last executing test programs:

5m13.534442132s ago: executing program 2 (id=533):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x5333b000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008004)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$tipc(0x1e, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x348}, 0x0, 0x800, 0x1})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147042, 0x32)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x7a680000)

5m11.782264794s ago: executing program 2 (id=538):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dri(0x0, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8)
sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0x1000f)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x8000, 0x0, '\x00', {0x0, @reserved}})

5m9.862135198s ago: executing program 2 (id=540):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x734, &(0x7f0000000580)={[{@nobh}, {@dax_never}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nolazytime}]}, 0xff, 0x487, &(0x7f0000000b80)="$eJzs3M1vFVUbAPBnpi3f0L68iIIgVTQSP1paUFm4UKOJC01MdIHL2hZELtTQmghptBqDS0Pi3rg08S9w58aoC2PiVhOXhoRoY0Jxdc180XJ7W9rS9krv75dc7jkzZ+45z8yc2zNzmBtA2+rN/kkidkTErxHRXWRvLdBbvM1MTw7fmJ4cTqJef/3PJC93fXpyuCpabbe9zBxJI9JPkngumV/v+MVLZ4dqtdELZb5/4ty7/eMXLz155tzQ6dHTo+cHT5w4fmzgmacHn1qVOLO4ru//YOzAvpffvPLq8Mkrb/3wddasvQeL9XPjuK0bTQJqojfba3/Vc43rHllG2+8GO+ekk84WNoRl6YiI7HB15f2/Ozpi9uB1x0sft7RxwJqqH4r65oVXT9WBDSwbzQPtqPpDn13/Vq91Gnr8J1x7PmJTmZ6ZnhyeuRl/Z6Tl8q41rL83Ik5O/fNF9orl3ocAAFiBfGzzRLPxXxp78/dirmNXOYfSExH/i4jdEfH/iNgTEfdE5GXvjYj7io3r3Uusv7chP3/8k15t2uZVko3/np0z9puZE3/51tNR5nbm8Xclp87URo+W++RIdG3O8gOL1PHti798ttC6ueO/7JXVX40FywZc7Wy4QTcyNDG0Wjvh2kcR+zubxZ/cnAnIzoB9EbF/eR+9q0qceeyrAwsVun38i1iFeab6lxGPFsd/KhrirySLz0/2b4na6NH+6qyY78efL7+2UP13FP8qyI7/tlvP/4YS3X8nxXxtV9RqoxfGl1/H5d8+XfCaZqXn/6bkjXzO+qe3i2XvD01MXBiI2JS8kuera7p8+eDstlW+Kp/Ff+Rw8/6/u9wmi//+iMhO4oMR8UBEHCrb/mBEPBQRhxeJ//sXHn5nkfiTSKKlx3+k6fffzfO/J5k7X7+CRMfZ775ZaMZ8acf/eEzl37WF/PvvNpbawDvcfQAAAHBXSCNiRyRpX5Hu3RFp2tdX/B/+PbEtrY2NTzx+auy98yPFMwI90ZVWd7q659wPHUimyk8s8oPlveJq/bHyvvHnHVvzfN/wWG2kxbFDu9t+a/+Pqv9n/uhodeuANed5LWhfjf0/bVE7gPW3lL//rgVgY2rS/7e2oh3A+nP9D+2rWf//sCFv/A8b0/z+/3uTn6wDNiLjf2hf+j+0L/0f2tKdPNe/8kT1sMDKP2fLkp/wb5dE9YsXa1nX1phdEmnLQ26fxJasx6xvpbO/oQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3+zcAAP//1+Pkkg==")
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000c61)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000"], 0x7c}}, 0x0)

5m7.298125011s ago: executing program 2 (id=547):
socket$alg(0x26, 0x5, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_elf64(r4, 0x0, 0xfffffd88)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
timerfd_create(0x1, 0x0)

5m3.294693242s ago: executing program 2 (id=550):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x112, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x92, 0x80, 0x9d5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m1.058457151s ago: executing program 2 (id=555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r2, 0x8800000)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r3, r2, 0x0, 0x578410e9)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt(r5, 0x4, 0x7, &(0x7f0000000380)="36f893f13d4686a53855554203f5a163378bf9ede2ab306952d592fb2f4281a3966778c49a9be4688ce78b77f28984", 0x2f)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'veth0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0x8}})
sendto$inet6(r5, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8)

4m45.732268424s ago: executing program 32 (id=555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r2, 0x8800000)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r3, r2, 0x0, 0x578410e9)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt(r5, 0x4, 0x7, &(0x7f0000000380)="36f893f13d4686a53855554203f5a163378bf9ede2ab306952d592fb2f4281a3966778c49a9be4688ce78b77f28984", 0x2f)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'veth0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0x8}})
sendto$inet6(r5, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8)

15.181103288s ago: executing program 0 (id=980):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x2, 0x800)
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000008380)='./bus\x00', 0x14018, &(0x7f0000000880)=ANY=[@ANYBLOB="0010bbbe8b821e4cf6d79d4d501be8af339fd4bbd17d928c6d063cce0ce162684c47d7ced43a8371c6dd5466f6250eb5e73903a3df58f7df872e05470b03dfd44956cfbf6b2651360ae7880805ab8f419532c02aa5d40d1ed66a2ca647a20a37040700000000000000c701346399b0848c3fac7e886dbfcbcd516f5d261738410cf17d0cea70e5d3c6b7478c07b55e59876f1b7d68782cb16137784d64e37a4327377467b94266cde7f65690b41ccf9c1dca7a081990"], 0x1, 0x6fb, &(0x7f0000000180)="$eJzs3U1sHGcdB+DfrNdfQUqdNmkBVSJtpIKISPyhFMIlASHkQ1VV4sCBk5U4jZVNWtlucSogAQpceyjiWg65cULixCWo3JDgyNFwqoToBS65bTWzs/Y6641382VbfZ52dt6Z92Pe97/zuVY0AT63Fk+neTdFFk+/tlEub95ZaG3eWZiss1tJynSz+j+NJMWNpPg4uZjOlC+VK+vyxaDtfFhW/9/mJ0mmO201u+XLRv/8t9df6il9qz3aKG7XU04mGavn/cb7V03t3d6lge11TPakdx9/sZVTBuxUN3Cw39p9bo9SfeDxDhweRee62WcmOVJfJqvrXH12aDzd3j1+I53lAAAAYJ8t/vfE/Cjlp+v5M/dyLxuH/jEeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnqr6/f9FPTW66ZMpuu//n6jXpU4fanf3uwMAAAAAAAAAMITJbuLC7vlfuZd72cjR7nK7qP7m/3K1cLz6/ELeyVqWs5oz2chS1rOe1cwlmelpaGJjaX19dW6ImvO71px/vOMGAAAAAAAAgM+ZX2Rx++//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEBTJWGdWTce76Zk0mkmmkkyU5W4n/+imD4lit5V3n34/AAAA4JFMPUSdieReNnK0u9wuqmf+56vn5am8kxtZz0rW08pyLtfP0OVTf2PzzkJr887C9XLqbbFdG7UbaaTz28PuW/5iVWI6V7JSrTmTS1VnLqdR1Sz9O8n1bp/u71fy80/Lti90/HjInl2u5+XGPuj+ijA50uCekJmk2cj4VkRmq751doJjvVHoj8R3Ph3U6MXOrHn/ltK7pbk0tn75Od7ZQpncM+YXhhzZkXpejufXg365qbz/uyGb3NvU9kZvDyy0FYlGqkjM9+x9z3ciMZXdY5589U9/+KAobly7emXt9OAhHRL37xMLPZF44cF7XxWJH15tHdBINIcv+qPfJpmtInFia+Vivp8f5HRO5o2sZiXvZinrWU5Rj3Sp3p/Lz5kHR+rijqU39urORP29dM6iO/s0vdVIb59O5ntVaikvV3WPZiVF3srlLOfV6r/5zOWbOZdzOd/zDZ8Y2O9qbNVR3yiP+H+l76hv7N75U1+rE2VPf1PPH+DdvaLxOHROCmVcj/XEtZx3z7kzVV7vWXg7Ss9W0Zkc6npURWmPIZc755frRLmNXw6O5j64PxJzPbcAzz14P/99VXStdePa6tWlt3e9uo7X8+1bi1d6cn+19+3PXwas3zvmw+k5j5X7y7OZqs8kxzLe6dpYN++5rbPMjnhVece38hp9eSc6X3fRPVJfH3ikTtT3cP0tzVd5L+yat1DllXdazWb67reSt9Lauh8C4AA78vUjE9P/mf779EfT709fnX5t6ruT35p8cSLjfx3/dnN27JXGi8Uf81F+tv38DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLy1m+9dW2q1lle3E+M9axo7s4ZNdN/ks70me9Qq6jfpDLWJxqj9eRKJ9q3kAHRjde2lJA9f/aftdnvXrGJ17ebUE+hzuSd0XyI4WvXZHXtUlbi4n5H/56i1MjXSkNvPdKI00iZmOnWGKDzZCeZYf1SrRP0VPczLRYFD4ez69bfPrt187xsr15feXH5z+cb4uXPnZ8+fe3Xh7JWV1vJs57OvWvvWQ7zsFzhYti/6+90TAAAAAAAAAAAAYFiP9k8gmkMV3u8xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIfb4uk076bI3OyZ2XJ5885Cq5y66e2SzST/byfFT5Li4+RiOlNmeporBm3nw5XzY0k+2W6r2S3feEC99uRQo7hdTzmZZKyeP4Id7V165PaKrRGWATvVDRzst88CAAD//0NAA44=")
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x687, &(0x7f0000000c00)="$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")
syz_usb_connect(0x3, 0x2d, &(0x7f00000012c0)={{0x12, 0x1, 0x201, 0x6b, 0x7d, 0x79, 0x20, 0x2040, 0xd8e3, 0x9d9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x78, 0x80, 0x1, [{{0x9, 0x4, 0xfb, 0x9, 0x1, 0x21, 0xd, 0x4c, 0x4, [], [{{0x9, 0x5, 0xf, 0x2, 0x7ef, 0x1, 0x6, 0xff}}]}}]}}]}}, 0x0)
link(0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
inotify_init()
syz_open_dev$mouse(0x0, 0x8, 0x40)
unshare(0xc020400)
close(0x3)

12.920286738s ago: executing program 0 (id=993):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5}, {0x5}, {0x6}]})
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)
clock_adjtime(0x0, &(0x7f00000006c0)={0x1b, 0xf423f, 0x4100, 0x0, 0x0, 0x2c43})
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x3000)
r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x26f, &(0x7f00000003c0)="$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")
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080))
r3 = signalfd(r2, &(0x7f0000000100)={[0x7]}, 0x8)
close_range(r0, r3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)

11.878739816s ago: executing program 0 (id=1001):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x2, 0x787, &(0x7f0000001000)="$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")
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x2, 0x1df, &(0x7f0000000ac0)="$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")
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
open(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

11.448348719s ago: executing program 0 (id=1006):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
open(0x0, 0x0, 0x100)
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000000)={[{@unhide}, {@utf8}, {@map_acorn}, {@check_strict}, {@hide}, {@hide}, {@session={'session', 0x3d, 0x52}}, {@unhide}, {@dmode={'dmode', 0x3d, 0x1}}, {@sbsector={'sbsector', 0x3d, 0x20}}, {@session={'session', 0x3d, 0x49}}, {@map_off}, {@mode={'mode', 0x3d, 0x86}}], [{@uid_eq}], 0x2c}, 0x1, 0x9ce, &(0x7f0000001740)="$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")
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

9.800203693s ago: executing program 4 (id=1013):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf2501000000100002800c0001800818010003000000040001804a"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008800)

9.486458807s ago: executing program 4 (id=1018):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xfffffffffffffffe, 0xffff, 0x0, 0x7})

9.120742144s ago: executing program 4 (id=1019):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a18800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$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")
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)

8.670392018s ago: executing program 4 (id=1021):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x3c, r1, 0x5, 0x1, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac01, 0xfac06]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x8894}, 0x0)

8.50633882s ago: executing program 3 (id=1022):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x200, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000580)=""/8)

8.430998936s ago: executing program 3 (id=1023):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000240)={0xc7, 0x0, 0x1})

8.360811891s ago: executing program 5 (id=1024):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r0, 0x2}}, 0x18)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0)
io_uring_setup(0x6d92, &(0x7f0000000100)={0x0, 0x9255, 0x0, 0x0, 0x0, 0x0, r4})
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)

8.070278473s ago: executing program 3 (id=1025):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x9d)
io_setup(0x31, &(0x7f0000000200)=<r1=>0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x244)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

6.818205857s ago: executing program 3 (id=1028):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)

6.728625054s ago: executing program 3 (id=1029):
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x80)
write$UHID_INPUT(r0, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x0, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x4}, 0x38)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0)
fsetxattr$security_evm(r3, &(0x7f0000000280), &(0x7f0000000380)=@sha1={0x1, "9e1bb06c07606ee9c206d3bd29a8281609fa120d"}, 0x15, 0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x30, r5, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.062269544s ago: executing program 1 (id=1031):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES8=<r1=>0xffffffffffffffff, @ANYRESHEX], 0x4, 0x305, &(0x7f0000000380)="$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")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000004400)=ANY=[@ANYRES64=r0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES64=r1, @ANYRES16, @ANYBLOB='nls=ascii,gid=', @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYBLOB="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"], 0x1, 0x6ed, &(0x7f0000000dc0)="$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")
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
accept4$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x80000)
r5 = accept4$vsock_stream(r4, 0x0, 0x0, 0x69f1a63e94b9a57e)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.651533655s ago: executing program 1 (id=1032):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
fcntl$setlease(r2, 0x400, 0x0)

5.489862277s ago: executing program 1 (id=1033):
socket$alg(0x26, 0x5, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_elf64(r5, 0x0, 0xfffffd88)
readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
timerfd_create(0x1, 0x0)

4.140317048s ago: executing program 4 (id=1034):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port0\x00'})
r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071000a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x7b9, 0x0)

4.133777039s ago: executing program 5 (id=1035):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
io_setup(0x9, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
close(r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x8, 0x0, 0x0}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close(r7)
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, 0x0, 0x0)

3.923982655s ago: executing program 1 (id=1036):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020)

3.831632362s ago: executing program 0 (id=1037):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4006, &(0x7f0000000b80)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x438, &(0x7f0000001040)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
mmap(&(0x7f00003f9000/0x3000)=nil, 0x3000, 0x2, 0x50, r0, 0x1000)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400)

2.92058169s ago: executing program 3 (id=1038):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.920393481s ago: executing program 4 (id=1039):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a9000171900be008300"], 0x0}, 0x0)

2.915432111s ago: executing program 5 (id=1040):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000040000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18)
r2 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x5fa30ea8c91ad259, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)

2.888306692s ago: executing program 1 (id=1041):
r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r0, 0x0, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
syz_emit_ethernet(0x45, &(0x7f0000000000)={@multicast, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x3, 0x0, 0x0, 0x1, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x3, 0x30, 0xfff, 0x64, 0x8, 0x5, 0x1f, 0xe, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, "fba61c50199985"}}}}}, 0x0)

2.654346431s ago: executing program 5 (id=1042):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x89}}}], 0x30}}], 0x1, 0x5efe)

2.606889864s ago: executing program 1 (id=1043):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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")
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0x0, 0x0, 0x0, 0x0, 0x2401})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))

1.941701664s ago: executing program 5 (id=1044):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x0, 0x0, 0x0})

154.197459ms ago: executing program 0 (id=1045):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5400000000020104000000000000000002000000240002801400018008000100e000000108000204ac1e00010c00028005000100000000001800038014000180080001000000000008000200ac141404040001"], 0x54}}, 0x0)

0s ago: executing program 5 (id=1046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg1\x00', 0x0})
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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")
r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0x0, 0x0, 0x0, 0x0, 0x2401})
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_delroute={0x24, 0x19, 0x1, 0x800, 0x0, {0xa, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_OIF={0x8, 0x1e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.963835][ T7511] vivid-007: =================  START STATUS  =================
[  521.971591][ T7511] vivid-007: Generate PTS: true
[  521.976485][ T7511] vivid-007: Generate SCR: true
[  521.981425][ T7511] tpg source WxH: 640x360 (Y'CbCr)
[  521.986554][ T7511] tpg field: 1
[  521.989970][ T7511] tpg crop: 640x360@0x0
[  521.994142][ T7511] tpg compose: 640x360@0x0
[  521.998604][ T7511] tpg colorspace: 8
[  522.002427][ T7511] tpg transfer function: 0/0
[  522.007026][ T7511] tpg Y'CbCr encoding: 0/0
[  522.011487][ T7511] tpg quantization: 0/0
[  522.015692][ T7511] tpg RGB range: 0/2
[  522.019630][ T7511] vivid-007: ==================  END STATUS  ==================
[  522.285299][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  522.349872][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  522.407397][ T7184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  522.498789][ T7184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  522.525814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  522.565292][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  522.617477][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  522.649230][ T7518] loop4: detected capacity change from 0 to 4096
[  522.664376][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  522.698592][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  522.706911][ T7518] NILFS (loop4): invalid segment: Checksum error in segment payload
[  522.722497][ T7520] loop3: detected capacity change from 0 to 4096
[  522.735166][ T7518] NILFS (loop4): trying rollback from an earlier position
[  522.763449][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  522.848623][ T7520] NILFS (loop3): invalid segment: Checksum error in segment payload
[  522.849230][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  522.856660][ T7520] NILFS (loop3): trying rollback from an earlier position
[  522.884535][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  522.888103][ T7518] NILFS (loop4): recovery complete
[  522.894748][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  523.285268][ T7526] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  523.672159][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  523.793595][ T7520] NILFS (loop3): recovery complete
[  523.808419][ T7530] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  524.268654][   T26] audit: type=1800 audit(1739478204.813:197): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.635" name="file1" dev="loop4" ino=12 res=0 errno=0
[  524.506604][   T26] audit: type=1800 audit(1739478204.813:198): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.635" name="file1" dev="loop4" ino=12 res=0 errno=0
[  524.688272][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.638'.
[  524.733640][ T7543] loop0: detected capacity change from 0 to 4096
[  524.763070][   T26] audit: type=1800 audit(1739478204.903:199): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.636" name="file1" dev="loop3" ino=12 res=0 errno=0
[  524.784418][   T26] audit: type=1800 audit(1739478205.143:200): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.636" name="file1" dev="loop3" ino=12 res=0 errno=0
[  524.813600][ T7543] NILFS (loop0): invalid segment: Checksum error in segment payload
[  524.875011][ T7543] NILFS (loop0): trying rollback from an earlier position
[  524.931013][ T7543] NILFS (loop0): recovery complete
[  524.972910][ T7551] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  525.545626][ T7555] netlink: 80 bytes leftover after parsing attributes in process `syz.4.641'.
[  525.570164][ T7554] netlink: 80 bytes leftover after parsing attributes in process `syz.3.640'.
[  525.618545][   T26] audit: type=1800 audit(1739478206.163:201): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.639" name="file1" dev="loop0" ino=12 res=0 errno=0
[  525.850696][   T26] audit: type=1800 audit(1739478206.183:202): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.639" name="file1" dev="loop0" ino=12 res=0 errno=0
[  526.358445][ T7567] netlink: 80 bytes leftover after parsing attributes in process `syz.3.642'.
[  527.553569][ T7572] netlink: 80 bytes leftover after parsing attributes in process `syz.1.643'.
[  528.044368][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  528.080016][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  528.099690][ T7577] loop3: detected capacity change from 0 to 512
[  528.141980][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.371024][ T7588] netlink: 80 bytes leftover after parsing attributes in process `syz.1.648'.
[  531.023870][ T7593] vivid-007: =================  START STATUS  =================
[  531.031822][ T7593] vivid-007: Generate PTS: true
[  531.037796][ T7593] vivid-007: Generate SCR: true
[  531.042806][ T7593] tpg source WxH: 640x360 (Y'CbCr)
[  531.048025][ T7593] tpg field: 1
[  531.051464][ T7593] tpg crop: 640x360@0x0
[  531.055692][ T7593] tpg compose: 640x360@0x0
[  531.060233][ T7593] tpg colorspace: 8
[  531.064117][ T7593] tpg transfer function: 0/0
[  531.068810][ T7593] tpg Y'CbCr encoding: 0/0
[  531.073289][ T7593] tpg quantization: 0/0
[  531.077590][ T7593] tpg RGB range: 0/2
[  531.081583][ T7593] vivid-007: ==================  END STATUS  ==================
[  531.642108][ T7601] loop0: detected capacity change from 0 to 256
[  533.440208][ T7619] dccp_close: ABORT with 28 bytes unread
[  533.464144][ T7629] loop1: detected capacity change from 0 to 4096
[  533.495584][ T7629] NILFS (loop1): invalid segment: Checksum error in segment payload
[  533.547038][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  533.556588][ T7629] NILFS (loop1): trying rollback from an earlier position
[  533.569338][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  533.588621][ T7629] NILFS (loop1): recovery complete
[  533.648181][ T7633] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  533.695936][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  533.831860][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  534.212042][ T7642] vivid-007: =================  START STATUS  =================
[  534.221267][ T7642] vivid-007: Generate PTS: true
[  534.226293][ T7642] vivid-007: Generate SCR: true
[  534.231406][ T7642] tpg source WxH: 640x360 (Y'CbCr)
[  534.236616][ T7642] tpg field: 1
[  534.240117][ T7642] tpg crop: 640x360@0x0
[  534.244342][ T7642] tpg compose: 640x360@0x0
[  534.248908][ T7642] tpg colorspace: 8
[  534.252779][ T7642] tpg transfer function: 0/0
[  534.257528][ T7642] tpg Y'CbCr encoding: 0/0
[  534.262106][ T7642] tpg quantization: 0/0
[  534.266328][ T7642] tpg RGB range: 0/2
[  534.270331][ T7642] vivid-007: ==================  END STATUS  ==================
[  534.964552][ T7184] device veth0_vlan entered promiscuous mode
[  535.180313][   T26] audit: type=1800 audit(1739478215.723:203): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.654" name="file1" dev="loop1" ino=12 res=0 errno=0
[  535.281147][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  535.318604][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  535.552700][ T7655] netlink: 80 bytes leftover after parsing attributes in process `syz.4.657'.
[  536.257493][ T7661] loop1: detected capacity change from 0 to 4096
[  536.319706][ T7661] NILFS (loop1): invalid segment: Checksum error in segment payload
[  536.358538][ T7184] device veth1_vlan entered promiscuous mode
[  536.387861][ T7661] NILFS (loop1): trying rollback from an earlier position
[  536.430051][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  536.461297][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  536.714108][ T7661] NILFS (loop1): recovery complete
[  538.545434][ T7184] device veth0_macvtap entered promiscuous mode
[  538.708872][ T7686] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  538.768031][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  538.882369][ T7663] dccp_close: ABORT with 28 bytes unread
[  538.899432][ T7184] device veth1_macvtap entered promiscuous mode
[  538.987339][   T26] audit: type=1800 audit(1739478219.523:204): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.658" name="file1" dev="loop1" ino=12 res=0 errno=0
[  539.323576][   T26] audit: type=1800 audit(1739478219.553:205): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.658" name="file1" dev="loop1" ino=12 res=0 errno=0
[  541.087258][ T7706] loop1: detected capacity change from 0 to 4096
[  542.036207][ T7706] NILFS (loop1): invalid segment: Checksum error in segment payload
[  542.077739][ T7706] NILFS (loop1): trying rollback from an earlier position
[  542.146327][ T7706] NILFS (loop1): recovery complete
[  542.211394][ T7713] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  542.310012][   T26] audit: type=1800 audit(1739478222.853:206): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.664" name="file1" dev="loop1" ino=12 res=0 errno=0
[  542.357666][ T4307] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  542.611076][   T26] audit: type=1800 audit(1739478222.873:207): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.664" name="file1" dev="loop1" ino=12 res=0 errno=0
[  542.712949][ T4307] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  542.805161][ T4307] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  542.815449][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.823809][ T4307] usb 4-1: Product: syz
[  542.828561][ T4307] usb 4-1: Manufacturer: syz
[  542.833277][ T4307] usb 4-1: SerialNumber: syz
[  542.852041][ T4307] usb 4-1: config 0 descriptor??
[  542.869464][ T4307] powermate: probe of 4-1:0.0 failed with error -22
[  543.225545][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  543.236210][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  543.245424][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  543.253477][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  543.261508][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  543.269400][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  543.575168][ T7726] netlink: 80 bytes leftover after parsing attributes in process `syz.4.667'.
[  544.186633][ T4307] usb 4-1: USB disconnect, device number 6
[  544.636194][ T7738] loop1: detected capacity change from 0 to 4096
[  544.663927][ T7738] NILFS (loop1): invalid segment: Checksum error in segment payload
[  544.692360][ T7738] NILFS (loop1): trying rollback from an earlier position
[  544.851003][ T7738] NILFS (loop1): recovery complete
[  544.895593][ T7747] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  545.042847][   T26] audit: type=1800 audit(1739478225.583:208): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.668" name="file1" dev="loop1" ino=12 res=0 errno=0
[  545.367909][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  545.466137][   T26] audit: type=1800 audit(1739478225.613:209): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.668" name="file1" dev="loop1" ino=12 res=0 errno=0
[  545.894139][ T7758] vivid-007: =================  START STATUS  =================
[  545.902105][ T7758] vivid-007: Generate PTS: true
[  545.907123][ T7758] vivid-007: Generate SCR: true
[  545.912215][ T7758] tpg source WxH: 640x360 (Y'CbCr)
[  545.917390][ T7758] tpg field: 1
[  545.920872][ T7758] tpg crop: 640x360@0x0
[  545.925092][ T7758] tpg compose: 640x360@0x0
[  545.929611][ T7758] tpg colorspace: 8
[  545.933477][ T7758] tpg transfer function: 0/0
[  545.938183][ T7758] tpg Y'CbCr encoding: 0/0
[  545.942660][ T7758] tpg quantization: 0/0
[  545.946913][ T7758] tpg RGB range: 0/2
[  545.950915][ T7758] vivid-007: ==================  END STATUS  ==================
[  548.109487][   T48] Bluetooth: hci3: command 0x041b tx timeout
[  548.144185][ T7716] chnl_net:caif_netlink_parms(): no params data found
[  550.764996][ T4269] Bluetooth: hci3: command 0x040f tx timeout
[  551.256549][ T7790] loop0: detected capacity change from 0 to 4096
[  551.353454][ T7790] NILFS (loop0): invalid segment: Checksum error in segment payload
[  551.435340][ T7790] NILFS (loop0): trying rollback from an earlier position
[  551.554653][ T7794] loop4: detected capacity change from 0 to 4096
[  551.647023][ T7790] NILFS (loop0): recovery complete
[  551.671149][ T7794] NILFS (loop4): invalid segment: Checksum error in segment payload
[  551.671178][ T7794] NILFS (loop4): trying rollback from an earlier position
[  551.797595][ T7804] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  551.828439][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.835598][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.000213][   T26] audit: type=1800 audit(1739478232.543:210): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.675" name="file1" dev="loop0" ino=12 res=0 errno=0
[  552.058046][ T4300] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  552.066917][ T7794] NILFS (loop4): recovery complete
[  552.129711][ T7810] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  552.276025][ T7716] device bridge_slave_0 entered promiscuous mode
[  552.290157][ T4300] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  552.335097][   T26] audit: type=1800 audit(1739478232.573:211): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.675" name="file1" dev="loop0" ino=12 res=0 errno=0
[  552.591253][   T26] audit: type=1800 audit(1739478233.133:212): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="file1" dev="loop4" ino=12 res=0 errno=0
[  552.612508][ T4300] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  552.679679][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.701471][ T4300] usb 4-1: Product: syz
[  552.711651][ T4300] usb 4-1: Manufacturer: syz
[  552.720881][ T4300] usb 4-1: SerialNumber: syz
[  552.761501][ T4300] usb 4-1: config 0 descriptor??
[  552.811681][ T4269] Bluetooth: hci3: command 0x0419 tx timeout
[  552.814056][ T4300] powermate: probe of 4-1:0.0 failed with error -22
[  552.877903][   T26] audit: type=1800 audit(1739478233.173:213): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="file1" dev="loop4" ino=12 res=0 errno=0
[  553.511764][ T7824] debugfs: Directory 'ptm0' with parent 'caif_serial' already present!
[  554.319881][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.950421][ T7832] netlink: 80 bytes leftover after parsing attributes in process `syz.4.683'.
[  555.710425][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.858422][ T7716] device bridge_slave_1 entered promiscuous mode
[  556.314939][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.406673][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.595416][ T7843] netlink: 80 bytes leftover after parsing attributes in process `syz.1.686'.
[  558.589923][ T7716] team0: Port device team_slave_0 added
[  558.635654][ T7716] team0: Port device team_slave_1 added
[  558.735946][ T7860] netlink: 80 bytes leftover after parsing attributes in process `syz.4.687'.
[  559.169020][ T7856] loop1: detected capacity change from 0 to 4096
[  559.504550][ T7856] NILFS (loop1): invalid segment: Checksum error in segment payload
[  559.526215][ T7856] NILFS (loop1): trying rollback from an earlier position
[  560.086046][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  560.175644][ T7856] NILFS (loop1): recovery complete
[  560.276597][ T7868] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  560.302193][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  560.616067][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  561.732004][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  561.819981][   T26] audit: type=1800 audit(1739478242.363:214): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name="file1" dev="loop1" ino=12 res=0 errno=0
[  561.927718][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.092372][ T4336] usb 4-1: USB disconnect, device number 7
[  562.106977][   T26] audit: type=1800 audit(1739478242.583:215): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name="file1" dev="loop1" ino=12 res=0 errno=0
[  562.117248][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  563.564257][ T7891] loop1: detected capacity change from 0 to 4096
[  563.600213][ T7891] NILFS (loop1): invalid segment: Checksum error in segment payload
[  563.621628][ T7891] NILFS (loop1): trying rollback from an earlier position
[  563.662415][ T7716] device hsr_slave_0 entered promiscuous mode
[  563.714239][ T7716] device hsr_slave_1 entered promiscuous mode
[  564.468159][ T7891] NILFS (loop1): recovery complete
[  564.485063][ T7716] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  564.505610][ T7716] Cannot create hsr debugfs directory
[  564.516713][ T7900] loop0: detected capacity change from 0 to 4096
[  564.522481][ T7906] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  564.558107][ T7900] NILFS (loop0): invalid segment: Checksum error in segment payload
[  564.609085][ T7900] NILFS (loop0): trying rollback from an earlier position
[  565.695092][ T7900] NILFS (loop0): recovery complete
[  565.736131][   T26] audit: type=1800 audit(1739478246.273:216): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.693" name="file1" dev="loop1" ino=12 res=0 errno=0
[  565.756530][    C1] vkms_vblank_simulate: vblank timer overrun
[  565.911310][ T7911] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  566.061030][   T26] audit: type=1800 audit(1739478246.313:217): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.693" name="file1" dev="loop1" ino=12 res=0 errno=0
[  566.169653][   T26] audit: type=1800 audit(1739478246.643:218): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.704" name="file1" dev="loop0" ino=12 res=0 errno=0
[  566.191615][   T26] audit: type=1800 audit(1739478246.643:219): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.704" name="file1" dev="loop0" ino=12 res=0 errno=0
[  566.237664][ T5155] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  566.739555][ T5155] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  566.760113][ T5155] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  566.781196][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.791650][ T5155] usb 4-1: Product: syz
[  566.795951][ T5155] usb 4-1: Manufacturer: syz
[  566.845542][ T5155] usb 4-1: SerialNumber: syz
[  568.046861][ T5155] usb 4-1: config 0 descriptor??
[  568.147774][ T5155] usb 4-1: can't set config #0, error -71
[  568.179067][ T5155] usb 4-1: USB disconnect, device number 8
[  569.498599][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  569.507128][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  569.717973][ T7091] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  569.990292][ T7091] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  570.125129][ T7930] loop4: detected capacity change from 0 to 4096
[  570.143798][ T7930] NILFS (loop4): invalid segment: Checksum error in segment payload
[  570.152429][ T7930] NILFS (loop4): trying rollback from an earlier position
[  570.190896][ T7091] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  570.205906][ T7091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.214030][ T7091] usb 1-1: Product: syz
[  570.220662][ T7091] usb 1-1: Manufacturer: syz
[  570.224931][ T7932] loop3: detected capacity change from 0 to 4096
[  570.225284][ T7091] usb 1-1: SerialNumber: syz
[  570.247423][ T7091] usb 1-1: config 0 descriptor??
[  570.258010][ T7091] powermate: probe of 1-1:0.0 failed with error -22
[  570.284885][ T7930] NILFS (loop4): recovery complete
[  570.307434][ T7932] NILFS (loop3): invalid segment: Checksum error in segment payload
[  570.336645][ T7941] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  570.355132][   T46] device hsr_slave_0 left promiscuous mode
[  570.358000][ T7932] NILFS (loop3): trying rollback from an earlier position
[  570.370113][   T46] device hsr_slave_1 left promiscuous mode
[  570.420311][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  570.435284][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  570.503883][ T7932] NILFS (loop3): recovery complete
[  570.512539][   T26] audit: type=1800 audit(1739478251.053:220): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.700" name="file1" dev="loop4" ino=12 res=0 errno=0
[  570.520187][ T7943] loop1: detected capacity change from 0 to 4096
[  570.561573][ T7945] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  570.589081][   T46] device bridge_slave_1 left promiscuous mode
[  570.685461][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.869208][   T26] audit: type=1800 audit(1739478251.093:221): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.700" name="file1" dev="loop4" ino=12 res=0 errno=0
[  570.895902][ T7943] NILFS (loop1): invalid segment: Checksum error in segment payload
[  571.007869][ T7943] NILFS (loop1): trying rollback from an earlier position
[  571.063038][   T46] device bridge_slave_0 left promiscuous mode
[  571.133031][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.142168][ T7943] NILFS (loop1): recovery complete
[  571.171479][   T26] audit: type=1800 audit(1739478251.513:222): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.699" name="file1" dev="loop3" ino=12 res=0 errno=0
[  571.207715][ T7948] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  571.435636][ T7951] SET target dimension over the limit!
[  572.094357][   T46] device veth1_macvtap left promiscuous mode
[  572.148200][ T4303] usb 1-1: USB disconnect, device number 10
[  572.166921][   T26] audit: type=1800 audit(1739478252.663:223): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.702" name="file1" dev="loop1" ino=12 res=0 errno=0
[  572.187321][    C1] vkms_vblank_simulate: vblank timer overrun
[  573.190896][   T26] audit: type=1800 audit(1739478253.733:224): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.702" name="file1" dev="loop1" ino=12 res=0 errno=0
[  573.269020][   T46] device veth0_macvtap left promiscuous mode
[  573.290925][   T46] device veth1_vlan left promiscuous mode
[  573.312877][   T46] device veth0_vlan left promiscuous mode
[  576.848868][ T4303] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  576.965505][   T46] team0 (unregistering): Port device team_slave_1 removed
[  577.007449][   T46] team0 (unregistering): Port device team_slave_0 removed
[  577.039596][ T4303] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  577.053574][ T4303] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  577.062752][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.072842][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.075344][ T4303] usb 4-1: Product: syz
[  577.093351][ T4303] usb 4-1: Manufacturer: syz
[  577.098128][ T4303] usb 4-1: SerialNumber: syz
[  577.105332][ T4303] usb 4-1: config 0 descriptor??
[  577.124370][ T4303] powermate: probe of 4-1:0.0 failed with error -22
[  577.133639][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.549376][   T46] bond0 (unregistering): Released all slaves
[  579.066784][   T14] usb 4-1: USB disconnect, device number 9
[  580.518479][ T5155] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  580.726273][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  580.751683][ T5155] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  580.774309][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.801062][ T5155] usb 1-1: Product: syz
[  580.822492][ T8002] loop3: detected capacity change from 0 to 4096
[  580.846226][ T5155] usb 1-1: Manufacturer: syz
[  580.865385][ T5155] usb 1-1: SerialNumber: syz
[  580.894669][ T5155] usb 1-1: config 0 descriptor??
[  580.899016][ T8002] NILFS (loop3): invalid segment: Checksum error in segment payload
[  580.970165][ T8002] NILFS (loop3): trying rollback from an earlier position
[  581.020635][ T8002] NILFS (loop3): recovery complete
[  581.067063][ T8009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  581.192457][   T26] audit: type=1800 audit(1739478261.733:225): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.713" name="file1" dev="loop3" ino=12 res=0 errno=0
[  581.504218][   T26] audit: type=1800 audit(1739478261.763:226): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.713" name="file1" dev="loop3" ino=12 res=0 errno=0
[  581.699868][ T7716] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  581.770365][ T7716] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  581.834516][ T7716] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  581.890593][ T7716] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  582.577928][ T7091] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  582.792729][ T7091] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  582.910701][ T7091] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  583.037404][ T7091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.077715][ T7091] usb 4-1: Product: syz
[  583.092534][ T7091] usb 4-1: Manufacturer: syz
[  583.104160][ T7091] usb 4-1: SerialNumber: syz
[  583.117437][ T8022] SET target dimension over the limit!
[  583.123629][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.165914][ T7091] usb 4-1: config 0 descriptor??
[  583.212345][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  583.255321][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  583.290612][ T7091] powermate: probe of 4-1:0.0 failed with error -22
[  583.351136][ T7716] 8021q: adding VLAN 0 to HW filter on device team0
[  583.459126][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  583.523515][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  583.621615][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.629100][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.781425][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  583.817108][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  583.865612][ T8026] SET target dimension over the limit!
[  583.868480][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  583.935702][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.943125][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.011696][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  584.121991][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  584.169810][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  584.314552][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  584.429702][ T7716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  584.468453][ T7716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  584.598804][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  585.275723][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  585.433338][ T4336] usb 4-1: USB disconnect, device number 10
[  585.467474][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  585.531630][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  585.555702][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  585.572161][ T5155] usb 1-1: can't set config #0, error -71
[  585.601890][ T5155] usb 1-1: USB disconnect, device number 11
[  585.616848][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  585.642584][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  585.698876][ T8037] loop3: detected capacity change from 0 to 4096
[  585.733055][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  585.756347][ T8037] NILFS (loop3): invalid segment: Checksum error in segment payload
[  585.974242][ T8045] netlink: 80 bytes leftover after parsing attributes in process `syz.0.720'.
[  586.028308][ T8037] NILFS (loop3): trying rollback from an earlier position
[  586.559439][ T8037] NILFS (loop3): recovery complete
[  586.743856][ T8055] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  588.337906][ T8064] fuse: Bad value for 'fd'
[  589.332972][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  589.343501][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  589.380768][ T8059] loop0: detected capacity change from 0 to 4096
[  590.629460][ T8059] NILFS (loop0): invalid segment: Checksum error in segment payload
[  590.777949][ T8059] NILFS (loop0): trying rollback from an earlier position
[  590.871325][ T8082] vivid-007: =================  START STATUS  =================
[  590.879107][ T8082] vivid-007: Generate PTS: true
[  590.884148][ T8082] vivid-007: Generate SCR: true
[  590.889263][ T8082] tpg source WxH: 640x360 (Y'CbCr)
[  590.894439][ T8082] tpg field: 1
[  590.897935][ T8082] tpg crop: 640x360@0x0
[  590.902153][ T8082] tpg compose: 640x360@0x0
[  590.906634][ T8082] tpg colorspace: 8
[  590.910669][ T8082] tpg transfer function: 0/0
[  590.915320][ T8082] tpg Y'CbCr encoding: 0/0
[  590.919852][ T8082] tpg quantization: 0/0
[  590.924090][ T8082] tpg RGB range: 0/2
[  590.928085][ T8082] vivid-007: ==================  END STATUS  ==================
[  591.396530][ T8059] NILFS (loop0): recovery complete
[  591.408433][ T8059] NILFS (loop0): error -4 creating segctord thread
[  591.536410][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.612452][ T8088] loop1: detected capacity change from 0 to 4096
[  591.671651][ T8091] loop3: detected capacity change from 0 to 4096
[  591.727942][ T8088] NILFS (loop1): invalid segment: Checksum error in segment payload
[  591.744633][ T8091] NILFS (loop3): invalid segment: Checksum error in segment payload
[  591.757868][ T8088] NILFS (loop1): trying rollback from an earlier position
[  591.776744][ T8091] NILFS (loop3): trying rollback from an earlier position
[  591.807819][ T8097] SET target dimension over the limit!
[  591.881620][ T8088] NILFS (loop1): recovery complete
[  591.922434][ T8099] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  591.967128][ T8091] NILFS (loop3): recovery complete
[  592.027727][ T8101] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  592.094566][ T8103] SET target dimension over the limit!
[  592.391405][   T26] audit: type=1800 audit(1739478272.933:227): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.727" name="file1" dev="loop1" ino=12 res=0 errno=0
[  592.892252][   T26] audit: type=1800 audit(1739478272.953:228): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.727" name="file1" dev="loop1" ino=12 res=0 errno=0
[  592.925146][   T26] audit: type=1800 audit(1739478273.463:229): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.726" name="file1" dev="loop3" ino=12 res=0 errno=0
[  593.438932][   T26] audit: type=1800 audit(1739478273.463:230): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.726" name="file1" dev="loop3" ino=12 res=0 errno=0
[  595.193069][ T8126] loop4: detected capacity change from 0 to 4096
[  596.757860][ T8140] fuse: Bad value for 'fd'
[  597.395660][ T8134] vivid-007: =================  START STATUS  =================
[  597.403566][ T8134] vivid-007: Generate PTS: true
[  597.409197][ T8134] vivid-007: Generate SCR: true
[  597.414415][ T8134] tpg source WxH: 640x360 (Y'CbCr)
[  597.419788][ T8134] tpg field: 1
[  597.423379][ T8134] tpg crop: 640x360@0x0
[  597.427841][ T8134] tpg compose: 640x360@0x0
[  597.432476][ T8134] tpg colorspace: 8
[  597.436496][ T8134] tpg transfer function: 0/0
[  597.441352][ T8134] tpg Y'CbCr encoding: 0/0
[  597.446014][ T8134] tpg quantization: 0/0
[  597.450432][ T8134] tpg RGB range: 0/2
[  597.454558][ T8134] vivid-007: ==================  END STATUS  ==================
[  597.534790][ T8126] NILFS (loop4): invalid segment: Checksum error in segment payload
[  597.588364][ T8126] NILFS (loop4): trying rollback from an earlier position
[  597.854860][ T8126] NILFS (loop4): recovery complete
[  597.935678][ T8156] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  600.020552][ T8161] vivid-007: =================  START STATUS  =================
[  600.028303][ T8161] vivid-007: Generate PTS: true
[  600.033213][ T8161] vivid-007: Generate SCR: true
[  600.038178][ T8161] tpg source WxH: 640x360 (Y'CbCr)
[  600.043313][ T8161] tpg field: 1
[  600.046706][ T8161] tpg crop: 640x360@0x0
[  600.050927][ T8161] tpg compose: 640x360@0x0
[  600.055371][ T8161] tpg colorspace: 8
[  600.059234][ T8161] tpg transfer function: 0/0
[  600.063847][ T8161] tpg Y'CbCr encoding: 0/0
[  600.068330][ T8161] tpg quantization: 0/0
[  600.072550][ T8161] tpg RGB range: 0/2
[  600.076553][ T8161] vivid-007: ==================  END STATUS  ==================
[  601.196455][ T8180] netlink: 80 bytes leftover after parsing attributes in process `syz.3.739'.
[  601.689466][ T8182] vivid-007: =================  START STATUS  =================
[  601.697489][ T8182] vivid-007: Generate PTS: true
[  601.702494][ T8182] vivid-007: Generate SCR: true
[  601.707406][ T8182] tpg source WxH: 640x360 (Y'CbCr)
[  601.712677][ T8182] tpg field: 1
[  601.716240][ T8182] tpg crop: 640x360@0x0
[  601.720595][ T8182] tpg compose: 640x360@0x0
[  601.773602][ T8182] tpg colorspace: 8
[  601.777669][ T8182] tpg transfer function: 0/0
[  601.782429][ T8182] tpg Y'CbCr encoding: 0/0
[  601.786911][ T8182] tpg quantization: 0/0
[  601.791284][ T8182] tpg RGB range: 0/2
[  601.795840][ T8182] vivid-007: ==================  END STATUS  ==================
[  602.503256][ T8185] SET target dimension over the limit!
[  602.786180][ T8191] netlink: 80 bytes leftover after parsing attributes in process `syz.1.741'.
[  605.567698][ T8203] vivid-007: =================  START STATUS  =================
[  605.575392][ T8203] vivid-007: Generate PTS: true
[  605.580359][ T8203] vivid-007: Generate SCR: true
[  605.585250][ T8203] tpg source WxH: 640x360 (Y'CbCr)
[  605.590460][ T8203] tpg field: 1
[  605.593847][ T8203] tpg crop: 640x360@0x0
[  605.598052][ T8203] tpg compose: 640x360@0x0
[  605.602484][ T8203] tpg colorspace: 8
[  605.606303][ T8203] tpg transfer function: 0/0
[  605.610952][ T8203] tpg Y'CbCr encoding: 0/0
[  605.615492][ T8203] tpg quantization: 0/0
[  605.619695][ T8203] tpg RGB range: 0/2
[  605.623603][ T8203] vivid-007: ==================  END STATUS  ==================
[  607.291930][ T8216] fuse: Bad value for 'fd'
[  608.074053][ T8213] vivid-007: =================  START STATUS  =================
[  608.081792][ T8213] vivid-007: Generate PTS: true
[  608.086777][ T8213] vivid-007: Generate SCR: true
[  608.091694][ T8213] tpg source WxH: 640x360 (Y'CbCr)
[  608.096846][ T8213] tpg field: 1
[  608.100258][ T8213] tpg crop: 640x360@0x0
[  608.104437][ T8213] tpg compose: 640x360@0x0
[  608.108902][ T8213] tpg colorspace: 8
[  608.112724][ T8213] tpg transfer function: 0/0
[  608.117329][ T8213] tpg Y'CbCr encoding: 0/0
[  608.121785][ T8213] tpg quantization: 0/0
[  608.125988][ T8213] tpg RGB range: 0/2
[  608.129926][ T8213] vivid-007: ==================  END STATUS  ==================
[  610.966731][ T8234] vivid-007: =================  START STATUS  =================
[  610.974565][ T8234] vivid-007: Generate PTS: true
[  610.979664][ T8234] vivid-007: Generate SCR: true
[  610.984705][ T8234] tpg source WxH: 640x360 (Y'CbCr)
[  610.989914][ T8234] tpg field: 1
[  610.993327][ T8234] tpg crop: 640x360@0x0
[  610.997602][ T8234] tpg compose: 640x360@0x0
[  611.002091][ T8234] tpg colorspace: 8
[  611.005959][ T8234] tpg transfer function: 0/0
[  611.010840][ T8234] tpg Y'CbCr encoding: 0/0
[  611.015412][ T8234] tpg quantization: 0/0
[  611.019897][ T8234] tpg RGB range: 0/2
[  611.023859][ T8234] vivid-007: ==================  END STATUS  ==================
[  612.593469][ T8248] netlink: 80 bytes leftover after parsing attributes in process `syz.4.751'.
[  612.871693][ T8251] vivid-007: =================  START STATUS  =================
[  612.879482][ T8251] vivid-007: Generate PTS: true
[  612.884589][ T8251] vivid-007: Generate SCR: true
[  612.889692][ T8251] tpg source WxH: 640x360 (Y'CbCr)
[  612.894875][ T8251] tpg field: 1
[  612.898360][ T8251] tpg crop: 640x360@0x0
[  612.902615][ T8251] tpg compose: 640x360@0x0
[  612.907102][ T8251] tpg colorspace: 8
[  612.911015][ T8251] tpg transfer function: 0/0
[  612.915668][ T8251] tpg Y'CbCr encoding: 0/0
[  612.920202][ T8251] tpg quantization: 0/0
[  612.924447][ T8251] tpg RGB range: 0/2
[  612.928446][ T8251] vivid-007: ==================  END STATUS  ==================
[  612.959289][ T4336] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  613.439380][ T4336] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  613.493053][ T4336] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  613.607960][ T4336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.616138][ T4336] usb 4-1: Product: syz
[  613.650949][ T4336] usb 4-1: Manufacturer: syz
[  613.655742][ T4336] usb 4-1: SerialNumber: syz
[  613.706589][ T4336] usb 4-1: config 0 descriptor??
[  613.730237][ T4336] powermate: probe of 4-1:0.0 failed with error -22
[  613.803331][ T8254] loop0: detected capacity change from 0 to 4096
[  613.848285][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  613.858114][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  613.866807][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  613.884477][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  613.885919][ T8254] NILFS (loop0): invalid segment: Checksum error in segment payload
[  613.905386][ T4255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  614.341773][ T4255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  614.759909][ T8254] NILFS (loop0): trying rollback from an earlier position
[  614.853752][ T8254] NILFS (loop0): recovery complete
[  614.929608][ T8270] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  615.018950][   T26] audit: type=1800 audit(1739478295.563:231): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.752" name="file1" dev="loop0" ino=12 res=0 errno=0
[  615.134596][   T26] audit: type=1800 audit(1739478295.583:232): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.752" name="file1" dev="loop0" ino=12 res=0 errno=0
[  617.038160][ T4255] Bluetooth: hci3: command 0x0409 tx timeout
[  617.048072][ T4300] usb 4-1: USB disconnect, device number 11
[  617.106233][ T8281] SET target dimension over the limit!
[  619.136302][ T4255] Bluetooth: hci3: command 0x041b tx timeout
[  619.226155][ T8301] fuse: Bad value for 'fd'
[  619.996790][ T8294] loop1: detected capacity change from 0 to 4096
[  620.043463][ T8302] vivid-007: =================  START STATUS  =================
[  620.067695][ T8302] vivid-007: Generate PTS: true
[  620.093103][ T8302] vivid-007: Generate SCR: true
[  620.123504][ T8294] NILFS (loop1): invalid segment: Checksum error in segment payload
[  620.160609][ T8302] tpg source WxH: 640x360 (Y'CbCr)
[  620.165793][ T8302] tpg field: 1
[  620.172181][ T8302] tpg crop: 640x360@0x0
[  620.176569][ T8302] tpg compose: 640x360@0x0
[  620.183481][ T8302] tpg colorspace: 8
[  620.187339][ T8302] tpg transfer function: 0/0
[  620.190097][ T8294] NILFS (loop1): trying rollback from an earlier position
[  620.217618][ T8302] tpg Y'CbCr encoding: 0/0
[  620.222095][ T8302] tpg quantization: 0/0
[  620.226287][ T8302] tpg RGB range: 0/2
[  620.248868][ T8294] NILFS (loop1): recovery complete
[  620.285280][ T8315] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  620.316722][ T8260] chnl_net:caif_netlink_parms(): no params data found
[  620.330015][ T8302] vivid-007: ==================  END STATUS  ==================
[  621.020680][   T26] audit: type=1800 audit(1739478301.553:233): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.761" name="file1" dev="loop1" ino=12 res=0 errno=0
[  621.395401][ T4255] Bluetooth: hci3: command 0x040f tx timeout
[  621.742974][   T26] audit: type=1800 audit(1739478302.023:234): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.761" name="file1" dev="loop1" ino=12 res=0 errno=0
[  622.117153][ T8328] netlink: 80 bytes leftover after parsing attributes in process `syz.4.764'.
[  623.459537][ T4255] Bluetooth: hci3: command 0x0419 tx timeout
[  623.949742][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.973950][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.995877][ T8260] device bridge_slave_0 entered promiscuous mode
[  624.026422][ T8347] loop4: detected capacity change from 0 to 4096
[  624.041950][ T8347] NILFS (loop4): invalid segment: Checksum error in segment payload
[  624.059461][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.074000][ T8347] NILFS (loop4): trying rollback from an earlier position
[  624.081817][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.109026][ T8260] device bridge_slave_1 entered promiscuous mode
[  624.153395][ T8347] NILFS (loop4): recovery complete
[  624.391229][ T8354] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  625.774471][ T8364] vivid-007: =================  START STATUS  =================
[  625.782264][ T8364] vivid-007: Generate PTS: true
[  625.787280][ T8364] vivid-007: Generate SCR: true
[  625.792319][ T8364] tpg source WxH: 640x360 (Y'CbCr)
[  625.797554][ T8364] tpg field: 1
[  625.800988][ T8364] tpg crop: 640x360@0x0
[  625.805205][ T8364] tpg compose: 640x360@0x0
[  625.809722][ T8364] tpg colorspace: 8
[  625.813596][ T8364] tpg transfer function: 0/0
[  625.818286][ T8364] tpg Y'CbCr encoding: 0/0
[  625.822767][ T8364] tpg quantization: 0/0
[  625.827015][ T8364] tpg RGB range: 0/2
[  625.831006][ T8364] vivid-007: ==================  END STATUS  ==================
[  626.552686][   T26] audit: type=1800 audit(1739478307.093:235): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.767" name="file1" dev="loop4" ino=12 res=0 errno=0
[  626.781734][   T26] audit: type=1800 audit(1739478307.113:236): pid=8347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.767" name="file1" dev="loop4" ino=12 res=0 errno=0
[  627.038760][ T8370] SET target dimension over the limit!
[  628.421885][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.949561][ T8382] fuse: Bad value for 'fd'
[  634.097910][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  634.104563][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  634.252801][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.636447][ T8260] team0: Port device team_slave_0 added
[  634.677109][ T8260] team0: Port device team_slave_1 added
[  634.717981][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.773'.
[  634.930230][ T8398] loop1: detected capacity change from 0 to 4096
[  635.647015][ T8398] NILFS (loop1): invalid segment: Checksum error in segment payload
[  635.657845][ T8398] NILFS (loop1): trying rollback from an earlier position
[  635.699251][ T8398] NILFS (loop1): recovery complete
[  635.720088][ T8406] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  635.875615][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  635.933398][   T26] audit: type=1800 audit(1739478316.473:237): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.776" name="file1" dev="loop1" ino=12 res=0 errno=0
[  635.973364][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  636.192957][   T26] audit: type=1800 audit(1739478316.503:238): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.776" name="file1" dev="loop1" ino=12 res=0 errno=0
[  636.319925][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.366109][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  636.373673][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  636.399778][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.516505][ T8260] device hsr_slave_0 entered promiscuous mode
[  636.530010][ T8260] device hsr_slave_1 entered promiscuous mode
[  636.536883][ T8260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  636.552128][ T8260] Cannot create hsr debugfs directory
[  636.615271][ T8410] loop3: detected capacity change from 0 to 4096
[  636.677245][ T8411] loop4: detected capacity change from 0 to 4096
[  636.704635][ T8410] NILFS (loop3): invalid segment: Checksum error in segment payload
[  636.727971][ T8410] NILFS (loop3): trying rollback from an earlier position
[  636.757024][ T8411] NILFS (loop4): invalid segment: Checksum error in segment payload
[  636.780440][ T5207] device hsr_slave_0 left promiscuous mode
[  636.786637][ T8411] NILFS (loop4): trying rollback from an earlier position
[  636.799069][ T5207] device hsr_slave_1 left promiscuous mode
[  636.817976][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.838121][ T8410] NILFS (loop3): recovery complete
[  636.845464][ T8411] NILFS (loop4): recovery complete
[  636.852699][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.859760][ T8420] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  636.871159][ T8421] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  636.925461][ T5207] device bridge_slave_1 left promiscuous mode
[  636.964937][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.319512][   T26] audit: type=1800 audit(1739478317.863:239): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.777" name="file1" dev="loop4" ino=12 res=0 errno=0
[  637.346475][   T26] audit: type=1800 audit(1739478317.873:240): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.777" name="file1" dev="loop4" ino=12 res=0 errno=0
[  637.395097][ T8417] loop1: detected capacity change from 0 to 4096
[  637.416150][   T26] audit: type=1800 audit(1739478317.953:241): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.778" name="file1" dev="loop3" ino=12 res=0 errno=0
[  637.508987][ T8417] NILFS (loop1): invalid segment: Checksum error in segment payload
[  637.519479][ T8417] NILFS (loop1): trying rollback from an earlier position
[  637.571550][ T5207] device bridge_slave_0 left promiscuous mode
[  637.636573][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.650765][ T8417] NILFS (loop1): recovery complete
[  637.683394][ T8429] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  638.185268][   T26] audit: type=1800 audit(1739478318.723:242): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.779" name="file1" dev="loop1" ino=12 res=0 errno=0
[  638.207837][   T26] audit: type=1800 audit(1739478318.753:243): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.779" name="file1" dev="loop1" ino=12 res=0 errno=0
[  639.142194][ T8447] vivid-007: =================  START STATUS  =================
[  639.150001][ T8447] vivid-007: Generate PTS: true
[  639.155024][ T8447] vivid-007: Generate SCR: true
[  639.160088][ T8447] tpg source WxH: 640x360 (Y'CbCr)
[  639.165272][ T8447] tpg field: 1
[  639.168753][ T8447] tpg crop: 640x360@0x0
[  639.173007][ T8447] tpg compose: 640x360@0x0
[  639.177631][ T8447] tpg colorspace: 8
[  639.181477][ T8447] tpg transfer function: 0/0
[  639.186142][ T8447] tpg Y'CbCr encoding: 0/0
[  639.190669][ T8447] tpg quantization: 0/0
[  639.194920][ T8447] tpg RGB range: 0/2
[  639.198919][ T8447] vivid-007: ==================  END STATUS  ==================
[  639.936592][ T8456] SET target dimension over the limit!
[  639.968986][ T8456] loop1: detected capacity change from 0 to 256
[  640.539774][ T5207] team0 (unregistering): Port device team_slave_1 removed
[  640.655093][ T5207] team0 (unregistering): Port device team_slave_0 removed
[  640.825584][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  640.921912][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  642.436413][ T8470] fuse: Bad value for 'fd'
[  643.223731][ T5207] bond0 (unregistering): Released all slaves
[  643.259815][ T8473] loop0: detected capacity change from 0 to 4096
[  643.276067][ T8473] NILFS (loop0): invalid segment: Checksum error in segment payload
[  643.284674][ T8473] NILFS (loop0): trying rollback from an earlier position
[  643.305512][ T8473] NILFS (loop0): recovery complete
[  643.324786][ T8474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  645.619116][ T8498] vivid-007: =================  START STATUS  =================
[  645.627205][ T8498] vivid-007: Generate PTS: true
[  645.632284][ T8498] vivid-007: Generate SCR: true
[  645.637264][ T8498] tpg source WxH: 640x360 (Y'CbCr)
[  645.642548][ T8498] tpg field: 1
[  645.645992][ T8498] tpg crop: 640x360@0x0
[  645.650267][ T8498] tpg compose: 640x360@0x0
[  645.654783][ T8498] tpg colorspace: 8
[  645.658726][ T8498] tpg transfer function: 0/0
[  645.663419][ T8498] tpg Y'CbCr encoding: 0/0
[  645.667973][ T8498] tpg quantization: 0/0
[  645.672248][ T8498] tpg RGB range: 0/2
[  645.676279][ T8498] vivid-007: ==================  END STATUS  ==================
[  645.708610][ T8499] vivid-007: =================  START STATUS  =================
[  645.716537][ T8499] vivid-007: Generate PTS: true
[  645.721716][ T8499] vivid-007: Generate SCR: true
[  645.727639][ T8499] tpg source WxH: 640x360 (Y'CbCr)
[  645.732975][ T8499] tpg field: 1
[  645.736508][ T8499] tpg crop: 640x360@0x0
[  645.740874][ T8499] tpg compose: 640x360@0x0
[  645.745464][ T8499] tpg colorspace: 8
[  645.749476][ T8499] tpg transfer function: 0/0
[  645.754240][ T8499] tpg Y'CbCr encoding: 0/0
[  645.758873][ T8499] tpg quantization: 0/0
[  645.763207][ T8499] tpg RGB range: 0/2
[  645.767231][ T8499] vivid-007: ==================  END STATUS  ==================
[  646.128336][   T26] audit: type=1800 audit(1739478326.673:244): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.785" name="file1" dev="loop0" ino=12 res=0 errno=0
[  646.150510][   T26] audit: type=1800 audit(1739478326.693:245): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.785" name="file1" dev="loop0" ino=12 res=0 errno=0
[  646.207151][ T8501] SET target dimension over the limit!
[  647.153844][ T8505] loop1: detected capacity change from 0 to 4096
[  647.185366][ T8507] loop4: detected capacity change from 0 to 256
[  647.241279][ T8505] NILFS (loop1): invalid segment: Checksum error in segment payload
[  647.266087][ T8505] NILFS (loop1): trying rollback from an earlier position
[  647.384750][ T8505] NILFS (loop1): recovery complete
[  647.442610][ T8512] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  647.580382][   T26] audit: type=1800 audit(1739478328.123:246): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.790" name="file1" dev="loop1" ino=12 res=0 errno=0
[  647.800410][   T26] audit: type=1800 audit(1739478328.143:247): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.790" name="file1" dev="loop1" ino=12 res=0 errno=0
[  648.184860][ T8260] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  648.287059][ T8260] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  648.308657][ T8260] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  648.361972][ T8260] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  648.995549][ T8530] fuse: Bad value for 'fd'
[  649.765595][ T8541] SET target dimension over the limit!
[  649.812969][ T8541] loop0: detected capacity change from 0 to 256
[  650.718911][ T8546] vivid-007: =================  START STATUS  =================
[  650.726647][ T8546] vivid-007: Generate PTS: true
[  650.731865][ T8546] vivid-007: Generate SCR: true
[  650.736837][ T8546] tpg source WxH: 640x360 (Y'CbCr)
[  650.743143][ T8546] tpg field: 1
[  650.746591][ T8546] tpg crop: 640x360@0x0
[  650.751054][ T8546] tpg compose: 640x360@0x0
[  650.755594][ T8546] tpg colorspace: 8
[  650.759616][ T8546] tpg transfer function: 0/0
[  650.764300][ T8546] tpg Y'CbCr encoding: 0/0
[  650.768925][ T8546] tpg quantization: 0/0
[  650.773181][ T8546] tpg RGB range: 0/2
[  650.777154][ T8546] vivid-007: ==================  END STATUS  ==================
[  650.843034][ T8553] vivid-007: =================  START STATUS  =================
[  650.851954][ T8553] vivid-007: Generate PTS: true
[  650.856937][ T8553] vivid-007: Generate SCR: true
[  650.862075][ T8553] tpg source WxH: 640x360 (Y'CbCr)
[  650.867281][ T8553] tpg field: 1
[  650.870910][ T8553] tpg crop: 640x360@0x0
[  650.875148][ T8553] tpg compose: 640x360@0x0
[  650.879802][ T8553] tpg colorspace: 8
[  650.883700][ T8553] tpg transfer function: 0/0
[  650.889610][ T8553] tpg Y'CbCr encoding: 0/0
[  650.894222][ T8553] tpg quantization: 0/0
[  650.898606][ T8553] tpg RGB range: 0/2
[  650.902573][ T8553] vivid-007: ==================  END STATUS  ==================
[  651.558027][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.768025][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  652.215415][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  652.264531][ T8260] 8021q: adding VLAN 0 to HW filter on device team0
[  652.300885][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  652.313150][ T8569] vivid-007: =================  START STATUS  =================
[  652.321053][ T8569] vivid-007: Generate PTS: true
[  652.325960][ T8569] vivid-007: Generate SCR: true
[  652.330975][ T8569] tpg source WxH: 640x360 (Y'CbCr)
[  652.336121][ T8569] tpg field: 1
[  652.339587][ T8569] tpg crop: 640x360@0x0
[  652.343767][ T8569] tpg compose: 640x360@0x0
[  652.344402][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  652.348246][ T8569] tpg colorspace: 8
[  652.348282][ T8569] tpg transfer function: 0/0
[  652.348294][ T8569] tpg Y'CbCr encoding: 0/0
[  652.348305][ T8569] tpg quantization: 0/0
[  652.348315][ T8569] tpg RGB range: 0/2
[  652.348327][ T8569] vivid-007: ==================  END STATUS  ==================
[  652.358572][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.392351][ T7366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.514904][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  652.591416][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  652.626711][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  652.653190][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.660390][ T7366] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.668295][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  652.679931][ T8575] SET target dimension over the limit!
[  652.700645][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  652.824674][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  652.922902][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  652.989105][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  653.012782][ T8579] loop3: detected capacity change from 0 to 256
[  653.032841][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  653.121095][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  653.213857][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  653.221426][ T8574] loop0: detected capacity change from 0 to 4096
[  653.292719][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  653.314141][ T8574] NILFS (loop0): invalid segment: Checksum error in segment payload
[  653.374259][ T8574] NILFS (loop0): trying rollback from an earlier position
[  653.375331][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  653.451261][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  653.452137][ T8574] NILFS (loop0): recovery complete
[  653.472039][ T8260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  653.489462][ T8581] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  653.565191][   T26] audit: type=1800 audit(1739478334.103:248): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.801" name="file1" dev="loop0" ino=12 res=0 errno=0
[  653.618538][ T8583] loop3: detected capacity change from 0 to 4096
[  654.701889][   T26] audit: type=1800 audit(1739478334.133:249): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.801" name="file1" dev="loop0" ino=12 res=0 errno=0
[  654.723639][ T8583] NILFS (loop3): invalid segment: Checksum error in segment payload
[  654.748054][ T8583] NILFS (loop3): trying rollback from an earlier position
[  654.833621][ T8583] NILFS (loop3): recovery complete
[  654.874018][ T8591] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  655.016798][   T26] audit: type=1800 audit(1739478335.553:250): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.805" name="file1" dev="loop3" ino=12 res=0 errno=0
[  655.314913][   T26] audit: type=1800 audit(1739478335.583:251): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.805" name="file1" dev="loop3" ino=12 res=0 errno=0
[  656.369482][ T8597] fuse: Bad value for 'fd'
[  656.638455][ T8590] loop1: detected capacity change from 0 to 4096
[  656.792375][ T8590] NILFS (loop1): invalid segment: Checksum error in segment payload
[  656.837641][ T8590] NILFS (loop1): trying rollback from an earlier position
[  656.939708][ T8590] NILFS (loop1): recovery complete
[  657.051960][ T8600] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  657.131758][   T26] audit: type=1800 audit(1739478337.673:252): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.806" name="file1" dev="loop1" ino=12 res=0 errno=0
[  657.228516][   T26] audit: type=1800 audit(1739478337.703:253): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.806" name="file1" dev="loop1" ino=12 res=0 errno=0
[  657.408506][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  657.432783][ T8602] SET target dimension over the limit!
[  657.443822][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  657.511277][ T8260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.512294][ T8602] loop0: detected capacity change from 0 to 256
[  658.244364][ T8614] vivid-007: =================  START STATUS  =================
[  658.252199][ T8614] vivid-007: Generate PTS: true
[  658.257238][ T8614] vivid-007: Generate SCR: true
[  658.262228][ T8614] tpg source WxH: 640x360 (Y'CbCr)
[  658.267417][ T8614] tpg field: 1
[  658.270940][ T8614] tpg crop: 640x360@0x0
[  658.275144][ T8614] tpg compose: 640x360@0x0
[  658.279743][ T8614] tpg colorspace: 8
[  658.283623][ T8614] tpg transfer function: 0/0
[  658.288356][ T8614] tpg Y'CbCr encoding: 0/0
[  658.292824][ T8614] tpg quantization: 0/0
[  658.297073][ T8614] tpg RGB range: 0/2
[  658.301186][ T8614] vivid-007: ==================  END STATUS  ==================
[  661.388658][ T8632] vivid-007: =================  START STATUS  =================
[  661.397059][ T8632] vivid-007: Generate PTS: true
[  661.402332][ T8632] vivid-007: Generate SCR: true
[  661.407369][ T8632] tpg source WxH: 640x360 (Y'CbCr)
[  661.412600][ T8632] tpg field: 1
[  661.416018][ T8632] tpg crop: 640x360@0x0
[  661.420297][ T8632] tpg compose: 640x360@0x0
[  661.424792][ T8632] tpg colorspace: 8
[  661.428710][ T8632] tpg transfer function: 0/0
[  661.433372][ T8632] tpg Y'CbCr encoding: 0/0
[  661.437891][ T8632] tpg quantization: 0/0
[  661.442152][ T8632] tpg RGB range: 0/2
[  661.446123][ T8632] vivid-007: ==================  END STATUS  ==================
[  661.480695][    T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  661.899451][    T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  661.956574][    T7] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  662.100891][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.181434][    T7] usb 2-1: Product: syz
[  662.192733][ T8648] SET target dimension over the limit!
[  662.199850][    T7] usb 2-1: Manufacturer: syz
[  662.204485][    T7] usb 2-1: SerialNumber: syz
[  662.268256][    T7] usb 2-1: config 0 descriptor??
[  662.335750][    T7] powermate: probe of 2-1:0.0 failed with error -22
[  662.393931][ T8646] loop3: detected capacity change from 0 to 4096
[  662.488165][ T8646] NILFS (loop3): invalid segment: Checksum error in segment payload
[  662.496340][ T8646] NILFS (loop3): trying rollback from an earlier position
[  662.874554][ T8660] fuse: Bad value for 'fd'
[  663.240888][ T8646] NILFS (loop3): recovery complete
[  663.607560][ T8662] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  663.645938][  T128] usb 2-1: USB disconnect, device number 9
[  663.746095][   T26] audit: type=1800 audit(1739478344.283:254): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.815" name="file1" dev="loop3" ino=12 res=0 errno=0
[  664.084278][   T26] audit: type=1800 audit(1739478344.313:255): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.815" name="file1" dev="loop3" ino=12 res=0 errno=0
[  664.444056][ T8671] loop1: detected capacity change from 0 to 4096
[  664.518720][ T8671] NILFS (loop1): invalid segment: Checksum error in segment payload
[  664.558319][ T8679] netlink: 80 bytes leftover after parsing attributes in process `syz.0.820'.
[  664.563052][ T8671] NILFS (loop1): trying rollback from an earlier position
[  664.705224][ T8671] NILFS (loop1): recovery complete
[  664.755686][ T8685] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  664.805453][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  664.815522][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  664.829017][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  664.837152][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  664.841463][ T8681] loop3: detected capacity change from 0 to 4096
[  664.858605][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  664.867281][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  664.942853][   T26] audit: type=1800 audit(1739478345.483:256): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.819" name="file1" dev="loop1" ino=12 res=0 errno=0
[  665.067908][ T8681] NILFS (loop3): invalid segment: Checksum error in segment payload
[  665.207706][ T8681] NILFS (loop3): trying rollback from an earlier position
[  665.252184][   T26] audit: type=1800 audit(1739478345.483:257): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.819" name="file1" dev="loop1" ino=12 res=0 errno=0
[  665.274842][ T8681] NILFS (loop3): recovery complete
[  665.337950][ T8688] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  665.486037][   T26] audit: type=1800 audit(1739478346.023:258): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.821" name="file1" dev="loop3" ino=12 res=0 errno=0
[  665.780246][   T26] audit: type=1800 audit(1739478346.063:259): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.821" name="file1" dev="loop3" ino=12 res=0 errno=0
[  666.858171][ T8705] vivid-007: =================  START STATUS  =================
[  666.865951][ T8705] vivid-007: Generate PTS: true
[  666.870940][ T8705] vivid-007: Generate SCR: true
[  666.875843][ T8705] tpg source WxH: 640x360 (Y'CbCr)
[  666.881056][ T8705] tpg field: 1
[  666.884460][ T8705] tpg crop: 640x360@0x0
[  666.888973][ T8705] tpg compose: 640x360@0x0
[  666.893419][ T8705] tpg colorspace: 8
[  666.897246][ T8705] tpg transfer function: 0/0
[  666.901919][ T8705] tpg Y'CbCr encoding: 0/0
[  666.901984][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  666.906334][ T8705] tpg quantization: 0/0
[  666.906347][ T8705] tpg RGB range: 0/2
[  666.906359][ T8705] vivid-007: ==================  END STATUS  ==================
[  667.322770][ T8683] chnl_net:caif_netlink_parms(): no params data found
[  668.023483][ T8727] SET target dimension over the limit!
[  668.967652][   T48] Bluetooth: hci3: command 0x041b tx timeout
[  669.006670][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.018021][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.063576][ T8730] loop4: detected capacity change from 0 to 4096
[  669.087797][ T8683] device bridge_slave_0 entered promiscuous mode
[  669.116306][ T8739] netlink: 80 bytes leftover after parsing attributes in process `syz.0.827'.
[  669.283209][ T8730] NILFS (loop4): invalid segment: Checksum error in segment payload
[  669.389737][ T8748] fuse: Bad value for 'fd'
[  669.668955][ T8730] NILFS (loop4): trying rollback from an earlier position
[  670.096941][ T8730] NILFS (loop4): recovery complete
[  670.159540][ T8752] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  670.182919][ T8751] loop1: detected capacity change from 0 to 4096
[  670.273749][   T26] audit: type=1800 audit(1739478350.813:260): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.828" name="file1" dev="loop4" ino=12 res=0 errno=0
[  670.311993][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.374534][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.617842][   T26] audit: type=1800 audit(1739478350.843:261): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.828" name="file1" dev="loop4" ino=12 res=0 errno=0
[  670.640383][ T8683] device bridge_slave_1 entered promiscuous mode
[  670.720690][ T8751] NILFS (loop1): invalid segment: Checksum error in segment payload
[  670.744705][ T8751] NILFS (loop1): trying rollback from an earlier position
[  670.772713][ T8751] NILFS (loop1): recovery complete
[  670.793342][ T8757] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  671.047854][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  671.442842][   T26] audit: type=1800 audit(1739478351.983:262): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.830" name="file1" dev="loop1" ino=12 res=0 errno=0
[  671.670525][   T26] audit: type=1800 audit(1739478352.013:263): pid=8762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.830" name="file1" dev="loop1" ino=12 res=0 errno=0
[  671.830078][ T8764] SET target dimension over the limit!
[  672.355139][ T8683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.452635][ T8683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.521070][ T8767] loop3: detected capacity change from 0 to 4096
[  672.798183][ T8767] NILFS (loop3): invalid segment: Checksum error in segment payload
[  673.203614][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  673.259165][ T8767] NILFS (loop3): trying rollback from an earlier position
[  673.299692][ T8767] NILFS (loop3): recovery complete
[  673.331058][ T8779] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  673.353144][ T8683] team0: Port device team_slave_0 added
[  673.611139][   T26] audit: type=1800 audit(1739478354.153:264): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.833" name="file1" dev="loop3" ino=12 res=0 errno=0
[  673.838233][ T8683] team0: Port device team_slave_1 added
[  673.931994][   T26] audit: type=1800 audit(1739478354.183:265): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.833" name="file1" dev="loop3" ino=12 res=0 errno=0
[  674.117666][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'.
[  674.185252][ T8783] loop4: detected capacity change from 0 to 4096
[  674.268515][ T8783] NILFS (loop4): invalid segment: Checksum error in segment payload
[  674.276577][ T8783] NILFS (loop4): trying rollback from an earlier position
[  674.296042][ T8683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  674.324067][ T8683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  674.350879][ T8783] NILFS (loop4): recovery complete
[  674.368449][ T8792] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  674.431129][ T8683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.495044][   T26] audit: type=1800 audit(1739478355.033:266): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.836" name="file1" dev="loop4" ino=12 res=0 errno=0
[  674.585628][ T8794] SET target dimension over the limit!
[  674.776021][   T26] audit: type=1800 audit(1739478355.063:267): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.836" name="file1" dev="loop4" ino=12 res=0 errno=0
[  674.813458][ T8683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.850443][ T8683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  674.916345][ T8683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  674.947338][ T4304] device hsr_slave_0 left promiscuous mode
[  674.978947][ T4304] device hsr_slave_1 left promiscuous mode
[  674.986087][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  674.993980][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.002221][ T4304] device bridge_slave_1 left promiscuous mode
[  675.008580][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.021258][ T4304] device bridge_slave_0 left promiscuous mode
[  675.027638][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.495480][ T8807] loop4: detected capacity change from 0 to 4096
[  675.580404][ T8810] fuse: Bad value for 'fd'
[  676.237282][ T8807] NILFS (loop4): invalid segment: Checksum error in segment payload
[  676.267336][ T8807] NILFS (loop4): trying rollback from an earlier position
[  676.369299][ T8807] NILFS (loop4): recovery complete
[  676.426975][ T8814] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  677.407339][ T8824] vivid-007: =================  START STATUS  =================
[  677.415299][ T8824] vivid-007: Generate PTS: true
[  677.420403][ T8824] vivid-007: Generate SCR: true
[  677.425398][ T8824] tpg source WxH: 640x360 (Y'CbCr)
[  677.430627][ T8824] tpg field: 1
[  677.434083][ T8824] tpg crop: 640x360@0x0
[  677.438422][ T8824] tpg compose: 640x360@0x0
[  677.442941][ T8824] tpg colorspace: 8
[  677.446821][ T8824] tpg transfer function: 0/0
[  677.451582][ T8824] tpg Y'CbCr encoding: 0/0
[  677.456109][ T8824] tpg quantization: 0/0
[  677.460412][ T8824] tpg RGB range: 0/2
[  677.464399][ T8824] vivid-007: ==================  END STATUS  ==================
[  677.836216][   T26] audit: type=1800 audit(1739478358.373:268): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.839" name="file1" dev="loop4" ino=12 res=0 errno=0
[  677.922122][ T8834] SET target dimension over the limit!
[  677.966007][ T8834] loop1: detected capacity change from 0 to 256
[  677.983159][   T26] audit: type=1800 audit(1739478358.433:269): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.839" name="file1" dev="loop4" ino=12 res=0 errno=0
[  678.135839][ T4304] team0 (unregistering): Port device team_slave_1 removed
[  678.705564][ T4304] team0 (unregistering): Port device team_slave_0 removed
[  679.234269][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  679.429983][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  680.995197][ T4304] bond0 (unregistering): Released all slaves
[  681.480335][ T8872] SET target dimension over the limit!
[  682.441076][ T8683] device hsr_slave_0 entered promiscuous mode
[  682.507348][ T8683] device hsr_slave_1 entered promiscuous mode
[  682.528101][ T8683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  682.535749][ T8683] Cannot create hsr debugfs directory
[  682.677426][ T8880] loop0: detected capacity change from 0 to 4096
[  682.755234][ T8880] NILFS (loop0): invalid segment: Checksum error in segment payload
[  682.797866][ T8880] NILFS (loop0): trying rollback from an earlier position
[  682.827639][ T8880] NILFS (loop0): recovery complete
[  682.860244][ T8882] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  682.982920][   T26] audit: type=1800 audit(1739478363.523:270): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.853" name="file1" dev="loop0" ino=12 res=0 errno=0
[  683.231264][   T26] audit: type=1800 audit(1739478363.553:271): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.853" name="file1" dev="loop0" ino=12 res=0 errno=0
[  684.077054][ T8683] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  684.090852][ T8683] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  684.105631][ T8683] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  684.122720][ T8683] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  684.218663][ T8683] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.236230][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  684.249295][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  684.266176][ T8683] 8021q: adding VLAN 0 to HW filter on device team0
[  684.284644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  684.295715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  684.309573][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.316717][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  684.326344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  684.350538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  684.360262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  684.371469][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.378656][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  684.400012][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  684.409154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  684.418597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  684.438488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  684.447355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  684.465082][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  684.476696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  684.495174][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  684.506707][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  684.529003][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  684.543464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  684.553439][ T8683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  684.828433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  684.835951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  684.855428][ T8683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  685.211018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  685.226472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  685.259845][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  685.274654][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  685.287425][ T8683] device veth0_vlan entered promiscuous mode
[  685.304532][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  685.314434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  685.333410][ T8683] device veth1_vlan entered promiscuous mode
[  685.388331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  685.397309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  685.412868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  685.424643][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  685.440128][ T8683] device veth0_macvtap entered promiscuous mode
[  685.470314][ T8683] device veth1_macvtap entered promiscuous mode
[  685.496654][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  685.512183][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.523845][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  685.535048][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.545685][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  685.556481][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.567209][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  685.579457][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.592047][ T8683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  685.602569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  685.621324][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  685.629988][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  685.639538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  685.654863][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.666575][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.683791][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.704438][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.714795][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.731279][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.741578][ T8683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.752541][ T8683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.764566][ T8683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  685.776550][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  685.786942][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  685.804974][ T8683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.815948][ T8683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.825154][ T8683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.834626][ T8683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.923236][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.948096][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.956623][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.960577][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  685.975191][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.989739][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  695.428492][ T8992] SET target dimension over the limit!
[  695.673420][ T8997] loop0: detected capacity change from 0 to 256
[  696.680357][ T9000] debugfs: Directory 'ptm0' with parent 'caif_serial' already present!
[  696.973911][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  696.981504][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  697.355701][ T9011] vivid-007: =================  START STATUS  =================
[  697.363524][ T9011] vivid-007: Generate PTS: true
[  697.368604][ T9011] vivid-007: Generate SCR: true
[  697.373513][ T9011] tpg source WxH: 640x360 (Y'CbCr)
[  697.378732][ T9011] tpg field: 1
[  697.382125][ T9011] tpg crop: 640x360@0x0
[  697.386311][ T9011] tpg compose: 640x360@0x0
[  697.390843][ T9011] tpg colorspace: 8
[  697.394668][ T9011] tpg transfer function: 0/0
[  697.399369][ T9011] tpg Y'CbCr encoding: 0/0
[  697.403816][ T9011] tpg quantization: 0/0
[  697.408075][ T9011] tpg RGB range: 0/2
[  697.411990][ T9011] vivid-007: ==================  END STATUS  ==================
[  697.946571][ T9021] SET target dimension over the limit!
[  697.981390][ T9024] SET target dimension over the limit!
[  697.996638][ T9021] loop3: detected capacity change from 0 to 256
[  700.417762][ T5155] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  700.828099][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  700.893497][ T5155] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  700.900765][ T9053] loop4: detected capacity change from 0 to 4096
[  700.924823][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.960294][ T5155] usb 1-1: Product: syz
[  700.984273][ T9053] NILFS (loop4): invalid segment: Checksum error in segment payload
[  701.007120][ T5155] usb 1-1: Manufacturer: syz
[  701.024376][ T5155] usb 1-1: SerialNumber: syz
[  701.036419][ T9053] NILFS (loop4): trying rollback from an earlier position
[  701.076403][ T5155] usb 1-1: config 0 descriptor??
[  701.114618][ T9053] NILFS (loop4): recovery complete
[  701.155450][ T5155] powermate: probe of 1-1:0.0 failed with error -22
[  701.163604][ T9057] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  701.191262][ T9056] vivid-007: =================  START STATUS  =================
[  701.199108][ T9056] vivid-007: Generate PTS: true
[  701.204017][ T9056] vivid-007: Generate SCR: true
[  701.209019][ T9056] tpg source WxH: 640x360 (Y'CbCr)
[  701.214182][ T9056] tpg field: 1
[  701.217614][ T9056] tpg crop: 640x360@0x0
[  701.221796][ T9056] tpg compose: 640x360@0x0
[  701.226648][ T9056] tpg colorspace: 8
[  701.230549][ T9056] tpg transfer function: 0/0
[  701.235161][ T9056] tpg Y'CbCr encoding: 0/0
[  701.239655][ T9056] tpg quantization: 0/0
[  701.243830][ T9056] tpg RGB range: 0/2
[  701.247819][ T9056] vivid-007: ==================  END STATUS  ==================
[  701.256786][ T4307] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  702.269214][   T26] audit: type=1800 audit(1739478382.813:272): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.868" name="file1" dev="loop4" ino=12 res=0 errno=0
[  702.279463][ T4307] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  702.544279][   T26] audit: type=1800 audit(1739478382.843:273): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.868" name="file1" dev="loop4" ino=12 res=0 errno=0
[  702.704846][ T4307] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  702.806519][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.830848][ T4307] usb 4-1: Product: syz
[  702.835096][ T4307] usb 4-1: Manufacturer: syz
[  702.841853][ T4307] usb 4-1: SerialNumber: syz
[  703.062499][ T7091] usb 1-1: USB disconnect, device number 12
[  703.071645][ T4307] usb 4-1: config 0 descriptor??
[  703.366972][ T9072] vivid-007: =================  START STATUS  =================
[  703.375078][ T9072] vivid-007: Generate PTS: true
[  703.380788][ T9072] vivid-007: Generate SCR: true
[  703.386018][ T9072] tpg source WxH: 640x360 (Y'CbCr)
[  703.391342][ T9072] tpg field: 1
[  703.394898][ T9072] tpg crop: 640x360@0x0
[  703.399249][ T9072] tpg compose: 640x360@0x0
[  703.403878][ T9072] tpg colorspace: 8
[  703.407882][ T9072] tpg transfer function: 0/0
[  703.412610][ T9072] tpg Y'CbCr encoding: 0/0
[  703.417184][ T9072] tpg quantization: 0/0
[  703.421539][ T9072] tpg RGB range: 0/2
[  703.425614][ T9072] vivid-007: ==================  END STATUS  ==================
[  703.841900][ T4307] powermate: probe of 4-1:0.0 failed with error -22
[  704.148418][ T9079] loop0: detected capacity change from 0 to 4096
[  704.152277][ T9087] SET target dimension over the limit!
[  704.196553][ T9079] NILFS (loop0): invalid segment: Checksum error in segment payload
[  704.204936][ T4307] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  704.228492][ T9079] NILFS (loop0): trying rollback from an earlier position
[  704.423991][ T4307] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  704.501051][ T4307] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  704.557372][ T9079] NILFS (loop0): recovery complete
[  704.600549][ T9092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  704.637828][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.646124][ T4307] usb 2-1: Product: syz
[  704.651813][ T4307] usb 2-1: Manufacturer: syz
[  704.656682][ T4307] usb 2-1: SerialNumber: syz
[  704.685791][ T4307] usb 2-1: config 0 descriptor??
[  704.722896][ T4307] powermate: probe of 2-1:0.0 failed with error -22
[  704.862958][  T125] usb 4-1: USB disconnect, device number 12
[  705.905989][   T26] audit: type=1800 audit(1739478386.443:274): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.873" name="file1" dev="loop0" ino=12 res=0 errno=0
[  705.926519][    C0] vkms_vblank_simulate: vblank timer overrun
[  706.157645][  T128] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  706.382720][   T26] audit: type=1800 audit(1739478386.473:275): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.873" name="file1" dev="loop0" ino=12 res=0 errno=0
[  706.700499][ T9110] vivid-007: =================  START STATUS  =================
[  706.708227][ T9110] vivid-007: Generate PTS: true
[  706.713140][ T9110] vivid-007: Generate SCR: true
[  706.718097][ T9110] tpg source WxH: 640x360 (Y'CbCr)
[  706.723237][ T9110] tpg field: 1
[  706.726645][ T9110] tpg crop: 640x360@0x0
[  706.730905][ T9110] tpg compose: 640x360@0x0
[  706.735357][ T9110] tpg colorspace: 8
[  706.739249][ T9110] tpg transfer function: 0/0
[  706.743868][ T9110] tpg Y'CbCr encoding: 0/0
[  706.748359][ T9110] tpg quantization: 0/0
[  706.752535][ T9110] tpg RGB range: 0/2
[  706.756559][ T9110] vivid-007: ==================  END STATUS  ==================
[  706.844934][  T128] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  706.873985][  T125] usb 2-1: USB disconnect, device number 10
[  706.936510][  T128] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  706.996787][  T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.252173][  T128] usb 4-1: Product: syz
[  707.256397][  T128] usb 4-1: Manufacturer: syz
[  707.261772][  T128] usb 4-1: SerialNumber: syz
[  707.300169][ T9123] netlink: 80 bytes leftover after parsing attributes in process `syz.5.880'.
[  707.646642][ T9124] vivid-007: =================  START STATUS  =================
[  707.654601][ T9124] vivid-007: Generate PTS: true
[  707.659804][ T9124] vivid-007: Generate SCR: true
[  707.664897][ T9124] tpg source WxH: 640x360 (Y'CbCr)
[  707.670257][ T9124] tpg field: 1
[  707.673774][ T9124] tpg crop: 640x360@0x0
[  707.679963][ T9124] tpg compose: 640x360@0x0
[  707.684607][ T9124] tpg colorspace: 8
[  707.688595][ T9124] tpg transfer function: 0/0
[  707.693412][ T9124] tpg Y'CbCr encoding: 0/0
[  707.698112][ T9124] tpg quantization: 0/0
[  707.702532][ T9124] tpg RGB range: 0/2
[  707.706721][ T9124] vivid-007: ==================  END STATUS  ==================
[  707.779219][  T128] usb 4-1: config 0 descriptor??
[  708.429296][  T128] powermate: probe of 4-1:0.0 failed with error -22
[  709.606574][ T4336] usb 4-1: USB disconnect, device number 13
[  713.372678][ T9162] vivid-007: =================  START STATUS  =================
[  713.380465][ T9162] vivid-007: Generate PTS: true
[  713.385476][ T9162] vivid-007: Generate SCR: true
[  713.390539][ T9162] tpg source WxH: 640x360 (Y'CbCr)
[  713.395720][ T9162] tpg field: 1
[  713.399179][ T9162] tpg crop: 640x360@0x0
[  713.403400][ T9162] tpg compose: 640x360@0x0
[  713.407917][ T9162] tpg colorspace: 8
[  713.411791][ T9162] tpg transfer function: 0/0
[  713.416442][ T9162] tpg Y'CbCr encoding: 0/0
[  713.420952][ T9162] tpg quantization: 0/0
[  713.425200][ T9162] tpg RGB range: 0/2
[  713.429195][ T9162] vivid-007: ==================  END STATUS  ==================
[  714.151858][ T9166] SET target dimension over the limit!
[  715.693521][ T9175] vivid-007: =================  START STATUS  =================
[  715.701302][ T9175] vivid-007: Generate PTS: true
[  715.706337][ T9175] vivid-007: Generate SCR: true
[  715.711384][ T9175] tpg source WxH: 640x360 (Y'CbCr)
[  715.716556][ T9175] tpg field: 1
[  715.720028][ T9175] tpg crop: 640x360@0x0
[  715.724246][ T9175] tpg compose: 640x360@0x0
[  715.728758][ T9175] tpg colorspace: 8
[  715.732620][ T9175] tpg transfer function: 0/0
[  715.737263][ T9175] tpg Y'CbCr encoding: 0/0
[  715.741776][ T9175] tpg quantization: 0/0
[  715.746023][ T9175] tpg RGB range: 0/2
[  715.750015][ T9175] vivid-007: ==================  END STATUS  ==================
[  716.889707][ T9177] loop4: detected capacity change from 0 to 4096
[  716.982001][ T9182] SET target dimension over the limit!
[  717.358562][ T9182] loop5: detected capacity change from 0 to 256
[  717.385239][ T9177] NILFS (loop4): invalid segment: Checksum error in segment payload
[  717.417586][ T9177] NILFS (loop4): trying rollback from an earlier position
[  717.517610][ T9177] NILFS (loop4): recovery complete
[  717.558969][ T9177] NILFS (loop4): error -4 creating segctord thread
[  718.204858][ T9198] loop5: detected capacity change from 0 to 4096
[  718.228842][ T9190] loop0: detected capacity change from 0 to 4096
[  718.238641][ T9198] NILFS (loop5): invalid segment: Checksum error in segment payload
[  718.262931][ T9198] NILFS (loop5): trying rollback from an earlier position
[  718.513037][ T9198] NILFS (loop5): recovery complete
[  718.521177][ T9190] NILFS (loop0): invalid segment: Checksum error in segment payload
[  718.577838][ T9190] NILFS (loop0): trying rollback from an earlier position
[  718.583596][ T9200] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  718.895295][   T26] audit: type=1800 audit(1739478399.433:276): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.897" name="file1" dev="loop5" ino=12 res=0 errno=0
[  719.035606][   T26] audit: type=1800 audit(1739478399.453:277): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.897" name="file1" dev="loop5" ino=12 res=0 errno=0
[  719.064135][ T9190] NILFS (loop0): recovery complete
[  719.123138][ T9206] loop4: detected capacity change from 0 to 256
[  719.142653][ T9208] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  719.294113][   T26] audit: type=1800 audit(1739478399.833:278): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.895" name="file1" dev="loop0" ino=12 res=0 errno=0
[  719.668925][   T26] audit: type=1800 audit(1739478399.863:279): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.895" name="file1" dev="loop0" ino=12 res=0 errno=0
[  720.009797][ T9216] vivid-007: =================  START STATUS  =================
[  720.017629][ T9216] vivid-007: Generate PTS: true
[  720.022637][ T9216] vivid-007: Generate SCR: true
[  720.027727][ T9216] tpg source WxH: 640x360 (Y'CbCr)
[  720.032905][ T9216] tpg field: 1
[  720.036315][ T9216] tpg crop: 640x360@0x0
[  720.040613][ T9216] tpg compose: 640x360@0x0
[  720.045096][ T9216] tpg colorspace: 8
[  720.049028][ T9216] tpg transfer function: 0/0
[  720.053680][ T9216] tpg Y'CbCr encoding: 0/0
[  720.058190][ T9216] tpg quantization: 0/0
[  720.062441][ T9216] tpg RGB range: 0/2
[  720.066673][ T9216] vivid-007: ==================  END STATUS  ==================
[  725.921376][ T9244] SET target dimension over the limit!
[  725.958918][ T9244] loop4: detected capacity change from 0 to 256
[  727.027221][ T9260] netlink: 80 bytes leftover after parsing attributes in process `syz.3.908'.
[  727.707090][ T9266] loop5: detected capacity change from 0 to 4096
[  727.777981][ T9266] NILFS (loop5): invalid segment: Checksum error in segment payload
[  727.796369][ T9266] NILFS (loop5): trying rollback from an earlier position
[  727.807656][ T9268] loop0: detected capacity change from 0 to 4096
[  727.871079][ T9266] NILFS (loop5): recovery complete
[  727.902111][ T9268] NILFS (loop0): invalid segment: Checksum error in segment payload
[  727.931289][ T9274] loop4: detected capacity change from 0 to 256
[  727.950437][ T9268] NILFS (loop0): trying rollback from an earlier position
[  728.124397][ T9276] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  730.448034][   T26] audit: type=1800 audit(1739478410.983:280): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file1" dev="loop5" ino=12 res=0 errno=0
[  730.479610][ T9268] NILFS (loop0): recovery complete
[  730.505390][ T9268] NILFS (loop0): error -4 creating segctord thread
[  730.637675][   T26] audit: type=1800 audit(1739478410.993:281): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file1" dev="loop5" ino=12 res=0 errno=0
[  730.912501][ T9290] loop1: detected capacity change from 0 to 4096
[  734.063697][ T9290] NILFS (loop1): invalid segment: Checksum error in segment payload
[  734.140157][ T9290] NILFS (loop1): trying rollback from an earlier position
[  734.217729][ T9290] NILFS (loop1): recovery complete
[  734.378958][ T9290] NILFS (loop1): error -4 creating segctord thread
[  735.475986][ T9316] loop4: detected capacity change from 0 to 4096
[  735.716616][ T9316] NILFS (loop4): invalid segment: Checksum error in segment payload
[  735.785842][ T9316] NILFS (loop4): trying rollback from an earlier position
[  736.111619][ T9316] NILFS (loop4): recovery complete
[  738.469674][ T9336] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  738.745170][ T9342] loop1: detected capacity change from 0 to 4096
[  738.840102][ T9342] NILFS (loop1): invalid segment: Checksum error in segment payload
[  739.269723][ T9342] NILFS (loop1): trying rollback from an earlier position
[  739.606241][ T9342] NILFS (loop1): recovery complete
[  739.682362][ T9349] loop4: detected capacity change from 0 to 256
[  739.754216][ T9350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  739.953440][   T26] audit: type=1800 audit(1739478420.493:282): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.925" name="file1" dev="loop1" ino=12 res=0 errno=0
[  740.233837][   T26] audit: type=1800 audit(1739478420.523:283): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.925" name="file1" dev="loop1" ino=12 res=0 errno=0
[  740.374431][ T9354] loop3: detected capacity change from 0 to 4096
[  740.433023][ T9354] NILFS (loop3): invalid segment: Checksum error in segment payload
[  740.449548][ T9353] loop0: detected capacity change from 0 to 4096
[  740.466619][ T9354] NILFS (loop3): trying rollback from an earlier position
[  740.491551][ T9354] NILFS (loop3): recovery complete
[  740.559945][ T9353] NILFS (loop0): invalid segment: Checksum error in segment payload
[  740.597398][ T9353] NILFS (loop0): trying rollback from an earlier position
[  740.641334][ T9357] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  741.607881][ T9353] NILFS (loop0): recovery complete
[  741.902923][   T26] audit: type=1800 audit(1739478422.443:284): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.928" name="file1" dev="loop3" ino=12 res=0 errno=0
[  742.027391][ T9365] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  742.033723][ T9367] loop1: detected capacity change from 0 to 2048
[  742.048405][ T9367] =======================================================
[  742.048405][ T9367] WARNING: The mand mount option has been deprecated and
[  742.048405][ T9367]          and is ignored by this kernel. Remove the mand
[  742.048405][ T9367]          option from the mount to silence this warning.
[  742.048405][ T9367] =======================================================
[  742.367872][ T9367] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  742.369881][ T9371] loop5: detected capacity change from 0 to 1024
[  742.385855][ T9371] EXT4-fs: Ignoring removed mblk_io_submit option
[  742.392889][   T26] audit: type=1800 audit(1739478422.513:285): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.928" name="file1" dev="loop3" ino=12 res=0 errno=0
[  742.392932][   T26] audit: type=1800 audit(1739478422.683:286): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.927" name="file1" dev="loop0" ino=12 res=0 errno=0
[  742.392967][   T26] audit: type=1800 audit(1739478422.693:287): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.927" name="file1" dev="loop0" ino=12 res=0 errno=0
[  742.456456][ T9371] EXT4-fs: Ignoring removed bh option
[  742.465863][ T9371] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  742.551625][ T9367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  742.736199][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'.
[  742.776162][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'.
[  742.894936][ T9379] loop5: detected capacity change from 0 to 256
[  743.021215][ T9387] loop3: detected capacity change from 0 to 256
[  743.040988][ T9386] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  743.056045][ T9387] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d)
[  743.075384][ T9386] exFAT-fs (loop1): unable to read boot sector
[  743.093622][ T9386] exFAT-fs (loop1): failed to read boot sector
[  743.118608][ T9379] FAT-fs (loop5): Directory bread(block 64) failed
[  743.120438][ T9386] exFAT-fs (loop1): failed to recognize exfat type
[  743.125575][ T9379] FAT-fs (loop5): Directory bread(block 65) failed
[  743.161786][ T9387] syz.3.939: attempt to access beyond end of device
[  743.161786][ T9387] loop3: rw=524288, sector=4280, nr_sectors = 1 limit=256
[  743.198561][ T9379] FAT-fs (loop5): Directory bread(block 66) failed
[  743.226824][ T9379] FAT-fs (loop5): Directory bread(block 67) failed
[  743.237984][ T9387] syz.3.939: attempt to access beyond end of device
[  743.237984][ T9387] loop3: rw=0, sector=4280, nr_sectors = 1 limit=256
[  743.252713][ T9379] FAT-fs (loop5): Directory bread(block 68) failed
[  743.259855][   T26] audit: type=1800 audit(1739478423.803:288): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.939" name="file1" dev="loop3" ino=1048622 res=0 errno=0
[  743.259905][ T9379] FAT-fs (loop5): Directory bread(block 69) failed
[  743.307732][ T9379] FAT-fs (loop5): Directory bread(block 70) failed
[  743.325871][ T9379] FAT-fs (loop5): Directory bread(block 71) failed
[  743.352675][ T9379] FAT-fs (loop5): Directory bread(block 72) failed
[  743.361728][ T9379] FAT-fs (loop5): Directory bread(block 73) failed
[  743.425248][ T9395] loop1: detected capacity change from 0 to 256
[  743.501852][ T9395] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  743.572819][   T26] audit: type=1800 audit(1739478424.113:289): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.937" name="file1" dev="loop5" ino=1048623 res=0 errno=0
[  743.608178][ T9379] syz.5.937: attempt to access beyond end of device
[  743.608178][ T9379] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256
[  743.853839][ T9408] loop1: detected capacity change from 0 to 512
[  744.176503][ T9415] loop4: detected capacity change from 0 to 1024
[  744.318171][ T9415] hfsplus: failed to load root directory
[  744.501183][ T9408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  744.737706][ T9408] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  744.867624][ T9408] capability: warning: `syz.1.947' uses deprecated v2 capabilities in a way that may be insecure
[  744.946976][ T9422] loop3: detected capacity change from 0 to 1024
[  744.961174][ T9421] loop5: detected capacity change from 0 to 2048
[  745.009494][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  745.059232][ T9421]  loop5: p1 p2 < > p3 p4 < p5 >
[  745.087784][ T9421] loop5: partition table partially beyond EOD, truncated
[  745.095043][ T9421] loop5: p1 start 234883329 is beyond EOD, truncated
[  745.152703][ T9421] loop5: p2 start 4294902784 is beyond EOD, truncated
[  745.169096][ T9426] loop0: detected capacity change from 0 to 2048
[  745.189030][ T9421] loop5: p3 start 4278191616 is beyond EOD, truncated
[  745.231222][ T9429] loop4: detected capacity change from 0 to 512
[  745.260461][ T9426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  745.274407][ T9429] EXT4-fs: Ignoring removed mblk_io_submit option
[  745.277185][ T9421] loop5: p5 start 234883329 is beyond EOD, truncated
[  745.312644][ T9429] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  745.365403][ T9032] udevd[9032]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  745.378155][ T3622]  loop5: p1 p2 < > p3 p4 < p5 >
[  745.383161][ T3622] loop5: partition table partially beyond EOD, truncated
[  745.394992][   T26] audit: type=1804 audit(1739478425.933:290): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.954" name="/newroot/188/file1/bus" dev="loop0" ino=1367 res=1 errno=0
[  745.424720][ T9429] Quota error (device loop4): do_check_range: Getting dqdh_next_free 15 out of range 0-5
[  745.436443][ T3622] loop5: p1 start 234883329 is beyond EOD, truncated
[  745.441596][ T9429] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  745.449853][ T3622] loop5: p2 start 4294902784 is beyond EOD, truncated
[  745.487628][ T9429] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.956: Failed to acquire dquot type 1
[  745.498990][ T3622] loop5: p3 start 4278191616 is beyond EOD, truncated
[  745.512968][ T3622] loop5: p5 start 234883329 is beyond EOD, truncated
[  745.522448][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  745.570677][ T9429] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  745.657049][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  745.673820][ T9429] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #12: comm syz.4.956: corrupted inode contents
[  745.703870][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  745.710295][ T9440] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  745.739263][ T9429] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #12: comm syz.4.956: mark_inode_dirty error
[  745.770503][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  745.804905][ T9429] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #12: comm syz.4.956: corrupted inode contents
[  745.820406][ T9443] loop3: detected capacity change from 0 to 512
[  745.850825][ T9443] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  745.864106][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  745.870915][ T9429] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.956: mark_inode_dirty error
[  745.883060][ T9443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  745.905881][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  745.919002][ T9429] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #12: comm syz.4.956: corrupted inode contents
[  745.935860][ T9443] EXT4-fs (loop3): 1 truncate cleaned up
[  745.967690][ T9443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  745.970592][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  745.995776][ T9429] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  746.017567][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  746.025059][ T9429] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #12: comm syz.4.956: corrupted inode contents
[  746.119917][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'.
[  746.130549][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  746.137108][ T9429] EXT4-fs error (device loop4): ext4_truncate:4311: inode #12: comm syz.4.956: mark_inode_dirty error
[  746.149731][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  746.248598][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  746.255268][ T9429] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  746.292378][ T9429] EXT4-fs (loop4): Remounting filesystem read-only
[  746.312965][ T9429] EXT4-fs (loop4): 1 truncate cleaned up
[  746.329185][ T9429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  746.598523][ T4254] EXT4-fs (loop4): unmounting filesystem.
[  747.730946][ T9488] netlink: 156 bytes leftover after parsing attributes in process `syz.3.974'.
[  747.750383][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'.
[  747.895707][ T9494] loop4: detected capacity change from 0 to 8
[  748.233375][  T128] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  748.513811][  T128] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  748.548465][  T128] usb 5-1: config 0 has no interface number 0
[  748.583250][  T128] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  748.702728][  T128] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  748.818951][  T128] usb 5-1: config 0 interface 255 has no altsetting 0
[  748.934885][  T128] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  748.950262][  T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.000831][  T128] usb 5-1: config 0 descriptor??
[  749.077833][  T125] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  749.235413][  T128] usb 5-1: string descriptor 0 read error: -71
[  749.259059][  T128] ums-realtek 5-1:0.255: USB Mass Storage device detected
[  749.269245][  T125] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  749.292335][  T125] usb 1-1: config 0 interface 0 has no altsetting 0
[  749.320220][  T125] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  749.334250][  T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.343050][  T125] usb 1-1: Product: syz
[  749.356000][  T125] usb 1-1: Manufacturer: syz
[  749.361444][  T125] usb 1-1: SerialNumber: syz
[  749.364214][  T128] usb 5-1: USB disconnect, device number 10
[  749.384059][  T125] usb 1-1: config 0 descriptor??
[  749.416963][  T125] usb 1-1: selecting invalid altsetting 0
[  749.504702][ T9524] loop5: detected capacity change from 0 to 1024
[  749.586316][ T9526] loop3: detected capacity change from 0 to 1024
[  749.650256][ T9526] hfsplus: xattr searching failed
[  749.653871][ T9504] loop0: detected capacity change from 0 to 1024
[  749.747784][ T4336] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  749.771560][ T9504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  749.811189][ T9504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.840109][  T128] usb 1-1: USB disconnect, device number 13
[  749.967012][ T9530] loop4: detected capacity change from 0 to 2048
[  749.971056][ T4336] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  750.000816][ T9530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  750.002254][ T4336] usb 2-1: config 0 has no interface number 0
[  750.015940][ T4336] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  750.043611][ T4336] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  750.086380][ T4336] usb 2-1: config 0 interface 255 has no altsetting 0
[  750.094011][ T4336] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  750.110533][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.124232][ T4336] usb 2-1: config 0 descriptor??
[  750.143903][ T4336] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  750.357809][ T4300] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  750.369761][ T4336] usb 2-1: USB disconnect, device number 11
[  750.411787][ T9543] loop5: detected capacity change from 0 to 512
[  750.419808][ T9543] EXT4-fs: Ignoring removed orlov option
[  750.426807][ T9543] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  750.566855][   T26] audit: type=1326 audit(1739478431.103:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.0.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7978cde9 code=0x0
[  750.594859][ T4300] usb 4-1: Using ep0 maxpacket: 32
[  750.607411][ T4300] usb 4-1: unable to get BOS descriptor or descriptor too short
[  750.632440][ T4300] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  750.657007][ T4300] usb 4-1: config 1 has no interface number 1
[  750.682154][ T9548] loop0: detected capacity change from 0 to 128
[  750.692502][ T4300] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  750.721363][ T4300] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  750.743269][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.751992][ T4300] usb 4-1: Product: syz
[  750.756204][ T4300] usb 4-1: Manufacturer: syz
[  750.768442][ T4300] usb 4-1: SerialNumber: syz
[  750.773518][ T9005] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  750.975400][ T9554] loop4: detected capacity change from 0 to 128
[  751.007338][ T4300] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  751.059586][ T4300] usb 4-1: USB disconnect, device number 14
[  751.074297][ T9554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  751.107190][ T9554] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  751.157877][ T9556] loop5: detected capacity change from 0 to 8192
[  751.177277][ T9554] syz.4.997 (pid 9554) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  751.213933][ T9556]  loop5: p1 < > p3 < p5 > p4
[  751.222728][ T9556] loop5: partition table partially beyond EOD, truncated
[  751.231701][ T9556] loop5: p1 start 4294967040 is beyond EOD, truncated
[  751.302013][ T9005] udevd[9005]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  751.645134][ T4254] EXT4-fs (loop4): unmounting filesystem.
[  751.664671][ T9566] loop0: detected capacity change from 0 to 2048
[  751.696718][ T9570] loop5: detected capacity change from 0 to 512
[  751.728681][ T9566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  751.743018][ T9570] EXT4-fs: Ignoring removed oldalloc option
[  751.841943][ T9570] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters
[  751.884602][ T9570] EXT4-fs (loop5): Remounting filesystem read-only
[  751.898312][ T9570] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.999: Parent and EA inode have the same ino 15
[  751.933564][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  752.140991][ T9570] EXT4-fs (loop5): Remounting filesystem read-only
[  752.166784][ T9570] EXT4-fs (loop5): 1 orphan inode deleted
[  752.172618][ T9570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  753.236234][ T8683] EXT4-fs (loop5): unmounting filesystem.
[  753.335576][ T9595] loop4: detected capacity change from 0 to 1024
[  753.361045][ T9600] loop5: detected capacity change from 0 to 256
[  753.362851][ T9601] syzkaller0: create flow: hash 1930306674 index 1
[  753.394964][   T26] audit: type=1800 audit(1739478433.991:292): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1011" name="file1" dev="loop5" ino=1048624 res=0 errno=0
[  753.424279][ T9600] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  753.457500][ T4300] syzkaller0: tun_net_xmit 76
[  753.462837][ T4300] syzkaller0: tun_net_xmit 48
[  753.493148][ T6526] syzkaller0: tun_net_xmit 76
[  753.520127][ T9604] loop0: detected capacity change from 0 to 1764
[  753.718800][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'.
[  753.829828][  T128] syzkaller0: tun_net_xmit 76
[  753.883282][ T9614] loop4: detected capacity change from 0 to 512
[  753.916293][  T125] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  753.917005][ T9614] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  753.953996][  T128] syzkaller0: tun_net_xmit 76
[  753.998941][ T9614] EXT4-fs (loop4): 1 truncate cleaned up
[  753.998975][ T9614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  754.015045][ T9592] syzkaller0: delete flow: hash 1930306674 index 1
[  754.070390][ T4336] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  754.111222][  T125] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[  754.111253][  T125] usb 6-1: config 0 has no interface number 0
[  754.111284][  T125] usb 6-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024
[  754.111311][  T125] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  754.111337][  T125] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0
[  754.111360][  T125] usb 6-1: config 0 interface 11 has no altsetting 0
[  754.111389][  T125] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  754.111414][  T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.115426][  T125] usb 6-1: config 0 descriptor??
[  754.116137][ T9607] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  754.131249][  T125] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected
[  754.225312][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81
[  754.236052][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82
[  754.243891][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1
[  754.252894][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2
[  754.260691][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85
[  754.269721][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5
[  754.282294][  T125] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  754.282321][ T4254] EXT4-fs (loop4): unmounting filesystem.
[  754.293978][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83
[  754.304582][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84
[  754.312395][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3
[  754.320329][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4
[  754.335906][ T4336] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  754.349270][ T4336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  754.377985][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86
[  754.388927][ T4336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  754.402112][  T125] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6
[  754.405171][ T9621] loop4: detected capacity change from 0 to 1024
[  754.411986][ T4336] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  754.425951][  T125] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  754.445466][  T125] usb 6-1: USB disconnect, device number 2
[  754.456359][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.505777][  T125] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  754.514946][ T9621] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  754.527194][ T4336] usb 2-1: config 0 descriptor??
[  754.543288][ T9621] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  754.562796][  T125] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  754.598058][  T125] keyspan 6-1:0.11: device disconnected
[  754.960271][ T4336] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0
[  754.973775][ T4336] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0
[  755.002174][ T4336] holtek_kbd 0003:04D9:A055.0001: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0
[  755.329420][  T128] usb 2-1: USB disconnect, device number 12
[  755.340140][ T9635] loop3: detected capacity change from 0 to 256
[  755.358834][ T9635] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  755.809622][ T9635] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  758.234212][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  758.240820][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  760.456705][ T9672] loop0: detected capacity change from 0 to 512
[  760.487472][ T9672] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  760.541630][ T9672] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  760.561846][ T9672] EXT4-fs (loop0): 1 truncate cleaned up
[  760.571947][ T9682] xt_CT: You must specify a L4 protocol and not use inversions on it
[  760.575597][ T9672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  760.616913][   T26] audit: type=1800 audit(1739478441.384:293): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1037" name="file2" dev="loop0" ino=16 res=0 errno=0
[  760.736008][ T4336] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  763.252733][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  764.262421][ T4336] usb 5-1: Using ep0 maxpacket: 16
[  868.945344][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  868.952006][    C0] rcu: 	0-...!: (1 GPs behind) idle=7024/1/0x4000000000000000 softirq=32782/32783 fqs=49
[  868.963035][    C0] 	(t=10500 jiffies g=39525 q=321 ncpus=2)
[  868.968872][    C0] rcu: rcu_preempt kthread starved for 10397 jiffies! g39525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  868.980131][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  868.990130][    C0] rcu: RCU grace-period kthread stack dump:
[  868.996034][    C0] task:rcu_preempt     state:R  running task     stack:26616 pid:16    ppid:2      flags:0x00004000
[  869.006979][    C0] Call Trace:
[  869.010283][    C0]  <TASK>
[  869.013241][    C0]  __schedule+0x143f/0x4570
[  869.017795][    C0]  ? _raw_spin_unlock+0x40/0x40
[  869.022694][    C0]  ? __mod_timer+0x956/0xee0
[  869.027322][    C0]  ? release_firmware_map_entry+0x186/0x186
[  869.033247][    C0]  ? lockdep_softirqs_off+0x420/0x420
[  869.038664][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  869.044591][    C0]  ? _raw_spin_unlock+0x40/0x40
[  869.049479][    C0]  schedule+0xbf/0x180
[  869.053663][    C0]  schedule_timeout+0x1b9/0x300
[  869.058546][    C0]  ? console_conditional_schedule+0x40/0x40
[  869.064477][    C0]  ? update_process_times+0x1b0/0x1b0
[  869.069882][    C0]  ? prepare_to_swait_event+0x329/0x350
[  869.075486][    C0]  rcu_gp_fqs_loop+0x2d2/0x1150
[  869.080372][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  869.086557][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  869.091785][    C0]  ? rcu_gp_init+0x15f0/0x15f0
[  869.096575][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  869.102512][    C0]  ? finish_swait+0xcf/0x1e0
[  869.107145][    C0]  rcu_gp_kthread+0xa3/0x3b0
[  869.111792][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  869.116927][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  869.122858][    C0]  ? __kthread_parkme+0x168/0x1c0
[  869.127924][    C0]  kthread+0x28d/0x320
[  869.132037][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  869.137176][    C0]  ? kthread_blkcg+0xd0/0xd0
[  869.141789][    C0]  ret_from_fork+0x1f/0x30
[  869.146254][    C0]  </TASK>
[  869.149290][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  869.155640][    C0] Sending NMI from CPU 0 to CPUs 1:
[  869.160873][    C1] NMI backtrace for cpu 1
[  869.160891][    C1] CPU: 1 PID: 9689 Comm: syz.1.1043 Not tainted 6.1.128-syzkaller #0
[  869.160908][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  869.160918][    C1] RIP: 0010:pid_task+0x57/0x140
[  869.160943][    C1] Code: 25 2f 00 4a 8d 5c f3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 9c b8 86 00 48 8b 2b <e8> 74 64 57 09 89 c3 31 ff 89 c6 e8 f9 28 2f 00 85 db 74 24 e8 b0
[  869.160957][    C1] RSP: 0018:ffffc900001e0c00 EFLAGS: 00000046
[  869.160972][    C1] RAX: 1ffff1100491d322 RBX: ffff8880248e9910 RCX: dffffc0000000000
[  869.160985][    C1] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000005
[  869.160995][    C1] RBP: ffff8880304fa3f8 R08: ffffffff815b76c2 R09: fffffbfff224a04d
[  869.161008][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  869.161020][    C1] R13: 1ffff9200003c18c R14: 0000000000000001 R15: 0000000000000001
[  869.161030][    C1] FS:  00007f5de40d86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  869.161045][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  869.161056][    C1] CR2: 000040000006b000 CR3: 000000005ce6f000 CR4: 00000000003506e0
[  869.161071][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  869.161081][    C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  869.161091][    C1] Call Trace:
[  869.161111][    C1]  <NMI>
[  869.161117][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  869.161140][    C1]  ? read_lock_is_recursive+0x10/0x10
[  869.161172][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  869.161189][    C1]  ? nmi_handle+0x25/0x440
[  869.161222][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  869.161238][    C1]  ? nmi_handle+0x12e/0x440
[  869.161262][    C1]  ? nmi_handle+0x25/0x440
[  869.161288][    C1]  ? pid_task+0x57/0x140
[  869.161307][    C1]  ? default_do_nmi+0x62/0x150
[  869.161325][    C1]  ? exc_nmi+0xa8/0x100
[  869.161341][    C1]  ? end_repeat_nmi+0x16/0x31
[  869.161366][    C1]  ? pid_task+0x22/0x140
[  869.161387][    C1]  ? pid_task+0x57/0x140
[  869.161408][    C1]  ? pid_task+0x57/0x140
[  869.161429][    C1]  ? pid_task+0x57/0x140
[  869.161449][    C1]  </NMI>
[  869.161453][    C1]  <IRQ>
[  869.161459][    C1]  send_sigqueue+0x1c5/0x720
[  869.161484][    C1]  ? send_sigqueue+0x107/0x720
[  869.161509][    C1]  ? sigqueue_free+0x1e0/0x1e0
[  869.161535][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  869.161561][    C1]  posix_timer_fn+0x186/0x390
[  869.161582][    C1]  ? common_timer_wait_running+0x10/0x10
[  869.161602][    C1]  __hrtimer_run_queues+0x5e5/0xe50
[  869.161632][    C1]  ? hrtimer_interrupt+0x980/0x980
[  869.161653][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  869.161680][    C1]  hrtimer_interrupt+0x392/0x980
[  869.161712][    C1]  __sysvec_apic_timer_interrupt+0x158/0x5b0
[  869.161738][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  869.161759][    C1]  </IRQ>
[  869.161763][    C1]  <TASK>
[  869.161769][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  869.161786][    C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40
[  869.161810][    C1] Code: a1 95 f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 87 ad f6 48 89 df e8 86 c5 ae f6 e8 11 1d d4 f6 fb bf 01 00 00 00 <e8> 76 4f a1 f6 65 8b 05 17 2f 45 75 85 c0 74 02 5b c3 e8 c4 52 43
[  869.161823][    C1] RSP: 0018:ffffc9000c967b30 EFLAGS: 00000286
[  869.161837][    C1] RAX: a65fe3a1ae80d900 RBX: ffff88802f89b780 RCX: ffffffff97357103
[  869.161849][    C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: 0000000000000001
[  869.161861][    C1] RBP: ffffc9000c967c70 R08: dffffc0000000000 R09: ffffed1005f136f1
[  869.161874][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11005f13783
[  869.161885][    C1] R13: 000000001c000004 R14: 0000000000000021 R15: ffff88802f89bc18
[  869.161905][    C1]  get_signal+0x154b/0x17d0
[  869.161938][    C1]  ? ptrace_notify+0x370/0x370
[  869.161966][    C1]  arch_do_signal_or_restart+0xb0/0x1a10
[  869.161987][    C1]  ? __might_fault+0xa1/0x110
[  869.162009][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  869.162037][    C1]  ? do_sigaltstack+0x3f3/0x610
[  869.162058][    C1]  ? get_sigframe_size+0x10/0x10
[  869.162076][    C1]  ? restore_altstack+0x107/0x150
[  869.162095][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  869.162129][    C1]  ? exit_to_user_mode_loop+0x39/0x100
[  869.162147][    C1]  exit_to_user_mode_loop+0x6a/0x100
[  869.162163][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[  869.162181][    C1]  syscall_exit_to_user_mode+0x60/0x270
[  869.162203][    C1]  do_syscall_64+0x47/0xb0
[  869.162218][    C1]  ? clear_bhb_loop+0x45/0xa0
[  869.162234][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  869.162261][    C1] RIP: 0033:0x7f5de318cde7
[  869.162279][    C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  869.162292][    C1] RSP: 002b:00007f5de40d8038 EFLAGS: 00000246
[  869.162305][    C1] RAX: 0000000000000113 RBX: 00007f5de33a5fa0 RCX: 00007f5de318cde9
[  869.162316][    C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004
[  869.162325][    C1] RBP: 00007f5de320e2a0 R08: 0000000008000f28 R09: 0000000000000000
[  869.162336][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  869.162346][    C1] R13: 0000000000000000 R14: 00007f5de33a5fa0 R15: 00007ffed140d938
[  869.162371][    C1]  </TASK>
[  869.162866][    C0] CPU: 0 PID: 9696 Comm: syz.5.1046 Not tainted 6.1.128-syzkaller #0
[  869.687904][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  869.697986][    C0] RIP: 0010:lock_acquire+0x26f/0x5a0
[  869.703313][    C0] Code: 2b 00 74 08 4c 89 f7 e8 ff 8b 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
[  869.722948][    C0] RSP: 0018:ffffc9000ca077e0 EFLAGS: 00000206
[  869.729045][    C0] RAX: 0000000000000001 RBX: 1ffff92001940f08 RCX: ffffffff816b5eb2
[  869.737045][    C0] RDX: dffffc0000000000 RSI: ffffffff8b0c14c0 RDI: ffffffff8b5e6980
[  869.745039][    C0] RBP: ffffc9000ca07938 R08: dffffc0000000000 R09: fffffbfff224a053
[  869.753038][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92001940f04
[  869.761031][    C0] R13: dffffc0000000000 R14: ffffc9000ca07840 R15: 0000000000000246
[  869.769037][    C0] FS:  00007f3b4390c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  869.778007][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  869.784627][    C0] CR2: 000000110c389432 CR3: 000000002a1b4000 CR4: 00000000003506f0
[  869.792631][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  869.800631][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  869.808623][    C0] Call Trace:
[  869.811927][    C0]  <IRQ>
[  869.814793][    C0]  ? rcu_dump_cpu_stacks+0x296/0x4f0
[  869.820119][    C0]  ? print_cpu_stall+0x346/0x5f0
[  869.825089][    C0]  ? rcu_sched_clock_irq+0x997/0x1200
[  869.830508][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  869.835384][    C0]  ? hrtimer_run_queues+0x163/0x450
[  869.840613][    C0]  ? acct_account_cputime+0xdd/0x270
[  869.845929][    C0]  ? update_process_times+0x147/0x1b0
[  869.851331][    C0]  ? tick_sched_timer+0x386/0x550
[  869.856382][    C0]  ? tick_setup_sched_timer+0x2f0/0x2f0
[  869.861953][    C0]  ? __hrtimer_run_queues+0x5a7/0xe50
[  869.867369][    C0]  ? hrtimer_interrupt+0x980/0x980
[  869.872512][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  869.878622][    C0]  ? hrtimer_interrupt+0x392/0x980
[  869.883787][    C0]  ? __sysvec_apic_timer_interrupt+0x158/0x5b0
[  869.889979][    C0]  ? sysvec_apic_timer_interrupt+0x9b/0xc0
[  869.895818][    C0]  </IRQ>
[  869.898766][    C0]  <TASK>
[  869.901717][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  869.907909][    C0]  ? validate_chain+0x112/0x5950
[  869.912875][    C0]  ? lock_acquire+0x26f/0x5a0
[  869.917597][    C0]  ? read_lock_is_recursive+0x10/0x10
[  869.923007][    C0]  ? __might_sleep+0xb0/0xb0
[  869.927617][    C0]  ? __local_bh_enable_ip+0x164/0x1f0
[  869.933031][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  869.938268][    C0]  ? __local_bh_enable_ip+0x164/0x1f0
[  869.943678][    C0]  ? __bpf_trace_softirq+0x10/0x10
[  869.948825][    C0]  ? copy_fpstate_to_sigframe+0x21f/0xda0
[  869.954572][    C0]  ? _local_bh_enable+0xa0/0xa0
[  869.959464][    C0]  ? __might_fault+0xa1/0x110
[  869.964170][    C0]  __might_fault+0xbd/0x110
[  869.968706][    C0]  ? __might_fault+0xa1/0x110
[  869.973416][    C0]  copy_fpstate_to_sigframe+0xb16/0xda0
[  869.979009][    C0]  ? fpregs_set+0x740/0x740
[  869.983544][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  869.988778][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  869.994970][    C0]  ? _raw_spin_unlock_irq+0x25/0x40
[  870.000202][    C0]  ? fpu__alloc_mathframe+0xa6/0x120
[  870.005525][    C0]  get_sigframe+0x378/0x4b0
[  870.010068][    C0]  ? restore_sigcontext+0x700/0x700
[  870.015300][    C0]  ? ptrace_notify+0x370/0x370
[  870.020108][    C0]  arch_do_signal_or_restart+0x4ef/0x1a10
[  870.025856][    C0]  ? __might_fault+0xa1/0x110
[  870.030652][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  870.035722][    C0]  ? do_sigaltstack+0x3f3/0x610
[  870.040610][    C0]  ? get_sigframe_size+0x10/0x10
[  870.045574][    C0]  ? restore_altstack+0x107/0x150
[  870.050635][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  870.056665][    C0]  ? exit_to_user_mode_loop+0x39/0x100
[  870.062151][    C0]  exit_to_user_mode_loop+0x6a/0x100
[  870.067463][    C0]  exit_to_user_mode_prepare+0xb1/0x140
[  870.073037][    C0]  syscall_exit_to_user_mode+0x60/0x270
[  870.078618][    C0]  do_syscall_64+0x47/0xb0
[  870.083059][    C0]  ? clear_bhb_loop+0x45/0xa0
[  870.087764][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  870.093690][    C0] RIP: 0033:0x7f3b42b8cde7
[  870.098132][    C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  870.117773][    C0] RSP: 002b:00007f3b4390c0e8 EFLAGS: 00000246
[  870.123865][    C0] RAX: 00000000000000ca RBX: 00007f3b42da5fa8 RCX: 00007f3b42b8cde9
[  870.131860][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b42da5fa8
[  870.139851][    C0] RBP: 00007f3b42da5fa0 R08: 0000000000000000 R09: 0000000000000000
[  870.147844][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b42da5fac
[  870.155835][    C0] R13: 0000000000000000 R14: 00007fff25be1bf0 R15: 00007fff25be1cd8
[  870.163843][    C0]  </TASK>
[  870.202602][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  870.208979][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  870.258739][ T4336] usb 5-1: device descriptor read/all, error -71
[  870.462976][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1047'.
[  870.581651][ T9711] netlink: 'syz.3.1047': attribute type 1 has an invalid length.
[  870.591808][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'.
SYZFAIL: failed to send rpc
fd=3 want=13400 sent=0 n=-1 (errno 32: Broken pipe)
[  871.728108][ T4252] syz-executor (4252) used greatest stack depth: 20152 bytes left
[  872.492201][ T4304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.572637][ T4304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.646815][ T4304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.710239][ T4304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.838121][ T4304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.906178][ T4304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.989334][ T4304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.073432][ T4304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.246007][ T4304] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.336726][ T4304] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.392605][ T4304] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.499424][ T4304] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.733050][ T4304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.804285][ T4304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.866469][ T4304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  873.942371][ T4304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.130031][ T4304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.196959][ T4304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.264572][ T4304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.348387][ T4304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.648468][ T4304] device hsr_slave_0 left promiscuous mode
[  877.655052][ T4304] device hsr_slave_1 left promiscuous mode
[  877.661859][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  877.669712][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  877.677767][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.685188][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  877.692922][ T4304] device bridge_slave_1 left promiscuous mode
[  877.699418][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.708158][ T4304] device bridge_slave_0 left promiscuous mode
[  877.714377][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.730783][ T4304] device hsr_slave_0 left promiscuous mode
[  877.737503][ T4304] device hsr_slave_1 left promiscuous mode
[  877.743897][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  877.751484][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  877.759307][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.766817][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  877.774440][ T4304] device bridge_slave_1 left promiscuous mode
[  877.781726][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.790008][ T4304] device bridge_slave_0 left promiscuous mode
[  877.796418][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.807742][ T4304] device hsr_slave_0 left promiscuous mode
[  877.814067][ T4304] device hsr_slave_1 left promiscuous mode
[  877.820956][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  877.828653][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  877.844156][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.851889][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  877.859719][ T4304] device bridge_slave_1 left promiscuous mode
[  877.866016][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.874082][ T4304] device bridge_slave_0 left promiscuous mode
[  877.880425][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.891645][ T4304] device hsr_slave_0 left promiscuous mode
[  877.898195][ T4304] device hsr_slave_1 left promiscuous mode
[  877.904529][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  877.912074][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  877.920150][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.927846][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  877.935595][ T4304] device bridge_slave_1 left promiscuous mode
[  877.941847][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.950604][ T4304] device bridge_slave_0 left promiscuous mode
[  877.957213][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.968881][ T4304] device hsr_slave_0 left promiscuous mode
[  877.975179][ T4304] device hsr_slave_1 left promiscuous mode
[  877.981997][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  877.989495][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  877.997962][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  878.005530][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  878.013220][ T4304] device bridge_slave_1 left promiscuous mode
[  878.019516][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.028054][ T4304] device bridge_slave_0 left promiscuous mode
[  878.034258][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.112738][ T4304] device veth1_macvtap left promiscuous mode
[  878.118884][ T4304] device veth0_macvtap left promiscuous mode
[  878.124991][ T4304] device veth1_vlan left promiscuous mode
[  878.131137][ T4304] device veth0_vlan left promiscuous mode
[  878.138920][ T4304] device veth1_macvtap left promiscuous mode
[  878.144958][ T4304] device veth0_macvtap left promiscuous mode
[  878.151139][ T4304] device veth1_vlan left promiscuous mode
[  878.157096][ T4304] device veth0_vlan left promiscuous mode
[  878.165553][ T4304] device veth1_macvtap left promiscuous mode
[  878.172501][ T4304] device veth0_macvtap left promiscuous mode
[  878.180143][ T4304] device veth1_vlan left promiscuous mode
[  878.187353][ T4304] device veth0_vlan left promiscuous mode
[  878.194426][ T4304] device veth1_macvtap left promiscuous mode
[  878.200768][ T4304] device veth0_macvtap left promiscuous mode
[  878.206943][ T4304] device veth1_vlan left promiscuous mode
[  878.212742][ T4304] device veth0_vlan left promiscuous mode
[  878.223747][ T4304] device veth1_macvtap left promiscuous mode
[  878.229870][ T4304] device veth0_macvtap left promiscuous mode
[  878.236412][ T4304] device veth1_vlan left promiscuous mode
[  878.242264][ T4304] device veth0_vlan left promiscuous mode