last executing test programs:

5m51.430684821s ago: executing program 32 (id=111):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x20040000)

4m43.235954206s ago: executing program 0 (id=478):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f00000005c0)={[{@block_validity}, {}, {@noacl}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e)
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), 0x0, 0x700, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0xa54ec2991df72bc, 0x0, 0x0, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEWQI9O6QHLxocipJ6KFjaDogW0D+BQwmNm34pKiIloUJUr+fGzquzv73ux7M6s3FME3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD945dzxE2m7pT9Y293WAAAPwoWxrxw/ue3rPwDwOLj0of79DwAAAAAAAAAAAAAAPAQpingyUsxeWE0T1fOu+vnOwI2b4yOjW1c7kKqa+6ry5Vf9xMlTp7/4wvCZXp7vTK/XH9ztbnw6Xhu7dK7x8sz12bn2/Hx7sjE+3bkyM9ne9h52Wn+zo9UBaFx//cbk1avzjZPPn9rw8s2h9wefODx0dvjZY8/0yo6PjI6OrRep95ev3XNDuu40w2N/FHEsUjz33Z+mVkQUsfNjUd9w7h+4A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGW5+LqA080D7cWTNisWx+2eCjZffGZltzrctT7cbF1txCZ6EzM30xdVtb9qcRRZxJEUsRsbLFX8OBKKIWKb59aDVdjoh9vePwhWpi8J3bUexiH7ehbGdjIGKpeATO2R42GEW8Gil+9s6RuJLHmWqs+XzEq2V+P+KtMl+KSOUH43TEe7s+nPOg1KKIvyzP/9nVNFmNB71x5fxXG1+evjrTV7Y3rnzI68NtI8VDuj4c2JQPxh4fm+pRRKsa8VfTvX+zAwAAAAAAAAAAAAAAAMD9diCK+FSkeOXf/6SaVxzVvPRDZ4f/cOhX++eMP32X/ZRln4+IxWJ7c3L354mBF9PFlB7yXOKPsnoU8ad5/t83H3ZjAAAAAAAAAAAAAAAAAAAAPtKK+EmkePHdI2kp+tcU70xfa1xqXZ7qrgrbW/u3t2b62traWiN1s5lzIudizqWcyzlXckaR6+ds5pzIuZhzKedyzpWcsS/Xz9nMOZFzMedSzuWcKzmjluvnbOacyLmYcykvur+cn6/kjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Him+9fXVFCkimhET0c3lwYfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNJiK+F6kaPxR89a2WkSk6v+uI+Ufp6O5v8yPR3O4zJeieS5nq8pa85sPof3szEAq4seRYrD+9q0Tns//QPfZrY9BvPWN9WefrnVzX+/FofcHnzh86Ozw6G88fafHaasGHD3fmb5xszE+Mjo61re5lt/9433bhvL7Fven60TE/Btvvt6ammrP3fuD8iOwg+qP0INU+6j09NF+8Jv3a4dR2wvdeTgP7j52/P+DGKDYVeX1/71I8bvv/kfvgt+9/tfjV7rPbl3h44M/W7/+v7h5R9u8/tc218vX//KavtX1/8m+bS/m70YGahH1heuzA4cj6vNvvHmsc711rX2tPX36+PEvDQ9/6dTxgf0R9audqXb3UYqp9vH7crgAAAAAAAAAAAAAAAAAHpxUxO9HitaPV1MjIm5W87WGzg4/e+yZfbGvmm+1Yd72a2OXzjVenrk+O9een29PNsanO1dmJtvbfbt6Nd1rfGR0VzpzVwd2uf0H6i/PzL4x17n2xwtbvn6wfu7y/MJc68rWL8eBKCKa/VuOVg0eHxmtGj3VaU1XVS9uOZn+wxtIRfxnpLhyupE+m7fl+f+bZ/hvmP+/uHlHuzT//2N928r3TKmIDyLF7/zV0/HZqp0H47Zjlsv9XaQ4euYzuVzsL8v12tC9r0B3jmBZ9n8jxT/9fGPZ3nzIJ9fLntj2gX1ElOf/UKT43l98J34rb9t4/4etz//BzTvapfP/VN+2gxvuV7DjrpPP/7FI8dKTb8fn8rZfdv+P3r03juTCt+7PsUvn/xN924by+/72/ek6AAAAAAAAAADAI20gFfH3keKHo7X0Qt62nd//m9y8o136/a9P9m2bvD/rFd31wY4PKgAAAADsEQOpiJ9EimsLb9+aQ71x/nff/M/fW5//OZI2vVr9nO/XqvsG3M+f//Ubyu87sfNuAwAAAAAAAAAAAAAAAAAAwJ6SUhEv5PXUJ6r5/JN3XE99OVK88t/P5XLpcFmutw78UPVn/cLM9LFzU1MzV1oLrctT7cbYbOtKu6z7VKRY/dvP5LpFtb56b7357hrv62uxz0WK0X/ole2uxd5bm/yp9bInyrIfixT/9Y8by34ul/vEetmTZdm/iRRf+8HtZUuH18ueKst+J1L86GuNXtmDZdne/VE/uV72+R/cuiMCAAAAAAAAAAAAAAAAAAAA3LuBVMSfR4r/ub50ay5/Xv9/oO9p5a1v9K33v8nNap3/oWr9/zs9vpf1/6v7Cize6V0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxlKKINyPF7IXVtDxYPu+qn+9M37g5PjK6dbUDqaq5rypfftVPnDx1+osvDJ/p5S+vf799Kl4bu3Su8fLM9dm59vx8e7IxPt25MjPZ3vYedlp/s6PVAWhcf/3G5NWr842Tz5/a8PLNofcHnzg8dHb42WPP9MqOj4yOjvWVqQ3c87vfJt1h+/4o4q8jxXPf/Wn64WBEETs/Fnf57Oy2A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGD+Bc7EgzYrFsftngo2X3xmZbc63LU+3GxdbcQmehMzN9MXVbW/anEUWcSRFLEbEyePvuBqKI1yPFtw+tpn8ZjNjXOw5fuDD2leMn79yOYhf7uA1lOxsDEUvFI3DO9rDBKOKfI8XP3jkS/zoYUYvuV3w+4tUyvx/xVnTPdyo/GKcj3tvic8SjqRZF/F95/s+upncGy/GgN66c/2rjy9NXZ/rK9saVR/768CDt8bGpHkX8qBrxV9O/+XsNAAAAAAAAAAAAAAAAsIcU8euR4sV3j6RqfvCtOcWd6WuNS63LU91pfb25f70502tra2uN1M1mzomcizmXci7nXMkZRa6fs1lmfW1tIj9fzLmUcznnSs7Yl+vnbOacyLmYcynncs6VnFHL9XM2c07kXMy5lHM550rO2CNz9wAAAAAAAAAAAAAAAAAAgMdLUf2X4ltfX01rg931pSeim8vWA33s/SIAAP//YnX2fg==")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00')

4m42.744714497s ago: executing program 0 (id=486):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e21, @rand_addr=0x64010103}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x80000000000008})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

4m42.296136657s ago: executing program 0 (id=489):
socket$inet6(0xa, 0x3, 0x7)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
setresuid(0xee01, 0xee01, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0)

4m41.422392377s ago: executing program 0 (id=494):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_open_procfs(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000040), 0x1, 0x519, &(0x7f00000009c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})

4m38.503749952s ago: executing program 0 (id=510):
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r0}, 0x38)

4m33.68401877s ago: executing program 0 (id=530):
syz_open_procfs(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004018, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81a81, 0x17e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

4m33.320564738s ago: executing program 33 (id=530):
syz_open_procfs(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004018, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81a81, 0x17e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

3m32.109832427s ago: executing program 2 (id=782):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)

3m29.239677482s ago: executing program 2 (id=787):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e21, @rand_addr=0x64010103}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x80000000000008})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

3m29.118033945s ago: executing program 2 (id=788):
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), 0x0, 0x700, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0xa54ec2991df72bc, 0x0, 0x0, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00')

3m29.000101047s ago: executing program 2 (id=789):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xa688b7, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

3m28.42401402s ago: executing program 2 (id=792):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
io_uring_setup(0xa94, &(0x7f0000000000)={0x0, 0xb14d, 0x800, 0x3, 0x3c8})
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000040)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040)

3m23.612035828s ago: executing program 2 (id=802):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

3m22.583788771s ago: executing program 34 (id=802):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

2m22.640253172s ago: executing program 5 (id=991):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

2m22.544223694s ago: executing program 5 (id=993):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

2m21.581193495s ago: executing program 5 (id=995):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1c}]}, {0x4}]}]}, 0x30}}, 0x4)

2m21.37791237s ago: executing program 5 (id=998):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000a80)=ANY=[], 0xff, 0x17f, &(0x7f0000000340)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x0, 0xf5, 0x20000}, 0x20)

2m21.003947358s ago: executing program 5 (id=1000):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYRESHEX=0x0, @ANYBLOB='Amap=acorn,iocharset=macgaelic,session=0x0000000000000058,mode=0xffffffffffffffff,map=off,check=strict,uid>', @ANYRESDEC=0x0, @ANYBLOB=',cont%|t=user_u,\b'], 0xfa, 0x6bb, &(0x7f00000015c0)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2m18.707220169s ago: executing program 5 (id=1008):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x104, 0x83, 0x0, 0x6a8}, 'syz1\x00', 0x2f})

2m18.306263598s ago: executing program 35 (id=1008):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x104, 0x83, 0x0, 0x6a8}, 'syz1\x00', 0x2f})

2m10.700223739s ago: executing program 7 (id=1054):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@acquire={0x134, 0x17, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast2, 0x4d2, 0x6c}, @in=@empty, {@in6=@mcast2, @in=@multicast2, 0x4e21, 0x4a, 0x4e21, 0xf, 0x2, 0x0, 0xe0}, {{@in6=@mcast1, @in=@empty, 0x4e21, 0x0, 0x4e20, 0x5, 0xa, 0x10, 0x80, 0x29}, {0xb, 0x4, 0x5, 0x16, 0x400, 0x6, 0x9, 0x400}, {0x9, 0x1, 0x7ff0000000, 0x3}, 0x10, 0x6e6bb1, 0x1, 0x1, 0x2}, 0x1, 0x7fff, 0xfff, 0x70bd2a}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x9, 0xfffffffffffffe60}}]}, 0x134}}, 0x4050)

2m10.497389243s ago: executing program 7 (id=1055):
read$FUSE(0xffffffffffffffff, &(0x7f0000008200)={0x2020}, 0x2020)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$eJzsmb/L00AYx7+XtHl/IIqLg4uDL6jgmyapyrt0qOAoiFXUwaHYWKppK22EtiC0uLj4BwiuLo4ODk4O/gWuOqggONjRTTi5yyW9pmlppWjhfT7Qu28ud8/z3FPyHCQgCOLQ8u3rry/PLx/cOA/gCPawpcZ/mFHPj03P//zi8Q5KV16++fTqQ+vok3dpe0ys4cv7twC8L5sIwXLK49TqHU3vqf4mDJxT+hYY7Ej+5pzzvJRD+GC4o+Y80HQ7Nhj49r12ULvfCHxHNK5oPNEUdf8iqPGIoQZgW0bHOdPud/uDh9Ug8Dtpkeexn5lbq4pF+ZPxlQ2UEGePcwPA7WdPR+Ja5QYOjCR/Lgy4ShfBUFH6AFuwbXuSEm3/J3MT++Yy+/+/4rUUx/f/lVORYMEm7F0Iho0IY90ivxY7LD0iHuhk5MQ4roH6nO8r+rrLsDF/gSxcyIjn424QXP1LyyJjVkaiEjGpT4IzWn3KJaNAIWw+KnT7g/1Gs1r3637L84qXnAuOc9EryEIUtQvq37asT7vJSHwGzGIxCz3xoLo9IOy48roahh0varWKW3nb/inXGNfr0eLTUcfUmZUclCmY+hmyF+qsmT1zOHdPBEEQBEEQBEEQBEEQBEEQ2ZwCk29Z1YcqPgfvmnxD+ScAAP//+tFdLw==")
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

2m10.045127763s ago: executing program 7 (id=1057):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x9, 0x2}, {0x9, 0x6}], r1}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)

2m9.195018662s ago: executing program 7 (id=1060):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000a80)=ANY=[], 0xff, 0x17f, &(0x7f0000000340)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x0, 0xf5, 0x20000}, 0x20)

2m8.251281353s ago: executing program 7 (id=1066):
read$FUSE(0xffffffffffffffff, &(0x7f0000008200)={0x2020}, 0x2020)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

2m6.949445092s ago: executing program 7 (id=1069):
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x533863bace190a0, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x24000058)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0xe, "4372071e845c1497c85538300000"}})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a})
socket$netlink(0x10, 0x3, 0x0)
write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182bb80000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
close_range(r0, 0xffffffffffffffff, 0x400000000000000)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2, &(0x7f0000000100)="8183", 0x9, 0xb, 0x15c2, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000040)=ANY=[], 0x1, 0x2f2, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@minixdf}, {@acl}, {@sysvgroups}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@sb={'sb', 0x3d, 0xffffffffffffffff}}, {@nobh}, {@dax}], [{@fowner_gt}, {@subj_user={'subj_user', 0x3d, 'sb'}}]}, 0xdf, 0x475, &(0x7f0000000780)="$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")

2m6.652464109s ago: executing program 36 (id=1069):
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x533863bace190a0, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x24000058)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0xe, "4372071e845c1497c85538300000"}})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a})
socket$netlink(0x10, 0x3, 0x0)
write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182bb80000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
close_range(r0, 0xffffffffffffffff, 0x400000000000000)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2, &(0x7f0000000100)="8183", 0x9, 0xb, 0x15c2, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000040)=ANY=[], 0x1, 0x2f2, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@minixdf}, {@acl}, {@sysvgroups}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@sb={'sb', 0x3d, 0xffffffffffffffff}}, {@nobh}, {@dax}], [{@fowner_gt}, {@subj_user={'subj_user', 0x3d, 'sb'}}]}, 0xdf, 0x475, &(0x7f0000000780)="$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")

1m43.248696762s ago: executing program 9 (id=1136):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)

1m43.011868618s ago: executing program 9 (id=1137):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800740, &(0x7f00000003c0)={[{@nodioread_nolock}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@errors_remount}, {@grpjquota}, {@bsdgroups}]}, 0x0, 0x481, &(0x7f0000001040)="$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")
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x41040, &(0x7f0000000540)=ANY=[], 0x81, 0x14f1, &(0x7f0000001580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r1])
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1m41.685571077s ago: executing program 9 (id=1139):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000300)={0x7})

1m41.10794191s ago: executing program 9 (id=1140):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000a80)=ANY=[], 0xff, 0x17f, &(0x7f0000000340)="$eJzskr1OOkEUxc/sLh//f5RoYkUDBfGjUJZFjZ2W2NvZSGBF4qLCkiiEYo0xFBbG0ifgNUx8AS2MD0BNQazNmtm5OxnwEZxfsWfumTt35l4489t+CsD3dFDDASJMZPDOGCwAOSa8iSH0ifSD9FEI3ijvkPw70qzf6ycpJ49lYZxXPc/t5AF8RZ60/P1bA5Oo1Od0UOOLEwBhGIbcqwM8HQtKjgmgreRkLWAlaiKUObwRHqwBKHZbV0W/199stqoNt+FeOGZ519627R2neNr0XFt8mXIFtQKuGwBSaUj4fgLAPcX/MQtTnkb77B+O5dlkPMMMwzyGcjZWhhf5rhTi3ws4wir4s64DpriFqIqFqKUKGEwKSpbyPnFXOtrYql169SEYWHxsBEvWKI2RkIGjBuW9AIui1JBKFkgrpCPSMWlu7i9jBfz7QNF6ACRxU+12OyU+JLFi8cqRnrMUqAPjtz4bs829Gr9mq9FoNBqNRqPRaDR/jZ8AAAD//8JqdgE=")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x0, 0xf5, 0x20000}, 0x20)

1m40.537940063s ago: executing program 9 (id=1142):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1m37.150866229s ago: executing program 9 (id=1152):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000a80)=ANY=[], 0xff, 0x17f, &(0x7f0000000340)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x0, 0xf5, 0x20000}, 0x20)

1m36.807273766s ago: executing program 37 (id=1152):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000a80)=ANY=[], 0xff, 0x17f, &(0x7f0000000340)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x0, 0xf5, 0x20000}, 0x20)

13.91484674s ago: executing program 3 (id=1550):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0)

12.270251576s ago: executing program 3 (id=1556):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000001100)={[{@noload}, {@journal_ioprio}, {@discard}, {@errors_remount}, {@usrjquota, 0x0}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x401}}, {@noquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@lazytime}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@nombcache}, {@noblock_validity}], [], 0x2c}, 0x6, 0x50c, &(0x7f00000002c0)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1/file2\x00', 0x103000, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1810040, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0xfffffffffffffffc)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000))

10.957017946s ago: executing program 8 (id=1565):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x54, r1, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3e0000f000"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800)

10.900944347s ago: executing program 8 (id=1568):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180), 0x0, 0x236, &(0x7f0000000b40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
waitid(0x3, 0x0, 0x0, 0x8, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}})

9.84509992s ago: executing program 6 (id=1569):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x4, &(0x7f0000000100)=0x3)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x1008}, 0x0)

8.438481052s ago: executing program 8 (id=1571):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x8840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@sb={'sb', 0x3d, 0x8000000000000000}}, {@jqfmt_vfsv1}, {@dioread_nolock}, {@nogrpid}, {@noload}]}, 0x1, 0x25c, &(0x7f0000000a40)="$eJzs3TFoG1cYB/DvTpJd26K47VIotIVSSmsw7lbo4i4tGIoxpRTagkspXVrsgmvTze6UJUMyJ8FTFhOyxckYvJgsCQmZnMSDswQSkyEmQzIoyGcHJ5YjEck6k/v94NCd9N5975D+74TgdAEU1mBEjEZEKSKGIqISEcneBh9ny+DO5mLf6mRErfbDw2S7Xbad2e03EBELEfFVRKykSfxVjphb/mXj8dp3nx2frXx6dvnnvq4e5I7NjfXvt86MH7sw9uXctZv3x5MYjeoLx9V5SYPnyknEu4dR7IhIynmPgFZM/Hf+Vj3370XEJ9v5r0Qa2Zt3YqZnpRJfnD6o78kH1z/o5liBzqvVKvVz4EINKJw0IqqRpMMRka2n6fBw9h3+dqk//Xt65t+hP6dnp/7Ie6YCOqUasf7tpd6LAy/l/14pyz/w5qrn/8eJpTv19a1S3qMBuqme/6Hf5j8P+YfCkX8oLvmH4pJ/KK5X5T9t1vnGW4c3MOC19bTYzvkfikv+objayX/lkMYEdIfzPxSX/ENx7c0/AFAstd59lwTv/rzXwpXDLTQDjqwcpx4AAAAAAAAAAAAAAAAAAOAAi32rk7tLt2peORWx+U1ElBvVL+3chyC710D/o6Te7Lkk69aWXz9qcwdtOpfz1ddv3823/tUP860/PxWx8H9EjJTL+z9/SfP7YDTxTpPXK7+3WaBNX/+Ub/2nS/nWH1uLuFyff0YazT9pvL/92Hj+qXbgf5D/edLmDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiaZwEAAP//wMpeJw==")
r1 = open(&(0x7f0000000000)='./file1\x00', 0x14b142, 0x80)
ftruncate(r1, 0x2007ffb)
write$FUSE_IOCTL(r1, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x3, 0x4, 0x1, 0x5}}, 0x20)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0)

7.464064104s ago: executing program 6 (id=1572):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180))
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0xb}, {0x80000000000, 0x3, 0xfffffffffffffffe, 0x20000000002}, 0xfffffffd, 0x0, 0x1, 0x1, 0x3}, {{@in=@private=0xa0100ff, 0x0, 0x33}, 0xa, @in6=@empty, 0x34fd, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xfbfffffd, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffd}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000fedbdf254400000008000300", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4)

7.201297179s ago: executing program 3 (id=1574):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)

5.484059088s ago: executing program 3 (id=1576):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
timerfd_create(0x8, 0x80000)
r0 = timerfd_create(0x6, 0x800)
timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

5.483782838s ago: executing program 6 (id=1577):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000fc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000001500)={0x84, 0x0, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x40, 0x7, 0x2, 0x1000}, 0x0, &(0x7f00000012c0)={0x40, 0xb, 0x2, "0d94"}, 0x0, 0x0, &(0x7f0000001380)={0x40, 0x17, 0x6, @random="8e707585687e"}, &(0x7f00000013c0)={0x40, 0x19, 0x2, "35de"}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000014c0)={0x40, 0x21, 0x1, 0xe}})
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000010c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES8, @ANYRESDEC=0x0], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0)

4.592381768s ago: executing program 3 (id=1579):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0x0, 0x3)

4.573950139s ago: executing program 4 (id=1580):
prctl$PR_GET_DUMPABLE(0x3)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200c9a, &(0x7f0000000280)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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")
creat(&(0x7f0000000040)='./file0\x00', 0x0)
lgetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@random={'osx.', 'security.capability\x00'}, 0x0, 0x0)

4.396004763s ago: executing program 4 (id=1581):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0xc0, 0x14, {0x8, 0xb, 0x0, 0x5, 0x1, 0x24, 0x30, 0x7}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xf0, 0x2a, 0x2, {0xa, 0x25, 0x25, 0x3, 0x6, 0x809}}}}}}}}]}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000000c0)='pagemap\x00')
preadv(r2, &(0x7f0000002340), 0x0, 0x7, 0x80)

4.241735966s ago: executing program 8 (id=1582):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f00000004c0)=[@free_buffer={0x40086303, r8}, @increfs, @exit_looper], 0x0, 0x0, 0x0})

3.030433063s ago: executing program 8 (id=1583):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001002089}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fchdir(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001bf40)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e781e2243d84bd8191f589ecd2f50cc9b8e07f76ea782d8cecdf9ec"}}}}}}, 0x0)
readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0xf7a}], 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x20}}, @union]}}, 0x0, 0x3e}, 0x28)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000062c0)={0x2020}, 0x2020)
r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r3, &(0x7f0000004c40)={0x2020}, 0x2020)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)

3.030125463s ago: executing program 3 (id=1584):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0xc, 0x8, {0x8, 0xd, "a8d7babfd47f"}}, 0x0}, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0xd, 0x47, "c2a7b8698f9a9c3f7dda64db8a5458f188e79d71b39b829c821c9b2d9efd7d3fa4ce6cd535044a495e828216e03b242093431ed32f9566c818db1ec6c835b49620a43a9fd81cd8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x0, 0x8, 0x91, "6ccc7be695e687494088fa63d49013420bb5b88fc275ea394a669c8f4d6b8c282768c0c7ee8a23b55e5f37ddb7e1875a2379b148a03609945c79ec5b15bfffce72ca69383b812c0fb6633868c289c38905b833474d5496c03e1c06e1340d2205e44248582b87686d29a1270cd85049e79283448dddad7eaea638f798eb268be77b74ed161bd0f1d224221bf8a1803eb651"}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x81, 0x1, 'N'}, 0x0, 0x0, 0x0, 0x0})

2.575919333s ago: executing program 4 (id=1585):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x80}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @window={0x3, 0x7, 0x2}, @mss={0x2, 0x80000001}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

2.575633673s ago: executing program 1 (id=1586):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x66042, 0x4f)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

2.537898484s ago: executing program 4 (id=1587):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)={0x3, 0x7, 0x1, 0x3, 0x8001, 0x401})
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0xff, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}], 0x18}, 0x4000080)

2.471882935s ago: executing program 1 (id=1588):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x3, 0x0, 0x9}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd2a}, 0x14}}, 0x0)

2.403514917s ago: executing program 4 (id=1589):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
timerfd_create(0x8, 0x80000)
r0 = timerfd_create(0x6, 0x800)
timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

2.364092018s ago: executing program 1 (id=1590):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.25921109s ago: executing program 6 (id=1591):
prctl$PR_GET_DUMPABLE(0x3)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200c9a, &(0x7f0000000280)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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")
creat(&(0x7f0000000040)='./file0\x00', 0x0)
lgetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@random={'osx.', 'security.capability\x00'}, 0x0, 0x0)

2.25903007s ago: executing program 4 (id=1592):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
epoll_create(0x9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x94)
read$msr(r1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
r2 = syz_usb_connect$uac2(0x3, 0xa6, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003000000200c200b10400001020301090294000301061002080b0102010c200009040000000101200009240180ff0734000407240c097f0109052406040610240213ff010301070100000001730407240c0102075708240a06000110030904010000010220000904010101010220000905010910000c02090825010030ad000109040200000102200009040201010102200009058209200002fabc082501e714899ab3ea0c71ff70ae955c2fe70a8032"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}}, 0x108)

2.154615662s ago: executing program 1 (id=1593):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)

2.115670734s ago: executing program 6 (id=1594):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f00000004c0)=[@free_buffer={0x40086303, r8}, @increfs, @exit_looper], 0x0, 0x0, 0x0})

434.687761ms ago: executing program 8 (id=1595):
pipe2(0x0, 0x4800)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendfile(0xffffffffffffffff, r0, 0x0, 0x1)

426.482221ms ago: executing program 6 (id=1596):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r1, 0x15, 0x0, @void}, 0x10)
syz_clone3(0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000280))

413.044671ms ago: executing program 1 (id=1597):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = semget$private(0x0, 0x7, 0x0)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0x1, 0x7}, 0x6, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x20})

0s ago: executing program 1 (id=1598):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x34, 0x6a, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x9, 0x9936c5154318bee0, 0x8}}]}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

kernel console output (not intermixed with test programs):

0] type 2 family 0 port 6081 - 0
[  237.601445][  T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.033593][   T21] Bluetooth: hci0: command 0x0405 tx timeout
[  239.443924][   T21] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  240.997058][   T21] usb 7-1: unable to read config index 0 descriptor/all
[  241.004367][   T21] usb 7-1: can't read configurations, error -71
[  245.501879][ T4272] Bluetooth: hci4: command 0x0409 tx timeout
[  245.630178][ T7169] loop5: detected capacity change from 0 to 512
[  246.023865][  T144] device hsr_slave_0 left promiscuous mode
[  246.046128][ T7169] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  246.149505][  T144] device hsr_slave_1 left promiscuous mode
[  246.171565][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.181056][ T7169] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.204017][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.250217][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.285083][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.410673][  T144] device bridge_slave_1 left promiscuous mode
[  246.422118][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.456660][  T144] device bridge_slave_0 left promiscuous mode
[  246.477793][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.567708][  T144] device veth1_macvtap left promiscuous mode
[  246.591312][  T144] device veth0_macvtap left promiscuous mode
[  246.615505][  T144] device veth1_vlan left promiscuous mode
[  246.637522][  T144] device veth0_vlan left promiscuous mode
[  247.048917][ T7204] loop6: detected capacity change from 0 to 512
[  247.242349][ T7204] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback.
[  247.443973][ T7204] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  247.490826][ T7204] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.823: corrupted inode contents
[  247.536309][ T7213] loop5: detected capacity change from 0 to 1024
[  247.560555][ T7204] EXT4-fs (loop6): Remounting filesystem read-only
[  247.574505][ T4176] Bluetooth: hci4: command 0x041b tx timeout
[  247.623464][ T7204] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #2: comm syz.6.823: mark_inode_dirty error
[  247.651759][ T7213] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5
[  247.651759][ T7213] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  247.651759][ T7213] 
[  247.685072][ T7213] EXT4-fs (loop5): Ignoring removed orlov option
[  247.758651][ T7204] EXT4-fs (loop6): Remounting filesystem read-only
[  247.775823][ T7204] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.823: corrupted inode contents
[  247.798655][ T7204] EXT4-fs (loop6): Remounting filesystem read-only
[  247.819685][ T7220] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.823: corrupted inode contents
[  247.840694][ T7220] EXT4-fs (loop6): Remounting filesystem read-only
[  248.010403][ T7220] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #2: comm syz.6.823: mark_inode_dirty error
[  248.068242][ T7220] EXT4-fs (loop6): Remounting filesystem read-only
[  248.620011][ T7220] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.823: corrupted inode contents
[  248.635801][ T7213] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,noacl,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  248.785175][ T7220] EXT4-fs (loop6): Remounting filesystem read-only
[  248.791938][ T7220] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.823: mark_inode_dirty error
[  248.810171][ T7220] EXT4-fs (loop6): Remounting filesystem read-only
[  248.817819][ T7220] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.823: corrupted inode contents
[  248.837570][ T7220] EXT4-fs (loop6): Remounting filesystem read-only
[  248.847043][ T7220] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #2: comm syz.6.823: mark_inode_dirty error
[  248.862713][ T7220] EXT4-fs (loop6): Remounting filesystem read-only
[  248.941819][ T7204] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #2: comm syz.6.823: corrupted inode contents
[  248.967113][ T7204] EXT4-fs (loop6): Remounting filesystem read-only
[  249.026109][  T144] team0 (unregistering): Port device team_slave_1 removed
[  249.079202][  T144] team0 (unregistering): Port device team_slave_0 removed
[  249.098877][ T7213] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.824: Invalid inode table block 3258049231 in block_group 0
[  249.128985][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.182007][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.883323][   T21] Bluetooth: hci4: command 0x040f tx timeout
[  251.069720][  T144] bond0 (unregistering): Released all slaves
[  251.128876][ T7251] loop5: detected capacity change from 0 to 512
[  251.188474][ T7219] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  251.213418][ T7219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.276662][ T7152] chnl_net:caif_netlink_parms(): no params data found
[  251.698266][   T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  252.045754][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.103941][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.113823][   T21] usb 6-1: Using ep0 maxpacket: 16
[  252.266427][ T7152] device bridge_slave_0 entered promiscuous mode
[  252.334065][   T21] usb 6-1: config 0 has no interfaces?
[  252.335237][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.350040][   T21] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  252.386037][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.427902][   T21] usb 6-1: config 0 descriptor??
[  252.449475][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.465185][ T7152] device bridge_slave_1 entered promiscuous mode
[  252.706689][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.754053][ T7272] syz.6.835 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  252.866135][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.935251][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[  253.221335][ T7152] team0: Port device team_slave_0 added
[  253.252395][ T7152] team0: Port device team_slave_1 added
[  253.564651][ T7285] udc-core: couldn't find an available UDC or it's busy
[  254.199328][ T7285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  254.245190][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.263566][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.214325][ T6300] Bluetooth: hci4: command 0x0405 tx timeout
[  255.305094][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.341081][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.368469][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.448950][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.600361][ T4300] usb 6-1: USB disconnect, device number 3
[  255.622432][ T7152] device hsr_slave_0 entered promiscuous mode
[  255.694604][ T7152] device hsr_slave_1 entered promiscuous mode
[  255.742299][ T7152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  255.773901][ T7152] Cannot create hsr debugfs directory
[  255.828183][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.834950][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.917114][ T7310] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  256.004769][    T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  256.248322][ T7315] loop5: detected capacity change from 0 to 4096
[  256.303737][    T7] usb 7-1: Using ep0 maxpacket: 16
[  256.524001][ T7152] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  256.609042][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.650196][ T7152] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  256.711555][ T7152] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  256.729151][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.578686][    T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  257.600568][ T7152] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  257.623839][    T7] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  257.632962][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.904483][    T7] usb 7-1: config 0 descriptor??
[  258.608261][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.751846][ T7152] 8021q: adding VLAN 0 to HW filter on device team0
[  258.765753][    T7] microsoft 0003:045E:07DA.0004: item 0 4 0 8 parsing failed
[  258.795656][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  258.805181][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  258.823486][    T7] microsoft 0003:045E:07DA.0004: parse failed
[  258.843716][    T7] microsoft: probe of 0003:045E:07DA.0004 failed with error -22
[  258.875506][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  258.907065][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  258.947318][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.954545][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.966429][   T23] usb 7-1: USB disconnect, device number 5
[  259.054472][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  259.095286][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  259.137344][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.144583][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.195633][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.246814][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  259.404670][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  259.485447][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  259.527021][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  259.561929][ T7348] loop5: detected capacity change from 0 to 512
[  260.932916][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  260.954277][ T7355] capability: warning: `syz.1.858' uses 32-bit capabilities (legacy support in use)
[  261.070859][ T7152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.108467][ T7348] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.851: iget: bad i_size value: 38620345925642
[  261.121702][ T7348] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.851: couldn't read orphan inode 15 (err -117)
[  261.134605][ T7348] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  261.151171][ T7152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.246145][ T7361] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  261.267658][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  261.316650][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  261.364654][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  261.388960][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  261.408710][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  261.430673][ T7365] loop6: detected capacity change from 0 to 4096
[  261.436348][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  261.465741][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  261.768243][ T7369] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  262.695499][ T7369] EXT4-fs (loop5): This should not happen!! Data will be lost
[  262.695499][ T7369] 
[  262.709292][ T7369] EXT4-fs (loop5): Total free blocks count 0
[  262.716834][ T7369] EXT4-fs (loop5): Free/Dirty block details
[  262.722807][ T7369] EXT4-fs (loop5): free_blocks=0
[  262.728277][ T7369] EXT4-fs (loop5): dirty_blocks=2884
[  262.733964][ T7369] EXT4-fs (loop5): Block reservation details
[  262.740187][ T7369] EXT4-fs (loop5): i_reserved_data_blocks=2884
[  263.253589][ T4408] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 832 with error 28
[  263.303673][ T4408] EXT4-fs (loop5): This should not happen!! Data will be lost
[  263.303673][ T4408] 
[  263.387443][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  263.420080][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  263.458639][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.493135][ T7393] loop6: detected capacity change from 0 to 16
[  263.682438][ T7393] erofs: (device loop6): mounted with root inode @ nid 36.
[  263.777679][ T7393] erofs: (device loop6): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  263.871659][ T7393] attempt to access beyond end of device
[  263.871659][ T7393] loop6: rw=0, want=304, limit=16
[  263.894499][ T7393] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  264.336430][ T7413] loop5: detected capacity change from 0 to 8192
[  264.440831][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  264.471438][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  264.537045][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  264.567023][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  264.597427][ T7152] device veth0_vlan entered promiscuous mode
[  264.625901][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  264.654199][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  264.688571][ T7152] device veth1_vlan entered promiscuous mode
[  264.774084][   T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  264.817946][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  264.834913][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  264.982658][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  265.109426][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  265.736291][   T23] usb 6-1: Using ep0 maxpacket: 8
[  265.772577][ T7152] device veth0_macvtap entered promiscuous mode
[  265.822316][ T7152] device veth1_macvtap entered promiscuous mode
[  265.894630][   T23] usb 6-1: unable to get BOS descriptor or descriptor too short
[  265.910174][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.962911][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.974105][   T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.009171][   T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  266.013804][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.100364][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.162045][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.226576][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.447712][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.488967][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.533357][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.593831][   T23] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  268.603055][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.613265][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.683700][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.717176][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.724238][   T23] usb 6-1: can't set config #1, error -71
[  268.754058][   T23] usb 6-1: USB disconnect, device number 4
[  268.763673][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.773567][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.847607][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.903713][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.949518][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.977779][ T7464] loop5: detected capacity change from 0 to 1024
[  268.994756][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.002394][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  269.037342][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  269.067270][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  269.101082][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  269.170081][ T7152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.222479][ T7152] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.253740][ T7152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.283715][ T7152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.479382][ T7468] loop5: detected capacity change from 0 to 1024
[  269.564533][ T7468] EXT4-fs (loop5): Ignoring removed orlov option
[  269.585810][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.603656][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.662184][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  269.690644][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.705008][ T7468] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[  269.729668][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.778642][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  269.877869][   T26] audit: type=1800 audit(1783829305.856:16): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.884" name="file1" dev="loop5" ino=15 res=0 errno=0
[  269.942920][ T7467] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.884: bit already cleared for inode 15
[  270.775384][ T7503] loop7: detected capacity change from 0 to 4096
[  273.235067][ T7514] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  273.246555][ T7514] SQUASHFS error: Failed to read block 0x0: -5
[  273.552724][ T7519] loop7: detected capacity change from 0 to 1024
[  273.700360][ T7519] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none.
[  273.783942][ T7519] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.955420][ T7531] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.890: bg 0: block 112: padding at end of block bitmap is not set
[  274.061227][ T7534] loop5: detected capacity change from 0 to 8192
[  274.112116][ T7534] process 'syz.5.897' launched '/dev/fd/4/./file1' with NULL argv: empty string added
[  274.177655][ T7531] EXT4-fs (loop7): Remounting filesystem read-only
[  274.616553][ T7553] loop7: detected capacity change from 0 to 1024
[  274.688707][ T7553] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5
[  274.688707][ T7553] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  274.688707][ T7553] 
[  274.724214][   T26] audit: type=1326 audit(1783829310.694:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.5.904" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f830eddbe59 code=0x0
[  274.804260][ T7553] EXT4-fs (loop7): Ignoring removed orlov option
[  274.879186][ T7553] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,noacl,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  276.192185][ T7574] loop7: detected capacity change from 0 to 128
[  276.543117][ T7581] trusted_key: encrypted_key: insufficient parameters specified
[  278.745963][ T7602] usb usb9: check_ctrlrecip: process 7602 (syz.7.911) requesting ep 01 but needs 81
[  278.775622][ T7602] usb usb9: usbfs: process 7602 (syz.7.911) did not claim interface 0 before use
[  278.806200][ T7605] loop5: detected capacity change from 0 to 512
[  278.897541][ T7605] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback.
[  278.915456][ T7605] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  278.935466][ T7605] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.913: corrupted inode contents
[  278.963667][ T7605] EXT4-fs (loop5): Remounting filesystem read-only
[  278.970390][ T7605] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.913: mark_inode_dirty error
[  279.014846][ T7605] EXT4-fs (loop5): Remounting filesystem read-only
[  279.021842][ T7605] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.913: corrupted inode contents
[  279.175487][ T7605] EXT4-fs (loop5): Remounting filesystem read-only
[  280.100180][ T7614] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.913: corrupted inode contents
[  280.149189][ T7614] EXT4-fs (loop5): Remounting filesystem read-only
[  280.159961][ T7614] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.913: mark_inode_dirty error
[  280.215228][ T7614] EXT4-fs (loop5): Remounting filesystem read-only
[  280.221958][ T7614] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.913: corrupted inode contents
[  280.242869][ T7624] loop7: detected capacity change from 0 to 1024
[  280.260388][ T7614] EXT4-fs (loop5): Remounting filesystem read-only
[  280.267964][ T7614] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.913: mark_inode_dirty error
[  280.306312][ T7614] EXT4-fs (loop5): Remounting filesystem read-only
[  280.313136][ T7624] EXT4-fs (loop7): Ignoring removed bh option
[  280.357025][ T7614] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.913: corrupted inode contents
[  280.374886][ T7614] EXT4-fs (loop5): Remounting filesystem read-only
[  280.381478][ T7614] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.913: mark_inode_dirty error
[  280.421114][ T7624] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  280.453892][ T7614] EXT4-fs (loop5): Remounting filesystem read-only
[  280.519660][ T7605] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.913: corrupted inode contents
[  280.558165][ T7605] EXT4-fs (loop5): Remounting filesystem read-only
[  280.644498][ T7638] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none.
[  281.939730][ T7658] loop7: detected capacity change from 0 to 256
[  282.094952][ T7658] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  282.183855][ T7658] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  282.230047][ T7658] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  283.266324][ T7677] loop7: detected capacity change from 0 to 128
[  283.330943][ T7677] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  283.389073][ T7677] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  284.206680][ T7695] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.936' sets config #2
[  285.326271][ T7705] loop5: detected capacity change from 0 to 1024
[  285.390360][ T7705] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5
[  285.390360][ T7705] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  285.390360][ T7705] 
[  285.423895][ T7705] EXT4-fs (loop5): Ignoring removed orlov option
[  286.404852][ T7705] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,noacl,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  286.780103][ T7724] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  286.793522][ T7724] Error parsing options; rc = [-22]
[  288.643781][ T4231] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  288.847652][ T7743] loop7: detected capacity change from 0 to 1024
[  288.893993][ T4231] usb 6-1: Using ep0 maxpacket: 16
[  288.940803][ T7743] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  289.866198][ T7743] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.934551][ T4231] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  289.950641][ T4231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.979472][ T4231] usb 6-1: config 1 has no interface number 0
[  289.993698][ T4231] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  290.013814][ T7743] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: comm syz.7.949: lblock 0 mapped to illegal pblock 0 (length 6)
[  290.070136][ T4231] usb 6-1: config 1 interface 105 has no altsetting 0
[  290.182572][ T7743] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 3: comm syz.7.949: lblock 3 mapped to illegal pblock 3 (length 1)
[  290.213853][ T7743] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  290.334649][ T4231] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  290.398266][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  290.445925][ T7748] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  290.522393][ T7743] EXT4-fs (loop7): This should not happen!! Data will be lost
[  290.522393][ T7743] 
[  290.580755][ T4231] usb 6-1: Product: syz
[  290.638871][ T4231] usb 6-1: Manufacturer: syz
[  290.699430][ T4231] usb 6-1: SerialNumber: syz
[  290.826871][ T7754] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.949: bg 0: block 112: padding at end of block bitmap is not set
[  290.920476][ T7754] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  290.975804][ T7754] EXT4-fs (loop7): This should not happen!! Data will be lost
[  290.975804][ T7754] 
[  291.594122][ T4231] aqc111: probe of 6-1:1.105 failed with error -22
[  291.655776][ T4231] usb 6-1: USB disconnect, device number 6
[  291.741120][ T7766] loop5: detected capacity change from 0 to 1024
[  291.863750][ T7766] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5
[  291.863750][ T7766] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  291.863750][ T7766] 
[  291.953950][ T7766] EXT4-fs (loop5): Ignoring removed orlov option
[  291.981208][ T7775] 9pnet: Insufficient options for proto=fd
[  292.050652][ T7766] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,noacl,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  292.114024][ T4268] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  292.785732][ T7792] loop5: detected capacity change from 0 to 512
[  292.819500][ T7792] EXT4-fs (loop5): inline encryption not supported
[  292.833906][ T7792] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  293.253857][ T4268] usb 8-1: device descriptor read/64, error -71
[  293.507145][ T7792] EXT4-fs (loop5): 1 truncate cleaned up
[  293.514980][ T7792] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000003,discard,,errors=continue. Quota mode: none.
[  293.604287][ T4268] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  294.825105][ T4268] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.854492][ T4268] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.870268][ T4268] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  294.883104][ T4268] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.915637][ T4268] usb 8-1: config 0 descriptor??
[  295.264582][ T7792] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.962: bad extra_isize 62 (inode size 256)
[  295.290490][ T7824] 9pnet: Insufficient options for proto=fd
[  296.363876][ T4268] usbhid 8-1:0.0: can't add hid device: -71
[  296.369943][ T4268] usbhid: probe of 8-1:0.0 failed with error -71
[  296.393800][ T4268] usb 8-1: USB disconnect, device number 3
[  297.951042][ T7854] loop7: detected capacity change from 0 to 1024
[  297.985586][ T7854] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5
[  297.985586][ T7854] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  297.985586][ T7854] 
[  298.093791][ T7854] EXT4-fs (loop7): Ignoring removed orlov option
[  298.858768][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  298.999419][ T7854] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,noacl,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  303.112360][ T7925] loop5: detected capacity change from 0 to 8
[  303.243863][   T23] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  303.434635][ T4576] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  303.441972][ T4576] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  303.610116][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.639349][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  303.675927][   T23] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  303.783934][   T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  303.793410][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  303.849660][   T23] usb 5-1: SerialNumber: syz
[  303.908313][   T23] cdc_ether: probe of 5-1:1.0 failed with error -22
[  304.861687][ T7952] loop7: detected capacity change from 0 to 16
[  304.966954][ T7952] erofs: (device loop7): mounted with root inode @ nid 36.
[  305.047916][ T7952] erofs: (device loop7): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  305.115736][ T7955] attempt to access beyond end of device
[  305.115736][ T7955] loop7: rw=0, want=304, limit=16
[  305.200363][ T7955] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  305.428294][ T4256] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.756600][ T4256] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.949912][ T4256] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.071002][ T4256] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.741120][ T8006] loop7: detected capacity change from 0 to 16
[  307.639473][ T8006] erofs: (device loop7): mounted with root inode @ nid 36.
[  307.667800][ T8006] erofs: (device loop7): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  307.749762][ T8006] attempt to access beyond end of device
[  307.749762][ T8006] loop7: rw=0, want=304, limit=16
[  307.790940][ T4272] usb 5-1: USB disconnect, device number 8
[  307.873820][ T8006] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  308.191014][ T7998] chnl_net:caif_netlink_parms(): no params data found
[  308.496834][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.507273][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.515697][ T7998] device bridge_slave_0 entered promiscuous mode
[  308.594770][ T4256] device hsr_slave_0 left promiscuous mode
[  308.612663][ T4256] device hsr_slave_1 left promiscuous mode
[  308.644227][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.651725][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.694336][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[  308.731633][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.761323][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.812621][ T4256] device bridge_slave_1 left promiscuous mode
[  308.822197][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.007244][ T4256] device bridge_slave_0 left promiscuous mode
[  309.035797][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.666792][ T4256] device veth1_macvtap left promiscuous mode
[  309.672934][ T4256] device veth0_macvtap left promiscuous mode
[  309.753841][ T4256] device veth1_vlan left promiscuous mode
[  309.759734][ T4256] device veth0_vlan left promiscuous mode
[  311.305758][ T4268] Bluetooth: hci2: command 0x041b tx timeout
[  311.351520][ T8075] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  311.375517][ T8083] fuse: Bad value for 'fd'
[  311.815915][ T4256] team0 (unregistering): Port device team_slave_1 removed
[  311.840133][ T4256] team0 (unregistering): Port device team_slave_0 removed
[  311.857053][ T4256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.871839][ T4256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.942749][ T4256] bond0 (unregistering): Released all slaves
[  311.998786][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.006208][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.014880][ T7998] device bridge_slave_1 entered promiscuous mode
[  312.068065][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.165639][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.212037][ T8097] loop7: detected capacity change from 0 to 128
[  312.289845][ T8097] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  312.322127][ T7998] team0: Port device team_slave_0 added
[  312.432024][ T7998] team0: Port device team_slave_1 added
[  312.510556][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.522463][ T4719] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  312.543492][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.624399][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.699456][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.717894][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.829177][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.334335][   T23] Bluetooth: hci2: command 0x040f tx timeout
[  313.807408][ T7998] device hsr_slave_0 entered promiscuous mode
[  313.829741][ T7998] device hsr_slave_1 entered promiscuous mode
[  313.882148][ T7998] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.900848][ T7998] Cannot create hsr debugfs directory
[  313.927763][ T8135] loop7: detected capacity change from 0 to 16
[  314.081265][ T8135] erofs: (device loop7): mounted with root inode @ nid 36.
[  314.128321][ T8135] erofs: (device loop7): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  314.457430][ T8146] overlayfs: failed to resolve './file1': -2
[  315.216678][ T7998] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  315.266944][ T7998] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  315.287931][ T8157] loop7: detected capacity change from 0 to 8
[  315.304126][ T7998] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  315.354954][ T7998] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  315.414347][ T4191] Bluetooth: hci2: command 0x0419 tx timeout
[  316.169802][ T7152] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  316.239826][ T7152] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  316.302790][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.364946][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  316.389956][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  316.422579][ T7998] 8021q: adding VLAN 0 to HW filter on device team0
[  316.471327][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  316.481016][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  316.503781][ T4300] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  316.524607][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.531744][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.584603][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  316.604318][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  316.650472][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  316.707070][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.714258][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.760218][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  316.925027][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  316.943427][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  316.951887][ T4300] usb 5-1: unable to get BOS descriptor or descriptor too short
[  317.004118][ T4300] usb 5-1: not running at top speed; connect to a high speed hub
[  317.021237][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  317.051459][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  317.082178][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  317.094597][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  317.109511][ T4300] usb 5-1: config index 0 descriptor too short (expected 59022, got 142)
[  317.123648][ T4300] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  317.144212][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  317.163650][ T4300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  317.199065][ T7998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  317.226259][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  317.251447][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  317.265188][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.271551][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.287980][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  317.301483][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  317.374020][ T4300] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  317.393736][ T4300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.434422][ T4300] usb 5-1: Product: syz
[  317.438679][ T4300] usb 5-1: Manufacturer: syz
[  317.443350][ T4300] usb 5-1: SerialNumber: syz
[  317.556599][ T4300] usb 5-1: selecting invalid altsetting 1
[  317.563319][ T4300] usb 5-1: unit 0 not found!
[  317.774178][ T4300] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3
[  317.798101][ T4300] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2)
[  317.837438][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.848594][ T4300] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3
[  318.747974][ T4300] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  318.765505][ T4300] usb 5-1: USB disconnect, device number 9
[  318.784257][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  318.820143][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.084804][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.915051][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  319.924516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  320.124028][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  320.139460][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  320.173818][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  320.204871][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  320.230569][ T7998] device veth0_vlan entered promiscuous mode
[  320.288218][ T4300] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  320.335532][ T7998] device veth1_vlan entered promiscuous mode
[  320.489590][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  320.504539][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  320.564558][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  320.604323][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  320.643979][ T7998] device veth0_macvtap entered promiscuous mode
[  320.684714][ T7998] device veth1_macvtap entered promiscuous mode
[  320.704080][ T4300] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  320.713113][ T4300] usb 5-1: config 1 has no interface number 0
[  320.727653][ T8229] chnl_net:caif_netlink_parms(): no params data found
[  320.764386][ T4300] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  320.773521][ T4300] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  320.817176][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.848601][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.853788][ T4300] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7
[  320.880224][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.911777][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.967634][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.998969][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.023728][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.056228][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.097478][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.140792][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  321.156506][ T4300] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  321.156997][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  322.053786][ T4300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.061948][ T4300] usb 5-1: Product: syz
[  322.068608][ T4300] usb 5-1: Manufacturer: syz
[  322.073262][ T4300] usb 5-1: SerialNumber: syz
[  322.076729][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  322.114375][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  322.126469][ T4272] Bluetooth: hci4: command 0x0409 tx timeout
[  322.139248][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.164002][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.205706][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.243658][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.273831][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.305884][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.338076][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.375793][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.406281][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.483859][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  322.512587][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  322.574125][ T4300] usb 5-1: 1:0 : does not exist
[  322.579122][ T4300] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  322.590952][ T7998] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.614296][ T7998] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.623076][ T7998] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.663942][ T4300] usb 5-1: 1:3 : does not exist
[  322.668884][ T4300] usb 5-1: 1:4 : does not exist
[  322.700811][ T4300] usb 5-1: incorrect wMaxPacketSize 0x210 for BADD profile
[  322.702408][ T7998] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.798580][ T4300] snd-usb-audio: probe of 5-1:1.1 failed with error -22
[  322.808138][ T4300] usb 5-1: USB disconnect, device number 10
[  322.957754][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.970837][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.983743][ T8229] device bridge_slave_0 entered promiscuous mode
[  323.023886][ T4256] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.060231][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  323.076452][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.080746][ T4719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.100939][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.123661][ T4719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.129689][ T8229] device bridge_slave_1 entered promiscuous mode
[  323.170693][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  323.238497][ T4256] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.321777][ T4719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.330476][ T4719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.374851][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.414473][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  323.460097][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.611627][ T4256] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.745956][ T4256] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.805768][ T8229] team0: Port device team_slave_0 added
[  323.842636][ T8229] team0: Port device team_slave_1 added
[  323.957043][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.988346][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.134114][ T4191] Bluetooth: hci4: command 0x041b tx timeout
[  324.593849][ T8229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.677875][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.707890][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.893640][ T8229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.122807][ T8229] device hsr_slave_0 entered promiscuous mode
[  325.224141][ T8229] device hsr_slave_1 entered promiscuous mode
[  325.273814][ T8229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.281456][ T8229] Cannot create hsr debugfs directory
[  325.740551][ T8323] loop8: detected capacity change from 0 to 4096
[  325.828185][ T8229] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  325.876787][ T8323] EXT4-fs (loop8): Test dummy encryption mode enabled
[  325.953874][ T8323] EXT4-fs (loop8): Ignoring removed nobh option
[  326.066461][ T8229] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  326.078041][ T8229] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  326.127968][ T8323] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nobh,,errors=continue. Quota mode: writeback.
[  326.148484][ T8229] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  326.214021][ T4272] Bluetooth: hci4: command 0x040f tx timeout
[  326.314343][ T8321] EXT4-fs (loop8): re-mounted. Opts: (null). Quota mode: writeback.
[  326.538835][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.607923][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  326.620603][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  326.674787][ T8229] 8021q: adding VLAN 0 to HW filter on device team0
[  326.779161][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  326.796304][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  326.832351][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.839590][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.899568][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  327.831533][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  328.101084][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  328.125150][ T4681] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.132347][ T4681] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.328735][ T2305] Bluetooth: hci4: command 0x0419 tx timeout
[  328.365819][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  328.410865][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  328.439658][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  328.482649][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  328.514611][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  328.542389][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  328.592978][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  328.637178][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  328.671107][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  328.776957][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  328.800004][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  328.851008][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  328.884396][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  328.925779][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  329.368696][ T4256] device hsr_slave_0 left promiscuous mode
[  329.499052][ T4256] device hsr_slave_1 left promiscuous mode
[  329.531792][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.562123][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.675690][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.683189][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.762458][ T4256] device bridge_slave_1 left promiscuous mode
[  329.788628][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.589754][ T4256] device bridge_slave_0 left promiscuous mode
[  330.609309][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.327231][ T4256] device veth1_macvtap left promiscuous mode
[  331.333987][ T4256] device veth0_macvtap left promiscuous mode
[  331.353729][ T4256] device veth1_vlan left promiscuous mode
[  331.359613][ T4256] device veth0_vlan left promiscuous mode
[  331.495005][ T8431] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  333.847515][ T4256] team0 (unregistering): Port device team_slave_1 removed
[  333.944419][ T4256] team0 (unregistering): Port device team_slave_0 removed
[  334.044536][ T4256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.104164][ T4256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.763957][ T4256] bond0 (unregistering): Released all slaves
[  336.183368][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  336.215020][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  336.244979][ T8229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.164116][ T8468] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  337.887093][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  337.940279][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  338.010102][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  338.055896][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  338.078277][ T8229] device veth0_vlan entered promiscuous mode
[  338.086661][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  338.114185][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  338.157302][ T8229] device veth1_vlan entered promiscuous mode
[  338.240628][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  338.285055][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  338.314368][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  338.347748][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  338.377537][ T8229] device veth0_macvtap entered promiscuous mode
[  339.028693][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  339.605247][ T8229] device veth1_macvtap entered promiscuous mode
[  339.677759][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.720977][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.744797][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.775903][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.817479][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.834992][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.857767][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.873714][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.894272][ T8229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.902344][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  339.944337][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  339.957853][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.971317][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.004333][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.023660][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.033542][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.073628][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.083518][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.113685][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.145323][ T8229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.153970][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  340.167558][    T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  340.195484][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  340.209493][ T8229] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.230163][ T8229] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.263710][ T8229] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.314451][ T8229] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.584054][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.629270][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.639333][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.653819][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.705377][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  340.736001][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  340.756823][ T4857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.770625][    T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  340.784244][ T4857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.812674][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.830634][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  340.909924][    T7] usb 5-1: config 0 descriptor??
[  341.154313][    T7] usb 5-1: can't set config #0, error -71
[  341.175126][    T7] usb 5-1: USB disconnect, device number 11
[  341.469264][ T8518] loop9: detected capacity change from 0 to 512
[  341.584931][ T8522] futex_wake_op: syz.4.1138 tries to shift op by 32; fix this program
[  341.628024][ T8518] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #11: comm syz.9.1137: ea_inode with extended attributes
[  341.684727][ T8518] EXT4-fs (loop9): Remounting filesystem read-only
[  341.691561][ T8518] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1137: error while reading EA inode 11 err=-117
[  341.861004][ T8518] EXT4-fs (loop9): Remounting filesystem read-only
[  341.880654][ T8518] EXT4-fs (loop9): 1 orphan inode deleted
[  341.902567][ T8518] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,data_err=ignore,debug_want_extra_isize=0x000000000000004c,errors=remount-ro,errors=remount-ro,grpjquota=,bsdgroups,. Quota mode: none.
[  342.049484][ T8420] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  342.263275][ T8532] fuse: Bad value for 'group_id'
[  342.504177][ T8420] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  342.513368][ T8420] usb 9-1: config 1 has no interface number 0
[  342.538930][ T8420] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  342.632417][ T8420] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  342.676928][ T8420] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7
[  342.863873][ T8420] usb 9-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  342.872995][ T8420] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.913403][ T8420] usb 9-1: Product: syz
[  342.932560][ T8420] usb 9-1: Manufacturer: syz
[  342.963076][ T8420] usb 9-1: SerialNumber: syz
[  343.325814][ T8544] loop9: detected capacity change from 0 to 8
[  343.393961][ T8420] usb 9-1: 1:0 : does not exist
[  343.398916][ T8420] usb 9-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  343.443891][ T8420] usb 9-1: 1:3 : does not exist
[  343.448834][ T8420] usb 9-1: 1:4 : does not exist
[  343.521368][ T8420] usb 9-1: incorrect wMaxPacketSize 0x210 for BADD profile
[  343.620168][ T8420] snd-usb-audio: probe of 9-1:1.1 failed with error -22
[  343.671564][ T8420] usb 9-1: USB disconnect, device number 2
[  343.882763][ T8229] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  343.936782][ T8229] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  344.858261][ T8420] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  346.205085][ T8562] udc-core: couldn't find an available UDC or it's busy
[  346.212113][ T8562] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  347.993853][ T8420] usb 9-1: unable to get BOS descriptor or descriptor too short
[  348.063818][ T8420] usb 9-1: unable to read config index 0 descriptor/start: -71
[  348.071481][ T8420] usb 9-1: can't read configurations, error -71
[  348.251418][ T4256] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.428145][ T4256] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.124782][ T8457] udevd[8457]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  349.182412][ T4256] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.793549][ T4256] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.213794][ T2305] Bluetooth: hci4: command 0x0409 tx timeout
[  350.370630][ T8605] chnl_net:caif_netlink_parms(): no params data found
[  350.551154][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.569683][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.586084][ T8605] device bridge_slave_0 entered promiscuous mode
[  350.647187][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.745284][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.764448][ T8605] device bridge_slave_1 entered promiscuous mode
[  350.910368][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.964705][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.096600][ T8605] team0: Port device team_slave_0 added
[  351.142927][ T8605] team0: Port device team_slave_1 added
[  351.383986][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.391004][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.486352][ T8605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.538523][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.567094][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.625306][ T8605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.927680][ T4256] device hsr_slave_0 left promiscuous mode
[  352.516741][ T2305] Bluetooth: hci4: command 0x041b tx timeout
[  352.529253][ T4256] device hsr_slave_1 left promiscuous mode
[  352.593110][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.648800][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.705019][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.750045][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.818375][ T4256] device bridge_slave_1 left promiscuous mode
[  352.854628][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.290046][ T4256] device bridge_slave_0 left promiscuous mode
[  354.670142][    T7] Bluetooth: hci4: command 0x040f tx timeout
[  354.684606][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.735326][ T4256] device veth1_macvtap left promiscuous mode
[  354.741440][ T4256] device veth0_macvtap left promiscuous mode
[  354.758016][ T4256] device veth1_vlan left promiscuous mode
[  354.785860][ T4256] device veth0_vlan left promiscuous mode
[  355.378188][ T4256] team0 (unregistering): Port device team_slave_1 removed
[  355.428656][ T4256] team0 (unregistering): Port device team_slave_0 removed
[  355.463321][ T4256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.487293][ T4256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.607920][ T4256] bond0 (unregistering): Released all slaves
[  355.699890][ T8605] device hsr_slave_0 entered promiscuous mode
[  355.715766][ T8605] device hsr_slave_1 entered promiscuous mode
[  355.736570][    T7] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  355.737539][ T8605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.766672][ T8605] Cannot create hsr debugfs directory
[  356.521290][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1179'.
[  356.539590][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1179'.
[  356.604062][    T7] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  356.626235][    T7] usb 9-1: config 1 has no interface number 0
[  356.632558][    T7] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  356.664699][    T7] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  356.682350][    T7] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7
[  356.714995][ T4300] Bluetooth: hci4: command 0x0419 tx timeout
[  356.873888][    T7] usb 9-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  356.902594][    T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.927634][    T7] usb 9-1: Product: syz
[  356.942424][    T7] usb 9-1: Manufacturer: syz
[  356.952554][    T7] usb 9-1: SerialNumber: syz
[  357.383975][    T7] usb 9-1: 1:0 : does not exist
[  357.389079][    T7] usb 9-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  357.434582][    T7] usb 9-1: 1:3 : does not exist
[  357.442440][    T7] usb 9-1: 1:4 : does not exist
[  357.463330][    T7] usb 9-1: incorrect wMaxPacketSize 0x210 for BADD profile
[  357.570135][    T7] snd-usb-audio: probe of 9-1:1.1 failed with error -22
[  357.608357][ T4176] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  357.616898][    T7] usb 9-1: USB disconnect, device number 5
[  357.650622][ T8577] udevd[8577]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  357.939772][ T4176] usb 5-1: Using ep0 maxpacket: 8
[  358.107730][ T8605] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  358.115104][ T4176] usb 5-1: unable to get BOS descriptor or descriptor too short
[  358.145035][ T8605] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  358.191911][ T8605] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  358.216845][ T8605] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  358.223969][ T4176] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 24, changing to 7
[  358.245233][ T4176] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  358.597053][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.707648][ T8605] 8021q: adding VLAN 0 to HW filter on device team0
[  358.803853][ T4176] usb 5-1: string descriptor 0 read error: -22
[  358.810573][ T4176] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  358.881246][ T4176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.984797][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  359.010457][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  359.040344][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  359.089628][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  359.117467][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.124708][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.200034][ T4176] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  359.210748][ T4176] usb 5-1: 1:1 : sample bitwidth 111 in over sample bytes 7
[  359.214132][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  359.218340][ T4176] usb 5-1: 1:1 : unsupported sample bitwidth 111 in 7 bytes
[  359.242268][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  359.251071][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.258307][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.269621][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  359.279558][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  359.300256][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  359.309028][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  359.323088][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  359.332457][ T4176] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  359.347094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  359.390565][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  359.419624][ T4176] usb 5-1: USB disconnect, device number 12
[  359.442787][ T8605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  359.479623][ T8605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  359.521031][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  359.534538][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  359.563527][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  359.594283][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  359.611290][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  359.626710][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  359.911186][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  359.948030][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  359.964369][ T8605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.989932][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  360.014931][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  360.068650][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  360.085794][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  360.121908][ T8605] device veth0_vlan entered promiscuous mode
[  360.150372][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  360.171641][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  360.205126][ T8605] device veth1_vlan entered promiscuous mode
[  360.290095][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  360.307521][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  360.321839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  360.338889][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  360.364377][ T8605] device veth0_macvtap entered promiscuous mode
[  360.389757][ T8605] device veth1_macvtap entered promiscuous mode
[  360.445974][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.482816][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.510493][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.540884][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.557805][ T4176] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  360.567520][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.583287][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.595265][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.613067][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.628493][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.648246][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  360.664121][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  360.682134][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  360.692318][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  360.715777][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.734041][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.752665][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.770654][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.783063][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.805823][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.820684][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.833503][ T4176] usb 9-1: Using ep0 maxpacket: 32
[  360.843954][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.864108][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.876060][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  360.893891][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  360.917403][ T8605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.934548][ T8605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.955186][ T8605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.975830][ T8605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.985348][ T4176] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  360.996897][ T4176] usb 9-1: config 0 has no interface number 0
[  361.194051][ T4176] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  361.221411][ T4176] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.493195][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.514421][ T4176] usb 9-1: Product: syz
[  361.531497][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.548218][ T4176] usb 9-1: Manufacturer: syz
[  361.563327][ T4176] usb 9-1: SerialNumber: syz
[  361.575842][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  361.640948][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.658496][ T4176] usb 9-1: config 0 descriptor??
[  361.686451][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.732904][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  361.758974][ T4176] smsc95xx v2.0.0
[  361.911007][ T8817] loop3: detected capacity change from 0 to 128
[  361.986171][ T8817] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none.
[  362.009617][ T8817] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  362.045734][ T4272] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  362.204101][ T4176] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  362.216310][ T4176] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  362.303722][ T4272] usb 5-1: Using ep0 maxpacket: 16
[  362.439690][ T4272] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  362.463949][ T4272] usb 5-1: config 0 has no interface number 0
[  362.491516][ T4272] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  362.522438][ T4272] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  362.704027][ T4272] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  362.723524][ T4272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.754145][ T4272] usb 5-1: Product: syz
[  362.758389][ T4272] usb 5-1: Manufacturer: syz
[  362.773865][ T4272] usb 5-1: SerialNumber: syz
[  362.797077][ T4272] usb 5-1: config 0 descriptor??
[  362.821104][ T8813] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  362.833774][ T8813] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  363.058222][ T8813] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  363.091171][ T8813] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  363.124068][ T4176] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  363.142482][ T4176] smsc95xx: probe of 9-1:0.67 failed with error -71
[  363.172280][ T4176] usb 9-1: USB disconnect, device number 6
[  363.702051][ T4272] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  363.743928][ T4272] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  363.762576][ T4272] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  363.774436][ T4272] asix: probe of 5-1:0.34 failed with error -61
[  363.948480][ T8884] loop8: detected capacity change from 0 to 2048
[  364.050120][ T8884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.299812][ T8893] loop3: detected capacity change from 0 to 128
[  364.357511][ T8899] loop8: detected capacity change from 0 to 512
[  364.381314][ T8893] EXT4-fs (loop3): Test dummy encryption mode enabled
[  364.405725][ T8893] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  364.452682][ T8899] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  364.476926][ T8893] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sb=0x8000000000000000,jqfmt=vfsv1,dioread_nolock,nogrpid,noload,,errors=continue. Quota mode: none.
[  364.499965][ T8893] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  364.611259][ T8899] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  364.663237][ T8899] Quota error (device loop8): write_blk: dquota write failed
[  364.671198][ T8899] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5
[  364.680750][ T8899] Quota error (device loop8): write_blk: dquota write failed
[  364.688646][ T8899] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  364.701062][ T8899] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.1227: Failed to acquire dquot type 1
[  364.723091][ T8899] EXT4-fs (loop8): 1 truncate cleaned up
[  364.754767][ T8899] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  365.506082][ T8420] usb 5-1: USB disconnect, device number 13
[  365.883267][ T8945] loop8: detected capacity change from 0 to 2048
[  365.998512][ T8945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  367.569426][ T8420] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  367.783849][ T4300] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  367.925617][ T8420] usb 9-1: Using ep0 maxpacket: 16
[  368.058040][ T8420] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[  368.155452][ T8420] usb 9-1: config 0 has no interface number 0
[  368.287850][ T8420] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  368.558006][ T8420] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  368.784305][ T8420] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  368.812552][ T8420] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.823773][ T4300] usb 4-1: Using ep0 maxpacket: 32
[  368.860799][ T8420] usb 9-1: Product: syz
[  368.865953][ T8420] usb 9-1: Manufacturer: syz
[  368.875814][ T8420] usb 9-1: SerialNumber: syz
[  368.897367][ T8420] usb 9-1: config 0 descriptor??
[  368.934211][ T8978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  368.941339][ T8978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  369.195722][ T8978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  369.228992][ T8978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  369.514066][ T8420] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  369.723922][ T8420] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  369.760570][ T8420] asix 9-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  369.816511][ T8420] asix: probe of 9-1:0.34 failed with error -61
[  369.961604][ T4300] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  369.969945][ T4300] usb 4-1: config 0 has no interface number 0
[  370.137217][ T4300] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  370.171991][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.181504][ T4300] usb 4-1: Product: syz
[  370.198963][ T4300] usb 4-1: Manufacturer: syz
[  370.203918][ T4300] usb 4-1: SerialNumber: syz
[  370.265372][ T4300] usb 4-1: config 0 descriptor??
[  370.304884][ T4300] smsc95xx v2.0.0
[  371.283740][ T4300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  371.304408][ T4300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  371.346928][ T4272] usb 9-1: USB disconnect, device number 7
[  371.713935][ T9077] loop8: detected capacity change from 0 to 128
[  371.762721][ T9077] EXT4-fs (loop8): Test dummy encryption mode enabled
[  371.800198][ T9077] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  371.864364][ T9077] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sb=0x8000000000000000,jqfmt=vfsv1,dioread_nolock,nogrpid,noload,,errors=continue. Quota mode: none.
[  371.890242][ T9077] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  372.010583][ T4300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  372.021888][ T4300] smsc95xx: probe of 4-1:0.67 failed with error -71
[  372.069972][ T4300] usb 4-1: USB disconnect, device number 4
[  372.630107][ T9115] loop3: detected capacity change from 0 to 256
[  373.636310][ T9127] loop3: detected capacity change from 0 to 2048
[  373.653234][ T9127] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.914590][ T9135] loop3: detected capacity change from 0 to 128
[  373.952964][ T9135] EXT4-fs (loop3): Test dummy encryption mode enabled
[  373.968252][ T9135] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  374.007783][ T9135] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sb=0x8000000000000000,jqfmt=vfsv1,dioread_nolock,nogrpid,noload,,errors=continue. Quota mode: none.
[  374.033832][ T9135] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  374.103681][ T4176] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  374.517586][ T4176] usb 9-1: Using ep0 maxpacket: 32
[  374.664308][ T4176] usb 9-1: config 0 has an invalid interface number: 20 but max is 0
[  374.682479][ T4176] usb 9-1: config 0 has no interface number 0
[  374.690220][ T1110] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  374.914968][ T4176] usb 9-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  375.053970][ T1110] usb 4-1: Using ep0 maxpacket: 32
[  375.131006][ T4176] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  375.302334][ T1110] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  375.350716][ T1110] usb 4-1: config 0 has no interface number 0
[  375.377912][ T4176] usb 9-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  375.564118][ T1110] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  375.584137][ T4176] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  375.602284][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.619373][ T4176] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.633766][ T1110] usb 4-1: Product: syz
[  375.643864][ T4176] usb 9-1: Product: syz
[  375.648086][ T4176] usb 9-1: Manufacturer: syz
[  375.654280][ T1110] usb 4-1: Manufacturer: syz
[  375.658929][ T1110] usb 4-1: SerialNumber: syz
[  375.671338][ T4176] usb 9-1: SerialNumber: syz
[  375.688475][ T1110] usb 4-1: config 0 descriptor??
[  375.705995][ T4176] usb 9-1: config 0 descriptor??
[  375.734586][ T9132] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  375.764879][ T1110] smsc95xx v2.0.0
[  375.985915][ T4176] usb-storage 9-1:0.20: USB Mass Storage device detected
[  376.201869][ T4176] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  376.210858][ T1110] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  376.241134][ T1110] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  376.590630][ T9132] loop8: detected capacity change from 0 to 2048
[  376.949097][ T9132] UDF-fs: bad mount option "ÿÿÿÿ" or missing value
[  377.071546][ T4176] scsi host1: usb-storage 9-1:0.20
[  377.211118][ T4176] usb 9-1: USB disconnect, device number 8
[  377.400319][ T1110] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71
[  377.419545][ T1110] smsc95xx: probe of 4-1:0.67 failed with error -71
[  377.456778][ T1110] usb 4-1: USB disconnect, device number 5
[  377.507546][ T9231] loop3: detected capacity change from 0 to 2048
[  377.549535][ T9231] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  377.888844][ T9245] loop8: detected capacity change from 0 to 128
[  378.085285][ T9245] EXT4-fs (loop8): Test dummy encryption mode enabled
[  378.092196][ T9245] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  378.201251][ T9245] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sb=0x8000000000000000,jqfmt=vfsv1,dioread_nolock,nogrpid,noload,,errors=continue. Quota mode: none.
[  378.245552][ T9245] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  378.734527][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.741562][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  380.283761][    T7] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  380.533766][    T7] usb 9-1: Using ep0 maxpacket: 32
[  380.653995][    T7] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  380.662168][    T7] usb 9-1: config 0 has no interface number 0
[  380.843766][ T2305] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  380.853902][    T7] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  380.865292][    T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.893277][    T7] usb 9-1: Product: syz
[  380.902220][    T7] usb 9-1: Manufacturer: syz
[  380.912365][    T7] usb 9-1: SerialNumber: syz
[  380.934922][    T7] usb 9-1: config 0 descriptor??
[  380.985276][    T7] smsc95xx v2.0.0
[  381.106060][ T2305] usb 4-1: Using ep0 maxpacket: 16
[  381.983921][ T2305] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  381.992091][ T2305] usb 4-1: config 0 has no interface number 0
[  382.000267][    T7] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  382.014255][    T7] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  382.023489][ T2305] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  382.043784][ T2305] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  383.113886][ T2305] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  383.123014][ T2305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.170288][ T2305] usb 4-1: Product: syz
[  383.183652][ T2305] usb 4-1: Manufacturer: syz
[  383.188361][ T2305] usb 4-1: SerialNumber: syz
[  383.234394][ T2305] usb 4-1: config 0 descriptor??
[  383.263962][ T9289] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  383.271281][ T9289] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  383.506042][    T7] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  383.521131][ T9289] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  383.536398][    T7] smsc95xx: probe of 9-1:0.67 failed with error -71
[  383.548433][ T4235] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  383.557737][ T9289] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  383.590166][    T7] usb 9-1: USB disconnect, device number 9
[  383.808518][ T2305] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  385.143650][    T7] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  385.553898][    T7] usb 9-1: unable to get BOS descriptor or descriptor too short
[  385.613876][    T7] usb 9-1: not running at top speed; connect to a high speed hub
[  385.633948][ T2305] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  385.665806][ T2305] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  385.693897][    T7] usb 9-1: config index 0 descriptor too short (expected 59022, got 142)
[  385.702385][    T7] usb 9-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  385.734439][ T2305] asix: probe of 4-1:0.34 failed with error -71
[  385.773475][ T2305] usb 4-1: USB disconnect, device number 6
[  385.781126][    T7] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  385.963980][    T7] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  385.973097][    T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.029573][    T7] usb 9-1: Product: syz
[  386.080685][    T7] usb 9-1: Manufacturer: syz
[  386.098299][    T7] usb 9-1: SerialNumber: syz
[  387.364349][    T7] usb 9-1: can't set config #1, error -71
[  387.379569][    T7] usb 9-1: USB disconnect, device number 10
[  387.592570][ T9445] loop8: detected capacity change from 0 to 256
[  389.896012][ T9471] loop3: detected capacity change from 0 to 128
[  390.085238][ T9471] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none.
[  390.103971][ T9471] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  390.261421][ T9471] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  390.663003][ T9498] loop3: detected capacity change from 0 to 512
[  390.758485][ T9498] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  390.866820][ T9498] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  390.893878][ T9498] Quota error (device loop3): write_blk: dquota write failed
[  390.911662][ T9498] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  390.966335][ T9498] Quota error (device loop3): write_blk: dquota write failed
[  390.983854][ T9498] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  390.994083][ T9498] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1371: Failed to acquire dquot type 1
[  391.006993][ T9498] EXT4-fs (loop3): 1 truncate cleaned up
[  391.014655][ T9498] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  391.673749][   T23] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  392.074050][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[  392.113898][   T23] usb 4-1: not running at top speed; connect to a high speed hub
[  392.193902][   T23] usb 4-1: config index 0 descriptor too short (expected 59022, got 142)
[  392.202411][   T23] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  392.350643][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  393.007836][   T23] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  393.274714][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.318846][   T23] usb 4-1: Product: syz
[  393.323085][   T23] usb 4-1: Manufacturer: syz
[  393.368755][   T23] usb 4-1: SerialNumber: syz
[  393.436837][   T23] usb 4-1: selecting invalid altsetting 1
[  393.467444][   T23] usb 4-1: unit 0 not found!
[  394.423940][   T23] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3
[  394.433683][   T23] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2)
[  394.454165][   T23] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3
[  394.488468][   T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  394.514425][   T23] usb 4-1: USB disconnect, device number 7
[  394.804692][ T8577] udevd[8577]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  394.913720][ T4176] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  397.094231][   T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  398.153794][   T23] usb 4-1: Using ep0 maxpacket: 32
[  398.273857][   T23] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  398.282493][   T23] usb 4-1: config 0 has no interface number 0
[  398.330145][   T23] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  398.364496][   T23] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  398.415608][   T23] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  398.473742][ T4176] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  398.623959][   T23] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  398.643432][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.666826][   T23] usb 4-1: Product: syz
[  398.671069][   T23] usb 4-1: Manufacturer: syz
[  398.706880][   T23] usb 4-1: SerialNumber: syz
[  398.738992][   T23] usb 4-1: config 0 descriptor??
[  398.774131][ T9590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  398.843808][ T4176] usb 5-1: config 8 has an invalid interface number: 212 but max is 1
[  398.852147][ T4176] usb 5-1: config 8 has an invalid descriptor of length 76, skipping remainder of the config
[  398.913846][ T4176] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2
[  398.944366][ T4176] usb 5-1: config 8 has no interface number 0
[  398.950584][ T4176] usb 5-1: config 8 interface 212 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  399.004530][   T23] usb-storage 4-1:0.20: USB Mass Storage device detected
[  399.012285][ T4176] usb 5-1: config 8 interface 212 has no altsetting 0
[  399.044213][   T23] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  399.203813][ T4176] usb 5-1: New USB device found, idVendor=19d2, idProduct=7fc1, bcdDevice=e8.57
[  399.239492][ T4176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.265902][ T9590] loop3: detected capacity change from 0 to 2048
[  399.303140][ T4176] usb 5-1: Product: syz
[  399.319910][ T4176] usb 5-1: Manufacturer: syz
[  399.339027][ T4176] usb 5-1: SerialNumber: syz
[  399.374784][ T9590] UDF-fs: bad mount option "ÿÿÿÿ" or missing value
[  399.431803][   T23] scsi host1: usb-storage 4-1:0.20
[  399.627792][   T23] usb 4-1: USB disconnect, device number 8
[  399.674501][ T4176] usb 5-1: bad CDC descriptors
[  399.701809][ T4176] usb 5-1: USB disconnect, device number 16
[  400.305485][ T9650] loop3: detected capacity change from 0 to 512
[  400.394972][ T9650] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  400.518545][ T9650] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  400.605333][ T9650] Quota error (device loop3): write_blk: dquota write failed
[  400.659457][ T9650] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  400.673748][ T9650] Quota error (device loop3): write_blk: dquota write failed
[  400.699139][ T9650] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  400.730380][ T9650] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1409: Failed to acquire dquot type 1
[  400.783957][ T9650] EXT4-fs (loop3): 1 truncate cleaned up
[  400.789683][ T9650] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  400.903813][   T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  401.636391][ T9682] loop8: detected capacity change from 0 to 8
[  403.183679][ T4176] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  403.361350][ T9712] tmpfs: Unknown parameter 'nr_ino'
[  403.423960][ T4176] usb 5-1: Using ep0 maxpacket: 32
[  403.543859][ T4176] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  403.552024][ T4176] usb 5-1: config 0 has no interface number 0
[  403.656216][ T4176] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  403.701187][ T4176] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  403.826541][ T4176] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  404.053888][ T4176] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  404.073711][ T4176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.081877][ T4176] usb 5-1: Product: syz
[  404.152570][ T4176] usb 5-1: Manufacturer: syz
[  404.172969][ T4176] usb 5-1: SerialNumber: syz
[  404.224579][ T4176] usb 5-1: config 0 descriptor??
[  404.243966][ T9698] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  404.439716][ T9731] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  404.474517][ T4176] usb-storage 5-1:0.20: USB Mass Storage device detected
[  404.521224][ T4176] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  404.632850][ T4300] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  404.800386][ T4176] scsi host1: usb-storage 5-1:0.20
[  404.999000][    T7] usb 5-1: USB disconnect, device number 18
[  406.616556][ T9790] tmpfs: Unknown parameter 'nr_ino'
[  408.713775][ T4176] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  408.963688][ T4176] usb 5-1: Using ep0 maxpacket: 32
[  409.104041][ T4176] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  409.134223][ T4176] usb 5-1: config 0 has no interface number 0
[  409.344362][ T4176] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  409.380361][ T4176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.443856][ T4176] usb 5-1: Product: syz
[  409.448105][ T4176] usb 5-1: Manufacturer: syz
[  409.452739][ T4176] usb 5-1: SerialNumber: syz
[  409.507800][ T4176] usb 5-1: config 0 descriptor??
[  409.585848][ T4176] smsc95xx v2.0.0
[  410.003867][ T4176] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  410.042447][ T4176] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  410.046754][ T9837] tmpfs: Unknown parameter 'nr_ino'
[  410.303783][ T4176] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  410.327297][ T4176] smsc95xx: probe of 5-1:0.67 failed with error -32
[  411.381613][ T9859] loop3: detected capacity change from 0 to 1024
[  411.438736][ T4233] usb 5-1: USB disconnect, device number 19
[  412.073866][ T9859] EXT4-fs (loop3): inline encryption not supported
[  412.266741][ T9859] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,inlinecrypt,,errors=continue. Quota mode: none.
[  412.323693][ T9859] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  412.620685][ T9859] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.1441: directory missing '..'
[  413.309368][ T9901] tmpfs: Bad value for 'nr_inodes'
[  413.999275][ T4233] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  414.293748][ T4300] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  415.074132][ T4233] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.103874][ T4233] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.153770][ T4233] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  415.213746][ T4233] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  415.260957][ T4233] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.308339][ T4233] usb 9-1: config 0 descriptor??
[  415.379241][ T4300] usb 4-1: Using ep0 maxpacket: 32
[  415.463906][ T8420] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  415.524162][ T4300] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  415.532330][ T4300] usb 4-1: config 0 has no interface number 0
[  415.703718][ T8420] usb 5-1: Using ep0 maxpacket: 32
[  415.733938][ T4300] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  415.759256][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.777744][ T4300] usb 4-1: Product: syz
[  415.792241][ T4300] usb 4-1: Manufacturer: syz
[  415.802367][ T4300] usb 4-1: SerialNumber: syz
[  415.809798][ T4233] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  415.828011][ T4233] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  415.844228][ T4300] usb 4-1: config 0 descriptor??
[  415.851595][ T4233] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  415.863931][ T8420] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  415.872156][ T8420] usb 5-1: config 0 has no interface number 0
[  415.880739][ T4233] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  415.889956][ T4300] smsc95xx v2.0.0
[  415.902060][ T4233] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  415.919188][ T4233] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  415.919886][ T8420] usb 5-1: config 0 interface 184 has no altsetting 0
[  415.937838][ T4233] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  415.954683][ T4233] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  415.998202][ T4233] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  416.118412][ T4233] usb 9-1: USB disconnect, device number 12
[  416.135225][ T8420] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  416.153109][ T8420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.183048][ T8420] usb 5-1: Product: syz
[  416.200368][ T8420] usb 5-1: Manufacturer: syz
[  416.219375][ T8420] usb 5-1: SerialNumber: syz
[  416.259416][ T8420] usb 5-1: config 0 descriptor??
[  416.288694][ T9954] fido_id[9954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  416.329539][ T8420] smsc75xx v1.0.0
[  416.343792][ T4300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  416.375198][ T4300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  416.663800][ T4300] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  416.715533][ T4300] smsc95xx: probe of 4-1:0.67 failed with error -32
[  416.756761][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1479'.
[  416.911590][ T9980] tmpfs: Bad value for 'nr_inodes'
[  417.964100][ T4176] usb 4-1: USB disconnect, device number 10
[  418.021816][ T9995] loop3: detected capacity change from 0 to 1024
[  418.174670][ T9995] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  418.229049][ T9995] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.1485: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0
[  418.432745][ T9995] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1808: Corrupt filesystem
[  418.720739][ T4205] Bluetooth: min 0 < 6
[  418.766794][T10023] loop8: detected capacity change from 0 to 2048
[  418.843880][ T8420] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  418.910477][T10023] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  418.933992][ T8420] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  418.948771][T10023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  419.004010][ T8420] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  419.042592][ T8420] smsc75xx: probe of 5-1:0.184 failed with error -71
[  419.081506][ T8420] usb 5-1: USB disconnect, device number 20
[  419.205577][T10034] tmpfs: Bad value for 'nr_inodes'
[  419.396844][T10044] loop8: detected capacity change from 0 to 128
[  419.498447][T10044] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  419.560005][T10044] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.888069][T10064] loop3: detected capacity change from 0 to 8
[  421.725783][ T4235] Bluetooth: hci2: command 0x2021 tx timeout
[  422.303733][ T4233] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  422.333732][ T4235] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  422.563788][ T4233] usb 4-1: Using ep0 maxpacket: 32
[  422.754057][ T4233] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  422.762210][ T4233] usb 4-1: config 0 has no interface number 0
[  423.024061][ T4233] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  423.033178][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.066815][ T4233] usb 4-1: Product: syz
[  423.076684][ T4233] usb 4-1: Manufacturer: syz
[  423.092792][ T4233] usb 4-1: SerialNumber: syz
[  423.122882][ T4233] usb 4-1: config 0 descriptor??
[  423.204957][ T4233] smsc95xx v2.0.0
[  423.355494][T10130] loop8: detected capacity change from 0 to 512
[  423.430152][T10130] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  423.467864][T10125] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  423.488563][T10130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e12c, mo2=0002]
[  423.505244][T10130] System zones: 1-12
[  423.514907][T10130] EXT4-fs (loop8): orphan cleanup on readonly fs
[  423.531723][T10130] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.1516: attempt to clear invalid blocks 1024 len 1
[  423.556388][T10130] EXT4-fs (loop8): Remounting filesystem read-only
[  423.574294][T10130] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1516: bg 0: block 361: padding at end of block bitmap is not set
[  423.633928][ T4233] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  423.663636][ T4233] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  423.676272][T10138] tmpfs: Bad value for 'nr_inodes'
[  423.690087][T10130] EXT4-fs (loop8): Remounting filesystem read-only
[  423.703361][T10130] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  423.741576][T10130] EXT4-fs (loop8): Remounting filesystem read-only
[  423.761308][T10130] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1516: invalid indirect mapped block 1811939328 (level 0)
[  423.810418][T10130] EXT4-fs (loop8): Remounting filesystem read-only
[  423.837226][T10130] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1516: invalid indirect mapped block 2 (level 2)
[  423.857691][T10130] EXT4-fs (loop8): Remounting filesystem read-only
[  423.867464][T10130] EXT4-fs (loop8): 1 truncate cleaned up
[  423.878476][T10130] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,journal_ioprio=0x0000000000000000,discard,errors=remount-ro,usrjquota=. Quota mode: none.
[  423.933757][ T4233] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  423.952020][T10130] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  423.964107][ T4233] smsc95xx: probe of 4-1:0.67 failed with error -32
[  423.999566][T10130] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.049614][T10157] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.079732][T10157] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.103468][T10130] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.127662][T10130] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.152342][T10130] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.172503][T10130] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.189878][T10130] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.204762][T10130] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.219259][T10130] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.249503][T10130] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.270696][T10130] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.299384][T10130] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.330359][T10157] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.357549][T10157] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.432121][T10130] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.466518][T10130] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  424.487314][T10157] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 5: comm syz.8.1516: lblock 0 mapped to illegal pblock 5 (length 1)
[  424.533279][T10157] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1516: error -117 reading directory block
[  425.614437][T10206] ODEBUG: Out of memory. ODEBUG disabled
[  426.224274][ T4233] usb 4-1: USB disconnect, device number 11
[  426.919033][T10217] tmpfs: Bad value for 'nr_inodes'
[  429.010872][ T4300] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  430.495554][T10252] loop8: detected capacity change from 0 to 512
[  430.633881][T10252] EXT4-fs (loop8): Unrecognized mount option "seclabel" or missing value
[  431.202425][T10267] loop8: detected capacity change from 0 to 128
[  431.293003][T10267] EXT4-fs (loop8): Test dummy encryption mode enabled
[  431.330747][T10267] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  431.430341][T10267] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sb=0x8000000000000000,jqfmt=vfsv1,dioread_nolock,nogrpid,noload,,errors=continue. Quota mode: none.
[  431.537601][T10267] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  432.053512][T10295] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1550'.
[  432.200954][T10305] loop3: detected capacity change from 0 to 512
[  432.200956][T10300] loop8: detected capacity change from 0 to 2048
[  432.304046][T10300] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000" or missing value
[  432.339485][T10305] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  432.414533][T10305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e12c, mo2=0002]
[  432.453889][    T7] Bluetooth: hci2: command 0x0406 tx timeout
[  432.562826][T10305] System zones: 1-12
[  432.573399][T10305] EXT4-fs (loop3): orphan cleanup on readonly fs
[  432.642120][T10305] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1556: attempt to clear invalid blocks 1024 len 1
[  432.665029][T10305] EXT4-fs (loop3): Remounting filesystem read-only
[  432.835992][T10305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1556: bg 0: block 361: padding at end of block bitmap is not set
[  432.850701][    T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  433.042910][T10305] EXT4-fs (loop3): Remounting filesystem read-only
[  433.173923][    T7] usb 5-1: Using ep0 maxpacket: 32
[  433.252685][T10305] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  433.314047][    T7] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  433.322199][    T7] usb 5-1: config 0 has no interface number 0
[  433.344197][T10305] EXT4-fs (loop3): Remounting filesystem read-only
[  433.387334][T10305] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1556: invalid indirect mapped block 1811939328 (level 0)
[  433.442428][T10305] EXT4-fs (loop3): Remounting filesystem read-only
[  433.454869][T10305] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1556: invalid indirect mapped block 2 (level 2)
[  433.473142][T10305] EXT4-fs (loop3): Remounting filesystem read-only
[  433.493905][T10305] EXT4-fs (loop3): 1 truncate cleaned up
[  433.499635][T10305] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,journal_ioprio=0x0000000000000000,discard,errors=remount-ro,usrjquota=. Quota mode: none.
[  433.566562][T10305] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 5: comm syz.3.1556: lblock 0 mapped to illegal pblock 5 (length 1)
[  433.604006][    T7] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  433.613988][T10343] loop8: detected capacity change from 0 to 128
[  433.630536][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.659628][    T7] usb 5-1: Product: syz
[  433.775870][T10305] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1556: error -117 reading directory block
[  433.839073][T10305] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 5: comm syz.3.1556: lblock 0 mapped to illegal pblock 5 (length 1)
[  433.969897][T10305] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1556: error -117 reading directory block
[  434.465347][T10305] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 5: comm syz.3.1556: lblock 0 mapped to illegal pblock 5 (length 1)
[  434.498010][    T7] usb 5-1: Manufacturer: syz
[  434.502884][    T7] usb 5-1: SerialNumber: syz
[  434.509511][    T7] usb 5-1: config 0 descriptor??
[  434.523221][T10305] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1556: error -117 reading directory block
[  434.526384][T10343] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  434.551704][T10343] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  434.564811][    T7] smsc95xx v2.0.0
[  435.921243][T10346] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 5: comm syz.3.1556: lblock 0 mapped to illegal pblock 5 (length 1)
[  435.978856][T10346] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1556: error -117 reading directory block
[  436.873728][    T7] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  436.890790][    T7] smsc95xx: probe of 5-1:0.67 failed with error -71
[  436.899874][T10348] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 5: comm syz.3.1556: lblock 0 mapped to illegal pblock 5 (length 1)
[  436.939408][    T7] usb 5-1: USB disconnect, device number 22
[  437.153998][T10348] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1556: error -117 reading directory block
[  437.372356][T10373] loop3: detected capacity change from 0 to 512
[  437.454290][T10373] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  437.555980][T10373] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  437.665903][T10373] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  438.778020][T10384] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1572'.
[  439.786915][T10399] loop8: detected capacity change from 0 to 128
[  439.871325][T10399] EXT4-fs (loop8): Test dummy encryption mode enabled
[  439.880180][T10399] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  439.930476][T10399] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sb=0x8000000000000000,jqfmt=vfsv1,dioread_nolock,nogrpid,noload,,errors=continue. Quota mode: none.
[  439.964480][T10399] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  440.037684][T10404] loop3: detected capacity change from 0 to 4096
[  440.116927][T10404] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  440.136710][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.143050][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.179968][   T26] audit: type=1800 audit(1783829476.156:18): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1579" name="file0" dev="loop3" ino=13 res=0 errno=0
[  441.279258][T10416] binder: 10415:10416 ioctl 4018620d 0 returned -22
[  441.703797][ T4176] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  441.943674][ T4176] usb 4-1: Using ep0 maxpacket: 32
[  442.063887][ T4176] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  442.092540][ T4176] usb 4-1: config 0 has no interface number 0
[  442.263905][ T4176] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  442.299289][ T4176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.464115][ T4176] usb 4-1: Product: syz
[  442.468471][ T4176] usb 4-1: Manufacturer: syz
[  442.474400][ T4176] usb 4-1: SerialNumber: syz
[  442.480436][T10461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  442.568269][ T4176] usb 4-1: config 0 descriptor??
[  442.627784][ T4176] smsc95xx v2.0.0
[  444.213827][ T4176] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  444.240228][ T4233] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  444.372167][ T4176] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  444.444183][ T4205] ==================================================================
[  444.452845][ T4205] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0
[  444.460942][ T4205] Read of size 1 at addr ffff88807e931402 by task kworker/u5:8/4205
[  444.469037][ T4205] 
[  444.471471][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0
[  444.479094][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  444.489188][ T4205] Workqueue: hci1 hci_rx_work
[  444.493929][ T4205] Call Trace:
[  444.497297][ T4205]  <TASK>
[  444.500357][ T4205]  dump_stack_lvl+0x188/0x250
[  444.505158][ T4205]  ? show_regs_print_info+0x20/0x20
[  444.510549][ T4205]  ? load_image+0x410/0x410
[  444.515110][ T4205]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  444.520721][ T4205]  print_address_description+0x60/0x2d0
[  444.526529][ T4205]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  444.531686][ T4205]  kasan_report+0xdf/0x130
[  444.536273][ T4205]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  444.541433][ T4205]  hci_le_meta_evt+0x12ea/0x3ca0
[  444.546415][ T4205]  ? hci_event_packet+0x363/0x1310
[  444.551580][ T4205]  ? __lock_acquire+0x7b50/0x7b50
[  444.556780][ T4205]  ? hci_remote_host_features_evt+0x240/0x240
[  444.562896][ T4205]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  444.568628][ T4205]  ? mark_lock+0x94/0x320
[  444.573028][ T4205]  ? mutex_unlock+0x10/0x10
[  444.577590][ T4205]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  444.583708][ T4205]  ? lock_chain_count+0x20/0x20
[  444.588669][ T4205]  ? __rwlock_init+0x140/0x140
[  444.593505][ T4205]  hci_event_packet+0xe0b/0x1310
[  444.598489][ T4205]  ? _raw_spin_unlock+0x40/0x40
[  444.603382][ T4205]  ? rcu_lock_release+0x20/0x20
[  444.608298][ T4205]  ? hci_send_to_monitor+0x9c/0x4a0
[  444.613635][ T4205]  hci_rx_work+0x255/0xa10
[  444.618120][ T4205]  process_one_work+0x867/0xff0
[  444.623135][ T4205]  ? worker_detach_from_pool+0x240/0x240
[  444.628817][ T4205]  ? lockdep_hardirqs_off+0x70/0x100
[  444.634230][ T4205]  ? _raw_spin_lock_irq+0xb7/0xf0
[  444.639320][ T4205]  ? _raw_spin_lock_irqsave+0x100/0x100
[  444.644906][ T4205]  ? wq_worker_running+0x97/0x170
[  444.649971][ T4205]  worker_thread+0xad7/0x12a0
[  444.654716][ T4205]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  444.660669][ T4205]  kthread+0x42e/0x520
[  444.664861][ T4205]  ? rcu_lock_release+0x20/0x20
[  444.670008][ T4205]  ? kthread_blkcg+0xd0/0xd0
[  444.674644][ T4205]  ret_from_fork+0x1f/0x30
[  444.679159][ T4205]  </TASK>
[  444.682276][ T4205] 
[  444.684626][ T4205] Allocated by task 10479:
[  444.689131][ T4205]  __kasan_kmalloc+0xaf/0xe0
[  444.693777][ T4205]  __alloc_skb+0x22c/0x750
[  444.698388][ T4205]  vhci_write+0xbd/0x440
[  444.702755][ T4205]  vfs_write+0x748/0xd70
[  444.707103][ T4205]  ksys_write+0x153/0x260
[  444.711466][ T4205]  do_syscall_64+0x4c/0xa0
[  444.715920][ T4205]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  444.721852][ T4205] 
[  444.724210][ T4205] Last potentially related work creation:
[  444.729946][ T4205]  kasan_save_stack+0x35/0x60
[  444.734659][ T4205]  kasan_record_aux_stack+0xb8/0x100
[  444.739980][ T4205]  kvfree_call_rcu+0x105/0x7f0
[  444.744895][ T4205]  drop_sysctl_table+0x359/0x4e0
[  444.749970][ T4205]  unregister_sysctl_table+0x87/0x130
[  444.755372][ T4205]  neigh_sysctl_unregister+0x74/0x90
[  444.760810][ T4205]  addrconf_ifdown+0x1701/0x19f0
[  444.765882][ T4205]  addrconf_notify+0x445/0xf20
[  444.770742][ T4205]  raw_notifier_call_chain+0xcb/0x160
[  444.776325][ T4205]  unregister_netdevice_many+0x109b/0x1a40
[  444.782386][ T4205]  default_device_exit_batch+0x364/0x3c0
[  444.788066][ T4205]  cleanup_net+0x78e/0xba0
[  444.792521][ T4205]  process_one_work+0x867/0xff0
[  444.797442][ T4205]  worker_thread+0xad7/0x12a0
[  444.802341][ T4205]  kthread+0x42e/0x520
[  444.806456][ T4205]  ret_from_fork+0x1f/0x30
[  444.811093][ T4205] 
[  444.813444][ T4205] Second to last potentially related work creation:
[  444.820156][ T4205]  kasan_save_stack+0x35/0x60
[  444.824890][ T4205]  kasan_record_aux_stack+0xb8/0x100
[  444.830307][ T4205]  kvfree_call_rcu+0x105/0x7f0
[  444.835295][ T4205]  batadv_hard_if_event+0x8ac/0x17f0
[  444.840762][ T4205]  raw_notifier_call_chain+0xcb/0x160
[  444.846345][ T4205]  unregister_netdevice_many+0x109b/0x1a40
[  444.852190][ T4205]  ip6gre_exit_batch_net+0x44c/0x4a0
[  444.857912][ T4205]  cleanup_net+0x78e/0xba0
[  444.862392][ T4205]  process_one_work+0x867/0xff0
[  444.867290][ T4205]  worker_thread+0xad7/0x12a0
[  444.872016][ T4205]  kthread+0x42e/0x520
[  444.876123][ T4205]  ret_from_fork+0x1f/0x30
[  444.880612][ T4205] 
[  444.882963][ T4205] The buggy address belongs to the object at ffff88807e931000
[  444.882963][ T4205]  which belongs to the cache kmalloc-1k of size 1024
[  444.897204][ T4205] The buggy address is located 2 bytes to the right of
[  444.897204][ T4205]  1024-byte region [ffff88807e931000, ffff88807e931400)
[  444.912321][ T4205] The buggy address belongs to the page:
[  444.918015][ T4205] page:ffffea0001fa4c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e930
[  444.928355][ T4205] head:ffffea0001fa4c00 order:3 compound_mapcount:0 compound_pincount:0
[  444.936718][ T4205] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  444.945056][ T4205] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0
[  444.953682][ T4205] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  444.962315][ T4205] page dumped because: kasan: bad access detected
[  444.968786][ T4205] page_owner tracks the page as allocated
[  444.974529][ T4205] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3994, ts 50154591022, free_ts 47505359889
[  444.993697][ T4205]  get_page_from_freelist+0x24f6/0x2670
[  444.999597][ T4205]  __alloc_pages+0x1ee/0x480
[  445.004237][ T4205]  new_slab+0xc0/0x4b0
[  445.008466][ T4205]  ___slab_alloc+0x807/0xdd0
[  445.013138][ T4205]  __kmalloc_node+0x142/0x3a0
[  445.017862][ T4205]  kvmalloc_node+0x84/0x130
[  445.022493][ T4205]  bpf_int_jit_compile+0x3df/0xc4d0
[  445.027807][ T4205]  bpf_prog_select_runtime+0x46f/0x7b0
[  445.033402][ T4205]  bpf_prepare_filter+0x100e/0x11b0
[  445.038707][ T4205]  sk_attach_filter+0x20/0x140
[  445.043515][ T4205]  sock_setsockopt+0x18c7/0x2480
[  445.048580][ T4205]  __sys_setsockopt+0x2f6/0x3d0
[  445.053612][ T4205]  __x64_sys_setsockopt+0xb1/0xc0
[  445.058686][ T4205]  do_syscall_64+0x4c/0xa0
[  445.063144][ T4205]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  445.069077][ T4205] page last free stack trace:
[  445.073778][ T4205]  free_unref_page_prepare+0x637/0x6c0
[  445.079288][ T4205]  free_unref_page+0x8f/0x2a0
[  445.084011][ T4205]  free_nonslab_page+0xde/0x150
[  445.088901][ T4205]  skb_release_data+0x667/0x830
[  445.093792][ T4205]  consume_skb+0xa2/0x100
[  445.098172][ T4205]  skb_free_datagram+0x25/0xe0
[  445.102981][ T4205]  netlink_recvmsg+0x5dd/0xe50
[  445.107912][ T4205]  ____sys_recvmsg+0x2ca/0x5b0
[  445.112725][ T4205]  ___sys_recvmsg+0x213/0x5c0
[  445.117441][ T4205]  __x64_sys_recvmsg+0x201/0x2d0
[  445.122428][ T4205]  do_syscall_64+0x4c/0xa0
[  445.126893][ T4205]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  445.132834][ T4205] 
[  445.135185][ T4205] Memory state around the buggy address:
[  445.141068][ T4205]  ffff88807e931300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.149172][ T4205]  ffff88807e931380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  445.157290][ T4205] >ffff88807e931400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  445.166785][ T4205]                    ^
[  445.170898][ T4205]  ffff88807e931480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  445.179499][ T4205]  ffff88807e931500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  445.187605][ T4205] ==================================================================
[  445.195789][ T4205] Disabling lock debugging due to kernel taint
[  445.243074][ T4205] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  445.250490][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:8 Tainted: G    B             syzkaller #0
[  445.259880][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  445.270064][ T4205] Workqueue: hci1 hci_rx_work
[  445.274796][ T4205] Call Trace:
[  445.278151][ T4205]  <TASK>
[  445.281219][ T4205]  dump_stack_lvl+0x188/0x250
[  445.285939][ T4205]  ? show_regs_print_info+0x20/0x20
[  445.291178][ T4205]  ? load_image+0x410/0x410
[  445.295723][ T4205]  panic+0x2f8/0x850
[  445.299659][ T4205]  ? bpf_jit_dump+0xd0/0xd0
[  445.304196][ T4205]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  445.310233][ T4205]  ? _raw_spin_unlock+0x40/0x40
[  445.315126][ T4205]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  445.320278][ T4205]  check_panic_on_warn+0x80/0xa0
[  445.325344][ T4205]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  445.330622][ T4205]  end_report+0x6d/0xf0
[  445.335016][ T4205]  kasan_report+0x102/0x130
[  445.340102][ T4205]  ? hci_le_meta_evt+0x12ea/0x3ca0
[  445.345263][ T4205]  hci_le_meta_evt+0x12ea/0x3ca0
[  445.350334][ T4205]  ? hci_event_packet+0x363/0x1310
[  445.355660][ T4205]  ? __lock_acquire+0x7b50/0x7b50
[  445.360736][ T4205]  ? hci_remote_host_features_evt+0x240/0x240
[  445.366894][ T4205]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  445.372574][ T4205]  ? mark_lock+0x94/0x320
[  445.376935][ T4205]  ? mutex_unlock+0x10/0x10
[  445.381483][ T4205]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  445.388521][ T4205]  ? lock_chain_count+0x20/0x20
[  445.393430][ T4205]  ? __rwlock_init+0x140/0x140
[  445.398272][ T4205]  hci_event_packet+0xe0b/0x1310
[  445.403257][ T4205]  ? _raw_spin_unlock+0x40/0x40
[  445.408150][ T4205]  ? rcu_lock_release+0x20/0x20
[  445.413310][ T4205]  ? hci_send_to_monitor+0x9c/0x4a0
[  445.418543][ T4205]  hci_rx_work+0x255/0xa10
[  445.422998][ T4205]  process_one_work+0x867/0xff0
[  445.427890][ T4205]  ? worker_detach_from_pool+0x240/0x240
[  445.433559][ T4205]  ? lockdep_hardirqs_off+0x70/0x100
[  445.438879][ T4205]  ? _raw_spin_lock_irq+0xb7/0xf0
[  445.443949][ T4205]  ? _raw_spin_lock_irqsave+0x100/0x100
[  445.449535][ T4205]  ? wq_worker_running+0x97/0x170
[  445.454598][ T4205]  worker_thread+0xad7/0x12a0
[  445.459327][ T4205]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  445.465266][ T4205]  kthread+0x42e/0x520
[  445.469364][ T4205]  ? rcu_lock_release+0x20/0x20
[  445.474279][ T4205]  ? kthread_blkcg+0xd0/0xd0
[  445.478907][ T4205]  ret_from_fork+0x1f/0x30
[  445.483405][ T4205]  </TASK>
[  445.486709][ T4205] Kernel Offset: disabled
[  445.501540][ T4205] Rebooting in 86400 seconds..