last executing test programs:

37.415811523s ago: executing program 3 (id=322):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2076)
ppoll(&(0x7f0000001040)=[{r1, 0xfae83c30bf5f6ae}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000200)={0x3, 0x5, 0x0, 0xffffbfff, 0x1c, "9f486d960000000000000100000000a01200"})

37.221597819s ago: executing program 3 (id=324):
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_clone3(0x0, 0x0)

36.984026566s ago: executing program 3 (id=326):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x304030, &(0x7f0000000280)='noblock_validity')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
open(&(0x7f0000000080)='./file2\x00', 0x200, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2a}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48)
io_setup(0x6, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/pm_trace', 0x1a1081, 0x12d)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"})
r3 = syz_open_pts(r1, 0x20800)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r4, &(0x7f0000000240), 0x0}, 0x20)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)

35.89989787s ago: executing program 3 (id=330):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@user_xattr}, {@data_err_ignore}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inlinecrypt}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0xc0000, 0x0, 0x19, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

34.671119048s ago: executing program 3 (id=340):
socket(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote, r2}, 0x14)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB='\x00\b\x00\x00\a'], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

32.601501043s ago: executing program 3 (id=348):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a80)={0x0, &(0x7f00000029c0)=""/189, 0x0, 0xbd, 0x1}, 0x28)

32.172512176s ago: executing program 32 (id=348):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a80)={0x0, &(0x7f00000029c0)=""/189, 0x0, 0xbd, 0x1}, 0x28)

10.756110834s ago: executing program 1 (id=447):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0)
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000070324884c06100001bdb00205f8b771142a45"], 0x2d)
preadv(r1, &(0x7f0000000380), 0x0, 0x40, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

10.512900302s ago: executing program 1 (id=451):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.427480125s ago: executing program 1 (id=452):
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2e, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004080)
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, 0x0, 0x0, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

10.23541132s ago: executing program 4 (id=455):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x20, 0x9, 0x2e, "dad9da4c965740f482d4f527055e1ca3f1520f22ce35cbe7e88fdd44a4d942554e07a7c63d729d705d92d145c82f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0xa, 0x63, {0x63, 0x31, "7f46b5446e63a018b77fac65b041435bbf4045da5b6c8fdd0f3377bd032e075e30f1757c2ba1887cf50452096e34bcb13fd6a2caa777727fd4fb07c4c5511cd64c07ee2573b96749797416f06ad08d898a2e8a69908c1befbf0b9e17954688c991"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x3, 0xee, "a900fb67dd06975234c5b24ab8f23b7d9ff2c529c0762f5192fa5a3bd7f8dd6d770480c4f6e11164368a74ae9332128338a580e5fd20fdf781a9c4d05342a7d6539234d952bdd0c7284f2dd3d0bf812827c1891aebb4e19cf085357634a8e2d8451ba98d23e346c934e742aa22570edb3debf0754c7dbde1bd8aa4f6835b6a60066278a36aae8a06c62a2b21cda1bceee96a32254ebe2d8175fff1cc344fd01c57bbc3c147cd30227ec59c4bdd8c0a25d4f6d86f1f59367836b54b6ee254098e8ce9e616465196eb8dd0ce07e6c9cb9cfb4ad499bd5917d68ee0848990727616c13fb7b059136454d778e5f911a9"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x95}, 0x0, &(0x7f00000002c0)={0x20, 0x81, 0x2, "ec08"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "97"}, 0x0, &(0x7f0000000380)={0x20, 0x84, 0x1, "a6"}, 0x0})

8.703899449s ago: executing program 2 (id=459):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})

8.578828882s ago: executing program 2 (id=460):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
fstat(r0, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8)

7.927240512s ago: executing program 2 (id=461):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r0, 0xee01}, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, 0x0)

6.41206055s ago: executing program 0 (id=462):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.314122043s ago: executing program 2 (id=464):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x40000000, 0x0, 0x0, 0x3, 0xb2c7, 0x3c}, 0x20)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="18a5d3f5ff63696bc769abe20000001c161f6b001072edf9eac2170d3800000000001f9a800000000863297b6b74539a5900a01571368baf0000000400b180"], 0x1c}], 0x1}, 0x0)
connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x4, 0x1}}, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003200000"], 0x50)
close(0x3)
r2 = getpid()
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x7}})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)

6.252131395s ago: executing program 4 (id=465):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)
getdents64(0xffffffffffffffff, 0x0, 0x0)

6.251585965s ago: executing program 1 (id=466):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000040), 0x1, 0x573, &(0x7f0000000ac0)="$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")
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
r2 = dup2(r0, r1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x3, 0x9b76, 0x3, 0x401}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg(r5, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000b00)="d1", 0x1}], 0x1, &(0x7f0000002b80)=ANY=[], 0x98}, 0x20040001)
write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000300)={0xa000201c})
ppoll(&(0x7f00000011c0)=[{r7, 0x7010}], 0x1, &(0x7f00000010c0)={0x0, 0x989680}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000)

6.127930229s ago: executing program 5 (id=467):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r10, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)
sendmsg$nl_route_sched(r5, 0x0, 0x4000004)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)

5.659894393s ago: executing program 0 (id=468):
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./file0\x00', 0x0, &(0x7f0000010680), 0x1, 0x105c5, &(0x7f00000106c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r4, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0xa0582)
ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f00000001c0)={0x3c06, 0x10, [{0xd, 0x1}, {0x0, 0x1}, {0xc}, {0xb, 0x1}, {0x2}, {0x5}, {0x8, 0x1}, {0x9}, {0xe}, {0xb}, {0x7, 0x1}, {0x8, 0x1}, {0xa}, {0x5}, {0x2}, {0xc, 0x1}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)

5.033417393s ago: executing program 5 (id=469):
syz_io_uring_complete(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000f3a31f3cefbf012fbc000d9b296802"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20020000}, 0x8000000)

4.964241235s ago: executing program 2 (id=470):
r0 = socket(0x400000000010, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x80, 0x400e}})

4.928037236s ago: executing program 4 (id=471):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
fstat(r0, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8)

3.077684344s ago: executing program 4 (id=472):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, 0x0, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, 0x0, 0x34)
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10010, &(0x7f0000001cc0)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=r4, @ANYRES8=r4], 0x1, 0x1526, &(0x7f0000000780)="$eJzs3Au4TdXXMPAx5pyLQ9JOcjmsMcdip4NJkuSSkEuSJEmSW0KSJElIbrklIQm5J7knndw6Tjru9/s16eSVJElISDK/53T5e3v7+vzf99/3eb/3jN/zrLPnOGuPsefc46y9117POeebLsNrNKpZtQEzw79C/XbbGwASAGAQAFwDAAEAlMlVJhcgQDaNvf+lBxF/swdnXekZiCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITKzrbPzXytb5t2+6TK8xrJ/6vq//T/vxl9v5Pr/fyfZLrNf3v//x/qnjjTpf+Ym/c/cpP+Zm/Q/c5P+Z27S/8xN+p+5Sf+FyMyu9PXn/w+235+qKz2Py2zBfynvyv70CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTILM75SwwA/D6+0vMSQgghhBBCCCHE38dnvdIzEEIIIYQQQgghxP99CGA0GAggC2SFBMgG2eEqyAFXQ064BmJwLeSC6yA3XA95IC/kg/yQCAWgIIRAYIEhgkJQGOLgPcCNkARFoRgUBwcloCTcBKXgZigNt0AZSE4BuA3KQXmoABXhdqgEd0BlqAJV4U6oBtWhBtSEu6AW3A214R6oA/dCXbgP6sH9UB8egAbwIDSEh6ARPAyN4RFoAk2hGTSHFv+l/BegB7wIPaEX9IY+0Bdegn7QHwbAQBgEL8NgeAWGwKswFIbBcHgNRsDrMBLegFEwGsbAmzAWxsF4mAATYRJMhrdgCrwNU+EdmAbTYQbMhFkwG+bAuzAX3oN58D4kI8B8WAALYREshg8hBZZAKnwES+FjSINlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATtgFu2FPlb3wCeyDT2E/fAbp8Pl/Mv8s/DG/KwICKlRo0GAWzIIJmIDZMTvmwByYE3NiDGOYC3NhbsyNeTAP5sN8mIiJWBALIiEhI2MhLIRxjGMRLIJJmITFsBg6dFgSS2IpvBlLY2ksg2WwLJbFclgey2NFrIiVsBJWxspY9bYFAFgNa2ANvAvvwruxNtbGOlgH62JdrIf1sD7WxwbYABtiQ2yEjbAxNsYm2ASbYTNsgS2wJbbEVtgK22AbbIttsR22w/bYHjtgB+yIHbETdsLO2Bm7YBfsit2wG76AL+CL+CL2wmqqD/bFvtgP++EAHIgD8WUcjK/gK/gqDsVhOBxfw9fwdRyJZ3AUjsYxOAYrqXE4Hicgq0k4GSfjFJyCU3EqTsPpOB1n4iycjXNwDs7F9zDjCEvGD/ADXIALcBEuxsWYgkswFVNxKZ7FNFyGy3EFrsRVuBLX4Fpcg+txA67HTbgJt+AW3IbbcAfuwF24C/fgHvwEP8FP8VMciumYjgfwAB7Eg3gID+FhPIxH8Mi2qwDwGB7D43gcT+BJPIUn8TSexjN4Fs/hOTyP5/ECPpf4VcM9RdcNBZXBKKOyqCwqQSWo7Cq7yqFyqJwqp4qpmMqlcqncKrfKo/KofCqfSlSJqqAqqEiRYhWpQqqQiqu4KqKKqCSVpIqpYsopp0qqkqqUKqVKq9KqjLpVlVW3qXKqvGrtKqqKqpJq4yqrKqqqqqqqqeqqhqqpaqpaqpaqrWqrOqqOqqvqqnrqflVf9cEB+KDK6EwjNQwbq+HYRDVVzVRz9To+qlqqkdhKtVZt1ONqNI7Cdqqla6+eUh3UeOyonkn4/YWui3pedVXdVHf1guqhWrmeqpeahn1UXzUT+6n+aoAaqOZidfU+JmMN9aoaqoap4eo1tQhfVyPVG2qUGq3GqDfVWDVOjVcT1EQ1SU1Wb6kp6m01Vb2jpqnpaoaaqWap2WqOelfNVe+peep9law+UPPVArVQLVKL1YcqRS1RqeojtVR9rNLUMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1Ta1Xe1QO9UutVvtUXvVJ2qf+lTtV5+pdPW5ynj9Pqi+UIfUl+qw+kodUV+ro+obdUx9q46rXuqEOqlOqe/VafWDOqPO9jmnflTn1U/qgvpZXVRegUattNZGBzqLzqoTdDadXV+lc+irdU59jY7pa3UufZ3Ora/XeXRenU/n14m6gC6oQ03aataRLqQL67i+QRfRN+okXVQX08W10yV0SX2TLqVv1qX1LbqMvlWX1bfpcrq8rqAr6tt1JX2Hrqyr6Kr6Tl1NV9c1dE19l66l79a19T26jr5X19X36Xr6fl1fP6Ab6Ad1Q/2QbqQf1o31I7qJbqqb6ea6hX5Ut9SP6Va6tW6jH9dt9RO6nX5St9dP6Q76ad1RP6M76Wd1Z/2c7qKf1111N91d/6wvaq976l66t+6j++qXdD/dXw/QA/Ug/bIerF/RQ/Sreqgepofr1/QI/boeqd/Qo/RoPUa/qcfqcXq8nqAn6kl6sn5LT9Fv66n6HT1NT9czdFaYpWfrAb9VmvdP5L/9h/yZOiN/yC+PvkVv1dv0dr1D79S79G69R+/Ve/U+vU/v1/t1uk7XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVwf1yf0Sf2j/l6f1j/oM/qsPqt/1Of1eX3ht+cADBpltDEmMFlMVpNgspns5iqTw1xtcpprTMxca3KZ60xuc73JY/KafCa/STQFTEETGjLWsIlMIVPYxM0Npoi50SSZoqaYKW6cKWFKmptMzCD8K/l/Mb8VM349pk0L08K0NC1NK9PKtDFtTFvT1rQz7Ux70950MB1MR9PRdDKdTGfT2XQxXUxX09V0N91ND9PD9EQwvU1v09e8ZPqZ/maAGWgGmZdNRuEhZogZaoaa4Wa4GWFGmJFmpBllRpmMnWPNWDPejDcTzUQz2Uw2U8wUM9VMNdPMNDPDzDCzzCwzx8wxc81cM8/MM8km2cw3881Cs9AsNotNikkxqSbVLDVLTZpZZpaZFWaFWWVWmTVmjVln1pkNZoPZZDaZNLPVbDXbzXaz0+w0u81us9fsNfvMPrPf7DfpJt0cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMcXPcnDAnzClzypw2p80Zc8acM+fMeXPeXDAXzEVzMeO0L1CBCkxggixBliAhSAiyB9mDHEGOIGeQM4gFsSBXkCvIHVwf5AnyBvmC/EFiUCAoGIQBBTbgIAoKBYWDeHBDUCS4MUgKigbFguKBC0oEJYObglLBzUHp4JagTHBrUDa4LSgXlA8qBBWD24NKwR1B5aBKUDW4M6gWVA9qBDWDu4Jawd1B7eCeoE5wb1A3uC+oF9wf1A8eCBoEDwYNg4eCRsHDQePgkaBJ0DRoFjQPWvyt9b0/k/cx1zPsFWaFPmHf8KWwX9g/HBAODAeFL4eDw1fCIeGr4dBwWDg8fC0cEb4ejgzfCEeFo8Mx4Zvh2HBcOD6cEE4MJ4WTw7fCKeHb4dTwnXBaOD2cEc4MZ4Wzwznhu+Hc8L1wXvh+mBx+EM4PF4QLw0Xh4vDDMCVcEqaGH4VLw4/DtHBZuDxcEa4MV4WrwzXh2nBduD7cEG4MN4Wbwy3h1nBbuD3cEe4Md4W7wz3h3vCTcF/4abg//CxMDz8PD4S/v+19GR4OvwqPhF+HR8NvwmPht+Hx8LvwRHgyPBV+H54OfwjPhGfDc+GP4fnwp/BC+HN4MfQZJ/cZb+9kyFAWykIJlEDZKTvloByUk3JSjGKUi3JRbspNeSgP5aN8lEiJVJAKUgYmpkJUiOIUpyJUhJIoiYpRMXLkqCSVpFJUikpTaSpDZagslaVyVI4qUAW6nW6nO+gOqkJV6E66k6pTdapJNakW1aLaVJvqUB2qS3WpHtWj+lSfGlADakgNqRE1osbUmJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaXu1J16UA/qST2pN/WmvtSX+lE/GkADaBANosE0mIbQEBpKQ2k4DacRNIJG0kgaRaNpDL1JY2kcjacJNJEm0WSaTFNoCk2lqTSNptEMmkGzaBbNoTk0l+bSPJpHyZRM82k+LaSFtJgWUwqlUCql0lJaSmmURstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22k77aSdtJt2017aS/toH+2n/ZRO6XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kTwl2Gw2u73K5rBX25z2Gvsf43w2v020BWxBG9o8Nu8fYrLWJtmitpgtbp0tYUvam/4Ul7PlbQVb0d5uK9k7bOXfYoDf41prd/76i+j2XlvT3mVr2bttbXuPrWPvtXXtfbaefdjWt4/YBrapbWib20b2YdvYPmKb2Ka2mW1u29onbDv7pG1vn7Id7NN/ilPsErvWrrPr7Qa7z35qz9kf7VH7jT1vf7I9bS87yL5sB9tX7BD7qh1qh/0pHmPftGPtODveTrAT7aQ/xTPsTDvLzrZz7Lt2rn3vT/Fi+6FNtql2vl1gF9pFv8QZc0q1H9ml9mObZpfZ5XaFXWlX2dV2zT/musJuspvtFrvXfmK32x12p91ld9s9v8QZ69hvP7Pp9nN7xH5tD9ov7CF7zB62X/0SZ6zvmP3WHrff2RP2pD1lv7en7Q/2jD37y/oz1v69/dletN4CIyvWbDjgLJyVEzgbZ+erOAdfzTn5Go7xtZyLr+PcfD3n4bycj/NzIhfgghwysWXmiAtxYY7zDVyEb+QkLsrFuDg7LsEl+SYuxTdzac44e72Vy/JtXI7LcwWuyLdzJb6DK3MVrsp3cjWuzjW4Jt/Ftfhurs33cB2+l+vyfVyP7+f6/AA34Ae5IT/EjfhhbsyPcBNuys24ObfgR7klP8atuDW34ce5LT/B7fhJbs9PcQd+mjvyM9yJn+XO/Bx34ee5K3fj7vwC9+AXuSf34t7ch/vyS9yP+/MAHsiD+GUezK/wEH6Vh/IwHs6v8Qh+nUfyGzyKR/MYfpPH8jgezxN4Ik/iyfwWT+G3eSq/w9N4Os/gmTyLZ/Mcfpfn8ns8j9/nZP6A5/MCXsiLeDF/yCm8hFP5I17KH3MaL+PlvIJX8ipezWt4La/j9byBN/Im3sxbeCtv4+28g5F38W7ew3v5E97Hn/J+/ozT+XM+wP/GB/kLPsRf8mH+io/w13yUv+Fj/C0f5+/4BJ/kU/w9n+Yf+Ayf5XP8I5/nn/gC/8wX2TNEGKlIRyYKoixR1ighyhZlj66KckRXRzmja6JYdG2UK7ouyh1dH+WJ8kb5ovxRYlQgKhiFEUU24iiKCkWFo3h0Q1QkujFKiopGxaLikYtKRCWjm6JS0c1R6eiWqEx0a1Q2ui0qF5WPHr63YnR7VCm6I6ocVYmqRndG1aLqUY2oZnRXVCu6O6od3RPVie6NSkf3RfWi+6P60QNRA3gwahg9FDWKHo4aR49ETaKmUbOoedQiejRqGT0WtYpaR22ix6O20RNRu+jJqH30VNQhevqy+3tHfaK+0UvRS5H39+iF8UXxxfEP4ynxJfHU+EfxpfGP42nxZfHl8RXxlfFV8dXxNfG18XXx9fEN8Y3xTfHN8S1x72tmBYdOOe2MC1wWl9UluGwuu7vK5XBXu5zuGhdz17pc7jqX213v8ri8Lp/L7xJdAVfQhY6cdewiV8gVdnF3gyvibnRJrqgr5oo750q4kq65a+FauJbuMdfKtXZt3OPucfeEe8I96Z50T7kO7mnX0T3jOrlnXWf3nHvOPe+6um6uu3vB9XAvup6ul+vteru+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6im+wmuyluipvqprppbpqb4Wa4WW6Wm+PmuLlurpvn5rnkpGQ33813C91Ct9gtdikuxaW6VLfULXVpLs0td8vdSrfSrXar3Vq31q13691Gt9FtdpvdVrfVbXfb3U630+12u91et9ftc/vcfrffpbt0d8AdOOfdQXfIfekOu6/cEfe1O+q+ccfct+64+86dcCfdKfe9O+1+cGfcWXfO/ejOu5/cBfezu+i8mxx7KzYl9nZsauyd2LTY9NiM2MzYrNjs2JzYu7G5sfdi82Lvx5JjH8TmxxbEFsYWxRbHPoylxJbEUmMfxZbGPo6lxZbFlsdWxFbGVsW8L7A98oV8YR/3N/gi/kaf5Iv6Yr64d76EL+lv8qX8zb60v8WX8bf6sv42X86X9xX8I76Jb+qb+ea+hX/Ut/SP+Va+tW/jH/dt/RO+nX/St/dP+Q7+ad/RP+M7+Wd9Z/+c7+Kf9119N9/dv+B7+Bd9T699b9/H9/Uv+X6+vx/gB/pB/mU/2L/ih/hX/VA/zA/3r/kR/nU/0r/hR/nRfox/04/14/x4P8FP9JP8ZP+Wn+Lf9lP9O36an+5n+Jl+lp/t5/h3/Vz/np/n3/fJ/gM/3y/wC/0iv9h/6FP8Ep/qP/JL/cc+zS/zy/0KDwmr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w+/0u/xuv8fv9Z/4ff5Tv99/5tP95/6A/zd/0H/hD/kv/WH/lT/iv/ZH/Tf+mP/WH/ff+RP+pD/lv/en/Q/+jD/rz/kf/Xn/k7/gf/YX5W/WhBBCCCH+Kfoy+/v8IVL/+Kp++05fALh6R/7D/7Hmxjy/jvurxLYxAHiqV5cHf9+qVevdu/dv903TEBReAACxS/lZ4FK8DNrAE9AeWkOp/+38+qtu5/ky9eO3AmT/dzkJcCm+VP/mv6g/Lvmy9RcAJBW+lJMNLsWX6pf+U+3gl/p5W16mfrYvJgO0+nd5OeBSfKl+SXgMnob2f7inEEIIIYQQQgjxq/6qQqfLfb7N+HyeaC7lZIVL8eU+nwshhBBCCCGEEOLKe7Zb9ycfbd++dae/GFT5610yyCyDLP89pnElBpc9QP4zA4ArvZx/DBDgl0t8f32fK/3KJIQQQgghhPi7XTrpv9IzEUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghMq//F/9y7EqvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/lcAAAD//98IJ/w=")
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)

1.668085388s ago: executing program 5 (id=473):
r0 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x6000000d})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x1d})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001980), 0x0, 0x20002040)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0})

1.450971795s ago: executing program 5 (id=474):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfbfffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)

1.450376345s ago: executing program 4 (id=475):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="adaa00000000000071101500000000009500000000000000d7e49510a9bfb9d2212dabccc924ecfe6ea16bc0ab84f77983b0527ddff4c9623b1a0de31179f7d24d5408da"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x6000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

1.311011529s ago: executing program 5 (id=476):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x80, 0x90000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.012091538s ago: executing program 5 (id=477):
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2e, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004080)
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, 0x0, 0x0, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

694.443448ms ago: executing program 1 (id=478):
r0 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0)
close(r0)

692.119128ms ago: executing program 0 (id=479):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20)

645.88136ms ago: executing program 2 (id=480):
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]})
syz_clone(0xbc4040, 0x0, 0x0, 0x0, 0x0, 0x0)

504.166564ms ago: executing program 1 (id=481):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB="756e695f786c6174653d302c636f6465706167653d313235352c726f6469722c756e695f786c6174653d312c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d342c666c7573682c73686f72746e616d653d6c6f7765722c696f636861727365743d63703933f8361083362c696f636861727365743d63703737352c726f6469722c757466383d302c696f636861727365743d69736f383835392d362c004b58f96793fcf05028de1c3818cd41bae7c5d27f4ecb7c7753ebe24bb37fe4ea664ff0d1738f687deaaa9a7dd0841a1dfc7f9e5c96ff5268a2570ee9e1b35c8e86bda6ddab846e433d1df67e8670340cbb3c4e481a116583336a7db5ddc78e28ae45e64e388ffdc88562d6a96da9e47d964d50d186fb6008e3f3fa56954005346e12a877a5df05fdead216605e066a7a2b8e5f6a88742344ff8da280c5fed09ca94357e85376359f2c76"], 0x29, 0x351, &(0x7f0000001b40)="$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")
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0)

498.308174ms ago: executing program 0 (id=482):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0)

312.88312ms ago: executing program 4 (id=483):
r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0))
pwrite64(r0, &(0x7f0000000000), 0x0, 0x200980)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000740)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243001600ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000200000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x24000040, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0xfff}, @window], 0x3)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
pwrite64(0xffffffffffffffff, &(0x7f0000000180)="0f3aea15d80c0f3b508b131a51db213b3805d7e361c200c8e698b35204b944fbb8b38274e808772539e1b14faca43a20ce4cdb956662aad2509ac88c4fa45967b932f77f24af8200258372a0647b86f28e93ec323bb9c4575f42996b289c8b0a213b462ce9d020b9e41cada16b208dcbb2c8c976407abae74e7e72270980731d9d58011d5d456bf0c831743c83c1", 0x8e, 0x80000fecc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

208.098794ms ago: executing program 0 (id=484):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2010488, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x1, 0x1539, &(0x7f00000002c0)="$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")
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)

0s ago: executing program 0 (id=485):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xc2)

kernel console output (not intermixed with test programs):

: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.485706][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.494593][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.504694][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.520565][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.532093][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.545922][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.555425][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.565098][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.574388][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.595613][ T4288] device veth0_macvtap entered promiscuous mode
[   68.613923][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.637576][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.674681][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.688453][ T4288] device veth1_macvtap entered promiscuous mode
[   68.701542][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.711582][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.722103][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.730889][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.762716][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.794545][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.807628][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.818565][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.835216][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.845208][ T4279] device veth0_macvtap entered promiscuous mode
[   68.867155][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.898426][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.912289][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.924539][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.938121][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.952055][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.983855][ T4279] device veth1_macvtap entered promiscuous mode
[   68.994948][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.007284][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.018534][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.028336][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.037558][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.056172][ T4288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.065560][ T4288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.076386][ T4288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.085097][ T4288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.104236][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.115330][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.125483][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.139407][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.150950][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.197757][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.207708][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.217815][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.226975][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.235350][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.243576][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.253711][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.265667][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.275569][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.286079][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.299042][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.310484][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.320180][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.331318][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.334169][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.338985][ T4291] Bluetooth: hci1: command 0x040f tx timeout
[   69.353895][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[   69.355044][ T4291] Bluetooth: hci0: command 0x040f tx timeout
[   69.360273][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[   69.366498][ T4293] Bluetooth: hci4: command 0x040f tx timeout
[   69.380261][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.389535][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.400729][ T4276] device veth0_vlan entered promiscuous mode
[   69.419173][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.427277][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.435827][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.445544][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.454752][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.481490][ T4275] device veth0_vlan entered promiscuous mode
[   69.504241][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.519781][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.561759][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.575883][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.593925][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.610000][ T4276] device veth1_vlan entered promiscuous mode
[   69.617033][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.625937][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.643501][ T4275] device veth1_vlan entered promiscuous mode
[   69.693880][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.702114][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.752945][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.777374][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.789713][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.796547][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.809350][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.825091][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.829810][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.842477][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.855963][ T4276] device veth0_macvtap entered promiscuous mode
[   69.893762][ T4275] device veth0_macvtap entered promiscuous mode
[   69.919650][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.935521][ T4276] device veth1_macvtap entered promiscuous mode
[   69.940030][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.958307][ T4275] device veth1_macvtap entered promiscuous mode
[   69.970777][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.983678][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   69.984580][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.015625][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.024783][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.038221][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.071086][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.092215][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.096752][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.114632][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.125836][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.138298][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.149730][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.160501][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.171956][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.180713][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.191336][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.201195][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.211927][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.223357][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.234804][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.244962][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.255532][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.268532][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.275936][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.285167][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.294105][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.303310][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.329919][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.359451][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.381725][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.392069][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.409188][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.424837][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.441942][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.468485][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.487613][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.501927][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.535604][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.552282][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.562974][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.573309][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.587044][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.604571][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.614734][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.636289][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.646255][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.657181][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.667338][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.678316][ T4323] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.696706][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.714393][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.732907][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.743735][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.789986][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.805722][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.815749][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.836480][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.886752][ T4323] usb 3-1: Using ep0 maxpacket: 16
[   70.917726][ T4323] usb 3-1: config 6 has an invalid interface number: 221 but max is 0
[   70.952738][ T4323] usb 3-1: config 6 has no interface number 0
[   70.982597][ T4323] usb 3-1: config 6 interface 221 has no altsetting 0
[   70.986877][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.011821][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.038039][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.052637][ T4323] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92
[   71.062267][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.070844][ T4323] usb 3-1: Product: syz
[   71.072153][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.081239][ T4323] usb 3-1: Manufacturer: syz
[   71.093466][ T4323] usb 3-1: SerialNumber: syz
[   71.108662][  T128] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   71.140911][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.170790][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.190268][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.208391][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.209649][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.225175][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.245868][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.254568][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.306883][  T128] usb 4-1: Using ep0 maxpacket: 8
[   71.315749][  T128] usb 4-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   71.340432][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[   71.348001][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[   71.362555][ T4362] loop2: detected capacity change from 0 to 7
[   71.376428][  T128] usb 4-1: config 0 interface 0 has no altsetting 0
[   71.384282][  T128] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[   71.403904][ T4362] Dev loop2: unable to read RDB block 7
[   71.413705][  T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.419240][ T4362]  loop2: AHDI p1 p2 p3
[   71.422235][ T4293] Bluetooth: hci2: command 0x0419 tx timeout
[   71.426038][ T4362] loop2: partition table partially beyond EOD, 
[   71.432906][ T4291] Bluetooth: hci3: command 0x0419 tx timeout
[   71.432927][ T4280] Bluetooth: hci1: command 0x0419 tx timeout
[   71.439406][ T4291] Bluetooth: hci4: command 0x0419 tx timeout
[   71.445753][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[   71.463723][ T4362] truncated
[   71.488687][  T128] usb 4-1: config 0 descriptor??
[   71.488866][ T4362] loop2: p1 start 1601398130 is beyond EOD, truncated
[   71.501624][ T4362] loop2: p2 start 1702059890 is beyond EOD, truncated
[   71.533787][ T4323] f81534a_ctrl: probe of 3-1:6.221 failed with error -71
[   71.593823][ T4323] usb 3-1: USB disconnect, device number 2
[   71.730615][ T4387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'.
[   71.740950][ T1193] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   71.867153][ T4387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'.
[   71.925139][  T128] cherry 0003:046A:0023.0001: unknown main item tag 0x7
[   71.934205][ T1193] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   71.944437][  T128] cherry 0003:046A:0023.0001: item fetching failed at offset 12/41
[   71.946972][ T1193] usb 5-1: config 0 has no interface number 0
[   71.956402][  T128] cherry: probe of 0003:046A:0023.0001 failed with error -22
[   71.975923][ T1193] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   71.993225][ T1193] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.004275][ T1193] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.024264][ T1193] usb 5-1: config 0 interface 1 has no altsetting 0
[   72.031792][ T1193] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   72.047611][ T1193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.059992][ T4387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'.
[   72.066620][ T1193] usb 5-1: config 0 descriptor??
[   72.154239][ T4320] usb 4-1: USB disconnect, device number 2
[   72.232171][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'.
[   72.244173][ T4398] device hsr_slave_0 left promiscuous mode
[   72.264732][ T4398] device hsr_slave_1 left promiscuous mode
[   72.529039][ T4410] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.15'.
[   72.691712][ T1193] uclogic 0003:145F:0212.0002: pen parameters not found
[   72.705779][ T1193] uclogic 0003:145F:0212.0002: interface is invalid, ignoring
[   72.726493][ T1193] usb 5-1: USB disconnect, device number 2
[   73.021135][ T4417] bridge0: port 3(macvlan2) entered blocking state
[   73.066325][ T4417] bridge0: port 3(macvlan2) entered disabled state
[   73.134397][ T4417] device macvlan2 entered promiscuous mode
[   73.174814][ T4417] bridge0: port 3(macvlan2) entered blocking state
[   73.181885][ T4417] bridge0: port 3(macvlan2) entered forwarding state
[   73.224561][ T4417] Zero length message leads to an empty skb
[   74.737024][ T4440] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[   75.417041][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'.
[   76.326211][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   76.496209][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   76.596256][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   76.746364][ T4373] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   76.946346][ T4373] usb 4-1: Using ep0 maxpacket: 32
[   76.963078][ T4373] usb 4-1: unable to get BOS descriptor or descriptor too short
[   77.008483][ T4373] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   77.085402][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.110218][ T4373] usb 4-1: Product: syz
[   77.115003][ T4373] usb 4-1: Manufacturer: syz
[   77.120047][ T4373] usb 4-1: SerialNumber: syz
[   77.565058][ T4373] usb 4-1: unit 0 not found!
[   77.979374][ T4373] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[   78.011580][ T4373] usb 4-1: unit 0 not found!
[   78.033527][ T4373] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[   78.105324][ T4373] usb 4-1: unit 0 not found!
[   78.313544][ T4373] snd-usb-audio: probe of 4-1:1.2 failed with error -22
[   78.339961][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.362278][ T4373] usb 4-1: USB disconnect, device number 3
[   78.570301][ T4508] bridge0: port 3(macvlan2) entered blocking state
[   78.595376][ T4508] bridge0: port 3(macvlan2) entered disabled state
[   78.669466][ T4508] device macvlan2 entered promiscuous mode
[   78.705808][ T4508] bridge0: port 3(macvlan2) entered blocking state
[   78.712526][ T4508] bridge0: port 3(macvlan2) entered forwarding state
[   78.770642][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'.
[   78.916487][  T128] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   79.116259][  T128] usb 1-1: Using ep0 maxpacket: 32
[   79.123561][  T128] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   79.129618][ T4537] =======================================================
[   79.129618][ T4537] WARNING: The mand mount option has been deprecated and
[   79.129618][ T4537]          and is ignored by this kernel. Remove the mand
[   79.129618][ T4537]          option from the mount to silence this warning.
[   79.129618][ T4537] =======================================================
[   79.146562][  T128] usb 1-1: config 0 has no interface number 0
[   79.198200][  T128] usb 1-1: config 0 interface 184 has no altsetting 0
[   79.230927][  T128] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   79.279721][  T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.296241][  T128] usb 1-1: Product: syz
[   79.300548][  T128] usb 1-1: Manufacturer: syz
[   79.305164][  T128] usb 1-1: SerialNumber: syz
[   79.339121][  T128] usb 1-1: config 0 descriptor??
[   79.366746][  T128] smsc75xx v1.0.0
[   79.626213][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   80.306261][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[   80.316265][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[   80.326245][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   80.336244][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   80.346243][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   80.356234][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.056837][  T128] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   81.165421][  T128] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   81.265160][  T128] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   81.392957][  T128] smsc75xx: probe of 1-1:0.184 failed with error -71
[   81.511742][  T128] usb 1-1: USB disconnect, device number 2
[   85.638667][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[   86.159236][ T4660] bridge0: port 3(macvlan2) entered blocking state
[   86.209386][ T4660] bridge0: port 3(macvlan2) entered disabled state
[   86.232915][ T4660] device macvlan2 entered promiscuous mode
[   86.267732][ T4662] loop0: detected capacity change from 0 to 1024
[   86.292699][ T4662] EXT4-fs: inline encryption not supported
[   86.316988][ T4660] bridge0: port 3(macvlan2) entered blocking state
[   86.323707][ T4660] bridge0: port 3(macvlan2) entered forwarding state
[   86.414547][ T4662] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   86.614602][ T4276] EXT4-fs (loop0): unmounting filesystem.
[   86.698389][   T27] cfg80211: failed to load regulatory.db
[   86.855576][   T26] audit: type=1804 audit(1781748299.399:2): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.85" name="/newroot/20/file0" dev="fuse" ino=1 res=1 errno=0
[   86.856394][   T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   87.096392][   T27] usb 5-1: Using ep0 maxpacket: 16
[   87.123805][   T27] usb 5-1: config 6 has an invalid interface number: 221 but max is 0
[   87.153744][   T27] usb 5-1: config 6 has no interface number 0
[   87.180161][   T27] usb 5-1: config 6 interface 221 has no altsetting 0
[   87.239629][   T27] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92
[   87.297739][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.351211][   T27] usb 5-1: Product: syz
[   87.375640][   T27] usb 5-1: Manufacturer: syz
[   87.410022][   T27] usb 5-1: SerialNumber: syz
[   87.691371][ T4674] loop2: detected capacity change from 0 to 7
[   87.721203][ T4674] Dev loop2: unable to read RDB block 7
[   87.732115][ T4674]  loop2: AHDI p1 p2 p3
[   87.742007][ T4674] loop2: partition table partially beyond EOD, truncated
[   87.750357][ T4674] loop2: p1 start 1601398130 is beyond EOD, truncated
[   87.757795][ T4674] loop2: p2 start 1702059890 is beyond EOD, truncated
[   87.790664][   T27] f81534a_ctrl: probe of 5-1:6.221 failed with error -71
[   87.799299][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.844733][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'.
[   87.875856][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   87.967246][   T27] usb 5-1: USB disconnect, device number 3
[   88.008534][ T4694] loop3: detected capacity change from 0 to 512
[   88.018518][ T4694] EXT4-fs: Ignoring removed orlov option
[   88.114428][ T4695] loop0: detected capacity change from 0 to 16
[   88.636897][ T4354] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.670978][ T4694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   88.712881][ T4694] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.781152][ T4694] process 'syz.3.90' launched './file1' with NULL argv: empty string added
[   88.801953][ T4694] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:337: inode #15: comm syz.3.90: verity file corrupted; can't find descriptor
[   88.824822][ T4694] EXT4-fs (loop3): Remounting filesystem read-only
[   88.831922][ T4694] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[   89.034368][ T4279] EXT4-fs (loop3): unmounting filesystem.
[   89.227828][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'.
[   89.410613][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   89.855418][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.079516][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.177826][ T4719] loop2: detected capacity change from 0 to 512
[   90.346139][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.357437][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.369330][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.380016][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.398658][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.409679][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.419729][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.422255][ T4719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[   90.430299][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.433264][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.485097][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.497092][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.509332][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.519522][ T4719] System zones: 1-12
[   90.540408][ T4719] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.98: Directory hole found for htree index block 0
[   90.554575][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.566452][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.577915][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.590008][ T4719] EXT4-fs (loop2): Remounting filesystem read-only
[   90.597784][ T4719] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[   90.606105][ T4719] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.98: Directory hole found for htree index block 0
[   90.618426][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.630087][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'.
[   90.639273][ T4719] EXT4-fs (loop2): Remounting filesystem read-only
[   90.652677][ T4719] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   90.679013][ T4719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   90.736690][ T4323] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   90.798054][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   90.848623][ T4733] device hsr_slave_0 left promiscuous mode
[   90.875141][ T4733] device hsr_slave_1 left promiscuous mode
[   90.948298][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   90.961406][ T4716] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.98: Directory hole found for htree index block 0
[   90.975775][ T4323] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[   90.985899][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   91.003433][ T4716] EXT4-fs (loop2): Remounting filesystem read-only
[   91.019054][ T4323] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[   91.037634][ T4323] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[   91.047221][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.071558][ T4323] usb 4-1: config 0 descriptor??
[   91.211694][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'.
[   91.303962][ T4751] loop1: detected capacity change from 0 to 256
[   91.313373][ T4751] exfat: Deprecated parameter 'utf8'
[   91.318814][ T4751] exfat: Deprecated parameter 'namecase'
[   91.324576][ T4751] exfat: Deprecated parameter 'namecase'
[   91.330316][ T4751] exfat: Deprecated parameter 'utf8'
[   91.366451][ T4751] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   91.406305][ T4272] EXT4-fs (loop2): unmounting filesystem.
[   91.449857][ T4323] hdpvr 4-1:0.0: firmware version 0xd9 dated �L�W@���'^��R"�5����D��BUN��=r�p]��E�/
[   91.461599][ T4323] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[   91.568355][ T1193] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   91.886553][ T1193] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   91.946112][ T4323] hdpvr 4-1:0.0: Could not setup controls
[   91.972181][ T4323] hdpvr 4-1:0.0: registering videodev failed
[   91.985258][    T7] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   92.004765][ T4323] hdpvr: probe of 4-1:0.0 failed with error -71
[   92.048863][ T4323] usb 4-1: USB disconnect, device number 4
[   92.086357][ T1193] usb 1-1: Using ep0 maxpacket: 16
[   92.095567][ T1193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.114903][ T1193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   92.142002][ T1193] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   92.856600][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   92.915271][ T1193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.937471][ T1193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   92.946744][ T1193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   92.955477][ T1193] usb 1-1: Manufacturer: syz
[   92.962242][ T1193] usb 1-1: config 0 descriptor??
[   93.221935][ T4759] loop4: detected capacity change from 0 to 40427
[   93.249176][ T4759] F2FS-fs (loop4): invalid crc value
[   93.289463][ T4759] F2FS-fs (loop4): Found nat_bits in checkpoint
[   93.337251][   T26] audit: type=1804 audit(1781748305.879:3): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.113" name="/newroot/27/file0" dev="fuse" ino=1 res=1 errno=0
[   93.393639][ T4759] F2FS-fs (loop4): Start checkpoint disabled!
[   93.447158][ T4759] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   93.594484][ T4783] loop2: detected capacity change from 0 to 1024
[   93.670455][ T4783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   93.705274][ T4561] kworker/u4:8: attempt to access beyond end of device
[   93.705274][ T4561] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   93.725578][ T4783] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.852883][ T4781] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   93.878127][ T4781] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   93.907168][ T4781] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   93.937040][ T4781] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   93.956846][ T4781] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   93.991531][ T4783] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   94.011152][ T4781] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   94.017388][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'.
[   94.025877][ T4781] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   94.047137][ T4791] device hsr_slave_0 left promiscuous mode
[   94.053297][ T4781] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.118: lblock 0 mapped to illegal pblock 0 (length 1)
[   94.068004][ T4791] device hsr_slave_1 left promiscuous mode
[   94.079555][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'.
[   94.123162][ T4272] EXT4-fs (loop2): unmounting filesystem.
[   94.506103][ T4323] usb 1-1: USB disconnect, device number 3
[   94.974343][ T4806] loop1: detected capacity change from 0 to 1024
[   94.986412][ T4806] EXT4-fs: Ignoring removed orlov option
[   96.696197][    C0] sched: RT throttling activated
[   96.700102][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   96.718806][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   96.984238][ T4806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   97.166684][ T4282] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   98.139029][ T4288] EXT4-fs (loop1): unmounting filesystem.
[   98.440775][ T4282] usb 5-1: Using ep0 maxpacket: 16
[   98.453074][ T4282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.482060][ T4282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   98.512493][ T4282] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   98.543982][ T4282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.576604][ T4282] usb 5-1: config 0 descriptor??
[   98.730948][ T4830] loop0: detected capacity change from 0 to 512
[   98.755573][ T4830] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   98.770144][ T4830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   98.785803][ T4830] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   98.796802][ T4830] EXT4-fs (loop0): orphan cleanup on readonly fs
[   98.806928][ T4830] EXT4-fs (loop0): 1 orphan inode deleted
[   98.812702][ T4830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   98.857847][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   98.882812][ T4276] EXT4-fs (loop0): unmounting filesystem.
[   98.886498][ T4324] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   99.059293][ T4282] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   99.076333][ T4324] usb 4-1: Using ep0 maxpacket: 16
[   99.089876][ T4324] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   99.173058][ T4282] HID 045e:07da: Invalid code 65791 type 1
[   99.207803][ T4324] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[   99.236932][ T4282] HID 045e:07da: Invalid code 768 type 1
[   99.275957][ T4282] HID 045e:07da: Invalid code 769 type 1
[   99.291839][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.379381][ T4282] HID 045e:07da: Invalid code 770 type 1
[   99.432752][ T4282] HID 045e:07da: Invalid code 771 type 1
[   99.495781][ T4324] usb 4-1: config 0 descriptor??
[   99.507105][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   99.541009][ T4282] HID 045e:07da: Invalid code 772 type 1
[   99.612463][ T4282] HID 045e:07da: Invalid code 773 type 1
[   99.640071][ T4324] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   99.673304][ T4282] HID 045e:07da: Invalid code 774 type 1
[   99.744027][ T4282] HID 045e:07da: Invalid code 775 type 1
[   99.816403][ T4282] HID 045e:07da: Invalid code 776 type 1
[   99.835077][ T4282] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input5
[   99.953932][ T4282] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  100.063094][ T1193] usb 5-1: USB disconnect, device number 4
[  100.229085][ T4839] fido_id[4839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  100.576414][ T4282] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.644215][ T4828] loop2: detected capacity change from 0 to 131072
[  100.656156][ T4828] F2FS-fs (loop2): Test dummy encryption mode enabled
[  100.664839][ T4828] F2FS-fs (loop2): invalid crc value
[  100.732182][ T4828] F2FS-fs (loop2): Found nat_bits in checkpoint
[  100.868009][ T4282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  100.879551][ T4282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  100.890304][ T4282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  100.900542][ T4282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  100.910822][ T4282] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  100.920394][ T4282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.992125][ T4856] netlink: 'syz.4.139': attribute type 3 has an invalid length.
[  101.129967][ T4282] usb 2-1: config 0 descriptor??
[  101.210506][ T4828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  101.505937][ T4282] hdpvr 2-1:0.0: firmware version 0xd9 dated �L�W@���'^��R"�5����D��BUN��=r�p]��E�/
[  101.522248][ T4282] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  101.653418][ T4320] usb 4-1: USB disconnect, device number 5
[  101.686329][   T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  101.720161][ T4828] fscrypt (loop2, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  101.876512][   T27] usb 5-1: Using ep0 maxpacket: 8
[  101.884879][   T27] usb 5-1: unable to get BOS descriptor or descriptor too short
[  101.928560][ T4282] hdpvr 2-1:0.0: Could not setup controls
[  101.939295][   T27] usb 5-1: string descriptor 0 read error: -22
[  101.960688][ T4282] hdpvr 2-1:0.0: registering videodev failed
[  101.967733][   T27] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40
[  101.989835][ T4282] hdpvr: probe of 2-1:0.0 failed with error -71
[  101.997064][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.027014][ T4282] usb 2-1: USB disconnect, device number 2
[  102.036137][   T27] usb 5-1: Invalid firmware size=105.
[  102.056411][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  102.063224][   T27] usb 5-1: Invalid firmware size=105.
[  102.074432][   T27] usb 5-1: Invalid firmware size=105.
[  102.229767][ T4873] loop3: detected capacity change from 0 to 8192
[  103.622836][ T4886] netlink: 292 bytes leftover after parsing attributes in process `syz.0.149'.
[  103.638353][ T4886] netlink: 292 bytes leftover after parsing attributes in process `syz.0.149'.
[  103.731887][    T7] usb 5-1: USB disconnect, device number 5
[  103.911887][ T4891] bridge0: port 3(macvlan2) entered blocking state
[  103.919928][ T4891] bridge0: port 3(macvlan2) entered disabled state
[  103.937427][ T4891] device macvlan2 entered promiscuous mode
[  103.947171][ T4891] bridge0: port 3(macvlan2) entered blocking state
[  103.953851][ T4891] bridge0: port 3(macvlan2) entered forwarding state
[  103.958297][ T4876] loop3: detected capacity change from 0 to 40427
[  104.009131][ T4876] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64)
[  104.021108][ T4876] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  104.028631][ T4899] fuse: Bad value for 'group_id'
[  104.043738][ T4876] F2FS-fs (loop3): invalid crc value
[  104.122883][ T4876] F2FS-fs (loop3): Found nat_bits in checkpoint
[  104.266607][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  104.317835][ T4876] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  104.325087][ T4876] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  104.466711][    T7] usb 5-1: Using ep0 maxpacket: 16
[  104.479668][    T7] usb 5-1: config 6 has an invalid interface number: 221 but max is 0
[  104.499286][    T7] usb 5-1: config 6 has no interface number 0
[  104.513251][    T7] usb 5-1: config 6 interface 221 has no altsetting 0
[  104.545708][    T7] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92
[  104.555650][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.571546][    T7] usb 5-1: Product: syz
[  104.575755][    T7] usb 5-1: Manufacturer: syz
[  104.580888][    T7] usb 5-1: SerialNumber: syz
[  104.591615][ T4279] syz-executor: attempt to access beyond end of device
[  104.591615][ T4279] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  104.822837][ T4893] loop2: detected capacity change from 0 to 7
[  104.840121][ T4893] Dev loop2: unable to read RDB block 7
[  104.845963][ T4893]  loop2: unable to read partition table
[  104.852046][ T4893] loop2: partition table beyond EOD, truncated
[  104.866583][ T4893] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  104.896682][    T7] f81534a_ctrl: probe of 5-1:6.221 failed with error -71
[  104.906495][    T7] usb 5-1: USB disconnect, device number 6
[  105.156307][ T4926] loop1: detected capacity change from 0 to 4096
[  105.205069][ T4926] EXT4-fs: inline encryption not supported
[  105.233474][ T4926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  105.259964][ T4926] EXT4-fs (loop1): Test dummy encryption mode enabled
[  105.283271][ T4926] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  105.297782][ T4926] System zones: 0-5
[  105.323929][ T4926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  105.510263][ T4937] loop0: detected capacity change from 0 to 256
[  105.548178][ T4937] exfat: Deprecated parameter 'utf8'
[  105.564048][ T4937] exfat: Deprecated parameter 'namecase'
[  105.586437][ T4937] exfat: Deprecated parameter 'namecase'
[  105.667643][ T4937] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  107.326259][ T1193] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  107.329069][ T4976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'.
[  107.747541][ T4980] netlink: 'syz.4.172': attribute type 3 has an invalid length.
[  108.156469][ T1193] usb 1-1: Using ep0 maxpacket: 16
[  108.163246][ T4926] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  108.185294][ T1193] usb 1-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config
[  108.262628][ T1193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.324739][ T1193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 35558, setting to 1024
[  108.363263][ T1193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  108.399394][ T1193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.466388][ T1193] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  108.485705][ T1193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  108.509925][ T1193] usb 1-1: Manufacturer: syz
[  108.560621][ T1193] usb 1-1: config 0 descriptor??
[  108.718245][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  108.764247][   T26] audit: type=1326 audit(108.763:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34c19ce59 code=0x7ffc0000
[  108.803390][ T4997] loop2: detected capacity change from 0 to 128
[  108.840351][ T4997] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  108.855449][   T26] audit: type=1326 audit(108.803:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe34c19ce59 code=0x7ffc0000
[  108.895681][ T4997] netlink: 156 bytes leftover after parsing attributes in process `syz.2.178'.
[  108.971285][   T26] audit: type=1326 audit(108.803:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34c19ce59 code=0x7ffc0000
[  109.258629][   T26] audit: type=1326 audit(108.803:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe34c19ce59 code=0x7ffc0000
[  109.286299][ T1193] rc_core: IR keymap rc-hauppauge not found
[  109.443866][   T26] audit: type=1326 audit(108.803:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe34c19cbc2 code=0x7ffc0000
[  109.694581][   T26] audit: type=1326 audit(108.803:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe34c15d68e code=0x7ffc0000
[  109.761508][ T1193] Registered IR keymap rc-empty
[  109.767279][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  109.797727][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  109.832540][ T1193] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  109.841447][   T26] audit: type=1326 audit(108.803:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe34c19cc87 code=0x7ffc0000
[  109.859876][ T1193] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[  109.888563][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  109.897405][    C0] mceusb 1-1:0.0: short-range (0xee) receiver active
[  109.919806][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  109.976849][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  109.999311][ T5008] loop1: detected capacity change from 0 to 512
[  110.026124][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  110.033540][   T26] audit: type=1326 audit(108.803:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe34c15d68e code=0x7ffc0000
[  110.049001][ T5008] EXT4-fs (loop1): Test dummy encryption mode enabled
[  110.071832][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  110.094609][   T26] audit: type=1326 audit(108.803:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe34c19caeb code=0x7ffc0000
[  110.119409][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  110.126131][ T5008] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.183: inode has both inline data and extents flags
[  110.149631][ T5008] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.183: couldn't read orphan inode 15 (err -117)
[  110.167195][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  110.206552][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  110.236678][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  110.248943][   T26] audit: type=1326 audit(108.833:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe34c15d68e code=0x7ffc0000
[  110.263984][ T5014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.184'.
[  110.276386][ T1193] mceusb 1-1:0.0: Error: mce write urb status = -71
[  110.337816][ T1193] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  110.356274][ T1193] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0xee active)
[  110.419565][ T1193] usb 1-1: USB disconnect, device number 4
[  110.436577][ T5008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  110.786723][ T5024] 9pnet_fd: p9_fd_create_tcp (5024): problem connecting socket to 127.0.0.1
[  111.647280][ T5008] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  111.895133][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  113.966393][ T4323] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  114.156338][ T4323] usb 1-1: Using ep0 maxpacket: 32
[  114.164567][ T4323] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  114.176145][ T4323] usb 1-1: config 0 has no interface number 0
[  114.182590][ T4323] usb 1-1: config 0 interface 184 has no altsetting 0
[  114.200814][ T4323] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  114.436449][ T4352] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  114.636503][ T4352] usb 3-1: Using ep0 maxpacket: 16
[  114.666012][ T4352] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  114.771834][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.867657][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.875165][ T4352] usb 3-1: Product: syz
[  114.878111][ T4323] usb 1-1: Product: syz
[  114.884414][ T4323] usb 1-1: Manufacturer: syz
[  114.897503][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'.
[  114.909687][ T4323] usb 1-1: SerialNumber: syz
[  114.913592][ T4352] usb 3-1: Manufacturer: syz
[  114.926302][ T4352] usb 3-1: SerialNumber: syz
[  114.987257][ T4323] usb 1-1: config 0 descriptor??
[  115.018502][ T4323] usb 1-1: can't set config #0, error -71
[  115.044950][ T4323] usb 1-1: USB disconnect, device number 5
[  115.285976][ T5089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'.
[  115.306649][ T5089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'.
[  116.258237][ T5095] loop0: detected capacity change from 0 to 256
[  116.285249][ T5095] exfat: Deprecated parameter 'utf8'
[  116.291876][ T5095] exfat: Deprecated parameter 'namecase'
[  116.300036][ T5095] exfat: Deprecated parameter 'namecase'
[  116.306557][ T5095] exfat: Deprecated parameter 'utf8'
[  116.882444][ T5095] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  116.946806][ T4323] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  116.992836][ T4352] snd-usb-audio: probe of 3-1:1.0 failed with error -71
[  117.001550][ T4352] usb 3-1: USB disconnect, device number 3
[  117.164573][ T5100] bridge0: port 3(macvlan2) entered disabled state
[  117.171317][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.179166][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.231880][ T5104] device macvlan2 left promiscuous mode
[  117.249201][ T5104] bridge0: port 3(macvlan2) entered disabled state
[  117.309765][ T5104] device bridge_slave_1 left promiscuous mode
[  117.350952][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.466373][ T5104] device bridge_slave_0 left promiscuous mode
[  117.491680][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.537809][ T5109] loop4: detected capacity change from 0 to 512
[  117.586543][ T1193] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  118.697435][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  118.838208][ T5114] loop2: detected capacity change from 0 to 40427
[  118.925379][ T5114] F2FS-fs (loop2): invalid crc value
[  118.932827][ T5109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  118.996940][ T5114] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  119.196047][ T5114] F2FS-fs (loop2): recover fsync data on readonly fs
[  119.206917][ T5114] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  119.346431][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  119.698462][ T5114] netlink: 64 bytes leftover after parsing attributes in process `syz.2.213'.
[  120.229929][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  120.388942][ T5126] loop4: detected capacity change from 0 to 128
[  120.440680][ T5128] loop0: detected capacity change from 0 to 16
[  120.444848][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[  120.495496][ T5128] erofs: (device loop0): mounted with root inode @ nid 36.
[  120.607776][ T5128] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36
[  120.826523][ T4323] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  121.066425][ T4273] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  121.116542][ T4323] usb 5-1: Using ep0 maxpacket: 16
[  121.142172][ T4323] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  121.221598][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'.
[  121.231432][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'.
[  121.240666][ T5144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.222'.
[  121.249613][ T5144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.222'.
[  121.368046][ T4323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.555121][ T4323] usb 5-1: config 0 has no interface number 0
[  121.761189][ T4323] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  121.806558][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.845395][ T4323] usb 5-1: Product: syz
[  121.886027][ T4323] usb 5-1: Manufacturer: syz
[  121.907277][ T4323] usb 5-1: SerialNumber: syz
[  121.936115][ T4323] usb 5-1: config 0 descriptor??
[  121.979949][ T4323] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  122.016305][ T4323] usb 5-1: No valid video chain found.
[  122.167408][ T4323] usb 5-1: USB disconnect, device number 7
[  122.318847][ T5146] loop2: detected capacity change from 0 to 256
[  122.916343][ T4273] usb 2-1: Using ep0 maxpacket: 16
[  122.923248][ T4273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.954056][ T4273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.999470][ T4273] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.015747][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.033607][ T4273] usb 2-1: Product: syz
[  123.042551][ T4273] usb 2-1: Manufacturer: syz
[  123.048964][ T4273] usb 2-1: SerialNumber: syz
[  123.110558][ T5157] loop4: detected capacity change from 0 to 16
[  123.142493][ T5157] erofs: (device loop4): mounted with root inode @ nid 36.
[  123.193020][ T5157] syz.4.228: attempt to access beyond end of device
[  123.193020][ T5157] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  123.232647][ T5157] syz.4.228: attempt to access beyond end of device
[  123.232647][ T5157] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  123.254635][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  123.254648][   T26] audit: type=1800 audit(123.253:36): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.228" name="file1" dev="loop4" ino=86 res=0 errno=0
[  123.261625][ T4273] usb 2-1: 0:2 : does not exist
[  123.339647][ T4273] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  123.381921][ T4273] usb 2-1: USB disconnect, device number 3
[  123.663059][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.556465][ T4323] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  125.690635][ T5195] loop1: detected capacity change from 0 to 1024
[  125.716432][ T4323] usb 5-1: device descriptor read/64, error -71
[  125.732289][ T5195] EXT4-fs: Ignoring removed bh option
[  125.812169][ T5195] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  125.940975][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  125.949095][ T5201] loop2: detected capacity change from 0 to 256
[  125.986312][ T4323] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  126.040632][ T5201] FAT-fs (loop2): Directory bread(block 64) failed
[  126.058740][ T5201] FAT-fs (loop2): Directory bread(block 65) failed
[  126.074490][ T5201] FAT-fs (loop2): Directory bread(block 66) failed
[  126.083664][ T5201] FAT-fs (loop2): Directory bread(block 67) failed
[  126.090974][ T5201] FAT-fs (loop2): Directory bread(block 68) failed
[  126.098719][ T5201] FAT-fs (loop2): Directory bread(block 69) failed
[  126.105440][ T5201] FAT-fs (loop2): Directory bread(block 70) failed
[  126.112510][ T5201] FAT-fs (loop2): Directory bread(block 71) failed
[  126.119526][ T5201] FAT-fs (loop2): Directory bread(block 72) failed
[  126.126513][ T5201] FAT-fs (loop2): Directory bread(block 73) failed
[  126.156433][ T4323] usb 5-1: device descriptor read/64, error -71
[  126.316567][ T4320] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  126.341738][ T4323] usb usb5-port1: attempt power cycle
[  126.421970][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'.
[  126.506289][ T4320] usb 2-1: Using ep0 maxpacket: 16
[  126.513272][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.558665][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.594302][ T4320] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  126.617920][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.636305][ T4320] usb 2-1: Product: syz
[  126.648908][ T4320] usb 2-1: Manufacturer: syz
[  126.653665][ T4320] usb 2-1: SerialNumber: syz
[  126.756455][ T4323] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  126.797472][ T4323] usb 5-1: device descriptor read/8, error -71
[  126.894163][ T4320] usb 2-1: 0:2 : does not exist
[  126.919511][ T4320] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  126.989476][ T4320] usb 2-1: USB disconnect, device number 4
[  127.066262][ T4323] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  127.106822][ T4323] usb 5-1: device descriptor read/8, error -71
[  127.226427][ T4323] usb usb5-port1: unable to enumerate USB device
[  127.259845][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.282128][ T5223] loop3: detected capacity change from 0 to 1024
[  127.318871][ T5223] EXT4-fs: Ignoring removed i_version option
[  127.359988][ T5223] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  127.633715][ T5225] loop1: detected capacity change from 0 to 4096
[  127.656735][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  127.664124][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  127.686276][ T5225] EXT4-fs: Ignoring removed orlov option
[  127.720776][ T5225] EXT4-fs (loop1): Test dummy encryption mode enabled
[  127.752412][ T5225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  128.788062][ T5232] overlayfs: unrecognized mount option "\" or missing value
[  128.920685][ T5229] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  129.011020][ T5229] File: /52/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8/file1 PID: 5229 Comm: syz.1.249
[  129.407305][ T5248] 9pnet: p9_errstr2errno: server reported unknown error 184467
[  130.137540][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  130.217275][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  130.488609][ T5259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.259'.
[  130.501558][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'.
[  130.526312][ T1193] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  130.686352][ T1193] usb 4-1: device descriptor read/64, error -71
[  130.956277][ T1193] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  131.173221][ T1193] usb 4-1: device descriptor read/64, error -71
[  131.246156][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'.
[  131.273336][ T5266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.296412][ T1193] usb usb4-port1: attempt power cycle
[  131.398424][ T5266] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.497626][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  131.709278][ T1193] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  131.759063][ T1193] usb 4-1: device descriptor read/8, error -71
[  131.945033][ T5276] loop0: detected capacity change from 0 to 256
[  132.016249][ T4273] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  132.038723][ T5276] FAT-fs (loop0): Directory bread(block 64) failed
[  132.055827][ T5276] FAT-fs (loop0): Directory bread(block 65) failed
[  132.065918][ T1193] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  132.111568][ T5276] FAT-fs (loop0): Directory bread(block 66) failed
[  132.119097][ T1193] usb 4-1: device descriptor read/8, error -71
[  132.131791][ T5276] FAT-fs (loop0): Directory bread(block 67) failed
[  132.147559][ T5276] FAT-fs (loop0): Directory bread(block 68) failed
[  132.164449][ T5276] FAT-fs (loop0): Directory bread(block 69) failed
[  132.174391][ T5276] FAT-fs (loop0): Directory bread(block 70) failed
[  132.185042][ T5276] FAT-fs (loop0): Directory bread(block 71) failed
[  132.192894][ T5276] FAT-fs (loop0): Directory bread(block 72) failed
[  132.201786][ T5276] FAT-fs (loop0): Directory bread(block 73) failed
[  132.210681][ T4273] usb 2-1: Using ep0 maxpacket: 16
[  132.231105][ T4273] usb 2-1: config 6 has an invalid interface number: 221 but max is 0
[  132.236513][ T1193] usb usb4-port1: unable to enumerate USB device
[  132.287636][ T4273] usb 2-1: config 6 has no interface number 0
[  132.314802][ T4273] usb 2-1: config 6 interface 221 has no altsetting 0
[  132.341085][ T4273] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92
[  132.361152][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.466406][ T4373] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  132.533909][ T4273] usb 2-1: Product: syz
[  132.538222][ T4273] usb 2-1: Manufacturer: syz
[  132.542839][ T4273] usb 2-1: SerialNumber: syz
[  132.779979][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.787393][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  132.999036][ T5270] loop2: detected capacity change from 0 to 7
[  133.127699][ T4354] Dev loop2: unable to read RDB block 7
[  133.133675][ T4354]  loop2: unable to read partition table
[  133.140365][ T4354] loop2: partition table beyond EOD, truncated
[  133.179794][ T5270] Dev loop2: unable to read RDB block 7
[  133.186437][ T4373] usb 3-1: Using ep0 maxpacket: 32
[  133.194730][ T4373] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  133.209648][ T4373] usb 3-1: config 0 has no interface number 0
[  133.214989][ T5270]  loop2: unable to read partition table
[  133.215925][ T4373] usb 3-1: config 0 interface 184 has no altsetting 0
[  133.223099][ T5270] loop2: partition table beyond EOD, truncated
[  133.242365][ T5270] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  133.263356][ T4273] f81534a_ctrl: probe of 2-1:6.221 failed with error -71
[  133.275677][ T4273] usb 2-1: USB disconnect, device number 5
[  133.386115][ T4373] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  133.420328][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.454960][ T4373] usb 3-1: Product: syz
[  133.462364][ T4373] usb 3-1: Manufacturer: syz
[  133.469488][ T4373] usb 3-1: SerialNumber: syz
[  133.497157][ T4373] usb 3-1: config 0 descriptor??
[  133.520925][ T4373] smsc75xx v1.0.0
[  133.691167][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'.
[  135.743380][ T5300] bridge0: port 3(macvlan2) entered disabled state
[  135.750179][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.758668][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.853230][ T5302] device macvlan2 left promiscuous mode
[  135.885914][ T5302] bridge0: port 3(macvlan2) entered disabled state
[  135.934118][ T5302] device bridge_slave_1 left promiscuous mode
[  135.966787][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.976650][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  136.019746][ T5302] device bridge_slave_0 left promiscuous mode
[  136.037752][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.144355][ T4373] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  136.167565][ T4373] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  136.192242][ T4373] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  136.207196][ T4373] smsc75xx: probe of 3-1:0.184 failed with error -71
[  136.249474][ T4373] usb 3-1: USB disconnect, device number 4
[  136.381987][ T5317] loop1: detected capacity change from 0 to 1024
[  136.613793][ T5317] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.279: Invalid block bitmap block 0 in block_group 0
[  136.616588][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  136.637874][ T5317] Quota error (device loop1): write_blk: dquota write failed
[  136.645680][ T5317] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  136.665150][ T5317] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.279: Failed to acquire dquot type 0
[  136.683338][ T5317] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.279: Freeing blocks not in datazone - block = 0, count = 4096
[  136.710246][ T5317] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.279: Invalid inode bitmap blk 0 in block_group 0
[  136.734091][ T4331] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7
[  136.747873][ T5324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.281'.
[  136.767580][ T4331] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0
[  136.846910][ T5317] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  136.880742][ T5317] EXT4-fs (loop1): 1 orphan inode deleted
[  136.901029][ T5317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  137.132893][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  138.006258][ T4373] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  138.197222][ T4373] usb 1-1: Using ep0 maxpacket: 32
[  138.204736][ T4373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.248353][ T4373] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  138.275238][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.277836][ T5344] fuse: Bad value for 'fd'
[  138.314218][ T4373] usb 1-1: Product: syz
[  138.330443][ T4373] usb 1-1: Manufacturer: syz
[  138.335095][ T4373] usb 1-1: SerialNumber: syz
[  138.359668][ T4373] usb 1-1: config 0 descriptor??
[  138.379108][ T4373] usb 1-1: bad CDC descriptors
[  138.384305][ T4373] usb 1-1: unsupported MDLM descriptors
[  138.635271][ T4373] usb 1-1: USB disconnect, device number 6
[  138.710220][ T5351] loop3: detected capacity change from 0 to 512
[  138.805011][ T5351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  138.818251][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'.
[  138.821963][ T5342] loop2: detected capacity change from 0 to 40427
[  138.843827][ T5342] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  138.892532][ T5342] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  138.926385][ T4352] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  138.944729][ T5342] F2FS-fs (loop2): invalid crc value
[  138.994893][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  139.022557][ T5342] F2FS-fs (loop2): Found nat_bits in checkpoint
[  139.111440][ T5342] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  139.126341][ T4352] usb 2-1: Using ep0 maxpacket: 32
[  139.137155][ T5342] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  139.137163][ T4352] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  139.137184][ T4352] usb 2-1: config 0 has no interface number 0
[  139.185233][ T4352] usb 2-1: config 0 interface 184 has no altsetting 0
[  139.196558][ T4352] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  139.205883][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.215751][ T4352] usb 2-1: Product: syz
[  139.220709][ T4352] usb 2-1: Manufacturer: syz
[  139.225333][ T4352] usb 2-1: SerialNumber: syz
[  139.237277][ T4352] usb 2-1: config 0 descriptor??
[  139.249956][ T4352] smsc75xx v1.0.0
[  139.337985][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'.
[  139.478486][ T5374] loop3: detected capacity change from 0 to 256
[  139.619661][ T5374] exfat: Deprecated parameter 'utf8'
[  139.625040][ T5374] exfat: Deprecated parameter 'namecase'
[  140.766818][ T4352] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  140.846442][ T4352] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  140.873394][ T4352] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  140.884815][ T5374] exfat: Deprecated parameter 'namecase'
[  140.916927][ T5374] exfat: Deprecated parameter 'utf8'
[  140.922793][ T4352] smsc75xx: probe of 2-1:0.184 failed with error -71
[  140.947899][ T5374] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  140.964287][ T4352] usb 2-1: USB disconnect, device number 6
[  141.577183][ T5394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.301'.
[  141.986361][ T4373] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  142.176446][ T4373] usb 1-1: Using ep0 maxpacket: 16
[  142.189794][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.251745][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.312736][ T4373] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  142.353940][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.442643][ T4373] usb 1-1: config 0 descriptor??
[  142.701057][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'.
[  142.726852][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.306'.
[  142.897774][ T4373] usbhid 1-1:0.0: can't add hid device: -71
[  142.909556][ T4373] usbhid: probe of 1-1:0.0 failed with error -71
[  142.974429][ T5390] loop4: detected capacity change from 0 to 512
[  142.975207][ T4373] usb 1-1: USB disconnect, device number 7
[  143.006639][ T5390] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  143.052428][ T5390] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  143.060182][ T5390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  143.073454][ T5390] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.302: Unimplemented hash flags: 0x0001
[  143.085228][ T5390] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.302: Corrupt directory, running e2fsck is recommended
[  143.572194][ T5410] loop2: detected capacity change from 0 to 1024
[  143.654638][ T5410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  143.666082][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  144.677217][ T5418] loop4: detected capacity change from 0 to 131072
[  144.710470][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  144.753329][ T5418] F2FS-fs (loop4): Found nat_bits in checkpoint
[  144.821288][ T5418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  145.231877][   T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  145.707926][   T27] usb 3-1: Using ep0 maxpacket: 32
[  145.714905][   T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  145.781628][   T27] usb 3-1: config 0 has no interface number 0
[  145.788305][   T27] usb 3-1: config 0 interface 184 has no altsetting 0
[  145.798411][   T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  145.807959][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.816604][   T27] usb 3-1: Product: syz
[  145.820841][   T27] usb 3-1: Manufacturer: syz
[  145.826180][   T27] usb 3-1: SerialNumber: syz
[  145.833703][ T5439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'.
[  145.839160][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'.
[  145.873968][   T27] usb 3-1: config 0 descriptor??
[  145.895689][   T27] smsc75xx v1.0.0
[  145.895786][ T5446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'.
[  145.917870][ T5445] device hsr_slave_0 left promiscuous mode
[  145.965058][ T5445] device hsr_slave_1 left promiscuous mode
[  147.437319][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  147.492040][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  147.541954][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  147.577237][   T27] smsc75xx: probe of 3-1:0.184 failed with error -71
[  147.600284][ T5456] loop4: detected capacity change from 0 to 1024
[  147.617455][   T27] usb 3-1: USB disconnect, device number 5
[  147.640129][ T5456] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  147.719161][ T5456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  147.919208][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  148.026937][ T5465] loop3: detected capacity change from 0 to 512
[  148.139144][ T5465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  148.238794][ T5467] loop4: detected capacity change from 0 to 4096
[  148.285675][ T5467] EXT4-fs: inline encryption not supported
[  148.310081][ T5467] EXT4-fs: quotafile must be on filesystem root
[  148.389429][ T4380] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  148.428244][ T5467] netlink: 84 bytes leftover after parsing attributes in process `syz.4.327'.
[  148.506474][ T5472] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.326: iget: bad i_size value: 2533274857506816
[  148.732842][ T5467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.327'.
[  148.988376][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  149.295348][ T5481] loop3: detected capacity change from 0 to 4096
[  149.332830][ T5481] EXT4-fs: inline encryption not supported
[  149.371435][ T5481] EXT4-fs (loop3): Test dummy encryption mode enabled
[  149.448787][ T5488] loop1: detected capacity change from 0 to 512
[  149.464536][ T5481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  149.549597][ T5488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  149.697674][ T5488] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 9 (only 1 groups)
[  149.833752][ T5499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.335'.
[  149.849866][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'.
[  150.090375][ T5493] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  150.118151][ T1193] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  150.146777][ T5512] loop2: detected capacity change from 0 to 256
[  150.181639][ T5512] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x2dae3d2b, utbl_chksum : 0xe619d30d)
[  150.308624][ T1193] usb 1-1: Using ep0 maxpacket: 32
[  150.315902][ T1193] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  150.366472][ T1193] usb 1-1: config 0 has no interface number 0
[  150.372629][ T1193] usb 1-1: config 0 interface 184 has no altsetting 0
[  150.412190][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  150.435983][ T1193] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  150.475747][ T1193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.525020][ T1193] usb 1-1: Product: syz
[  150.561237][ T1193] usb 1-1: Manufacturer: syz
[  150.571081][ T1193] usb 1-1: SerialNumber: syz
[  150.594039][ T1193] usb 1-1: config 0 descriptor??
[  150.614546][ T1193] smsc75xx v1.0.0
[  150.649913][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.342'.
[  150.919764][ T4373] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  152.045392][ T1193] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  152.056682][ T1193] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  152.072775][ T1193] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  152.083327][ T1193] smsc75xx: probe of 1-1:0.184 failed with error -71
[  152.094651][ T1193] usb 1-1: USB disconnect, device number 8
[  152.127297][ T4320] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  152.153366][ T4373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.182358][ T4373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.198285][ T5493] EXT4-fs (loop3): unmounting filesystem.
[  152.204696][ T4373] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  152.227443][ T4373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.249787][ T4373] usb 2-1: config 0 descriptor??
[  152.318351][ T4320] usb 3-1: Using ep0 maxpacket: 16
[  152.326620][ T4320] usb 3-1: config 6 has an invalid interface number: 221 but max is 0
[  152.354770][ T4320] usb 3-1: config 6 has no interface number 0
[  152.371395][ T4320] usb 3-1: config 6 interface 221 has no altsetting 0
[  152.397715][ T4320] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92
[  152.424772][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.498977][ T4320] usb 3-1: Product: syz
[  152.503222][ T4320] usb 3-1: Manufacturer: syz
[  152.513415][ T4320] usb 3-1: SerialNumber: syz
[  152.745997][ T5527] loop2: detected capacity change from 0 to 7
[  152.780268][ T4383] Dev loop2: unable to read RDB block 7
[  152.786490][ T4383]  loop2: unable to read partition table
[  152.792447][ T4383] loop2: partition table beyond EOD, truncated
[  152.834828][ T5534] loop4: detected capacity change from 0 to 40427
[  152.845152][ T5527] Dev loop2: unable to read RDB block 7
[  152.858718][ T5534] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  152.874302][ T5527]  loop2: unable to read partition table
[  152.887363][ T5527] loop2: partition table beyond EOD, truncated
[  152.893923][ T5534] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  152.912303][ T4373] usb 2-1: string descriptor 0 read error: -71
[  152.921203][ T5527] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  152.937267][ T4373] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71
[  152.946256][ T4373] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71
[  152.954724][ T5534] F2FS-fs (loop4): Unrecognized mount option "whint_mode=user-based" or missing value
[  152.964955][ T4373] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71
[  152.984784][ T4373] uclogic 0003:256C:006D.0004: failed probing parameters: -71
[  153.002270][ T4373] uclogic: probe of 0003:256C:006D.0004 failed with error -71
[  153.024285][ T4373] usb 2-1: USB disconnect, device number 7
[  153.045605][ T3640] Dev loop2: unable to read RDB block 7
[  153.051421][ T3640]  loop2: unable to read partition table
[  153.067205][ T3640] loop2: partition table beyond EOD, truncated
[  153.092075][ T4320] f81534a_ctrl: probe of 3-1:6.221 failed with error -71
[  153.124593][ T4320] usb 3-1: USB disconnect, device number 6
[  153.384799][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  153.522168][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  153.541008][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  153.544478][ T5543] loop4: detected capacity change from 0 to 1024
[  153.555604][ T5543] EXT4-fs: Ignoring removed bh option
[  153.569066][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  153.591680][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  153.599528][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  153.607259][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  153.782949][ T5547] loop0: detected capacity change from 0 to 512
[  153.805877][ T5543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  153.817806][ T5554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.352'.
[  153.829571][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'.
[  153.845822][ T5543] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.4.351: path /74/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  153.975062][ T5557] netlink: 'syz.2.353': attribute type 3 has an invalid length.
[  154.168321][ T5547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  154.794624][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  154.825737][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  154.952545][ T5565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.355'.
[  155.008936][ T5540] chnl_net:caif_netlink_parms(): no params data found
[  155.142938][ T5571] loop4: detected capacity change from 0 to 4096
[  155.150600][ T5571] EXT4-fs: Ignoring removed orlov option
[  155.172737][ T5571] EXT4-fs (loop4): Test dummy encryption mode enabled
[  155.193096][ T5571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  155.246065][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.253625][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.271193][ T5540] device bridge_slave_0 entered promiscuous mode
[  155.281760][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.320331][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.351246][ T5540] device bridge_slave_1 entered promiscuous mode
[  155.383340][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'.
[  155.444180][ T5540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.459756][ T5540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.470408][  T125] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  155.502333][ T5540] team0: Port device team_slave_0 added
[  155.511952][ T5540] team0: Port device team_slave_1 added
[  155.572817][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.594677][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.643566][  T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  155.658004][ T5540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.669935][  T125] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  155.693086][  T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  155.705477][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.742516][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.769548][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  155.787354][  T125] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  155.809706][  T125] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  155.821099][ T5540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.832308][  T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.843363][  T125] usb 2-1: config 0 descriptor??
[  155.863143][ T5590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'.
[  155.881966][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'.
[  155.894748][   T26] audit: type=1800 audit(924.532:37): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.358" name="file1" dev="loop4" ino=15 res=0 errno=0
[  155.939995][   T26] audit: type=1800 audit(924.532:38): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.358" name="file1" dev="loop4" ino=15 res=0 errno=0
[  155.964363][ T5540] device hsr_slave_0 entered promiscuous mode
[  155.977999][ T5540] device hsr_slave_1 entered promiscuous mode
[  155.989857][ T5540] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.000744][ T5540] Cannot create hsr debugfs directory
[  156.007684][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  156.053539][  T125] hdpvr 2-1:0.0: firmware version 0xd9 dated �L�W@���'^��R"�5����D��BUN��=r�p]��E�/
[  156.074284][  T125] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  156.281889][ T5596] loop0: detected capacity change from 0 to 1024
[  156.311371][ T5540] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  156.328606][ T5540] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  156.346366][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  156.359135][ T5540] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  156.419370][ T5540] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  156.485734][  T125] hdpvr 2-1:0.0: Could not setup controls
[  156.535541][ T5604] loop2: detected capacity change from 0 to 512
[  156.548665][  T125] hdpvr 2-1:0.0: registering videodev failed
[  156.560180][  T125] hdpvr: probe of 2-1:0.0 failed with error -71
[  156.581450][ T5604] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  156.590904][ T5604] EXT4-fs (loop2): orphan cleanup on readonly fs
[  156.598890][ T5604] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  156.601411][  T125] usb 2-1: USB disconnect, device number 8
[  156.613906][ T5604] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  156.628454][ T5604] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #16: comm syz.2.368: corrupted xattr block 31
[  156.646218][ T5604] EXT4-fs (loop2): Remounting filesystem read-only
[  156.652891][ T5604] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117)
[  156.662245][ T5604] EXT4-fs (loop2): 1 orphan inode deleted
[  156.668016][ T5604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  156.865517][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  157.620625][ T5540] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.641459][ T5613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'.
[  157.681473][ T5540] 8021q: adding VLAN 0 to HW filter on device team0
[  157.688599][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.707663][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.727885][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  157.760256][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  157.777096][ T5611] loop0: detected capacity change from 0 to 8192
[  157.805068][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.815873][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.824550][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.831725][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.841873][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.851024][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.860240][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.867423][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.947775][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.001284][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  158.034283][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.062657][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.089195][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.128243][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.145502][ T5620] loop4: detected capacity change from 0 to 4096
[  158.163077][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.182975][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.196565][ T5620] EXT4-fs: Ignoring removed orlov option
[  158.213257][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.232341][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.242866][ T5620] EXT4-fs (loop4): Test dummy encryption mode enabled
[  158.256057][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.272030][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.289856][ T5620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  158.321263][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.684120][ T5632] loop0: detected capacity change from 0 to 128
[  158.804584][ T5632] FAT-fs (loop0): Directory bread(block 32) failed
[  158.821282][ T5632] FAT-fs (loop0): Directory bread(block 33) failed
[  158.851279][ T5632] FAT-fs (loop0): Directory bread(block 34) failed
[  158.879374][ T5632] FAT-fs (loop0): Directory bread(block 35) failed
[  158.918861][ T5632] FAT-fs (loop0): Directory bread(block 36) failed
[  158.925457][ T5632] FAT-fs (loop0): Directory bread(block 37) failed
[  158.982484][ T5632] FAT-fs (loop0): Directory bread(block 38) failed
[  159.012173][ T5632] FAT-fs (loop0): Directory bread(block 39) failed
[  159.048399][ T5632] FAT-fs (loop0): Directory bread(block 40) failed
[  159.067741][ T5632] FAT-fs (loop0): Directory bread(block 41) failed
[  159.067761][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  159.272461][ T5632] FAT-fs (loop0): Filesystem has been set read-only
[  159.301370][ T5638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'.
[  159.313397][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'.
[  159.346027][   T26] audit: type=1326 audit(928.154:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8ef9ce59 code=0x7ffc0000
[  159.375206][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  159.408780][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  159.430726][   T26] audit: type=1326 audit(928.154:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8ef9ce59 code=0x7ffc0000
[  159.455180][   T26] audit: type=1326 audit(928.154:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8ef9ce59 code=0x7ffc0000
[  159.514223][ T5540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.544672][ T5642] loop4: detected capacity change from 0 to 512
[  159.551103][   T26] audit: type=1326 audit(928.154:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc8ef9ce59 code=0x7ffc0000
[  159.621665][   T26] audit: type=1326 audit(928.154:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8ef9ce59 code=0x7ffc0000
[  159.658944][ T5642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.379: iget: bad extra_isize 90 (inode size 256)
[  159.675613][ T5642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.379: error while reading EA inode 11 err=-117
[  159.690425][   T26] audit: type=1326 audit(928.154:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8ef9ce59 code=0x7ffc0000
[  159.715389][ T4290] Bluetooth: hci2: command 0x040f tx timeout
[  159.728288][ T5642] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  159.746897][   T26] audit: type=1326 audit(928.154:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdc8ef9ce59 code=0x7ffc0000
[  159.757118][ T5642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.379: iget: bad extra_isize 90 (inode size 256)
[  159.783898][   T26] audit: type=1326 audit(928.154:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5639 comm="syz.4.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdc8ef9ce59 code=0x7ffc0000
[  159.871859][ T5642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.379: error while reading EA inode 11 err=-117
[  159.894809][ T5642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.379: iget: bad extra_isize 90 (inode size 256)
[  159.936740][ T5642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.379: error while reading EA inode 18 err=-117
[  159.984687][ T5642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.379: iget: bad extra_isize 90 (inode size 256)
[  160.030317][ T5642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.379: error while reading EA inode 18 err=-117
[  160.059790][ T5642] EXT4-fs (loop4): 1 orphan inode deleted
[  160.081910][ T5642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  160.104887][ T5642] EXT4-fs (loop4): unmounting filesystem.
[  160.119065][ T5659] loop1: detected capacity change from 0 to 1024
[  160.187989][ T5659] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 1: comm syz.1.382: lblock 1 mapped to illegal pblock 1 (length 1)
[  160.291205][ T5659] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.382: Failed to acquire dquot type 0
[  160.408415][ T5659] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.382: Freeing blocks not in datazone - block = 0, count = 4096
[  160.422934][ T5659] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.382: Invalid inode bitmap blk 0 in block_group 0
[  160.436246][ T4561] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  160.442203][ T5659] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  160.464097][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  160.483564][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.500670][ T5659] EXT4-fs (loop1): 1 orphan inode deleted
[  160.503542][ T5667] loop2: detected capacity change from 0 to 512
[  160.517450][ T5659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  160.535100][ T4561] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0
[  160.560289][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  160.578622][ T5667] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  160.594226][ T5659] binder: 5658:5659 ioctl c0306201 0 returned -14
[  160.605488][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  160.608785][ T5667] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  160.636554][ T5659] binder: 5658:5659 ioctl c0306201 0 returned -14
[  160.641306][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.668500][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.701075][ T5540] device veth0_vlan entered promiscuous mode
[  160.746968][ T5667] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  160.763149][ T5540] device veth1_vlan entered promiscuous mode
[  160.777351][ T5667] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  160.804588][ T5667] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[  160.809929][ T5540] device veth0_macvtap entered promiscuous mode
[  160.812433][ T5667] EXT4-fs (loop2): failed to initialize system zone (-117)
[  160.824543][ T5540] device veth1_macvtap entered promiscuous mode
[  160.838465][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  160.878448][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  160.886462][ T5667] EXT4-fs (loop2): mount failed
[  160.904875][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  160.968340][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  161.007052][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  161.047317][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  161.068583][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.100491][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.121498][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.174494][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.191248][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.201962][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.219688][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.232595][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.250979][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.264861][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.275727][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.285766][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.292728][ T4273] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  161.297521][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.432864][ T5687] xt_CT: You must specify a L4 protocol and not use inversions on it
[  161.574950][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.623486][ T4273] usb 3-1: Using ep0 maxpacket: 16
[  161.638483][ T4273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.699791][ T4290] Bluetooth: hci2: command 0x0419 tx timeout
[  161.753748][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.800073][ T4273] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.905512][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.952623][ T4273] usb 3-1: config 0 interface 0 has no altsetting 0
[  161.990050][ T4273] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  161.990234][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.019894][ T4273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.039062][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.051051][ T4273] usb 3-1: config 0 descriptor??
[  162.051331][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.074495][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.087455][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  162.099884][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  162.136834][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  162.150897][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.160099][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  162.285375][ T5540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.295942][ T5540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.304765][ T5540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.313554][ T5540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.572336][ T4273] hid (null): unknown global tag 0xe
[  162.614605][ T4273] hid (null): unknown global tag 0xe
[  162.760300][ T4273] hid (null): unknown global tag 0xff
[  162.896420][ T4273] hid (null): unknown global tag 0xc
[  163.014222][ T4273] hid (null): unknown global tag 0xe
[  163.019611][ T4273] hid (null): report_id 31132 is invalid
[  163.030365][ T4273] usb 3-1: USB disconnect, device number 7
[  163.241424][ T4605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.335565][ T4605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.455195][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  163.481009][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.554512][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.583012][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  163.813729][ T5707] loop4: detected capacity change from 0 to 128
[  163.996398][ T5695] loop1: detected capacity change from 0 to 131072
[  164.031060][ T5707] syz.4.395: attempt to access beyond end of device
[  164.031060][ T5707] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[  164.047552][ T5695] F2FS-fs (loop1): Found nat_bits in checkpoint
[  164.091684][ T5695] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  164.161411][ T4323] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  164.871533][ T4323] usb 6-1: Using ep0 maxpacket: 16
[  164.879333][ T4323] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.890500][ T4323] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.902790][ T4323] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.937569][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.957248][ T4323] usb 6-1: Product: syz
[  164.961478][ T4323] usb 6-1: Manufacturer: syz
[  164.995324][ T4323] usb 6-1: SerialNumber: syz
[  165.226241][ T4323] usb 6-1: 0:2 : does not exist
[  165.237647][ T4323] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  165.353345][ T4323] usb 6-1: USB disconnect, device number 2
[  165.675212][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.073779][ T5749] netlink: 'syz.4.402': attribute type 9 has an invalid length.
[  166.614709][ T4323] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  166.809306][ T4323] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  166.832739][ T5755] loop1: detected capacity change from 0 to 4096
[  166.869975][ T5755] EXT4-fs: inline encryption not supported
[  166.997141][ T5755] EXT4-fs: quotafile must be on filesystem root
[  167.166826][ T4320] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  167.347853][ T4320] usb 5-1: device descriptor read/64, error -71
[  167.614824][ T4320] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  167.648580][ T5755] netlink: 84 bytes leftover after parsing attributes in process `syz.1.405'.
[  167.852992][ T4320] usb 5-1: device descriptor read/64, error -71
[  168.079556][ T4320] usb usb5-port1: attempt power cycle
[  168.500414][ T4320] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  168.539741][ T4320] usb 5-1: device descriptor read/8, error -71
[  168.795792][ T4320] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  168.853747][ T4320] usb 5-1: device descriptor read/8, error -71
[  168.873948][ T4323] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  168.903107][ T4323] usb 1-1: config 0 has no interface number 0
[  168.938520][ T4323] usb 1-1: string descriptor 0 read error: -71
[  168.944886][ T4323] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  168.958221][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.968642][ T4323] usb 1-1: config 0 descriptor??
[  168.976914][ T4320] usb usb5-port1: unable to enumerate USB device
[  168.986568][ T4323] usb 1-1: can't set config #0, error -71
[  168.994386][ T4323] usb 1-1: USB disconnect, device number 9
[  169.234603][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  169.367142][ T4323] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  169.578528][ T4323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  169.601128][ T4323] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[  169.617340][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.634040][ T4320] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  169.660228][ T4323] usb 1-1: Product: syz
[  169.685948][ T4323] usb 1-1: Manufacturer: syz
[  169.690736][ T4323] usb 1-1: SerialNumber: syz
[  169.701354][ T5766] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  169.814994][ T4320] usb 6-1: Using ep0 maxpacket: 16
[  169.822645][ T4320] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.850317][ T4320] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  169.870709][ T5789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.413'.
[  169.877063][ T4320] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.904620][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.927839][ T4320] usb 6-1: Product: syz
[  169.940143][ T4323] usb 1-1: MIDIStreaming interface descriptor not found
[  169.948742][ T4320] usb 6-1: Manufacturer: syz
[  169.956079][ T4320] usb 6-1: SerialNumber: syz
[  170.029114][ T4323] usb 1-1: USB disconnect, device number 10
[  170.183650][ T4320] usb 6-1: 0:2 : does not exist
[  170.188713][ T4320] usb 6-1: unit 15 not found!
[  170.246395][ T4320] usb 6-1: USB disconnect, device number 3
[  170.483934][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  170.503811][ T4365] udevd[4365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.519749][   T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  170.729350][   T14] usb 3-1: Using ep0 maxpacket: 16
[  170.739106][   T14] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  170.773956][   T14] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  170.798440][   T14] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[  170.838880][ T5803] loop0: detected capacity change from 0 to 512
[  170.846068][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.862445][   T14] usb 3-1: Product: syz
[  170.867988][   T14] usb 3-1: Manufacturer: syz
[  170.874528][   T14] usb 3-1: SerialNumber: syz
[  170.909373][ T5803] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.420: inode has both inline data and extents flags
[  170.942813][ T5803] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.420: couldn't read orphan inode 15 (err -117)
[  170.982462][ T5803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  171.135166][ T5812] loop5: detected capacity change from 0 to 4096
[  171.171271][ T5812] EXT4-fs: Ignoring removed orlov option
[  171.192089][ T5812] EXT4-fs (loop5): Test dummy encryption mode enabled
[  171.232359][ T5812] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  171.328236][   T14] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  171.364584][   T14] usb 3-1: USB disconnect, device number 8
[  171.597025][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.680427][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  171.864131][ T5540] EXT4-fs (loop5): unmounting filesystem.
[  172.264646][   T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  172.479220][   T14] usb 5-1: Using ep0 maxpacket: 16
[  172.494016][   T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.527647][   T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.548124][   T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.558700][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.566720][   T14] usb 5-1: Product: syz
[  172.579709][   T14] usb 5-1: Manufacturer: syz
[  172.584925][   T14] usb 5-1: SerialNumber: syz
[  172.793048][   T14] usb 5-1: 0:2 : does not exist
[  172.807663][   T14] usb 5-1: USB disconnect, device number 16
[  173.016982][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.245935][ T5863] loop5: detected capacity change from 0 to 1024
[  173.276862][ T5863] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  173.370825][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  173.370838][   T26] audit: type=1800 audit(1198.890:47): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.440" name="file1" dev="loop5" ino=15 res=0 errno=0
[  173.378443][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'.
[  173.406256][ T5862] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.473050][   T26] audit: type=1800 audit(1198.911:48): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.440" name="file1" dev="loop5" ino=15 res=0 errno=0
[  173.501279][ T5863] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.524234][ T5869] loop4: detected capacity change from 0 to 128
[  173.539194][ T5869] EXT4-fs: inline encryption not supported
[  173.564569][ T5863] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.597073][ T5862] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.603404][ T5869] EXT4-fs (loop4): Test dummy encryption mode enabled
[  173.622953][ T5862] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.657557][ T5862] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.703337][ T5869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  173.744820][ T5862] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.759851][ T5874] loop1: detected capacity change from 0 to 128
[  173.818723][ T5862] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.903233][ T5862] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.926398][ T5873] syz.1.444: attempt to access beyond end of device
[  173.926398][ T5873] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128
[  173.948785][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  173.954319][ T5862] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.440: lblock 0 mapped to illegal pblock 0 (length 1)
[  173.964181][ T5873] syz.1.444: attempt to access beyond end of device
[  173.964181][ T5873] loop1: rw=2049, sector=138, nr_sectors = 12 limit=128
[  174.095696][ T5540] EXT4-fs (loop5): unmounting filesystem.
[  174.154696][ T5877] loop4: detected capacity change from 0 to 1024
[  174.246013][ T5877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  174.380237][ T5877] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.445: bg 0: block 112: padding at end of block bitmap is not set
[  174.436136][ T5877] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  174.462072][ T5877] EXT4-fs (loop4): This should not happen!! Data will be lost
[  174.462072][ T5877] 
[  174.482751][ T5877] EXT4-fs (loop4): Total free blocks count 0
[  174.510065][ T5877] EXT4-fs (loop4): Free/Dirty block details
[  174.516579][ T5877] EXT4-fs (loop4): free_blocks=0
[  174.527680][ T5877] EXT4-fs (loop4): dirty_blocks=16
[  174.538761][ T5877] EXT4-fs (loop4): Block reservation details
[  174.554305][ T5877] EXT4-fs (loop4): i_reserved_data_blocks=1
[  174.667575][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  174.844799][ T4273] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  174.844857][ T5900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.454'.
[  174.867183][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'.
[  174.939765][ T4320] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  175.053941][ T4273] usb 2-1: Using ep0 maxpacket: 16
[  175.062354][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.072728][ T4273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  175.083879][ T4273] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  175.094920][ T4273] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.111272][   T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  175.256081][ T4320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.267163][ T4273] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  175.276281][ T4320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.286175][ T4273] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  175.293622][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  175.294195][ T4320] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  175.309234][   T14] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  175.317267][ T4273] usb 2-1: Manufacturer: syz
[  175.335949][ T4320] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  175.345182][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.600123][ T4273] usb 2-1: config 0 descriptor??
[  175.618232][ T4320] usb 6-1: config 0 descriptor??
[  175.979213][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  175.989159][   T14] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  175.999236][   T14] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  176.008359][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.121879][   T14] usb 5-1: config 0 descriptor??
[  176.266043][ T5912] capability: warning: `syz.2.459' uses deprecated v2 capabilities in a way that may be insecure
[  176.348633][   T14] hdpvr 5-1:0.0: firmware version 0xd9 dated �L�W@���'^��R"�5����D��BUN��=r�p]��E�/
[  176.352417][ T4320] usbhid 6-1:0.0: can't add hid device: -71
[  176.365946][ T4320] usbhid: probe of 6-1:0.0 failed with error -71
[  176.380952][ T4320] usb 6-1: USB disconnect, device number 4
[  176.397498][   T14] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  178.613019][   T14] hdpvr 5-1:0.0: device init failed
[  178.619065][   T14] hdpvr: probe of 5-1:0.0 failed with error -12
[  178.661635][   T14] usb 5-1: USB disconnect, device number 17
[  178.706778][ T4323] usb 2-1: USB disconnect, device number 9
[  178.752837][ T5932] loop1: detected capacity change from 0 to 512
[  178.817003][ T5932] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  179.140831][ T5940] netlink: 40 bytes leftover after parsing attributes in process `syz.5.467'.
[  179.153286][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  179.225115][ T5940] device hsr_slave_0 left promiscuous mode
[  180.746908][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.469'.
[  182.158084][ T5963] loop4: detected capacity change from 0 to 256
[  182.169027][ T5963] exfat: Deprecated parameter 'utf8'
[  182.174461][ T5963] exfat: Deprecated parameter 'utf8'
[  182.180885][ T5963] exfat: Bad value for 'gid'
[  183.244290][ T4380] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  183.564681][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.987554][ T5932] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.997629][ T5932] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.006607][ T5932] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.015626][ T5932] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.024805][ T4280] Bluetooth: hci0: command 0x0406 tx timeout
[  184.030985][ T4290] Bluetooth: hci4: command 0x0406 tx timeout
[  184.037065][ T4292] Bluetooth: hci3: command 0x0406 tx timeout
[  184.043080][ T4292] Bluetooth: hci1: command 0x0406 tx timeout
[  184.141619][   T14] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  184.276151][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'.
[  184.322840][   T14] usb 6-1: Using ep0 maxpacket: 16
[  184.329928][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.350457][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  184.389291][   T14] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  184.411225][   T14] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.436045][   T14] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  184.455564][   T14] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  184.473091][   T14] usb 6-1: Manufacturer: syz
[  184.487975][   T14] usb 6-1: config 0 descriptor??
[  184.508646][ T5986] loop1: detected capacity change from 0 to 256
[  184.597809][ T5986] FAT-fs (loop1): Directory bread(block 64) failed
[  184.627547][ T5986] FAT-fs (loop1): Directory bread(block 65) failed
[  184.634245][ T5986] FAT-fs (loop1): Directory bread(block 66) failed
[  184.679359][ T5986] FAT-fs (loop1): Directory bread(block 67) failed
[  184.703595][ T5986] FAT-fs (loop1): Directory bread(block 68) failed
[  184.718953][ T5990] loop4: detected capacity change from 0 to 128
[  184.742314][ T5986] FAT-fs (loop1): Directory bread(block 69) failed
[  184.764616][ T5986] FAT-fs (loop1): Directory bread(block 70) failed
[  184.798764][ T5986] FAT-fs (loop1): Directory bread(block 71) failed
[  184.806289][ T5990] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  184.815491][ T5986] FAT-fs (loop1): Directory bread(block 72) failed
[  184.823235][ T5986] FAT-fs (loop1): Directory bread(block 73) failed
[  184.909927][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'.
[  184.924164][ T5990] 
[  184.926528][ T5990] ======================================================
[  184.933548][ T5990] WARNING: possible circular locking dependency detected
[  184.940582][ T5990] syzkaller #0 Not tainted
[  184.944999][ T5990] ------------------------------------------------------
[  184.952020][ T5990] syz.4.483/5990 is trying to acquire lock:
[  184.957911][ T5990] ffff888052dbc650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x43c/0x1110
[  184.967024][ T5990] 
[  184.967024][ T5990] but task is already holding lock:
[  184.974397][ T5990] ffff888052dbac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2d7/0xe60
[  184.984529][ T5990] 
[  184.984529][ T5990] which lock already depends on the new lock.
[  184.984529][ T5990] 
[  184.994936][ T5990] 
[  184.994936][ T5990] the existing dependency chain (in reverse order) is:
[  185.003940][ T5990] 
[  185.003940][ T5990] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  185.012362][ T5990]        percpu_down_read+0x44/0x1a0
[  185.017641][ T5990]        ext4_writepages+0x20f/0x2f40
[  185.023001][ T5990]        do_writepages+0x3ba/0x640
[  185.028101][ T5990]        __writeback_single_inode+0x156/0x1160
[  185.034247][ T5990]        writeback_single_inode+0x3cb/0x8e0
[  185.040128][ T5990]        write_inode_now+0x17f/0x210
[  185.045399][ T5990]        iput+0x613/0x980
[  185.049722][ T5990]        ext4_xattr_block_set+0x273b/0x32b0
[  185.055610][ T5990]        ext4_expand_extra_isize_ea+0x120b/0x1dc0
[  185.062013][ T5990]        __ext4_expand_extra_isize+0x301/0x3e0
[  185.068159][ T5990]        __ext4_mark_inode_dirty+0x47f/0x770
[  185.074134][ T5990]        ext4_evict_inode+0xa7f/0x1110
[  185.079590][ T5990]        evict+0x4c9/0x8d0
[  185.083997][ T5990]        ext4_orphan_cleanup+0xbeb/0x1420
[  185.089714][ T5990]        ext4_fill_super+0x6ee3/0x78c0
[  185.095170][ T5990]        get_tree_bdev+0x3f1/0x610
[  185.100270][ T5990]        vfs_get_tree+0x88/0x270
[  185.105196][ T5990]        do_new_mount+0x24a/0xa40
[  185.110206][ T5990]        __se_sys_mount+0x2e3/0x3d0
[  185.115391][ T5990]        do_syscall_64+0x4c/0xa0
[  185.120316][ T5990]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.126724][ T5990] 
[  185.126724][ T5990] -> #0 (sb_internal){.+.+}-{0:0}:
[  185.134009][ T5990]        __lock_acquire+0x2d07/0x7d10
[  185.139372][ T5990]        lock_acquire+0x1bb/0x4a0
[  185.144385][ T5990]        percpu_down_read+0x44/0x1a0
[  185.149658][ T5990]        ext4_evict_inode+0x43c/0x1110
[  185.155108][ T5990]        evict+0x4c9/0x8d0
[  185.159530][ T5990]        ext4_ext_migrate+0xc0c/0xe60
[  185.164893][ T5990]        ext4_ioctl+0x1eb1/0x4160
[  185.169905][ T5990]        __se_sys_ioctl+0xfa/0x170
[  185.175013][ T5990]        do_syscall_64+0x4c/0xa0
[  185.179936][ T5990]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.186342][ T5990] 
[  185.186342][ T5990] other info that might help us debug this:
[  185.186342][ T5990] 
[  185.196554][ T5990]  Possible unsafe locking scenario:
[  185.196554][ T5990] 
[  185.203991][ T5990]        CPU0                    CPU1
[  185.209350][ T5990]        ----                    ----
[  185.214708][ T5990]   lock(&sbi->s_writepages_rwsem);
[  185.219905][ T5990]                                lock(sb_internal);
[  185.226483][ T5990]                                lock(&sbi->s_writepages_rwsem);
[  185.234187][ T5990]   lock(sb_internal);
[  185.238246][ T5990] 
[  185.238246][ T5990]  *** DEADLOCK ***
[  185.238246][ T5990] 
[  185.246374][ T5990] 3 locks held by syz.4.483/5990:
[  185.251404][ T5990]  #0: ffff888052dbc460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200
[  185.261062][ T5990]  #1: ffff8880547a2c20 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_ioctl+0x1ea9/0x4160
[  185.271416][ T5990]  #2: ffff888052dbac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2d7/0xe60
[  185.281938][ T5990] 
[  185.281938][ T5990] stack backtrace:
[  185.287829][ T5990] CPU: 1 PID: 5990 Comm: syz.4.483 Not tainted syzkaller #0
[  185.295098][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  185.305150][ T5990] Call Trace:
[  185.308427][ T5990]  <TASK>
[  185.311352][ T5990]  dump_stack_lvl+0x188/0x24e
[  185.316098][ T5990]  ? load_image+0x400/0x400
[  185.320620][ T5990]  ? show_regs_print_info+0x12/0x12
[  185.325828][ T5990]  ? print_circular_bug+0x12b/0x1a0
[  185.331025][ T5990]  check_noncircular+0x296/0x330
[  185.335969][ T5990]  ? add_chain_block+0x940/0x940
[  185.340900][ T5990]  ? lockdep_lock+0xf1/0x1f0
[  185.345581][ T5990]  ? __lock_acquire+0x12f4/0x7d10
[  185.350616][ T5990]  ? _find_first_zero_bit+0xcf/0x100
[  185.355930][ T5990]  __lock_acquire+0x2d07/0x7d10
[  185.360784][ T5990]  ? __lock_acquire+0x13cf/0x7d10
[  185.365886][ T5990]  ? verify_lock_unused+0x140/0x140
[  185.371090][ T5990]  ? verify_lock_unused+0x140/0x140
[  185.376382][ T5990]  ? mark_lock+0x94/0x320
[  185.380732][ T5990]  ? truncate_inode_pages_range+0x3a9/0x1090
[  185.386710][ T5990]  lock_acquire+0x1bb/0x4a0
[  185.391214][ T5990]  ? ext4_evict_inode+0x43c/0x1110
[  185.396320][ T5990]  ? __might_sleep+0xd0/0xd0
[  185.400896][ T5990]  ? read_lock_is_recursive+0x10/0x10
[  185.406269][ T5990]  ? dquot_initialize+0x20/0x20
[  185.411121][ T5990]  ? do_raw_spin_lock+0x128/0x2f0
[  185.416222][ T5990]  percpu_down_read+0x44/0x1a0
[  185.420990][ T5990]  ? ext4_evict_inode+0x43c/0x1110
[  185.426095][ T5990]  ext4_evict_inode+0x43c/0x1110
[  185.431290][ T5990]  ? _raw_spin_unlock+0x24/0x40
[  185.436131][ T5990]  ? inode_wait_for_writeback+0x1df/0x220
[  185.441846][ T5990]  ? sb_clear_inode_writeback+0x3c0/0x3c0
[  185.447558][ T5990]  ? do_raw_spin_lock+0x128/0x2f0
[  185.452577][ T5990]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  185.458468][ T5990]  ? do_raw_spin_unlock+0x11d/0x230
[  185.463658][ T5990]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  185.469555][ T5990]  evict+0x4c9/0x8d0
[  185.473450][ T5990]  ? proc_nr_inodes+0x2f0/0x2f0
[  185.478321][ T5990]  ? do_raw_spin_unlock+0x11d/0x230
[  185.483606][ T5990]  ? _raw_spin_unlock+0x24/0x40
[  185.488454][ T5990]  ? iput+0x768/0x980
[  185.492430][ T5990]  ext4_ext_migrate+0xc0c/0xe60
[  185.497282][ T5990]  ? mb_regenerate_buddy+0x4e0/0x4e0
[  185.502558][ T5990]  ? sb_start_write+0x110/0x1c0
[  185.507404][ T5990]  ext4_ioctl+0x1eb1/0x4160
[  185.511899][ T5990]  ? ext4_fileattr_set+0x1770/0x1770
[  185.517184][ T5990]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  185.523159][ T5990]  ? do_vfs_ioctl+0x1be7/0x1d40
[  185.528001][ T5990]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  185.533637][ T5990]  ? tomoyo_path_number_perm+0x205/0x650
[  185.539262][ T5990]  ? __lock_acquire+0x7d10/0x7d10
[  185.544284][ T5990]  ? slab_free_freelist_hook+0x131/0x1a0
[  185.549918][ T5990]  ? tomoyo_path_number_perm+0x4fb/0x650
[  185.555539][ T5990]  ? __kmem_cache_free+0xb6/0x1f0
[  185.560552][ T5990]  ? tomoyo_path_number_perm+0x205/0x650
[  185.566183][ T5990]  ? tomoyo_path_number_perm+0x5a4/0x650
[  185.571807][ T5990]  ? tomoyo_path_number_perm+0x205/0x650
[  185.577430][ T5990]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  185.582889][ T5990]  ? __fget_files+0x28/0x4b0
[  185.587475][ T5990]  ? __fget_files+0x28/0x4b0
[  185.592057][ T5990]  ? bpf_lsm_file_ioctl+0x5/0x10
[  185.596985][ T5990]  ? security_file_ioctl+0x7c/0xa0
[  185.602088][ T5990]  ? ext4_fileattr_set+0x1770/0x1770
[  185.607364][ T5990]  __se_sys_ioctl+0xfa/0x170
[  185.611948][ T5990]  do_syscall_64+0x4c/0xa0
[  185.616355][ T5990]  ? clear_bhb_loop+0x60/0xb0
[  185.621024][ T5990]  ? clear_bhb_loop+0x60/0xb0
[  185.625779][ T5990]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.631666][ T5990] RIP: 0033:0x7fdc8ef9ce59
[  185.636086][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.655681][ T5990] RSP: 002b:00007fdc8fed0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  185.664085][ T5990] RAX: ffffffffffffffda RBX: 00007fdc8f215fa0 RCX: 00007fdc8ef9ce59
[  185.672045][ T5990] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004
[  185.680003][ T5990] RBP: 00007fdc8f032d6f R08: 0000000000000000 R09: 0000000000000000
[  185.687965][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.695929][ T5990] R13: 00007fdc8f216038 R14: 00007fdc8f215fa0 R15: 00007ffcec62adf8
[  185.703914][ T5990]  </TASK>
[  185.769554][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  186.751891][  T128] usb 6-1: USB disconnect, device number 5
[  186.914420][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  191.801229][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  191.804066][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  191.807542][ T1280] ieee802154 phy1 wpan1: encryption failed: -22