.143150][T11592] (syz.5.1712,11592,0):ocfs2_symlink:1879 ERROR: status = -5
[  871.150990][T11592] (syz.5.1712,11592,0):ocfs2_symlink:2065 ERROR: status = -5
[  871.211928][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  871.279521][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  871.325612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  871.369469][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  871.406332][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  871.436428][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  871.462451][ T5281] ocfs2: Unmounting device (7,5) on (node local)
[  871.478389][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  871.655012][ T4622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  871.678110][ T4622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.803949][T11593] lo speed is unknown, defaulting to 1000
[  871.812046][T11378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  871.854106][T11378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  871.881562][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  871.934516][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  872.045305][ T4622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  872.065762][ T4622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.292254][ T4622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  872.326801][ T4622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.595506][T11608] loop2: detected capacity change from 0 to 32768
[  872.631984][ T4278] Bluetooth: hci2: command 0x0409 tx timeout
[  872.670543][T11612] loop1: detected capacity change from 0 to 32768
[  872.689092][T11608] XFS (loop2): Mounting V5 Filesystem
[  872.709775][T11612] XFS (loop1): Mounting V5 Filesystem
[  872.755732][T11612] XFS (loop1): Ending clean mount
[  872.844214][ T4284] XFS (loop1): Unmounting Filesystem
[  872.850769][T11608] XFS (loop2): Ending clean mount
[  872.924092][T11608] XFS (loop2): Quotacheck needed: Please wait.
[  873.157180][ T4622] tipc: Left network mode
[  873.159278][T11608] XFS (loop2): Quotacheck: Done.
[  873.358075][   T26] audit: type=1800 audit(1778680530.881:121): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1715" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  873.516751][T11593] chnl_net:caif_netlink_parms(): no params data found
[  873.810622][ T4272] XFS (loop2): Unmounting Filesystem
[  874.316616][T11650] loop1: detected capacity change from 0 to 512
[  874.374887][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  874.383081][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  874.446124][T11650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  874.457221][T11650] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  874.536386][T11378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  874.854540][ T4278] Bluetooth: hci2: command 0x041b tx timeout
[  875.099987][T11593] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.122942][T11593] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.176665][T11593] device bridge_slave_0 entered promiscuous mode
[  875.213519][T11593] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.221780][T11593] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.268194][T11593] device bridge_slave_1 entered promiscuous mode
[  875.353896][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  875.391960][T11668] loop2: detected capacity change from 0 to 512
[  875.404789][T11668] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  875.571565][T11672] loop1: detected capacity change from 0 to 16
[  875.595891][T11672] erofs: (device loop1): mounted with root inode @ nid 36.
[  875.604286][T11593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  875.650248][T11593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  876.598005][T11593] team0: Port device team_slave_0 added
[  876.926843][T11593] team0: Port device team_slave_1 added
[  877.052470][T11593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  877.077354][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[  877.100767][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  877.197889][T11593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  877.448591][T11593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  877.583963][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  877.967389][T11593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  879.300217][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[  879.994309][T11700] loop1: detected capacity change from 0 to 256
[  880.034757][T11593] device hsr_slave_0 entered promiscuous mode
[  880.065482][T11691] mmap: syz.2.1727 (11691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  880.119652][T11593] device hsr_slave_1 entered promiscuous mode
[  880.145824][T11700] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  880.330018][T11703] loop5: detected capacity change from 0 to 512
[  880.408151][T11703] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  880.503960][T11703] EXT4-fs (loop5): 1 truncate cleaned up
[  880.557332][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  880.575969][T11703] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  880.604561][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  880.725415][T11714] loop2: detected capacity change from 0 to 512
[  880.791559][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  880.808072][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  880.879018][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  880.898520][T11714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  880.913899][T11714] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  880.916944][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  881.159070][T11378] device veth0_vlan entered promiscuous mode
[  881.197133][ T5281] EXT4-fs (loop5): unmounting filesystem.
[  881.315141][T11378] device veth1_vlan entered promiscuous mode
[  881.422942][ T4622] device hsr_slave_0 left promiscuous mode
[  881.449013][ T4622] device hsr_slave_1 left promiscuous mode
[  881.465271][ T4622] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  881.485437][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_0
[  881.497954][ T4622] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  881.507126][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_1
[  881.613290][ T4622] device veth1_to_bridge left promiscuous mode
[  881.635920][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  881.710870][ T4622] bridge0: port 4(veth1_to_bridge) entered disabled state
[  881.801741][ T4622] device dummy0 left promiscuous mode
[  881.808541][ T4622] bridge0: port 3(dummy0) entered disabled state
[  881.817438][ T4622] device bridge_slave_1 left promiscuous mode
[  881.825276][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.836014][ T4622] device bridge_slave_0 left promiscuous mode
[  881.844798][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.908915][ T4622] device veth1_macvtap left promiscuous mode
[  881.915692][ T4622] device veth1_vlan left promiscuous mode
[  881.922183][ T4622] device veth0_vlan left promiscuous mode
[  883.605594][ T4622] team0 (unregistering): Port device macvlan0 removed
[  884.230777][ T4622] team0 (unregistering): Port device team_slave_1 removed
[  884.315843][ T4622] team0 (unregistering): Port device team_slave_0 removed
[  884.422218][ T4622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  884.508923][ T4622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  885.149985][ T4622] bond0 (unregistering): Released all slaves
[  885.316749][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  885.378034][ T9516] lo speed is unknown, defaulting to 1000
[  885.523787][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  885.590692][T11739] loop5: detected capacity change from 0 to 2048
[  885.608036][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  885.677485][T11739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  885.694564][T11378] device veth0_macvtap entered promiscuous mode
[  885.731811][T11378] device veth1_macvtap entered promiscuous mode
[  886.134976][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.334043][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.505771][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.679797][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.861389][T11378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.877071][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  886.921810][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  887.026970][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  887.085476][T11757] loop5: detected capacity change from 0 to 64
[  887.187510][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  887.388070][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.421716][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.435212][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.460089][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.485154][ T5133] ------------[ cut here ]------------
[  887.491512][ T5133] kernel BUG at fs/hfs/inode.c:449!
[  887.504548][T11378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  887.513207][ T5133] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  887.520405][ T5133] CPU: 1 PID: 5133 Comm: kworker/u4:28 Not tainted syzkaller #0
[  887.528084][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  887.539231][ T5133] Workqueue: writeback wb_workfn (flush-7:5)
[  887.546270][ T5133] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  887.552771][ T5133] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 b0 0a 87 ff e9 47 fe ff ff e8 76 fe 35 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  887.573121][ T5133] RSP: 0018:ffffc9000d58f3a0 EFLAGS: 00010293
[  887.579215][ T5133] RAX: ffffffff824c76da RBX: ffff8880590f5c98 RCX: ffff8880250b3b80
[  887.587416][ T5133] RDX: 0000000000000000 RSI: ffffffff8cd25620 RDI: 0000000000000000
[  887.595797][ T5133] RBP: ffffc9000d58f530 R08: ffff8880250b3b80 R09: 0000000000000003
[  887.604067][ T5133] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  887.612608][ T5133] R13: 1ffff92001ab1e78 R14: 0000000000000000 R15: ffff8880590f5c58
[  887.620790][ T5133] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  887.629992][ T5133] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  887.636589][ T5133] CR2: 0000565510936950 CR3: 000000006483a000 CR4: 00000000003506e0
[  887.644599][ T5133] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  887.653041][ T5133] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  887.661472][ T5133] Call Trace:
[  887.664788][ T5133]  <TASK>
[  887.667761][ T5133]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  887.673266][ T5133]  ? __writeback_single_inode+0x4ae/0x1160
[  887.679174][ T5133]  ? __rwlock_init+0x140/0x140
[  887.684042][ T5133]  __writeback_single_inode+0x75b/0x1160
[  887.689695][ T5133]  writeback_sb_inodes+0xb30/0x1850
[  887.695388][ T5133]  ? queue_io+0x5a0/0x5a0
[  887.699869][ T5133]  ? rcu_is_watching+0x11/0xa0
[  887.704847][ T5133]  wb_writeback+0x482/0xd50
[  887.709374][ T5133]  ? percpu_ref_tryget+0x250/0x250
[  887.714527][ T5133]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  887.720565][ T5133]  ? _raw_spin_unlock_irq+0x1f/0x40
[  887.725957][ T5133]  wb_workfn+0x423/0xee0
[  887.730244][ T5133]  ? inode_wait_for_writeback+0x220/0x220
[  887.736109][ T5133]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  887.742228][ T5133]  ? read_lock_is_recursive+0x10/0x10
[  887.747655][ T5133]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  887.753602][ T5133]  ? _raw_spin_unlock+0x40/0x40
[  887.758506][ T5133]  ? _raw_spin_unlock_irq+0x1f/0x40
[  887.763754][ T5133]  ? process_one_work+0x7b0/0x1160
[  887.768971][ T5133]  process_one_work+0x8a2/0x1160
[  887.774027][ T5133]  ? worker_detach_from_pool+0x240/0x240
[  887.779686][ T5133]  ? _raw_spin_lock_irq+0xb7/0xf0
[  887.784727][ T5133]  ? _raw_spin_lock_irqsave+0x100/0x100
[  887.790566][ T5133]  ? kthread_data+0x4b/0xc0
[  887.795110][ T5133]  worker_thread+0xaa2/0x1270
[  887.799835][ T5133]  kthread+0x29d/0x330
[  887.804546][ T5133]  ? worker_clr_flags+0x1a0/0x1a0
[  887.809957][ T5133]  ? kthread_blkcg+0xd0/0xd0
[  887.815530][ T5133]  ret_from_fork+0x1f/0x30
[  887.820277][ T5133]  </TASK>
[  887.823412][ T5133] Modules linked in:
[  887.840741][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  887.870461][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  887.917171][T11378] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  887.945008][T11378] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.964892][T11378] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.987680][T11378] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  888.128095][T11593] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  888.152625][T11593] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  888.163985][T11593] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  888.171406][ T5133] ---[ end trace 0000000000000000 ]---
[  888.179423][T11593] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  888.188965][ T5133] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  888.200052][ T5133] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 b0 0a 87 ff e9 47 fe ff ff e8 76 fe 35 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  888.239010][T11378] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
[  888.250937][ T5133] RSP: 0018:ffffc9000d58f3a0 EFLAGS: 00010293
[  888.259454][ T5133] RAX: ffffffff824c76da RBX: ffff8880590f5c98 RCX: ffff8880250b3b80
[  888.268417][ T5133] RDX: 0000000000000000 RSI: ffffffff8cd25620 RDI: 0000000000000000
[  888.276837][ T5133] RBP: ffffc9000d58f530 R08: ffff8880250b3b80 R09: 0000000000000003
[  888.284930][ T5133] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  888.294251][ T5133] R13: 1ffff92001ab1e78 R14: 0000000000000000 R15: ffff8880590f5c58
[  888.302526][ T5133] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  888.314990][ T5133] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  888.343122][ T5129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.357246][T11378] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  888.362366][ T5133] CR2: 0000565510936950 CR3: 000000007e5be000 CR4: 00000000003506e0
[  888.373052][ T5129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.407576][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  888.416088][ T5133] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  888.425546][ T5133] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  888.453671][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.473967][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.481066][ T5133] Kernel panic - not syncing: Fatal exception
[  888.482371][ T5133] Kernel Offset: disabled
[  888.493175][ T5133] Rebooting in 86400 seconds..