last executing test programs:

9m44.815059177s ago: executing program 3 (id=313):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8be", 0x4}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000)

9m44.517379513s ago: executing program 3 (id=315):
syz_open_dev$vcsu(0x0, 0xc, 0x4000)
syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000002d80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x9, 0x0, 0x4, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x21, 0x1, 0x15, 0x8}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x307, 0x4, 0x4, 0x9, 0xe1e, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0xfd, 0x1, {0x8, 0x25, 0x1, 0x81, 0x0, 0x6a, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x6, 0x57, {0x8, 0x25, 0x1, 0x81, 0x0, 0x7, 0x7}}}}}}}}]}}, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20000004)

9m42.950986616s ago: executing program 3 (id=319):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x1, 0x3, 0x5})

9m37.795153981s ago: executing program 3 (id=324):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e25, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

9m36.404353105s ago: executing program 3 (id=329):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYRESHEX], 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000ffffff000003e400000000000000", @ANYRES32=0x0, @ANYBLOB="93200400040000002000128008000100736974001400028008000300e0000001080014"], 0x40}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x3, 0xfff, {{0x7, 0x4, 0x2, 0x6, 0x1c, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @private=0xa010100, {[@rr={0x7, 0x7, 0xde, [@loopback]}]}}}}})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x48)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x24, @loopback}}, 0x1e)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0)
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000200)=0x1)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="9e1bff8ead93d0a6f887248ccade03b344f223362a30dffb4b236d9fb910bab39a957c91c36ed402930bd21d9b4a5ba5", 0x30}], 0x1)

9m34.659394457s ago: executing program 3 (id=331):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x8, 0x0, 0x1, @local, @local, {[@routing={0x84}]}}}}}, 0x0)

9m19.425631858s ago: executing program 32 (id=331):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x8, 0x0, 0x1, @local, @local, {[@routing={0x84}]}}}}}, 0x0)

2m24.515300024s ago: executing program 0 (id=1258):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m23.965511563s ago: executing program 0 (id=1259):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@gid}, {@barrier}, {@umask={'umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "04c22302"}}, {@nls={'nls', 0x3d, 'koi8-r'}}, {@gid}, {@gid}, {@type={'type', 0x3d, "5361c9e5"}}]}, 0x1, 0x5de, &(0x7f0000000d40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m23.631480621s ago: executing program 0 (id=1261):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10)

2m23.498467058s ago: executing program 0 (id=1263):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x80a0000, 0x0, 0x0}]})
umount2(&(0x7f0000000040)='.\x00', 0x2)

2m22.220363306s ago: executing program 0 (id=1267):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000001040)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x0, {0x5, 0x7fff, 0x4, 0x3, 0x6a5e}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x650ce4b086bd440f)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
close_range(r5, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
chmod(0x0, 0x57eeb83c9526c7ac)

2m18.782459299s ago: executing program 0 (id=1274):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r3, 0x2007ffc)
sendfile(r3, r3, 0x0, 0x2000000000006)
lseek(r3, 0x8, 0x4)
fchdir(0xffffffffffffffff)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
select(0x0, 0x0, &(0x7f0000000140)={0x0, 0x4, 0xfffffffffffffffc, 0xfe, 0x7, 0x4, 0x0, 0x8}, 0x0, &(0x7f0000000040))
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000006c0))

2m3.241062736s ago: executing program 33 (id=1274):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r3, 0x2007ffc)
sendfile(r3, r3, 0x0, 0x2000000000006)
lseek(r3, 0x8, 0x4)
fchdir(0xffffffffffffffff)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
select(0x0, 0x0, &(0x7f0000000140)={0x0, 0x4, 0xfffffffffffffffc, 0xfe, 0x7, 0x4, 0x0, 0x8}, 0x0, &(0x7f0000000040))
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000006c0))

7.353298729s ago: executing program 5 (id=1631):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000541000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000064e000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
io_setup(0xbf, &(0x7f0000000100)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1}])

7.223160035s ago: executing program 5 (id=1633):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6aed42, 0x4)
openat$cgroup_ro(r3, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r4, 0x80432)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20020000}, 0xf058d226ed294f26)

5.473671719s ago: executing program 5 (id=1637):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x8, 0x7, 0x205})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000400)=0x10)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
close_range(r3, 0xffffffffffffffff, 0x2)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
r6 = socket$inet6_sctp(0xa, 0x4, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@int=0x1cf1, 0x4)

5.391118433s ago: executing program 2 (id=1639):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r0, 0x0, 0x8, 0x0)
setpgid(r0, 0x0)

5.07632419s ago: executing program 2 (id=1644):
syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "4535f9", 0x0, 0x32, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x22}}}}}, 0x0)

4.178750997s ago: executing program 1 (id=1645):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6aed42, 0x4)
openat$cgroup_ro(r3, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r4, 0x80432)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20020000}, 0xf058d226ed294f26)

4.091133392s ago: executing program 2 (id=1646):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000001040)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x650ce4b086bd440f)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
close_range(r5, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
chmod(0x0, 0x57eeb83c9526c7ac)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

4.090870382s ago: executing program 4 (id=1647):
syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}}, @timestamp={0xd, 0x0, 0x0, 0x7, 0x8001, 0xfffffffd, 0x2, 0x4}}}}}, 0x0)

3.581378009s ago: executing program 4 (id=1648):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@gid}, {@barrier}, {@umask={'umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "04c22302"}}, {@nls={'nls', 0x3d, 'koi8-r'}}, {@gid}, {@gid}, {@type={'type', 0x3d, "5361c9e5"}}]}, 0x1, 0x5de, &(0x7f0000000d40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba319", 0x23}, {0x0}, {&(0x7f0000000fc0)}, {0x0}], 0x4}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.501509313s ago: executing program 5 (id=1649):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6aed42, 0x4)
openat$cgroup_ro(r5, 0x0, 0x275a, 0xb)
r6 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r6, 0x80432)
setreuid(0x0, r4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020000}, 0xf058d226ed294f26)

2.179453454s ago: executing program 5 (id=1650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}}, 0x0)

2.179164244s ago: executing program 4 (id=1651):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0xc0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c)
mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c4217})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.033634992s ago: executing program 4 (id=1652):
openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0xc3, 0xfffa}, 0x3d, [0x6, 0xc95a, 0x3, 0x8, 0x81, 0x2, 0x1, 0x6f, 0x2, 0x4d, 0xb54a, 0x5f, 0xa, 0x0, 0xffff2d37, 0x5dd2, 0x6, 0x7, 0x100, 0x80000001, 0x79, 0xb, 0x3, 0x3c57, 0x1, 0x10000, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x97, 0x13f, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0x0, 0x71, 0xa, 0xa, 0x103, 0x0, 0x6, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x7fff, 0x6, 0x7, 0x80, 0x0, 0xc, 0x6, 0x8c0, 0x4, 0xffffffff, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0x3ff, 0xd, 0x2bf, 0x6c9, 0x1ff, 0x4, 0x3, 0x20000, 0x7, 0x1, 0x2f, 0x10, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x4, 0x400, 0x10001, 0x2, 0x400001, 0xff, 0x1005, 0x7ff, 0x80000000, 0x4, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffff7, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176be, 0x2, 0x80, 0x9, 0x8, 0x6, 0x4, 0x20001, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x64f, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0x80b, 0x5, 0x2, 0x60002, 0xf, 0x8, 0x9, 0x6d01, 0x5, 0x3b, 0x5, 0x200, 0x80, 0x103, 0x4, 0x12, 0xffffffff, 0xe, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x80000002, 0x6, 0xfffffffb, 0x11fffe, 0x3, 0xe0000020, 0x9, 0x4, 0x3], [0x9, 0xbb2e, 0x3, 0xfffffffc, 0x5, 0x10000, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0xd0, 0x3, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x800000, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0x103, 0xffff, 0x5, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x4, 0xffff, 0x101, 0x3, 0x80000001, 0x8, 0x2b91, 0x3, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

1.794555064s ago: executing program 5 (id=1653):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x810)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x3f)

1.657528751s ago: executing program 2 (id=1654):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})

1.507244369s ago: executing program 4 (id=1655):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x6ac7258a, 0xe9}}}}]}, 0x44}}, 0x4008000)

1.481497751s ago: executing program 1 (id=1656):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_le_read_buffer_size={{0x95}, {0x6, 0x4, 0x7f}}}}, 0xa)

1.178313557s ago: executing program 4 (id=1657):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x8, 0x7, 0x205})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000400)=0x10)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
close_range(r3, 0xffffffffffffffff, 0x2)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
r6 = socket$inet6_sctp(0xa, 0x4, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@int=0x1cf1, 0x4)

1.114634801s ago: executing program 1 (id=1658):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60081, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x6, 0xffffffff, 0x5, 0xffffff89, 0x1000000, 0x6, 0x3}, {0x1, 0x4000004, 0x0, 0x8, 0x4aed, 0x1, 0x6}, {0x0, 0x8, 0x1, 0x80000000, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x6, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x7, 0x400003, 0x40000005, 0xe0000}, {0x80000000, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

444.804506ms ago: executing program 2 (id=1659):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x801)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2)

419.031657ms ago: executing program 1 (id=1660):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9)

223.429668ms ago: executing program 1 (id=1661):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xb, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x5)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

86.258195ms ago: executing program 2 (id=1662):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4008080)
timer_create(0x6, 0x0, &(0x7f0000000380))
socket$key(0xf, 0x3, 0x2)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

0s ago: executing program 1 (id=1663):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6", 0x2d}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a", 0xab}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

.324730][ T8443] BTRFS info (device loop2): auto enabling async discard
[  386.770458][ T5771] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  388.117019][ T8474] tmpfs: Bad value for 'mpol'
[  391.148105][ T5816] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  391.690116][ T8486] loop4: detected capacity change from 0 to 1024
[  391.706844][ T8486] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  393.309601][ T8501] overlayfs: overlapping lowerdir path
[  395.454073][ T8523] syz.4.560 uses obsolete (PF_INET,SOCK_PACKET)
[  396.023235][ T8536] gretap1: entered promiscuous mode
[  396.493362][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  400.339711][ T8559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  401.100475][ T5777] Bluetooth: hci2: unexpected event for opcode 0x1004
[  401.387501][ T8566] loop4: detected capacity change from 0 to 40427
[  401.422841][ T8566] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  401.444717][ T8566] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  401.477601][ T8566] F2FS-fs (loop4): invalid crc_offset: 33558524
[  401.513722][ T8566] F2FS-fs (loop4): Found nat_bits in checkpoint
[  401.646326][ T8566] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  401.656195][ T8566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  402.032853][   T28] audit: type=1800 audit(2000000303.120:61): pid=8566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.571" name="file1" dev="loop4" ino=455 res=0 errno=0
[  402.935825][ T6143] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  403.127825][ T6143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.144997][ T6143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.155514][ T6143] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  403.175938][ T6143] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  403.235823][ T8613] random: crng reseeded on system resumption
[  404.167908][ T6143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.182967][ T6143] usb 5-1: config 0 descriptor??
[  404.619000][ T6143] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  404.642557][ T6143] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  404.738797][ T8623] tmpfs: Bad value for 'mpol'
[  404.900268][ T6143] usb 5-1: USB disconnect, device number 5
[  405.015841][ T6158] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  405.159324][ T5777] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  405.341689][ T8632] loop2: detected capacity change from 0 to 4096
[  405.359424][ T5777] Bluetooth: hci2: Injecting HCI hardware error event
[  405.371768][ T5777] Bluetooth: hci2: hardware error 0x00
[  405.536688][ T8632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.608463][ T8632] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.588: corrupted inode contents
[  405.638357][ T8632] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #15: comm syz.2.588: mark_inode_dirty error
[  405.666816][ T8632] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.588: corrupted inode contents
[  405.681181][ T8632] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.588: mark_inode_dirty error
[  405.698130][ T8632] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.588: corrupted inode contents
[  405.712124][ T8632] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.588: mark_inode_dirty error
[  405.726543][ T8632] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.588: corrupted inode contents
[  405.742989][ T8632] EXT4-fs error (device loop2): ext4_truncate:4301: inode #15: comm syz.2.588: mark_inode_dirty error
[  405.757681][ T8632] EXT4-fs error (device loop2) in ext4_setattr:5682: Corrupt filesystem
[  406.895558][ T8639] kvm: apic: phys broadcast and lowest prio
[  407.048938][ T6158] usb 2-1: Using ep0 maxpacket: 32
[  407.431190][ T5777] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  407.571756][ T8648] syzkaller0: entered promiscuous mode
[  407.587033][ T8648] syzkaller0: entered allmulticast mode
[  407.653087][ T6158] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  407.655944][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.661448][ T6158] usb 2-1: config 2 has no interface number 0
[  407.685810][ T6158] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  407.705715][ T6158] usb 2-1: config 2 interface 88 has no altsetting 0
[  407.715323][ T6158] usb 2-1: string descriptor 0 read error: -71
[  407.723426][ T6158] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  407.732774][ T6158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.765896][ T6158] usb 2-1: can't set config #2, error -71
[  407.810355][ T6158] usb 2-1: USB disconnect, device number 7
[  407.901186][ T8651] loop2: detected capacity change from 0 to 512
[  407.952570][ T8651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  407.961109][ T8651] System zones: 1-12
[  407.971349][ T8651] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.594: missing EA_INODE flag
[  408.135202][ T8651] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.594: error while reading EA inode 12 err=-117
[  408.200082][ T8651] EXT4-fs (loop2): 1 orphan inode deleted
[  408.217522][ T8651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.893768][ T8651] overlayfs: failed to resolve './file0': -2
[  411.008335][   T28] audit: type=1800 audit(2000000312.020:62): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.594" name="file1" dev="loop2" ino=21 res=0 errno=0
[  411.866797][ T8660] loop4: detected capacity change from 0 to 256
[  411.917198][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.936530][ T7966] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  412.459787][ T6143] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  412.699476][ T6143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.719450][ T6143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.744055][ T6143] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  412.762459][ T6143] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  412.778248][ T6143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.806271][ T6143] usb 1-1: config 0 descriptor??
[  413.580419][ T6143] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  413.710770][ T6143] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  413.911847][ T6143] usb 1-1: USB disconnect, device number 13
[  414.092217][ T8688] fido_id[8688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  414.284591][ T8691] loop2: detected capacity change from 0 to 512
[  414.411554][ T8691] EXT4-fs (loop2): 1 truncate cleaned up
[  414.490792][ T8691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.689879][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.719397][ T8719] bridge_slave_0: left allmulticast mode
[  416.725253][ T8719] bridge_slave_0: left promiscuous mode
[  416.749429][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.761452][ T8719] bridge_slave_1: left allmulticast mode
[  416.767657][ T8719] bridge_slave_1: left promiscuous mode
[  416.774506][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.794719][ T8719] bond0: (slave bond_slave_0): Releasing backup interface
[  416.814363][ T8719] bond0: (slave bond_slave_1): Releasing backup interface
[  416.843061][ T8719] team0: Port device team_slave_0 removed
[  416.855588][ T8719] team0: Port device team_slave_1 removed
[  416.874822][ T8719] batman_adv: batadv0: Removing interface: batadv_slave_0
[  416.884255][ T8719] batman_adv: batadv0: Removing interface: batadv_slave_1
[  416.992031][ T5777] Bluetooth: hci3: unexpected event for opcode 0x2035
[  417.165846][ T6158] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  417.368546][ T6158] usb 1-1: config 0 interface 0 has no altsetting 0
[  417.375270][ T6158] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  417.402988][ T6158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.438371][ T6158] usb 1-1: config 0 descriptor??
[  417.888092][ T6158] kye 0003:0458:501B.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  417.928586][ T6158] kye 0003:0458:501B.0005: unknown main item tag 0x7
[  417.944628][ T6158] kye 0003:0458:501B.0005: item fetching failed at offset 10/41
[  417.965109][ T6158] kye 0003:0458:501B.0005: parse failed
[  417.973185][ T6158] kye: probe of 0003:0458:501B.0005 failed with error -22
[  418.022551][ T8746] binder: 8745:8746 ioctl c0306201 0 returned -14
[  418.846642][ T8751] loop2: detected capacity change from 0 to 40427
[  418.866695][ T8752] gretap1: entered promiscuous mode
[  418.929104][ T8751] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  418.936951][ T8751] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  418.948988][ T8751] F2FS-fs (loop2): invalid crc value
[  419.014280][ T8751] F2FS-fs (loop2): Found nat_bits in checkpoint
[  419.066776][ T8751] F2FS-fs (loop2): Start checkpoint disabled!
[  419.098346][ T8751] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  419.105499][ T8751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  421.165844][   T27] usb 1-1: USB disconnect, device number 14
[  421.900327][ T8771] tmpfs: Bad value for 'mpol'
[  422.155810][ T5816] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  422.185415][ T8774] binder: 8773:8774 ioctl c0306201 0 returned -14
[  422.185836][   T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  422.383098][ T5816] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  422.485281][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.560420][ T5816] usb 3-1: Product: syz
[  422.607684][ T5816] usb 3-1: Manufacturer: syz
[  422.651819][ T5816] usb 3-1: SerialNumber: syz
[  423.445713][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  424.475898][   T27] usb 1-1: Using ep0 maxpacket: 32
[  425.468294][   T27] usb 1-1: device descriptor read/all, error -71
[  425.604535][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71
[  425.625723][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71
[  425.638667][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71
[  425.665455][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71
[  425.688849][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71
[  425.703260][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71
[  425.725271][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71
[  425.752124][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71
[  425.779432][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71
[  425.818830][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  425.842586][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  425.993296][ T5816] lan78xx: probe of 3-1:1.0 failed with error -71
[  426.022150][ T5816] usb 3-1: USB disconnect, device number 15
[  429.437169][ T8804] binder: BINDER_SET_CONTEXT_MGR already set
[  429.443237][ T8804] binder: 8803:8804 ioctl 4018620d 200000004a80 returned -16
[  429.687331][ T8812] tmpfs: Bad value for 'mpol'
[  430.293433][ T5818] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  430.375795][ T5816] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  430.461443][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'.
[  430.485756][ T5818] usb 3-1: Using ep0 maxpacket: 32
[  430.492864][ T5818] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  430.506983][ T5777] Bluetooth: hci4: unexpected event for opcode 0x042c
[  430.516113][ T5818] usb 3-1: config 2 has no interface number 0
[  430.524403][ T5818] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  430.542749][ T5818] usb 3-1: config 2 interface 88 has no altsetting 0
[  430.555124][ T5818] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  430.575994][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.584147][ T5818] usb 3-1: Product: syz
[  430.595588][ T5818] usb 3-1: Manufacturer: syz
[  430.621945][ T5818] usb 3-1: SerialNumber: syz
[  430.662141][ T8812] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  430.947059][ T5816] usb 1-1: Using ep0 maxpacket: 8
[  430.973155][ T5816] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  431.002324][ T5816] usb 1-1: config 179 has no interface number 0
[  431.034140][ T5816] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  431.080508][ T5816] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  431.122570][ T5816] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  431.143073][ T8811] loop2: detected capacity change from 0 to 4096
[  431.166451][ T8811] EXT4-fs: Ignoring removed mblk_io_submit option
[  431.191659][ T8811] EXT4-fs (loop2): Test dummy encryption mode enabled
[  431.195678][ T5816] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  431.277833][ T8826] random: crng reseeded on system resumption
[  432.049973][ T8811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.099992][ T5816] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  432.113341][ T5816] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  432.113370][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.124373][ T8816] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  432.152446][ T8811] EXT4-fs: Ignoring removed mblk_io_submit option
[  432.187364][ T8811] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  432.200368][ T8811] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  433.098138][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.160487][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.219428][ T5818] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  433.255818][ T5818] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  433.270371][ T5818] asix: probe of 3-1:2.88 failed with error -71
[  433.295006][ T5818] usb 3-1: USB disconnect, device number 16
[  433.766238][ T8848] loop4: detected capacity change from 0 to 4096
[  433.790024][ T8848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.820155][ T8848] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.653: corrupted inode contents
[  433.833018][ T8848] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #15: comm syz.4.653: mark_inode_dirty error
[  433.847414][ T8848] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.653: corrupted inode contents
[  433.867720][ T8848] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.653: mark_inode_dirty error
[  433.880659][ T8848] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.653: corrupted inode contents
[  433.893823][ T8848] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.653: mark_inode_dirty error
[  433.906181][ T8848] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.653: corrupted inode contents
[  433.911957][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  433.918532][ T8848] EXT4-fs error (device loop4): ext4_truncate:4301: inode #15: comm syz.4.653: mark_inode_dirty error
[  433.926462][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  433.938405][ T8848] EXT4-fs error (device loop4) in ext4_setattr:5682: Corrupt filesystem
[  433.948210][ T5816] usb 1-1: USB disconnect, device number 17
[  434.293729][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.551129][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.766721][ T8853] loop2: detected capacity change from 0 to 40427
[  434.777682][ T8853] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  434.785141][ T8853] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  434.817584][ T8853] F2FS-fs (loop2): invalid crc value
[  434.841559][ T8853] F2FS-fs (loop2): Found nat_bits in checkpoint
[  434.904205][ T8853] F2FS-fs (loop2): Start checkpoint disabled!
[  434.921029][ T8853] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  434.928532][ T8853] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  436.186507][ T6238] kworker/u4:28: attempt to access beyond end of device
[  436.186507][ T6238] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  436.249489][ T6238] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  436.288622][ T6238] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  436.381292][ T8880] random: crng reseeded on system resumption
[  437.443631][ T8884] tmpfs: Bad value for 'mpol'
[  437.675993][   T27] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  437.733009][ T6138] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  437.962213][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  438.014105][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.057776][   T27] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  438.070300][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.115842][   T27] usb 5-1: config 0 descriptor??
[  438.187964][ T6138] usb 2-1: Using ep0 maxpacket: 32
[  438.328316][ T6138] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  438.425682][ T6138] usb 2-1: config 2 has no interface number 0
[  438.431895][ T6138] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  438.457308][ T6138] usb 2-1: config 2 interface 88 has no altsetting 0
[  438.488613][ T6138] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  438.508853][ T6138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.519788][ T6138] usb 2-1: Product: syz
[  438.524569][ T6138] usb 2-1: Manufacturer: syz
[  438.529881][ T6138] usb 2-1: SerialNumber: syz
[  438.548847][ T8884] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  438.600434][   T27] aquacomputer_d5next 0003:0C70:F0B6.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0
[  438.817321][ T8896] loop2: detected capacity change from 0 to 1024
[  438.947450][   T27] usb 5-1: USB disconnect, device number 6
[  438.977690][ T8896] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  439.088435][ T8896] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.665: lblock 2 mapped to illegal pblock 2 (length 1)
[  439.109878][ T8896] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  439.120009][ T8896] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.665: lblock 0 mapped to illegal pblock 48 (length 1)
[  439.141693][ T8896] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  439.151287][ T8896] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.665: Failed to acquire dquot type 0
[  439.168191][ T8896] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  439.182505][ T8896] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.665: mark_inode_dirty error
[  439.196173][ T8896] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  439.206786][ T8896] EXT4-fs (loop2): 1 orphan inode deleted
[  439.216697][ T8896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.085331][ T8894] fido_id[8894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  440.391099][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  440.397809][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  440.470043][ T8879] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  441.270508][ T6208] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1)
[  441.293755][ T6208] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  441.303529][ T6208] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:17: Failed to release dquot type 0
[  441.322222][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.333803][ T5771] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0
[  441.360397][ T6138] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  441.373752][ T6138] asix: probe of 2-1:2.88 failed with error -71
[  441.375489][ T5771] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  441.385226][ T6138] usb 2-1: USB disconnect, device number 8
[  441.402056][ T5771] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[  441.926406][ T8913] loop2: detected capacity change from 0 to 32768
[  441.978329][ T8913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.669 (8913)
[  442.013242][ T8913] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  442.023887][ T8913] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  442.032696][ T8913] BTRFS info (device loop2): force clearing of disk cache
[  442.039938][ T8913] BTRFS info (device loop2): enabling auto defrag
[  442.047087][ T8913] BTRFS info (device loop2): max_inline at 0
[  442.053127][ T8913] BTRFS info (device loop2): enabling disk space caching
[  442.060247][ T8913] BTRFS info (device loop2): disk space caching is enabled
[  442.255767][ T8913] BTRFS info (device loop2): enabling ssd optimizations
[  442.264781][ T8913] BTRFS info (device loop2): rebuilding free space tree
[  442.298193][ T8913] BTRFS info (device loop2): disabling free space tree
[  442.305283][ T8913] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  442.315527][ T8913] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  442.512677][ T8936] random: crng reseeded on system resumption
[  443.482965][ T8938] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  443.748584][ T6221] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  443.790852][ T8943] random: crng reseeded on system resumption
[  445.271356][ T8962] tmpfs: Bad value for 'mpol'
[  445.605744][ T6138] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  446.407332][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  446.496617][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1004
[  446.503952][ T6138] usb 5-1: Using ep0 maxpacket: 32
[  446.515668][ T6138] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  446.524255][ T6138] usb 5-1: config 2 has no interface number 0
[  446.531105][ T6138] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  446.541409][ T6138] usb 5-1: config 2 interface 88 has no altsetting 0
[  446.560709][ T6138] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  446.581662][ T6138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.590207][ T6138] usb 5-1: Product: syz
[  446.599177][ T6138] usb 5-1: Manufacturer: syz
[  446.603982][ T6138] usb 5-1: SerialNumber: syz
[  446.646738][ T8962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  447.289329][ T8960] loop4: detected capacity change from 0 to 4096
[  447.314956][ T8960] EXT4-fs: Ignoring removed mblk_io_submit option
[  447.359433][ T8960] EXT4-fs (loop4): Test dummy encryption mode enabled
[  447.536728][ T8960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.563770][ T8960] EXT4-fs: Ignoring removed mblk_io_submit option
[  447.632676][ T8983] random: crng reseeded on system resumption
[  448.409550][ T8960] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  448.660641][ T8960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  450.596338][ T5777] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  450.606665][ T5777] Bluetooth: hci0: Injecting HCI hardware error event
[  450.616100][   T51] Bluetooth: hci0: hardware error 0x00
[  450.826686][ T6138] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  450.851414][ T6138] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  450.884391][ T6138] asix: probe of 5-1:2.88 failed with error -71
[  450.900819][ T9001] binder: BINDER_SET_CONTEXT_MGR already set
[  450.921040][ T6138] usb 5-1: USB disconnect, device number 7
[  450.935898][ T9001] binder: 8999:9001 ioctl 4018620d 200000004a80 returned -16
[  451.363060][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.151842][ T9011] loop4: detected capacity change from 0 to 32768
[  452.216738][ T9011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.692 (9011)
[  452.765752][   T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  452.774608][ T9011] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  452.785126][ T9011] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  452.794042][ T9011] BTRFS info (device loop4): force clearing of disk cache
[  452.801854][ T9011] BTRFS info (device loop4): enabling auto defrag
[  452.808438][ T9011] BTRFS info (device loop4): max_inline at 0
[  452.814503][ T9011] BTRFS info (device loop4): enabling disk space caching
[  452.821771][ T9011] BTRFS info (device loop4): disk space caching is enabled
[  452.980107][ T9011] BTRFS info (device loop4): enabling ssd optimizations
[  452.989210][ T9011] BTRFS info (device loop4): rebuilding free space tree
[  453.089489][ T9011] BTRFS info (device loop4): disabling free space tree
[  453.097733][ T9011] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  453.107582][ T9011] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  453.606908][   T35] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  453.648467][ T9011] BTRFS: error (device loop4) in rollback_verity:485: errno=-122 Quota exceeded (failed to start transaction in verity rollback 258)
[  453.662707][ T9011] BTRFS info (device loop4: state E): forced readonly
[  453.670011][ T9011] BTRFS error (device loop4: state E): failed to rollback verity items: -122
[  453.678928][ T9011] fs-verity (loop4, inode 258): btrfs_end_enable_verity() failed with err -122
[  453.909324][ T9046] random: crng reseeded on system resumption
[  455.026699][ T7387] BTRFS info (device loop4: state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  456.396547][ T9055] tmpfs: Bad value for 'mpol'
[  456.685951][ T5816] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  456.711809][ T5836] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  459.446681][ T5816] usb 3-1: Using ep0 maxpacket: 32
[  459.475753][ T5836] usb 1-1: Using ep0 maxpacket: 32
[  460.745475][ T5816] usb 3-1: device descriptor read/all, error -71
[  460.752654][ T5836] usb 1-1: device descriptor read/all, error -71
[  462.068026][ T9085] loop2: detected capacity change from 0 to 32768
[  462.576551][ T9085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.706 (9085)
[  464.465097][ T9085] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  464.476115][ T9085] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  464.484820][ T9085] BTRFS info (device loop2): force clearing of disk cache
[  464.494517][ T9085] BTRFS info (device loop2): enabling auto defrag
[  464.501348][ T9085] BTRFS info (device loop2): max_inline at 0
[  464.507695][ T9085] BTRFS info (device loop2): enabling disk space caching
[  464.514765][ T9085] BTRFS info (device loop2): disk space caching is enabled
[  464.673735][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  464.676783][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  464.686529][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  464.696130][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  464.705946][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  464.716246][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  464.726074][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  464.736201][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  464.761909][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  464.772901][ T9085] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  464.793945][ T9085] BTRFS error (device loop2): open_ctree failed: -12
[  466.289345][ T9120] loop4: detected capacity change from 0 to 512
[  466.376404][ T9120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  466.405953][ T9120] System zones: 1-12
[  466.456519][ T9120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.711: missing EA_INODE flag
[  466.542698][ T9120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.711: error while reading EA inode 12 err=-117
[  466.577065][ T9120] EXT4-fs (loop4): 1 orphan inode deleted
[  466.598268][ T9120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.020841][ T9120] overlayfs: failed to resolve './file0': -2
[  467.068596][   T28] audit: type=1800 audit(2000000368.150:63): pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.711" name="file1" dev="loop4" ino=21 res=0 errno=0
[  467.686632][ T9138] tmpfs: Bad value for 'mpol'
[  467.975788][ T6147] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  468.176878][ T6147] usb 2-1: Using ep0 maxpacket: 32
[  468.189849][ T6147] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  468.208007][ T6147] usb 2-1: config 2 has no interface number 0
[  468.221364][ T6147] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  468.241070][ T6147] usb 2-1: config 2 interface 88 has no altsetting 0
[  468.252253][ T6147] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  468.254336][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.265741][ T6147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.291484][ T6147] usb 2-1: Product: syz
[  468.300193][ T6147] usb 2-1: Manufacturer: syz
[  468.304954][ T6147] usb 2-1: SerialNumber: syz
[  468.344573][ T9138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  469.595813][ T9136] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  469.721850][ T9148] loop2: detected capacity change from 0 to 32768
[  469.731687][ T9148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.718 (9148)
[  469.758604][ T9148] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  469.769061][ T9148] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  469.777919][ T9148] BTRFS info (device loop2): force clearing of disk cache
[  469.785278][ T9148] BTRFS info (device loop2): enabling auto defrag
[  469.792004][ T9148] BTRFS info (device loop2): max_inline at 0
[  469.798607][ T9148] BTRFS info (device loop2): enabling disk space caching
[  469.805787][ T9148] BTRFS info (device loop2): disk space caching is enabled
[  469.917366][ T9148] BTRFS info (device loop2): enabling ssd optimizations
[  469.927132][ T9148] BTRFS info (device loop2): rebuilding free space tree
[  469.961570][ T9148] BTRFS info (device loop2): disabling free space tree
[  469.968857][ T9148] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  469.978843][ T9148] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  470.184683][ T6208] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  470.256682][ T9148] BTRFS: error (device loop2) in rollback_verity:485: errno=-122 Quota exceeded (failed to start transaction in verity rollback 258)
[  470.270568][ T9148] BTRFS info (device loop2: state E): forced readonly
[  470.277575][ T9148] BTRFS error (device loop2: state E): failed to rollback verity items: -122
[  470.286506][ T9148] fs-verity (loop2, inode 258): btrfs_end_enable_verity() failed with err -122
[  470.520854][ T6147] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  470.555719][ T6147] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  470.593669][ T6147] asix: probe of 2-1:2.88 failed with error -71
[  470.642345][ T6147] usb 2-1: USB disconnect, device number 9
[  470.964908][ T9171] random: crng reseeded on system resumption
[  472.035512][ T9180] loop4: detected capacity change from 0 to 128
[  473.822334][ T9188] random: crng reseeded on system resumption
[  474.846362][ T5771] BTRFS info (device loop2: state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  476.110679][ T9207] tmpfs: Bad value for 'mpol'
[  477.435703][ T5816] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  479.475889][ T5816] usb 1-1: Using ep0 maxpacket: 32
[  479.721935][ T9218] loop2: detected capacity change from 0 to 128
[  480.376333][ T5816] usb 1-1: device descriptor read/all, error -71
[  480.634193][ T9224] overlayfs: failed to resolve './file0': -2
[  481.480373][ T9240] loop4: detected capacity change from 0 to 256
[  481.599714][ T9240] FAT-fs (loop4): Directory bread(block 64) failed
[  481.637902][ T9240] FAT-fs (loop4): Directory bread(block 65) failed
[  481.687644][ T9240] FAT-fs (loop4): Directory bread(block 66) failed
[  481.732593][ T9240] FAT-fs (loop4): Directory bread(block 67) failed
[  481.801090][ T9240] FAT-fs (loop4): Directory bread(block 68) failed
[  481.839675][ T9240] FAT-fs (loop4): Directory bread(block 69) failed
[  481.870180][ T9240] FAT-fs (loop4): Directory bread(block 70) failed
[  481.906575][ T9240] FAT-fs (loop4): Directory bread(block 71) failed
[  481.944297][ T9240] FAT-fs (loop4): Directory bread(block 72) failed
[  481.975789][ T9240] FAT-fs (loop4): Directory bread(block 73) failed
[  482.540899][ T9247] tmpfs: Bad value for 'mpol'
[  482.835770][   T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  483.077149][   T27] usb 5-1: Using ep0 maxpacket: 32
[  483.248391][   T27] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  483.375330][   T27] usb 5-1: config 2 has no interface number 0
[  483.460891][   T27] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  483.513508][   T27] usb 5-1: config 2 interface 88 has no altsetting 0
[  483.611054][   T27] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  483.883051][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.922919][   T27] usb 5-1: Product: syz
[  483.933075][   T27] usb 5-1: Manufacturer: syz
[  483.945445][   T27] usb 5-1: SerialNumber: syz
[  483.981792][ T9247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  484.333921][ T9246] loop4: detected capacity change from 0 to 4096
[  484.346957][ T9246] EXT4-fs: Ignoring removed mblk_io_submit option
[  484.361497][ T9246] EXT4-fs (loop4): Test dummy encryption mode enabled
[  484.479521][ T9246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.575841][ T9246] EXT4-fs: Ignoring removed mblk_io_submit option
[  484.583162][ T9270] loop2: detected capacity change from 0 to 32768
[  484.591786][ T5816] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  484.599642][ T9270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.748 (9270)
[  484.617321][ T9270] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  484.627780][ T9270] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  484.636640][ T9270] BTRFS info (device loop2): force clearing of disk cache
[  484.643861][ T9270] BTRFS info (device loop2): enabling auto defrag
[  484.650509][ T9270] BTRFS info (device loop2): max_inline at 0
[  484.656652][ T9270] BTRFS info (device loop2): enabling disk space caching
[  484.663753][ T9270] BTRFS info (device loop2): disk space caching is enabled
[  484.689694][ T9246] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  484.780894][ T9246] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  484.823948][ T9270] BTRFS info (device loop2): enabling ssd optimizations
[  484.832543][ T9270] BTRFS info (device loop2): rebuilding free space tree
[  484.850444][ T5816] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  484.860608][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.871298][ T9270] BTRFS info (device loop2): disabling free space tree
[  484.878362][ T9270] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  484.888585][ T9270] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  484.913507][ T5816] usb 1-1: config 0 descriptor??
[  484.923805][ T5816] gspca_main: cpia1-2.14.0 probing 0813:0001
[  485.080344][   T11] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  485.110906][ T9270] BTRFS: error (device loop2) in rollback_verity:485: errno=-122 Quota exceeded (failed to start transaction in verity rollback 258)
[  485.124765][ T9270] BTRFS info (device loop2: state E): forced readonly
[  485.132309][ T9270] BTRFS error (device loop2: state E): failed to rollback verity items: -122
[  485.141825][ T9270] fs-verity (loop2, inode 258): btrfs_end_enable_verity() failed with err -122
[  485.653034][   T27] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  485.685263][   T27] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  485.725845][   T27] asix: probe of 5-1:2.88 failed with error -71
[  485.757628][   T27] usb 5-1: USB disconnect, device number 8
[  485.987158][   T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  485.998756][ T5816] gspca_cpia1: usb_control_msg 05, error -110
[  486.003777][   T51] Bluetooth: hci3: Injecting HCI hardware error event
[  486.005350][ T9299] random: crng reseeded on system resumption
[  486.014418][   T51] Bluetooth: hci3: hardware error 0x00
[  486.036502][ T5816] gspca_cpia1: usb_control_msg 01, error -32
[  486.045194][ T5816] gspca_cpia1: usb_control_msg 01, error -32
[  486.092921][ T5816] gspca_cpia1: usb_control_msg 01, error -32
[  486.148963][ T5816] gspca_cpia1: usb_control_msg 01, error -32
[  486.221072][ T5816] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  486.404555][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.538158][ T6147] usb 1-1: USB disconnect, device number 22
[  487.796037][ T9313] loop4: detected capacity change from 0 to 1024
[  487.853308][ T9313] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  488.073161][   T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  488.666861][ T5771] BTRFS info (device loop2: state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  490.511238][ T9347] loop2: detected capacity change from 0 to 256
[  490.546076][ T5816] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  490.667232][ T9347] FAT-fs (loop2): Directory bread(block 64) failed
[  490.700635][ T9347] FAT-fs (loop2): Directory bread(block 65) failed
[  490.721175][ T9347] FAT-fs (loop2): Directory bread(block 66) failed
[  490.735818][ T5816] usb 1-1: device descriptor read/64, error -71
[  490.763391][ T9347] FAT-fs (loop2): Directory bread(block 67) failed
[  490.780875][ T9347] FAT-fs (loop2): Directory bread(block 68) failed
[  490.805744][ T9347] FAT-fs (loop2): Directory bread(block 69) failed
[  490.812491][ T9347] FAT-fs (loop2): Directory bread(block 70) failed
[  490.846758][ T9347] FAT-fs (loop2): Directory bread(block 71) failed
[  490.853471][ T9347] FAT-fs (loop2): Directory bread(block 72) failed
[  490.868082][ T9347] FAT-fs (loop2): Directory bread(block 73) failed
[  491.065713][ T5816] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  491.226381][ T5816] usb 1-1: device descriptor read/64, error -71
[  491.251095][ T9357] loop2: detected capacity change from 0 to 1024
[  491.275919][ T9357] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  491.368158][ T5816] usb usb1-port1: attempt power cycle
[  491.795981][ T5816] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  491.848772][ T5816] usb 1-1: device descriptor read/8, error -71
[  491.852315][ T9368] loop4: detected capacity change from 0 to 4096
[  491.887242][ T9368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.917230][ T9368] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.779: corrupted inode contents
[  491.930256][ T9368] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #15: comm syz.4.779: mark_inode_dirty error
[  491.944407][ T9368] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.779: corrupted inode contents
[  491.965825][ T9368] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.779: mark_inode_dirty error
[  491.979743][ T9368] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.779: corrupted inode contents
[  491.992265][ T9368] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.779: mark_inode_dirty error
[  492.004461][ T9368] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.779: corrupted inode contents
[  492.017739][ T9368] EXT4-fs error (device loop4): ext4_truncate:4301: inode #15: comm syz.4.779: mark_inode_dirty error
[  492.030670][ T9368] EXT4-fs error (device loop4) in ext4_setattr:5682: Corrupt filesystem
[  492.097523][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.151180][ T5816] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  492.211660][ T5816] usb 1-1: device descriptor read/8, error -71
[  492.553834][ T9372] loop4: detected capacity change from 0 to 32768
[  492.562596][ T5816] usb usb1-port1: unable to enumerate USB device
[  492.587250][ T9372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.780 (9372)
[  492.612011][ T9372] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  492.624905][ T9372] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  492.633791][ T9372] BTRFS info (device loop4): force clearing of disk cache
[  492.641105][ T9372] BTRFS info (device loop4): enabling auto defrag
[  492.647659][ T9372] BTRFS info (device loop4): max_inline at 0
[  492.653914][ T9372] BTRFS info (device loop4): enabling disk space caching
[  492.661159][ T9372] BTRFS info (device loop4): disk space caching is enabled
[  493.158465][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.176966][ T9392] 8021q: adding VLAN 0 to HW filter on device team0
[  493.244723][ T9392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  493.739197][ T9392] syz.2.781 (9392) used greatest stack depth: 20008 bytes left
[  493.767844][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.781682][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.807021][ T9372] BTRFS info (device loop4): enabling ssd optimizations
[  493.822434][ T9372] BTRFS info (device loop4): rebuilding free space tree
[  493.867196][ T9372] BTRFS info (device loop4): disabling free space tree
[  493.874242][ T9372] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  493.884228][ T9372] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  494.110921][ T6225] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  494.129655][ T9401] loop2: detected capacity change from 0 to 256
[  494.197423][ T9372] BTRFS: error (device loop4) in rollback_verity:485: errno=-122 Quota exceeded (failed to start transaction in verity rollback 258)
[  494.211898][ T9372] BTRFS info (device loop4: state E): forced readonly
[  494.218842][ T9372] BTRFS error (device loop4: state E): failed to rollback verity items: -122
[  494.228020][ T9372] fs-verity (loop4, inode 258): btrfs_end_enable_verity() failed with err -122
[  494.289031][ T9401] FAT-fs (loop2): Directory bread(block 64) failed
[  494.307461][ T9401] FAT-fs (loop2): Directory bread(block 65) failed
[  494.332697][ T9401] FAT-fs (loop2): Directory bread(block 66) failed
[  494.365953][ T9401] FAT-fs (loop2): Directory bread(block 67) failed
[  494.393464][ T9401] FAT-fs (loop2): Directory bread(block 68) failed
[  494.416624][ T9401] FAT-fs (loop2): Directory bread(block 69) failed
[  494.464609][ T9401] FAT-fs (loop2): Directory bread(block 70) failed
[  494.479922][ T9401] FAT-fs (loop2): Directory bread(block 71) failed
[  494.487534][ T9401] FAT-fs (loop2): Directory bread(block 72) failed
[  494.494701][ T9401] FAT-fs (loop2): Directory bread(block 73) failed
[  494.547049][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'.
[  494.781838][ T9405] random: crng reseeded on system resumption
[  495.202413][ T9415] tmpfs: Bad value for 'mpol'
[  495.659516][ T6138] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  495.848175][ T9424] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  495.859479][ T9424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.788'.
[  496.635826][ T6138] usb 1-1: Using ep0 maxpacket: 32
[  496.645087][ T6138] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  496.661749][ T6138] usb 1-1: config 2 has no interface number 0
[  496.691319][ T6138] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  496.733175][ T6138] usb 1-1: config 2 interface 88 has no altsetting 0
[  496.766934][ T6138] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  496.790775][ T6138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.811124][ T6138] usb 1-1: Product: syz
[  496.815365][ T6138] usb 1-1: Manufacturer: syz
[  496.830325][ T6138] usb 1-1: SerialNumber: syz
[  496.851179][ T9415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  498.088969][ T9412] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  498.204873][ T7387] BTRFS info (device loop4: state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  498.706278][ T6143] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  498.875812][ T6143] usb 3-1: device descriptor read/64, error -71
[  498.966959][ T6138] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  498.998137][ T6138] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  499.036078][ T6138] asix: probe of 1-1:2.88 failed with error -71
[  499.049987][ T6138] usb 1-1: USB disconnect, device number 27
[  499.075521][ T9170] udevd[9170]: setting mode of /dev/bus/usb/001/027 to 020664 failed: No such file or directory
[  499.087587][ T9170] udevd[9170]: setting owner of /dev/bus/usb/001/027 to uid=0, gid=0 failed: No such file or directory
[  499.166271][ T6143] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  499.325756][ T6143] usb 3-1: device descriptor read/64, error -71
[  499.475032][ T6143] usb usb3-port1: attempt power cycle
[  500.025827][ T6143] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  500.130162][ T6143] usb 3-1: device descriptor read/8, error -71
[  500.147369][ T9460] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  500.158834][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.797'.
[  500.496115][ T6143] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  500.690594][ T6143] usb 3-1: device descriptor read/8, error -71
[  500.837514][ T6143] usb usb3-port1: unable to enumerate USB device
[  501.836793][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  501.843886][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  502.536370][ T9473] loop2: detected capacity change from 0 to 32768
[  502.545023][ T9473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.801 (9473)
[  502.587324][ T9473] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  502.597919][ T9473] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  502.606832][ T9473] BTRFS info (device loop2): force clearing of disk cache
[  502.614025][ T9473] BTRFS info (device loop2): enabling auto defrag
[  502.620664][ T9473] BTRFS info (device loop2): max_inline at 0
[  502.626797][ T9473] BTRFS info (device loop2): enabling disk space caching
[  502.633964][ T9473] BTRFS info (device loop2): disk space caching is enabled
[  502.786028][ T9473] BTRFS info (device loop2): enabling ssd optimizations
[  502.804737][ T9473] BTRFS info (device loop2): rebuilding free space tree
[  502.866783][ T9473] BTRFS info (device loop2): disabling free space tree
[  502.873828][ T9473] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  502.883763][ T9473] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  503.077334][ T6208] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  503.235927][ T9473] BTRFS: error (device loop2) in rollback_verity:485: errno=-122 Quota exceeded (failed to start transaction in verity rollback 258)
[  503.250450][ T9473] BTRFS info (device loop2: state E): forced readonly
[  503.257347][ T9473] BTRFS error (device loop2: state E): failed to rollback verity items: -122
[  503.266237][ T9473] fs-verity (loop2, inode 258): btrfs_end_enable_verity() failed with err -122
[  504.418872][ T9502] random: crng reseeded on system resumption
[  505.338676][ T9510] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  505.349982][ T9510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.806'.
[  507.505802][ T6147] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  508.275687][ T6147] usb 5-1: device descriptor read/64, error -71
[  508.516405][ T5771] BTRFS info (device loop2: state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  508.755913][ T6147] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  508.935953][ T6147] usb 5-1: device descriptor read/64, error -71
[  509.076050][ T6147] usb usb5-port1: attempt power cycle
[  509.526374][ T6147] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  509.561990][ T6147] usb 5-1: device descriptor read/8, error -71
[  510.217171][ T6147] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  510.274726][ T9556] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  510.286342][ T9556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.815'.
[  510.850423][ T6147] usb 5-1: device descriptor read/8, error -71
[  510.989304][ T6147] usb usb5-port1: unable to enumerate USB device
[  511.186396][ T9570] tmpfs: Bad value for 'mpol'
[  512.542544][ T6147] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  512.745886][ T6147] usb 5-1: Using ep0 maxpacket: 32
[  512.806042][ T6147] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  512.893354][ T6147] usb 5-1: config 2 has no interface number 0
[  513.032910][ T6147] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  513.306490][ T6147] usb 5-1: config 2 interface 88 has no altsetting 0
[  513.371718][ T6147] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  513.415776][ T6147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.478781][ T6147] usb 5-1: Product: syz
[  514.465671][ T6147] usb 5-1: Manufacturer: syz
[  514.470392][ T6147] usb 5-1: SerialNumber: syz
[  514.515774][ T9570] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  515.062607][ T6147] asix: probe of 5-1:2.88 failed with error -71
[  515.159766][ T6147] usb 5-1: USB disconnect, device number 13
[  515.819568][ T9610] loop4: detected capacity change from 0 to 2048
[  515.919397][ T9610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  517.189777][ T9621] loop4: detected capacity change from 0 to 1024
[  517.236579][ T9621] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  518.249171][ T9635] loop2: detected capacity change from 0 to 512
[  518.279935][ T9635] EXT4-fs: Ignoring removed oldalloc option
[  518.335230][ T9635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  518.554889][ T9635] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #11: comm syz.2.839: corrupted in-inode xattr: invalid ea_ino
[  518.644847][ T9635] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.839: couldn't read orphan inode 11 (err -117)
[  518.819385][ T9635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.379793][   T28] audit: type=1800 audit(2000000421.390:64): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.839" name="file1" dev="loop2" ino=15 res=0 errno=0
[  520.425899][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.532065][ T9655] loop4: detected capacity change from 0 to 2048
[  520.588524][ T9655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.429926][ T6208] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  524.778887][ T6208] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  524.879445][ T9675] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  524.896606][ T9675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.849'.
[  525.473337][ T6208] EXT4-fs (loop4): This should not happen!! Data will be lost
[  525.473337][ T6208] 
[  525.677306][ T6208] EXT4-fs (loop4): Total free blocks count 0
[  525.707898][ T6208] EXT4-fs (loop4): Free/Dirty block details
[  525.742435][ T6208] EXT4-fs (loop4): free_blocks=2415919504
[  525.795797][ T6208] EXT4-fs (loop4): dirty_blocks=48
[  525.821495][ T6208] EXT4-fs (loop4): Block reservation details
[  525.859801][ T6208] EXT4-fs (loop4): i_reserved_data_blocks=3
[  526.280935][ T9680] loop2: detected capacity change from 0 to 40427
[  526.314285][ T9680] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  526.322428][ T9680] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  526.334102][ T9680] F2FS-fs (loop2): invalid crc value
[  526.350520][ T9680] F2FS-fs (loop2): Found nat_bits in checkpoint
[  526.401398][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.418267][ T9680] F2FS-fs (loop2): Start checkpoint disabled!
[  526.438728][ T9680] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  526.447285][ T9680] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  526.733797][ T9691] capability: warning: `syz.4.853' uses 32-bit capabilities (legacy support in use)
[  527.571655][ T6208] kworker/u4:17: attempt to access beyond end of device
[  527.571655][ T6208] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  527.596450][ T9697] loop4: detected capacity change from 0 to 32768
[  527.607685][ T9697] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.855 (9697)
[  527.629197][ T6208] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  527.640523][ T6208] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  527.859611][ T9697] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  527.870017][ T9697] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  527.878830][ T9697] BTRFS info (device loop4): setting nodatacow, compression disabled
[  527.887452][ T9697] BTRFS info (device loop4): force clearing of disk cache
[  527.894918][ T9697] BTRFS info (device loop4): turning off barriers
[  527.901542][ T9697] BTRFS info (device loop4): use no compression
[  527.908028][ T9697] BTRFS info (device loop4): disabling free space tree
[  527.915041][ T9697] BTRFS info (device loop4): enabling ssd optimizations
[  527.922344][ T9697] BTRFS info (device loop4): using spread ssd allocation scheme
[  527.930165][ T9697] BTRFS info (device loop4): not using ssd optimizations
[  527.937451][ T9697] BTRFS info (device loop4): not using spread ssd allocation scheme
[  528.841425][ T9697] BTRFS info (device loop4): rebuilding free space tree
[  528.872878][ T9697] BTRFS info (device loop4): disabling free space tree
[  528.879985][ T9697] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  528.889830][ T9697] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  528.911110][ T9697] BTRFS info (device loop4): checking UUID tree
[  532.963291][ T7387] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  534.806882][ T9755] random: crng reseeded on system resumption
[  536.423776][ T9773] loop4: detected capacity change from 0 to 256
[  536.448707][ T9774] loop2: detected capacity change from 0 to 256
[  536.486853][ T9677] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  536.523401][ T9774] FAT-fs (loop2): Directory bread(block 64) failed
[  536.555754][ T9774] FAT-fs (loop2): Directory bread(block 65) failed
[  536.563029][ T9774] FAT-fs (loop2): Directory bread(block 66) failed
[  536.590291][ T9774] FAT-fs (loop2): Directory bread(block 67) failed
[  536.620888][ T9774] FAT-fs (loop2): Directory bread(block 68) failed
[  536.651304][ T9774] FAT-fs (loop2): Directory bread(block 69) failed
[  536.671917][ T9774] FAT-fs (loop2): Directory bread(block 70) failed
[  536.695691][ T9774] FAT-fs (loop2): Directory bread(block 71) failed
[  536.723040][ T9774] FAT-fs (loop2): Directory bread(block 72) failed
[  536.734806][ T9774] FAT-fs (loop2): Directory bread(block 73) failed
[  537.769004][ T9784] loop2: detected capacity change from 0 to 40427
[  537.805733][ T9784] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  537.813311][ T9784] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  537.823547][ T9784] F2FS-fs (loop2): invalid crc value
[  538.470147][ T9784] F2FS-fs (loop2): Found nat_bits in checkpoint
[  538.733455][ T9784] F2FS-fs (loop2): Start checkpoint disabled!
[  538.786309][ T9784] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  538.793468][ T9784] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  540.187153][ T6238] kworker/u4:28: attempt to access beyond end of device
[  540.187153][ T6238] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  540.207893][ T6238] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  540.218808][ T6238] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  540.436004][   T27] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  540.755870][   T27] usb 1-1: Using ep0 maxpacket: 8
[  540.783931][   T27] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  540.805541][   T27] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1
[  540.814915][   T27] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  540.844596][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.147219][ T9819] loop2: detected capacity change from 0 to 32768
[  541.216689][ T9819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.886 (9819)
[  541.247419][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.317070][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.363832][ T6138] usb 1-1: USB disconnect, device number 28
[  541.542861][ T9819] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  541.553744][ T9819] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  541.562613][ T9819] BTRFS info (device loop2): force clearing of disk cache
[  541.569822][ T9819] BTRFS info (device loop2): enabling auto defrag
[  541.576397][ T9819] BTRFS info (device loop2): max_inline at 0
[  541.582487][ T9819] BTRFS info (device loop2): enabling disk space caching
[  541.589739][ T9819] BTRFS info (device loop2): disk space caching is enabled
[  541.645161][ T9819] BTRFS info (device loop2): enabling ssd optimizations
[  541.654257][ T9819] BTRFS info (device loop2): rebuilding free space tree
[  541.672194][ T9819] BTRFS info (device loop2): disabling free space tree
[  541.679338][ T9819] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  541.689185][ T9819] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  541.784863][ T6221] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  541.849092][ T9819] BTRFS: error (device loop2) in rollback_verity:485: errno=-122 Quota exceeded (failed to start transaction in verity rollback 258)
[  541.864302][ T9819] BTRFS info (device loop2: state E): forced readonly
[  541.871656][ T9819] BTRFS error (device loop2: state E): failed to rollback verity items: -122
[  541.880795][ T9819] fs-verity (loop2, inode 258): btrfs_end_enable_verity() failed with err -122
[  542.028114][ T9843] loop4: detected capacity change from 0 to 256
[  542.689245][ T9847] random: crng reseeded on system resumption
[  544.483972][ T9736] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  545.355923][ T5771] BTRFS info (device loop2: state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  546.357140][ T9677] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 17 /dev/loop2 scanned by udevd (9677)
[  546.863115][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.900'.
[  547.430876][ T9883] loop4: detected capacity change from 0 to 40427
[  547.443900][ T9883] F2FS-fs (loop4): Invalid log blocks per segment (83886089)
[  547.451702][ T9883] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  547.473685][ T9883] F2FS-fs (loop4): invalid crc value
[  547.498304][ T9883] F2FS-fs (loop4): Found nat_bits in checkpoint
[  547.555090][ T9883] F2FS-fs (loop4): Start checkpoint disabled!
[  547.576568][ T9883] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  547.583807][ T9883] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  548.071197][ T6225] kworker/u4:23: attempt to access beyond end of device
[  548.071197][ T6225] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  548.094903][ T6225] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  548.103698][ T6225] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  549.442983][ T9918] loop2: detected capacity change from 0 to 40427
[  549.477712][ T9918] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  549.485690][ T9918] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  549.499698][ T9918] F2FS-fs (loop2): invalid crc value
[  549.514953][ T9918] F2FS-fs (loop2): Found nat_bits in checkpoint
[  549.578007][ T9918] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  549.585172][ T9918] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  550.325807][ T6143] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  550.665865][ T6143] usb 3-1: Using ep0 maxpacket: 8
[  550.756529][ T6143] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  550.805672][ T6143] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  550.835128][ T6143] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  550.855813][ T6143] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  550.887871][ T6143] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  550.907686][ T6143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.949564][ T6143] hub 3-1:1.0: bad descriptor, ignoring hub
[  550.988646][ T6143] hub: probe of 3-1:1.0 failed with error -5
[  550.995279][ T6143] cdc_wdm 3-1:1.0: skipping garbage
[  551.034692][ T6143] cdc_wdm 3-1:1.0: skipping garbage
[  551.068383][ T6143] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  551.074378][ T6143] cdc_wdm 3-1:1.0: Unknown control protocol
[  551.548373][ T9937] loop4: detected capacity change from 0 to 40427
[  551.560017][ T9937] F2FS-fs (loop4): Invalid log blocks per segment (83886089)
[  551.567623][ T9937] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  551.583720][ T9937] F2FS-fs (loop4): invalid crc value
[  551.617844][ T9937] F2FS-fs (loop4): Found nat_bits in checkpoint
[  551.668228][ T9937] F2FS-fs (loop4): Start checkpoint disabled!
[  551.679395][ T9925] usb 3-1: reset high-speed USB device number 23 using dummy_hcd
[  551.703419][ T9937] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  551.710727][ T9937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  551.862347][ T6208] kworker/u4:17: attempt to access beyond end of device
[  551.862347][ T6208] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  551.876871][ T6208] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  551.886825][ T6208] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  551.894270][ T9925] usb 3-1: device firmware changed
[  551.905611][   T27] usb 3-1: USB disconnect, device number 23
[  552.115828][   T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  552.116979][   T28] audit: type=1326 audit(2000000453.210:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.4.917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe49359c819 code=0x0
[  552.886451][   T27] usb 3-1: device not accepting address 24, error -71
[  553.333270][ T9973] loop2: detected capacity change from 0 to 256
[  553.893356][ T9677] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  554.331904][ T9979] loop4: detected capacity change from 0 to 40427
[  554.343968][ T9979] F2FS-fs (loop4): Invalid log blocks per segment (83886089)
[  554.351493][ T9979] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  554.370235][ T9979] F2FS-fs (loop4): invalid crc value
[  554.395227][ T9979] F2FS-fs (loop4): Found nat_bits in checkpoint
[  554.447584][ T9979] F2FS-fs (loop4): Start checkpoint disabled!
[  554.491256][ T9979] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  554.498494][ T9979] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  557.745820][ T5816] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  557.938538][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  558.085531][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  558.100045][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  558.114646][ T5816] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  558.129857][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.978253][ T5816] usb 3-1: config 0 descriptor??
[  559.421093][ T5816] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  559.474917][ T5816] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  559.822160][ T5816] usb 3-1: USB disconnect, device number 26
[  559.823975][T10053] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -19
[  559.859033][T10053] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -19
[  563.149490][T10094] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  563.160762][T10094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.960'.
[  563.296682][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  563.303577][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  564.124503][T10105] loop2: detected capacity change from 0 to 256
[  564.207142][T10105] FAT-fs (loop2): Directory bread(block 64) failed
[  564.220711][T10105] FAT-fs (loop2): Directory bread(block 65) failed
[  564.230450][ T5816] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  564.235004][T10105] FAT-fs (loop2): Directory bread(block 66) failed
[  564.256872][T10105] FAT-fs (loop2): Directory bread(block 67) failed
[  564.271052][T10105] FAT-fs (loop2): Directory bread(block 68) failed
[  564.278027][T10105] FAT-fs (loop2): Directory bread(block 69) failed
[  564.284917][T10105] FAT-fs (loop2): Directory bread(block 70) failed
[  564.363349][T10105] FAT-fs (loop2): Directory bread(block 71) failed
[  564.371920][T10105] FAT-fs (loop2): Directory bread(block 72) failed
[  564.378917][T10105] FAT-fs (loop2): Directory bread(block 73) failed
[  564.425786][ T5816] usb 5-1: Using ep0 maxpacket: 8
[  564.442422][ T5816] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  564.456221][ T5816] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  564.470966][ T5816] usb 5-1: config 179 has no interface number 0
[  564.481476][ T5816] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  564.546172][ T5816] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  564.566576][ T5816] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  564.589823][ T5816] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  564.614620][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.640030][T10087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  564.908715][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.936478][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.658586][ T5816] usb 5-1: USB disconnect, device number 14
[  567.374713][T10137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.971'.
[  568.890202][T10149] loop2: detected capacity change from 0 to 256
[  568.966846][T10149] FAT-fs (loop2): Directory bread(block 64) failed
[  568.981057][T10149] FAT-fs (loop2): Directory bread(block 65) failed
[  568.995477][T10149] FAT-fs (loop2): Directory bread(block 66) failed
[  569.006010][T10149] FAT-fs (loop2): Directory bread(block 67) failed
[  569.012717][T10149] FAT-fs (loop2): Directory bread(block 68) failed
[  569.047977][T10149] FAT-fs (loop2): Directory bread(block 69) failed
[  569.054928][T10149] FAT-fs (loop2): Directory bread(block 70) failed
[  569.070181][T10149] FAT-fs (loop2): Directory bread(block 71) failed
[  569.078478][T10149] FAT-fs (loop2): Directory bread(block 72) failed
[  569.085054][T10149] FAT-fs (loop2): Directory bread(block 73) failed
[  570.624851][T10168] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  570.636301][T10168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.980'.
[  573.349121][T10193] loop2: detected capacity change from 0 to 512
[  573.380829][T10193] EXT4-fs: Ignoring removed oldalloc option
[  573.415511][T10193] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  573.486953][T10193] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #11: comm syz.2.986: corrupted in-inode xattr: invalid ea_ino
[  573.576544][T10193] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.986: couldn't read orphan inode 11 (err -117)
[  573.679915][T10193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.825846][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.989'.
[  581.682807][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.136217][T10290] fuse: Bad value for 'fd'
[  584.722035][T10311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1020'.
[  585.966514][T10317] syz.2.1021 (10317) used greatest stack depth: 16720 bytes left
[  586.294530][T10323] fuse: Bad value for 'group_id'
[  586.879413][T10327] loop2: detected capacity change from 0 to 40427
[  586.896048][T10327] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  586.903613][T10327] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  586.920287][T10327] F2FS-fs (loop2): invalid crc value
[  586.958297][T10327] F2FS-fs (loop2): Found nat_bits in checkpoint
[  587.010540][T10327] F2FS-fs (loop2): Start checkpoint disabled!
[  587.033081][T10327] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  587.040307][T10327] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  587.308734][T10341] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1030'.
[  588.895114][ T6208] kworker/u4:17: attempt to access beyond end of device
[  588.895114][ T6208] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  588.919223][ T6208] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  588.942186][ T6208] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  590.217869][T10368] netlink: 'syz.1.1038': attribute type 10 has an invalid length.
[  590.241078][T10368] syz_tun: entered promiscuous mode
[  590.268232][T10368] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  590.480466][T10374] fuse: Bad value for 'group_id'
[  591.000505][T10376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1039'.
[  592.373905][T10388] loop2: detected capacity change from 0 to 32768
[  592.391482][T10388] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  592.402581][T10388] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  592.411701][T10388] BTRFS info (device loop2): force clearing of disk cache
[  592.419072][T10388] BTRFS info (device loop2): enabling auto defrag
[  592.425973][T10388] BTRFS info (device loop2): max_inline at 0
[  592.432027][T10388] BTRFS info (device loop2): enabling disk space caching
[  592.439295][T10388] BTRFS info (device loop2): disk space caching is enabled
[  592.820752][T10388] BTRFS info (device loop2): enabling ssd optimizations
[  592.833459][T10388] BTRFS info (device loop2): rebuilding free space tree
[  592.881198][T10388] BTRFS info (device loop2): disabling free space tree
[  592.890033][T10388] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  592.899907][T10388] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  593.182440][ T6208] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  593.212178][T10388] BTRFS: error (device loop2) in rollback_verity:485: errno=-122 Quota exceeded (failed to start transaction in verity rollback 258)
[  593.227424][T10388] BTRFS info (device loop2: state E): forced readonly
[  593.234241][T10388] BTRFS error (device loop2: state E): failed to rollback verity items: -122
[  593.244009][T10388] fs-verity (loop2, inode 258): btrfs_end_enable_verity() failed with err -122
[  594.180257][T10388] random: crng reseeded on system resumption
[  596.044156][ T5771] BTRFS info (device loop2: state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  596.670183][T10434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1052'.
[  598.583404][T10452] overlayfs: failed to resolve './file0': -2
[  601.704527][T10467] loop2: detected capacity change from 0 to 1024
[  601.748669][T10467] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  602.396954][T10482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1062'.
[  604.127370][T10503] overlayfs: failed to resolve './file0': -2
[  604.552133][T10508] 8021q: VLANs not supported on gre0
[  605.167018][T10518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1077'.
[  606.319777][T10534] fuse: Bad value for 'fd'
[  607.041213][T10535] loop2: detected capacity change from 0 to 40427
[  607.059683][T10535] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  607.136757][T10540] overlayfs: failed to resolve './file0': -2
[  607.147112][T10535] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  607.165285][T10535] F2FS-fs (loop2): invalid crc value
[  607.196687][T10535] F2FS-fs (loop2): Found nat_bits in checkpoint
[  607.311452][T10535] F2FS-fs (loop2): Start checkpoint disabled!
[  607.336973][T10535] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  607.344090][T10535] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  607.819618][T10551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1087'.
[  610.129283][T10577] warning: `syz.1.1097' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  610.362706][T10581] loop2: detected capacity change from 0 to 512
[  610.400395][T10581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  610.423600][T10581] System zones: 1-12
[  610.444780][T10581] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1096: missing EA_INODE flag
[  610.464466][T10581] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1096: error while reading EA inode 12 err=-117
[  610.486131][T10581] EXT4-fs (loop2): 1 orphan inode deleted
[  610.577348][T10581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  610.934528][T10591] overlayfs: failed to resolve './file0': -2
[  611.099824][   T28] audit: type=1800 audit(2000000512.180:66): pid=10592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1096" name="file1" dev="loop2" ino=21 res=0 errno=0
[  611.826226][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.061249][T10600] loop2: detected capacity change from 0 to 40427
[  614.101178][T10600] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  614.125817][T10600] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  614.168228][T10600] F2FS-fs (loop2): invalid crc value
[  614.206815][T10600] F2FS-fs (loop2): Found nat_bits in checkpoint
[  614.427832][T10600] F2FS-fs (loop2): Start checkpoint disabled!
[  614.519586][T10600] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  614.565447][T10600] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  617.891507][T10631] overlayfs: failed to resolve './file0': -2
[  618.826416][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'.
[  618.862388][T10647] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  618.877043][T10647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1114'.
[  622.095313][T10674] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  623.208563][T10683] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  623.220642][T10683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1127'.
[  623.531842][T10687] overlayfs: failed to resolve './file0': -2
[  624.285322][T10695] loop2: detected capacity change from 0 to 256
[  624.545433][T10695] FAT-fs (loop2): Directory bread(block 64) failed
[  624.650676][T10695] FAT-fs (loop2): Directory bread(block 65) failed
[  624.713296][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  624.733041][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  624.812389][T10695] FAT-fs (loop2): Directory bread(block 66) failed
[  624.934095][T10695] FAT-fs (loop2): Directory bread(block 67) failed
[  625.061126][T10695] FAT-fs (loop2): Directory bread(block 68) failed
[  625.212491][T10695] FAT-fs (loop2): Directory bread(block 69) failed
[  625.255745][T10695] FAT-fs (loop2): Directory bread(block 70) failed
[  625.262363][T10695] FAT-fs (loop2): Directory bread(block 71) failed
[  625.276449][T10695] FAT-fs (loop2): Directory bread(block 72) failed
[  625.283224][T10695] FAT-fs (loop2): Directory bread(block 73) failed
[  626.445808][   T28] audit: type=1800 audit(2000000527.070:67): pid=10707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1128" name="bus" dev="loop2" ino=1048606 res=0 errno=0
[  627.666549][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1136'.
[  628.586029][T10733] overlayfs: failed to resolve './file0': -2
[  633.031677][T10757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1148'.
[  636.742838][T10790] bond0: (slave syz_tun): Releasing backup interface
[  637.353544][T10799] overlayfs: failed to resolve './file0': -2
[  638.549745][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1160'.
[  642.522024][T10841] loop2: detected capacity change from 0 to 256
[  642.563507][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'.
[  642.840182][T10831] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  642.976198][T10851] overlayfs: failed to resolve './file0': -2
[  643.091845][T10853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1171'.
[  644.517858][T10860] fuse: Bad value for 'fd'
[  647.137808][T10890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1181'.
[  647.456522][T10894] overlayfs: failed to resolve './file0': -2
[  648.266607][T10905] fuse: Bad value for 'fd'
[  648.289191][T10907] loop2: detected capacity change from 0 to 1024
[  648.344248][T10907] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  650.865303][T10930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1192'.
[  652.065901][T10938] overlayfs: failed to resolve './file0': -2
[  656.334664][ T5777] Bluetooth: hci4: command 0x0406 tx timeout
[  656.627425][T10964] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1202'.
[  657.064817][T10973] loop2: detected capacity change from 0 to 256
[  657.189163][T10970] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  659.665324][T10994] overlayfs: failed to resolve './file0': -2
[  661.334607][T11003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1213'.
[  662.795755][ T5836] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  663.649793][   T28] audit: type=1326 audit(2000000564.740:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  663.675636][ T5836] usb 3-1: Using ep0 maxpacket: 8
[  663.683102][ T5836] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  663.698152][ T5836] usb 3-1: config 179 has no interface number 0
[  663.704503][ T5836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  663.766016][ T5836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  663.785698][   T28] audit: type=1326 audit(2000000564.740:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  663.824546][ T5836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  663.853241][ T5836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  663.875576][   T28] audit: type=1326 audit(2000000564.740:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  663.903120][ T5836] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  663.925139][ T5836] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  663.936316][   T28] audit: type=1326 audit(2000000564.740:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  663.965724][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.991624][T11028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  664.014618][   T28] audit: type=1326 audit(2000000564.740:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  664.105727][   T28] audit: type=1326 audit(2000000564.740:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  664.200717][   T28] audit: type=1326 audit(2000000564.740:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  664.345014][   T28] audit: type=1326 audit(2000000564.740:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  664.439275][   T28] audit: type=1326 audit(2000000564.740:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  664.530796][T11028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.545130][T11028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.565615][   T28] audit: type=1326 audit(2000000564.740:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad379c819 code=0x7ffc0000
[  665.161823][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  665.170279][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  665.178766][ T6143] usb 3-1: USB disconnect, device number 27
[  665.915673][T11045] loop2: detected capacity change from 0 to 256
[  666.153801][T11029] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  666.164436][T11044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1223'.
[  670.292744][T11084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1234'.
[  672.914534][T11105] loop2: detected capacity change from 0 to 512
[  672.983883][T11105] EXT4-fs: Ignoring removed oldalloc option
[  673.077425][T11105] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  673.156860][T11105] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #11: comm syz.2.1238: corrupted in-inode xattr: invalid ea_ino
[  673.215993][T11105] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1238: couldn't read orphan inode 11 (err -117)
[  673.230365][T11105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  674.236595][T11125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1244'.
[  678.010246][T11160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1255'.
[  681.606415][T11194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1265'.
[  681.716707][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.831399][T11225] loop2: detected capacity change from 0 to 32768
[  685.888899][T11225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1273 (11225)
[  686.152588][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  686.173142][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  686.743301][T11225] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  686.753971][T11225] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  686.762867][T11225] BTRFS info (device loop2): force clearing of disk cache
[  686.770155][T11225] BTRFS info (device loop2): enabling auto defrag
[  686.777067][T11225] BTRFS info (device loop2): max_inline at 0
[  686.783110][T11225] BTRFS info (device loop2): enabling disk space caching
[  686.790366][T11225] BTRFS info (device loop2): disk space caching is enabled
[  687.733426][T11225] BTRFS info (device loop2): enabling ssd optimizations
[  687.742194][T11225] BTRFS info (device loop2): rebuilding free space tree
[  687.760135][T11225] BTRFS info (device loop2): disabling free space tree
[  687.767258][T11225] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  687.777043][T11225] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  687.898644][T11261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1278'.
[  688.012631][T11225] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  688.327325][T11225] random: crng reseeded on system resumption
[  689.027127][   T11] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  689.641170][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  690.555470][T11091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 15 /dev/loop2 scanned by udevd (11091)
[  692.563204][T11294] overlayfs: failed to resolve './file0': -2
[  697.232169][T11322] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  697.277020][T11322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1293'.
[  703.056808][ T6158] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  703.081455][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.185013][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  703.196155][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  703.209579][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  703.231731][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  703.239363][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.246285][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  703.256963][ T6158] usb 3-1: Using ep0 maxpacket: 8
[  703.265677][ T6158] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  703.274749][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  703.282365][ T6158] usb 3-1: config 179 has no interface number 0
[  703.291611][ T6158] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  703.339195][ T6158] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  703.350992][ T6158] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  703.362851][ T6158] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  703.365040][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.375256][ T6158] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  703.398880][ T6158] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  703.408649][ T6158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.420733][T11358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  703.567490][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.809753][T11365] chnl_net:caif_netlink_parms(): no params data found
[  703.857570][ T6158] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11
[  704.247734][T11365] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.271873][T11365] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.285372][T11365] bridge_slave_0: entered allmulticast mode
[  704.303788][T11365] bridge_slave_0: entered promiscuous mode
[  704.352153][T11365] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.386031][T11365] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.410529][T11365] bridge_slave_1: entered allmulticast mode
[  704.443972][T11365] bridge_slave_1: entered promiscuous mode
[  704.486009][ T5836] usb 3-1: USB disconnect, device number 28
[  704.486066][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  704.500535][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  704.535054][ T5836] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  704.811096][T11365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  704.852341][T11365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.324510][T11365] team0: Port device team_slave_0 added
[  705.497940][T10966] Bluetooth: hci0: command tx timeout
[  706.415464][T11365] team0: Port device team_slave_1 added
[  707.427542][T11365] batman_adv: batadv0: Adding interface: batadv_slave_0
[  707.434686][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  707.503660][T11365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  707.514388][T10966] Bluetooth: hci0: command tx timeout
[  707.777763][T11365] batman_adv: batadv0: Adding interface: batadv_slave_1
[  707.806443][T11365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  707.922079][T11365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  708.138134][T11365] hsr_slave_0: entered promiscuous mode
[  708.149508][T11365] hsr_slave_1: entered promiscuous mode
[  708.166122][T11365] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  708.173776][T11365] Cannot create hsr debugfs directory
[  709.626137][T10966] Bluetooth: hci0: command tx timeout
[  710.480527][T11365] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  710.502954][T11365] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  710.584638][   T35] hsr_slave_0: left promiscuous mode
[  710.592412][   T35] hsr_slave_1: left promiscuous mode
[  710.615979][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  710.623469][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  710.640491][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  710.649340][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  710.657773][   T35] bridge_slave_1: left allmulticast mode
[  710.663592][   T35] bridge_slave_1: left promiscuous mode
[  710.669984][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.680086][   T35] bridge_slave_0: left allmulticast mode
[  710.686034][   T35] bridge_slave_0: left promiscuous mode
[  710.692090][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.760198][   T35] veth1_macvtap: left promiscuous mode
[  710.769171][   T35] veth0_macvtap: left promiscuous mode
[  710.788471][   T35] veth1_vlan: left promiscuous mode
[  710.793878][   T35] veth0_vlan: left promiscuous mode
[  711.743496][T10966] Bluetooth: hci0: command tx timeout
[  713.920855][   T35] team0 (unregistering): Port device team_slave_1 removed
[  713.981888][   T35] team0 (unregistering): Port device team_slave_0 removed
[  714.042851][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.111430][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.594408][   T35] bond0 (unregistering): Released all slaves
[  714.700854][T11365] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  714.712061][T11365] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  715.390651][T11365] 8021q: adding VLAN 0 to HW filter on device bond0
[  715.513885][T11365] 8021q: adding VLAN 0 to HW filter on device team0
[  715.597397][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.604624][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.630996][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.638249][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  716.105867][ T6138] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  716.325771][ T6138] usb 3-1: Using ep0 maxpacket: 32
[  716.359455][ T6138] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  716.375615][ T6138] usb 3-1: config 2 has no interface number 0
[  716.381808][ T6138] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  716.398855][ T6138] usb 3-1: config 2 interface 88 has no altsetting 0
[  716.409437][ T6138] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  716.429957][ T6138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.449250][ T6138] usb 3-1: Product: syz
[  716.453493][ T6138] usb 3-1: Manufacturer: syz
[  716.473306][ T6138] usb 3-1: SerialNumber: syz
[  716.519602][T11494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  717.771108][T11365] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.944832][T11494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  718.935684][ T6138] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  718.965778][ T6138] asix: probe of 3-1:2.88 failed with error -71
[  719.006736][ T6138] usb 3-1: USB disconnect, device number 29
[  719.346194][T11542] binder: 11540:11542 ioctl 4018620d 0 returned -22
[  720.172565][T11365] veth0_vlan: entered promiscuous mode
[  720.249898][T11365] veth1_vlan: entered promiscuous mode
[  721.397278][T11365] veth0_macvtap: entered promiscuous mode
[  721.449160][T11365] veth1_macvtap: entered promiscuous mode
[  723.719581][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.771466][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.802298][T11365] batman_adv: batadv0: Interface activated: batadv_slave_0
[  725.071495][T11591] loop2: detected capacity change from 0 to 256
[  730.429606][T11365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.534765][T11591] FAT-fs (loop2): Directory bread(block 64) failed
[  730.541411][T11591] FAT-fs (loop2): Directory bread(block 65) failed
[  730.548188][T11591] FAT-fs (loop2): Directory bread(block 66) failed
[  730.554830][T11591] FAT-fs (loop2): Directory bread(block 67) failed
[  730.561546][T11591] FAT-fs (loop2): Directory bread(block 68) failed
[  730.568228][T11591] FAT-fs (loop2): Directory bread(block 69) failed
[  730.574852][T11591] FAT-fs (loop2): Directory bread(block 70) failed
[  730.581629][T11591] FAT-fs (loop2): Directory bread(block 71) failed
[  730.588339][T11591] FAT-fs (loop2): Directory bread(block 72) failed
[  730.594885][T11591] FAT-fs (loop2): Directory bread(block 73) failed
[  730.675204][T11365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.727857][T11365] batman_adv: batadv0: Interface activated: batadv_slave_1
[  730.759330][T11365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  730.768575][T11365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  730.777454][T11365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  730.786265][T11365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  730.935724][T11474] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  731.188506][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.203494][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.274937][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.299838][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.809812][T11594] overlayfs: failed to resolve './file0': -2
[  734.237419][T11651] overlayfs: failed to resolve './file0': -2
[  735.804913][T11677] overlayfs: failed to resolve './file0': -2
[  737.848252][T11691] loop2: detected capacity change from 0 to 1024
[  737.892901][T11691] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  738.466178][T11709] loop2: detected capacity change from 0 to 1024
[  738.485166][T11709] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  738.532729][T11709] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.1368: lblock 2 mapped to illegal pblock 2 (length 1)
[  738.558430][T11709] __quota_error: 14 callbacks suppressed
[  738.558449][T11709] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  738.587696][T11709] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.1368: lblock 0 mapped to illegal pblock 48 (length 1)
[  738.618944][T11709] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  738.666602][T11709] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1368: Failed to acquire dquot type 0
[  738.713640][T11709] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  738.754340][T11709] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1368: mark_inode_dirty error
[  738.787196][T11709] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  738.805643][T11709] EXT4-fs (loop2): 1 orphan inode deleted
[  738.817255][T11709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  738.834575][ T6218] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:21: lblock 1 mapped to illegal pblock 1 (length 1)
[  738.870551][ T6218] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  738.895634][ T6218] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:21: Failed to release dquot type 0
[  738.932214][T11709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.972309][T11709] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.1368: Invalid inode table block 1 in block_group 0
[  739.025859][T11709] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  739.053274][T11709] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz.2.1368: mark_inode_dirty error
[  739.204300][T11726] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1370'.
[  740.700151][T11749] overlayfs: failed to resolve './file0': -2
[  741.953417][ T6147] libceph: connect (1)[c::]:6789 error -101
[  741.960036][ T6147] libceph: mon0 (1)[c::]:6789 connect error
[  741.987892][T11735] ceph: No mds server is up or the cluster is laggy
[  742.102689][T11735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  742.606265][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1378'.
[  745.040718][T11810] loop2: detected capacity change from 0 to 32768
[  745.056545][T11819] overlayfs: failed to resolve './file0': -2
[  745.076163][T11810] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1389 (11810)
[  745.119082][T11810] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  745.157522][T11810] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  745.190455][T11810] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  745.227660][T11810] BTRFS info (device loop2): use zstd compression, level 3
[  745.262279][T11810] BTRFS info (device loop2): using free space tree
[  745.377009][T11810] BTRFS info (device loop2): enabling ssd optimizations
[  745.399321][T11810] BTRFS info (device loop2): auto enabling async discard
[  747.454493][T11859] fuse: Bad value for 'fd'
[  747.616103][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  747.622501][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  747.700919][T11865] fuse: Bad value for 'fd'
[  747.721436][ T5771] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  747.883689][T11868] netlink: 'syz.4.1400': attribute type 4 has an invalid length.
[  747.933858][T11868] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1400'.
[  748.052576][T11868] .`: renamed from bond0 (while UP)
[  748.497151][T11887] fuse: Bad value for 'fd'
[  751.427442][T11918] overlayfs: failed to resolve './file0': -2
[  751.896052][T11929] fuse: Unknown parameter 'user_id00000000000000000000'
[  753.135808][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  754.634754][T11963] fuse: Bad value for 'fd'
[  754.668576][T11964] loop2: detected capacity change from 0 to 1024
[  754.699496][T11964] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  754.765847][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'.
[  757.415626][T11993] loop2: detected capacity change from 0 to 40427
[  757.737206][T11993] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  757.745653][T11993] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  757.770206][T11993] F2FS-fs (loop2): invalid crc value
[  757.821951][T11993] F2FS-fs (loop2): Found nat_bits in checkpoint
[  757.880432][T11993] F2FS-fs (loop2): Start checkpoint disabled!
[  758.283557][T11993] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  758.290877][T11993] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  758.613529][T12003] fuse: Bad value for 'fd'
[  758.907617][T11987] overlayfs: failed to resolve './file0': -2
[  761.231988][T12035] fuse: Bad value for 'fd'
[  763.438591][   T35] kworker/u4:2: attempt to access beyond end of device
[  763.438591][   T35] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  763.503385][   T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  764.505197][T12065] fuse: Bad value for 'fd'
[  766.530249][T12081] overlayfs: failed to resolve './file0': -2
[  767.140460][T12092] loop2: detected capacity change from 0 to 1024
[  767.159874][T12092] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  767.968829][T12110] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1456'.
[  768.062692][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1456'.
[  768.546894][T12122] fuse: Bad value for 'fd'
[  769.240957][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  769.643042][T12126] loop2: detected capacity change from 0 to 32768
[  769.723922][T12126] (syz.2.1460,12126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  769.759951][T12126] (syz.2.1460,12126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  769.907776][T12126] JBD2: Ignoring recovery information on journal
[  770.264575][T12126] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  771.055823][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  771.910356][ T5771] ocfs2: Unmounting device (7,2) on (node local)
[  772.479187][T12179] loop2: detected capacity change from 0 to 1024
[  772.499324][T12179] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  773.917992][T12201] loop2: detected capacity change from 0 to 40427
[  773.950809][T12201] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  773.958631][T12201] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  773.968438][T12201] F2FS-fs (loop2): invalid crc value
[  773.984175][T12201] F2FS-fs (loop2): Found nat_bits in checkpoint
[  774.034078][T12201] F2FS-fs (loop2): Start checkpoint disabled!
[  774.098626][T12201] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  774.105949][T12201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  777.402650][T12235] overlayfs: failed to resolve './file0': -2
[  778.774397][ T6332] kworker/u4:31: attempt to access beyond end of device
[  778.774397][ T6332] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  778.822528][ T6332] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  782.413711][T12282] overlayfs: failed to resolve './file0': -2
[  787.130960][T12319] overlayfs: failed to resolve './file0': -2
[  787.455166][T12309] loop2: detected capacity change from 0 to 32768
[  787.482481][T12309] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1499 (12309)
[  787.688629][T12309] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  787.730239][T12309] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  787.764832][T12309] BTRFS info (device loop2): using free space tree
[  788.679035][T12309] BTRFS info (device loop2): enabling ssd optimizations
[  788.709486][T12309] BTRFS info (device loop2): auto enabling async discard
[  789.131416][ T5771] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  789.456690][T12322] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop2 scanned by udevd (12322)
[  793.543749][T12378] netlink: 'syz.2.1516': attribute type 1 has an invalid length.
[  793.757517][T12384] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  793.822428][T12384] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  794.040211][T12387] bond1: (slave gretap2): making interface the new active one
[  794.112778][T12387] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  794.214501][T12378] macvlan2: entered promiscuous mode
[  794.251043][T12378] macvlan2: entered allmulticast mode
[  794.282494][T12378] bond1: entered promiscuous mode
[  794.320070][T12378] gretap2: entered promiscuous mode
[  794.366712][T12378] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  794.417268][T12378] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  794.469745][T12378] bond1: left promiscuous mode
[  794.474787][T12378] gretap2: left promiscuous mode
[  797.395044][T12422] loop2: detected capacity change from 0 to 32768
[  797.409792][T12422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1531 (12422)
[  797.438256][T12422] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  797.448828][T12422] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  797.457557][T12422] BTRFS info (device loop2): force clearing of disk cache
[  797.464687][T12422] BTRFS info (device loop2): enabling auto defrag
[  797.471203][T12422] BTRFS info (device loop2): max_inline at 0
[  797.477228][T12422] BTRFS info (device loop2): enabling disk space caching
[  797.484276][T12422] BTRFS info (device loop2): disk space caching is enabled
[  797.601680][T12422] BTRFS info (device loop2): enabling ssd optimizations
[  797.610710][T12422] BTRFS info (device loop2): rebuilding free space tree
[  797.634615][T12422] BTRFS info (device loop2): disabling free space tree
[  797.641652][T12422] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  797.651353][T12422] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  797.978028][T12442] random: crng reseeded on system resumption
[  799.100296][ T6238] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  799.106654][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  799.684370][T12448] kvm: pic: non byte write
[  799.696230][T12448] kvm: pic: level sensitive irq not supported
[  799.696585][T12448] kvm: pic: non byte write
[  799.744237][T12448] kvm: pic: non byte write
[  799.769388][T12448] kvm: pic: single mode not supported
[  799.769412][T12448] kvm: pic: level sensitive irq not supported
[  799.775432][T12448] kvm: pic: non byte write
[  799.805089][T12448] kvm: pic: level sensitive irq not supported
[  799.805416][T12448] kvm: pic: non byte write
[  799.841630][T12448] kvm: pic: non byte write
[  799.860493][T12448] kvm: pic: single mode not supported
[  799.860517][T12448] kvm: pic: level sensitive irq not supported
[  799.876011][T12448] kvm: pic: single mode not supported
[  799.882191][T12448] kvm: pic: level sensitive irq not supported
[  799.912742][T12448] kvm: pic: single mode not supported
[  799.919552][T12448] kvm: pic: level sensitive irq not supported
[  799.935048][T12448] kvm: pic: single mode not supported
[  799.970890][T12448] kvm: pic: single mode not supported
[  799.976438][T12448] kvm: pic: level sensitive irq not supported
[  800.024739][T12448] kvm: pic: non byte write
[  800.725655][ T6147] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  801.096921][ T6147] usb 3-1: Using ep0 maxpacket: 32
[  801.105185][ T6147] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  801.118473][ T6147] usb 3-1: config 0 has no interface number 0
[  801.132207][ T6147] usb 3-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  801.155648][ T6147] usb 3-1: config 0 interface 12 has no altsetting 0
[  801.174622][ T6147] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  801.191481][ T6147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.209183][ T6147] usb 3-1: Product: syz
[  801.217729][ T6147] usb 3-1: Manufacturer: syz
[  801.227688][ T6147] usb 3-1: SerialNumber: syz
[  801.242841][ T6147] usb 3-1: config 0 descriptor??
[  801.258781][ T6147] f81534 3-1:0.12: required endpoints missing
[  801.600075][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1548'.
[  801.917339][T12493] netlink: 'syz.2.1541': attribute type 1 has an invalid length.
[  802.030668][T12493] 8021q: adding VLAN 0 to HW filter on device bond2
[  802.108261][T12499] bond2: (slave ip6erspan0): making interface the new active one
[  802.127961][T12499] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  802.443569][T12502] overlayfs: failed to resolve './file0': -2
[  802.682344][T12511] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1557'.
[  803.457506][T12527] overlayfs: failed to resolve './file0': -2
[  804.037008][T11599] usb 3-1: USB disconnect, device number 30
[  804.359254][T12549] loop2: detected capacity change from 0 to 256
[  804.402236][T12549] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  804.469471][   T28] audit: type=1800 audit(2000000705.560:92): pid=12549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1571" name="file1" dev="loop2" ino=1048610 res=0 errno=0
[  804.486611][T12549] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  804.520666][T12549] FAT-fs (loop2): Filesystem has been set read-only
[  804.905112][T12559] overlayfs: failed to resolve './file0': -2
[  804.965283][T12560] loop2: detected capacity change from 0 to 1024
[  805.008389][T12560] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  805.952810][T12582] fuse: Bad value for 'fd'
[  805.976484][T12575] loop2: detected capacity change from 0 to 32768
[  805.984897][T12575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1582 (12575)
[  806.026648][T12575] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  806.037049][T12575] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  806.046055][T12575] BTRFS info (device loop2): force clearing of disk cache
[  806.053668][T12575] BTRFS info (device loop2): enabling auto defrag
[  806.060866][T12575] BTRFS info (device loop2): max_inline at 0
[  806.067062][T12575] BTRFS info (device loop2): enabling disk space caching
[  806.074142][T12575] BTRFS info (device loop2): disk space caching is enabled
[  806.145606][T12575] BTRFS info (device loop2): enabling ssd optimizations
[  806.154101][T12575] BTRFS info (device loop2): rebuilding free space tree
[  806.181372][T12575] BTRFS info (device loop2): disabling free space tree
[  806.188785][T12575] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  806.198584][T12575] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  806.297343][T12575] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  806.417549][ T6332] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  806.651832][T12611] random: crng reseeded on system resumption
[  808.050576][T12624] overlayfs: failed to clone upperpath
[  808.250032][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  808.358954][T12631] overlayfs: failed to clone upperpath
[  808.921112][T12640] overlayfs: failed to resolve './file0': -2
[  809.029931][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  809.037118][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  809.062125][T12646] loop2: detected capacity change from 0 to 136
[  809.457528][T12653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1608'.
[  809.494781][T12653] ip6gre1: entered promiscuous mode
[  809.495842][T12654] raw_sendmsg: syz.1.1606 forgot to set AF_INET. Fix it!
[  809.511498][T12653] ip6gre1: entered allmulticast mode
[  809.537962][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'.
[  811.801193][T12680] netlink: 'syz.5.1614': attribute type 1 has an invalid length.
[  811.999783][T12681] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  812.046677][T12681] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  812.088983][T12683] bond1: (slave gretap1): making interface the new active one
[  812.100884][T12683] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  812.144876][T12688] netlink: 'syz.4.1615': attribute type 12 has an invalid length.
[  812.294690][T12692] loop2: detected capacity change from 0 to 512
[  812.357232][T12692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  812.394863][T12692] System zones: 1-12
[  812.417226][T12692] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1617: missing EA_INODE flag
[  812.436390][T12692] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1617: error while reading EA inode 12 err=-117
[  812.498374][T12692] EXT4-fs (loop2): 1 orphan inode deleted
[  812.530542][T12692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.892029][T12695] overlayfs: failed to resolve './file0': -2
[  812.912913][   T28] audit: type=1800 audit(2000000714.000:93): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1617" name="file1" dev="loop2" ino=20 res=0 errno=0
[  813.712508][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  815.392294][T12723] loop2: detected capacity change from 0 to 512
[  815.712995][T12719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1623'.
[  820.004260][T12788] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1637'.
[  820.238717][T12785] loop2: detected capacity change from 0 to 32768
[  820.258745][T12785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1646 (12785)
[  820.295238][T12785] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  820.306062][T12785] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  820.314842][T12785] BTRFS info (device loop2): force clearing of disk cache
[  820.322214][T12785] BTRFS info (device loop2): enabling auto defrag
[  820.328902][T12785] BTRFS info (device loop2): max_inline at 0
[  820.334941][T12785] BTRFS info (device loop2): enabling disk space caching
[  820.342047][T12785] BTRFS info (device loop2): disk space caching is enabled
[  820.541756][T12785] BTRFS info (device loop2): enabling ssd optimizations
[  820.551623][T12785] BTRFS info (device loop2): rebuilding free space tree
[  820.599827][T12785] BTRFS info (device loop2): disabling free space tree
[  820.607039][T12785] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  820.617190][T12785] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  821.111155][T12785] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  821.534134][T12817] random: crng reseeded on system resumption
[  821.774359][   T11] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  822.434749][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  822.564685][T12826] netlink: 'syz.5.1653': attribute type 1 has an invalid length.
[  822.740124][T12834] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  822.827194][T12834] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  824.029157][T12855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1662'.
[  824.038459][T12855] ------------[ cut here ]------------
[  824.043950][T12855] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16)
[  824.057039][T12855] WARNING: CPU: 1 PID: 12855 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0
[  824.066305][T12855] Modules linked in:
[  824.070423][T12855] CPU: 1 PID: 12855 Comm: syz.2.1662 Not tainted syzkaller #0
[  824.077999][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  824.088230][T12855] RIP: 0010:u32_change+0x1c5a/0x24f0
[  824.093587][T12855] Code: f8 eb 59 e8 18 a4 d8 f8 c6 05 e1 3d c7 05 01 b9 10 00 00 00 48 c7 c7 80 66 c7 8b 4c 89 f6 48 c7 c2 00 67 c7 8b e8 76 5a a2 f8 <0f> 0b e9 86 f0 ff ff e8 ea a3 d8 f8 eb 24 e8 e3 a3 d8 f8 c6 05 7b
[  824.114493][T12855] RSP: 0018:ffffc9000c286d40 EFLAGS: 00010246
[  824.120848][T12855] RAX: 9526e72d4d351a00 RBX: ffff8880287bcc00 RCX: 0000000000080000
[  824.128947][T12855] RDX: ffffc9000d48b000 RSI: 0000000000006204 RDI: 0000000000006205
[  824.137042][T12855] RBP: ffffc9000c286ef8 R08: ffffc9000c286a47 R09: 1ffff92001850d48
[  824.145101][T12855] R10: dffffc0000000000 R11: fffff52001850d49 R12: ffff888025717400
[  824.153325][T12855] R13: ffff8880257174e8 R14: 0000000000000020 R15: ffff88805ff79dc0
[  824.161383][T12855] FS:  00007fd5bbeef6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  824.170442][T12855] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  824.177115][T12855] CR2: 000000110c3d3c28 CR3: 000000006409e000 CR4: 00000000003506e0
[  824.185142][T12855] Call Trace:
[  824.188544][T12855]  <TASK>
[  824.191499][T12855]  ? tc_new_tfilter+0x8f7/0x17c0
[  824.196531][T12855]  ? u32_get+0x370/0x370
[  824.201639][T12855]  ? u32_get+0x370/0x370
[  824.206217][T12855]  tc_new_tfilter+0x11f9/0x17c0
[  824.208915][T12844] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1657'.
[  824.211160][T12855]  ? tcf_proto_signal_destroying+0x240/0x240
[  824.226303][T12855]  ? rcu_read_unlock+0x8c/0xa0
[  824.231136][T12855]  ? tcf_proto_signal_destroying+0x240/0x240
[  824.237248][T12855]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  824.242411][T12855]  ? tcf_proto_signal_destroying+0x240/0x240
[  824.248541][T12855]  rtnetlink_rcv_msg+0x8b8/0xfa0
[  824.253545][T12855]  ? lockdep_hardirqs_on+0x98/0x150
[  824.258914][T12855]  ? rtnetlink_bind+0x80/0x80
[  824.263661][T12855]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  824.269819][T12855]  ? lock_chain_count+0x20/0x20
[  824.274755][T12855]  ? __local_bh_enable_ip+0x13a/0x1c0
[  824.280242][T12855]  ? lockdep_hardirqs_on+0x98/0x150
[  824.285567][T12855]  ? __local_bh_enable_ip+0x13a/0x1c0
[  824.291004][T12855]  ? _local_bh_enable+0xa0/0xa0
[  824.295986][T12855]  ? __dev_queue_xmit+0x265/0x3660
[  824.301160][T12855]  ? __dev_queue_xmit+0x265/0x3660
[  824.307202][T12855]  ? __dev_queue_xmit+0x1b2c/0x3660
[  824.312678][T12855]  ? __dev_queue_xmit+0x265/0x3660
[  824.317935][T12855]  ? ref_tracker_free+0x690/0x840
[  824.323038][T12855]  netlink_rcv_skb+0x241/0x4d0
[  824.327950][T12855]  ? rtnetlink_bind+0x80/0x80
[  824.332681][T12855]  ? netlink_ack+0x1180/0x1180
[  824.337601][T12855]  ? __lock_acquire+0x7d40/0x7d40
[  824.342693][T12855]  ? netlink_deliver_tap+0x2e/0x1b0
[  824.348058][T12855]  netlink_unicast+0x751/0x8d0
[  824.352897][T12855]  netlink_sendmsg+0x8d0/0xbf0
[  824.357810][T12855]  ? netlink_getsockopt+0x590/0x590
[  824.363097][T12855]  ? aa_sock_msg_perm+0x94/0x150
[  824.368171][T12855]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  824.373512][T12855]  ? security_socket_sendmsg+0x80/0xa0
[  824.379376][T12855]  ? netlink_getsockopt+0x590/0x590
[  824.384644][T12855]  ____sys_sendmsg+0x5ba/0x960
[  824.390011][T12855]  ? __asan_memset+0x22/0x40
[  824.394745][T12855]  ? __sys_sendmsg_sock+0x30/0x30
[  824.399873][T12855]  ? __import_iovec+0x5f2/0x850
[  824.404788][T12855]  ? import_iovec+0x73/0xa0
[  824.410262][T12855]  ___sys_sendmsg+0x2a6/0x360
[  824.414996][T12855]  ? __sys_sendmsg+0x2a0/0x2a0
[  824.420060][T12855]  __sys_sendmmsg+0x2ca/0x510
[  824.424777][T12855]  ? __ia32_sys_sendmsg+0x90/0x90
[  824.429977][T12855]  ? __ia32_sys_get_robust_list+0x110/0x110
[  824.436115][T12855]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  824.442145][T12855]  ? lock_chain_count+0x20/0x20
[  824.447125][T12855]  __x64_sys_sendmmsg+0xa0/0xb0
[  824.452019][T12855]  do_syscall_64+0x55/0xa0
[  824.456512][T12855]  ? clear_bhb_loop+0x40/0x90
[  824.461239][T12855]  ? clear_bhb_loop+0x40/0x90
[  824.466107][T12855]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  824.472033][T12855] RIP: 0033:0x7fd5baf9c819
[  824.476503][T12855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.496255][T12855] RSP: 002b:00007fd5bbeef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  824.504955][T12855] RAX: ffffffffffffffda RBX: 00007fd5bb215fa0 RCX: 00007fd5baf9c819
[  824.513729][T12855] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007
[  824.521980][T12855] RBP: 00007fd5bb032c91 R08: 0000000000000000 R09: 0000000000000000
[  824.530067][T12855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  824.538149][T12855] R13: 00007fd5bb216038 R14: 00007fd5bb215fa0 R15: 00007ffcb45ec838
[  824.546461][T12855]  </TASK>
[  824.549570][T12855] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  824.556956][T12855] CPU: 1 PID: 12855 Comm: syz.2.1662 Not tainted syzkaller #0
[  824.564447][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  824.574741][T12855] Call Trace:
[  824.578035][T12855]  <TASK>
[  824.580970][T12855]  dump_stack_lvl+0x18c/0x250
[  824.585657][T12855]  ? show_regs_print_info+0x20/0x20
[  824.590869][T12855]  ? load_image+0x420/0x420
[  824.595429][T12855]  panic+0x2dc/0x730
[  824.599368][T12855]  ? bpf_jit_dump+0xd0/0xd0
[  824.603881][T12855]  __warn+0x2e0/0x470
[  824.607881][T12855]  ? u32_change+0x1c5a/0x24f0
[  824.612673][T12855]  ? u32_change+0x1c5a/0x24f0
[  824.617368][T12855]  report_bug+0x2be/0x4f0
[  824.621708][T12855]  ? u32_change+0x1c5a/0x24f0
[  824.626401][T12855]  ? u32_change+0x1c5a/0x24f0
[  824.631094][T12855]  ? u32_change+0x1c5c/0x24f0
[  824.635788][T12855]  handle_bug+0xcf/0x120
[  824.640047][T12855]  exc_invalid_op+0x1a/0x50
[  824.644648][T12855]  asm_exc_invalid_op+0x1a/0x20
[  824.649511][T12855] RIP: 0010:u32_change+0x1c5a/0x24f0
[  824.654819][T12855] Code: f8 eb 59 e8 18 a4 d8 f8 c6 05 e1 3d c7 05 01 b9 10 00 00 00 48 c7 c7 80 66 c7 8b 4c 89 f6 48 c7 c2 00 67 c7 8b e8 76 5a a2 f8 <0f> 0b e9 86 f0 ff ff e8 ea a3 d8 f8 eb 24 e8 e3 a3 d8 f8 c6 05 7b
[  824.674524][T12855] RSP: 0018:ffffc9000c286d40 EFLAGS: 00010246
[  824.680604][T12855] RAX: 9526e72d4d351a00 RBX: ffff8880287bcc00 RCX: 0000000000080000
[  824.688584][T12855] RDX: ffffc9000d48b000 RSI: 0000000000006204 RDI: 0000000000006205
[  824.696567][T12855] RBP: ffffc9000c286ef8 R08: ffffc9000c286a47 R09: 1ffff92001850d48
[  824.704545][T12855] R10: dffffc0000000000 R11: fffff52001850d49 R12: ffff888025717400
[  824.712526][T12855] R13: ffff8880257174e8 R14: 0000000000000020 R15: ffff88805ff79dc0
[  824.720527][T12855]  ? tc_new_tfilter+0x8f7/0x17c0
[  824.725506][T12855]  ? u32_get+0x370/0x370
[  824.729805][T12855]  ? u32_get+0x370/0x370
[  824.734057][T12855]  tc_new_tfilter+0x11f9/0x17c0
[  824.738955][T12855]  ? tcf_proto_signal_destroying+0x240/0x240
[  824.745053][T12855]  ? rcu_read_unlock+0x8c/0xa0
[  824.749843][T12855]  ? tcf_proto_signal_destroying+0x240/0x240
[  824.755845][T12855]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  824.760972][T12855]  ? tcf_proto_signal_destroying+0x240/0x240
[  824.766968][T12855]  rtnetlink_rcv_msg+0x8b8/0xfa0
[  824.771928][T12855]  ? lockdep_hardirqs_on+0x98/0x150
[  824.777157][T12855]  ? rtnetlink_bind+0x80/0x80
[  824.781872][T12855]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  824.787974][T12855]  ? lock_chain_count+0x20/0x20
[  824.792853][T12855]  ? __local_bh_enable_ip+0x13a/0x1c0
[  824.798245][T12855]  ? lockdep_hardirqs_on+0x98/0x150
[  824.803470][T12855]  ? __local_bh_enable_ip+0x13a/0x1c0
[  824.808855][T12855]  ? _local_bh_enable+0xa0/0xa0
[  824.813763][T12855]  ? __dev_queue_xmit+0x265/0x3660
[  824.818891][T12855]  ? __dev_queue_xmit+0x265/0x3660
[  824.824020][T12855]  ? __dev_queue_xmit+0x1b2c/0x3660
[  824.829242][T12855]  ? __dev_queue_xmit+0x265/0x3660
[  824.834381][T12855]  ? ref_tracker_free+0x690/0x840
[  824.839434][T12855]  netlink_rcv_skb+0x241/0x4d0
[  824.844219][T12855]  ? rtnetlink_bind+0x80/0x80
[  824.848919][T12855]  ? netlink_ack+0x1180/0x1180
[  824.853724][T12855]  ? __lock_acquire+0x7d40/0x7d40
[  824.858769][T12855]  ? netlink_deliver_tap+0x2e/0x1b0
[  824.864003][T12855]  netlink_unicast+0x751/0x8d0
[  824.868932][T12855]  netlink_sendmsg+0x8d0/0xbf0
[  824.873726][T12855]  ? netlink_getsockopt+0x590/0x590
[  824.878946][T12855]  ? aa_sock_msg_perm+0x94/0x150
[  824.883903][T12855]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  824.889215][T12855]  ? security_socket_sendmsg+0x80/0xa0
[  824.894689][T12855]  ? netlink_getsockopt+0x590/0x590
[  824.900080][T12855]  ____sys_sendmsg+0x5ba/0x960
[  824.904889][T12855]  ? __asan_memset+0x22/0x40
[  824.909525][T12855]  ? __sys_sendmsg_sock+0x30/0x30
[  824.914598][T12855]  ? __import_iovec+0x5f2/0x850
[  824.919485][T12855]  ? import_iovec+0x73/0xa0
[  824.924016][T12855]  ___sys_sendmsg+0x2a6/0x360
[  824.928714][T12855]  ? __sys_sendmsg+0x2a0/0x2a0
[  824.933526][T12855]  __sys_sendmmsg+0x2ca/0x510
[  824.938220][T12855]  ? __ia32_sys_sendmsg+0x90/0x90
[  824.943262][T12855]  ? __ia32_sys_get_robust_list+0x110/0x110
[  824.949177][T12855]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  824.955185][T12855]  ? lock_chain_count+0x20/0x20
[  824.960145][T12855]  __x64_sys_sendmmsg+0xa0/0xb0
[  824.965026][T12855]  do_syscall_64+0x55/0xa0
[  824.969458][T12855]  ? clear_bhb_loop+0x40/0x90
[  824.974146][T12855]  ? clear_bhb_loop+0x40/0x90
[  824.978835][T12855]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  824.984833][T12855] RIP: 0033:0x7fd5baf9c819
[  824.989269][T12855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  825.008898][T12855] RSP: 002b:00007fd5bbeef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  825.017328][T12855] RAX: ffffffffffffffda RBX: 00007fd5bb215fa0 RCX: 00007fd5baf9c819
[  825.025307][T12855] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007
[  825.033293][T12855] RBP: 00007fd5bb032c91 R08: 0000000000000000 R09: 0000000000000000
[  825.041273][T12855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  825.049273][T12855] R13: 00007fd5bb216038 R14: 00007fd5bb215fa0 R15: 00007ffcb45ec838
[  825.057275][T12855]  </TASK>
[  825.060762][T12855] Kernel Offset: disabled
[  825.065106][T12855] Rebooting in 86400 seconds..