last executing test programs:

3m59.209997513s ago: executing program 2 (id=3):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
recvmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}, 0x8559}, {{0x0, 0x0, 0x0}, 0xb97}, {{0x0, 0x0, 0x0}, 0x318}], 0x3, 0x20, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20)
shutdown(r1, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000640)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x3c, 0x0, @local, @local, {[@dstopts={0x2f, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0xd}]}]}}}}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{0x10, 0x0, 0xe}, {0xb23, 0x0, 0x8000000000000001}, {0x21a, 0x0, 0x9}]})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000340)={0x5, 0x100000})
mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000009)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a0001bd7000fbdbdf250a8080000000000000000000040008800000"], 0x20}}, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x0, 0x6000})
close(0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x228}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f0000000cc0)={0xc, 0x0, [{0x3, 0x0, 0x9}, {0x9, 0x0, 0x40}, {0x7, 0x0, 0x5}, {0x5, 0x0, 0x100}, {0xcb14, 0x0, 0x7d}, {0x3ff, 0x0, 0x3}, {0x4d7d, 0x0, 0x40}, {0x6, 0x0, 0x5}, {0xff, 0x0, 0x1209}, {0x800, 0x0, 0x7}, {0x0, 0x0, 0x10001}, {0x8, 0x0, 0x8000000000000001}, {0x64c, 0x0, 0xfffffffffffffff5}, {0x6, 0x0, 0x6}, {0x5933881, 0x0, 0x3}, {0x7, 0x0, 0x1}]})

3m56.149671557s ago: executing program 2 (id=11):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2020, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54})
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x6, 0x1, 0x366, 0x2, 0x1, 0x1}]})

3m55.68058092s ago: executing program 2 (id=13):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x21, 0x5556, &(0x7f0000000100)="$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")
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x4000)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x25)
preadv2(r1, 0x0, 0x0, 0x3, 0x88a, 0xb)
keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0)
request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

3m53.240967797s ago: executing program 1 (id=18):
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_LABELS_MASK={0x4}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_NAT_SRC={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8014)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m52.917866206s ago: executing program 1 (id=19):
syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffff1d46, 0x185482)

3m52.744180021s ago: executing program 1 (id=20):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000cc0)={0xc, 0x0, [{0x3, 0x0, 0x9}, {0x9, 0x0, 0x40}, {0x7, 0x0, 0x5}, {0x5, 0x0, 0x100}, {0xcb14, 0x0, 0x7d}, {0x3ff, 0x0, 0x3}, {0x4d7d, 0x0, 0x40}, {0x6, 0x0, 0x5}, {0xff, 0x0, 0x1209}, {0x800, 0x0, 0x7}, {0x0, 0x0, 0x10001}, {0x8, 0x0, 0x8000000000000001}, {0x64c, 0x0, 0xfffffffffffffff5}, {0x6, 0x0, 0x6}, {0x5933881, 0x0, 0x3}, {0x7, 0x0, 0x1}]})

3m52.457922139s ago: executing program 1 (id=22):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1205848, 0x0)

3m52.076697269s ago: executing program 1 (id=25):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r4)
sendmmsg$unix(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x20}}], 0x2, 0x4000010)

3m51.938362143s ago: executing program 2 (id=28):
madvise(&(0x7f000016e000/0x4000)=nil, 0x4000, 0xa)

3m51.242202743s ago: executing program 1 (id=30):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000cc0)={0xc, 0x0, [{0x3, 0x0, 0x9}, {0x9, 0x0, 0x40}, {0x7, 0x0, 0x5}, {0x5, 0x0, 0x100}, {0xcb14, 0x0, 0x7d}, {0x3ff, 0x0, 0x3}, {0x4d7d, 0x0, 0x40}, {0x6, 0x0, 0x5}, {0xff, 0x0, 0x1209}, {0x800, 0x0, 0x7}, {0x0, 0x0, 0x10001}, {0x8, 0x0, 0x8000000000000001}, {0x64c, 0x0, 0xfffffffffffffff5}, {0x6, 0x0, 0x6}, {0x5933881, 0x0, 0x3}, {0x7, 0x0, 0x1}]})

3m50.683331248s ago: executing program 32 (id=30):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000cc0)={0xc, 0x0, [{0x3, 0x0, 0x9}, {0x9, 0x0, 0x40}, {0x7, 0x0, 0x5}, {0x5, 0x0, 0x100}, {0xcb14, 0x0, 0x7d}, {0x3ff, 0x0, 0x3}, {0x4d7d, 0x0, 0x40}, {0x6, 0x0, 0x5}, {0xff, 0x0, 0x1209}, {0x800, 0x0, 0x7}, {0x0, 0x0, 0x10001}, {0x8, 0x0, 0x8000000000000001}, {0x64c, 0x0, 0xfffffffffffffff5}, {0x6, 0x0, 0x6}, {0x5933881, 0x0, 0x3}, {0x7, 0x0, 0x1}]})

3m50.410528265s ago: executing program 2 (id=34):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000300)={[{}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@fat=@usefree}, {@shortname_mixed}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x7, 0x35, 0x31, 0x32, 0x31, 0x66, 0x36, 0x63], 0x2d, [0x226e1ebff13746a5, 0x33, 0x36, 0x31], 0x2d, [0x36, 0x38, 0x39, 0x66], 0x2d, [0x63, 0x50e002e3d09c8d14, 0x61, 0x65], 0x2d, [0x33, 0x34, 0x30, 0x39, 0x66, 0x33, 0x5c, 0x66]}}}]})
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x2, 0x4)

3m49.855592461s ago: executing program 33 (id=34):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000300)={[{}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@fat=@usefree}, {@shortname_mixed}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x7, 0x35, 0x31, 0x32, 0x31, 0x66, 0x36, 0x63], 0x2d, [0x226e1ebff13746a5, 0x33, 0x36, 0x31], 0x2d, [0x36, 0x38, 0x39, 0x66], 0x2d, [0x63, 0x50e002e3d09c8d14, 0x61, 0x65], 0x2d, [0x33, 0x34, 0x30, 0x39, 0x66, 0x33, 0x5c, 0x66]}}}]})
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x2, 0x4)

8.378886524s ago: executing program 4 (id=484):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000037}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000002140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000140)='./file0\x00')
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

8.270805477s ago: executing program 3 (id=485):
unshare(0x400)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, 0x0, 0x0)

8.008114834s ago: executing program 3 (id=486):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000140)=0x3)

7.353702591s ago: executing program 4 (id=487):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x33, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1ab341, 0x114)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
fallocate(r0, 0x0, 0x1, 0x2000402)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7.181767226s ago: executing program 5 (id=488):
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "10d8a5c0"}, @main=@item_4={0x3, 0x0, 0x9, "76d84a82"}]}}, 0x0}, 0x0)

6.484164625s ago: executing program 4 (id=490):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x3f7)

5.56205778s ago: executing program 4 (id=492):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2=0xe000002f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private1, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}}]}]}, 0xc4}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680))
clock_gettime(0x6, &(0x7f0000000000))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0x0, 0x3b2}, 0x0, 0x0, 0x0)
fallocate(r3, 0x8, 0xffffffff, 0x7f)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0)
r4 = epoll_create1(0x80000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
wait4(0x0, 0x0, 0x8, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/18, @ANYRES32=0x1], 0x50)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0))
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
sendmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000100)=@llc={0x1a, 0x302, 0x9, 0x5, 0xff, 0x3}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="073aa85de2a15220bea0acfb83c3af337bfb7c2e641af799ccb67b5f927da6c9b14a9e7eec1a0deb2b009f624d10d63acb30b415651356bbb098c9b1360880b1a9f0ffc8488250c7dd7a4c8a23e7183cb6217bf2c4fd4dc453adc2dc28515b03e7800b661710957af8", 0x69}, {&(0x7f00000003c0)="5b88f7a32e6979a3f0c8923337000e08322582dc2a9f3d7080b3a753a9e28e57858df98e4774c450f3d8ed1ee0dc007660d0baf989dacdae6a3cacab9ffd699020f62c1c2399", 0x46}], 0x2, &(0x7f0000000540)=[{0x60, 0x88, 0xff5, "a82a1330197f46ae9eb735f9b19ec7df6ef761289d0bcd94a4817fb68133d01daa5b94a3af29f19c56aa3e773aa3fb75c9cc21a20a68b95fa7aeb37dbb16acfd645c2a54fa853d486cbc9f"}, {0x78, 0x10c, 0x0, "c13985bd0066d01eed65e9e18ed5acc952fe708fdf69aa2fb6eaacf9bb1074775bcf87272e62ecc9798b7ce33f386dbceb5e3646c64bdd32c9c684c34737bec64e65276a45bd98b5c470877ac375bf38eb23e97001f2372312a2a17b3a5cf47171"}, {0x80, 0x108, 0xc194, "4f794d56e969268cb913bb6650429939204e6abfce02dd252f70f4c52afc9cd3a25cfe009c6be50fa05891a95c88834c56ca57f50ebbfb6fe0d25b9860b51cd298e140a7f661332b2fcd0318a5d6d529275ee3f5f8aace5600eea41c1d059482ce96480ceca8a72e455277ef"}], 0x158}}, {{&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x4, 0x3, {0xa, 0x4e22, 0x0, @mcast2}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000740)="5906a928e90a388c633e5d3da7803a6db99a5bb36938054ab46faa75c6ab4241936394cb0beaf78d473a036ee2a5e989de84ee1223ed086dcc31c0edb5dfdd6d5904a19e48037e9900d45d401f68546ae09c7231fc3c34c10018dd5f08ea141c27001117072071a63e6304ba2e99c5ea00fec89e49f2e9f661e69270b8", 0x7d}, {&(0x7f00000007c0)}, {&(0x7f00000008c0)="4157d008863758dd53fea47004e7c70266588b39662532e3078b9fbad16d0c332dae32d5bbdf7ac2cffce053b52954d76c67098958e940b2273091a0bd02c1d601bdcd285326cbb8d6b541c9c3c0be84225fabcbce900f732aa26638d90e8e6408e480dea0af0eb4675b19b9ba7788cc2163dc24d0c0250c5e590e2f3539b57f8a77f769f02cf784734b66726e9a3ff734baedddb72e6e54e6553bb12c8963", 0x9f}, {&(0x7f0000000980)="da8a50fdf903ca6df953febe24cbd79980528e1e6c3802e5ff2eb1919603027115ec1ed0673b8794780fda95eba43744f205d230744198934b1974c5beaa4e0f09c302b9caaa91dcbd8132ff52520608e5ad69805e3bb73e11ecac2728d7379c966721638dd166a9dd6de6005b6ce282eb339c514242d4e045df7473c96decf0371027784920eb7457d07bbe", 0x8c}], 0x4, &(0x7f0000000a80)=[{0x58, 0x117, 0x4, "a6fc89e57de6e930aa7e1d0babea1ee5ce3a6b2eeb2a7df4a4cd7eef58490c5faa946cda015d21034cca49c67c5ef27c76e8618cd471a86ea1935786fb65392a2b765ffd9050516c"}, {0x60, 0x29, 0xfffff001, "3fdc200c2953c0dfaf236582b236be1d297bec8cae3a831494f574fea02d8afc9a80467c2c95c87f425c3c5131124b69de8157665fbfa0827bff3b618a229aed401087722cfff9a9faf47c"}, {0x70, 0x107, 0x4, "1cb8608f4fc7b64217fad15ddc095e91638cf8b5281ea63faf3051695386bd2a6e6fa0d331f1fa7c72096024c5aa87260b3edaf5d24c6c1f4abcdf9cd9ece888a778f53c6adc53363b4f1bd48ad2df13ce89ec1c3aad77b85b60"}, {0x1010, 0x117, 0x363c, "9df7ca95ea44a6e425bc3f3fbd4c03ba266c05924981e9ceeef88c958155b0d545c5d0c650e18cfddbd5bad77cf42b90c7385562245cd052fb23cbe72ef2636fc38214b71224c0e2f129212ce177c4ca62d0ee16f8b3d64df217819e3345c42d7e054e2d9da68ef2e61392a3f9fe587f7fce3a0b4fe8a295e64f3f080f7e9f2d56e30c8febdfb0758ef4da38fa8ab259f413c7e4c584d2d99e6e93e8f229365893d058ead02ec8b60c4841c3af6d5390cd68f8ca60a77758e4614a1d8000b826923e4fbea2566cbd59200036d733630f6990dac85f4d3eff35e5d4c59909915e251ded53de718033a11b3db4e7b8ec5cfa3d08e57e1baf9c9400893e6f40b65c66c4e009e390193cdc650f5fdf2915305fbf5b576750ee83520bbd9bac9fcfeeeec2be48d41d612eae626b56026d45e7e56d3e19e73c55e4ce5694ddc38e8f33c63e927de066c5cd07ac1a15a55bc9ab15bf0cfa34f80ef18d70472cd7cb95aa999c3c1c012231caf1c09570f67d5124d81272282ffac7923fb15d581f57f1d5f5672fc7dfc190103779a7c60474b7c959cd42091f3b301c93f9ff4f3ef7c42f213f53a405d1ad269a7e1eb64e74db6d16b1f9d4d75ddd023a21dc3737ae0e811aca037910dcd40d2064a4a759d231ca72fc1dd01508b62b5ddc9c007139be85aa56d1eb50d2793ef9dfe0c84204bfaa89a19935c659cc9cec01ab8c7b9dfb0457cc9be5eeddad13288cb5b25d1580668db72e3490a1bb88ac7c394050daa6883ac0e32001ef77f9c22d008fe718bf1aabcd5f9735bca609a6a49ed63255a481360141c8ecc64f236eba73cf8b3b46ea9371e66b580c567eb53eb40c8e3f5367a3e054f63fdadd33aecdaf0479da86bb169e2e859debf11fc27e5516c6a75296eaa8d8c20abbf7a268fa89da4d4be8b90d4bca5423b0138c340361d6b968e37a4c6e84542ee01e2146b526e1c602c226000f554b58db1ea03d1b1c52fc12a2597264de967a664fc416ccc4d536902d8e4f54d55261b272bb5c606db425f9ff88ad7f8b08afc67d44203814978b2492b299723b976f22ac17ad8dc7d2f1795c527ae28c6a648f10d8e52ec55bfacf2dc96d5096fb8d6636917573aa36b2163c13a4dc76d08bfc5e14a8adb21074b4ea0f191589436d40efacdf96f399997977e53798213d08b6f04825e458858f1fb29fbe3fe6bfe49b63e324f8f9e20f4197acaf747bcafb724932e3c49d9436a470b326ff38bc472d5d303e6b685ba448c9757dd5e703a3ff1aa0812ed457840b8e380328c1c0ff5fa0c5f9fdd84d68dd7eaef89fc9abbae97d1b394e1807318214f93a5968b84d3dd2ab928ee2fdac5cad5bc33c2c576e89a61060d28c13cf4d377a6be48d0d9141f98f757425e42d276623f57f1bb513f2c3a93404267129ddc25855f089ab44dfe3113e2088538e4f53b3f1ec1741691d484695cb441647cde6720374b663c741914af9c165fd090850489370c9a7d8617357f61a1b0308e4e1ae0fc2ac8bd84128bcf045ae2449333a9466eb00d915e77fe88bbf5e359d58230187d1cee796d452dc4ad070d4228b240a6b5a25d59d91af8c70daaa57f88fa82564dea90b6cb6faf6af1c05ee6edc2caa740a1f39abbe271f5d3ffb507464637442dc6c1cc04909c044200407ad288cc53944f1ad874e830e7f6dcc6388afc81220de0b22b71067325aed5ba64684eab7d98f4fa8922b70807841925bd83317c3faf1c1ca425fa9698fb5e952ba21e3212244a797c988e3618aff4e722f15e0736ec0d33f65277ff8ad96dae0da0d580fc7d945b78b630129c664014f55507654c346376f1d88bd8562b21d4029e92759d6e20a30c91705a817bd979c8e3796a09c68c22a5a4b1cd0b763ce41fc086c8e2e9bcb5b52568548f405dc3948dbe5d307a28270fcc2fe2c76539250aef9ab9de3133b3376a7ad370b0f2b6aa35054915a0256b23bd32224001a105d6d34a34c01daae3408cacaa3a3622d79a258ec45bffd4d8d7a9a6b06b651d994c9eb499a0d631a75d2b0912ea49da5932760c74b052004d549ea32a707794fdba5205b77869ca9069401424bf7f781914bb63810b7114b97d6f05bafebe19d37a4a1a89498e1f564c95c002b97630d6d5e485ae64ae405a6f66a4edd5f624cb74fadc4d813386b8d28e342b847c59d0b62ee0692682f9192f55d0e93b7a862aeab03ac3990ef9da6f9c3981d58efc5ec8d6064933e64f09c71c2a77b1c3ca1c4c3f45a8c1fb81ed51d1df551d4ded5f71fbf61c27fb7460f3b3567c4697c586b889c8fd6bf1ee3eb8d440894f8ba6ad91e956caf129a77037408f1a6f9710c3573f498e70124a92e14ae2a183e1c1e19424ee3b30fae6687753087bbe9518676addded5231c0d66375f983f6c6158676edececd06bdc4bb14a258ddbff1571c81e4b6b33a52af5a266f877a282b1d0476b4d45c0552fa715bc8ff7f268fce6f06d7761ac1bd74bf755fd0fb9eee731119b0716eb7105fdb5add21d444b9c6bbb96eb0e942b3b928cf57a78ce4a2bc5d46617c0e5b71e5a239e90169ca6a26ce4904ca6e021b8d824be65dd87d54a043ae1c2c6a62b52b9e005a22c27d341417f0e718187d8e6fbb9255524317a6aafd0daa467c94df3f883fc9c16a2e8aebeaf0477ce289bc46ed2723d5f2e296acbaebbfff0521df78e00734aca6b4615fb93c345ef43921dcb401b7ab00864910d9b6c09953450c44f0379317ee27c0c5d1b22aedd114eda0ab9ddfb797bc0c58bcf5292b0f4f5b330d3257326fa4a58653570998ad0e4a70fc258f75d98ea2a7f141873dcc535fcdd3075891c77bd930f3d7c0f9a479b0464afe087339b54957689495abd21a96865c692c004c60ac77cfafde5a1234e8c7bcf663f01c1e1f130921c5d3713b43010db7727217f479a076bf4c28f46816125ef25e1db0d942833b89bc85d5df26c4fae141915c9687281a9dc89575f8720b6833c06cdc38be1afa0c86958cb6bdd8cf22373338394c621ff7e9e7d7b02b88120663f545d6886b9219e0b0937582d57642f81d017d78b1877b168388142bb9d87c30c67225a0b0289f327d92da782b93c03c2f5cc450655d08fc796b4ed6e9a6c216e8353c051047cdb83715cc995ea45ee45c0e2f81830146be1697013d89fbd172e071eb5b43284cbdc499c6a5baa84ca499e5609f75ff209b05bdeeade2af1dfa0a25a93dbac518b60c2a9f5028cdae067421cecda0b236637aceee180ccdac015b7cadb903e69e7eab60dff9a3dc5f4f31a00d652ba4edd8791dd3ea9d277d4eecaa33118e273b83a82e5762877e17e1cd344097b18a12ffc7478343e64a4ab24d204b09a841db0f274c86585d66456594a1960f69c458cd7fd8407fd69826c9c427eaf599b88163e83349a5cdc1fb17cdcfaffd56a496e44eb2bef305115c90d08a662dbc6f939780e64d3fb9ba329f0343b649c8b10fa75afb113a33cde9228f46f37f4d73074f791e3a8e5f2970838116b017f0009f4a9ac0c2138675d824e73e94dc4c6ec135c348768a1d91307e2994d33b047f5caba20dbb9359cc5fe7b5202e71692ccfc9ee5aba339e2a4235e821e67f1f7cf0068721084ffbb6ad559e303e178aa5eb6162ca1a21253f14de610022341c6af0372bb9ab40f5c95bd528c052b5667d2c2ba4dc6d91cda4800f065873741555f8253811eeadad85869b2b727d9800462fbed1e1ee19904f664afeadccc2c9582025215c355e0543da3571b2c0b9089b8a3c3eab1b417d9e0a98e1c8a18b6c5904aa6850496bf4b02018d8a7123338d0512cca2de983ede652fdfd77118e384a28390d796858a7ed8a9f7b4c01c133c537a53411a8fa0966052c6ab883659f356cef272939c2a0659d65d9579f1bba19e15fde1043a789c97de53654b74653b77544cdd764206289d1f6f05f35936393b1ca3e8c75e7372a088f44897093de722939253d31a3da60413a6b1436f6c6ed25271c53ba66f45aaaf963cdc1b128c16401f873f7a42cf6b205504c5b655c5918c4c0f25f65e9326df5ca895fc8b4871831d9837a5040dbae8a24bf963e393e1bf44fd762076b4b8bfaccea402e5a36a99a8dc009fad74c40b1b7ac56d0a967c6db85f155d92a64930be58f27fc5de663f34a1295a878eadcf73324ea2fb297dcacd8bfc2d0da1ca1ed4d193ec3bd5bc028744d71cfce28a8901e3870b9d013594f8593d1b5beed531f41114b7b959c92a77d74818f82203fc94445ae2d1e20a9451260cf0794ab7d6b358954e5c050fe30028d0348c8e65a4e7f9c7263a5f75ef63b0b172dea9528d54ab698fe44734b0cb55fb6a9a5105c87c647f8be06d5b192576fcb80dd4ae3c2512b3c27075627cfe7ee6730dccc7f8237f89a1e1fe9f7274a6efe15455d74db9a23876fe4a904bac28c95b922492a2315f90ac8f57450f69c93b7087a931186bc0b3ea5ab2934932558175dce08a12a3afb01dad435981c54a7e12f39fc1aa1c1d9d0633ba99ef28531325b927649bbdc38348e797a1208cfa7a4535cf8f9e34fb698ff75aacd14bec75d606650a7cd6fcaa14f09ed1aa21a5267021f2473974deafb4a01f0487aabbae1e7098922c4d201ca44071fc8c15288b5ff2d9cc92191e5d11a7612cb01a56bdcb3c7b4b4460247bc9db6217db85dfc10e13f1bd457b5912ababdde305c7f9353bf1b6534a4114c77dcc37c187f2e6e49c01faa3cc74059bd97f363c4e8cb81226bf66ab0cd29e046e640f8a605d03b95f0fa5ab1b5d6ef4efdd5953eb50ebe9f50af1754752adfc6eaf3a67333374863cce32ac87eac868ce93b1ebd8633ce479168cbcd7caae301f592c05050f6dfbf0bb8690204e80cac2a9c383790905c5c0e25ebf16afe1d4f2ccc547e6fe4e4972b9e006c04452c00e91581bbeb8c4a07e53efb831ea2e5e4d22d81af0cec20cec8bbf25b64b7bfe90b75b3779862145d3e4e5fe63b4394cba4b1d8dbce7c01940c5bac950853f9fe183a6b1312e3e8313eea0a83fc467c1593b252bfa3c1683ca6d069a2016f410b79f98649e205cfbbdf19d7bbf280364b0ace071db5f0415912ac6e8485b55cb81d69562385e3affddbf04f73810cee76cbb89cb8d7498a88b70763c5f6568ed607373f38b892d3745ee754a931525952f4f5249b69c015ec79f5c7fc9f2bc3de0b5e4eb33882fdf208dd4fa29ec6a54483cefcb104e5ff5f14ec5c9e1ea7d71a195bba80483f6e109bd827eb39fd721acc14936f820f8e61916baac78b9e757d33d5c11f30ec7a9db964b83381fd5ff4f66d6688487f4342727840823f29d19b900b6224c454f38e9cc16d1c965fb98acd311dcfdc405343872a6901a8151408074e40cb510fae5d268295686140887867924c63e2ca884b9e37d3fdd3b2ef7b8b4e7f677e6b2ed89307783711cc10801567043854447cd1caf39d7ef9ed8b805d0b0681c960e23852abdf3356878fa0bf2d3227761ea9af2b68b9610566ee08ecee83ae5e43264e507bbbb9c84e131c8c28a4f786b4a3c4a36acbac6ec27d0400c325810b0d23d4f7ef3a7c0deba390918766cdd1a6dcce01a31a06e2e8744d37f793d57c86185b458fad29b80eeebd5b0201b06073c56f0ae689edc2294c7fe06143487e409eef00a8b02ff26b656070da59044679403780e43d36d0088a4920151aecbc16b6d4bb4e45cd2d223bd72e506bb32ba4040f36f5c36204930bd426f578ae50289c6179732bd3ffb56440d45bbcb0b03596c9eb36fea9bd9d41719df95e27f02cc27"}, {0xa8, 0x117, 0x7, "ced7c439f39e7948552dcfed1b51bf5c8deac9a7891ab202ad9c8b29ea9203225d6d4fdcaf4fe83ff40e7874085a7db2a40450b6e5fd88925fcb5b7717c81bb4fae277fc67fcd1eca1dbd2909499d061272970d566072ee8b26ce3c951d77d217e0eb715c5636715673b0316a93b109f7aafca17194a8be41169b13d16f4ff5c4a06b2ef71edf52b955937036d4f5e49a3"}, {0xc8, 0x10d, 0x0, "01b7c316514fcbd18942d18e4d8954f4bc63960becf9d8197447b4914c096cbfd854d1e182cc61fd2ab65dbc117dc6465043c4532d8e0a3f289b4afd76ee10d6f76adc7f8ba64faadee8a2dcd143ab77275329826a56afd9d2ad3503ea37a70a70d9247df047196a7437f34f5bb1bfa1c725527dd0b41b1d1471dc6b8f1a1e93ca85c725d1398bafcfdcc18d5992c81ddd6a6b07e82f127d4ac182b712967a2281fc8fd4a178e230f93a9ee106d13d068a6fd0"}], 0x12a8}}, {{&(0x7f0000001d40)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001dc0)="9996ef41a4ad6db7a383b767bfa20abb8256a72e8a9aa4c6384b8d24089ca47b10b52ee3c2f210b5b20c00167b22bf201ea5c2e89630ebe45456f4b1e631dd19353611e9981c17ef708ab8f121bee8dbd1f8cf48a95f7ba3c6915081f44a32aff56dae8258d6f2864027cfc2ed789b461c27505abf232a5eb06bb5b6e41846343b1975734995127c7f8cf86614ca32", 0x8f}, {&(0x7f0000001e80)="33b4cdd9ad68d343d12d7d5a3727fb9b176dd6254446bda4a892156c25cf9f13dbd5", 0x22}, {&(0x7f0000001ec0)="d65e55644cc8c63a68c388c8377c5c1f8d3896f358bf17d2c4732277b0c3b33a15d7b7603627fc3154f698166e6984f8e5fc2112477db5fb49a00689624bda6fabbcc8643a83773eff13e558f27c2c6e54f6d2568664034bcbf54e8579059bda765415218a81328011acd68e67d2e713a9f6b33a9e60e2d69ad7e83959bcca0e2d52e12642958cb8c272b20697391209f27ef69e726b5d048839b24f1a4d56617441062ea6b7bdf761dcea060c293123ee0cd0cc0ce12b9eb6b13b1b849a6172139c4ba6964a101c1cb4849a621920eec851fec4f3f162c7cbea2ed4ba325e91b675865b2637", 0xe6}, {&(0x7f0000001fc0)="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", 0xff}], 0x4, &(0x7f0000002100)=[{0xf0, 0x3a, 0x2, "1b82ef77f5a2720b9f07f39b5185f12a5fc64dc49824b350ae165bfbeefde855793e41330feefe4c0f5ca0488efea0b9ef040b07f03b839b130affbbcb5088db98df3cbb7772d5cddda38afae3e8500008127799b79940e5a5c85ec44fa098a4267cce1c47072b07e6fd3d55d981e5fcb98e0ace924d1186864b9513d4241120c7ebf1954cad111822e32df0db980ef42f51514c9a24aa13b4d89b142ef6dc11f66be88968920baf1674d950007c7d92e6f1a89831b4fb1e74aa3b7693ec8812097ed95e0e90095f197f5e503cce16168530650e4900f9ebd1e2c5388c"}, {0xf8, 0x1ff, 0x80, "5882cf960428b5d4d74e231318378455ecfd4b74c5061a3baaad8d9a12e3cc62fbaf9b3cc2f5006b1d92d355fe7cffffb4a94eb2202af74694933365955af5b7aa50186cfe25f24752f1911bb7cff535c5f6b6f9a4c075422676bf9861df717fffb905cdf1b4e81c4a5b9eb2868f74fdad8833164107f0f7ee35bd9e2550a3a520ccf396b30daffd2c5c1fd556c0dd6f99a1ef528e490cee47e9ad8b55e50832f18f198baef0f0fd95e37cc336f37f67b12a6096a245b8059e65d54e4e2e577beced22160ef8f7e9356fd234f1fb2e733bdf27264fe86c2ff39ca13f2aa70fbf63feb27732a397"}, {0xc0, 0x2, 0x6, "cd211c27d0aec0a76c0b4bb4e862610fe247fee97e69829a6989a0beb616c5beb882dc80317bd84214b069a23370ecb4a7d0fd5de1fc85565e7be57eb77f9b95193d0019d641bd5155fdb8c419fe7792ea86ec10af53caacdf4d2d4c4ea3dc5ecdff070641665a6cd833e35a47d3d93d7c1804914188d8d414f20b580cc08d056e0e75bb64004a2899b1fe3649713cf5eddf43aefbdf596092a46cdc4f37fc9bad9ee54c24e15eb119"}, {0xa0, 0x119, 0x2, "c8115c7a08be6dbd15a9d3d84e95eb8f3ad0ab19a896cf29f56694589d428b521d6a765ea7f4d4205363d179cf3229613ebf8d7c85c26673bc63bc904014638d31bff3bdd07b2095a4237f3036fe31896427cc97f506e4b23dfe1da0aa331393b837283977bb6128c2b2628b60d9e5da2701b34f65a71468f18d59ab4095e5fe0bd9e7d21e10822192c02983be"}, {0xc8, 0x112, 0x80000001, "2771d06fc6787404645f06b786ee119db021205cd146eeb4b204611cc4507659b0361c221b1f79ebb059d57e581f4eee15e829a69fa425543bd0c38e471a02c1f92200e1cab9e1ff4adc42ffb0577368838a8112a84456d5100ae2bcd8da752943ed9f300103f4d793770fa82e59bac78c3bd237bbe26c39915c330d8c5f71fdc61e34ed48721eafcd58a1dbac1130e55d838e5ae1b1a3c10f962b9a8a872d0261fdd5ef087f221b2e261d7415f4bcc8520379ed9fb97239"}, {0x28, 0x10f, 0x0, "b3c1687de38e7dc1559d87f7f504bc057f8161"}, {0xd0, 0x102, 0x4, "9c97fb320dd6d65575ef2e8dce64505ebc4d47e2d510a51b984ad1d088b5c529e83385f5fa5ebfb955c1873009a1512785488df84074381b706faabaa0e84f207ff72009da3bc8891d3ba51fd3da16351233139c5397f8bb0061c277b1c80c0395e6e587879b297bb2b6b64246c7b598da36231ab80b76325547940718aecf06530a7792c2fc0f02b45e382e0a7cb6d4f742f5a671685e61b0c75b69f00133f743a43f647843bb414e83678b1a4cec766cd493ef5148bc4648"}, {0xd8, 0x10f, 0x93f, "0a0353b40307eac283c8b000e32213e9ddd334215bd26d683ed124c926fb7b67cacfb4faa3bba71c79596d70abff42fc3828fd3614917e92ed8c4ea1fe91d29fcb376f5a08fbba25d3f2326bca24944c9663d1fab295008ac80deefc61ab6f06d099d869c6f2652cd845591f31b77f5f858b504ac86ce346a06fc7307ca08cf9ac6055e72a0ce3639bb2ace0d106e4013c7cd982e3ba88c46870e052c9f89a5e70df8e1e7244994388358653cd6914cda6f7d20a1d6da4c37fdd09aba6e9922c10"}, {0x78, 0x118, 0x7fff, "48d8b0b0c107167bfc7f81d6670a136511c5ea540eba8645b3883ff049e06d4bdf089e98f6121111afa61c0de5996cb65ea8324807228b7d07309886d2b055506e81ac961b0e3670dbe25febc6b65030e42608c1714b44ca892c2730cb0cf700e1dde7a15b2b"}], 0x658}}], 0x3, 0x200000c0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

5.305382187s ago: executing program 5 (id=493):
r0 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7f03)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

5.044179704s ago: executing program 5 (id=495):
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.988168405s ago: executing program 0 (id=496):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)

4.893338388s ago: executing program 3 (id=497):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@i_version}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@nouid32}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x470, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/U7/jVv8jjfvy59/yv7uKOZTBiLg7InZHxD0RsSci7o3I294fEQ+sMp7b+z/plVV+5LKy/t9zxdzW4v5f2fuLwZ6itjPPvy85Pl2vHSz+J8PRtyWrjy2zjm9e/PmTdsua+3/ZI1t/2Rcs4rjS2zJANzUxN5F3Sjvg6sWIfb1L5Z/cnAlIImJvROxb2UfvKgvTT3y5v12jO+e/jA7MMy18kaU3n+U/Hy35l5Lm+cnp2+YnR7dGvXZwtNwrbvfjT5dea7f+VeXfAVdrjeem7d/aZDBpnq+dXfk6Lv36Udt7mv+4/6f9yRv5PHN/8dp7E3NzZ8Yi+pOjeX3R6+O33lvWy/bZ/j98YOnjf3fxniz/ByMi24kfioiHI+KRIvZHI+KxiDiwTP7fv9B+WZl/pBVt/4sRU0ue/27u/y3bf+WFnpPffd1u/f9u+x/OS8PFK/n57w6WCic7XbQGuJr/HQAAAPxfpPl34JN05GY5TUdGGt/h3xN3pfWZ2bknj8+8c3qq8V35wehLy5GugWI8tD5dr40l88UnNsZHx4ux4nK89FAxbvxpz7a8PjI5U5+qOHfodtvbHP+Z33uqjg5YY9uWfHW8f90DASrQOo+eLq5eeDWcDGCz8ntt6F53OP7T9YoDWH+u/9C9ljr+L7TUzQXA5uT6D93L8Q9dKv226giACrn+Q1daze/617CwdWOEUU1ho26UvBBRFtINEY/CGhWqPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xj8BAAD//02e6R0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4)
setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x7fffffff, 0x4)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

4.788211361s ago: executing program 0 (id=498):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x42002, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023892)

4.396857792s ago: executing program 4 (id=499):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000008e704090000000000000109022400010200a008090400fe01030004000921fffffd0122050009058103"], 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000)=r0, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
epoll_create1(0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x2616a871c239a6d1, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3.368533649s ago: executing program 5 (id=500):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x3f7)

3.224112763s ago: executing program 0 (id=501):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x900)

2.96832628s ago: executing program 0 (id=502):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@jqfmt_vfsv1}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

1.588731247s ago: executing program 3 (id=503):
r0 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7f03)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

1.051880972s ago: executing program 5 (id=504):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket(0x840000000002, 0x3, 0xff)
syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000001780)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x0, 0x543, &(0x7f0000001200)="$eJzs3e9rJGcdAPDvzGbvcnepyanIWbAttnJX9HaTxrZRpD1B1DcFtb4/Y7IXQjbZI7upl1A0xT9AEFFB3/tG8A8QSsF/QISCvhcVReSqL/VGZmfS5sduNpdLsr3N5wPDPM/8+n6fITuZXzwTwLn1TETciohKRDwfEZPl9LQcbueV7WK59+6/uZAPSWTZ6/9KIimn7Wwrr49FxJVilRiPiG99LeK7ycG47c2tlflms7Fe1uud1bv19ubWzeXV+aXGUmNtdnbmpbmX516cm85KxYLbx2vnVES88pW//fRHv/rqK29/7nt/vv2PG9/P0/rSJ4q8I2LheFs+XLHtandf7Mj30fppBBuSvD3VyrCzAADgKPJz/I9GxKe75/+TUemezQEAAACjJHt1Iv6bRGQP7+pxVgIAAADOXhoRE5GktfJdgIlI01qteIf343E5bbbanc/eaW2sLebzIqaimt5ZbjamI+JiUU/y+kz5ju1O/YV99dmIuBoRP5m81K3XFlrNxWHf/AAAAIBz4srTe6///zOZ5uWLw84LAAAAOGFTfSsAAADAqHDJDwAAAKPP9T8AAACMtG+89lo+ZDvf8V58Y3NjpfXGzcVGe6W2urFQW2it360ttVpL3T77Vgdtr9lq3f18rG3cq3ca7U69vbl1e7W1sda5vbznE9gAAADAGbr69Dt/SiJi+4uXukOU/QD2cOFsMwM+VP467ASAk1QZdgLA0IwNOwFgaKoDl3CEgFGXDJh/8OWd4l5h/P508gEAAE7e9U/uff5/ade8wfcGgMdZn3d9AIAR5ukenF/V474BeO2kMwGG5SPF6GK/+X077+jz/P+Xu8rFPYYsO3ZyAADAiZjoDklaK8/TJyJNa7WIJ7qfBagmd5abjeny+uCPk9WLeX2mu2Yy8J1hAAAAAAAAAAAAAAAAAAAAAAAAAKCQZUlkg1W6iwIAAACPpYj070m3N/+I65PPTey9O7Dvq1+/eP1n9+Y7nfWZiAtfL77qdSEiOj8vp7+Q+SQAAAAADNNKMSqu08vxzLCTAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDUvHf/zYWd4Szj/vPLETHVK/5YjHfH41GNiMv/TmJs13pJRFROIP72WxFxrVf8JB5kWTZVZtEr/qVTjj/V3TW946cRceUE4sN59k5+/LnV6/eXxjPdce/f31g5PKr+x7/0/eNfpc/x54l99X6efPc39b7x34p4cqz38WcnflLE3xMirzx7xDZ+59tbWz1n7Npkr/i7Y9U7q3fr7c2tm8ur80uNpcba7OzMS3Mvz704N12/s9xsZElEszHdM8yPP/XbB4e1/3Kf+FN7239g/z93pNZn8b93793/WFGp9op/49ne/3+v9Ymflv/7PlOW8/nXd8rbRXm3p379h6cOa/9in/aPD2j/jSO1P77w/Dd/+Jeecw7sDQDgLLQ3t1bmm83G+iGF8fen3IqIAQufTeHVoUY/jUJ8ONIYViH7QfH3+FBrPcj2TXm41QcXskdZfSwePY0LB3+nlTjuBpOI7XxbR/yDBAAARswHJ/2HPUECAAAAAAAAAAAAAAAAAAAATtMROg97+3dxoMux8YfpCHB/zO3hNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FD/DwAA////o8rt")
timer_create(0xfffffffffffffff4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x3cb4, 0x4)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
getdents(r2, &(0x7f0000000f40)=""/243, 0xf3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff004)

784.102879ms ago: executing program 0 (id=505):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000003040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
lseek(r0, 0xfffffffffffffffe, 0x1)

663.339542ms ago: executing program 3 (id=506):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20)

178.103545ms ago: executing program 3 (id=507):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xc4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2=0xe000002f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private1, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}}]}]}, 0xc4}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680))
clock_gettime(0x6, &(0x7f0000000000))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0x0, 0x3b2}, 0x0, 0x0, 0x0)
fallocate(r3, 0x8, 0xffffffff, 0x7f)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0)
r4 = epoll_create1(0x80000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
wait4(0x0, 0x0, 0x8, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/18, @ANYRES32=0x1], 0x50)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0))
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
sendmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000100)=@llc={0x1a, 0x302, 0x9, 0x5, 0xff, 0x3}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="073aa85de2a15220bea0acfb83c3af337bfb7c2e641af799ccb67b5f927da6c9b14a9e7eec1a0deb2b009f624d10d63acb30b415651356bbb098c9b1360880b1a9f0ffc8488250c7dd7a4c8a23e7183cb6217bf2c4fd4dc453adc2dc28515b03e7800b661710957af8", 0x69}, {&(0x7f00000003c0)="5b88f7a32e6979a3f0c8923337000e08322582dc2a9f3d7080b3a753a9e28e57858df98e4774c450f3d8ed1ee0dc007660d0baf989dacdae6a3cacab9ffd699020f62c1c2399", 0x46}], 0x2, &(0x7f0000000540)=[{0x60, 0x88, 0xff5, "a82a1330197f46ae9eb735f9b19ec7df6ef761289d0bcd94a4817fb68133d01daa5b94a3af29f19c56aa3e773aa3fb75c9cc21a20a68b95fa7aeb37dbb16acfd645c2a54fa853d486cbc9f"}, {0x78, 0x10c, 0x0, "c13985bd0066d01eed65e9e18ed5acc952fe708fdf69aa2fb6eaacf9bb1074775bcf87272e62ecc9798b7ce33f386dbceb5e3646c64bdd32c9c684c34737bec64e65276a45bd98b5c470877ac375bf38eb23e97001f2372312a2a17b3a5cf47171"}, {0x80, 0x108, 0xc194, "4f794d56e969268cb913bb6650429939204e6abfce02dd252f70f4c52afc9cd3a25cfe009c6be50fa05891a95c88834c56ca57f50ebbfb6fe0d25b9860b51cd298e140a7f661332b2fcd0318a5d6d529275ee3f5f8aace5600eea41c1d059482ce96480ceca8a72e455277ef"}], 0x158}}, {{&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x4, 0x3, {0xa, 0x4e22, 0x0, @mcast2}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000740)="5906a928e90a388c633e5d3da7803a6db99a5bb36938054ab46faa75c6ab4241936394cb0beaf78d473a036ee2a5e989de84ee1223ed086dcc31c0edb5dfdd6d5904a19e48037e9900d45d401f68546ae09c7231fc3c34c10018dd5f08ea141c27001117072071a63e6304ba2e99c5ea00fec89e49f2e9f661e69270b8", 0x7d}, {&(0x7f00000007c0)}, {&(0x7f00000008c0)="4157d008863758dd53fea47004e7c70266588b39662532e3078b9fbad16d0c332dae32d5bbdf7ac2cffce053b52954d76c67098958e940b2273091a0bd02c1d601bdcd285326cbb8d6b541c9c3c0be84225fabcbce900f732aa26638d90e8e6408e480dea0af0eb4675b19b9ba7788cc2163dc24d0c0250c5e590e2f3539b57f8a77f769f02cf784734b66726e9a3ff734baedddb72e6e54e6553bb12c8963", 0x9f}, {&(0x7f0000000980)="da8a50fdf903ca6df953febe24cbd79980528e1e6c3802e5ff2eb1919603027115ec1ed0673b8794780fda95eba43744f205d230744198934b1974c5beaa4e0f09c302b9caaa91dcbd8132ff52520608e5ad69805e3bb73e11ecac2728d7379c966721638dd166a9dd6de6005b6ce282eb339c514242d4e045df7473c96decf0371027784920eb7457d07bbe", 0x8c}], 0x4, &(0x7f0000000a80)=[{0x58, 0x117, 0x4, "a6fc89e57de6e930aa7e1d0babea1ee5ce3a6b2eeb2a7df4a4cd7eef58490c5faa946cda015d21034cca49c67c5ef27c76e8618cd471a86ea1935786fb65392a2b765ffd9050516c"}, {0x60, 0x29, 0xfffff001, "3fdc200c2953c0dfaf236582b236be1d297bec8cae3a831494f574fea02d8afc9a80467c2c95c87f425c3c5131124b69de8157665fbfa0827bff3b618a229aed401087722cfff9a9faf47c"}, {0x70, 0x107, 0x4, "1cb8608f4fc7b64217fad15ddc095e91638cf8b5281ea63faf3051695386bd2a6e6fa0d331f1fa7c72096024c5aa87260b3edaf5d24c6c1f4abcdf9cd9ece888a778f53c6adc53363b4f1bd48ad2df13ce89ec1c3aad77b85b60"}, {0x1010, 0x117, 0x363c, "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"}, {0xa8, 0x117, 0x7, "ced7c439f39e7948552dcfed1b51bf5c8deac9a7891ab202ad9c8b29ea9203225d6d4fdcaf4fe83ff40e7874085a7db2a40450b6e5fd88925fcb5b7717c81bb4fae277fc67fcd1eca1dbd2909499d061272970d566072ee8b26ce3c951d77d217e0eb715c5636715673b0316a93b109f7aafca17194a8be41169b13d16f4ff5c4a06b2ef71edf52b955937036d4f5e49a3"}, {0xc8, 0x10d, 0x0, "01b7c316514fcbd18942d18e4d8954f4bc63960becf9d8197447b4914c096cbfd854d1e182cc61fd2ab65dbc117dc6465043c4532d8e0a3f289b4afd76ee10d6f76adc7f8ba64faadee8a2dcd143ab77275329826a56afd9d2ad3503ea37a70a70d9247df047196a7437f34f5bb1bfa1c725527dd0b41b1d1471dc6b8f1a1e93ca85c725d1398bafcfdcc18d5992c81ddd6a6b07e82f127d4ac182b712967a2281fc8fd4a178e230f93a9ee106d13d068a6fd0"}], 0x12a8}}, {{&(0x7f0000001d40)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001dc0)="9996ef41a4ad6db7a383b767bfa20abb8256a72e8a9aa4c6384b8d24089ca47b10b52ee3c2f210b5b20c00167b22bf201ea5c2e89630ebe45456f4b1e631dd19353611e9981c17ef708ab8f121bee8dbd1f8cf48a95f7ba3c6915081f44a32aff56dae8258d6f2864027cfc2ed789b461c27505abf232a5eb06bb5b6e41846343b1975734995127c7f8cf86614ca326abe", 0x91}, {&(0x7f0000001e80)="33b4cdd9ad68d343d12d7d5a3727fb9b176dd6254446bda4a892156c25cf9f13dbd5", 0x22}, {&(0x7f0000001ec0)="d65e55644cc8c63a68c388c8377c5c1f8d3896f358bf17d2c4732277b0c3b33a15d7b7603627fc3154f698166e6984f8e5fc2112477db5fb49a00689624bda6fabbcc8643a83773eff13e558f27c2c6e54f6d2568664034bcbf54e8579059bda765415218a81328011acd68e67d2e713a9f6b33a9e60e2d69ad7e83959bcca0e2d52e12642958cb8c272b20697391209f27ef69e726b5d048839b24f1a4d56617441062ea6b7bdf761dcea060c293123ee0cd0cc0ce12b9eb6b13b1b849a6172139c4ba6964a101c1cb4849a621920eec851fec4f3f162c7cbea2ed4ba325e91b675865b2637", 0xe6}, {&(0x7f0000001fc0)="35c38846300014105e2267724db27d7cfd63f6eef2309c3e92329e9525fafed3d589d8c5c78ecc0f72a852da3ad99c32d2a00753ddcc07fd76db73c49c6b8ef9179da5e207728c0dc20cba4a6dcf06a12d1b1606b583ee6c1df0706ef83c57c26ff2845a1766f7841d9934f354a20a0985da0a2a2c07db3d30b860af192d21293660556ea817192438d7cd3320fc55010d3caa2fe0b5180ce4949441709ee86109a8643c042e933817430e6fb2a8844c5b08a1483ce680c19602ad05320d68c00a905a7da4e8fb27ad8c9452af536173729119e9cf1c42d8a019d1e38703ebbed456fd031bca4c5768f33f577d7ced3552ea9583fb3637dd39dbb7b514af4a", 0xff}], 0x4, &(0x7f0000002100)=[{0xf0, 0x3a, 0x2, "1b82ef77f5a2720b9f07f39b5185f12a5fc64dc49824b350ae165bfbeefde855793e41330feefe4c0f5ca0488efea0b9ef040b07f03b839b130affbbcb5088db98df3cbb7772d5cddda38afae3e8500008127799b79940e5a5c85ec44fa098a4267cce1c47072b07e6fd3d55d981e5fcb98e0ace924d1186864b9513d4241120c7ebf1954cad111822e32df0db980ef42f51514c9a24aa13b4d89b142ef6dc11f66be88968920baf1674d950007c7d92e6f1a89831b4fb1e74aa3b7693ec8812097ed95e0e90095f197f5e503cce16168530650e4900f9ebd1e2c5388c"}, {0xf8, 0x1ff, 0x80, "5882cf960428b5d4d74e231318378455ecfd4b74c5061a3baaad8d9a12e3cc62fbaf9b3cc2f5006b1d92d355fe7cffffb4a94eb2202af74694933365955af5b7aa50186cfe25f24752f1911bb7cff535c5f6b6f9a4c075422676bf9861df717fffb905cdf1b4e81c4a5b9eb2868f74fdad8833164107f0f7ee35bd9e2550a3a520ccf396b30daffd2c5c1fd556c0dd6f99a1ef528e490cee47e9ad8b55e50832f18f198baef0f0fd95e37cc336f37f67b12a6096a245b8059e65d54e4e2e577beced22160ef8f7e9356fd234f1fb2e733bdf27264fe86c2ff39ca13f2aa70fbf63feb27732a397"}, {0xc0, 0x2, 0x6, "cd211c27d0aec0a76c0b4bb4e862610fe247fee97e69829a6989a0beb616c5beb882dc80317bd84214b069a23370ecb4a7d0fd5de1fc85565e7be57eb77f9b95193d0019d641bd5155fdb8c419fe7792ea86ec10af53caacdf4d2d4c4ea3dc5ecdff070641665a6cd833e35a47d3d93d7c1804914188d8d414f20b580cc08d056e0e75bb64004a2899b1fe3649713cf5eddf43aefbdf596092a46cdc4f37fc9bad9ee54c24e15eb119"}, {0xa0, 0x119, 0x2, "c8115c7a08be6dbd15a9d3d84e95eb8f3ad0ab19a896cf29f56694589d428b521d6a765ea7f4d4205363d179cf3229613ebf8d7c85c26673bc63bc904014638d31bff3bdd07b2095a4237f3036fe31896427cc97f506e4b23dfe1da0aa331393b837283977bb6128c2b2628b60d9e5da2701b34f65a71468f18d59ab4095e5fe0bd9e7d21e10822192c02983be"}, {0xc8, 0x112, 0x80000001, "2771d06fc6787404645f06b786ee119db021205cd146eeb4b204611cc4507659b0361c221b1f79ebb059d57e581f4eee15e829a69fa425543bd0c38e471a02c1f92200e1cab9e1ff4adc42ffb0577368838a8112a84456d5100ae2bcd8da752943ed9f300103f4d793770fa82e59bac78c3bd237bbe26c39915c330d8c5f71fdc61e34ed48721eafcd58a1dbac1130e55d838e5ae1b1a3c10f962b9a8a872d0261fdd5ef087f221b2e261d7415f4bcc8520379ed9fb97239"}, {0x28, 0x10f, 0x0, "b3c1687de38e7dc1559d87f7f504bc057f8161"}, {0xd0, 0x102, 0x4, "9c97fb320dd6d65575ef2e8dce64505ebc4d47e2d510a51b984ad1d088b5c529e83385f5fa5ebfb955c1873009a1512785488df84074381b706faabaa0e84f207ff72009da3bc8891d3ba51fd3da16351233139c5397f8bb0061c277b1c80c0395e6e587879b297bb2b6b64246c7b598da36231ab80b76325547940718aecf06530a7792c2fc0f02b45e382e0a7cb6d4f742f5a671685e61b0c75b69f00133f743a43f647843bb414e83678b1a4cec766cd493ef5148bc4648"}, {0xd8, 0x10f, 0x93f, "0a0353b40307eac283c8b000e32213e9ddd334215bd26d683ed124c926fb7b67cacfb4faa3bba71c79596d70abff42fc3828fd3614917e92ed8c4ea1fe91d29fcb376f5a08fbba25d3f2326bca24944c9663d1fab295008ac80deefc61ab6f06d099d869c6f2652cd845591f31b77f5f858b504ac86ce346a06fc7307ca08cf9ac6055e72a0ce3639bb2ace0d106e4013c7cd982e3ba88c46870e052c9f89a5e70df8e1e7244994388358653cd6914cda6f7d20a1d6da4c37fdd09aba6e9922c10"}, {0x78, 0x118, 0x7fff, "48d8b0b0c107167bfc7f81d6670a136511c5ea540eba8645b3883ff049e06d4bdf089e98f6121111afa61c0de5996cb65ea8324807228b7d07309886d2b055506e81ac961b0e3670dbe25febc6b65030e42608c1714b44ca892c2730cb0cf700e1dde7a15b2b"}], 0x658}}], 0x3, 0x200000c0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

148.166286ms ago: executing program 5 (id=508):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000000100000080000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="030000000100"], 0x50)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000740)={[{@acl}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodioread_nolock}, {@bsdgroups}]}, 0x0, 0x48a, &(0x7f0000000200)="$eJzs28FvVNUaAPDv3nam8B6P9vF4KohaJSaNxpYWVBZuNJgYg9FEF7is7UAIAzW0GkEixRhXJoZE18al0b/AnTEx6srErStXhoQoG8BVzb1z7zAdpi3QaafQ3y+ZO+fMPdNzvp577j1zz0wAm9ZwtkkitkXEbxEx2MguLjDceLp25dzU9SvnppJYWHj9zyQvd/XKuamyaPm+fxeZkTQi/SgpKlls9szZE5P1eu10kR+bO/n22OyZs0+9e3LyWO1Y7dTEwYMH9o8/+8zE012JM4vr6u4PZvbseunNi69MHbn41k/fZO3dVuxvjaNbhrPA/1rIte97vNuV9dh/8u1Avk36e9wYbllfRGTdVcnH/2D0xY3OG4wXP+xp44A1lV2bBpbePb8A3MOSuNWSlZZzBnD3Ky/02eff8rEO044N4/LzjQ9AWdzXikdjT3+kRZlK8/Nt9w1HxJH5v7/IHrFG9yEAAFp9MvX54WoMxPvXv345m3sMNvekcV/+/Hu+3R6V5p7/RsSOiPhfROyMiP9H5GXvj4gHVtmem+c/6aVV/sllZfO/54q1rcXzv3L2F0N9RS6bAw5FJTl6vF7bl/9PIkaiMpDlx5ep47tDv3661L7W+V/2yOov54JFOy71t92gm56cm2zpjlW5fCFid3+n+JPmSkASEbsiYvft/entZeL4E1/tWarQyvEvowvrTAtfZuHNZ/HPR1v8paR1fTLLLF6fHNsS9dq+sfKouNnPv3z82lL1ryr+Lrhcazy39H97kaGkdb12trv13+Hxn1aTN/J15mqx5vje5Nzc6fGIanI4z1eLsvnrEzfeW+bL8tnxP7K38/jfUbwni//BiMgO4oci4uGIeKRo+6MR8VhE7F0mxh9fWDn+SHvU/xcipjue/5rHf1v/336i78QP3y5V/3A+iFfq/wN5aqR4JT//raBTc7Ka2hu4mv8dAAAA3C3S/DvwSTraTKfp6GjjO/w7419pfWZ27smjM++cmm58V34oKml5p2uweY+0XhtP5ot0JTkU9dpEXvbG/dL9xX3jz/q25vnRqZn6dA/jBhrjvNP4z/zR1+vWAWtsa8dXJ6rr3hCgB9rX0dPFPwE+/2o4GcC9yu+1YfNaYfyn69UOYP25/sPm1Wn8n2/LWwuAe5PrP2xedzj+3ReAu136fa9bAPSQ+T9sSqv5Xf8aJrbcRuHqBmlz1xLtnZJulIZliYgykW6I9kisUaLXZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+CcAAP//IkvZ1w==")

23.942599ms ago: executing program 0 (id=509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c696f636861727365743d63703836302c757365667265652c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c757466383d302c636865636b3d6e6f726d616c2c636f6465706167653d3837342c636865636b3d7374726963742c696f636861727365743d63703836332c73686f72746e616d653d77696e39352c696f636861727365743d6370313235302c757466383d302c696f636861727365743d69736f383835392d372c008687acf51ca430be3433c92cee4c980a00226de4983fc8315e15d6fb8cfb403b72a0a2eb78e7abf6192fcf0eb0fc2860403fc85eef5f9d4295b70417d068b47f9361"], 0x3, 0x27b, &(0x7f0000000640)="$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")
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f0000000100)=""/26}, 0x20)

0s ago: executing program 4 (id=510):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b70700000001000048"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8abe, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x200000008, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x2000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

CT and fast_commit support!
[   96.764625][   T59] kworker/u4:4: attempt to access beyond end of device
[   96.764625][   T59] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[   96.810486][   T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   96.814853][ T5926] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.27: bg 0: block 473: padding at end of block bitmap is not set
[   96.820835][   T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   96.844712][   T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   96.947662][ T5926] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem
[   97.062387][ T5935] loop0: detected capacity change from 0 to 256
[   97.116761][ T5935] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[   97.229074][ T5926] EXT4-fs (loop3): 1 orphan inode deleted
[   97.245067][ T3501] __quota_error: 39 callbacks suppressed
[   97.245085][ T3501] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   97.263199][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.297330][ T3501] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1
[   97.316032][ T5926] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.412794][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.589041][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.782624][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.918753][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.032456][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.634961][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.644626][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.652820][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.678600][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.705410][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   98.719017][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.258407][    T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   99.424984][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.433930][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.184259][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.196222][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.294347][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  100.313560][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  100.340173][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  100.455866][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  100.466403][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  100.474481][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  100.507039][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'.
[  100.590294][ T5945] chnl_net:caif_netlink_parms(): no params data found
[  100.779291][ T5781] Bluetooth: hci1: command tx timeout
[  101.298443][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.316041][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.326034][ T5945] bridge_slave_0: entered allmulticast mode
[  101.344930][ T5945] bridge_slave_0: entered promiscuous mode
[  101.354180][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.362149][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.374704][ T5945] bridge_slave_1: entered allmulticast mode
[  101.385399][ T5945] bridge_slave_1: entered promiscuous mode
[  101.530485][   T59] hsr_slave_0: left promiscuous mode
[  101.589108][   T59] hsr_slave_1: left promiscuous mode
[  101.596641][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.617355][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.627277][ T6009] input: syz1 as /devices/virtual/input/input5
[  101.629342][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.641585][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.650638][   T59] bridge_slave_1: left allmulticast mode
[  101.658400][   T59] bridge_slave_1: left promiscuous mode
[  101.665872][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.690922][   T59] bridge_slave_0: left allmulticast mode
[  101.696833][   T59] bridge_slave_0: left promiscuous mode
[  101.716984][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.788292][   T59] veth1_macvtap: left promiscuous mode
[  101.799712][   T59] veth0_macvtap: left promiscuous mode
[  101.812072][   T59] veth1_vlan: left promiscuous mode
[  101.829896][   T59] veth0_vlan: left promiscuous mode
[  102.088411][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  102.098328][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  102.108807][    T9] usb 1-1: can't read configurations, error -71
[  102.266830][ T6016] binder: 6015:6016 unknown command 1074553619
[  102.281387][ T6016] binder: 6015:6016 ioctl c0306201 2000000001c0 returned -22
[  102.493076][ T6020] loop0: detected capacity change from 0 to 512
[  102.510371][ T6020] ext4: Unknown parameter 'func'
[  102.545075][ T5781] Bluetooth: hci3: command tx timeout
[  102.575905][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.863746][ T5781] Bluetooth: hci1: command tx timeout
[  104.097839][   T59] team0 (unregistering): Port device team_slave_1 removed
[  104.658652][ T5781] Bluetooth: hci3: command tx timeout
[  104.711535][   T59] team0 (unregistering): Port device team_slave_0 removed
[  104.919344][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.938853][ T5781] Bluetooth: hci1: command tx timeout
[  104.987261][ T6031] loop0: detected capacity change from 0 to 512
[  104.994140][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.994722][ T6031] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.027042][ T6031] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  105.035770][ T6031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  105.139095][ T6031] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80)
[  105.149273][ T6031] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features
[  105.160666][ T6031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  105.398702][    T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  105.589034][ T6036] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.53: dx entry: limit 65535 != root limit 120
[  105.601351][ T6036] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.53: Corrupt directory, running e2fsck is recommended
[  106.366859][   T59] bond0 (unregistering): Released all slaves
[  106.430729][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.698682][ T5781] Bluetooth: hci3: command tx timeout
[  106.741689][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.068214][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.078100][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.122403][ T5781] Bluetooth: hci1: command tx timeout
[  107.259002][ T5777] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  107.277179][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.494458][ T5777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.544030][ T5777] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.621602][ T5777] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  107.642887][ T5945] team0: Port device team_slave_0 added
[  107.691258][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  107.706065][ T5777] usb 1-1: SerialNumber: syz
[  107.760425][ T5945] team0: Port device team_slave_1 added
[  107.785367][ T5777] usb 1-1: 0:2 : does not exist
[  107.830701][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.837825][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.864946][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.907213][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.922600][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.949888][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.148252][ T5945] hsr_slave_0: entered promiscuous mode
[  108.160459][ T5945] hsr_slave_1: entered promiscuous mode
[  108.179716][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.187366][ T5945] Cannot create hsr debugfs directory
[  108.201271][ T5777] usb 1-1: USB disconnect, device number 4
[  108.273987][ T5974] chnl_net:caif_netlink_parms(): no params data found
[  108.592754][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.607883][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.616055][ T5974] bridge_slave_0: entered allmulticast mode
[  108.630115][ T5974] bridge_slave_0: entered promiscuous mode
[  108.657823][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.685701][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.703974][ T5974] bridge_slave_1: entered allmulticast mode
[  108.746283][ T5974] bridge_slave_1: entered promiscuous mode
[  108.755629][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  108.798928][ T5778] Bluetooth: hci3: command tx timeout
[  108.809531][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  108.848821][    T9] usb 4-1: can't read configurations, error -71
[  108.991268][ T6064] loop0: detected capacity change from 0 to 512
[  109.009086][ T6064] ext4: Unknown parameter 'func'
[  109.146109][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.172426][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.022469][ T5974] team0: Port device team_slave_0 added
[  110.050981][ T5974] team0: Port device team_slave_1 added
[  110.266752][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.291149][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.340606][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.403124][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.414586][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.445364][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.468824][ T5945] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.506406][ T5945] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.531580][ T5945] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  110.556893][ T5945] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  110.612983][ T5974] hsr_slave_0: entered promiscuous mode
[  110.622427][ T5974] hsr_slave_1: entered promiscuous mode
[  110.633116][ T5974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.641503][ T5974] Cannot create hsr debugfs directory
[  111.015097][ T5777] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  111.097251][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.210302][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[  111.237505][ T5974] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  111.262976][ T5974] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  111.266934][ T6094] loop0: detected capacity change from 0 to 4096
[  111.282191][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.289602][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.315177][ T5974] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  111.330549][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.337813][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.350953][ T5974] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  111.515054][ T6094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.547548][ T5945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.958657][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.969744][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.595316][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.797756][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.947092][ T5974] 8021q: adding VLAN 0 to HW filter on device team0
[  112.985573][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.993449][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.068160][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.075466][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.195276][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.839904][ T5777] usb 4-1: unable to get BOS descriptor or descriptor too short
[  113.879186][ T5777] usb 4-1: unable to read config index 0 descriptor/start: -71
[  113.886951][ T5777] usb 4-1: can't read configurations, error -71
[  114.047737][ T6132] loop3: detected capacity change from 0 to 512
[  114.079979][ T6132] ext4: Unknown parameter 'func'
[  114.147376][ T5766] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  114.227955][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.477424][ T5945] veth0_vlan: entered promiscuous mode
[  115.534526][ T5945] veth1_vlan: entered promiscuous mode
[  115.608668][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  115.735506][ T5945] veth0_macvtap: entered promiscuous mode
[  115.770957][ T5945] veth1_macvtap: entered promiscuous mode
[  115.799537][    T8] usb 4-1: Using ep0 maxpacket: 16
[  115.815398][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.835018][    T8] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  115.853923][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.856986][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.888650][    T8] usb 4-1: config 0 has no interface number 0
[  115.888699][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.921431][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  115.926208][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.942210][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.955822][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.958291][    T8] usb 4-1: Product: syz
[  115.977127][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.979687][    T8] usb 4-1: Manufacturer: syz
[  115.991881][    T8] usb 4-1: SerialNumber: syz
[  116.013259][    T8] usb 4-1: config 0 descriptor??
[  116.015956][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.037081][    T8] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  116.055834][    T8] usb 4-1: No valid video chain found.
[  116.085254][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.120991][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.148296][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.173095][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.183685][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.194849][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.207737][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.252537][ T5945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.264056][ T5848] usb 4-1: USB disconnect, device number 8
[  116.287416][ T5945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.296367][ T5945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.305494][ T5945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.454941][ T5974] veth0_vlan: entered promiscuous mode
[  116.506632][ T5974] veth1_vlan: entered promiscuous mode
[  116.599747][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.607733][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.666118][ T5974] veth0_macvtap: entered promiscuous mode
[  116.711699][ T5974] veth1_macvtap: entered promiscuous mode
[  116.751851][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.769178][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.790418][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.806191][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.818179][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.842737][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.863160][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.886460][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.914167][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.926316][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.943528][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.993209][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.008332][ T6171] loop3: detected capacity change from 0 to 512
[  117.014867][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.026663][ T6171] ext4: Unknown parameter 'func'
[  117.054776][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.071415][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.250691][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.299409][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.309380][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.333760][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.387239][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.271875][ T5974] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.308592][ T5974] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.327653][ T5974] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.348695][ T5974] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.627366][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.693208][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.826444][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.855693][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.048600][    T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  121.205339][   T28] audit: type=1326 audit(1777488124.380:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  121.331756][   T28] audit: type=1326 audit(1777488124.410:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  121.391022][ T6193] loop0: detected capacity change from 0 to 512
[  121.423905][ T6193] ext4: Unknown parameter 'func'
[  121.445722][   T28] audit: type=1326 audit(1777488124.440:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  121.605088][   T28] audit: type=1326 audit(1777488124.440:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  121.714114][   T28] audit: type=1326 audit(1777488124.440:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  121.736384][   T28] audit: type=1326 audit(1777488124.440:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  122.840915][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.849937][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.275378][   T28] audit: type=1326 audit(1777488124.440:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  123.639242][   T28] audit: type=1326 audit(1777488124.440:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  123.736399][   T28] audit: type=1326 audit(1777488124.440:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  123.854218][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  123.855697][ T6209] loop4: detected capacity change from 0 to 512
[  123.863041][   T28] audit: type=1326 audit(1777488124.450:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.5.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  123.894357][    T8] usb 4-1: unable to read config index 0 descriptor/start: -71
[  123.909147][    T8] usb 4-1: can't read configurations, error -71
[  123.915635][ T6209] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  123.964792][ T6209] EXT4-fs (loop4): 1 truncate cleaned up
[  123.974427][ T6209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.053734][ T6209] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.74: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  124.097170][ T6216] loop0: detected capacity change from 0 to 512
[  124.144219][ T6216] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.150340][ T6209] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem
[  124.215905][ T6216] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  124.267496][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.321092][ T6216] EXT4-fs (loop0): 1 truncate cleaned up
[  124.352210][ T6216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.497787][ T6216] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 7 (only 1 groups)
[  124.647827][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.928754][   T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  125.152766][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.194499][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.226558][   T27] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  125.259007][   T27] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  125.277638][   T27] usb 6-1: Manufacturer: syz
[  125.294239][   T27] usb 6-1: config 0 descriptor??
[  125.813713][ T6243] loop0: detected capacity change from 0 to 512
[  125.848368][ T6243] ext4: Unknown parameter 'func'
[  125.892933][ T6231] loop3: detected capacity change from 0 to 40427
[  125.922587][ T6231] F2FS-fs (loop3): invalid crc value
[  126.093371][ T6231] F2FS-fs (loop3): Found nat_bits in checkpoint
[  126.839625][ T6231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  126.874241][   T28] kauditd_printk_skb: 114 callbacks suppressed
[  126.874259][   T28] audit: type=1326 audit(1777488130.040:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  126.946402][   T28] audit: type=1326 audit(1777488130.040:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  126.998644][   T28] audit: type=1326 audit(1777488130.110:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  127.085062][ T6256] loop0: detected capacity change from 0 to 16
[  127.099768][   T28] audit: type=1326 audit(1777488130.110:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  127.122110][ T6256] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300)
[  127.211044][   T28] audit: type=1326 audit(1777488130.110:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  127.253477][ T6256] loop0: detected capacity change from 0 to 512
[  127.302523][   T28] audit: type=1326 audit(1777488130.110:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  127.345096][ T6231] syz.3.81: attempt to access beyond end of device
[  127.345096][ T6231] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  127.375973][ T6256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  127.404738][   T28] audit: type=1326 audit(1777488130.110:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  127.500141][ T6256] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  127.534938][   T28] audit: type=1326 audit(1777488130.110:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  127.566667][ T6256] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  127.636763][ T5774] syz-executor: attempt to access beyond end of device
[  127.636763][ T5774] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  127.639008][   T28] audit: type=1326 audit(1777488130.150:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5106d9cdd9 code=0x7ffc0000
[  127.657589][ T6256] EXT4-fs (loop0): mount failed
[  127.724073][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  127.949852][ T6265] loop4: detected capacity change from 0 to 256
[  128.084967][   T27] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71
[  128.128636][   T27] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[  128.136548][   T27] uclogic: probe of 0003:256C:006D.0001 failed with error -71
[  128.163884][ T6265] FAT-fs (loop4): Directory bread(block 64) failed
[  128.186011][ T6265] FAT-fs (loop4): Directory bread(block 65) failed
[  128.197009][   T27] usb 6-1: USB disconnect, device number 2
[  128.206995][ T6265] FAT-fs (loop4): Directory bread(block 66) failed
[  128.236537][ T6265] FAT-fs (loop4): Directory bread(block 67) failed
[  128.245869][ T6265] FAT-fs (loop4): Directory bread(block 68) failed
[  128.299284][ T6265] FAT-fs (loop4): Directory bread(block 69) failed
[  128.306246][ T6265] FAT-fs (loop4): Directory bread(block 70) failed
[  128.329674][ T6265] FAT-fs (loop4): Directory bread(block 71) failed
[  128.341333][ T6270] tipc: Started in network mode
[  128.346450][ T6270] tipc: Node identity aaaaaaaaaa24, cluster identity 4711
[  128.365801][ T6265] FAT-fs (loop4): Directory bread(block 72) failed
[  128.389459][ T6265] FAT-fs (loop4): Directory bread(block 73) failed
[  128.397410][ T6270] tipc: Enabled bearer <eth:dummy0>, priority 10
[  129.390444][   T27] tipc: Node number set to 9349802
[  130.148716][    T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  131.199283][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.210744][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.537048][ T6283] loop0: detected capacity change from 0 to 40427
[  131.573652][ T6283] F2FS-fs (loop0): invalid crc value
[  131.628722][ T6283] F2FS-fs (loop0): Found nat_bits in checkpoint
[  131.756247][ T6283] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  131.760889][ T6290] loop4: detected capacity change from 0 to 40427
[  131.803332][ T6290] F2FS-fs (loop4): invalid crc value
[  131.812152][ T6312] loop5: detected capacity change from 0 to 512
[  131.842254][ T6290] F2FS-fs (loop4): Found nat_bits in checkpoint
[  131.872143][ T6312] EXT4-fs: Ignoring removed oldalloc option
[  131.923210][ T6312] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  131.947705][ T5772] syz-executor: attempt to access beyond end of device
[  131.947705][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.009782][ T6312] EXT4-fs error (device loop5): ext4_iget_extra_inode:4739: inode #11: comm syz.5.94: corrupted in-inode xattr: invalid ea_ino
[  132.039486][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  132.047233][ T6312] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.94: couldn't read orphan inode 11 (err -117)
[  132.091947][ T6312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.156472][ T6290] F2FS-fs (loop4): Start checkpoint disabled!
[  132.204609][ T6290] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  132.313828][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.779884][ T6323] loop5: detected capacity change from 0 to 512
[  132.831896][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  132.858933][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  132.866729][    T9] usb 4-1: can't read configurations, error -71
[  133.267873][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  133.276967][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  133.389152][ T6333] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  133.474336][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  133.474353][   T28] audit: type=1326 audit(1777488136.650:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.5.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  134.222494][ T6330] loop0: detected capacity change from 0 to 40427
[  134.278188][ T6330] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64)
[  134.317942][ T6330] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  134.348035][ T6330] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff
[  134.377979][ T6330] F2FS-fs (loop0): invalid crc value
[  134.412928][ T6330] F2FS-fs (loop0): Found nat_bits in checkpoint
[  134.535246][ T6344] loop5: detected capacity change from 0 to 128
[  134.612221][ T6330] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  134.627991][ T6344] syz.5.103: attempt to access beyond end of device
[  134.627991][ T6344] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128
[  134.636409][ T6330] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  134.714550][ T2987] kworker/u4:9: attempt to access beyond end of device
[  134.714550][ T2987] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  134.740433][ T2987] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  134.760005][ T2987] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  134.761602][ T6330] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x12c0/0x3e60
[  134.886591][ T6338] loop3: detected capacity change from 0 to 40427
[  134.911108][ T6338] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  134.945225][ T6338] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  134.975247][ T5772] syz-executor: attempt to access beyond end of device
[  134.975247][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  134.990270][ T6338] F2FS-fs (loop3): invalid crc value
[  135.028118][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  135.043611][ T6338] F2FS-fs (loop3): Found nat_bits in checkpoint
[  135.062601][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  135.335535][ T6338] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  135.353866][ T6338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.539457][ T6360] loop4: detected capacity change from 0 to 1024
[  135.567072][ T6360] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  135.627678][   T27] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  135.722046][ T6360] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  135.755907][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.025788][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.748719][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.761036][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.434885][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  137.459146][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  137.542804][ T6388] tipc: Started in network mode
[  137.563740][ T6388] tipc: Node identity aaaaaaaaaa24, cluster identity 4711
[  137.580002][ T6388] tipc: Enabled bearer <eth:dummy0>, priority 10
[  137.634948][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.108'.
[  137.749782][   T28] audit: type=1326 audit(1777488140.930:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6387 comm="syz.0.111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  138.078725][  T787] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  138.270816][  T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.281683][  T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  138.291446][  T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.306265][  T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  138.321578][  T787] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  138.335384][  T787] usb 4-1: Product: syz
[  138.340095][  T787] usb 4-1: SerialNumber: syz
[  138.351554][  T787] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  138.393425][  T787] cdc_ncm 4-1:1.0: bind() failure
[  138.427766][   T27] usb 6-1: unable to get BOS descriptor or descriptor too short
[  138.443369][   T27] usb 6-1: unable to read config index 0 descriptor/start: -71
[  138.451136][   T27] usb 6-1: can't read configurations, error -71
[  138.698903][  T969] tipc: Node number set to 9349802
[  138.908736][  T967] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  139.099273][  T967] usb 1-1: Using ep0 maxpacket: 16
[  139.120452][  T967] usb 1-1: unable to get BOS descriptor or descriptor too short
[  139.145614][  T967] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  139.169408][  T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.177628][  T967] usb 1-1: Product: syz
[  139.182792][  T967] usb 1-1: Manufacturer: syz
[  139.187446][  T967] usb 1-1: SerialNumber: syz
[  139.485846][  T967] usb 1-1: USB disconnect, device number 5
[  139.512584][ T5781] Bluetooth: hci4: command 0x1003 tx timeout
[  139.519854][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  139.565271][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.685016][ T6406] loop3: detected capacity change from 0 to 256
[  139.733228][ T6408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.117'.
[  140.152911][ T6414] loop0: detected capacity change from 0 to 256
[  140.215233][ T6414] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  140.254942][ T6401] loop5: detected capacity change from 0 to 131072
[  140.273179][ T6401] F2FS-fs (loop5): Test dummy encryption mode enabled
[  140.287857][ T6401] F2FS-fs (loop5): invalid crc value
[  140.288017][ T6416] loop4: detected capacity change from 0 to 512
[  140.326822][ T6401] F2FS-fs (loop5): Found nat_bits in checkpoint
[  140.393841][ T6416] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  140.492142][ T5764] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  140.553594][ T6401] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  140.659965][ T6401] F2FS-fs (loop5): Start checkpoint disabled!
[  140.712673][ T6401] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  140.750370][ T6414] xt_l2tp: v2 tid > 0xffff: 262144
[  141.311650][ T6428] syz.0.120: attempt to access beyond end of device
[  141.311650][ T6428] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256
[  141.335794][ T6428] syz.0.120: attempt to access beyond end of device
[  141.335794][ T6428] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256
[  141.352543][ T6428] syz.0.120: attempt to access beyond end of device
[  141.352543][ T6428] loop0: rw=0, sector=280, nr_sectors = 8 limit=256
[  141.880977][   T28] audit: type=1800 audit(1777488144.540:192): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="file1" dev="loop0" ino=1048608 res=0 errno=0
[  142.377013][   T23] usb 4-1: USB disconnect, device number 13
[  142.627833][ T5817] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  143.594463][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.603536][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.315297][ T6461] loop3: detected capacity change from 0 to 16
[  144.324946][ T6461] erofs: Unknown parameter './cgroup.net/syz1'
[  148.005155][ T5817] usb 1-1: unable to get BOS descriptor or descriptor too short
[  148.308699][ T5817] usb 1-1: unable to read config index 0 descriptor/start: -71
[  148.360700][ T5817] usb 1-1: can't read configurations, error -71
[  148.736199][ T5762] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  149.056935][ T6468] loop3: detected capacity change from 0 to 512
[  149.089685][ T6468] EXT4-fs: Ignoring removed i_version option
[  149.167081][ T6468] EXT4-fs (loop3): orphan cleanup on readonly fs
[  149.201265][ T6468] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.127: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  149.320747][ T6468] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.127: ea_inode dec ref err=-117
[  149.381650][ T6468] EXT4-fs (loop3): 1 orphan inode deleted
[  149.409709][ T6468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  151.398579][   T28] audit: type=1326 audit(1777488154.560:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.5.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  151.779804][ T6477] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  151.850958][ T6490] loop4: detected capacity change from 0 to 256
[  151.882504][ T6490] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.960669][ T6490] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.431652][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.684479][ T6503] loop5: detected capacity change from 0 to 512
[  152.712436][ T6503] ext4: Unknown parameter 'func'
[  154.794538][ T6530] loop5: detected capacity change from 0 to 1024
[  154.832697][ T6530] ext4: Unknown parameter 'nouser_xattr'
[  155.114822][ T6504] loop3: detected capacity change from 0 to 40427
[  155.206432][ T6504] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  155.235176][ T6504] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  155.250676][ T6534] loop5: detected capacity change from 0 to 256
[  155.304034][ T6504] F2FS-fs (loop3): invalid crc value
[  155.342801][ T6534] exFAT-fs (loop5): failed to load alloc-bitmap
[  155.387877][ T6534] exFAT-fs (loop5): failed to recognize exfat type
[  155.755162][ T6542] loop5: detected capacity change from 0 to 512
[  155.779838][ T6542] ext4: Unknown parameter 'func'
[  156.989634][ T6552] loop5: detected capacity change from 0 to 1024
[  157.088334][ T6552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.495335][ T6562] tipc: Started in network mode
[  157.528995][ T6562] tipc: Node identity aaaaaaaaaa24, cluster identity 4711
[  157.542281][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.554463][ T6562] tipc: Enabled bearer <eth:dummy0>, priority 10
[  157.725150][   T28] audit: type=1326 audit(1777488160.890:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.4.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8956f9cdd9 code=0x0
[  158.763924][ T5817] tipc: Node number set to 9349802
[  158.909633][    T8] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  158.945322][ T6579] loop4: detected capacity change from 0 to 512
[  158.983734][ T6579] EXT4-fs: Ignoring removed i_version option
[  159.040756][ T6579] EXT4-fs (loop4): orphan cleanup on readonly fs
[  159.063227][ T6579] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.145: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  159.205766][ T6579] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.145: ea_inode dec ref err=-117
[  159.279333][ T6579] EXT4-fs (loop4): 1 orphan inode deleted
[  159.328298][ T6579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  160.795165][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.804261][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.782547][ T6588] loop0: detected capacity change from 0 to 512
[  163.031801][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.284115][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  164.337901][    T8] usb 6-1: unable to get BOS descriptor or descriptor too short
[  164.349856][    T8] usb 6-1: unable to read config index 0 descriptor/start: -32
[  164.357518][    T8] usb 6-1: chopping to 0 config(s)
[  164.363027][    T8] usb 6-1: can't read configurations, error -32
[  164.384430][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'.
[  164.538102][    T8] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  164.708382][ T6617] loop4: detected capacity change from 0 to 512
[  164.722935][    T8] usb 6-1: device descriptor read/64, error -32
[  164.737134][ T6617] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  164.858854][    T8] usb usb6-port1: attempt power cycle
[  164.886841][ T6617] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  164.945989][ T6622] tipc: Started in network mode
[  164.951376][ T6622] tipc: Node identity aaaaaaaaaa24, cluster identity 4711
[  164.975696][ T6617] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.152: bg 0: block 248: padding at end of block bitmap is not set
[  164.998939][ T6622] tipc: Enabled bearer <eth:dummy0>, priority 10
[  165.048258][ T6617] Quota error (device loop4): write_blk: dquota write failed
[  165.057474][ T6617] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  165.084311][ T6617] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.152: Failed to acquire dquot type 1
[  165.115991][ T6617] EXT4-fs (loop4): 1 truncate cleaned up
[  165.127381][ T6617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  165.312420][    T8] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  165.631003][   T28] audit: type=1326 audit(1777488168.800:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  166.080408][    T8] usb 6-1: device descriptor read/8, error -32
[  166.126223][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  166.139341][   T27] tipc: Node number set to 9349802
[  166.150094][ T3501] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5
[  166.168831][ T3501] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1
[  166.384789][ T6639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.157'.
[  166.390992][ T6643] loop3: detected capacity change from 0 to 512
[  166.401394][ T6643] EXT4-fs: Ignoring removed i_version option
[  166.428016][ T6642] loop5: detected capacity change from 0 to 512
[  166.452152][ T6642] ext4: Unknown parameter 'func'
[  166.456493][ T6643] EXT4-fs (loop3): orphan cleanup on readonly fs
[  166.543609][ T6643] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.156: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  166.639423][ T6643] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.156: ea_inode dec ref err=-117
[  166.735167][ T6643] EXT4-fs (loop3): 1 orphan inode deleted
[  166.743365][ T6643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  168.077218][ T6653] loop0: detected capacity change from 0 to 512
[  168.146845][ T6653] ext4: Unknown parameter 'func'
[  170.152921][ T6662] loop5: detected capacity change from 0 to 128
[  170.183065][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.305297][ T6662] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  170.338796][ T6662] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  170.449623][  T967] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  170.658671][  T967] usb 5-1: Using ep0 maxpacket: 8
[  170.699191][  T967] usb 5-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice= 0.40
[  170.708453][  T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.718600][  T967] usb 5-1: Product: syz
[  170.723279][  T967] usb 5-1: Manufacturer: syz
[  170.728054][  T967] usb 5-1: SerialNumber: syz
[  171.219213][  T967] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  171.280609][ T5974] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.284530][  T967] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[  171.304059][  T967] usb 5-1: USB disconnect, device number 2
[  171.393854][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.600841][ T6686] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  171.909342][   T28] audit: type=1326 audit(1777488174.970:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.5.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  172.834169][ T6699] loop5: detected capacity change from 0 to 512
[  172.865277][ T6699] ext4: Unknown parameter 'func'
[  172.902217][  T787] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  172.910716][ T5766] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  173.098680][ T5835] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  174.304868][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.314329][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.315790][ T5835] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  175.365172][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.424874][ T5835] usb 4-1: config 0 has no interface number 0
[  176.363500][  T787] usb 1-1: unable to get BOS descriptor or descriptor too short
[  176.382877][ T5835] usb 4-1: string descriptor 0 read error: -71
[  176.394599][ T5835] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  176.404600][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.413375][  T787] usb 1-1: unable to read config index 0 descriptor/start: -71
[  176.432933][  T787] usb 1-1: can't read configurations, error -71
[  176.451744][ T5835] usb 4-1: config 0 descriptor??
[  176.488722][ T5835] usb 4-1: can't set config #0, error -71
[  176.518942][ T5835] usb 4-1: USB disconnect, device number 14
[  176.848670][ T6675] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  177.059988][ T6675] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  177.138301][ T6675] usb 6-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40
[  177.230124][ T6675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.324784][ T6675] usb 6-1: Product: syz
[  177.392700][ T6675] usb 6-1: Manufacturer: syz
[  177.468352][ T6675] usb 6-1: SerialNumber: syz
[  178.017064][ T6745] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  178.091999][ T6675] usb 6-1: Can't get UAC3 power state for id 10
[  178.108034][   T28] audit: type=1326 audit(1777488181.280:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.0.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  178.189271][ T6675] usb 6-1: 2:0: failed to get current value for ch 0 (-71)
[  178.230643][ T6675] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  179.118760][ T6675] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  179.218103][ T6675] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  179.365249][ T6675] usb 6-1: USB disconnect, device number 9
[  179.396052][ T6761] loop5: detected capacity change from 0 to 512
[  179.437794][ T6761] EXT4-fs: Ignoring removed i_version option
[  179.520996][ T6761] EXT4-fs (loop5): orphan cleanup on readonly fs
[  179.559436][ T6761] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.182: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  179.606315][ T6761] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.182: ea_inode dec ref err=-117
[  179.645634][ T6761] EXT4-fs (loop5): 1 orphan inode deleted
[  179.669599][ T6765] loop0: detected capacity change from 0 to 512
[  179.688042][ T6761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  179.721211][ T6765] ext4: Unknown parameter 'func'
[  179.838725][  T967] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  184.320723][  T967] usb 4-1: unable to get BOS descriptor or descriptor too short
[  184.330395][  T967] usb 4-1: unable to read config index 0 descriptor/start: -71
[  184.338284][  T967] usb 4-1: can't read configurations, error -71
[  184.430420][ T6777] udevd[6777]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.482637][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.042396][ T6809] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  186.723667][   T28] audit: type=1326 audit(1777488189.900:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.3.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  186.921851][ T6819] loop0: detected capacity change from 0 to 512
[  186.940101][ T6819] ext4: Unknown parameter 'func'
[  187.007358][ T6821] loop4: detected capacity change from 0 to 512
[  187.045409][ T6821] EXT4-fs: Ignoring removed i_version option
[  187.178866][ T6821] EXT4-fs (loop4): orphan cleanup on readonly fs
[  187.190091][ T6821] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.195: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  187.219850][ T6821] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.195: ea_inode dec ref err=-117
[  187.500507][ T5761] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  187.577671][ T6821] EXT4-fs (loop4): 1 orphan inode deleted
[  187.831215][ T6821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  188.679109][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.688086][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.650486][ T5761] usb 4-1: unable to get BOS descriptor or descriptor too short
[  191.719537][ T5761] usb 4-1: unable to read config index 0 descriptor/start: -71
[  191.727288][ T5761] usb 4-1: can't read configurations, error -71
[  191.810430][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.821292][ T6840] tipc: Enabling of bearer <ib:pimreg0> rejected, failed to enable media
[  192.185509][ T6855] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  192.283926][   T28] audit: type=1326 audit(1777488195.460:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.3.204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  192.536606][ T6860] loop5: detected capacity change from 0 to 512
[  192.560355][ T6860] ext4: Unknown parameter 'func'
[  192.672453][ T6862] loop0: detected capacity change from 0 to 256
[  192.702821][ T6862] exfat: Deprecated parameter 'utf8'
[  192.776725][ T6862] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  193.958921][ T6874] loop0: detected capacity change from 0 to 512
[  193.974456][ T6874] EXT4-fs: Ignoring removed i_version option
[  194.020456][ T6874] EXT4-fs (loop0): orphan cleanup on readonly fs
[  194.040602][ T6874] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.210: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  194.072378][ T6874] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.210: ea_inode dec ref err=-117
[  194.118053][ T6874] EXT4-fs (loop0): 1 orphan inode deleted
[  194.156979][ T6874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  194.198584][  T967] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  196.039315][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  196.045745][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  197.137849][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.146895][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.574018][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.999290][ T6894] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  198.148619][ T6899] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  198.308710][   T28] audit: type=1326 audit(1777488201.450:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.0.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  199.023485][ T6904] loop5: detected capacity change from 0 to 512
[  199.029248][  T967] usb 6-1: unable to get BOS descriptor or descriptor too short
[  199.044622][  T967] usb 6-1: unable to read config index 0 descriptor/start: -71
[  199.053316][  T967] usb 6-1: can't read configurations, error -71
[  199.085108][ T6904] ext4: Unknown parameter 'func'
[  199.138555][ T5766] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  199.937480][ T6908] loop0: detected capacity change from 0 to 4096
[  200.029934][ T6908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.071393][ T6912] loop4: detected capacity change from 0 to 512
[  200.117066][ T6912] EXT4-fs: Ignoring removed i_version option
[  200.365605][ T6912] EXT4-fs (loop4): orphan cleanup on readonly fs
[  200.425352][ T6912] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.221: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  201.200175][ T6912] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.221: ea_inode dec ref err=-117
[  201.770293][ T6912] EXT4-fs (loop4): 1 orphan inode deleted
[  202.050859][ T6912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  202.151270][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.914007][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.130625][ T6942] loop5: detected capacity change from 0 to 2048
[  203.144348][ T6942] EXT4-fs: quotafile must be on filesystem root
[  203.188729][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  203.296844][ T6882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.326065][ T6945] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  203.381920][ T6882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.389755][    T9] usb 4-1: Using ep0 maxpacket: 16
[  203.400212][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.411511][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.421855][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  203.422726][   T28] audit: type=1326 audit(1777488206.600:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.5.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  203.430080][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  203.471449][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.483766][  T787] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  203.498038][    T9] usb 4-1: config 0 descriptor??
[  203.510989][ T6882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.597799][ T6882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.018045][    T9] hid (null): bogus close delimiter
[  204.384425][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.395671][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.794452][    T9] usb 4-1: USB disconnect, device number 19
[  204.921607][ T6957] loop5: detected capacity change from 0 to 512
[  205.020909][ T6957] ext4: Unknown parameter 'func'
[  205.342466][   T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  205.619355][   T27] usb 1-1: Using ep0 maxpacket: 32
[  205.685579][   T27] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  205.802206][   T27] usb 1-1: config 0 has no interface number 0
[  205.838748][   T27] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  205.900361][   T27] usb 1-1: config 0 interface 184 has no altsetting 0
[  205.940343][   T27] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  205.975501][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.002091][   T27] usb 1-1: Product: syz
[  206.019371][   T27] usb 1-1: Manufacturer: syz
[  206.034671][   T27] usb 1-1: SerialNumber: syz
[  206.057396][   T27] usb 1-1: config 0 descriptor??
[  206.187139][  T787] usb 5-1: unable to get BOS descriptor or descriptor too short
[  206.210002][  T787] usb 5-1: unable to read config index 0 descriptor/start: -71
[  206.217836][  T787] usb 5-1: can't read configurations, error -71
[  206.231282][   T27] smsc75xx v1.0.0
[  206.235162][   T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  206.260642][   T27] smsc75xx: probe of 1-1:0.184 failed with error -22
[  206.546338][   T27] usb 1-1: USB disconnect, device number 10
[  206.953800][ T6973] loop3: detected capacity change from 0 to 512
[  207.024355][ T5084] Bluetooth: hci0: command 0x0406 tx timeout
[  207.041035][ T5776] Bluetooth: hci2: command 0x0406 tx timeout
[  207.295358][ T6973] EXT4-fs: Ignoring removed i_version option
[  207.429347][ T6973] EXT4-fs (loop3): orphan cleanup on readonly fs
[  207.482870][ T6973] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.234: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  207.564611][ T6973] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.234: ea_inode dec ref err=-117
[  207.584212][ T6973] EXT4-fs (loop3): 1 orphan inode deleted
[  207.594908][ T6973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  208.374315][   T28] audit: type=1326 audit(1777488211.510:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.5.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  208.493178][ T6995] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  208.629971][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.165867][ T7011] loop5: detected capacity change from 0 to 512
[  209.189004][ T7011] ext4: Unknown parameter 'func'
[  209.218943][ T6675] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  209.276421][ T6989] loop0: detected capacity change from 0 to 40427
[  209.318062][ T6989] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  209.344416][ T6989] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  209.413893][ T6989] F2FS-fs (loop0): invalid crc value
[  210.877717][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.889224][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.462731][ T7031] batadv_slave_1: entered promiscuous mode
[  211.581721][ T7029] batadv_slave_1: left promiscuous mode
[  212.978100][ T6675] usb 5-1: unable to get BOS descriptor or descriptor too short
[  213.338909][ T6675] usb 5-1: unable to read config index 0 descriptor/start: -71
[  213.397917][ T6675] usb 5-1: can't read configurations, error -71
[  213.510142][ T6882] hsr_slave_0: left promiscuous mode
[  213.533289][ T7048] loop4: detected capacity change from 0 to 512
[  213.569887][ T7048] EXT4-fs: Ignoring removed i_version option
[  213.584046][ T6882] hsr_slave_1: left promiscuous mode
[  213.638698][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.679567][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.698709][ T7048] EXT4-fs (loop4): orphan cleanup on readonly fs
[  213.750395][ T7048] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.247: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  213.766867][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.809234][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.821054][ T6882] bridge_slave_1: left allmulticast mode
[  213.835359][ T6882] bridge_slave_1: left promiscuous mode
[  213.842232][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.852513][ T7048] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.247: ea_inode dec ref err=-117
[  213.868301][ T6882] bridge_slave_0: left allmulticast mode
[  213.881884][ T6882] bridge_slave_0: left promiscuous mode
[  213.961870][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.984634][ T7048] EXT4-fs (loop4): 1 orphan inode deleted
[  214.006338][ T7048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  214.049537][   T28] audit: type=1326 audit(1777488217.230:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.3.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  214.089316][ T6882] veth1_macvtap: left promiscuous mode
[  214.120858][ T6882] veth0_macvtap: left promiscuous mode
[  214.129092][ T6882] veth1_vlan: left promiscuous mode
[  214.146777][ T6882] veth0_vlan: left promiscuous mode
[  214.591723][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.916018][ T7072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  214.923955][ T7070] loop4: detected capacity change from 0 to 512
[  214.959142][ T7070] ext4: Unknown parameter 'func'
[  216.519155][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.254'.
[  216.879685][ T6882] team0 (unregistering): Port device team_slave_1 removed
[  216.959839][ T6882] team0 (unregistering): Port device team_slave_0 removed
[  217.029837][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.098447][  T969] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  217.176749][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.185239][ T6882] bond0 (unregistering): Released all slaves
[  220.268287][ T7052] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  220.526266][ T7100] loop0: detected capacity change from 0 to 512
[  220.559943][ T7100] EXT4-fs: Ignoring removed i_version option
[  220.706982][ T7100] EXT4-fs (loop0): orphan cleanup on readonly fs
[  220.795445][ T7100] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.258: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  220.838297][ T7100] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.258: ea_inode dec ref err=-117
[  220.856056][ T7100] EXT4-fs (loop0): 1 orphan inode deleted
[  220.971618][ T7108] loop4: detected capacity change from 0 to 256
[  221.043488][ T7100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  221.128206][ T7108] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  222.382051][ T5778] Bluetooth: hci1: command 0x0406 tx timeout
[  223.185036][  T969] usb 6-1: unable to get BOS descriptor or descriptor too short
[  223.199916][  T969] usb 6-1: unable to read config index 0 descriptor/start: -32
[  223.207604][  T969] usb 6-1: chopping to 0 config(s)
[  223.211834][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.228787][  T969] usb 6-1: can't read configurations, error -32
[  223.360220][ T7118] loop4: detected capacity change from 0 to 256
[  223.399560][  T969] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  223.428889][ T7118] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  223.601123][  T969] usb 6-1: device descriptor read/64, error -32
[  223.675687][ T7123] loop0: detected capacity change from 0 to 512
[  223.718838][  T969] usb usb6-port1: attempt power cycle
[  223.763922][ T7123] ext4: Unknown parameter 'func'
[  223.800779][ T7127] loop4: detected capacity change from 0 to 256
[  223.809629][ T7127] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  223.903329][ T7127] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  223.982301][ T7127] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  224.878653][  T969] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  224.943762][  T969] usb 6-1: device descriptor read/8, error -71
[  225.181112][ T7144] loop5: detected capacity change from 0 to 512
[  225.188141][ T7144] EXT4-fs: Ignoring removed i_version option
[  225.556204][ T7147] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  226.205688][ T7144] EXT4-fs (loop5): orphan cleanup on readonly fs
[  226.220437][   T28] audit: type=1326 audit(1777488229.400:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  226.221598][ T7144] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.269: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  226.401426][ T7144] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.269: ea_inode dec ref err=-117
[  226.440277][ T7144] EXT4-fs (loop5): 1 orphan inode deleted
[  226.478205][ T7144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  226.843865][ T7165] process 'syz.3.272' launched '/dev/fd/4' with NULL argv: empty string added
[  227.451855][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.511170][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  227.515631][ T7171] loop3: detected capacity change from 0 to 512
[  227.570766][ T7171] ext4: Unknown parameter 'func'
[  228.720808][ T6675] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  228.802471][ T7189] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  231.537159][ T6675] usb 1-1: unable to get BOS descriptor or descriptor too short
[  231.660995][ T6675] usb 1-1: unable to read config index 0 descriptor/start: -71
[  231.748732][   T28] audit: type=1326 audit(1777488234.910:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.5.280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  231.784269][ T6675] usb 1-1: can't read configurations, error -71
[  232.216851][ T7209] loop3: detected capacity change from 0 to 1024
[  232.237887][ T7209] EXT4-fs: Ignoring removed mblk_io_submit option
[  232.382023][ T7209] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block
[  232.382023][ T7209] 
[  232.966877][ T7215] loop5: detected capacity change from 0 to 512
[  233.019073][ T7215] EXT4-fs: Ignoring removed i_version option
[  233.063162][ T7215] EXT4-fs (loop5): orphan cleanup on readonly fs
[  233.100334][ T7215] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.284: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  233.120961][ T7215] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.284: ea_inode dec ref err=-117
[  233.190301][ T7215] EXT4-fs (loop5): 1 orphan inode deleted
[  233.197489][ T7215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  234.142227][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.236883][ T7232] loop4: detected capacity change from 0 to 512
[  234.248904][ T7232] ext4: Unknown parameter 'func'
[  234.306456][ T7209] loop3: detected capacity change from 0 to 40427
[  234.352443][ T7209] F2FS-fs (loop3): Image doesn't support compression
[  234.452958][ T7209] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value
[  235.258780][ T6675] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  237.818093][ T6675] usb 6-1: unable to get BOS descriptor or descriptor too short
[  238.021956][ T6675] usb 6-1: unable to read config index 0 descriptor/start: -71
[  238.218626][ T6675] usb 6-1: can't read configurations, error -71
[  238.274035][ T7247] loop3: detected capacity change from 0 to 4096
[  238.356532][ T7247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.390248][ T7260] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  238.634263][   T28] audit: type=1326 audit(1777488241.810:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.5.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  240.509902][  T969] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  240.744595][  T969] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  240.784986][  T969] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  240.810202][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.824081][  T969] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  240.852655][  T969] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  240.881321][  T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.900810][  T969] usb 6-1: Product: syz
[  240.905163][  T969] usb 6-1: Manufacturer: syz
[  240.938905][  T969] usb 6-1: SerialNumber: syz
[  241.132653][ T7292] loop3: detected capacity change from 0 to 512
[  241.147190][ T7292] EXT4-fs: Ignoring removed i_version option
[  241.161504][ T7277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  241.177633][ T7292] EXT4-fs (loop3): orphan cleanup on readonly fs
[  241.187267][ T7277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  241.203546][ T7292] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.297: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  241.244126][ T7292] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.297: ea_inode dec ref err=-117
[  241.277908][ T7292] EXT4-fs (loop3): 1 orphan inode deleted
[  241.299073][ T7296] loop0: detected capacity change from 0 to 512
[  241.307276][ T7292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  241.326746][ T7296] ext4: Unknown parameter 'func'
[  242.379758][ T7277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  242.387077][ T7277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  242.918583][ T5817] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  242.955149][ T7313] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  243.075304][   T28] audit: type=1326 audit(1777488246.250:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.0.302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  243.807262][  T969] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  243.962559][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.971512][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.355326][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.559333][  T969] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  244.566898][  T969] cdc_ncm 6-1:1.0: setting rx_max = 2048
[  244.690564][  T969] cdc_ncm 6-1:1.0: setting tx_max = 88
[  244.791358][  T969] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  244.885153][  T969] usb 6-1: USB disconnect, device number 18
[  244.903179][  T969] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  245.690712][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short
[  245.711715][ T5817] usb 5-1: unable to read config index 0 descriptor/start: -71
[  245.762914][ T5817] usb 5-1: can't read configurations, error -71
[  246.019116][ T7341] capability: warning: `syz.4.306' uses deprecated v2 capabilities in a way that may be insecure
[  246.314809][ T7349] loop4: detected capacity change from 0 to 512
[  246.326252][ T7349] ext4: Unknown parameter 'func'
[  246.378879][  T969] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  247.468572][  T969] usb 6-1: Using ep0 maxpacket: 32
[  247.482887][  T969] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  247.507560][  T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.530283][  T969] usb 6-1: Product: syz
[  247.534667][  T969] usb 6-1: Manufacturer: syz
[  247.541786][  T969] usb 6-1: SerialNumber: syz
[  247.706759][ T7360] loop4: detected capacity change from 0 to 512
[  247.754022][ T7360] EXT4-fs: Ignoring removed i_version option
[  247.799376][ T7360] EXT4-fs (loop4): orphan cleanup on readonly fs
[  247.822220][ T7360] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.311: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  247.852659][ T7360] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.311: ea_inode dec ref err=-117
[  247.869691][ T7360] EXT4-fs (loop4): 1 orphan inode deleted
[  247.885326][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  247.916627][ T7366] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  248.180655][  T969] usb 6-1: 1:1: cannot get freq (v2/v3): err -32
[  248.198775][   T28] audit: type=1326 audit(1777488251.360:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  248.831970][  T969] usb 6-1: 1:1: cannot get freq (v2/v3): err -71
[  248.973527][  T969] usb 6-1: 2:1: cannot get freq (v2/v3): err -71
[  249.013120][  T969] usb 6-1: 2:1: cannot set freq 44100 (v2/v3): err -71
[  249.221522][  T969] usb 6-1: USB disconnect, device number 19
[  249.364376][ T6785] udevd[6785]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.403262][ T7381] loop0: detected capacity change from 0 to 128
[  249.611296][ T7381] syz.0.313: attempt to access beyond end of device
[  249.611296][ T7381] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[  249.838012][ T7381] syz.0.313: attempt to access beyond end of device
[  249.838012][ T7381] loop0: rw=0, sector=138, nr_sectors = 2 limit=128
[  249.915411][ T7380] syz.0.313: attempt to access beyond end of device
[  249.915411][ T7380] loop0: rw=0, sector=138, nr_sectors = 2 limit=128
[  249.995524][ T7380] Buffer I/O error on dev loop0, logical block 69, async page read
[  250.035670][ T7380] syz.0.313: attempt to access beyond end of device
[  250.035670][ T7380] loop0: rw=0, sector=140, nr_sectors = 2 limit=128
[  250.078608][ T7380] Buffer I/O error on dev loop0, logical block 70, async page read
[  250.107160][ T7380] syz.0.313: attempt to access beyond end of device
[  250.107160][ T7380] loop0: rw=0, sector=142, nr_sectors = 2 limit=128
[  250.141264][ T7380] Buffer I/O error on dev loop0, logical block 71, async page read
[  250.157203][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.187514][ T7380] syz.0.313: attempt to access beyond end of device
[  250.187514][ T7380] loop0: rw=0, sector=144, nr_sectors = 2 limit=128
[  250.218822][ T7380] Buffer I/O error on dev loop0, logical block 72, async page read
[  250.227148][ T7380] syz.0.313: attempt to access beyond end of device
[  250.227148][ T7380] loop0: rw=0, sector=138, nr_sectors = 2 limit=128
[  250.284837][ T7380] Buffer I/O error on dev loop0, logical block 69, async page read
[  250.305853][ T7380] syz.0.313: attempt to access beyond end of device
[  250.305853][ T7380] loop0: rw=0, sector=140, nr_sectors = 2 limit=128
[  250.319033][  T969] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  250.352901][ T7380] Buffer I/O error on dev loop0, logical block 70, async page read
[  250.379998][ T7380] syz.0.313: attempt to access beyond end of device
[  250.379998][ T7380] loop0: rw=0, sector=142, nr_sectors = 2 limit=128
[  250.408551][ T7380] Buffer I/O error on dev loop0, logical block 71, async page read
[  250.416592][ T7380] syz.0.313: attempt to access beyond end of device
[  250.416592][ T7380] loop0: rw=0, sector=144, nr_sectors = 2 limit=128
[  250.475198][ T7396] loop4: detected capacity change from 0 to 256
[  250.482042][ T7380] Buffer I/O error on dev loop0, logical block 72, async page read
[  250.495830][ T7380] Buffer I/O error on dev loop0, logical block 69, async page read
[  250.513875][ T7380] Buffer I/O error on dev loop0, logical block 70, async page read
[  250.622617][ T7396] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  250.749952][   T28] audit: type=1800 audit(1777488253.920:209): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.315" name="file1" dev="loop4" ino=1048617 res=0 errno=0
[  251.298821][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.310181][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.620777][ T7399] loop3: detected capacity change from 0 to 8192
[  252.449877][ T7423] loop3: detected capacity change from 0 to 512
[  252.460626][ T7423] ext4: Unknown parameter 'func'
[  252.667438][ T5766] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  253.771715][ T7435] loop5: detected capacity change from 0 to 256
[  253.773148][  T969] usb 6-1: unable to get BOS descriptor or descriptor too short
[  253.792933][  T969] usb 6-1: unable to read config index 0 descriptor/start: -71
[  253.800779][  T969] usb 6-1: can't read configurations, error -71
[  253.863035][ T7436] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  253.951460][ T7438] loop3: detected capacity change from 0 to 512
[  253.981803][ T7438] EXT4-fs: Ignoring removed i_version option
[  254.004631][ T7435] FAT-fs (loop5): Directory bread(block 64) failed
[  254.020614][ T7435] FAT-fs (loop5): Directory bread(block 65) failed
[  254.023523][ T7438] EXT4-fs (loop3): orphan cleanup on readonly fs
[  254.027315][   T28] audit: type=1326 audit(1777488257.180:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  254.078640][ T7435] FAT-fs (loop5): Directory bread(block 66) failed
[  254.085290][ T7435] FAT-fs (loop5): Directory bread(block 67) failed
[  254.092300][ T7435] FAT-fs (loop5): Directory bread(block 68) failed
[  254.098940][ T7435] FAT-fs (loop5): Directory bread(block 69) failed
[  254.101565][ T7438] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.323: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  254.105727][ T7435] FAT-fs (loop5): Directory bread(block 70) failed
[  254.127458][ T7435] FAT-fs (loop5): Directory bread(block 71) failed
[  254.134293][ T7435] FAT-fs (loop5): Directory bread(block 72) failed
[  254.148397][ T7435] FAT-fs (loop5): Directory bread(block 73) failed
[  254.211085][ T7438] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.323: ea_inode dec ref err=-117
[  254.243877][ T7438] EXT4-fs (loop3): 1 orphan inode deleted
[  254.263945][ T7438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  255.479651][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.556954][ T7459] loop0: detected capacity change from 0 to 256
[  255.754880][ T7459] FAT-fs (loop0): Directory bread(block 64) failed
[  255.808882][ T7459] FAT-fs (loop0): Directory bread(block 65) failed
[  255.815694][ T7459] FAT-fs (loop0): Directory bread(block 66) failed
[  255.860866][ T7459] FAT-fs (loop0): Directory bread(block 67) failed
[  255.880661][ T7459] FAT-fs (loop0): Directory bread(block 68) failed
[  255.902020][ T7459] FAT-fs (loop0): Directory bread(block 69) failed
[  255.928746][ T7459] FAT-fs (loop0): Directory bread(block 70) failed
[  255.935650][ T7459] FAT-fs (loop0): Directory bread(block 71) failed
[  255.956025][ T7459] FAT-fs (loop0): Directory bread(block 72) failed
[  255.989842][ T7459] FAT-fs (loop0): Directory bread(block 73) failed
[  256.150059][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  256.156533][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  257.189357][ T7486] loop3: detected capacity change from 0 to 512
[  257.205164][ T7486] ext4: Unknown parameter 'func'
[  257.231285][ T7488] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  257.308738][  T787] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  257.330749][   T28] audit: type=1326 audit(1777488260.480:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.5.333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  257.352433][    C0] vkms_vblank_simulate: vblank timer overrun
[  257.654354][ T7493] loop4: detected capacity change from 0 to 512
[  257.856064][ T7493] EXT4-fs: Ignoring removed i_version option
[  258.156292][ T7493] EXT4-fs (loop4): orphan cleanup on readonly fs
[  258.200421][ T7493] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.334: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  258.294845][ T7493] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.334: ea_inode dec ref err=-117
[  258.336963][ T7493] EXT4-fs (loop4): 1 orphan inode deleted
[  258.499424][ T7493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  259.553811][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.563230][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.954792][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.695660][ T7520] loop5: detected capacity change from 0 to 4096
[  261.988839][  T787] usb 1-1: unable to get BOS descriptor or descriptor too short
[  262.009783][  T787] usb 1-1: unable to read config index 0 descriptor/start: -71
[  262.017481][  T787] usb 1-1: can't read configurations, error -71
[  262.051662][ T7520] EXT4-fs: Ignoring removed orlov option
[  262.098973][ T7520] EXT4-fs (loop5): Test dummy encryption mode enabled
[  262.193726][ T7520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.446451][ T7520] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  262.574333][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.534127][ T7527] loop4: detected capacity change from 0 to 40427
[  263.580524][ T7527] F2FS-fs (loop4): invalid crc value
[  263.618002][ T7527] F2FS-fs (loop4): Found nat_bits in checkpoint
[  263.782928][ T7527] F2FS-fs (loop4): Start checkpoint disabled!
[  263.795061][ T7527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  263.901051][ T7527] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  263.911066][ T7554] loop0: detected capacity change from 0 to 512
[  263.912664][ T7555] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  263.940603][ T7554] ext4: Unknown parameter 'func'
[  264.168963][   T28] audit: type=1326 audit(1777488267.290:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.5.343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  265.508853][ T6675] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  266.566992][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.576864][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.443639][ T7580] loop4: detected capacity change from 0 to 512
[  267.608424][ T7580] EXT4-fs: Ignoring removed i_version option
[  267.716539][ T7580] EXT4-fs (loop4): orphan cleanup on readonly fs
[  267.745665][ T7580] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.345: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  267.774748][ T7580] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.345: ea_inode dec ref err=-117
[  267.788036][ T7580] EXT4-fs (loop4): 1 orphan inode deleted
[  267.796371][ T7580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  268.633573][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.751861][ T6675] usb 6-1: unable to get BOS descriptor or descriptor too short
[  268.866431][ T6675] usb 6-1: unable to read config index 0 descriptor/start: -71
[  268.889780][ T6675] usb 6-1: can't read configurations, error -71
[  269.194230][ T7600] loop5: detected capacity change from 0 to 512
[  269.306391][ T7600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.319821][ T7600] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.341446][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.355'.
[  269.689666][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.872833][ T7612] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  269.929681][ T7615] loop4: detected capacity change from 0 to 512
[  269.938556][   T28] audit: type=1326 audit(1777488273.110:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  269.970008][ T7615] ext4: Unknown parameter 'func'
[  271.364479][ T7644] loop3: detected capacity change from 0 to 512
[  271.430069][ T7644] EXT4-fs: Ignoring removed i_version option
[  271.478797][ T7644] EXT4-fs (loop3): orphan cleanup on readonly fs
[  271.510732][ T7644] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.362: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  271.532346][ T7644] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.362: ea_inode dec ref err=-117
[  271.556343][ T7644] EXT4-fs (loop3): 1 orphan inode deleted
[  271.565172][ T7644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  272.327570][ T5761] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  272.352937][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.296272][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.307487][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.910882][ T5761] usb 1-1: unable to get BOS descriptor or descriptor too short
[  275.098292][ T5761] usb 1-1: unable to read config index 0 descriptor/start: -71
[  275.127904][ T5761] usb 1-1: can't read configurations, error -71
[  275.141768][ T7688] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  275.328701][   T28] audit: type=1326 audit(1777488278.500:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.5.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5106d9cdd9 code=0x0
[  275.492587][ T7700] loop0: detected capacity change from 0 to 512
[  275.535156][ T7700] ext4: Unknown parameter 'func'
[  276.756942][ T7713] loop5: detected capacity change from 0 to 512
[  276.819834][ T7713] EXT4-fs: Ignoring removed i_version option
[  276.878291][ T7713] EXT4-fs (loop5): orphan cleanup on readonly fs
[  276.987314][ T7713] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.375: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  277.015057][ T7713] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.375: ea_inode dec ref err=-117
[  277.109937][ T7720] loop0: detected capacity change from 0 to 128
[  277.128669][ T7720] FAT-fs (loop0): Unrecognized mount option "00000000000000000000005ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value
[  277.284112][ T7713] EXT4-fs (loop5): 1 orphan inode deleted
[  277.703323][ T7713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  278.219604][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.771693][    T8] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  280.668897][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[  281.690517][ T7746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.699461][ T7746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.525619][ T7750] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  282.663745][ T7758] loop5: detected capacity change from 0 to 512
[  282.688063][ T7758] ext4: Unknown parameter 'func'
[  282.695407][   T28] audit: type=1326 audit(1777488285.880:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.0.383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  283.835042][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  283.866085][    T8] usb 4-1: unable to read config index 0 descriptor/start: -71
[  283.874420][    T8] usb 4-1: can't read configurations, error -71
[  283.922425][ T7772] loop3: detected capacity change from 0 to 512
[  283.950134][ T7772] EXT4-fs: Ignoring removed i_version option
[  284.066005][ T7772] EXT4-fs (loop3): orphan cleanup on readonly fs
[  284.082644][ T7772] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.386: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  284.104520][ T7772] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.386: ea_inode dec ref err=-117
[  284.117994][ T7772] EXT4-fs (loop3): 1 orphan inode deleted
[  284.129447][ T7772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  284.295809][ T7782] loop5: detected capacity change from 0 to 512
[  284.505217][ T7782] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.388: invalid block
[  284.528750][ T7782] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.388: invalid indirect mapped block 1024 (level 0)
[  284.577827][ T7782] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.388: bg 0: block 35: padding at end of block bitmap is not set
[  284.598650][ T7782] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  284.627020][ T7782] EXT4-fs (loop5): 1 truncate cleaned up
[  284.652619][ T7782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.488609][   T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  285.703519][   T23] usb 1-1: unable to get BOS descriptor or descriptor too short
[  285.732643][   T23] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  285.761156][   T23] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  285.776761][ T7778] loop4: detected capacity change from 0 to 40427
[  285.783665][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.808569][ T7778] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  285.813701][   T23] usb 1-1: Product: syz
[  285.822434][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.858487][   T23] usb 1-1: Manufacturer: syz
[  285.893684][   T23] usb 1-1: SerialNumber: syz
[  285.905652][ T7778] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  285.974484][ T7778] F2FS-fs (loop4): invalid crc value
[  286.063606][ T7778] F2FS-fs (loop4): Found nat_bits in checkpoint
[  286.227038][   T23] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  286.393472][ T7778] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  286.416665][   T23] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  286.451105][   T23] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  286.459013][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.486756][ T7778] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  286.838309][   T23] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  287.064739][   T23] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  287.362137][   T23] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  287.748055][   T23] usb 1-1: USB disconnect, device number 17
[  288.012500][ T7816] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  288.021967][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  288.185382][   T28] audit: type=1326 audit(1777488291.340:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.0.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  288.308567][    T8] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  289.237541][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.249116][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.321635][ T7836] loop5: detected capacity change from 0 to 512
[  290.331927][ T7836] EXT4-fs: Ignoring removed i_version option
[  290.355545][ T7836] EXT4-fs (loop5): orphan cleanup on readonly fs
[  290.385650][ T7836] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.398: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  290.422416][ T7836] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.398: ea_inode dec ref err=-117
[  290.477369][ T7836] EXT4-fs (loop5): 1 orphan inode deleted
[  290.509486][ T7836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  290.724333][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.768198][ T7844] loop4: detected capacity change from 0 to 512
[  290.780350][ T7844] ext4: Unknown parameter 'func'
[  291.095738][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  291.127629][    T8] usb 4-1: unable to read config index 0 descriptor/start: -71
[  291.160338][    T8] usb 4-1: can't read configurations, error -71
[  291.349407][ T7849] loop5: detected capacity change from 0 to 4096
[  291.381155][ T7849] EXT4-fs: inline encryption not supported
[  291.406762][ T7849] EXT4-fs: Ignoring removed bh option
[  291.452799][ T7849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  291.492880][ T7849] EXT4-fs (loop5): Test dummy encryption mode enabled
[  291.537672][ T7849] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  291.573674][ T7849] System zones: 0-5
[  291.603208][ T7849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.834495][ T7870] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  291.955514][   T28] audit: type=1326 audit(1777488295.130:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  292.105679][ T7849] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  292.180559][ T7873] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  292.917878][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.066444][ T7891] loop0: detected capacity change from 0 to 512
[  293.095512][ T7891] EXT4-fs: Ignoring removed i_version option
[  293.164075][ T7891] EXT4-fs (loop0): orphan cleanup on readonly fs
[  293.180821][ T7891] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.411: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  293.238897][  T787] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  293.288007][ T7891] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.411: ea_inode dec ref err=-117
[  293.354968][ T7891] EXT4-fs (loop0): 1 orphan inode deleted
[  293.382926][ T7891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  294.257503][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.269001][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.794136][ T7915] loop4: detected capacity change from 0 to 512
[  294.833646][ T7915] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  294.901804][ T7915] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  294.925645][ T7918] loop5: detected capacity change from 0 to 512
[  294.984658][ T7918] ext4: Unknown parameter 'func'
[  295.032183][ T7915] EXT4-fs (loop4): 1 truncate cleaned up
[  295.145080][ T7915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.321324][ T7915] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.415: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  295.384599][ T7915] EXT4-fs (loop4): Remounting filesystem read-only
[  295.570138][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.998659][  T787] usb 4-1: unable to get BOS descriptor or descriptor too short
[  296.035688][  T787] usb 4-1: unable to read config index 0 descriptor/start: -71
[  296.086900][  T787] usb 4-1: can't read configurations, error -71
[  296.653598][ T7948] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  297.334114][   T28] audit: type=1326 audit(1777488300.490:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.3.420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  297.840184][ T7966] mmap: syz.5.423 (7966): VmData 37584896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  298.064075][ T7977] loop5: detected capacity change from 0 to 512
[  298.082883][ T7977] ext4: Unknown parameter 'func'
[  298.848574][ T5817] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  298.964937][ T7992] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  299.114566][ T7996] loop5: detected capacity change from 0 to 512
[  299.141279][ T7996] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  299.217391][ T7999] loop3: detected capacity change from 0 to 256
[  299.404035][ T7996] EXT4-fs (loop5): 1 truncate cleaned up
[  299.452686][ T7999] FAT-fs (loop3): Directory bread(block 64) failed
[  299.460916][ T7996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.514106][ T7999] FAT-fs (loop3): Directory bread(block 65) failed
[  299.520999][ T7999] FAT-fs (loop3): Directory bread(block 66) failed
[  299.527621][ T7999] FAT-fs (loop3): Directory bread(block 67) failed
[  299.535153][ T7999] FAT-fs (loop3): Directory bread(block 68) failed
[  299.542192][ T7999] FAT-fs (loop3): Directory bread(block 69) failed
[  299.549343][ T7999] FAT-fs (loop3): Directory bread(block 70) failed
[  299.556047][ T7999] FAT-fs (loop3): Directory bread(block 71) failed
[  299.578582][ T7999] FAT-fs (loop3): Directory bread(block 72) failed
[  299.585431][ T7999] FAT-fs (loop3): Directory bread(block 73) failed
[  300.179405][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.191129][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.467060][ T5974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.586312][ T8014] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  301.604217][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short
[  301.662598][ T5817] usb 5-1: unable to read config index 0 descriptor/start: -71
[  301.691047][   T28] audit: type=1326 audit(1777488304.870:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.3.433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  301.716663][ T5817] usb 5-1: can't read configurations, error -71
[  301.949181][ T8021] loop5: detected capacity change from 0 to 256
[  302.164816][ T8024] loop5: detected capacity change from 0 to 512
[  302.193516][ T8024] ext4: Unknown parameter 'func'
[  302.484102][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.821022][ T8032] loop4: detected capacity change from 0 to 256
[  302.839771][ T8034] loop3: detected capacity change from 0 to 128
[  302.882465][ T5766] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  302.908551][  T967] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  303.108846][  T967] usb 1-1: Using ep0 maxpacket: 16
[  303.131226][  T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.194061][  T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.233027][  T967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  303.266204][  T967] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  303.275603][  T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.294779][  T967] usb 1-1: config 0 descriptor??
[  303.517942][ T8041] loop5: detected capacity change from 0 to 512
[  303.676304][ T8041] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  303.678556][ T5817] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  303.766972][ T8032] loop4: detected capacity change from 0 to 40427
[  303.782825][ T8032] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  303.804698][ T8032] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  303.838176][ T8032] F2FS-fs (loop4): invalid crc value
[  303.924902][ T8032] F2FS-fs (loop4): Found nat_bits in checkpoint
[  304.020878][  T967] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[  304.031119][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.038618][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.046176][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.054414][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.062052][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.062631][ T8032] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  304.072207][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.099846][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.107300][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.116374][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.123928][  T967] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  304.131732][ T8032] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  304.144274][  T967] HID 045e:07da: Invalid code 65791 type 1
[  304.168954][  T967] HID 045e:07da: Invalid code 768 type 1
[  304.207077][  T967] HID 045e:07da: Invalid code 769 type 1
[  304.230905][  T967] HID 045e:07da: Invalid code 770 type 1
[  304.275839][  T967] HID 045e:07da: Invalid code 771 type 1
[  304.330813][  T967] HID 045e:07da: Invalid code 772 type 1
[  304.646756][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.656437][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.874893][  T967] HID 045e:07da: Invalid code 773 type 1
[  305.546687][  T967] HID 045e:07da: Invalid code 774 type 1
[  305.558548][  T967] HID 045e:07da: Invalid code 775 type 1
[  305.564319][  T967] HID 045e:07da: Invalid code 776 type 1
[  305.653915][  T967] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input6
[  305.819470][  T967] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  305.895021][  T967] usb 1-1: USB disconnect, device number 18
[  305.953938][ T8061] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  306.073893][   T28] audit: type=1326 audit(1777488309.250:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  306.233939][ T8059] fido_id[8059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  306.678578][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short
[  306.690927][ T5817] usb 4-1: unable to read config index 0 descriptor/start: -71
[  306.722644][ T5817] usb 4-1: can't read configurations, error -71
[  306.862094][ T8067] loop4: detected capacity change from 0 to 512
[  306.889901][ T8067] EXT4-fs: Ignoring removed i_version option
[  306.927891][ T8067] EXT4-fs (loop4): orphan cleanup on readonly fs
[  306.955363][ T8067] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.446: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  307.004852][ T8067] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.446: ea_inode dec ref err=-117
[  307.022079][ T8067] EXT4-fs (loop4): 1 orphan inode deleted
[  307.039941][ T8067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  307.091027][ T8073] loop5: detected capacity change from 0 to 512
[  307.100060][ T8073] ext4: Unknown parameter 'func'
[  307.329134][ T6777] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  309.104960][ T8091] loop3: detected capacity change from 0 to 128
[  309.118004][ T8091] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  309.172754][ T8091] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  310.239086][  T967] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  310.287256][ T8095] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  310.405888][   T28] audit: type=1326 audit(1777488313.580:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.0.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f99cdd9 code=0x0
[  311.587067][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.596560][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.801961][ T6882] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  312.256752][ T8103] loop3: detected capacity change from 0 to 512
[  312.324382][ T8103] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  312.369562][ T8103] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  312.464443][ T8103] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.457: bg 0: block 248: padding at end of block bitmap is not set
[  312.516861][ T5945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.550174][ T8103] Quota error (device loop3): write_blk: dquota write failed
[  312.566535][ T8103] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  312.593631][ T8112] loop0: detected capacity change from 0 to 512
[  312.600642][ T8103] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.457: Failed to acquire dquot type 1
[  312.619256][ T8112] ext4: Unknown parameter 'func'
[  312.630040][ T8103] EXT4-fs (loop3): 1 truncate cleaned up
[  312.640232][ T8103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  312.720408][ T8103] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.457: deleted inode referenced: 12
[  313.046681][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  313.370266][  T967] usb 6-1: unable to get BOS descriptor or descriptor too short
[  313.381287][  T967] usb 6-1: unable to read config index 0 descriptor/start: -71
[  313.395626][  T967] usb 6-1: can't read configurations, error -71
[  313.613065][ T8127] loop5: detected capacity change from 0 to 256
[  313.643527][ T8127] exfat: Deprecated parameter 'namecase'
[  313.761908][ T8127] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  313.837972][ T8133] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  313.896960][ T8136] loop0: detected capacity change from 0 to 512
[  313.933851][ T8136] EXT4-fs: Ignoring removed i_version option
[  313.955395][   T28] audit: type=1326 audit(1777488317.130:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.4.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8956f9cdd9 code=0x0
[  313.957174][ T8136] EXT4-fs (loop0): orphan cleanup on readonly fs
[  314.097344][ T8136] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.467: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  314.175802][ T8136] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.467: ea_inode dec ref err=-117
[  314.226243][ T8136] EXT4-fs (loop0): 1 orphan inode deleted
[  314.260006][ T8136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  314.855476][ T8152] loop4: detected capacity change from 0 to 512
[  314.869113][  T967] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  314.878638][ T8152] ext4: Unknown parameter 'func'
[  315.100957][ T8143] loop5: detected capacity change from 0 to 40427
[  315.155582][ T8143] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  315.197037][ T8143] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  315.331092][ T8143] F2FS-fs (loop5): invalid crc value
[  316.279529][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.291135][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.882435][ T8143] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  316.894464][ T8143] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  317.585728][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  317.592468][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  318.103487][  T967] usb 4-1: unable to get BOS descriptor or descriptor too short
[  318.257906][  T967] usb 4-1: unable to read config index 0 descriptor/start: -71
[  318.478560][  T967] usb 4-1: can't read configurations, error -71
[  318.612127][ T8176] loop5: detected capacity change from 0 to 256
[  318.697742][ T8176] FAT-fs (loop5): Directory bread(block 64) failed
[  318.704867][ T8176] FAT-fs (loop5): Directory bread(block 65) failed
[  318.717012][ T8176] FAT-fs (loop5): Directory bread(block 66) failed
[  318.725188][ T8176] FAT-fs (loop5): Directory bread(block 67) failed
[  318.737245][ T8176] FAT-fs (loop5): Directory bread(block 68) failed
[  318.747537][ T8176] FAT-fs (loop5): Directory bread(block 69) failed
[  318.777056][ T8176] FAT-fs (loop5): Directory bread(block 70) failed
[  318.800753][ T8176] FAT-fs (loop5): Directory bread(block 71) failed
[  318.821904][ T8176] FAT-fs (loop5): Directory bread(block 72) failed
[  318.852836][ T8176] FAT-fs (loop5): Directory bread(block 73) failed
[  318.948955][ T8183] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  319.089891][   T28] audit: type=1326 audit(1777488322.270:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8956f9cdd9 code=0x0
[  319.137522][ T8186] loop5: detected capacity change from 0 to 512
[  319.147285][ T8186] ext4: Unknown parameter 'func'
[  320.148914][ T8192] Zero length message leads to an empty skb
[  320.258916][ T8196] loop5: detected capacity change from 0 to 512
[  320.322776][ T8196] Quota error (device loop5): v2_read_file_info: Block with free entry 5 out of range (1, 0).
[  320.360634][ T8196] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  320.418991][ T8196] EXT4-fs (loop5): mount failed
[  320.873535][ T5817] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  321.071279][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  321.096105][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  321.128656][ T5817] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  321.148038][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.179866][ T5817] usb 4-1: config 0 descriptor??
[  321.220306][ T5817] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  321.688598][ T5817] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  321.709091][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.878838][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.897252][ T8209] loop4: detected capacity change from 0 to 40427
[  321.898645][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.910502][ T8209] F2FS-fs (loop4): Image doesn't support compression
[  321.926105][ T8209] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value
[  321.928633][ T5817] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  321.967212][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.999627][ T5817] usb 6-1: config 0 descriptor??
[  322.297105][ T8222] loop0: detected capacity change from 0 to 512
[  322.318231][ T8222] ext4: Unknown parameter 'func'
[  322.616521][ T5817] hid-led: probe of 0003:27B8:01ED.0004 failed with error -71
[  322.959493][ T5817] usb 6-1: USB disconnect, device number 26
[  323.021311][ T8226] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  323.091389][   T28] audit: type=1326 audit(1777488326.270:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.4.492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8956f9cdd9 code=0x0
[  323.612918][ T5817] usb 4-1: USB disconnect, device number 30
[  323.706483][ T8242] loop3: detected capacity change from 0 to 512
[  323.720143][ T8242] EXT4-fs: Ignoring removed i_version option
[  323.733213][ T8242] EXT4-fs (loop3): orphan cleanup on readonly fs
[  323.742857][ T8242] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.497: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  323.766303][ T8242] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.497: ea_inode dec ref err=-117
[  323.787388][ T8242] EXT4-fs (loop3): 1 orphan inode deleted
[  323.802172][ T8242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  325.149095][ T5761] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  325.401180][ T5761] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  325.425900][ T5761] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.486076][ T5761] usb 5-1: config 2 interface 0 has no altsetting 0
[  325.528484][ T5761] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  325.568286][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.985107][ T8258] loop0: detected capacity change from 0 to 4096
[  327.020799][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.339762][ T8258] EXT4-fs: inline encryption not supported
[  327.407399][ T8258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  327.450324][ T8258] EXT4-fs (loop0): Test dummy encryption mode enabled
[  327.476877][ T8258] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[  327.485734][ T8258] System zones: 0-5
[  327.524341][ T8258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.713022][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.860555][ T8267] loop5: detected capacity change from 0 to 512
[  327.870754][ T8267] ext4: Unknown parameter 'func'
[  327.949015][ T6777] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  328.506999][ T5761] usbhid 5-1:2.0: can't add hid device: -71
[  328.513870][ T5761] usbhid: probe of 5-1:2.0 failed with error -71
[  328.523169][ T5761] usb 5-1: USB disconnect, device number 11
[  328.546952][ T8277] tipc: Enabling of bearer <eth:dummy0> rejected, already enabled
[  328.660778][   T28] audit: type=1326 audit(1777488331.830:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.3.507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad02d9cdd9 code=0x0
[  328.734319][ T8280] loop5: detected capacity change from 0 to 512
[  328.798382][ T8280] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #11: block 327694: comm syz.5.508: lblock 0 mapped to illegal pblock 327694 (length 1)
[  329.018689][ T8280] ------------[ cut here ]------------
[  329.024351][ T8280] EA inode 11 i_nlink=2
[  329.040630][ T8280] WARNING: CPU: 1 PID: 8280 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590
[  329.055921][ T8280] Modules linked in:
[  329.060283][ T8280] CPU: 1 PID: 8280 Comm: syz.5.508 Not tainted syzkaller #0
[  329.067626][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  329.078258][ T8280] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590
[  329.085473][ T8280] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 35 d5 98 ff 49 8b 37 48 c7 c7 20 d8 de 8a 89 da e8 74 54 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 be f5 3f 08
[  329.106997][ T8280] RSP: 0018:ffffc900034272e0 EFLAGS: 00010246
[  329.113729][ T8280] RAX: aea5fcb84a62a100 RBX: 0000000000000002 RCX: 0000000000080000
[  329.122276][ T8280] RDX: ffffc9000d1da000 RSI: 000000000001c102 RDI: 000000000001c103
[  329.130779][ T8280] RBP: ffffc900034273d0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182
[  329.139289][ T8280] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000
[  329.147414][ T8280] R13: ffff88805e45a2a8 R14: ffff88805e45a0b0 R15: ffff88805e45a100
[  329.155904][ T8280] FS:  00007f5107cc36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  329.165294][ T8280] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  329.172481][ T8280] CR2: 000000110c45808e CR3: 000000002c4b6000 CR4: 00000000003526e0
[  329.181123][ T8280] Call Trace:
[  329.184454][ T8280]  <TASK>
[  329.189201][ T8280]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  329.193905][ T8290] loop0: detected capacity change from 0 to 256
[  329.194897][ T8280]  ? __ext4_journal_ensure_credits+0x30/0x450
[  329.208998][ T8280]  ext4_xattr_inode_dec_ref_all+0x9a6/0x1040
[  329.215102][ T8280]  ? ext4_xattr_delete_inode+0xd10/0xd10
[  329.222257][ T8280]  ? __ext4_journal_ensure_credits+0x450/0x450
[  329.228986][ T8280]  ext4_xattr_delete_inode+0xb3e/0xd10
[  329.234638][ T8280]  ? up_write+0x1c3/0x410
[  329.239532][ T8280]  ? ext4_expand_extra_isize_ea+0x1e80/0x1e80
[  329.245971][ T8280]  ext4_evict_inode+0xaaf/0xea0
[  329.251194][ T8280]  ? _raw_spin_unlock+0x28/0x40
[  329.256125][ T8280]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  329.262420][ T8280]  ? do_raw_spin_unlock+0x121/0x230
[  329.267778][ T8280]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  329.273784][ T8280]  evict+0x4ca/0x8d0
[  329.277766][ T8280]  ? proc_nr_inodes+0x230/0x230
[  329.282795][ T8280]  ? do_raw_spin_unlock+0x121/0x230
[  329.282838][ T8280]  ? _raw_spin_unlock+0x28/0x40
[  329.282862][ T8280]  ? iput+0x706/0x920
[  329.282894][ T8280]  ext4_orphan_cleanup+0xbec/0x1420
[  329.282930][ T8280]  ? ext4_orphan_del+0xbf0/0xbf0
[  329.282951][ T8280]  ? ext4_register_li_request+0x183/0x940
[  329.282983][ T8280]  ? errseq_check_and_advance+0x66/0x120
[  329.283015][ T8280]  ext4_fill_super+0x5eea/0x67b0
[  329.283081][ T8280]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  329.283111][ T8280]  ? __might_sleep+0xe0/0xe0
[  329.283137][ T8280]  ? read_lock_is_recursive+0x20/0x20
[  329.283159][ T8280]  ? snprintf+0xe9/0x140
[  329.283201][ T8280]  ? down_read_killable+0x340/0x340
[  329.283231][ T8280]  ? setup_bdev_super+0x56b/0x660
[  329.283258][ T8280]  get_tree_bdev+0x3f3/0x520
[  329.283279][ T8280]  ? vfs_parse_fs_string+0x170/0x170
[  329.283305][ T8280]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  329.283329][ T8280]  ? setup_bdev_super+0x660/0x660
[  329.283350][ T8280]  ? apparmor_capable+0x137/0x1a0
[  329.283375][ T8280]  ? bpf_lsm_capable+0x9/0x10
[  329.283402][ T8280]  ? security_capable+0x89/0xb0
[  329.283429][ T8280]  vfs_get_tree+0x8c/0x280
[  329.283453][ T8280]  do_new_mount+0x24b/0xa40
[  329.283483][ T8280]  __se_sys_mount+0x2e7/0x3d0
[  329.283511][ T8280]  ? __x64_sys_mount+0xc0/0xc0
[  329.283535][ T8280]  ? lockdep_hardirqs_on+0x98/0x150
[  329.283557][ T8280]  ? __x64_sys_mount+0x20/0xc0
[  329.283579][ T8280]  do_syscall_64+0x55/0xa0
[  329.283597][ T8280]  ? clear_bhb_loop+0x40/0x90
[  329.283620][ T8280]  ? clear_bhb_loop+0x40/0x90
[  329.283641][ T8280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  329.283661][ T8280] RIP: 0033:0x7f5106d9e04a
[  329.283680][ T8280] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.283695][ T8280] RSP: 002b:00007f5107cc2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  329.283719][ T8280] RAX: ffffffffffffffda RBX: 00007f5107cc2ee0 RCX: 00007f5106d9e04a
[  329.283735][ T8280] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 00007f5107cc2ea0
[  329.283750][ T8280] RBP: 0000200000000080 R08: 00007f5107cc2ee0 R09: 0000000000800718
[  329.283765][ T8280] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[  329.283779][ T8280] R13: 00007f5107cc2ea0 R14: 000000000000048a R15: 0000200000000740
[  329.283812][ T8280]  </TASK>
[  329.283824][ T8280] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  329.283835][ T8280] CPU: 1 PID: 8280 Comm: syz.5.508 Not tainted syzkaller #0
[  329.283855][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  329.283866][ T8280] Call Trace:
[  329.283874][ T8280]  <TASK>
[  329.283881][ T8280]  dump_stack_lvl+0x18c/0x250
[  329.283913][ T8280]  ? show_regs_print_info+0x20/0x20
[  329.283940][ T8280]  ? load_image+0x420/0x420
[  329.283980][ T8280]  panic+0x2dc/0x730
[  329.284009][ T8280]  ? bpf_jit_dump+0xd0/0xd0
[  329.284061][ T8280]  __warn+0x2e0/0x470
[  329.284084][ T8280]  ? ext4_xattr_inode_update_ref+0x53c/0x590
[  329.284116][ T8280]  ? ext4_xattr_inode_update_ref+0x53c/0x590
[  329.284143][ T8280]  report_bug+0x2be/0x4f0
[  329.284161][ T8280]  ? ext4_xattr_inode_update_ref+0x53c/0x590
[  329.284189][ T8280]  ? ext4_xattr_inode_update_ref+0x53c/0x590
[  329.284212][ T8280]  ? ext4_xattr_inode_update_ref+0x53e/0x590
[  329.284235][ T8280]  handle_bug+0xcf/0x120
[  329.284251][ T8280]  exc_invalid_op+0x1a/0x50
[  329.284267][ T8280]  asm_exc_invalid_op+0x1a/0x20
[  329.284285][ T8280] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590
[  329.284310][ T8280] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 35 d5 98 ff 49 8b 37 48 c7 c7 20 d8 de 8a 89 da e8 74 54 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 be f5 3f 08
[  329.284323][ T8280] RSP: 0018:ffffc900034272e0 EFLAGS: 00010246
[  329.284338][ T8280] RAX: aea5fcb84a62a100 RBX: 0000000000000002 RCX: 0000000000080000
[  329.284349][ T8280] RDX: ffffc9000d1da000 RSI: 000000000001c102 RDI: 000000000001c103
[  329.284361][ T8280] RBP: ffffc900034273d0 R08: ffff8880b8e28c13 R09: 1ffff110171c5182
[  329.284376][ T8280] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000
[  329.284390][ T8280] R13: ffff88805e45a2a8 R14: ffff88805e45a0b0 R15: ffff88805e45a100
[  329.284431][ T8280]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  329.284466][ T8280]  ? __ext4_journal_ensure_credits+0x30/0x450
[  329.284501][ T8280]  ext4_xattr_inode_dec_ref_all+0x9a6/0x1040
[  329.284539][ T8280]  ? ext4_xattr_delete_inode+0xd10/0xd10
[  329.284567][ T8280]  ? __ext4_journal_ensure_credits+0x450/0x450
[  329.284601][ T8280]  ext4_xattr_delete_inode+0xb3e/0xd10
[  329.284634][ T8280]  ? up_write+0x1c3/0x410
[  329.284656][ T8280]  ? ext4_expand_extra_isize_ea+0x1e80/0x1e80
[  329.284694][ T8280]  ext4_evict_inode+0xaaf/0xea0
[  329.284716][ T8280]  ? _raw_spin_unlock+0x28/0x40
[  329.284748][ T8280]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  329.284774][ T8280]  ? do_raw_spin_unlock+0x121/0x230
[  329.284799][ T8280]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  329.284822][ T8280]  evict+0x4ca/0x8d0
[  329.284853][ T8280]  ? proc_nr_inodes+0x230/0x230
[  329.284874][ T8280]  ? do_raw_spin_unlock+0x121/0x230
[  329.284899][ T8280]  ? _raw_spin_unlock+0x28/0x40
[  329.284919][ T8280]  ? iput+0x706/0x920
[  329.284966][ T8280]  ext4_orphan_cleanup+0xbec/0x1420
[  329.284997][ T8280]  ? ext4_orphan_del+0xbf0/0xbf0
[  329.285017][ T8280]  ? ext4_register_li_request+0x183/0x940
[  329.285052][ T8280]  ? errseq_check_and_advance+0x66/0x120
[  329.285078][ T8280]  ext4_fill_super+0x5eea/0x67b0
[  329.285124][ T8280]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  329.285147][ T8280]  ? __might_sleep+0xe0/0xe0
[  329.285170][ T8280]  ? read_lock_is_recursive+0x20/0x20
[  329.285189][ T8280]  ? snprintf+0xe9/0x140
[  329.285226][ T8280]  ? down_read_killable+0x340/0x340
[  329.285251][ T8280]  ? setup_bdev_super+0x56b/0x660
[  329.285272][ T8280]  get_tree_bdev+0x3f3/0x520
[  329.285290][ T8280]  ? vfs_parse_fs_string+0x170/0x170
[  329.285313][ T8280]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  329.285335][ T8280]  ? setup_bdev_super+0x660/0x660
[  329.285352][ T8280]  ? apparmor_capable+0x137/0x1a0
[  329.285375][ T8280]  ? bpf_lsm_capable+0x9/0x10
[  329.285398][ T8280]  ? security_capable+0x89/0xb0
[  329.285425][ T8280]  vfs_get_tree+0x8c/0x280
[  329.285447][ T8280]  do_new_mount+0x24b/0xa40
[  329.285473][ T8280]  __se_sys_mount+0x2e7/0x3d0
[  329.285497][ T8280]  ? __x64_sys_mount+0xc0/0xc0
[  329.285520][ T8280]  ? lockdep_hardirqs_on+0x98/0x150
[  329.285539][ T8280]  ? __x64_sys_mount+0x20/0xc0
[  329.285560][ T8280]  do_syscall_64+0x55/0xa0
[  329.285575][ T8280]  ? clear_bhb_loop+0x40/0x90
[  329.285595][ T8280]  ? clear_bhb_loop+0x40/0x90
[  329.285618][ T8280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  329.285640][ T8280] RIP: 0033:0x7f5106d9e04a
[  329.285656][ T8280] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.285671][ T8280] RSP: 002b:00007f5107cc2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  329.285689][ T8280] RAX: ffffffffffffffda RBX: 00007f5107cc2ee0 RCX: 00007f5106d9e04a
[  329.285702][ T8280] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 00007f5107cc2ea0
[  329.285714][ T8280] RBP: 0000200000000080 R08: 00007f5107cc2ee0 R09: 0000000000800718
[  329.285726][ T8280] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[  329.285738][ T8280] R13: 00007f5107cc2ea0 R14: 000000000000048a R15: 0000200000000740
[  329.285765][ T8280]  </TASK>
[  329.289836][ T8280] Kernel Offset: disabled