last executing test programs:

2m33.224443202s ago: executing program 3 (id=4):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000b80)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

2m32.789544806s ago: executing program 3 (id=5):
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB='\a', @ANYRESHEX=0x0], 0x0)

2m28.033111135s ago: executing program 3 (id=9):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

2m26.540559092s ago: executing program 3 (id=12):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x48)
keyctl$session_to_parent(0x12)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r3, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

2m25.205494334s ago: executing program 3 (id=16):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x160, 0x29, 0x36, {0x5e, 0x28, '\x00', [@generic={0xff, 0x43, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac4"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x248}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m24.773236057s ago: executing program 32 (id=16):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x160, 0x29, 0x36, {0x5e, 0x28, '\x00', [@generic={0xff, 0x43, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac4"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x248}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m22.063582361s ago: executing program 4 (id=135):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439})

1m16.055340289s ago: executing program 4 (id=146):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10)
r4 = socket$inet(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a08000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x50)

1m11.409062324s ago: executing program 4 (id=148):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f000001b000), 0x2000, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x5a8, 0x168, 0x4d8, 0x0, 0x3e8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8)
dup(r2)
r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x4, 0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0}})
syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f00000002c0))
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020)
write$FUSE_INIT(r4, 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r5, &(0x7f0000004200)=[{&(0x7f0000000400)='j&', 0x2}, {0x0}], 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

1m10.613314849s ago: executing program 4 (id=150):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x30010a9, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)

1m9.786227375s ago: executing program 4 (id=151):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0xffffffff, 0xfffffff9, 0x0, 0x4, 0x2}})
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x100000f, 0x10, 0xffffffffffffffff, 0x7a84d000)
add_key$fscrypt_provisioning(&(0x7f0000001400), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYRES16], 0x48, 0xfffffffffffffffe)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x78}}, 0x4000000)
connect$can_bcm(r4, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x0)

1m7.115258359s ago: executing program 4 (id=159):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

1m6.617954795s ago: executing program 33 (id=159):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

11.483368301s ago: executing program 0 (id=270):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0)
socket(0x400000000010, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
r0 = getpgid(0xffffffffffffffff)
prlimit64(r0, 0xe, &(0x7f0000000040)={0x100, 0x4}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
mkdir(0x0, 0x0)
io_uring_setup(0x3b7f, &(0x7f0000000000)={0x0, 0x2cf7, 0x1402, 0x3, 0x46})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)

11.278926228s ago: executing program 0 (id=273):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

9.627308669s ago: executing program 0 (id=276):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x40086604, 0x0)

8.97125897s ago: executing program 0 (id=278):
syz_usb_connect(0x3, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xe7, 0x66, 0x6a, 0x8, 0x1004, 0x61aa, 0xcf6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x50, 0x4, "", [{{0x9, 0x4, 0x48, 0xff, 0x0, 0x2, 0x6, 0x0, 0xa}}]}}]}}, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000001c0)={0x2, 0x0, [{0x80000000, 0x8, 0x1, 0x7, 0x3, 0x1ff, 0x3}, {0x6, 0x8, 0x2, 0x80000001, 0x3ff, 0xffffff01, 0x4}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setresuid(0xee01, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000100)='R\x10ru\x84t\xe3c*:De \x00\x00Z_k\xa60\xf4\x0f\x13\xff\x18\xd3,v\x8a\x00\x00\x00', 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x8, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x800, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x28, 0x1, 0xd, 0x3, 0x7ff, 0x1}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}]})

6.651986932s ago: executing program 5 (id=282):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='debugfs\x00', 0x2200003, 0x0)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f00000000c0))
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0x7d, 0x1501, &(0x7f00000002c0)="$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")
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
socket$inet6(0xa, 0xa, 0x1066)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0xfffffffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
pipe2(&(0x7f0000000000), 0x80000)

5.354319033s ago: executing program 1 (id=285):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x5, 0x6, 0xa, 0x5}, 0x2c, [0xb, 0x2, 0x8, 0x9, 0x6a, 0x1, 0x6, 0x2, 0x8000, 0x5, 0x4, 0x40, 0x9, 0x8, 0x7, 0x7, 0xfdc, 0x6, 0x66e, 0x10001, 0x40, 0x100, 0x2, 0x0, 0xd, 0x5, 0x7, 0x4, 0x8, 0x6, 0x98000, 0xffff4abf, 0x2, 0x8, 0x0, 0x0, 0x3, 0x6, 0x3, 0x8, 0xfffffff7, 0x4, 0x5, 0x5, 0x3, 0x6, 0x8, 0x6, 0x3, 0x7fff, 0x7ff, 0x6, 0xce24, 0xffff6b57, 0x4, 0x3, 0x800, 0x9, 0x0, 0x8, 0x10, 0x6, 0x7ff, 0xf], [0x6, 0x9, 0x3, 0x989, 0x1, 0xe, 0x9, 0x7, 0x3ff, 0x4, 0x6, 0x4, 0x151e, 0x9, 0xfffff001, 0x6, 0x2, 0xfffffff1, 0xfffffff1, 0xbc, 0x32, 0x0, 0x948, 0xe, 0xbf6d, 0x3, 0x101, 0x8, 0x1000, 0x4, 0x3, 0x4, 0x9, 0x6, 0xfffffffb, 0x8, 0x1, 0xa, 0x7fff, 0x81, 0x80000001, 0x9, 0x0, 0x7, 0x0, 0x4, 0x0, 0x6, 0x2, 0x8, 0x0, 0x1, 0x8, 0x4, 0x0, 0x6, 0x83d, 0x988, 0x6, 0xebde, 0x3, 0x6, 0xd, 0x4], [0x8000, 0x6, 0x47f7, 0x7, 0x80000001, 0xfffffffb, 0x401, 0x42, 0x0, 0xe, 0x9, 0x1, 0x10001, 0x10001, 0x4, 0x5, 0x5, 0x401, 0x9, 0xb4b9, 0xbc, 0xe, 0xbd, 0x800, 0x2, 0xfffffffc, 0x8fa0, 0x1000, 0x6f, 0x2, 0x1, 0x8, 0x8, 0x7, 0x1, 0x95, 0x2, 0x2, 0x9, 0x5, 0x80, 0x0, 0x7, 0x3925, 0x401, 0x8, 0x8, 0x5, 0xa4, 0x8, 0x7, 0xfffffffa, 0x3, 0x3, 0x5d5, 0x3, 0x40, 0x5, 0x1, 0x6, 0x7, 0x1b5a7ebc, 0x8, 0x8], [0xffc00, 0x70000, 0x9, 0x7, 0xa480, 0x7, 0x1000, 0x7fff, 0x8001, 0x0, 0x39, 0x9, 0x8, 0x7fffffff, 0x5, 0xfffffef2, 0x6, 0x80000000, 0x1, 0x0, 0x4, 0x2, 0x1000, 0x6, 0x8, 0x0, 0x8, 0x7, 0x9, 0x7f4, 0x5, 0x8001, 0x6, 0x7, 0x1da7, 0x6, 0x4047, 0x3ff, 0x5, 0x3c2, 0x9, 0x5, 0x7, 0x4, 0x80, 0x1, 0x68, 0x0, 0xb57, 0x80000001, 0x7fffffff, 0x10, 0x3, 0xfffffffa, 0x7, 0x6, 0xfffffff9, 0x2, 0x9, 0x0, 0xe, 0x10, 0x5, 0x1]}, 0x45c)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

5.343600393s ago: executing program 5 (id=286):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc)

4.987440965s ago: executing program 5 (id=287):
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x800)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

4.853251719s ago: executing program 2 (id=288):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2a000)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080))

4.7959389s ago: executing program 2 (id=289):
r0 = socket(0x1e, 0x4, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$bt_sco(r0, 0x0, 0x0)

4.781746991s ago: executing program 0 (id=290):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

4.631539946s ago: executing program 2 (id=291):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="9f04dcff0e3290a8362c00b30069935f66000000005b8aa6823b2badb585fff1d6b6b31f21a64bc21483140600000000000000aa5a95ec", @ANYRES16, @ANYRES64, @ANYRESHEX], 0x1, 0x14e8, &(0x7f0000002a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000)

4.612490486s ago: executing program 1 (id=292):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xfffffffc)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c25bb33e54015415a23a584ddbc836f7468b7c3ecb70830c58740accda21c574c1251d41ec0daf2d407ee82088e67e9b6730d971f4d9ca2c2cf6a2bd499ee2dc6c6be445d7e128fbbeeb008c4547b0612fa5b83710643da8aca1019f74f5c508000000000000001d95588a4ffa01e0cf45e9051805afcb4ea5cdfc5b0d3b35dc113b91dd45f994951355eb78a9f98b5f8470fac596aa5d9e8a5416cc6bd231", @ANYRES16=r5, @ANYBLOB="07006000000000000000020000000c0001800600010002000000"], 0x20}}, 0x4040)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/190}], 0x1, 0x5fab, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
sendmsg$nl_route(r0, 0x0, 0x40)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80)
renameat(r7, &(0x7f0000001400)='./file0/file0\x00', r7, 0x0)
getdents64(r7, &(0x7f00000028c0)=""/4092, 0xffc)

3.456364282s ago: executing program 2 (id=293):
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000340)={0x2, 0x0, 0x7ff, 0x80000})

3.362702865s ago: executing program 1 (id=294):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
process_mrelease(0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sync()
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100))
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)
writev(0xffffffffffffffff, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x9, 0x4)

3.227526959s ago: executing program 5 (id=295):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x228, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x106}, 0x1c)

2.345255947s ago: executing program 2 (id=296):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x40084)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x8, 0x5, 0x109, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x100000d, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x7, 0x4, 0x16, 0x8, 0x4, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x7ff, 0xf9a2, 0x80000001, 0xff, 0x1800, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x3ff, 0x9, 0x4, 0xc68, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x809, 0x4, 0xa7, 0x8, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x3, 0x1, 0xffff8001, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf0, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x83ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x437, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0xd, 0x1], [0xa776, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1c, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0xb, 0x140f2, 0x5396, 0x3, 0x80000001, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x110009, 0xc, 0x3, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x101, 0x3, 0x4, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0xb, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

2.241603341s ago: executing program 5 (id=297):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioprio_set$pid(0x2, r0, 0x31edf85b6f14f0e4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x2, 0x2, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, 0x0})
close(r5)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0xffffff00}}, 0x10, 0x0}, 0x0)

1.703291087s ago: executing program 2 (id=298):
syz_usb_connect(0x3, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xe7, 0x66, 0x6a, 0x8, 0x1004, 0x61aa, 0xcf6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x50, 0x4, "", [{{0x9, 0x4, 0x48, 0xff, 0x0, 0x2, 0x6, 0x0, 0xa}}]}}]}}, 0x0)
socket(0x10, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000001c0)={0x2, 0x0, [{0x80000000, 0x8, 0x1, 0x7, 0x3, 0x1ff, 0x3}, {0x6, 0x8, 0x2, 0x80000001, 0x3ff, 0xffffff01, 0x4}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setresuid(0xee01, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000100)='R\x10ru\x84t\xe3c*:De \x00\x00Z_k\xa60\xf4\x0f\x13\xff\x18\xd3,v\x8a\x00\x00\x00', 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x8, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x800, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x28, 0x1, 0xd, 0x3, 0x7ff, 0x1}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}]})

1.389675507s ago: executing program 0 (id=299):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)

1.29401685s ago: executing program 1 (id=300):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000100000000000000000000000000000050000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000000000000000000000080000000000000000000000000000000200000000000001"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

1.059407708s ago: executing program 1 (id=301):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '&'}, {0x20, '\x00'}, {0x20, '/#'}, {0x20, ')&[^/[&}\x16[&'}, {0x20, 'f2fs\x00'}]}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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")
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)

379.435889ms ago: executing program 1 (id=302):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYBLOB, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
r0 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, 0x0, 0x80)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000040)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

0s ago: executing program 5 (id=303):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xfffffffc)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c25bb33e54015415a23a584ddbc836f7468b7c3ecb70830c58740accda21c574c1251d41ec0daf2d407ee82088e67e9b6730d971f4d9ca2c2cf6a2bd499ee2dc6c6be445d7e128fbbeeb008c4547b0612fa5b83710643da8aca1019f74f5c508000000000000001d95588a4ffa01e0cf45e9051805afcb4ea5cdfc5b0d3b35dc113b91dd45f994951355eb78a9f98b5f8470fac596aa5d9e8a5416cc6bd231", @ANYRES16=r5, @ANYBLOB="07006000000000000000020000000c0001800600010002000000"], 0x20}}, 0x4040)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/190}], 0x1, 0x5fab, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
sendmsg$nl_route(r0, 0x0, 0x40)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80)
renameat(r7, &(0x7f0000001400)='./file0/file0\x00', r7, 0x0)
getdents64(r7, &(0x7f00000028c0)=""/4092, 0xffc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts.
[   71.490067][ T5761] cgroup: Unknown subsys name 'net'
[   71.653507][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.359101][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   74.939686][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.948199][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.957900][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.963968][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.966143][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.985667][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.991407][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.994358][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.001508][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.015732][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.016178][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   75.023412][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.030476][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.037502][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.051888][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.059974][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.070667][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.078259][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.088692][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.097705][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.105203][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.118705][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.121029][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   75.146045][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.583227][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   75.597292][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   75.619962][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   75.715240][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   75.847044][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.854706][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.862414][ T5772] bridge_slave_0: entered allmulticast mode
[   75.869632][ T5772] bridge_slave_0: entered promiscuous mode
[   75.879467][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.886767][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.894144][ T5773] bridge_slave_0: entered allmulticast mode
[   75.901951][ T5773] bridge_slave_0: entered promiscuous mode
[   75.944891][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.952381][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.960018][ T5775] bridge_slave_0: entered allmulticast mode
[   75.967747][ T5775] bridge_slave_0: entered promiscuous mode
[   75.976864][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.983969][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.991577][ T5772] bridge_slave_1: entered allmulticast mode
[   75.998977][ T5772] bridge_slave_1: entered promiscuous mode
[   76.006159][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.013277][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.023047][ T5773] bridge_slave_1: entered allmulticast mode
[   76.030249][ T5773] bridge_slave_1: entered promiscuous mode
[   76.047597][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.054848][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.062651][ T5775] bridge_slave_1: entered allmulticast mode
[   76.070061][ T5775] bridge_slave_1: entered promiscuous mode
[   76.106301][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.113447][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.121180][ T5774] bridge_slave_0: entered allmulticast mode
[   76.128163][ T5774] bridge_slave_0: entered promiscuous mode
[   76.136420][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.143651][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.151805][ T5774] bridge_slave_1: entered allmulticast mode
[   76.158941][ T5774] bridge_slave_1: entered promiscuous mode
[   76.178805][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.233189][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.244820][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.257500][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.272141][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.293834][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.304996][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.316478][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.378146][ T5772] team0: Port device team_slave_0 added
[   76.387302][ T5774] team0: Port device team_slave_0 added
[   76.416014][ T5773] team0: Port device team_slave_0 added
[   76.424848][ T5772] team0: Port device team_slave_1 added
[   76.443794][ T5774] team0: Port device team_slave_1 added
[   76.462065][ T5773] team0: Port device team_slave_1 added
[   76.471822][ T5775] team0: Port device team_slave_0 added
[   76.489984][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.497166][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.523576][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.564036][ T5775] team0: Port device team_slave_1 added
[   76.570493][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.580009][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.606311][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.618004][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.624952][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.651467][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.673675][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.680718][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.707095][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.740980][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.748266][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.774240][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.788053][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.795036][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.821248][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.850566][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.857615][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.883982][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.901705][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.908833][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.935197][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.003512][ T5772] hsr_slave_0: entered promiscuous mode
[   77.010255][ T5772] hsr_slave_1: entered promiscuous mode
[   77.073483][ T5774] hsr_slave_0: entered promiscuous mode
[   77.080446][ T5774] hsr_slave_1: entered promiscuous mode
[   77.086904][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.094634][ T5774] Cannot create hsr debugfs directory
[   77.105738][ T5773] hsr_slave_0: entered promiscuous mode
[   77.112253][ T5773] hsr_slave_1: entered promiscuous mode
[   77.118832][ T5782] Bluetooth: hci0: command tx timeout
[   77.125126][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.132763][ T5773] Cannot create hsr debugfs directory
[   77.148816][ T5775] hsr_slave_0: entered promiscuous mode
[   77.158484][ T5775] hsr_slave_1: entered promiscuous mode
[   77.164593][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.172332][ T5775] Cannot create hsr debugfs directory
[   77.195550][ T5782] Bluetooth: hci1: command tx timeout
[   77.201287][ T5782] Bluetooth: hci3: command tx timeout
[   77.205551][   T51] Bluetooth: hci2: command tx timeout
[   77.583241][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.602881][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.612796][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.623892][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   77.674654][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   77.698529][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   77.709482][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   77.723259][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   77.807564][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.831086][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.844112][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.854899][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.942323][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.968179][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.980534][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.999199][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.010055][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.075305][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   78.133277][ T5025] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.140714][ T5025] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.180681][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.187912][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.220167][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.248806][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.277587][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   78.312105][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.319298][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.336059][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   78.350013][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.369922][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.377128][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.404801][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.411940][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.425207][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.432329][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.528896][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.672737][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   78.697919][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.705073][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.763025][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.770217][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.857477][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.974864][ T5772] veth0_vlan: entered promiscuous mode
[   79.011010][ T5772] veth1_vlan: entered promiscuous mode
[   79.109099][ T5772] veth0_macvtap: entered promiscuous mode
[   79.141289][ T5772] veth1_macvtap: entered promiscuous mode
[   79.184997][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.200608][   T51] Bluetooth: hci0: command tx timeout
[   79.230714][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.253928][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.278301][   T51] Bluetooth: hci2: command tx timeout
[   79.281816][ T5782] Bluetooth: hci3: command tx timeout
[   79.283760][   T51] Bluetooth: hci1: command tx timeout
[   79.303046][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.323512][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.338134][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.347352][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.357037][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.452193][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.510217][ T5773] veth0_vlan: entered promiscuous mode
[   79.545203][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.554675][ T5773] veth1_vlan: entered promiscuous mode
[   79.559890][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.572983][ T5774] veth0_vlan: entered promiscuous mode
[   79.628711][ T5774] veth1_vlan: entered promiscuous mode
[   79.659776][ T5025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.661753][ T5775] veth0_vlan: entered promiscuous mode
[   79.673719][ T5025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.724375][ T5773] veth0_macvtap: entered promiscuous mode
[   79.742626][ T5775] veth1_vlan: entered promiscuous mode
[   79.771197][ T5774] veth0_macvtap: entered promiscuous mode
[   79.784388][ T5773] veth1_macvtap: entered promiscuous mode
[   79.810327][ T5774] veth1_macvtap: entered promiscuous mode
[   79.834024][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.852662][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.867004][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.878218][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.891548][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.903582][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.919411][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.939627][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.966152][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.982006][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.996589][ T5833] syz.3.4[5833]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   80.009063][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.027213][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.039134][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.041922][ T5833] loop3: detected capacity change from 0 to 512
[   80.054328][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.083595][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.102832][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.121249][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.130229][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.139533][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.148590][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.193976][ T5775] veth0_macvtap: entered promiscuous mode
[   80.202726][ T5833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.224317][ T5833] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.225255][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.247758][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.257162][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.266402][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.288582][ T5775] veth1_macvtap: entered promiscuous mode
[   80.395175][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.408650][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.413493][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.430719][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.442279][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.452830][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.463509][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.477557][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.541232][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.573048][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.590865][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.601474][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.611369][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.622912][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.634384][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.665561][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.690141][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.700696][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.719689][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.729059][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.738158][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.765794][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.773999][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.813259][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.826340][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.862605][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.871012][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.895679][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.988166][ T5025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.998639][ T5025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.070106][ T5839] usb 4-1: Using ep0 maxpacket: 16
[   81.094545][ T5839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.106467][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.120664][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.163881][ T5839] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   81.173962][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.183621][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   81.195729][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.253197][ T5839] usb 4-1: Product: syz
[   81.263386][ T5839] usb 4-1: Manufacturer: syz
[   81.277032][   T51] Bluetooth: hci0: command tx timeout
[   81.288684][ T5839] usb 4-1: SerialNumber: syz
[   81.355721][   T51] Bluetooth: hci3: command tx timeout
[   81.361254][   T51] Bluetooth: hci2: command tx timeout
[   81.367999][   T51] Bluetooth: hci1: command tx timeout
[   81.814332][ T5852] loop0: detected capacity change from 0 to 512
[   82.153643][ T5852] EXT4-fs (loop0): 1 truncate cleaned up
[   82.171514][ T5852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.533874][   T27] audit: type=1804 audit(1779310367.752:2): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/file1/bus" dev="loop0" ino=19 res=1 errno=0
[   83.265337][    C0] sched: RT throttling activated
[   83.375495][ T5782] Bluetooth: hci0: command tx timeout
[   83.448616][ T5782] Bluetooth: hci1: command tx timeout
[   83.454098][ T5782] Bluetooth: hci2: command tx timeout
[   83.465510][ T5782] Bluetooth: hci3: command tx timeout
[   83.511857][ T5839] usb 4-1: 0:2 : does not exist
[   83.637945][ T5839] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   84.019937][ T5861] loop1: detected capacity change from 0 to 128
[   84.028544][ T5861] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   84.187131][ T5861] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   84.948530][ T5863] loop2: detected capacity change from 0 to 256
[   85.066110][ T5839] usb 4-1: USB disconnect, device number 2
[   85.470169][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.499345][ T5865] loop3: detected capacity change from 0 to 512
[   85.573906][ T5865] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   85.683192][ T5865] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   85.760903][ T5865] EXT4-fs (loop3): 1 truncate cleaned up
[   85.821922][ T5865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.170496][ T5867] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.9: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   86.295194][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.341553][ T5865] loop3: detected capacity change from 512 to 0
[   86.587848][   T66] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   86.601720][ T5772] syz-executor: attempt to access beyond end of device
[   86.601720][ T5772] loop3: rw=12288, sector=26, nr_sectors = 2 limit=0
[   86.654084][ T5772] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[   86.793647][ T5874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'.
[   86.802956][ T5812] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   86.817022][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.850314][ T5772] syz-executor: attempt to access beyond end of device
[   86.850314][ T5772] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0
[   86.892146][ T5772] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   86.905814][ T5772] EXT4-fs (loop3): I/O error while writing superblock
[   86.959494][  T787] cfg80211: failed to load regulatory.db
[   87.025399][ T5812] usb 3-1: Using ep0 maxpacket: 16
[   87.039682][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.855469][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.875603][ T5812] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[   87.884713][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.922355][ T5812] usb 3-1: config 0 descriptor??
[   88.023981][ T5884] loop0: detected capacity change from 0 to 256
[   88.053122][ T5884] exfat: Deprecated parameter 'utf8'
[   88.108049][ T5884] exfat: Deprecated parameter 'namecase'
[   88.113801][ T5884] exfat: Deprecated parameter 'namecase'
[   88.141795][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.212272][ T5884] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[   88.290128][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.442462][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.458374][  T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   88.557087][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.568408][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.575977][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.626726][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.663613][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.676120][  T787] usb 2-1: Using ep0 maxpacket: 8
[   88.863230][  T787] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[   88.881349][ T5812] usb 3-1: string descriptor 0 read error: -71
[   89.046098][ T5812] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[   89.061250][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.136914][ T5812] letsketch: probe of 0003:6161:4D15.0001 failed with error -32
[   89.152493][  T787] usb 2-1: Product: syz
[   89.237927][  T787] usb 2-1: Manufacturer: syz
[   89.309101][  T787] usb 2-1: SerialNumber: syz
[   89.503584][ T5812] usb 3-1: USB disconnect, device number 2
[   89.600749][  T787] usb 2-1: config 0 descriptor??
[   89.877670][  T787] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[   90.099288][  T787] dvb-usb: bulk message failed: -22 (2/0)
[   90.519305][  T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   90.664422][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.716184][  T787] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[   90.850660][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.935380][  T787] usb 2-1: media controller created
[   91.793318][  T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   91.921205][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.935710][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.943833][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   91.956163][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   91.964846][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   91.973831][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   91.992380][  T787] dvb-usb: bulk message failed: -22 (1/0)
[   92.095672][  T787] DVB: Unable to find symbol mt352_attach()
[   92.101655][  T787] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[   92.210286][  T787] rc_core: IR keymap rc-dvico-portable not found
[   92.245420][  T787] Registered IR keymap rc-empty
[   92.252465][  T787] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[   92.283751][  T787] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5
[   92.304689][  T787] dvb-usb: schedule remote query interval to 100 msecs.
[   92.314097][  T787] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[   92.426704][ T5839] dvb-usb: bulk message failed: -22 (1/0)
[   92.459196][  T787] usb 2-1: USB disconnect, device number 2
[   92.570946][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'.
[   92.658785][  T787] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[   93.602708][ T5916] Cannot find add_set index 0 as target
[   93.997075][ T5782] Bluetooth: hci0: command tx timeout
[   95.109715][ T5900] chnl_net:caif_netlink_parms(): no params data found
[   95.315527][  T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.523919][  T787] usb 2-1: Using ep0 maxpacket: 8
[   95.542435][  T787] usb 2-1: config 2 has an invalid interface number: 72 but max is 0
[   95.570530][  T787] usb 2-1: config 2 has no interface number 0
[   95.601692][  T787] usb 2-1: config 2 interface 72 has no altsetting 0
[   95.637329][  T787] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[   95.654695][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.696965][  T787] usb 2-1: Product: syz
[   95.701328][  T787] usb 2-1: Manufacturer: syz
[   95.712234][  T787] usb 2-1: SerialNumber: syz
[   95.836773][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.857374][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.886736][ T5900] bridge_slave_0: entered allmulticast mode
[   95.895000][ T5900] bridge_slave_0: entered promiscuous mode
[   96.040598][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.076859][ T5782] Bluetooth: hci0: command tx timeout
[   96.080259][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.114254][ T5900] bridge_slave_1: entered allmulticast mode
[   96.148778][ T5900] bridge_slave_1: entered promiscuous mode
[   96.225461][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.460897][    T9] usb 3-1: Using ep0 maxpacket: 16
[   96.507803][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.529257][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.558833][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.586157][   T49] hsr_slave_0: left promiscuous mode
[   96.592845][    T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[   96.616003][   T49] hsr_slave_1: left promiscuous mode
[   96.629534][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.654776][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.663556][    T9] usb 3-1: config 0 descriptor??
[   96.676274][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.719633][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.733654][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.761999][   T49] bridge_slave_1: left allmulticast mode
[   96.774175][   T49] bridge_slave_1: left promiscuous mode
[   96.805570][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.883325][   T49] bridge_slave_0: left allmulticast mode
[   96.895180][   T49] bridge_slave_0: left promiscuous mode
[   96.922425][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.998866][   T49] veth1_macvtap: left promiscuous mode
[   97.013768][   T49] veth0_macvtap: left promiscuous mode
[   97.027258][   T49] veth1_vlan: left promiscuous mode
[   97.032981][   T49] veth0_vlan: left promiscuous mode
[   97.304424][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.357866][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.549426][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.709126][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.908668][    T9] usb 3-1: string descriptor 0 read error: -71
[   98.070827][    T9] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[   98.107576][    T9] letsketch: probe of 0003:6161:4D15.0002 failed with error -32
[   98.180750][    T9] usb 3-1: USB disconnect, device number 3
[   98.182328][ T5782] Bluetooth: hci0: command tx timeout
[   98.575890][    T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   98.785512][    T8] usb 1-1: Using ep0 maxpacket: 8
[   98.805229][    T8] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[   98.815018][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.824619][    T8] usb 1-1: Product: syz
[   98.835671][    T8] usb 1-1: Manufacturer: syz
[   98.840331][    T8] usb 1-1: SerialNumber: syz
[   98.877851][    T8] usb 1-1: config 0 descriptor??
[   98.896475][    T8] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[   98.924590][    T8] dvb-usb: bulk message failed: -22 (2/0)
[   98.949192][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   98.963008][    T8] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[   98.971981][    T8] usb 1-1: media controller created
[   99.498104][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.600801][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.866492][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   99.893189][   T49] team0 (unregistering): Port device team_slave_1 removed
[   99.906684][    T8] dvb-usb: bulk message failed: -22 (1/0)
[   99.958897][   T49] team0 (unregistering): Port device team_slave_0 removed
[  100.014217][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.049127][    T8] DVB: Unable to find symbol mt352_attach()
[  100.055223][    T8] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  100.092317][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.155853][    T8] rc_core: IR keymap rc-dvico-portable not found
[  100.162553][    T8] Registered IR keymap rc-empty
[  100.172954][    T8] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  100.187093][    T8] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6
[  100.202851][    T8] dvb-usb: schedule remote query interval to 100 msecs.
[  100.210036][    T8] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  100.233273][    T8] usb 1-1: USB disconnect, device number 2
[  100.245566][ T5782] Bluetooth: hci0: command tx timeout
[  100.373138][    T8] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  100.599030][   T49] bond0 (unregistering): Released all slaves
[  100.718108][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.876032][ T5985] Cannot find add_set index 0 as target
[  100.998079][  T787] usb 2-1: bad CDC descriptors
[  101.465436][    T8] usb 2-1: USB disconnect, device number 3
[  102.110282][   T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  102.846651][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.892971][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.134429][   T23] usb 1-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00
[  103.144176][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.168357][   T23] usb 1-1: config 0 descriptor??
[  104.154056][   T23] hid-generic 0003:5443:0042.0003: hidraw0: USB HID v10.00 Device [HID 5443:0042] on usb-dummy_hcd.0-1/input0
[  104.967348][ T5900] team0: Port device team_slave_0 added
[  105.004281][ T5900] team0: Port device team_slave_1 added
[  105.014053][ T5979] usb 1-1: USB disconnect, device number 3
[  105.212685][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.285247][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.735873][ T5996] fido_id[5996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  105.780796][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.950179][ T5979] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  105.976502][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.035887][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.062259][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.171324][ T5979] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  106.183314][ T6005] loop0: detected capacity change from 0 to 512
[  106.203126][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  106.233232][ T5900] hsr_slave_0: entered promiscuous mode
[  106.239466][ T6005] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  106.250122][ T5979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  106.269506][ T5979] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  106.271114][ T5900] hsr_slave_1: entered promiscuous mode
[  106.296101][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.354038][ T6005] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.39: bad orphan inode 16
[  106.377282][ T5979] usb 3-1: config 0 descriptor??
[  106.385163][ T6003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  106.425572][ T5868] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  106.465460][ T6005] ext4_test_bit(bit=15, block=4) = 0
[  106.472685][ T6005] EXT4-fs (loop0): 1 orphan inode deleted
[  106.492882][ T6005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.662350][ T5868] usb 2-1: Using ep0 maxpacket: 16
[  106.681792][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.723193][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.760857][ T5868] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  106.775471][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.803830][ T5868] usb 2-1: config 0 descriptor??
[  106.913919][ T5979] hid-multitouch 0003:1FD2:6007.0004: ignoring exceeding usage max
[  106.937142][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  106.944934][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  106.966766][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.970347][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  106.985563][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  106.993336][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  107.004404][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  107.013962][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  107.045840][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  107.053659][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  107.081021][ T5900] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  107.088167][ T5979] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x0
[  107.105780][ T5979] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  107.120964][ T5900] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  107.136767][ T5979] usb 3-1: USB disconnect, device number 4
[  107.174213][ T5900] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  107.518532][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.565213][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.631161][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.667535][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.807209][ T6026] fido_id[6026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  107.815506][ T5900] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  107.835141][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  107.843705][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  107.851529][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  107.859867][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  107.867301][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  107.874849][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  107.882080][ T5868] usb 2-1: string descriptor 0 read error: -32
[  107.919937][ T5868] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  107.951705][ T5868] letsketch: probe of 0003:6161:4D15.0005 failed with error -32
[  108.004458][ T5868] usb 2-1: USB disconnect, device number 4
[  108.170670][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.204487][ T5900] 8021q: adding VLAN 0 to HW filter on device team0
[  108.220427][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.227830][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.245368][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.252572][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.336376][    T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  108.555508][    T8] usb 1-1: Using ep0 maxpacket: 8
[  108.563986][    T8] usb 1-1: config 2 has an invalid interface number: 72 but max is 0
[  108.604614][    T8] usb 1-1: config 2 has no interface number 0
[  108.623810][    T8] usb 1-1: config 2 interface 72 has no altsetting 0
[  108.650478][ T6044] loop1: detected capacity change from 0 to 128
[  108.651718][    T8] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  108.685809][ T6044] =======================================================
[  108.685809][ T6044] WARNING: The mand mount option has been deprecated and
[  108.685809][ T6044]          and is ignored by this kernel. Remove the mand
[  108.685809][ T6044]          option from the mount to silence this warning.
[  108.685809][ T6044] =======================================================
[  108.691043][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.828246][ T6044] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  108.887829][ T6044] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.900292][    T8] usb 1-1: Product: syz
[  108.927723][    T8] usb 1-1: Manufacturer: syz
[  108.937855][    T8] usb 1-1: SerialNumber: syz
[  109.013261][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.063552][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.708701][ T6039] loop2: detected capacity change from 0 to 40427
[  110.806496][ T6039] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  110.870728][ T6039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  110.967947][ T6039] F2FS-fs (loop2): invalid crc value
[  111.038435][ T6039] F2FS-fs (loop2): Found nat_bits in checkpoint
[  111.058160][ T5900] veth0_vlan: entered promiscuous mode
[  111.173278][ T5900] veth1_vlan: entered promiscuous mode
[  111.350657][ T5900] veth0_macvtap: entered promiscuous mode
[  111.416524][ T6039] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  111.445919][ T5900] veth1_macvtap: entered promiscuous mode
[  111.480028][ T6039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  111.553685][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.625368][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.661319][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.692682][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.713142][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.742188][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.802273][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.863542][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.929027][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.959962][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.012662][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.043258][ T5900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.074942][ T5900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.115078][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.166471][ T5900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.194536][ T5900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.271040][ T5900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.316318][ T5900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.487723][    T8] usb 1-1: bad CDC descriptors
[  112.540562][    T8] usb 1-1: USB disconnect, device number 4
[  112.754091][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.788062][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.878070][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.912885][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.979800][ T6097] Cannot find add_set index 0 as target
[  113.844595][ T6100] kvm: emulating exchange as write
[  114.666567][ T5839] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  115.032969][ T6122] loop0: detected capacity change from 0 to 4096
[  115.064152][ T5839] usb 3-1: Using ep0 maxpacket: 8
[  115.084228][ T5839] usb 3-1: config 2 has an invalid interface number: 72 but max is 0
[  115.123649][ T5839] usb 3-1: config 2 has no interface number 0
[  115.175658][ T5839] usb 3-1: config 2 interface 72 has no altsetting 0
[  115.206099][ T6122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.244677][ T5839] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  115.307200][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.358933][ T5839] usb 3-1: Product: syz
[  115.363180][ T5839] usb 3-1: Manufacturer: syz
[  115.415598][ T5839] usb 3-1: SerialNumber: syz
[  115.585586][ T6133] EXT4-fs error (device loop0): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.0.55: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  115.868734][ T6133] EXT4-fs error (device loop0): ext4_get_first_dir_block:3606: inode #12: comm syz.0.55: directory missing '..'
[  116.257067][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.025734][ T5979] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  117.435967][ T5979] usb 5-1: Using ep0 maxpacket: 8
[  117.454987][ T5979] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  117.482113][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.499691][ T5979] usb 5-1: Product: syz
[  117.508492][ T5979] usb 5-1: Manufacturer: syz
[  117.522035][ T5979] usb 5-1: SerialNumber: syz
[  117.523038][ T5839] usb 3-1: bad CDC descriptors
[  117.546335][ T5979] usb 5-1: config 0 descriptor??
[  117.558877][ T5839] usb 3-1: USB disconnect, device number 5
[  117.588854][ T5979] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  117.611961][ T5979] dvb-usb: bulk message failed: -22 (2/0)
[  117.633636][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  117.650618][ T5979] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  117.660434][ T5979] usb 5-1: media controller created
[  117.734384][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  117.810715][ T5979] dvb-usb: bulk message failed: -22 (1/0)
[  117.904408][ T5979] DVB: Unable to find symbol mt352_attach()
[  117.920627][ T5979] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  118.010884][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.059490][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.073485][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.090992][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.102092][ T5979] rc_core: IR keymap rc-dvico-portable not found
[  118.113506][ T5979] Registered IR keymap rc-empty
[  118.122035][ T5979] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  118.158452][ T5979] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7
[  118.176844][ T5979] dvb-usb: schedule remote query interval to 100 msecs.
[  118.190161][ T5979] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  118.243539][ T5979] usb 5-1: USB disconnect, device number 2
[  118.419266][ T5979] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  119.233021][ T6184] loop0: detected capacity change from 0 to 512
[  119.400832][ T6184] EXT4-fs: Ignoring removed oldalloc option
[  119.495555][ T6184] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.588112][ T6184] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  119.615071][ T6184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  119.623963][ T6184] EXT4-fs (loop0): orphan cleanup on readonly fs
[  119.646854][ T6184] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  119.656743][ T6184] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  119.675438][ T6184] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  119.700425][ T6189] loop2: detected capacity change from 0 to 2048
[  119.708106][ T6189] EXT4-fs: Ignoring removed nobh option
[  119.708216][ T6184] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.64: bg 0: block 40: padding at end of block bitmap is not set
[  119.740736][ T6190] xt_hashlimit: size too large, truncated to 1048576
[  119.801166][ T6189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.836121][ T6184] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  119.855658][ T6184] EXT4-fs (loop0): 1 truncate cleaned up
[  119.863337][ T6184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  120.053257][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.150826][ T6184] syz.0.64 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  120.188045][ T6184] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.64: bad symlink.
[  120.970974][ T6208] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.64: bad symlink.
[  122.061580][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.139237][ T6223] loop2: detected capacity change from 0 to 256
[  123.182440][ T6223] exfat: Deprecated parameter 'utf8'
[  123.258163][ T6223] exfat: Deprecated parameter 'namecase'
[  123.284898][ T6223] exfat: Deprecated parameter 'namecase'
[  123.398299][ T6223] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  124.045629][ T5979] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  124.235492][ T5979] usb 3-1: Using ep0 maxpacket: 16
[  124.254708][ T5979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.308429][ T5979] usb 3-1: config 0 has no interfaces?
[  124.345413][ T5979] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  124.360192][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.386350][ T5979] usb 3-1: config 0 descriptor??
[  124.546888][ T5839] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  124.745438][ T5839] usb 2-1: Using ep0 maxpacket: 8
[  124.762666][ T5839] usb 2-1: config 2 has an invalid interface number: 72 but max is 0
[  124.784300][ T5839] usb 2-1: config 2 has no interface number 0
[  124.804149][ T5839] usb 2-1: config 2 interface 72 has no altsetting 0
[  124.831700][ T5839] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  124.855240][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.894702][ T5839] usb 2-1: Product: syz
[  124.909295][ T5839] usb 2-1: Manufacturer: syz
[  124.927904][ T5839] usb 2-1: SerialNumber: syz
[  125.006764][ T6244] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.151990][ T6245] loop2: detected capacity change from 0 to 2048
[  125.292943][ T6245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.306955][ T6245] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  125.484942][ T6245] fs-verity: sha512 using implementation "sha512-avx2"
[  125.589256][ T6251] loop0: detected capacity change from 0 to 512
[  125.803347][ T6251] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  125.940253][ T6251] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  125.959885][ T6251] EXT4-fs (loop0): 1 truncate cleaned up
[  125.976708][ T6251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.199458][ T5894] usb 3-1: USB disconnect, device number 6
[  127.408155][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.594338][ T5839] usb 2-1: bad CDC descriptors
[  127.640293][ T5839] usb 2-1: USB disconnect, device number 5
[  127.902976][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.265512][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  128.821949][ T6266] batadv_slave_0: entered promiscuous mode
[  129.046218][ T5894] usb 2-1: Using ep0 maxpacket: 8
[  129.083818][ T6272] Cannot find add_set index 0 as target
[  129.297734][ T5894] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  129.318566][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.347365][ T5894] usb 2-1: Product: syz
[  129.374562][ T5894] usb 2-1: Manufacturer: syz
[  129.381073][ T5894] usb 2-1: SerialNumber: syz
[  129.408440][ T5894] usb 2-1: config 0 descriptor??
[  129.451312][ T5894] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  129.460119][ T5894] dvb-usb: bulk message failed: -22 (2/0)
[  129.497726][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  129.510308][ T5894] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  129.521347][ T5894] usb 2-1: media controller created
[  129.694492][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  129.791507][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  129.880561][ T5894] DVB: Unable to find symbol mt352_attach()
[  129.890197][ T5894] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  129.994282][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.016058][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.045610][ T5894] rc_core: IR keymap rc-dvico-portable not found
[  130.050895][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.056549][ T5894] Registered IR keymap rc-empty
[  130.082227][ T5894] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  130.089395][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.124055][ T5894] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8
[  130.161644][ T5894] dvb-usb: schedule remote query interval to 100 msecs.
[  130.175468][ T5894] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  130.205807][ T5894] usb 2-1: USB disconnect, device number 6
[  130.369720][ T5894] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  131.227659][ T6266] batadv_slave_0: left promiscuous mode
[  131.285489][ T5154] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  131.485554][ T5154] usb 2-1: Using ep0 maxpacket: 8
[  131.497451][ T5154] usb 2-1: config 2 has an invalid interface number: 72 but max is 0
[  131.506278][ T5154] usb 2-1: config 2 has no interface number 0
[  131.513305][ T5154] usb 2-1: config 2 interface 72 has no altsetting 0
[  131.524432][ T5154] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  131.534084][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.555160][ T5154] usb 2-1: Product: syz
[  131.559789][ T5154] usb 2-1: Manufacturer: syz
[  131.564551][ T5154] usb 2-1: SerialNumber: syz
[  131.675618][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  132.002354][ T5894] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  132.224913][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.462205][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.563946][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  132.644680][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  132.762705][ T5894] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  132.798264][ T5894] usb 5-1: Manufacturer: syz
[  132.816687][ T5894] usb 5-1: config 0 descriptor??
[  132.986152][ T6318] Cannot find add_set index 0 as target
[  133.237619][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  133.273983][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  133.873062][ T5894] appleir 0003:05AC:8243.0006: item fetching failed at offset 0/1
[  133.893899][ T5894] appleir 0003:05AC:8243.0006: parse failed
[  133.918255][ T5894] appleir: probe of 0003:05AC:8243.0006 failed with error -22
[  134.063167][ T5894] usb 5-1: USB disconnect, device number 3
[  134.155241][ T6331] loop2: detected capacity change from 0 to 256
[  134.218706][ T5154] usb 2-1: bad CDC descriptors
[  134.228909][ T6334] loop0: detected capacity change from 0 to 256
[  134.250231][ T5154] usb 2-1: USB disconnect, device number 7
[  134.269472][ T6331] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  134.366907][ T6334] FAT-fs (loop0): Directory bread(block 64) failed
[  134.404473][ T6334] FAT-fs (loop0): Directory bread(block 65) failed
[  134.428223][ T6337] syz.2.91: attempt to access beyond end of device
[  134.428223][ T6337] loop2: rw=2049, sector=256, nr_sectors = 32 limit=256
[  134.429232][ T6334] FAT-fs (loop0): Directory bread(block 66) failed
[  134.453173][ T6334] FAT-fs (loop0): Directory bread(block 67) failed
[  134.465569][ T6334] FAT-fs (loop0): Directory bread(block 68) failed
[  134.474580][ T6337] syz.2.91: attempt to access beyond end of device
[  134.474580][ T6337] loop2: rw=34817, sector=256, nr_sectors = 32 limit=256
[  134.489435][ T6334] FAT-fs (loop0): Directory bread(block 69) failed
[  134.497324][ T6334] FAT-fs (loop0): Directory bread(block 70) failed
[  134.504311][ T6334] FAT-fs (loop0): Directory bread(block 71) failed
[  134.513428][ T6334] FAT-fs (loop0): Directory bread(block 72) failed
[  134.520237][ T6334] FAT-fs (loop0): Directory bread(block 73) failed
[  134.574090][   T27] audit: type=1800 audit(1779310419.842:3): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.92" name="file1" dev="loop0" ino=1048601 res=0 errno=0
[  135.101454][ T6349] batadv_slave_0: entered promiscuous mode
[  136.329190][ T6359] loop1: detected capacity change from 0 to 40427
[  136.365697][ T5154] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  136.439548][ T6359] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  136.543271][ T6359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  136.665400][ T5154] usb 5-1: Using ep0 maxpacket: 8
[  136.942501][ T6359] F2FS-fs (loop1): Found nat_bits in checkpoint
[  136.977244][ T5154] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  137.011359][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.025830][ T5154] usb 5-1: Product: syz
[  137.030146][ T5154] usb 5-1: Manufacturer: syz
[  137.034936][ T5154] usb 5-1: SerialNumber: syz
[  137.043820][ T5154] usb 5-1: config 0 descriptor??
[  137.053104][ T5154] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  137.072673][ T5154] dvb-usb: bulk message failed: -22 (2/0)
[  137.122224][ T5154] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  137.177223][ T5154] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  137.197647][ T6359] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  137.205958][ T6359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  137.245479][ T5154] usb 5-1: media controller created
[  137.310197][ T5154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  137.387620][ T5154] dvb-usb: bulk message failed: -22 (1/0)
[  137.412948][   T27] audit: type=1800 audit(1779310422.682:4): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.97" name="bus" dev="loop1" ino=10 res=0 errno=0
[  137.510291][ T5775] syz-executor: attempt to access beyond end of device
[  137.510291][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  137.529524][ T5154] DVB: Unable to find symbol mt352_attach()
[  137.538177][ T5154] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  137.575911][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  137.590407][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.618728][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.648978][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.683844][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.755525][ T5154] rc_core: IR keymap rc-dvico-portable not found
[  137.763170][ T5154] Registered IR keymap rc-empty
[  137.776467][ T6349] batadv_slave_0: left promiscuous mode
[  137.792410][ T5154] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  137.843640][ T5154] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9
[  137.918607][ T5154] dvb-usb: schedule remote query interval to 100 msecs.
[  137.955599][ T5154] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  137.979549][ T5154] usb 5-1: USB disconnect, device number 4
[  138.206641][ T5154] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  138.944510][ T6399] loop2: detected capacity change from 0 to 40427
[  138.988687][ T6399] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  138.999790][ T6399] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  139.022578][ T6399] F2FS-fs (loop2): invalid crc value
[  139.204681][ T6399] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  139.217143][ T6399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  139.319171][ T5773] syz-executor: attempt to access beyond end of device
[  139.319171][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.345974][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  139.860203][ T6447] loop1: detected capacity change from 0 to 256
[  139.892733][ T6445] batadv_slave_0: entered promiscuous mode
[  139.935662][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'.
[  140.027995][ T6447] FAT-fs (loop1): Directory bread(block 64) failed
[  140.061626][ T6447] FAT-fs (loop1): Directory bread(block 65) failed
[  140.090731][ T6447] FAT-fs (loop1): Directory bread(block 66) failed
[  140.136651][ T6447] FAT-fs (loop1): Directory bread(block 67) failed
[  140.172731][ T6447] FAT-fs (loop1): Directory bread(block 68) failed
[  140.185916][ T6447] FAT-fs (loop1): Directory bread(block 69) failed
[  140.192908][ T6447] FAT-fs (loop1): Directory bread(block 70) failed
[  140.200694][ T6447] FAT-fs (loop1): Directory bread(block 71) failed
[  140.207777][ T6447] FAT-fs (loop1): Directory bread(block 72) failed
[  140.215008][ T6447] FAT-fs (loop1): Directory bread(block 73) failed
[  140.223284][ T6446] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  140.240511][ T6446] macvtap1: entered allmulticast mode
[  140.287452][ T6446] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  140.362471][ T6446] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  140.370294][ T6446] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  141.030156][ T6463] overlayfs: missing 'lowerdir'
[  141.117703][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[  141.164134][ T6464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  142.702638][ T6445] batadv_slave_0: left promiscuous mode
[  145.617874][  T967] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  145.832642][ T6517] batadv_slave_0: entered promiscuous mode
[  145.849210][  T967] usb 2-1: Using ep0 maxpacket: 32
[  145.872062][  T967] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  145.884630][  T967] usb 2-1: config 0 has no interface number 0
[  145.900424][  T967] usb 2-1: config 0 interface 12 has no altsetting 0
[  145.913001][  T967] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  145.929005][  T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.944515][  T967] usb 2-1: Product: syz
[  145.955631][  T967] usb 2-1: Manufacturer: syz
[  145.963265][  T967] usb 2-1: SerialNumber: syz
[  145.982206][  T967] usb 2-1: config 0 descriptor??
[  146.206329][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.229739][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.496450][  T967] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  146.504052][  T967] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  146.535374][  T967] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  146.543079][  T967] f81534: probe of 2-1:0.12 failed with error -71
[  146.608093][  T967] usb 2-1: USB disconnect, device number 8
[  148.515914][ T6517] batadv_slave_0: left promiscuous mode
[  148.815735][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[  149.343742][ T6565] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  149.413367][ T6565] macvtap1: entered allmulticast mode
[  149.427136][ T6565] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  149.576513][ T6565] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  149.616141][ T6565] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  149.627106][ T6555] loop0: detected capacity change from 0 to 40427
[  149.647558][ T6555] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  149.661163][ T6555] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  149.695759][ T6555] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.873564][ T6555] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  149.898561][ T6555] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  150.552928][ T5774] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  150.575708][ T5774] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  150.583385][ T5774] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  150.612736][ T5774] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  150.635487][ T5774] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  150.652455][ T5774] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  150.684292][ T5774] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  151.300737][ T6589] netlink: 'syz.2.134': attribute type 3 has an invalid length.
[  152.229109][ T6593] loop1: detected capacity change from 0 to 128
[  156.204920][ T6616] loop2: detected capacity change from 0 to 128
[  156.917247][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'.
[  157.097932][ T6617] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  157.140057][ T6617] macvtap1: entered allmulticast mode
[  157.149943][ T6617] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  157.191151][ T6617] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  157.198713][ T6617] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  160.470305][ T6632] loop2: detected capacity change from 0 to 8192
[  160.748114][ T6632] syz.2.145: attempt to access beyond end of device
[  160.748114][ T6632] loop5: rw=0, sector=0, nr_sectors = 8 limit=0
[  160.761349][ T6632] F2FS-fs (loop5): Unable to read 1th superblock
[  160.768566][ T6632] syz.2.145: attempt to access beyond end of device
[  160.768566][ T6632] loop5: rw=0, sector=8, nr_sectors = 8 limit=0
[  160.781433][ T6632] F2FS-fs (loop5): Unable to read 2th superblock
[  162.034716][ T6639] Cannot find add_set index 0 as target
[  162.678344][ T6644] loop4: detected capacity change from 0 to 512
[  162.781369][ T6644] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  162.845908][ T6644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  162.881732][ T6644] System zones: 1-12
[  162.917196][ T6644] EXT4-fs (loop4): 1 truncate cleaned up
[  162.948151][ T6644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.395030][ T5900] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.459726][ T6637] loop2: detected capacity change from 0 to 40427
[  163.478647][ T6637] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  163.511969][ T6637] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  163.528543][ T5900] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.567150][ T5900] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.639255][ T6637] F2FS-fs (loop2): Found nat_bits in checkpoint
[  163.646703][ T6651] loop1: detected capacity change from 0 to 4096
[  163.663120][ T5900] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.685297][ T6651] EXT4-fs: inline encryption not supported
[  163.721307][ T5900] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.744316][ T5900] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.768705][ T5900] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.830513][ T5900] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.876734][ T5900] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  163.953554][ T5900] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  163.982250][ T6637] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  163.995372][ T6651] EXT4-fs (loop1): Test dummy encryption mode enabled
[  164.026959][ T6637] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  164.042762][ T6651] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  164.076974][ T6651] System zones: 0-5
[  164.107920][ T6651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.604752][ T6667] netlink: 44 bytes leftover after parsing attributes in process `syz.0.153'.
[  165.289845][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.443687][ T6671] loop0: detected capacity change from 0 to 256
[  165.451748][ T6671] exfat: Deprecated parameter 'utf8'
[  165.474277][ T6671] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  165.968663][ T5900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.057759][ T3487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.302228][ T3487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.482068][ T3487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.655881][ T3487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.787080][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'.
[  166.808216][ T6689] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.162'.
[  166.995423][ T6690] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  167.009374][ T6690] macvtap1: entered allmulticast mode
[  167.019705][ T6690] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  167.084950][ T6690] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  167.092389][ T6690] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  167.250950][ T6683] loop2: detected capacity change from 0 to 40427
[  167.303273][ T6683] F2FS-fs (loop2): invalid crc value
[  167.330729][ T6683] F2FS-fs (loop2): Found nat_bits in checkpoint
[  167.380578][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.390529][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.399033][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.409187][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.418546][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  167.426865][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.527267][ T6683] F2FS-fs (loop2): Start checkpoint disabled!
[  167.584360][ T6683] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  168.100545][   T49] kworker/u4:3: attempt to access beyond end of device
[  168.100545][   T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  168.134324][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  168.153638][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  168.827072][ T6713] loop0: detected capacity change from 0 to 512
[  168.842405][ T6713] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.919448][ T6713] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.165: corrupted in-inode xattr: invalid ea_ino
[  169.033974][ T6713] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.165: couldn't read orphan inode 15 (err -117)
[  169.059279][ T6713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.144090][ T6713] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #13: comm syz.0.165: corrupted inode contents
[  169.255113][ T6713] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #13: comm syz.0.165: mark_inode_dirty error
[  169.326550][ T6713] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.165: invalid indirect mapped block 234881024 (level 0)
[  169.345096][ T6693] chnl_net:caif_netlink_parms(): no params data found
[  169.376162][ T6713] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #13: comm syz.0.165: corrupted inode contents
[  169.435862][ T6713] EXT4-fs error (device loop0): ext4_truncate:4301: inode #13: comm syz.0.165: mark_inode_dirty error
[  169.521325][ T6713] EXT4-fs error (device loop0) in ext4_setattr:5682: Corrupt filesystem
[  169.571039][ T6719] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #13: comm syz.0.165: corrupted inode contents
[  169.602767][ T6719] EXT4-fs error (device loop0): ext4_rename:4059: inode #13: comm syz.0.165: mark_inode_dirty error
[  169.661049][ T5782] Bluetooth: hci0: command tx timeout
[  169.759227][ T5774] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #13: comm syz-executor: corrupted inode contents
[  169.792544][ T5774] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #13: comm syz-executor: mark_inode_dirty error
[  169.810734][  T967] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  169.824274][ T5774] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  169.856369][ T6730] loop1: detected capacity change from 0 to 512
[  169.884967][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.898124][ T6730] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  169.945772][ T6730] EXT4-fs (loop1): 1 truncate cleaned up
[  169.953006][ T6730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.009556][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.035112][  T967] usb 3-1: Using ep0 maxpacket: 32
[  170.038274][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.047999][ T6693] bridge_slave_0: entered allmulticast mode
[  170.055457][ T6693] bridge_slave_0: entered promiscuous mode
[  170.069272][  T967] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  170.107869][  T967] usb 3-1: config 0 has no interface number 0
[  170.140507][  T967] usb 3-1: config 0 interface 184 has no altsetting 0
[  170.171667][  T967] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  170.205865][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.240112][  T967] usb 3-1: Product: syz
[  170.244366][  T967] usb 3-1: Manufacturer: syz
[  170.273192][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.283951][  T967] usb 3-1: SerialNumber: syz
[  170.311427][  T967] usb 3-1: config 0 descriptor??
[  170.318807][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.335843][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.343126][ T6693] bridge_slave_1: entered allmulticast mode
[  170.350661][ T6693] bridge_slave_1: entered promiscuous mode
[  170.401036][  T967] smsc75xx v1.0.0
[  171.593872][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.625019][  T967] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  171.650869][  T967] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  171.668146][  T967] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  171.691497][ T3487] hsr_slave_0: left promiscuous mode
[  171.692576][  T967] smsc75xx: probe of 3-1:0.184 failed with error -32
[  171.704019][ T3487] hsr_slave_1: left promiscuous mode
[  171.720924][  T967] usb 3-1: USB disconnect, device number 7
[  171.745096][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.762750][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.765117][ T6742] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.170'.
[  171.783069][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.811786][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.841578][ T3487] bridge_slave_1: left allmulticast mode
[  171.851954][ T3487] bridge_slave_1: left promiscuous mode
[  171.857785][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.870907][ T3487] bridge_slave_0: left allmulticast mode
[  171.878256][ T5782] Bluetooth: hci0: command tx timeout
[  171.884839][ T3487] bridge_slave_0: left promiscuous mode
[  171.890635][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.923776][ T3487] veth1_macvtap: left promiscuous mode
[  171.930944][ T3487] veth0_macvtap: left promiscuous mode
[  171.936763][ T3487] veth1_vlan: left promiscuous mode
[  171.942766][ T3487] veth0_vlan: left promiscuous mode
[  173.051831][ T3487] team0 (unregistering): Port device team_slave_1 removed
[  173.152568][ T3487] team0 (unregistering): Port device team_slave_0 removed
[  173.226078][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.112565][ T5782] Bluetooth: hci0: command tx timeout
[  175.356898][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.814518][ T3487] bond0 (unregistering): Released all slaves
[  175.946035][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.986412][ T6758] loop2: detected capacity change from 0 to 256
[  176.091021][ T6758] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  176.099202][ T6693] team0: Port device team_slave_0 added
[  176.160454][ T6693] team0: Port device team_slave_1 added
[  176.191734][   T27] audit: type=1800 audit(1779310459.948:5): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.175" name="file2" dev="loop2" ino=1048606 res=0 errno=0
[  176.318156][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.351272][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.393150][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.416781][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.423769][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.507059][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.553744][ T5154] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  176.561280][   T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  176.673259][ T6693] hsr_slave_0: entered promiscuous mode
[  176.682677][ T6693] hsr_slave_1: entered promiscuous mode
[  176.756533][ T5154] usb 1-1: Using ep0 maxpacket: 32
[  176.761856][   T23] usb 2-1: Using ep0 maxpacket: 8
[  176.787953][ T5154] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  176.815378][   T23] usb 2-1: config 2 has an invalid interface number: 72 but max is 0
[  176.824239][ T5154] usb 1-1: config 0 has no interface number 0
[  176.830392][ T5154] usb 1-1: config 0 interface 12 has no altsetting 0
[  176.846956][   T23] usb 2-1: config 2 has no interface number 0
[  176.871823][   T23] usb 2-1: config 2 interface 72 has no altsetting 0
[  176.887152][ T5154] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  176.906178][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.919612][   T23] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  176.940326][ T5154] usb 1-1: Product: syz
[  176.944554][ T5154] usb 1-1: Manufacturer: syz
[  176.949276][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.957301][   T23] usb 2-1: Product: syz
[  176.976957][ T5154] usb 1-1: SerialNumber: syz
[  176.982567][   T23] usb 2-1: Manufacturer: syz
[  176.987214][   T23] usb 2-1: SerialNumber: syz
[  176.994642][ T5154] usb 1-1: config 0 descriptor??
[  177.084191][ T6778] veth0_to_bridge: entered allmulticast mode
[  177.093897][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'.
[  177.238565][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.256904][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.265017][   T51] Bluetooth: hci0: command tx timeout
[  177.351600][ T6693] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  177.367746][ T6693] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  177.382593][ T6693] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  177.404209][ T6693] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  177.498865][ T5154] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  177.527875][ T5154] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  177.545929][ T5154] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  177.565367][ T5154] f81534: probe of 1-1:0.12 failed with error -71
[  177.609447][ T5154] usb 1-1: USB disconnect, device number 5
[  177.702213][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.746567][ T6693] 8021q: adding VLAN 0 to HW filter on device team0
[  177.766176][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.773392][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.808652][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.815997][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.412649][   T23] usb 2-1: bad CDC descriptors
[  178.439290][   T23] usb 2-1: USB disconnect, device number 9
[  178.464281][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.481702][ T5782] Bluetooth: hci0: command tx timeout
[  180.507420][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  181.420241][ T6822] netlink: 'syz.0.184': attribute type 72 has an invalid length.
[  181.484031][ T6693] veth0_vlan: entered promiscuous mode
[  181.540125][ T6693] veth1_vlan: entered promiscuous mode
[  181.634247][ T6693] veth0_macvtap: entered promiscuous mode
[  181.667859][ T6693] veth1_macvtap: entered promiscuous mode
[  181.722647][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.740550][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.753216][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.767896][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.786924][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.798502][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.827845][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.885476][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.902849][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.913691][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.933688][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.946562][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.960145][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.002100][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.028573][ T6693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.071237][ T6693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.098316][ T6693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.116180][ T6693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.280773][ T6844] loop0: detected capacity change from 0 to 512
[  182.356124][ T6844] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  182.425398][ T6844] EXT4-fs (loop0): 1 truncate cleaned up
[  182.574608][ T6850] loop2: detected capacity change from 0 to 512
[  182.610882][ T6844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.822633][ T6850] EXT4-fs (loop2): 1 truncate cleaned up
[  182.836000][ T6850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.151236][   T27] audit: type=1800 audit(1779310467.397:6): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.187" name="file1" dev="loop0" ino=15 res=0 errno=0
[  184.224700][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.257604][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.278367][ T5773] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  185.797509][ T5773] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  185.836772][ T5773] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  185.852636][ T6856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.890761][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.912797][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.921343][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.932998][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.370377][ T6865] Cannot find add_set index 0 as target
[  186.887772][ T5979] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  187.595676][ T6875] loop0: detected capacity change from 0 to 16
[  187.656477][ T5979] usb 3-1: Using ep0 maxpacket: 32
[  187.665113][ T5979] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  187.676843][ T5979] usb 3-1: config 0 has no interface number 0
[  187.684299][ T5979] usb 3-1: config 0 interface 12 has no altsetting 0
[  187.706083][ T5979] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  187.711253][ T6875] erofs: (device loop0): mounted with root inode @ nid 36.
[  187.759007][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.780951][ T5979] usb 3-1: Product: syz
[  187.789941][ T5979] usb 3-1: Manufacturer: syz
[  187.795153][ T5979] usb 3-1: SerialNumber: syz
[  187.803019][ T5979] usb 3-1: config 0 descriptor??
[  188.559853][ T5979] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71
[  188.598101][ T5979] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  188.625636][ T5979] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  188.654084][ T5979] f81534: probe of 3-1:0.12 failed with error -71
[  188.679723][ T5979] usb 3-1: USB disconnect, device number 8
[  188.917308][ T5839] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  189.144728][ T5839] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  189.166148][ T5839] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  189.220361][ T5839] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  189.242276][ T5839] usb 6-1: config 220 has no interface number 2
[  189.250629][ T5839] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  189.276464][ T5839] usb 6-1: config 220 interface 0 has no altsetting 0
[  189.287446][ T5839] usb 6-1: config 220 interface 76 has no altsetting 0
[  189.296288][ T6885] loop0: detected capacity change from 0 to 40427
[  189.301663][ T5839] usb 6-1: config 220 interface 1 has no altsetting 0
[  189.329445][ T6885] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  189.350608][ T5839] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  189.359939][ T6885] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  189.366633][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.383738][ T6885] F2FS-fs (loop0): invalid crc value
[  189.394913][ T5839] usb 6-1: Product: syz
[  189.416973][ T6885] F2FS-fs (loop0): Found nat_bits in checkpoint
[  189.426899][ T5839] usb 6-1: Manufacturer: syz
[  189.451577][ T5839] usb 6-1: SerialNumber: syz
[  189.632071][ T6885] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  189.663566][ T6885] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  189.727783][ T5839] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  189.767033][ T5839] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  189.774265][ T5839] usb 6-1: No valid video chain found.
[  189.780405][ T5839] usb 6-1: selecting invalid altsetting 0
[  189.866389][ T5839] usb 6-1: selecting invalid altsetting 0
[  189.893893][ T5839] usbtest: probe of 6-1:220.1 failed with error -22
[  189.932616][ T5839] usb 6-1: USB disconnect, device number 2
[  189.955243][ T6885] syz.0.194: attempt to access beyond end of device
[  189.955243][ T6885] loop0: rw=2049, sector=45096, nr_sectors = 40 limit=40427
[  190.584147][ T6922] Cannot find add_set index 0 as target
[  193.222985][ T6931] loop2: detected capacity change from 0 to 512
[  193.307171][ T6931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  193.415058][ T6931] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.202: iget: bad extra_isize 58 (inode size 256)
[  193.470594][ T6931] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.202: error while reading EA inode 11 err=-117
[  193.539340][ T6931] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.202: iget: bad extra_isize 58 (inode size 256)
[  193.577515][ T6931] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.202: error while reading EA inode 11 err=-117
[  193.622069][ T6931] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.202: iget: bad extra_isize 58 (inode size 256)
[  193.662532][ T6931] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.202: error while reading EA inode 18 err=-117
[  193.699162][ T6931] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.202: iget: bad extra_isize 58 (inode size 256)
[  193.742711][ T6931] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.202: error while reading EA inode 18 err=-117
[  193.780157][ T6931] EXT4-fs (loop2): 1 orphan inode deleted
[  193.813857][ T6931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.882871][ T6931] EXT4-fs error (device loop2): __ext4_iget:5078: inode #14: block 1886221359: comm syz.2.202: invalid block
[  194.003014][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.343494][ T6956] netlink: 'syz.2.206': attribute type 72 has an invalid length.
[  194.484996][   T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  194.538777][ T6937] loop1: detected capacity change from 0 to 40427
[  194.542928][ T6963] loop0: detected capacity change from 0 to 256
[  194.564267][ T6937] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff
[  194.607836][ T6937] F2FS-fs (loop1): invalid crc value
[  194.649576][ T6937] F2FS-fs (loop1): Found nat_bits in checkpoint
[  194.657994][ T6963] FAT-fs (loop0): Directory bread(block 64) failed
[  194.679868][ T6963] FAT-fs (loop0): Directory bread(block 65) failed
[  194.688360][   T23] usb 6-1: Using ep0 maxpacket: 8
[  194.706813][ T6963] FAT-fs (loop0): Directory bread(block 66) failed
[  194.713489][   T23] usb 6-1: config 2 has an invalid interface number: 72 but max is 0
[  194.713517][   T23] usb 6-1: config 2 has no interface number 0
[  194.713549][   T23] usb 6-1: config 2 interface 72 has no altsetting 0
[  194.716573][   T23] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  194.760821][ T6963] FAT-fs (loop0): Directory bread(block 67) failed
[  194.799164][ T6963] FAT-fs (loop0): Directory bread(block 68) failed
[  194.802558][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.839497][ T6963] FAT-fs (loop0): Directory bread(block 69) failed
[  194.857128][   T23] usb 6-1: Product: syz
[  194.860892][ T6963] FAT-fs (loop0): Directory bread(block 70) failed
[  194.868347][ T6963] FAT-fs (loop0): Directory bread(block 71) failed
[  194.872468][   T23] usb 6-1: Manufacturer: syz
[  194.880444][ T6963] FAT-fs (loop0): Directory bread(block 72) failed
[  194.887100][ T6963] FAT-fs (loop0): Directory bread(block 73) failed
[  194.913743][   T23] usb 6-1: SerialNumber: syz
[  195.387809][ T6982] Cannot find add_set index 0 as target
[  195.478672][ T5839] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  195.933954][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short
[  195.954698][ T5839] usb 2-1: not running at top speed; connect to a high speed hub
[  195.973549][ T5839] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  195.990302][ T5839] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 236, changing to 4
[  196.080598][ T5839] usb 2-1: string descriptor 0 read error: -22
[  196.091735][ T5839] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  196.137892][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.184103][ T5839] usb 2-1: unit 3 not found!
[  196.567186][ T6992] loop0: detected capacity change from 0 to 256
[  196.606412][ T6992] FAT-fs (loop0): Unrecognized mount option "00000000000000000003" or missing value
[  196.714637][ T5868] usb 2-1: USB disconnect, device number 10
[  197.205307][ T7003] loop0: detected capacity change from 0 to 128
[  197.223477][ T7003] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  197.286613][ T7003] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.357350][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  197.784376][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  198.281076][ T2974] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  198.303438][   T23] usb 6-1: bad CDC descriptors
[  198.330044][   T23] usb 6-1: USB disconnect, device number 3
[  198.875439][ T7018] Invalid option length (187) for dns_resolver key
[  200.973758][ T7020] loop1: detected capacity change from 0 to 256
[  201.116750][ T7020] exfat: Deprecated parameter 'utf8'
[  201.211802][ T7020] exfat: Deprecated parameter 'namecase'
[  201.337691][ T7020] exfat: Deprecated parameter 'namecase'
[  201.611408][ T7020] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  201.915313][ T7023] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.219'.
[  202.160198][ T7026] loop1: detected capacity change from 0 to 1024
[  202.183020][ T7026] EXT4-fs: Ignoring removed bh option
[  202.266352][ T7026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.362960][ T7026] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.220: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  202.423232][ T7026] EXT4-fs (loop1): Remounting filesystem read-only
[  202.491948][ T7034] Cannot find add_set index 0 as target
[  203.129372][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.332900][ T5839] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  203.389257][   T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  203.546674][ T5839] usb 6-1: Using ep0 maxpacket: 16
[  203.554972][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.566821][ T5839] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  203.582214][ T5839] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  203.592096][ T5839] usb 6-1: New USB device strings: Mfr=237, Product=1, SerialNumber=3
[  203.601826][ T5839] usb 6-1: Product: syz
[  203.606064][ T5839] usb 6-1: Manufacturer: syz
[  203.611710][   T23] usb 3-1: Using ep0 maxpacket: 8
[  203.617474][ T5839] usb 6-1: SerialNumber: syz
[  203.626108][   T23] usb 3-1: config 2 has an invalid interface number: 72 but max is 0
[  203.637342][ T5839] usb 6-1: config 0 descriptor??
[  203.646065][   T23] usb 3-1: config 2 has no interface number 0
[  203.652210][   T23] usb 3-1: config 2 interface 72 has no altsetting 0
[  203.662949][   T23] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  203.672262][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.680524][   T23] usb 3-1: Product: syz
[  203.684709][   T23] usb 3-1: Manufacturer: syz
[  203.691133][   T23] usb 3-1: SerialNumber: syz
[  203.699572][ T5979] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  203.911095][ T5979] usb 1-1: Using ep0 maxpacket: 8
[  203.926794][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.942441][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  203.965792][ T5979] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  203.977956][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.003506][ T5979] usb 1-1: config 0 descriptor??
[  204.101360][ T5839] usb 6-1: USB disconnect, device number 4
[  204.250133][ T5979] usbhid 1-1:0.0: can't add hid device: -71
[  204.265859][ T5979] usbhid: probe of 1-1:0.0 failed with error -71
[  204.278904][ T5979] usb 1-1: USB disconnect, device number 6
[  204.669835][   T23] usb 3-1: bad CDC descriptors
[  204.693295][   T23] usb 3-1: USB disconnect, device number 9
[  204.836506][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.228'.
[  205.074281][ T7068] netlink: 64 bytes leftover after parsing attributes in process `syz.5.228'.
[  205.128368][ T5776] Bluetooth: hci2: command 0x0406 tx timeout
[  205.140032][ T5776] Bluetooth: hci1: command 0x0406 tx timeout
[  205.140218][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  207.953822][ T7086] erspan1: entered promiscuous mode
[  207.969012][ T7086] erspan1: entered allmulticast mode
[  208.098875][ T7087] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.231'.
[  208.463010][   T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  208.782771][   T23] usb 3-1: Using ep0 maxpacket: 32
[  208.842416][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  208.874568][   T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.918952][   T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  208.985895][   T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  209.039068][   T23] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  209.048184][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.109524][   T23] usb 3-1: Product: syz
[  209.132582][   T23] usb 3-1: Manufacturer: syz
[  209.149095][   T23] usb 3-1: SerialNumber: syz
[  209.450312][ T7084] loop5: detected capacity change from 0 to 40427
[  209.475241][ T7084] F2FS-fs (loop5): build fault injection attr: rate: 174, type: 0x7ffff
[  209.537118][   T23] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor
[  209.584216][   T23] usb 3-1: 1:1 : unsupported format bits 0x2002
[  209.590773][   T23] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  209.648200][ T5868] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  209.649021][   T23] usb 3-1: unit 37 not found!
[  209.671022][   T23] usb 3-1: unit 0 not found!
[  209.803335][   T23] usb 3-1: USB disconnect, device number 10
[  209.852374][ T5868] usb 2-1: Using ep0 maxpacket: 8
[  209.880279][ T5868] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  209.926106][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.957109][ T5868] usb 2-1: Product: syz
[  209.981790][ T5868] usb 2-1: Manufacturer: syz
[  210.007791][ T5868] usb 2-1: SerialNumber: syz
[  210.032072][ T5868] usb 2-1: config 0 descriptor??
[  210.056418][ T5868] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  210.071721][ T5868] dvb-usb: bulk message failed: -22 (2/0)
[  210.096250][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  210.116566][ T5868] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  210.147969][ T5868] usb 2-1: media controller created
[  210.250291][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  210.338935][ T5868] dvb-usb: bulk message failed: -22 (1/0)
[  210.341507][ T7111] loop0: detected capacity change from 0 to 512
[  210.358446][ T7111] EXT4-fs (loop0): orphan cleanup on readonly fs
[  210.366557][ T7111] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.239: bad orphan inode 15
[  210.399451][ T7111] ext4_test_bit(bit=14, block=18) = 1
[  210.432851][ T7111] is_bad_inode(inode)=0
[  210.437101][ T7111] NEXT_ORPHAN(inode)=1023
[  210.499912][ T7111] max_ino=32
[  210.524686][ T7111] i_nlink=0
[  210.559408][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.593856][ T5868] DVB: Unable to find symbol mt352_attach()
[  210.603384][ T7111] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.239: bg 0: block 161: padding at end of block bitmap is not set
[  210.604703][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.651338][ T7111] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  210.653994][ T5868] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  210.697788][ T7111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  210.716556][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.741691][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.847259][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.866315][ T5868] rc_core: IR keymap rc-dvico-portable not found
[  210.872806][ T5868] Registered IR keymap rc-empty
[  210.888901][ T5868] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  210.937712][ T5868] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10
[  210.999821][ T5868] dvb-usb: schedule remote query interval to 100 msecs.
[  211.020744][ T5868] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  211.060179][ T5868] usb 2-1: USB disconnect, device number 11
[  211.207032][ T5868] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  211.615649][ T7120] mmap: syz.2.240 (7120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  211.764896][  T787] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  211.902250][ T7140] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.245'.
[  211.977687][  T787] usb 1-1: Using ep0 maxpacket: 8
[  211.987956][  T787] usb 1-1: config 2 has an invalid interface number: 72 but max is 0
[  211.996375][  T787] usb 1-1: config 2 has no interface number 0
[  212.003785][  T787] usb 1-1: config 2 interface 72 has no altsetting 0
[  212.028262][  T787] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  212.037461][   T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  212.045076][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.053760][  T787] usb 1-1: Product: syz
[  212.058276][  T787] usb 1-1: Manufacturer: syz
[  212.064203][  T787] usb 1-1: SerialNumber: syz
[  212.285600][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  212.301329][   T23] usb 3-1: unable to read config index 0 descriptor/start: -71
[  212.339318][   T23] usb 3-1: can't read configurations, error -71
[  213.339873][  T787] usb 1-1: bad CDC descriptors
[  213.386254][  T787] usb 1-1: USB disconnect, device number 7
[  213.666224][ T5831] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  213.870050][ T5831] usb 6-1: Using ep0 maxpacket: 8
[  213.906852][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.947890][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  213.973626][ T5831] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00
[  213.983490][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.012862][ T5831] usb 6-1: config 0 descriptor??
[  214.263631][ T7180] overlayfs: missing 'workdir'
[  214.568926][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.582610][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.594576][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.606120][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.614131][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.621853][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.630801][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0xd
[  214.648511][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.668395][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.691914][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.709097][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.729976][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.749151][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.771127][ T5831] itetech 0003:06CB:73F4.0007: unknown main item tag 0x0
[  214.799213][ T5831] itetech 0003:06CB:73F4.0007: unbalanced collection at end of report description
[  214.838603][ T5831] itetech: probe of 0003:06CB:73F4.0007 failed with error -22
[  214.911371][ T5831] usb 6-1: USB disconnect, device number 5
[  215.752293][ T7213] loop5: detected capacity change from 0 to 2048
[  215.783329][ T7213] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.947798][ T7213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.098463][ T7213] EXT4-fs (loop5): shut down requested (2)
[  216.256783][ T6693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.940562][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  218.252880][   T23] usb 1-1: Using ep0 maxpacket: 8
[  218.263816][   T23] usb 1-1: config 2 has an invalid interface number: 72 but max is 0
[  218.272287][   T23] usb 1-1: config 2 has no interface number 0
[  218.319471][   T23] usb 1-1: config 2 interface 72 has no altsetting 0
[  218.346017][   T23] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  218.371292][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.392903][   T23] usb 1-1: Product: syz
[  218.397140][   T23] usb 1-1: Manufacturer: syz
[  218.421323][   T23] usb 1-1: SerialNumber: syz
[  218.859947][ T5868] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  219.051914][ T5868] usb 6-1: device descriptor read/64, error -71
[  219.340432][ T5868] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  219.565169][ T5868] usb 6-1: device descriptor read/64, error -71
[  219.694450][ T5868] usb usb6-port1: attempt power cycle
[  219.708408][   T23] usb 1-1: bad CDC descriptors
[  219.733087][   T23] usb 1-1: USB disconnect, device number 8
[  219.864129][    T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  220.091798][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.114705][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.139574][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  220.153194][ T5868] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  220.178557][    T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  220.195338][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.218671][    T8] usb 3-1: config 0 descriptor??
[  220.234546][ T5868] usb 6-1: device descriptor read/8, error -71
[  220.559596][ T5868] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  220.600885][ T5868] usb 6-1: device descriptor read/8, error -71
[  221.641858][    T8] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  221.659467][ T5868] usb usb6-port1: unable to enumerate USB device
[  221.681027][    T8] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  221.696945][    T8] usb 3-1: USB disconnect, device number 13
[  221.987141][ T7301] fido_id[7301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  222.043505][ T7311] loop0: detected capacity change from 0 to 512
[  222.548366][ T7311] EXT4-fs (loop0): 1 truncate cleaned up
[  222.802458][ T7311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.088262][   T27] audit: type=1800 audit(1779310503.837:7): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.273" name="file1" dev="loop0" ino=13 res=0 errno=0
[  223.093041][ T7311] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.273: bg 0: block 465: padding at end of block bitmap is not set
[  223.193795][ T7311] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28
[  223.241024][ T7311] EXT4-fs (loop0): This should not happen!! Data will be lost
[  223.241024][ T7311] 
[  223.287943][ T7311] EXT4-fs (loop0): Total free blocks count 0
[  223.302575][ T7311] EXT4-fs (loop0): Free/Dirty block details
[  223.320688][ T7311] EXT4-fs (loop0): free_blocks=0
[  223.332972][ T7311] EXT4-fs (loop0): dirty_blocks=4
[  223.348318][ T7311] EXT4-fs (loop0): Block reservation details
[  223.422516][ T5868] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  223.433107][ T7311] EXT4-fs (loop0): i_reserved_data_blocks=4
[  223.550917][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.600738][ T5868] usb 6-1: device descriptor read/64, error -71
[  223.784636][ T7333] loop0: detected capacity change from 0 to 512
[  223.909872][ T7333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.936385][ T7333] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.937103][ T5868] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  224.117097][ T5868] usb 6-1: device descriptor read/64, error -71
[  224.144784][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.214115][ T7339] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  224.268277][ T5868] usb usb6-port1: attempt power cycle
[  224.662235][  T787] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  224.825537][ T5868] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  224.886832][  T787] usb 1-1: Using ep0 maxpacket: 8
[  224.926323][  T787] usb 1-1: config 2 has an invalid interface number: 72 but max is 0
[  224.967383][ T5868] usb 6-1: device descriptor read/8, error -71
[  224.971978][  T787] usb 1-1: config 2 has no interface number 0
[  224.980379][  T787] usb 1-1: config 2 interface 72 has no altsetting 0
[  225.017213][  T787] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  225.052975][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.094101][  T787] usb 1-1: Product: syz
[  225.098912][  T787] usb 1-1: Manufacturer: syz
[  225.136163][  T787] usb 1-1: SerialNumber: syz
[  225.303681][ T5868] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  225.358182][ T5868] usb 6-1: device descriptor read/8, error -71
[  225.530239][ T5868] usb usb6-port1: unable to enumerate USB device
[  225.657115][ T7363] afs: Unknown parameter 'dy'
[  226.805835][ T7370] loop5: detected capacity change from 0 to 256
[  226.847858][ T7370] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  227.978942][ T7388] loop1: detected capacity change from 0 to 1024
[  227.999002][ T7388] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.005539][ T7388] EXT4-fs: Ignoring removed bh option
[  228.055593][ T7390] syz.5.286[7390] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.055950][ T7390] syz.5.286[7390] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.102569][  T787] usb 1-1: bad CDC descriptors
[  228.120613][ T7388] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  228.163312][  T787] usb 1-1: USB disconnect, device number 9
[  228.264568][ T7388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.585070][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.661040][ T7408] loop2: detected capacity change from 0 to 256
[  228.711735][ T7408] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d)
[  228.861709][  T787] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  229.876980][  T787] usb 1-1: device descriptor read/64, error -71
[  230.166875][  T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  230.497366][  T787] usb 1-1: device descriptor read/64, error -71
[  230.787899][  T787] usb usb1-port1: attempt power cycle
[  231.244625][  T787] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  231.298919][  T787] usb 1-1: device descriptor read/8, error -71
[  231.403461][ T7428] loop1: detected capacity change from 0 to 128
[  231.587466][  T787] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  231.645557][  T787] usb 1-1: device descriptor read/8, error -71
[  231.780649][  T787] usb usb1-port1: unable to enumerate USB device
[  231.822839][  T967] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  231.978809][ T7448] netlink: 388 bytes leftover after parsing attributes in process `syz.1.300'.
[  232.046886][  T967] usb 3-1: Using ep0 maxpacket: 8
[  232.054394][  T967] usb 3-1: config 2 has an invalid interface number: 72 but max is 0
[  232.088932][  T967] usb 3-1: config 2 has no interface number 0
[  232.095103][  T967] usb 3-1: config 2 interface 72 has no altsetting 0
[  232.154253][  T967] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[  232.165914][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.176126][  T967] usb 3-1: Product: syz
[  232.180427][  T967] usb 3-1: Manufacturer: syz
[  232.189814][  T967] usb 3-1: SerialNumber: syz
[  232.436426][ T7453] loop1: detected capacity change from 0 to 8192
[  232.491707][ T7453] syz.1.301: attempt to access beyond end of device
[  232.491707][ T7453] loop3: rw=0, sector=0, nr_sectors = 8 limit=0
[  232.554153][ T7453] F2FS-fs (loop3): Unable to read 1th superblock
[  232.570752][ T7453] syz.1.301: attempt to access beyond end of device
[  232.570752][ T7453] loop3: rw=0, sector=8, nr_sectors = 8 limit=0
[  232.633913][ T7453] F2FS-fs (loop3): Unable to read 2th superblock
[  232.970062][ T7456] loop1: detected capacity change from 0 to 128
[  233.049539][ T7456] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.106347][ T7456] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  234.180378][ T7463] 
[  234.182784][ T7463] ======================================================
[  234.189832][ T7463] WARNING: possible circular locking dependency detected
[  234.196889][ T7463] syzkaller #0 Not tainted
[  234.201330][ T7463] ------------------------------------------------------
[  234.208372][ T7463] syz.1.302/7463 is trying to acquire lock:
[  234.214286][ T7463] ffff88805d53d0c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_set_handle+0x19d/0x14c0
[  234.224102][ T7463] 
[  234.224102][ T7463] but task is already holding lock:
[  234.231495][ T7463] ffff88807e4d8c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x321/0x1080
[  234.241830][ T7463] 
[  234.241830][ T7463] which lock already depends on the new lock.
[  234.241830][ T7463] 
[  234.252254][ T7463] 
[  234.252254][ T7463] the existing dependency chain (in reverse order) is:
[  234.261294][ T7463] 
[  234.261294][ T7463] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  234.269773][ T7463]        percpu_down_read+0x44/0x1a0
[  234.275110][ T7463]        ext4_writepages+0x1a4/0x350
[  234.280438][ T7463]        do_writepages+0x3b3/0x630
[  234.285588][ T7463]        __writeback_single_inode+0x153/0xec0
[  234.291698][ T7463]        writeback_single_inode+0x21f/0x760
[  234.297749][ T7463]        write_inode_now+0x183/0x210
[  234.303068][ T7463]        iput+0x5ae/0x920
[  234.307423][ T7463]        ext4_xattr_block_set+0x249e/0x32b0
[  234.313346][ T7463]        ext4_expand_extra_isize_ea+0x12c5/0x1e80
[  234.319800][ T7463]        __ext4_expand_extra_isize+0x306/0x400
[  234.325992][ T7463]        __ext4_mark_inode_dirty+0x45d/0x6e0
[  234.332016][ T7463]        ext4_evict_inode+0x7f3/0xea0
[  234.337506][ T7463]        evict+0x4ca/0x8d0
[  234.342043][ T7463]        ext4_orphan_cleanup+0xbec/0x1420
[  234.347876][ T7463]        ext4_fill_super+0x5eea/0x67b0
[  234.353388][ T7463]        get_tree_bdev+0x3f3/0x520
[  234.358615][ T7463]        vfs_get_tree+0x8c/0x280
[  234.363584][ T7463]        do_new_mount+0x24b/0xa40
[  234.368751][ T7463]        __se_sys_mount+0x2e7/0x3d0
[  234.373978][ T7463]        do_syscall_64+0x55/0xb0
[  234.378937][ T7463]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.385466][ T7463] 
[  234.385466][ T7463] -> #0 (&ei->xattr_sem){++++}-{3:3}:
[  234.393072][ T7463]        __lock_acquire+0x2df1/0x7d40
[  234.398472][ T7463]        lock_acquire+0x19e/0x420
[  234.403521][ T7463]        down_write+0x97/0x200
[  234.408312][ T7463]        ext4_xattr_set_handle+0x19d/0x14c0
[  234.414236][ T7463]        __ext4_set_acl+0x56f/0x650
[  234.419455][ T7463]        ext4_init_acl+0x24d/0x330
[  234.424591][ T7463]        __ext4_new_inode+0x2f27/0x3ac0
[  234.430160][ T7463]        ext4_ext_migrate+0x6f0/0x1080
[  234.435747][ T7463]        ext4_ioctl+0x1ee3/0x3b80
[  234.440803][ T7463]        __se_sys_ioctl+0xfd/0x170
[  234.445943][ T7463]        do_syscall_64+0x55/0xb0
[  234.450917][ T7463]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.457358][ T7463] 
[  234.457358][ T7463] other info that might help us debug this:
[  234.457358][ T7463] 
[  234.467692][ T7463]  Possible unsafe locking scenario:
[  234.467692][ T7463] 
[  234.475159][ T7463]        CPU0                    CPU1
[  234.480626][ T7463]        ----                    ----
[  234.486011][ T7463]   lock(&sbi->s_writepages_rwsem);
[  234.491410][ T7463]                                lock(&ei->xattr_sem);
[  234.498291][ T7463]                                lock(&sbi->s_writepages_rwsem);
[  234.506036][ T7463]   lock(&ei->xattr_sem);
[  234.510521][ T7463] 
[  234.510521][ T7463]  *** DEADLOCK ***
[  234.510521][ T7463] 
[  234.518696][ T7463] 3 locks held by syz.1.302/7463:
[  234.523764][ T7463]  #0: ffff88802f4a2418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200
[  234.533576][ T7463]  #1: ffff88805d539810 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_ioctl+0x1edb/0x3b80
[  234.543993][ T7463]  #2: ffff88807e4d8c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x321/0x1080
[  234.554773][ T7463] 
[  234.554773][ T7463] stack backtrace:
[  234.560686][ T7463] CPU: 1 PID: 7463 Comm: syz.1.302 Not tainted syzkaller #0
[  234.568003][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  234.578085][ T7463] Call Trace:
[  234.581392][ T7463]  <TASK>
[  234.584347][ T7463]  dump_stack_lvl+0x18c/0x250
[  234.589054][ T7463]  ? load_image+0x420/0x420
[  234.593592][ T7463]  ? show_regs_print_info+0x20/0x20
[  234.598830][ T7463]  ? print_circular_bug+0x12b/0x1a0
[  234.604061][ T7463]  check_noncircular+0x2fc/0x400
[  234.609040][ T7463]  ? print_deadlock_bug+0x5d0/0x5d0
[  234.614359][ T7463]  ? lockdep_lock+0xf5/0x230
[  234.619076][ T7463]  ? _find_first_zero_bit+0xd3/0x100
[  234.624404][ T7463]  __lock_acquire+0x2df1/0x7d40
[  234.629389][ T7463]  ? verify_lock_unused+0x140/0x140
[  234.634701][ T7463]  ? mark_lock+0x94/0x320
[  234.639057][ T7463]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  234.645065][ T7463]  ? lock_chain_count+0x20/0x20
[  234.649958][ T7463]  lock_acquire+0x19e/0x420
[  234.654491][ T7463]  ? ext4_xattr_set_handle+0x19d/0x14c0
[  234.660072][ T7463]  ? __might_sleep+0xe0/0xe0
[  234.664694][ T7463]  ? read_lock_is_recursive+0x20/0x20
[  234.670192][ T7463]  ? kasan_set_track+0x5f/0x70
[  234.674987][ T7463]  ? kasan_set_track+0x4e/0x70
[  234.679788][ T7463]  ? __kasan_kmalloc+0x8f/0xa0
[  234.684668][ T7463]  down_write+0x97/0x200
[  234.688943][ T7463]  ? ext4_xattr_set_handle+0x19d/0x14c0
[  234.694535][ T7463]  ? down_read_killable+0x340/0x340
[  234.699859][ T7463]  ext4_xattr_set_handle+0x19d/0x14c0
[  234.705270][ T7463]  ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[  234.711295][ T7463]  ? __ext4_set_acl+0x167/0x650
[  234.716178][ T7463]  ? rcu_is_watching+0x15/0xb0
[  234.721064][ T7463]  ? __ext4_set_acl+0x167/0x650
[  234.725971][ T7463]  ? __kmalloc+0xe2/0x230
[  234.730334][ T7463]  __ext4_set_acl+0x56f/0x650
[  234.735047][ T7463]  ext4_init_acl+0x24d/0x330
[  234.739675][ T7463]  ? __ext4_set_acl+0x650/0x650
[  234.744556][ T7463]  ? ext4_has_metadata_csum+0x1d0/0x1d0
[  234.750137][ T7463]  ? _raw_spin_unlock+0x3a/0x40
[  234.755114][ T7463]  ? insert_inode_locked+0x389/0x3e0
[  234.760434][ T7463]  ? ext4_has_metadata_csum+0x139/0x1d0
[  234.766024][ T7463]  __ext4_new_inode+0x2f27/0x3ac0
[  234.771087][ T7463]  ? ext4_has_group_desc_csum+0x1f0/0x1f0
[  234.776836][ T7463]  ? from_kgid+0x16d/0x690
[  234.781290][ T7463]  ? make_kgid+0x660/0x660
[  234.785739][ T7463]  ext4_ext_migrate+0x6f0/0x1080
[  234.790712][ T7463]  ? rcu_read_lock_any_held+0xb4/0x140
[  234.796224][ T7463]  ? rcu_read_lock_bh_held+0x100/0x100
[  234.801728][ T7463]  ? mb_regenerate_buddy+0x510/0x510
[  234.807056][ T7463]  ? down_read_killable+0x340/0x340
[  234.812296][ T7463]  ? sb_start_write+0x110/0x1c0
[  234.817192][ T7463]  ? mnt_want_write_file+0x16a/0x200
[  234.822520][ T7463]  ext4_ioctl+0x1ee3/0x3b80
[  234.827266][ T7463]  ? ext4_fileattr_set+0x16d0/0x16d0
[  234.832595][ T7463]  ? mark_lock+0x94/0x320
[  234.836959][ T7463]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  234.842974][ T7463]  ? do_vfs_ioctl+0x1573/0x1cc0
[  234.847856][ T7463]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  234.853529][ T7463]  ? tomoyo_path_number_perm+0x217/0x620
[  234.859242][ T7463]  ? __lock_acquire+0x7d40/0x7d40
[  234.864294][ T7463]  ? slab_free_freelist_hook+0x130/0x1a0
[  234.869969][ T7463]  ? tomoyo_path_number_perm+0x500/0x620
[  234.875640][ T7463]  ? __kmem_cache_free+0xba/0x1e0
[  234.880717][ T7463]  ? tomoyo_path_number_perm+0x5b4/0x620
[  234.886383][ T7463]  ? tomoyo_path_number_perm+0x217/0x620
[  234.892143][ T7463]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  234.897654][ T7463]  ? __fget_files+0x28/0x4b0
[  234.902278][ T7463]  ? __fget_files+0x28/0x4b0
[  234.907002][ T7463]  ? bpf_lsm_file_ioctl+0x9/0x10
[  234.911972][ T7463]  ? security_file_ioctl+0x80/0xa0
[  234.917114][ T7463]  ? ext4_fileattr_set+0x16d0/0x16d0
[  234.922431][ T7463]  __se_sys_ioctl+0xfd/0x170
[  234.927055][ T7463]  do_syscall_64+0x55/0xb0
[  234.931504][ T7463]  ? clear_bhb_loop+0x40/0x90
[  234.936214][ T7463]  ? clear_bhb_loop+0x40/0x90
[  234.940919][ T7463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.946845][ T7463] RIP: 0033:0x7fb11b59ce59
[  234.951290][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.971013][ T7463] RSP: 002b:00007fb11c4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  234.979461][ T7463] RAX: ffffffffffffffda RBX: 00007fb11b816090 RCX: 00007fb11b59ce59
[  234.987459][ T7463] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000007
[  234.995460][ T7463] RBP: 00007fb11b632d6f R08: 0000000000000000 R09: 0000000000000000
[  235.003460][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.011457][ T7463] R13: 00007fb11b816128 R14: 00007fb11b816090 R15: 00007ffef8dbc238
[  235.019460][ T7463]  </TASK>
[  235.150441][ T7463] BUG: unable to handle page fault for address: ffffffffffffffec
[  235.158333][ T7463] #PF: supervisor read access in kernel mode
[  235.164315][ T7463] #PF: error_code(0x0000) - not-present page
[  235.170294][ T7463] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 
[  235.176303][ T7463] Oops: 0000 [#1] PREEMPT SMP KASAN
[  235.181518][ T7463] CPU: 0 PID: 7463 Comm: syz.1.302 Not tainted syzkaller #0
[  235.188811][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  235.198926][ T7463] RIP: 0010:ext4_free_ext_path+0x45/0x110
[  235.204678][ T7463] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89
[  235.224648][ T7463] RSP: 0018:ffffc9000bd77638 EFLAGS: 00010246
[  235.230818][ T7463] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000
[  235.238802][ T7463] RDX: ffffc9000e1be000 RSI: 000000000007ffff RDI: ffffffffffffffec
[  235.246955][ T7463] RBP: ffffc9000bd77758 R08: ffff88805d53d21f R09: 1ffff1100baa7a43
[  235.255025][ T7463] R10: dffffc0000000000 R11: ffffed100baa7a44 R12: ffff88805d53d2b0
[  235.263006][ T7463] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000
[  235.270982][ T7463] FS:  00007fb11c4f86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  235.279919][ T7463] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  235.286505][ T7463] CR2: ffffffffffffffec CR3: 000000005c229000 CR4: 00000000003526f0
[  235.294511][ T7463] Call Trace:
[  235.297819][ T7463]  <TASK>
[  235.300764][ T7463]  finish_range+0x234/0x340
[  235.305290][ T7463]  ? update_tind_extent_range+0x3f0/0x3f0
[  235.311048][ T7463]  ? __ext4_sb_bread_gfp+0x14c/0x210
[  235.316364][ T7463]  update_ind_extent_range+0x2e3/0x520
[  235.321850][ T7463]  ext4_ext_migrate+0xb07/0x1080
[  235.326811][ T7463]  ? mb_regenerate_buddy+0x510/0x510
[  235.332471][ T7463]  ? down_read_killable+0x340/0x340
[  235.337695][ T7463]  ? sb_start_write+0x110/0x1c0
[  235.342611][ T7463]  ? mnt_want_write_file+0x16a/0x200
[  235.347917][ T7463]  ext4_ioctl+0x1ee3/0x3b80
[  235.352449][ T7463]  ? ext4_fileattr_set+0x16d0/0x16d0
[  235.358034][ T7463]  ? mark_lock+0x94/0x320
[  235.362474][ T7463]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  235.368474][ T7463]  ? do_vfs_ioctl+0x1573/0x1cc0
[  235.373342][ T7463]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  235.378998][ T7463]  ? tomoyo_path_number_perm+0x217/0x620
[  235.384653][ T7463]  ? __lock_acquire+0x7d40/0x7d40
[  235.389770][ T7463]  ? slab_free_freelist_hook+0x130/0x1a0
[  235.395415][ T7463]  ? tomoyo_path_number_perm+0x500/0x620
[  235.401059][ T7463]  ? __kmem_cache_free+0xba/0x1e0
[  235.406356][ T7463]  ? tomoyo_path_number_perm+0x5b4/0x620
[  235.412004][ T7463]  ? tomoyo_path_number_perm+0x217/0x620
[  235.417652][ T7463]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  235.423141][ T7463]  ? __fget_files+0x28/0x4b0
[  235.427739][ T7463]  ? __fget_files+0x28/0x4b0
[  235.432346][ T7463]  ? bpf_lsm_file_ioctl+0x9/0x10
[  235.437286][ T7463]  ? security_file_ioctl+0x80/0xa0
[  235.442491][ T7463]  ? ext4_fileattr_set+0x16d0/0x16d0
[  235.447789][ T7463]  __se_sys_ioctl+0xfd/0x170
[  235.452396][ T7463]  do_syscall_64+0x55/0xb0
[  235.456824][ T7463]  ? clear_bhb_loop+0x40/0x90
[  235.461512][ T7463]  ? clear_bhb_loop+0x40/0x90
[  235.466198][ T7463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.472099][ T7463] RIP: 0033:0x7fb11b59ce59
[  235.476520][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.496134][ T7463] RSP: 002b:00007fb11c4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  235.504568][ T7463] RAX: ffffffffffffffda RBX: 00007fb11b816090 RCX: 00007fb11b59ce59
[  235.512554][ T7463] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000007
[  235.520550][ T7463] RBP: 00007fb11b632d6f R08: 0000000000000000 R09: 0000000000000000
[  235.528616][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.536606][ T7463] R13: 00007fb11b816128 R14: 00007fb11b816090 R15: 00007ffef8dbc238
[  235.544614][ T7463]  </TASK>
[  235.547743][ T7463] Modules linked in:
[  235.551664][ T7463] CR2: ffffffffffffffec
[  235.555821][ T7463] ---[ end trace 0000000000000000 ]---
[  235.561387][ T7463] RIP: 0010:ext4_free_ext_path+0x45/0x110
[  235.567235][ T7463] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89
[  235.586867][ T7463] RSP: 0018:ffffc9000bd77638 EFLAGS: 00010246
[  235.593034][ T7463] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000
[  235.601101][ T7463] RDX: ffffc9000e1be000 RSI: 000000000007ffff RDI: ffffffffffffffec
[  235.609084][ T7463] RBP: ffffc9000bd77758 R08: ffff88805d53d21f R09: 1ffff1100baa7a43
[  235.617068][ T7463] R10: dffffc0000000000 R11: ffffed100baa7a44 R12: ffff88805d53d2b0
[  235.625050][ T7463] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000
[  235.633053][ T7463] FS:  00007fb11c4f86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  235.642075][ T7463] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  235.648667][ T7463] CR2: ffffffffffffffec CR3: 000000005c229000 CR4: 00000000003526f0
[  235.656740][ T7463] Kernel panic - not syncing: Fatal exception
[  235.663303][ T7463] Kernel Offset: disabled
[  235.667622][ T7463] Rebooting in 86400 seconds..