last executing test programs:

1m29.384833939s ago: executing program 3 (id=4376):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd090000840c000005"], 0x50)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x54373000)
setfsgid(0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d)
syz_genetlink_get_family_id$ieee802154(0x0, r0)
syz_genetlink_get_family_id$nfc(0x0, r0)

1m28.476455434s ago: executing program 3 (id=4385):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a0b040000000000000002000000000900010073797a30000000001400000011"], 0x48}}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m28.317039586s ago: executing program 3 (id=4386):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='hybla\x00', 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m28.149270949s ago: executing program 3 (id=4387):
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x449, &(0x7f00000030c0)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m27.825188804s ago: executing program 3 (id=4392):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)

1m27.081286146s ago: executing program 3 (id=4398):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1800, &(0x7f00000002c0)=ANY=[], 0x1, 0x209, &(0x7f0000000300)="$eJzs3E9rK1UYB+D33lu910qbLERQEA8KopuhydqFRVoQA4o2ggrC1E40JE1KJhQiYrtz6yfwA4hLd4K4cNuN30Bw102XXYgjbUr/EUFRGi55ns28cOYH5/AOw+EMzPHr3+z2OmXWycdx/9G9WHojDuP0XtTjfjyIqcN47Zdvf3vh/Q8/enu91dp4L6XN9a1GM6W0+uJPH3/5/Us/j5/+4IfVHx/GUf2T45Pm70fPHj13/OfW590ydcs0GI5TnraHw3G+3S/STrfsZSm92y/yskjdQVmMbox3+sO9vUnKBzsry3ujoixTPpikXjFJ42EajyYp/yzvDlKWZWllOfgv2t+dVlWcVFVVPTyMqqrmPSHumP4vNv1fbPq/2K5t6h5F7H69395vT6/T8fVOdKMfRaxFLf6Is2fkwrTefKu1sZbO1eOV3YOL/MF++8HNfCNqUZ+db0zz6Wb+iVi+nm9GLZ6ZnW/OzD8Zr758LZ9FLX79NIbRj504y17lv2qk9OY7rVv5p87vAwAAAACAx1GWLs08v8+yvxuf5v/F94Fb5+tL8fzSfNcOAAAAi6KcfNHL+/1ipFAoFJfFvN9MAADA/+1q0z/vmQAAAAAAAAAAAAAAAAAAAMDiuovfic17jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/xF8BAAD//7fN4vg=")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000540)={[{@test_dummy_encryption}, {@init_itable_val}, {@nolazytime}, {@sysvgroups}, {@prjquota}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@barrier}, {@jqfmt_vfsv0}]}, 0xff, 0x468, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

1m26.77450635s ago: executing program 32 (id=4398):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1800, &(0x7f00000002c0)=ANY=[], 0x1, 0x209, &(0x7f0000000300)="$eJzs3E9rK1UYB+D33lu910qbLERQEA8KopuhydqFRVoQA4o2ggrC1E40JE1KJhQiYrtz6yfwA4hLd4K4cNuN30Bw102XXYgjbUr/EUFRGi55ns28cOYH5/AOw+EMzPHr3+z2OmXWycdx/9G9WHojDuP0XtTjfjyIqcN47Zdvf3vh/Q8/enu91dp4L6XN9a1GM6W0+uJPH3/5/Us/j5/+4IfVHx/GUf2T45Pm70fPHj13/OfW590ydcs0GI5TnraHw3G+3S/STrfsZSm92y/yskjdQVmMbox3+sO9vUnKBzsry3ujoixTPpikXjFJ42EajyYp/yzvDlKWZWllOfgv2t+dVlWcVFVVPTyMqqrmPSHumP4vNv1fbPq/2K5t6h5F7H69395vT6/T8fVOdKMfRaxFLf6Is2fkwrTefKu1sZbO1eOV3YOL/MF++8HNfCNqUZ+db0zz6Wb+iVi+nm9GLZ6ZnW/OzD8Zr758LZ9FLX79NIbRj504y17lv2qk9OY7rVv5p87vAwAAAACAx1GWLs08v8+yvxuf5v/F94Fb5+tL8fzSfNcOAAAAi6KcfNHL+/1ipFAoFJfFvN9MAADA/+1q0z/vmQAAAAAAAAAAAAAAAAAAAMDiuovfic17jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/xF8BAAD//7fN4vg=")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000540)={[{@test_dummy_encryption}, {@init_itable_val}, {@nolazytime}, {@sysvgroups}, {@prjquota}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@barrier}, {@jqfmt_vfsv0}]}, 0xff, 0x468, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

9.693689178s ago: executing program 5 (id=4917):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
fanotify_init(0x2, 0x8001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r5})
r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r6})
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x20)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000000)=0x6)

7.02792254s ago: executing program 5 (id=4920):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.940145132s ago: executing program 4 (id=4921):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001d062777b9922189cb0077a7e1823213db40c5970f6978945c4f66cca657e24"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.306247801s ago: executing program 2 (id=4928):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
fanotify_init(0x2, 0x8001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r4})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)

6.053834536s ago: executing program 0 (id=4929):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

4.398966032s ago: executing program 2 (id=4931):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
fanotify_init(0x2, 0x8001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r5})
r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r6})
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x20)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x118)
ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000000)=0x6)

4.101318746s ago: executing program 0 (id=4933):
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r2, r3, 0x12, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
write$tcp_congestion(r4, 0x0, 0x0)

3.250738609s ago: executing program 0 (id=4935):
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x232731b2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0)

3.19814229s ago: executing program 2 (id=4936):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

3.065255722s ago: executing program 4 (id=4937):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f800800000f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000008877fbacfe1416e000030a83079f03b18000440c0511e0845013f2325f000709170b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

2.328703564s ago: executing program 0 (id=4938):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10)
ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)=ANY=[])

2.230488736s ago: executing program 5 (id=4939):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
rt_sigaction(0x27, 0x0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)="67640f00ac92fc0000002edac9c422218e700566470fd3ec672ef2470f38f1460ec461fbf03343f67c5b008f6818955803c13e2e40d3f8260f1c8504000000"}, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0x28, 0x80000001})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"])

1.92918218s ago: executing program 1 (id=4940):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x4, 0x2}]}}}}}}}}, 0x0)

1.92886449s ago: executing program 0 (id=4941):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))

1.920936281s ago: executing program 4 (id=4942):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a0b040000000000000002000000000900010073797a30000000001400000011"], 0x48}}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0)

1.91240967s ago: executing program 5 (id=4943):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x800)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)

1.693332204s ago: executing program 1 (id=4944):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="66b8b00000000f23c80f21f866350c0070000f23f80f0766b8f76bb91a0f23d80f21f86635800000e00f23f80f0819bfaf63360f01cb66b95a0a000066b86461000066ba000000000f30b8ff0f8ee0f30fa7c866b8000000000f23d80f21f86635c00000900f23f8", 0x68}], 0x1, 0xbe, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.677653894s ago: executing program 0 (id=4945):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x40, 0xf, 0x4, "66c53956"}, 0x0, 0x0, 0x0, 0x0})

1.633269655s ago: executing program 4 (id=4946):
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r2, r3, 0x12, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
write$tcp_congestion(r4, 0x0, 0x0)

1.473157247s ago: executing program 4 (id=4947):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
fanotify_init(0x2, 0x8001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r5})
r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r6})
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x20)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x118)
ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000000)=0x6)

1.472900107s ago: executing program 5 (id=4948):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000))

1.429353348s ago: executing program 1 (id=4949):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"10628c1965c61e00", r3})
socket$inet6(0xa, 0x3, 0x8000000003c)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r4, 0x7005)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.199081742s ago: executing program 2 (id=4950):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.178280142s ago: executing program 5 (id=4951):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x64}}, {@debug}, {@i_version}, {@quota}, {@bsdgroups}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000000)='./file2\x00', 0x101e80, 0x4)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)

1.158237112s ago: executing program 1 (id=4952):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000008877fbacfe1416e000030a83079f03b18000440c0511e0845013f2325f000709170b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

381.314574ms ago: executing program 2 (id=4953):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10)
ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)=ANY=[])

353.255575ms ago: executing program 4 (id=4954):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f00000000c0)={[{@grpquota}, {@lazytime}]}, 0x1, 0x52b, &(0x7f00000006c0)="$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")
creat(0x0, 0x0)
fanotify_init(0xf00, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c9002000100000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000ffffffff"])

203.394887ms ago: executing program 2 (id=4955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))

165.223278ms ago: executing program 1 (id=4956):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a0b040000000000000002000000000900010073797a30000000001400000011"], 0x48}}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0)

0s ago: executing program 1 (id=4957):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b0000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

kernel console output (not intermixed with test programs):

0] snd-usb-audio: probe of 5-1:27.0 failed with error -22
[  860.050722][ T5666] udevd[5666]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  860.171511][ T4436] usb 5-1: USB disconnect, device number 50
[  860.234758][T16269] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  860.264897][T16269] kvm: pic: non byte read
[  860.269922][T16269] kvm: pic: level sensitive irq not supported
[  860.270068][T16269] kvm: pic: non byte read
[  860.282912][T16269] kvm: pic: level sensitive irq not supported
[  860.282985][T16269] kvm: pic: non byte read
[  861.052463][ T4436] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  861.221100][ T4436] usb 4-1: device descriptor read/64, error -71
[  861.252455][T14605] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  861.454817][T14605] usb 5-1: unable to read config index 0 descriptor/start: -61
[  861.466072][T14605] usb 5-1: can't read configurations, error -61
[  861.502635][ T4436] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  861.622454][T14605] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  861.662559][ T4436] usb 4-1: device descriptor read/64, error -71
[  861.782807][ T4297] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  861.790756][ T4436] usb usb4-port1: attempt power cycle
[  861.804947][T14605] usb 5-1: unable to read config index 0 descriptor/start: -61
[  861.820680][T14605] usb 5-1: can't read configurations, error -61
[  861.827519][T14605] usb usb5-port1: attempt power cycle
[  861.983837][ T4297] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  861.995363][ T4297] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  862.007545][ T4297] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  862.017120][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.042649][ T4297] usb 1-1: invalid MIDI out EP 0
[  862.154961][ T4297] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[  862.185870][ T6902] udevd[6902]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  862.203078][ T4436] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  862.263113][ T4300] usb 1-1: USB disconnect, device number 43
[  862.267779][T14605] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  862.269335][ T4436] usb 4-1: device descriptor read/8, error -71
[  862.325877][T14605] usb 5-1: unable to read config index 0 descriptor/start: -61
[  862.342490][T14605] usb 5-1: can't read configurations, error -61
[  862.503877][T14605] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  862.565606][T14605] usb 5-1: unable to read config index 0 descriptor/start: -61
[  862.580089][T14605] usb 5-1: can't read configurations, error -61
[  862.582567][ T4436] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  862.587449][T14605] usb usb5-port1: unable to enumerate USB device
[  862.635054][ T4436] usb 4-1: device descriptor read/8, error -71
[  862.752632][ T4436] usb usb4-port1: unable to enumerate USB device
[  863.382481][T14605] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  863.582450][T14605] usb 2-1: Using ep0 maxpacket: 8
[  863.597632][T14605] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  863.609020][T14605] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  863.618657][T14605] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  863.635410][T14605] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  863.649109][T14605] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  863.658699][T14605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.671604][T14605] hub 2-1:1.0: bad descriptor, ignoring hub
[  863.681819][T14605] hub: probe of 2-1:1.0 failed with error -5
[  863.688529][T14605] cdc_wdm 2-1:1.0: skipping garbage
[  863.694052][T14605] cdc_wdm 2-1:1.0: skipping garbage
[  863.703831][T14605] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  863.709769][T14605] cdc_wdm 2-1:1.0: Unknown control protocol
[  863.862563][ T1169] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  864.071796][T16379] 9pnet_virtio: no channels available for device syz
[  864.092499][ T1169] usb 3-1: Using ep0 maxpacket: 32
[  864.099446][ T1169] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  864.118157][ T1169] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  864.141327][T16381] netlink: 'syz.0.3853': attribute type 1 has an invalid length.
[  864.149942][ T1169] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  864.162858][ T1169] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  864.173338][ T1169] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  864.180509][  T127] usb 2-1: USB disconnect, device number 39
[  864.251517][ T1169] usb 3-1: config 0 interface 0 has no altsetting 0
[  864.278553][ T1169] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  864.289165][T16385] device veth7 entered promiscuous mode
[  864.307045][ T1169] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  864.314251][T16385] bond6: (slave veth7): Enslaving as a backup interface with a down link
[  864.326202][ T1169] usb 3-1: Product: syz
[  864.332922][ T1169] usb 3-1: Manufacturer: syz
[  864.337078][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3853'.
[  864.346929][ T1169] usb 3-1: SerialNumber: syz
[  864.363587][ T1169] usb 3-1: config 0 descriptor??
[  864.372187][ T1169] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  864.405390][ T1169] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  864.576791][T16366] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90
[  864.611073][ T1169] usb 3-1: USB disconnect, device number 42
[  864.642026][ T1169] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  865.432465][ T4297] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  865.624892][ T4297] usb 4-1: unable to read config index 0 descriptor/start: -61
[  865.643185][ T4297] usb 4-1: can't read configurations, error -61
[  865.792855][ T4297] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  865.984897][ T4297] usb 4-1: unable to read config index 0 descriptor/start: -61
[  865.997407][ T4297] usb 4-1: can't read configurations, error -61
[  866.012038][ T4297] usb usb4-port1: attempt power cycle
[  866.162423][T14606] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  866.372755][T14606] usb 1-1: Using ep0 maxpacket: 32
[  866.382006][T14606] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  866.401213][T14606] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  866.422629][ T4297] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  866.423711][T14606] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  866.453707][T14606] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  866.464936][ T4297] usb 4-1: unable to read config index 0 descriptor/start: -61
[  866.474539][T14606] usb 1-1: config 0 interface 0 has no altsetting 0
[  866.475055][ T4297] usb 4-1: can't read configurations, error -61
[  866.491024][T14606] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  866.520772][T14606] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  866.530729][T14606] usb 1-1: Product: syz
[  866.535296][T14606] usb 1-1: Manufacturer: syz
[  866.539934][T14606] usb 1-1: SerialNumber: syz
[  866.555084][T14606] usb 1-1: config 0 descriptor??
[  866.563660][T14606] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  866.585714][T14606] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  866.642746][ T4297] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  866.685225][ T4297] usb 4-1: unable to read config index 0 descriptor/start: -61
[  866.693811][ T4297] usb 4-1: can't read configurations, error -61
[  866.700874][ T4297] usb usb4-port1: unable to enumerate USB device
[  866.769004][T14606] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  866.789837][ T1169] usb 1-1: USB disconnect, device number 44
[  866.805343][ T1169] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  866.977680][T14606] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  866.993383][T14606] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  867.008679][T14606] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  867.026722][T14606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.053713][T16458] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  867.071070][ T4436] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  867.254258][ T4436] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  867.265955][ T4436] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  867.277155][ T4436] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  867.287365][ T4436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.350982][ T4436] usb 5-1: invalid MIDI out EP 0
[  867.379604][  T127] usb 3-1: USB disconnect, device number 43
[  867.493497][ T4436] snd-usb-audio: probe of 5-1:27.0 failed with error -22
[  867.556514][ T5666] udevd[5666]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  867.589652][T14605] usb 5-1: USB disconnect, device number 55
[  868.446640][T16509] netlink: 'syz.3.3899': attribute type 1 has an invalid length.
[  868.474597][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3899'.
[  868.501028][T16509] device veth11 entered promiscuous mode
[  868.510733][T16509] bond5: (slave veth11): Enslaving as a backup interface with a down link
[  868.758157][T16522] ax25_connect(): syz.3.3904 uses autobind, please contact jreuter@yaina.de
[  869.272615][  T127] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  869.272649][T14605] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  869.452534][T14606] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  869.464629][  T127] usb 1-1: unable to read config index 0 descriptor/start: -61
[  869.475265][T14605] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  869.479159][  T127] usb 1-1: can't read configurations, error -61
[  869.494758][T14605] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  869.510149][ T1169] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  869.520286][T14605] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  869.535684][T14605] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  869.548387][T14605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.607167][T14605] snd-usb-audio: probe of 3-1:27.0 failed with error -12
[  869.638654][ T6901] udevd[6901]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  869.662594][  T127] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  869.692636][T14606] usb 5-1: Using ep0 maxpacket: 32
[  869.699411][T14606] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  869.708476][T14606] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  869.717319][T14606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  869.729979][T14606] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  869.740755][ T1169] usb 4-1: unable to read config index 0 descriptor/start: -61
[  869.748620][T14606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  869.758560][ T1169] usb 4-1: can't read configurations, error -61
[  869.771668][T14606] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  869.783944][T14606] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  869.798212][T14606] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  869.807586][T14606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.818454][T14606] usb 5-1: config 0 descriptor??
[  869.840507][ T4300] usb 3-1: USB disconnect, device number 44
[  869.854754][  T127] usb 1-1: unable to read config index 0 descriptor/start: -61
[  869.862750][  T127] usb 1-1: can't read configurations, error -61
[  869.869106][  T127] usb usb1-port1: attempt power cycle
[  869.922460][ T1169] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  869.932489][ T4436] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  870.074451][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  870.080783][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  870.112447][ T4436] usb 2-1: Using ep0 maxpacket: 8
[  870.115826][ T1169] usb 4-1: unable to read config index 0 descriptor/start: -61
[  870.119429][ T4436] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  870.125964][ T1169] usb 4-1: can't read configurations, error -61
[  870.141905][ T1169] usb usb4-port1: attempt power cycle
[  870.141929][ T4436] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  870.158089][ T4436] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  870.168674][ T4436] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  870.181947][ T4436] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  870.191112][ T4436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.288858][  T127] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  870.325864][  T127] usb 1-1: unable to read config index 0 descriptor/start: -61
[  870.340898][  T127] usb 1-1: can't read configurations, error -61
[  870.404740][ T4436] usb 2-1: GET_CAPABILITIES returned 0
[  870.410451][ T4436] usbtmc 2-1:16.0: can't read capabilities
[  870.493852][  T127] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  870.534900][  T127] usb 1-1: unable to read config index 0 descriptor/start: -61
[  870.542841][  T127] usb 1-1: can't read configurations, error -61
[  870.551533][  T127] usb usb1-port1: unable to enumerate USB device
[  870.562757][ T1169] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  870.615491][ T1169] usb 4-1: unable to read config index 0 descriptor/start: -61
[  870.625741][ T1169] usb 4-1: can't read configurations, error -61
[  870.677280][T14606] usb 2-1: USB disconnect, device number 40
[  870.782554][ T1169] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  870.835376][ T1169] usb 4-1: unable to read config index 0 descriptor/start: -61
[  870.844238][ T1169] usb 4-1: can't read configurations, error -61
[  870.851115][ T1169] usb usb4-port1: unable to enumerate USB device
[  871.566563][T16555] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  871.587315][T16555] kvm: pic: non byte read
[  871.592116][T16555] kvm: pic: level sensitive irq not supported
[  871.592196][T16555] kvm: pic: non byte read
[  872.206910][T14606] usb 5-1: USB disconnect, device number 56
[  872.452527][  T127] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  872.574885][T16585] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  872.624138][T16585] kvm: pic: level sensitive irq not supported
[  872.624224][T16585] kvm: pic: non byte read
[  872.634761][  T127] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  872.671146][  T127] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  872.707947][  T127] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  872.761741][  T127] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  872.795474][  T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.931636][  T127] snd-usb-audio: probe of 1-1:27.0 failed with error -12
[  872.967861][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  873.064902][  T127] usb 1-1: USB disconnect, device number 49
[  873.322474][ T4339] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  873.512465][ T4300] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  873.532724][ T4339] usb 2-1: Using ep0 maxpacket: 32
[  873.541574][ T4339] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  873.550047][ T4339] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  873.562825][ T4339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  873.573161][ T4339] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  873.583018][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  873.593131][ T4339] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  873.624344][ T4339] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  873.643899][ T4339] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  873.657468][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.686491][ T4339] usb 2-1: config 0 descriptor??
[  873.692721][ T4300] usb 4-1: Using ep0 maxpacket: 32
[  873.706181][ T4300] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  873.722530][ T4300] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  873.734079][  T127] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  873.742905][ T4300] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  873.756253][ T4300] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  873.770019][ T4300] usb 4-1: config 0 interface 0 has no altsetting 0
[  873.796444][ T4300] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  873.808882][ T4300] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  873.821885][ T4300] usb 4-1: Product: syz
[  873.830094][ T4300] usb 4-1: Manufacturer: syz
[  873.839731][ T4300] usb 4-1: SerialNumber: syz
[  873.854062][ T4300] usb 4-1: config 0 descriptor??
[  873.871346][ T4300] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  873.899212][ T4300] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  873.932521][  T127] usb 3-1: Using ep0 maxpacket: 8
[  873.939751][  T127] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  873.965330][  T127] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  873.992441][  T127] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  874.022502][  T127] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  874.046028][  T127] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  874.056876][  T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.080626][ T4339] usb 4-1: USB disconnect, device number 40
[  874.091661][ T4339] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  874.287351][  T127] usb 3-1: usb_control_msg returned -71
[  874.295653][  T127] usbtmc 3-1:16.0: can't read capabilities
[  874.311227][  T127] usb 3-1: USB disconnect, device number 45
[  874.989474][T16654] netlink: 'syz.4.3956': attribute type 1 has an invalid length.
[  875.016415][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'.
[  875.037359][T16654] device veth5 entered promiscuous mode
[  875.047068][T16654] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  876.109025][ T4298] usb 2-1: USB disconnect, device number 41
[  876.202559][ T4300] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  876.400551][ T4300] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  876.431424][ T4300] usb 4-1: config 0 interface 0 has no altsetting 0
[  876.450727][ T4300] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  876.467678][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  876.479140][ T4300] usb 4-1: Product: syz
[  876.497356][ T4300] usb 4-1: Manufacturer: syz
[  876.511057][ T4300] usb 4-1: SerialNumber: syz
[  876.541471][ T4300] usb 4-1: config 0 descriptor??
[  876.567050][ T4300] usb 4-1: selecting invalid altsetting 0
[  876.767088][  T127] usb 4-1: USB disconnect, device number 41
[  876.852593][T14606] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  877.052639][T14606] usb 1-1: Using ep0 maxpacket: 8
[  877.062257][T14606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  877.083115][T14606] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  877.102391][T14606] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  877.122425][T14606] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  877.141874][T14606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.171792][T14606] hub 1-1:1.0: bad descriptor, ignoring hub
[  877.182398][T14606] hub: probe of 1-1:1.0 failed with error -5
[  877.195595][T14606] cdc_wdm 1-1:1.0: skipping garbage
[  877.201451][T14606] cdc_wdm 1-1:1.0: skipping garbage
[  877.206803][T14606] cdc_wdm 1-1:1.0: skipping garbage
[  877.212238][T14606] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  877.312571][ T1169] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  877.502450][ T1169] usb 5-1: Using ep0 maxpacket: 32
[  877.508276][ T4339] usb 1-1: USB disconnect, device number 50
[  877.515866][ T1169] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  877.533469][ T1169] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  877.552438][T14606] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  877.560172][ T1169] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  877.572390][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  877.582173][ T1169] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  877.594919][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  877.605831][ T1169] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  877.624918][ T1169] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  877.641697][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.662938][ T1169] usb 5-1: config 0 descriptor??
[  877.755582][T14606] usb 3-1: config 0 has no interfaces?
[  877.764058][T14606] usb 3-1: New USB device found, idVendor=1371, idProduct=9401, bcdDevice=18.6e
[  877.782696][T14606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.790750][T14606] usb 3-1: Product: syz
[  877.805266][T14606] usb 3-1: Manufacturer: syz
[  877.813085][T14606] usb 3-1: SerialNumber: syz
[  877.821273][T14606] usb 3-1: config 0 descriptor??
[  878.032508][ T4339] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  878.034194][ T4297] usb 3-1: USB disconnect, device number 46
[  878.112453][  T127] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  878.222407][ T4339] usb 1-1: Using ep0 maxpacket: 32
[  878.232097][ T4339] usb 1-1: unable to get BOS descriptor or descriptor too short
[  878.241944][ T4339] usb 1-1: unable to read config index 0 descriptor/start: -71
[  878.249945][ T4339] usb 1-1: can't read configurations, error -71
[  878.302472][  T127] usb 2-1: Using ep0 maxpacket: 8
[  878.309663][  T127] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  878.319798][  T127] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  878.330245][  T127] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  878.340389][  T127] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  878.353533][  T127] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  878.363986][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.582671][  T127] usb 2-1: usb_control_msg returned -71
[  878.590933][  T127] usbtmc 2-1:16.0: can't read capabilities
[  878.607288][  T127] usb 2-1: USB disconnect, device number 42
[  878.762826][T16744] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  879.162495][ T4339] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  879.352974][ T4339] usb 1-1: Using ep0 maxpacket: 32
[  879.363555][ T4339] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  879.373100][ T4339] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  879.392682][ T4339] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  879.426702][ T4339] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  879.470313][ T4339] usb 1-1: config 0 interface 0 has no altsetting 0
[  879.489074][ T4339] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  879.509776][ T4339] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  879.526717][ T4339] usb 1-1: Product: syz
[  879.537227][ T4339] usb 1-1: Manufacturer: syz
[  879.537250][ T4339] usb 1-1: SerialNumber: syz
[  879.545634][ T4339] usb 1-1: config 0 descriptor??
[  879.547956][ T4339] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  879.601520][ T4339] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  879.758044][ T4339] usb 1-1: USB disconnect, device number 52
[  879.774309][ T4339] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  880.042808][T14606] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  880.079418][ T4339] usb 5-1: USB disconnect, device number 57
[  880.242495][T14606] usb 4-1: Using ep0 maxpacket: 8
[  880.250183][T14606] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  880.284268][T14606] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  880.305389][T14606] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping
[  880.346347][T14606] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  880.375217][T14606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.419575][T14606] hub 4-1:1.0: bad descriptor, ignoring hub
[  880.436036][T14606] hub: probe of 4-1:1.0 failed with error -5
[  880.449393][T14606] cdc_wdm 4-1:1.0: skipping garbage
[  880.468447][T14606] cdc_wdm 4-1:1.0: skipping garbage
[  880.482107][T14606] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  880.752896][T14606] usb 4-1: USB disconnect, device number 42
[  881.132438][ T4339] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  881.325611][ T4339] usb 4-1: Using ep0 maxpacket: 32
[  881.351057][ T4339] usb 4-1: unable to get BOS descriptor or descriptor too short
[  881.364787][ T4339] usb 4-1: unable to read config index 0 descriptor/start: -71
[  881.378318][ T4339] usb 4-1: can't read configurations, error -71
[  881.392532][T14602] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  881.582425][T14602] usb 3-1: Using ep0 maxpacket: 16
[  881.589068][T14602] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  881.603037][T14602] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  881.612101][T14602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.612598][ T4297] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  881.629232][T14602] usb 3-1: config 0 descriptor??
[  881.633141][  T127] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  881.645489][T14602] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27
[  881.822468][  T127] usb 2-1: Using ep0 maxpacket: 32
[  881.827805][ T4297] usb 5-1: Using ep0 maxpacket: 32
[  881.843467][ T4297] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  881.852091][ T4297] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  881.865062][  T127] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  881.874724][T16803] input: syz0 as /devices/virtual/input/input28
[  881.885059][ T4297] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  881.896906][  T127] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  881.913292][  T127] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  881.927060][ T4297] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  881.948761][  T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  881.960431][ T4297] usb 5-1: config 0 interface 0 has no altsetting 0
[  881.976344][  T127] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  881.991284][  T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  882.012453][  T127] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  882.033799][ T4297] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  882.049596][ T4297] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  882.060493][  T127] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  882.071067][ T4297] usb 5-1: Product: syz
[  882.076888][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.085394][ T4297] usb 5-1: Manufacturer: syz
[  882.090075][ T4297] usb 5-1: SerialNumber: syz
[  882.100653][  T127] usb 2-1: config 0 descriptor??
[  882.115555][ T4297] usb 5-1: config 0 descriptor??
[  882.130855][ T4297] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  882.147410][ T4297] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  882.531390][T16830] device syzkaller0 entered promiscuous mode
[  882.702585][ T4339] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  882.922429][ T4339] usb 4-1: Using ep0 maxpacket: 8
[  882.951762][ T4339] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  882.970653][ T4339] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  882.990390][ T4339] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  883.011990][ T4339] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  883.033813][ T4339] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  883.052712][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.351736][ T4339] usb 4-1: usb_control_msg returned -71
[  883.368425][ T4339] usbtmc 4-1:16.0: can't read capabilities
[  884.185579][ T3608] bcm5974 3-1:0.0: could not read from device
[  884.269558][ T3608] bcm5974 3-1:0.0: could not read from device
[  884.309177][T14602] usb 3-1: USB disconnect, device number 47
[  884.316569][ T3608] bcm5974 3-1:0.0: could not read from device
[  884.426188][ T4436] usb 2-1: USB disconnect, device number 43
[  885.138961][ T4436] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  885.256061][ T4339] usb 4-1: USB disconnect, device number 45
[  885.333770][ T4436] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  885.353624][ T4436] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  885.472232][ T4436] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  885.482868][ T4436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.514909][T16847] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  885.828361][ T1169] usb 3-1: USB disconnect, device number 48
[  886.038813][T16857] netlink: 'syz.3.4027': attribute type 1 has an invalid length.
[  886.710645][T16873] netlink: 'syz.3.4033': attribute type 1 has an invalid length.
[  886.771638][T16873] 8021q: adding VLAN 0 to HW filter on device bond7
[  886.812812][  T127] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  887.202195][  T127] usb 3-1: Using ep0 maxpacket: 32
[  887.210898][  T127] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  887.219460][  T127] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  887.228639][  T127] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  887.238184][  T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  887.248058][  T127] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  887.257829][  T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  887.278017][  T127] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  887.291557][  T127] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  887.301558][  T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.321186][  T127] usb 3-1: config 0 descriptor??
[  887.379664][T16808] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[  887.435837][ T4436] usb 5-1: USB disconnect, device number 58
[  887.463046][ T4300] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  887.479245][ T4436] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  887.694790][ T4300] usb 2-1: Using ep0 maxpacket: 8
[  887.701884][ T4300] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  887.753871][ T4300] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  887.799884][ T4300] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping
[  887.825761][ T4300] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  887.844517][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.875993][ T4300] hub 2-1:1.0: bad descriptor, ignoring hub
[  887.882855][T16895] device syzkaller0 entered promiscuous mode
[  887.883602][ T4300] hub: probe of 2-1:1.0 failed with error -5
[  887.898382][ T4300] cdc_wdm 2-1:1.0: skipping garbage
[  887.903800][ T4300] cdc_wdm 2-1:1.0: skipping garbage
[  887.908918][T16902] netlink: 'syz.0.4041': attribute type 1 has an invalid length.
[  887.909233][ T4300] cdc_wdm: probe of 2-1:1.0 failed with error -22
[  888.202686][ T4436] usb 2-1: USB disconnect, device number 44
[  888.306943][ T4300] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  888.504640][ T4300] usb 5-1: Using ep0 maxpacket: 8
[  888.512034][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.526977][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.537457][ T4300] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  888.547588][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.565409][ T4300] usb 5-1: config 0 descriptor??
[  888.572167][T14605] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  888.766431][T14605] usb 2-1: Using ep0 maxpacket: 32
[  888.793508][T14605] usb 2-1: unable to get BOS descriptor or descriptor too short
[  888.803960][T14605] usb 2-1: unable to read config index 0 descriptor/start: -71
[  888.825251][T14605] usb 2-1: can't read configurations, error -71
[  889.086567][ T4300] usbhid 5-1:0.0: can't add hid device: -71
[  889.094943][ T4300] usbhid: probe of 5-1:0.0 failed with error -71
[  889.119751][ T4300] usb 5-1: USB disconnect, device number 59
[  889.572735][ T4300] usb 3-1: USB disconnect, device number 49
[  889.747699][T14605] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  889.974819][T14605] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  889.986392][T14605] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  889.996772][T14605] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  890.021057][T14605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.042571][T16910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  890.310526][T14605] usb 2-1: USB disconnect, device number 46
[  890.329602][ T4259] Bluetooth: Frame is too long (len 16, expected len 4)
[  891.658663][T16905] device veth9 entered promiscuous mode
[  891.669333][T16905] bond7: (slave veth9): Enslaving as a backup interface with a down link
[  891.792859][T16947] overlayfs: missing 'workdir'
[  891.950043][T16952] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  891.973357][T16960] device syzkaller0 entered promiscuous mode
[  892.044350][T16964] kvm: pic: non byte read
[  892.055168][T16964] kvm: pic: level sensitive irq not supported
[  892.055495][T16964] kvm: pic: non byte read
[  892.632466][ T8431] Bluetooth: hci1: command 0x0406 tx timeout
[  893.119319][T16986] device syzkaller0 entered promiscuous mode
[  896.464714][ T8431] Bluetooth: Frame is too long (len 16, expected len 4)
[  898.142511][ T4300] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  898.332414][ T4300] usb 4-1: Using ep0 maxpacket: 8
[  898.340730][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  898.368853][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  898.391489][ T4300] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  898.401401][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.420193][ T4300] usb 4-1: config 0 descriptor??
[  898.634353][ T4300] usbhid 4-1:0.0: can't add hid device: -71
[  898.640387][ T4300] usbhid: probe of 4-1:0.0 failed with error -71
[  898.667414][ T4300] usb 4-1: USB disconnect, device number 46
[  899.111736][T17143] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  899.148416][T17143] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  899.250098][T17150] fuse: Unknown parameter 'use00000000000000000000'
[  900.377490][T17182] fuse: Unknown parameter 'use00000000000000000000'
[  900.432730][ T1169] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  900.634662][ T1169] usb 5-1: config 0 has no interfaces?
[  900.643445][ T1169] usb 5-1: New USB device found, idVendor=1371, idProduct=9401, bcdDevice=18.6e
[  900.664924][ T1169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.680230][ T1169] usb 5-1: Product: syz
[  900.686758][ T1169] usb 5-1: Manufacturer: syz
[  900.691721][ T1169] usb 5-1: SerialNumber: syz
[  900.715512][ T1169] usb 5-1: config 0 descriptor??
[  901.037501][ T1169] usb 5-1: USB disconnect, device number 60
[  901.317423][T17204] device syzkaller0 entered promiscuous mode
[  901.661349][T17218] fuse: Unknown parameter 'user_i00000000000000000000'
[  902.872437][ T8431] Bluetooth: hci3: command 0x0406 tx timeout
[  903.010742][T17247] fuse: Unknown parameter 'user_i00000000000000000000'
[  903.517700][   T27] audit: type=1326 audit(1743112930.443:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17260 comm="syz.1.4171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd5438d169 code=0x0
[  904.117318][ T4436] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  904.303982][ T4436] usb 1-1: Using ep0 maxpacket: 8
[  904.311874][ T4436] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  904.322171][ T4436] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  904.332433][ T4436] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  904.349717][ T4436] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  904.370640][ T4436] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  904.380036][ T4436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.607611][ T4436] usb 1-1: GET_CAPABILITIES returned 0
[  904.617688][ T4436] usbtmc 1-1:16.0: can't read capabilities
[  904.817330][ T4436] usb 1-1: USB disconnect, device number 53
[  905.024358][T17280] fuse: Unknown parameter 'user_i00000000000000000000'
[  906.061413][T17316] fuse: Unknown parameter 'user_id00000000000000000000'
[  907.992505][ T8431] Bluetooth: hci2: command 0x0406 tx timeout
[  908.236989][T17338] netlink: 'syz.1.4197': attribute type 1 has an invalid length.
[  908.279771][T17339] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4197'.
[  908.353470][T17340] device veth3 entered promiscuous mode
[  908.479233][T17349] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  908.597566][T17354] fuse: Unknown parameter 'user_id00000000000000000000'
[  908.645555][ T4300] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  908.852423][ T4300] usb 1-1: Using ep0 maxpacket: 32
[  908.861003][ T4300] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  908.870383][ T4300] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  908.879806][ T4300] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  908.893818][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  908.916735][ T4300] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  908.947206][ T4300] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  908.978321][ T4300] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  908.998197][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.011746][ T4300] usb 1-1: config 0 descriptor??
[  909.233439][ T4300] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  909.248646][ T4300] usb 1-1: USB disconnect, device number 54
[  909.264642][ T4300] usblp0: removed
[  909.757097][ T4297] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  909.872492][   T27] audit: type=1326 audit(1743112936.793:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17389 comm="syz.0.4215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f461a38d169 code=0x0
[  909.959535][ T4297] usb 2-1: Using ep0 maxpacket: 8
[  909.993494][ T4297] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  910.003410][ T4297] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  910.013310][ T4297] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  910.023331][ T4297] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  910.037554][ T4297] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  910.046749][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.278912][ T4297] usb 2-1: GET_CAPABILITIES returned 0
[  910.284604][ T4297] usbtmc 2-1:16.0: can't read capabilities
[  910.486429][T14602] usb 2-1: USB disconnect, device number 47
[  912.151538][T17384] netlink: 'syz.3.4213': attribute type 1 has an invalid length.
[  912.160816][T17385] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4213'.
[  912.212625][T17388] device veth13 entered promiscuous mode
[  912.715256][  T127] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  912.902450][  T127] usb 4-1: Using ep0 maxpacket: 32
[  912.911618][  T127] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  912.933042][  T127] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  912.974946][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  913.010525][T17438] device syzkaller0 entered promiscuous mode
[  913.020473][  T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  913.046605][  T127] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  913.060322][  T127] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  913.075272][  T127] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  913.086205][  T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.098500][T17440] netlink: 'syz.1.4235': attribute type 1 has an invalid length.
[  913.118241][  T127] usb 4-1: config 0 descriptor??
[  913.161165][T17442] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4235'.
[  913.240937][T17440] device veth3 entered promiscuous mode
[  913.251265][T17440] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  913.335475][  T127] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  913.495081][  T127] usb 4-1: USB disconnect, device number 47
[  913.567705][  T127] usblp0: removed
[  922.707014][T17625] device syzkaller0 entered promiscuous mode
[  924.016039][T17660] fuse: Bad value for 'fd'
[  925.528924][T17632] mac80211_hwsim hwsim15 wlan1: refused to change device tx_queue_len
[  926.255181][T17697] device syzkaller0 entered promiscuous mode
[  926.314091][T17700] device syzkaller0 entered promiscuous mode
[  926.839138][   T27] audit: type=1326 audit(1743112953.753:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17712 comm="syz.4.4343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92cb38d169 code=0x0
[  931.516002][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  931.536055][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  931.971678][   T27] audit: type=1326 audit(1743112958.893:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.0.4365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f461a38d169 code=0x0
[  932.687245][T17809] loop1: detected capacity change from 0 to 256
[  932.742675][T17812] fuse: Unknown parameter 'group_i00000000000000000000'
[  932.780667][T17809] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  933.064423][   T27] audit: type=1326 audit(1743112959.993:401): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=17814 comm="syz.4.4383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92cb38d169 code=0x0
[  933.086744][    C0] vkms_vblank_simulate: vblank timer overrun
[  933.227561][T17818] loop1: detected capacity change from 0 to 512
[  933.251270][T17818] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  933.309540][T17818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  933.389986][T17818] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.4384: corrupted in-inode xattr
[  933.416475][T17818] EXT4-fs (loop1): Remounting filesystem read-only
[  933.455182][T17818] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  933.538838][T17818] EXT4-fs (loop1): 1 truncate cleaned up
[  933.562918][T17818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  933.625040][T17827] loop3: detected capacity change from 0 to 512
[  933.633727][T17827] EXT4-fs: Ignoring removed oldalloc option
[  933.646178][T17827] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  933.648829][T13659] EXT4-fs (loop1): unmounting filesystem.
[  933.679705][T17815] netlink: 'syz.4.4383': attribute type 15 has an invalid length.
[  933.715798][T17827] EXT4-fs (loop3): 1 truncate cleaned up
[  933.721647][T17827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  933.798448][T17827] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 13: comm syz.3.4387: lblock 0 mapped to illegal pblock 13 (length 1)
[  933.950017][T13894] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[  933.996224][T13894] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block
[  934.032640][T13894] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 5 in block_group 0
[  934.058111][T13894] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  934.060483][T17838] fuse: Unknown parameter 'group_i00000000000000000000'
[  934.113045][T13894] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error
[  934.185252][ T4450] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm kworker/u4:14: Invalid inode table block 5 in block_group 0
[  934.236688][ T4450] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm kworker/u4:14: Invalid inode table block 5 in block_group 0
[  934.261735][T13894] EXT4-fs (loop3): unmounting filesystem.
[  934.386946][T17846] loop2: detected capacity change from 0 to 512
[  934.541467][T17846] EXT4-fs (loop2): Test dummy encryption mode enabled
[  934.549129][T17846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  934.563682][T17846] EXT4-fs (loop2): 1 truncate cleaned up
[  934.573002][T17846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  934.684522][ T4369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.740312][T17846] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  934.781242][ T4369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.841305][T14098] EXT4-fs (loop2): unmounting filesystem.
[  934.907818][ T4369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.100908][T17864] loop0: detected capacity change from 0 to 256
[  935.125115][ T4369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.146456][T17864] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  935.210800][T17866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4402'.
[  935.503319][T17871] fuse: Unknown parameter 'group_i00000000000000000000'
[  935.891653][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  935.905914][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  935.915545][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  935.939605][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  935.948510][ T4259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  935.956400][ T4259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  936.026234][   T27] audit: type=1326 audit(1743112962.953:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17892 comm="syz.0.4409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f461a38d169 code=0x0
[  936.392807][  T127] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  936.555865][T17883] chnl_net:caif_netlink_parms(): no params data found
[  936.586653][  T127] usb 2-1: Using ep0 maxpacket: 32
[  936.637058][  T127] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  936.707541][  T127] usb 2-1: config 0 interface 0 has no altsetting 0
[  936.731195][  T127] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  936.765926][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.816995][  T127] usb 2-1: config 0 descriptor??
[  936.863216][T17883] bridge0: port 1(bridge_slave_0) entered blocking state
[  936.872230][T17883] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.894607][T17883] device bridge_slave_0 entered promiscuous mode
[  936.954341][T17883] bridge0: port 2(bridge_slave_1) entered blocking state
[  936.970443][T17883] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.980412][T17883] device bridge_slave_1 entered promiscuous mode
[  937.053893][T17883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  937.120182][T17883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  937.169885][T17883] team0: Port device team_slave_0 added
[  937.209251][T17883] team0: Port device team_slave_1 added
[  937.239925][  T127] uclogic 0003:5543:0781.001D: collection stack underflow
[  937.257002][  T127] uclogic 0003:5543:0781.001D: item 0 0 0 12 parsing failed
[  937.274190][  T127] uclogic 0003:5543:0781.001D: parse failed
[  937.288536][  T127] uclogic: probe of 0003:5543:0781.001D failed with error -22
[  937.325150][T17915] xt_TPROXY: Can be used only with -p tcp or -p udp
[  937.425537][T17883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  937.437641][T17883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  937.452168][ T4297] usb 2-1: USB disconnect, device number 48
[  937.525691][T17883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  937.563664][ T4369] device hsr_slave_0 left promiscuous mode
[  937.574522][ T4369] device hsr_slave_1 left promiscuous mode
[  937.594136][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  937.609760][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  937.626692][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  937.639200][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  937.650212][ T4369] device bridge_slave_1 left promiscuous mode
[  937.657096][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.670634][ T4369] device bridge_slave_0 left promiscuous mode
[  937.678741][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.747574][ T4369] device veth1_macvtap left promiscuous mode
[  937.758174][ T4369] device veth0_macvtap left promiscuous mode
[  937.768067][ T4369] device veth1_vlan left promiscuous mode
[  937.777958][ T4369] device veth0_vlan left promiscuous mode
[  938.002438][ T8347] Bluetooth: hci3: command 0x0409 tx timeout
[  938.127771][T17937] fuse: Unknown parameter 'group_id00000000000000000000'
[  938.304587][ T4369] bond7 (unregistering): Released all slaves
[  938.325272][ T4369] bond6 (unregistering): Released all slaves
[  938.364920][ T4369] bond5 (unregistering): (slave veth11): Releasing backup interface
[  938.380868][ T4369] bond5 (unregistering): Released all slaves
[  938.429704][ T4369] bond4 (unregistering): (slave veth9): Releasing backup interface
[  938.447916][T17943] loop1: detected capacity change from 0 to 8192
[  938.456785][ T4369] bond4 (unregistering): Released all slaves
[  938.466457][T17943] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  938.519904][ T4369] bond3 (unregistering): (slave veth7): Releasing backup interface
[  938.539495][ T4369] bond3 (unregistering): Released all slaves
[  938.593503][ T4369] bond2 (unregistering): (slave veth5): Releasing backup interface
[  938.621292][ T4369] bond2 (unregistering): Released all slaves
[  938.689918][ T4369] bond1 (unregistering): (slave veth3): Releasing backup interface
[  938.744390][ T4369] bond1 (unregistering): Released all slaves
[  940.072760][ T8347] Bluetooth: hci3: command 0x041b tx timeout
[  940.279027][ T4369] team0 (unregistering): Port device team_slave_1 removed
[  940.353889][ T4369] team0 (unregistering): Port device team_slave_0 removed
[  940.414216][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  940.467540][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  940.865591][T17961] fuse: Bad value for 'fd'
[  941.038056][T17963] Bluetooth: MGMT ver 1.22
[  941.046747][T17963] capability: warning: `syz.1.4425' uses deprecated v2 capabilities in a way that may be insecure
[  941.069644][T17963] loop1: detected capacity change from 0 to 1024
[  941.149062][T17963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  941.179472][ T4369] bond0 (unregistering): Released all slaves
[  941.314182][T17883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.321184][T17883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  941.388854][T17883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.464899][T17968] loop1: detected capacity change from 0 to 512
[  941.654331][T17968] loop1: detected capacity change from 0 to 256
[  942.152421][ T8347] Bluetooth: hci3: command 0x040f tx timeout
[  942.348222][T17883] device hsr_slave_0 entered promiscuous mode
[  942.356675][T17883] device hsr_slave_1 entered promiscuous mode
[  942.365252][T17883] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  942.373257][T17883] Cannot create hsr debugfs directory
[  942.504444][T17979] loop0: detected capacity change from 0 to 1024
[  942.606838][T17979] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  942.637497][T17979] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  942.668142][T17990] loop1: detected capacity change from 0 to 1024
[  942.790442][T17979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4430: bg 0: block 393: padding at end of block bitmap is not set
[  942.803360][T17990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  942.937496][T17972] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  942.962748][T17972] EXT4-fs (loop0): This should not happen!! Data will be lost
[  942.962748][T17972] 
[  942.980515][T17972] EXT4-fs (loop0): Total free blocks count 0
[  942.995878][T17972] EXT4-fs (loop0): Free/Dirty block details
[  943.015685][T17972] EXT4-fs (loop0): free_blocks=0
[  943.026377][T17972] EXT4-fs (loop0): dirty_blocks=16
[  943.040514][T17972] EXT4-fs (loop0): Block reservation details
[  943.064669][T17972] EXT4-fs (loop0): i_reserved_data_blocks=1
[  943.169427][T17883] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  943.184699][T17883] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  943.213007][T13313] EXT4-fs (loop0): unmounting filesystem.
[  943.255887][T17883] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  943.317182][T17883] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  943.602901][T17883] 8021q: adding VLAN 0 to HW filter on device bond0
[  943.662592][T17972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  943.705579][T17972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  943.741812][T17883] 8021q: adding VLAN 0 to HW filter on device team0
[  943.768985][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  943.790026][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  943.813764][T18024] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  943.861176][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.866056][T18024] kvm: pic: non byte read
[  943.868364][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  943.880996][T18024] kvm: pic: level sensitive irq not supported
[  943.881112][T18024] kvm: pic: non byte read
[  943.961894][T18028] netlink: 'syz.1.4444': attribute type 1 has an invalid length.
[  944.012723][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  944.021381][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  944.031330][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  944.079993][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.087210][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  944.123322][T18034] loop0: detected capacity change from 0 to 512
[  944.148666][T18034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  944.242693][ T8347] Bluetooth: hci3: command 0x0419 tx timeout
[  944.284973][T18034] EXT4-fs (loop0): orphan cleanup on readonly fs
[  944.309103][T18034] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[  944.319594][T18034] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  944.329215][T18034] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.4445: Failed to acquire dquot type 1
[  944.370595][T18034] EXT4-fs (loop0): 1 truncate cleaned up
[  944.604982][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  944.956378][T18034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  944.993376][T18034] EXT4-fs error (device loop0): __ext4_remount:6611: comm syz.0.4445: Abort forced by user
[  945.031149][T18034] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  945.120315][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  946.005688][T18032] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  946.113116][T17883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  946.164450][T17883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  946.444637][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  946.456286][T13313] EXT4-fs (loop0): unmounting filesystem.
[  946.505687][T18060] loop1: detected capacity change from 0 to 2048
[  946.546980][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  946.597874][T18060] UDF-fs: bad mount option "ü" or missing value
[  946.607565][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  946.644948][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  946.674585][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  946.743267][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  946.770149][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  946.773353][T18069] loop4: detected capacity change from 0 to 256
[  946.800185][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  946.809114][T18069] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  946.839090][T18069] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  946.851961][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  946.897421][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  946.901537][T18069] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  947.271445][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  947.280084][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  947.305636][T17883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  947.322924][T18084] netlink: 'syz.4.4457': attribute type 1 has an invalid length.
[  947.427735][T18088] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  947.452632][ T4339] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  947.673014][ T4339] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  947.711100][ T4339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  947.743254][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  947.751327][ T4339] usb 3-1: SerialNumber: syz
[  948.158767][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  948.190630][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  948.204910][ T4339] cdc_ether: probe of 3-1:1.0 failed with error -71
[  948.258623][ T4339] usb 3-1: USB disconnect, device number 50
[  948.299899][T17883] device veth0_vlan entered promiscuous mode
[  948.319487][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  948.387737][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  948.408584][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  948.437014][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  948.478176][T17883] device veth1_vlan entered promiscuous mode
[  948.517185][T17970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  948.566794][T18130] loop4: detected capacity change from 0 to 1024
[  948.603312][T18130] EXT4-fs: Ignoring removed oldalloc option
[  948.617373][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  948.632729][T18130] EXT4-fs: Ignoring removed bh option
[  948.645852][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  948.673149][T17883] device veth0_macvtap entered promiscuous mode
[  948.691921][T18130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  948.699706][T17883] device veth1_macvtap entered promiscuous mode
[  948.763308][T18130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  948.771985][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  948.862362][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  948.904961][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  948.916562][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  948.927689][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  948.941437][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  948.951953][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  948.963894][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  948.984261][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  949.007846][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.037020][T17883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  949.066723][T18141] netlink: 'syz.1.4469': attribute type 1 has an invalid length.
[  949.086839][T14437] EXT4-fs (loop4): unmounting filesystem.
[  949.132691][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  949.147019][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  949.216007][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  949.266414][T18040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  949.298090][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  949.352521][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.412382][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  949.459717][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.503420][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  949.517202][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.563390][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  949.591834][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.615413][T17883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  949.654570][T17883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  949.713981][T17883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  949.752187][T17883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  949.766080][T17883] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  949.795060][T17883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  949.832151][T17883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  949.871935][ T5354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  949.890155][ T5354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  950.063221][T18177] loop1: detected capacity change from 0 to 1024
[  950.134618][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.153245][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  950.170346][T18183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4481'.
[  950.174131][T18177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  950.212460][ T4436] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  950.237247][T18177] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  950.250208][T18185] netlink: 'syz.2.4482': attribute type 1 has an invalid length.
[  950.293671][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  950.308345][T18177] EXT4-fs error (device loop1): ext4_xattr_block_find:1828: inode #15: comm syz.1.4479: corrupted xattr block 128
[  950.331796][T18187] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  950.355794][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.372575][T14608] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  950.382563][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  950.382606][ T4436] usb 5-1: device descriptor read/64, error -71
[  950.407214][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  950.544642][T13659] EXT4-fs (loop1): unmounting filesystem.
[  950.562493][T14608] usb 1-1: Using ep0 maxpacket: 16
[  950.575915][T14608] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  950.595031][T14608] usb 1-1: config 0 has no interface number 0
[  950.625481][T14608] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  950.663450][T14608] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  950.696816][T14608] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  950.719080][T14608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.722553][ T4436] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  950.762369][T14608] usb 1-1: Product: syz
[  950.766589][T14608] usb 1-1: Manufacturer: syz
[  950.800612][T14608] usb 1-1: SerialNumber: syz
[  950.832118][T14608] usb 1-1: config 0 descriptor??
[  950.856018][T18203] loop5: detected capacity change from 0 to 512
[  950.863216][T18179] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  950.870650][T18179] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  950.924118][ T4436] usb 5-1: device descriptor read/64, error -71
[  950.967461][T18203] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  951.077627][ T4436] usb usb5-port1: attempt power cycle
[  951.084168][T17883] EXT4-fs (loop5): unmounting filesystem.
[  951.119819][T18179] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  951.132782][T18211] fuse: Bad value for 'group_id'
[  951.178125][T18179] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  951.365425][T18221] netlink: 'syz.1.4492': attribute type 1 has an invalid length.
[  951.434440][T14608] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  951.450034][T14608] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  951.460621][T14608] asix: probe of 1-1:0.251 failed with error -5
[  951.477111][T14608] usb 1-1: USB disconnect, device number 55
[  951.492717][ T4436] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  951.563301][ T4436] usb 5-1: device descriptor read/8, error -71
[  951.708424][T18231] bond5: (slave vlan2): Opening slave failed
[  951.726549][T18235] input: syz0 as /devices/virtual/input/input29
[  951.842488][ T4436] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  951.903686][ T4436] usb 5-1: device descriptor read/8, error -71
[  952.031975][ T4436] usb usb5-port1: unable to enumerate USB device
[  952.432084][T18260] fuse: Bad value for 'group_id'
[  952.742541][T14602] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  952.838999][T18269] netlink: 'syz.2.4504': attribute type 1 has an invalid length.
[  952.913400][T18273] fuse: Bad value for 'user_id'
[  952.944689][T14602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  952.995588][T14602] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00
[  953.037915][T14602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.112684][T18282] loop2: detected capacity change from 0 to 2048
[  953.114227][T14602] usb 1-1: config 0 descriptor??
[  953.135634][T18282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  953.212408][ T4436] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  953.418728][ T4436] usb 6-1: Using ep0 maxpacket: 8
[  953.442867][ T4436] usb 6-1: unable to get BOS descriptor or descriptor too short
[  953.474712][ T4436] usb 6-1: unable to read config index 0 descriptor/start: -71
[  953.496830][ T4436] usb 6-1: can't read configurations, error -71
[  953.509895][T18293] loop2: detected capacity change from 0 to 512
[  953.554659][T18293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  953.590919][T14602] wacom 0003:056A:00B4.001E: Unknown device_type for 'HID 056a:00b4'. Assuming pen.
[  953.648382][T18293] EXT4-fs (loop2): 1 truncate cleaned up
[  953.655805][T14602] wacom 0003:056A:00B4.001E: hidraw0: USB HID v0.00 Device [HID 056a:00b4] on usb-dummy_hcd.0-1/input0
[  953.662499][T18293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  953.741139][T14602] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B4.001E/input/input30
[  953.845774][T14098] EXT4-fs (loop2): unmounting filesystem.
[  953.925107][T14602] usb 1-1: USB disconnect, device number 56
[  954.285126][T18319] netlink: 'syz.5.4520': attribute type 1 has an invalid length.
[  954.473864][T14608] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  954.622732][T18323] loop4: detected capacity change from 0 to 8192
[  954.631978][T18323] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  954.658286][T14608] usb 2-1: device descriptor read/64, error -71
[  954.677166][T18323] cgroup: Unknown subsys name 'subj_role'
[  954.932547][T14608] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  955.101118][T18342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4528'.
[  955.110842][T14608] usb 2-1: device descriptor read/64, error -71
[  955.133114][T18342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4528'.
[  955.142236][T18342] netlink: 'syz.4.4528': attribute type 8 has an invalid length.
[  955.235288][T18343] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  955.252582][T14608] usb usb2-port1: attempt power cycle
[  955.269120][T18348] loop0: detected capacity change from 0 to 1024
[  955.280678][T18343] kvm: pic: non byte read
[  955.296232][T18343] kvm: pic: level sensitive irq not supported
[  955.296750][T18343] kvm: pic: non byte read
[  955.320030][T18348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  955.362003][T18348] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  955.439824][T18348] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4529: bg 0: block 393: padding at end of block bitmap is not set
[  955.495512][T18348] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117
[  955.516615][T18348] EXT4-fs (loop0): This should not happen!! Data will be lost
[  955.516615][T18348] 
[  955.626259][T18361] netlink: 'syz.4.4533': attribute type 1 has an invalid length.
[  955.658417][T18040] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  955.682343][T14608] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  955.692988][T18040] EXT4-fs (loop0): This should not happen!! Data will be lost
[  955.692988][T18040] 
[  955.703725][T18040] EXT4-fs (loop0): Total free blocks count 0
[  955.709774][T18040] EXT4-fs (loop0): Free/Dirty block details
[  955.715983][T18040] EXT4-fs (loop0): free_blocks=0
[  955.720970][T18040] EXT4-fs (loop0): dirty_blocks=32
[  955.726417][T18040] EXT4-fs (loop0): Block reservation details
[  955.727215][T14608] usb 2-1: device descriptor read/8, error -71
[  955.876485][T18371] loop5: detected capacity change from 0 to 512
[  956.004840][T18371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  956.191166][T18371] EXT4-fs (loop5): orphan cleanup on readonly fs
[  956.210831][T18371] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[  956.221280][T18371] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  956.231049][T18371] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.4535: Failed to acquire dquot type 1
[  956.259368][T18371] EXT4-fs (loop5): 1 truncate cleaned up
[  957.701671][   T27] audit: type=1326 audit(1743112984.623:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18314 comm="syz.1.4518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd5438d169 code=0x0
[  957.726226][T18371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  958.112675][T14608] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  958.742607][T17883] EXT4-fs (loop5): unmounting filesystem.
[  958.744743][T14608] usb 2-1: device descriptor read/8, error -71
[  958.873788][T14608] usb usb2-port1: unable to enumerate USB device
[  959.046196][T18394] loop2: detected capacity change from 0 to 128
[  959.066388][T18397] fuse: Bad value for 'fd'
[  959.104250][T18394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  959.138280][T18394] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  959.329028][T14098] EXT4-fs (loop2): unmounting filesystem.
[  959.476248][T18408] netlink: 'syz.4.4547': attribute type 1 has an invalid length.
[  959.519369][T18411] loop1: detected capacity change from 0 to 512
[  959.530585][T18415] loop5: detected capacity change from 0 to 1024
[  959.650764][T18410] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  959.651601][T18408] device veth7 entered promiscuous mode
[  959.664904][T18411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  959.665016][T18411] ext4 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  959.737917][T18410] kvm: pic: non byte read
[  959.742208][T18415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  959.750466][T18410] kvm: pic: level sensitive irq not supported
[  959.754568][T18415] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  959.771086][T18410] kvm: pic: non byte read
[  959.792897][T18415] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4548: bg 0: block 393: padding at end of block bitmap is not set
[  959.820912][T18415] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117
[  959.834511][T18415] EXT4-fs (loop5): This should not happen!! Data will be lost
[  959.834511][T18415] 
[  959.891692][T17969] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  959.929238][T17969] EXT4-fs (loop5): This should not happen!! Data will be lost
[  959.929238][T17969] 
[  959.992537][T17969] EXT4-fs (loop5): Total free blocks count 0
[  959.998600][T17969] EXT4-fs (loop5): Free/Dirty block details
[  960.012963][T13659] EXT4-fs (loop1): unmounting filesystem.
[  960.031629][T17969] EXT4-fs (loop5): free_blocks=0
[  960.075403][T17969] EXT4-fs (loop5): dirty_blocks=32
[  960.080587][T17969] EXT4-fs (loop5): Block reservation details
[  960.817395][T18460] loop5: detected capacity change from 0 to 256
[  960.852408][T18385] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  960.875532][T18460] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  960.959551][T18465] loop0: detected capacity change from 0 to 256
[  960.986439][   T27] audit: type=1800 audit(1743112987.903:404): pid=18460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4560" name="file1" dev="loop5" ino=1048708 res=0 errno=0
[  961.006653][T18460] syz.5.4560: attempt to access beyond end of device
[  961.006653][T18460] loop5: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  961.032577][T18385] usb 5-1: device descriptor read/64, error -71
[  961.039598][T18465] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  961.085055][T18460] syz.5.4560: attempt to access beyond end of device
[  961.085055][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.140890][T18460] syz.5.4560: attempt to access beyond end of device
[  961.140890][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.175068][T18460] syz.5.4560: attempt to access beyond end of device
[  961.175068][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.196341][T18465] exFAT-fs (loop0): error, invalid size(size(0) > aligned(9223372036854777344)
[  961.196341][T18465] 
[  961.214637][T18460] syz.5.4560: attempt to access beyond end of device
[  961.214637][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.240054][T18465] exFAT-fs (loop0): Filesystem has been set read-only
[  961.248770][T18460] syz.5.4560: attempt to access beyond end of device
[  961.248770][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.320484][T18460] syz.5.4560: attempt to access beyond end of device
[  961.320484][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.322601][T18385] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  961.380992][T18468] loop2: detected capacity change from 0 to 512
[  961.389040][T18460] syz.5.4560: attempt to access beyond end of device
[  961.389040][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.406314][T18460] syz.5.4560: attempt to access beyond end of device
[  961.406314][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.420607][T18460] syz.5.4560: attempt to access beyond end of device
[  961.420607][T18460] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  961.502382][T18385] usb 5-1: device descriptor read/64, error -71
[  961.515655][T18468] EXT4-fs (loop2): 1 orphan inode deleted
[  961.522865][T18468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  961.545098][ T4369] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  961.551936][T18472] Invalid ELF header len 16
[  961.559709][T18468] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  961.587532][ T4369] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:9: Failed to release dquot type 1
[  961.632573][T18385] usb usb5-port1: attempt power cycle
[  961.829242][T18477] loop1: detected capacity change from 0 to 2048
[  961.883663][T18477] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  962.207777][   T27] audit: type=1800 audit(1743112989.133:405): pid=18468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4564" name="file1" dev="loop2" ino=15 res=0 errno=0
[  962.227482][    C1] vkms_vblank_simulate: vblank timer overrun
[  964.076989][T18385] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  964.283933][T18040] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  964.343014][T18385] usb 5-1: device not accepting address 67, error -71
[  964.368745][T18040] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  964.381162][T18040] EXT4-fs (loop1): This should not happen!! Data will be lost
[  964.381162][T18040] 
[  964.390897][T18040] EXT4-fs (loop1): Total free blocks count 0
[  964.397607][T18040] EXT4-fs (loop1): Free/Dirty block details
[  964.404509][T18040] EXT4-fs (loop1): free_blocks=66060288
[  964.410180][T18040] EXT4-fs (loop1): dirty_blocks=16
[  964.415717][T18040] EXT4-fs (loop1): Block reservation details
[  964.421859][T18040] EXT4-fs (loop1): i_reserved_data_blocks=1
[  964.438770][T18467] EXT4-fs (loop2): unmounting filesystem.
[  964.457490][T13659] EXT4-fs (loop1): unmounting filesystem.
[  964.642549][ T4299] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  964.870677][T18509] netlink: 'syz.1.4578': attribute type 1 has an invalid length.
[  964.874250][ T4299] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  964.901905][T18509] bond5: (slave vlan2): Opening slave failed
[  964.905964][T18506] loop4: detected capacity change from 0 to 128
[  964.927084][ T4299] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  964.946994][ T4299] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  964.959420][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.110874][T18514] loop4: detected capacity change from 0 to 1024
[  965.186473][T18514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  965.233277][T14605] usb 6-1: USB disconnect, device number 4
[  965.249456][T18514] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  965.368661][T18514] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4580: bg 0: block 393: padding at end of block bitmap is not set
[  965.520922][T14437] EXT4-fs (loop4): unmounting filesystem.
[  965.889053][T18547] netlink: 'syz.4.4588': attribute type 1 has an invalid length.
[  966.116579][T18559] 9pnet_fd: Insufficient options for proto=fd
[  966.386976][T18568] loop1: detected capacity change from 0 to 1024
[  966.467244][T18568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  966.838884][T18582] loop5: detected capacity change from 0 to 1764
[  967.212836][T18385] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  967.427408][T18597] netlink: 'syz.5.4605': attribute type 1 has an invalid length.
[  967.494390][T18385] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  967.525025][T18385] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  967.553388][T18385] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  967.582469][T18385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.840902][T18385] usb 2-1: USB disconnect, device number 53
[  967.915989][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4610'.
[  968.181340][T18628] 9pnet_fd: Insufficient options for proto=fd
[  968.903684][T18654] netlink: 'syz.1.4618': attribute type 1 has an invalid length.
[  969.319893][T18683] loop1: detected capacity change from 0 to 256
[  969.363336][   T27] audit: type=1800 audit(1743112996.293:406): pid=18683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4628" name="bus" dev="loop1" ino=1048712 res=0 errno=0
[  969.432883][ T8431] Bluetooth: hci0: command 0x0406 tx timeout
[  969.882752][T18385] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  970.072434][T18385] usb 2-1: Using ep0 maxpacket: 8
[  970.079584][T18385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  970.093912][T18385] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  970.103322][T18385] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  970.115082][T18385] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  970.128752][T18385] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  970.148714][T18385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.169896][T18385] hub 2-1:1.0: bad descriptor, ignoring hub
[  970.182623][T18385] hub: probe of 2-1:1.0 failed with error -5
[  970.189142][T18385] cdc_wdm 2-1:1.0: skipping garbage
[  970.207127][T18385] cdc_wdm 2-1:1.0: skipping garbage
[  970.219781][T18385] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  970.226487][T18385] cdc_wdm 2-1:1.0: Unknown control protocol
[  970.690234][T18738] loop5: detected capacity change from 0 to 512
[  970.713493][T18738] EXT4-fs: Ignoring removed oldalloc option
[  970.737613][T18738] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  970.787300][T18738] EXT4-fs (loop5): 1 truncate cleaned up
[  970.795490][T18738] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  970.814239][T18694] usb 2-1: reset high-speed USB device number 54 using dummy_hcd
[  970.862896][T18694] usb 2-1: device reset changed ep0 maxpacket size!
[  970.910479][T18694] cdc_wdm 2-1:1.0: Error autopm - -16
[  970.910601][T14605] usb 2-1: USB disconnect, device number 54
[  970.942073][T18738] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  971.066810][T17883] EXT4-fs (loop5): unmounting filesystem.
[  971.132369][T14605] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  971.251753][T18762] fuse: Invalid rootmode
[  971.323923][T14605] usb 2-1: Using ep0 maxpacket: 32
[  971.350006][T14605] usb 2-1: unable to get BOS descriptor or descriptor too short
[  971.374376][T14605] usb 2-1: no configurations
[  971.388196][T18766] syz.0.4647 sent an empty control message without MSG_MORE.
[  971.392539][ T4436] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  971.396421][T14605] usb 2-1: can't read configurations, error -22
[  971.567965][T18776] loop0: detected capacity change from 0 to 512
[  971.602260][ T4436] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  971.624923][ T4436] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  971.645796][ T4436] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  971.659234][ T4436] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  971.671521][ T4436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.688001][ T6601] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  971.709876][T18781] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4651'.
[  971.735204][T18776] loop0: detected capacity change from 0 to 256
[  971.760825][ T4436] snd-usb-audio: probe of 5-1:27.0 failed with error -2
[  971.809864][ T6902] udevd[6902]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  971.931483][ T4436] usb 5-1: USB disconnect, device number 69
[  972.378783][T18802] syz.2.4657 (18802): attempted to duplicate a private mapping with mremap.  This is not supported.
[  972.397452][T18804] fuse: Invalid rootmode
[  972.498995][T18807] loop5: detected capacity change from 0 to 1024
[  972.558524][T18807] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  972.582488][T18807] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  972.663207][T18807] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4659: bg 0: block 393: padding at end of block bitmap is not set
[  972.722487][T18807] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117
[  972.732091][T18821] loop1: detected capacity change from 0 to 512
[  972.753113][T18819] loop4: detected capacity change from 0 to 2048
[  972.762466][T18807] EXT4-fs (loop5): This should not happen!! Data will be lost
[  972.762466][T18807] 
[  972.810123][T18819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  972.893987][T17883] EXT4-fs (loop5): unmounting filesystem.
[  973.020216][ T6601] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  973.026561][T18821] loop1: detected capacity change from 0 to 256
[  973.784853][T14437] EXT4-fs (loop4): unmounting filesystem.
[  974.053663][T18846] loop0: detected capacity change from 0 to 2048
[  974.095048][T18846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  974.382520][T14608] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  974.462488][ T4436] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  974.594116][T14608] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  974.620958][T14608] usb 6-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  974.678124][T14608] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  974.722493][T14608] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  974.793769][T14608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.432669][T14608] snd-usb-audio: probe of 6-1:27.0 failed with error -2
[  975.482395][ T4436] usb 2-1: Using ep0 maxpacket: 8
[  975.489287][ T4436] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  975.512388][ T4436] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  975.521497][ T4436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.526804][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  975.555898][T14608] usb 6-1: USB disconnect, device number 5
[  975.760052][T18887] loop4: detected capacity change from 0 to 512
[  976.644638][   T27] audit: type=1326 audit(1743113003.573:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18898 comm="syz.2.4682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6b478d169 code=0x0
[  976.763250][T18908] fuse: Bad value for 'rootmode'
[  976.801523][T18909] fuse: Unknown parameter 'group_i00000000000000000000'
[  977.219288][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4696'.
[  977.291445][T18928] loop0: detected capacity change from 0 to 512
[  977.327067][T18928] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  977.363523][T18928] EXT4-fs (loop0): 1 truncate cleaned up
[  977.371485][T18933] fuse: Bad value for 'rootmode'
[  977.376964][T18928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  977.422222][T18935] fuse: Unknown parameter 'group_i00000000000000000000'
[  977.533585][ T4436] usb 2-1: USB disconnect, device number 57
[  977.592030][T13313] EXT4-fs (loop0): unmounting filesystem.
[  977.786876][T18946] loop0: detected capacity change from 0 to 1024
[  978.220527][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4709'.
[  978.405583][T18963] fuse: Bad value for 'rootmode'
[  978.822583][T14608] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  978.942615][ T4339] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  979.035210][T18982] loop4: detected capacity change from 0 to 256
[  979.048647][T14608] usb 2-1: Using ep0 maxpacket: 16
[  979.062037][T14608] usb 2-1: unable to get BOS descriptor or descriptor too short
[  979.093849][T14608] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024
[  979.123545][T14608] usb 2-1: config 1 interface 0 has no altsetting 0
[  979.137125][T14608] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  979.160823][T14608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.172383][ T4339] usb 1-1: Using ep0 maxpacket: 8
[  979.181192][T14608] usb 2-1: Product: syz
[  979.191209][T14608] usb 2-1: Manufacturer: syz
[  979.191407][ T4339] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  979.213206][T14608] usb 2-1: SerialNumber: syz
[  979.220131][ T4339] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  979.229874][T18966] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  979.248128][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.464933][T14608] cdc_ether: probe of 2-1:1.0 failed with error -71
[  979.507930][T14608] usb 2-1: USB disconnect, device number 58
[  980.326666][T19018] loop5: detected capacity change from 0 to 256
[  980.374807][T19018] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d)
[  980.534072][T19024] loop5: detected capacity change from 0 to 256
[  980.552935][ T4436] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  980.744230][ T4436] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.773943][ T4436] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  980.791723][ T4436] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  980.803565][ T4436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.818232][ T4436] usb 2-1: config 0 descriptor??
[  980.867074][T19034] loop4: detected capacity change from 0 to 256
[  980.917557][T19034] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  980.952153][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4744'.
[  981.037620][T19038] loop5: detected capacity change from 0 to 1024
[  981.424463][   T27] audit: type=1326 audit(1743113008.353:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.1.4735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd5438d169 code=0x0
[  983.060548][T14608] usb 1-1: USB disconnect, device number 57
[  983.468512][T19054] loop0: detected capacity change from 0 to 512
[  983.501630][T19054] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  983.618558][T19054] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  983.719579][T19054] EXT4-fs error (device loop0): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.0.4752: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  983.761124][T19054] EXT4-fs error (device loop0): ext4_get_first_dir_block:3594: inode #12: comm syz.0.4752: directory missing '.'
[  983.930460][T13313] EXT4-fs (loop0): unmounting filesystem.
[  984.072044][ T4436] usb 2-1: USB disconnect, device number 59
[  984.258283][T19081] loop1: detected capacity change from 0 to 4096
[  984.289507][T19081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  984.407544][T13659] EXT4-fs (loop1): unmounting filesystem.
[  984.541527][T19089] loop1: detected capacity change from 0 to 1024
[  984.561564][T19089] EXT4-fs: Ignoring removed i_version option
[  984.621244][T19089] EXT4-fs: Ignoring removed nomblk_io_submit option
[  984.728391][T19089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  984.767412][T19099] loop5: detected capacity change from 0 to 512
[  984.799943][T19099] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  984.893963][T19099] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.4769: corrupted in-inode xattr
[  984.918749][T19099] EXT4-fs (loop5): Remounting filesystem read-only
[  984.942667][T19099] EXT4-fs (loop5): 1 truncate cleaned up
[  984.954657][T13659] EXT4-fs (loop1): unmounting filesystem.
[  984.981533][T19099] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  985.238995][T17883] EXT4-fs (loop5): unmounting filesystem.
[  986.280072][T19146] loop0: detected capacity change from 0 to 2048
[  986.445134][T19146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  986.468185][T19148] loop1: detected capacity change from 0 to 4096
[  986.672179][T19148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  987.348298][T13313] EXT4-fs (loop0): unmounting filesystem.
[  987.526589][T13659] EXT4-fs (loop1): unmounting filesystem.
[  987.759751][T19171] loop4: detected capacity change from 0 to 1024
[  987.798247][T19171] EXT4-fs: Ignoring removed bh option
[  987.818801][T19171] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  987.914705][T19171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  988.186241][T14437] EXT4-fs (loop4): unmounting filesystem.
[  988.682254][T19193] loop1: detected capacity change from 0 to 8
[  988.784425][T19193] SQUASHFS error: Unable to read directory block [631:26]
[  989.273753][T19201] loop4: detected capacity change from 0 to 2048
[  989.339213][T19201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  990.275815][ T4781] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  990.297212][ T4781] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  990.322468][ T4781] EXT4-fs (loop4): This should not happen!! Data will be lost
[  990.322468][ T4781] 
[  990.334778][ T4781] EXT4-fs (loop4): Total free blocks count 0
[  990.340808][ T4781] EXT4-fs (loop4): Free/Dirty block details
[  990.347158][ T4781] EXT4-fs (loop4): free_blocks=66060288
[  990.353031][ T4781] EXT4-fs (loop4): dirty_blocks=16
[  990.358252][ T4781] EXT4-fs (loop4): Block reservation details
[  990.365146][ T4781] EXT4-fs (loop4): i_reserved_data_blocks=1
[  990.374289][T14437] EXT4-fs (loop4): unmounting filesystem.
[  990.464146][T19212] loop4: detected capacity change from 0 to 512
[  990.493026][T19212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  990.502587][T19212] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  990.747451][T19212] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.4811: corrupted inode contents
[  990.764513][T19212] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.4811: mark_inode_dirty error
[  990.789323][T19212] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.4811: corrupted inode contents
[  990.806876][T19212] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.4811: mark_inode_dirty error
[  990.913432][T14437] EXT4-fs (loop4): unmounting filesystem.
[  992.291073][T19234] loop0: detected capacity change from 0 to 2048
[  992.375068][T19234] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  992.731967][T19244] 9pnet_fd: Insufficient options for proto=fd
[  994.712452][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  994.721112][ T4436] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  994.739127][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  994.933646][T17970] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  994.962389][ T4436] usb 6-1: Using ep0 maxpacket: 32
[  994.981154][ T4436] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  994.982897][T17970] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  995.012173][ T4436] usb 6-1: config 0 has no interface number 0
[  995.041622][T17970] EXT4-fs (loop0): This should not happen!! Data will be lost
[  995.041622][T17970] 
[  995.045493][ T4436] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  995.066906][ T4436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.068744][T17970] EXT4-fs (loop0): Total free blocks count 0
[  995.075841][ T4436] usb 6-1: Product: syz
[  995.086091][ T4436] usb 6-1: Manufacturer: syz
[  995.090095][T17970] EXT4-fs (loop0): Free/Dirty block details
[  995.102005][ T4436] usb 6-1: SerialNumber: syz
[  995.103739][T17970] EXT4-fs (loop0): free_blocks=66060288
[  995.131446][T17970] EXT4-fs (loop0): dirty_blocks=16
[  995.132641][ T4436] usb 6-1: config 0 descriptor??
[  995.159294][T17970] EXT4-fs (loop0): Block reservation details
[  995.160669][ T4436] smsc95xx v2.0.0
[  995.167749][T19259] bridge0: port 3(team0) entered blocking state
[  995.175830][T19259] bridge0: port 3(team0) entered disabled state
[  995.186183][T19259] device team0 entered promiscuous mode
[  995.191825][T19259] device team_slave_0 entered promiscuous mode
[  995.198780][T19259] device team_slave_1 entered promiscuous mode
[  995.206448][T19259] bridge0: port 3(team0) entered blocking state
[  995.213031][T19259] bridge0: port 3(team0) entered forwarding state
[  995.236630][T17970] EXT4-fs (loop0): i_reserved_data_blocks=1
[  995.249703][T13313] EXT4-fs (loop0): unmounting filesystem.
[  995.343111][ T4436] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  995.382671][ T4339] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  995.443408][ T4436] smsc95xx: probe of 6-1:0.67 failed with error -71
[  995.598767][ T4436] usb 6-1: USB disconnect, device number 6
[  995.612419][ T4339] usb 5-1: Using ep0 maxpacket: 8
[  995.624780][ T4339] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  995.748667][ T4339] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  995.768090][ T4339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  995.790255][ T4339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  995.818666][ T4339] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  995.851999][ T4339] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  995.864962][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.961813][T19268] loop1: detected capacity change from 0 to 4096
[  996.005241][T19268] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  996.082095][ T4339] usb 5-1: GET_CAPABILITIES returned 0
[  996.092427][ T4339] usbtmc 5-1:16.0: can't read capabilities
[  996.099274][T19268] EXT4-fs error (device loop1): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.1.4832: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  996.303826][T19268] EXT4-fs error (device loop1): ext4_get_first_dir_block:3605: inode #12: comm syz.1.4832: directory missing '..'
[  996.342092][T19286] loop5: detected capacity change from 0 to 2048
[  996.381849][T19286] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  996.401283][T13659] EXT4-fs (loop1): unmounting filesystem.
[  997.472561][ T4350] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  997.532547][ T4350] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  997.551995][ T4350] EXT4-fs (loop5): This should not happen!! Data will be lost
[  997.551995][ T4350] 
[  997.572443][ T4350] EXT4-fs (loop5): Total free blocks count 0
[  997.578567][ T4350] EXT4-fs (loop5): Free/Dirty block details
[  997.612341][ T4350] EXT4-fs (loop5): free_blocks=66060288
[  997.618083][ T4350] EXT4-fs (loop5): dirty_blocks=16
[  997.642328][ T4350] EXT4-fs (loop5): Block reservation details
[  997.648507][ T4350] EXT4-fs (loop5): i_reserved_data_blocks=1
[  997.657861][T17883] EXT4-fs (loop5): unmounting filesystem.
[  998.395757][ T4436] usb 5-1: USB disconnect, device number 70
[  998.929422][T19322] loop0: detected capacity change from 0 to 1024
[  998.997080][T19322] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  999.009149][T19322] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  999.063717][T19322] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4849: bg 0: block 393: padding at end of block bitmap is not set
[  999.085480][T19322] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117
[  999.105637][T19322] EXT4-fs (loop0): This should not happen!! Data will be lost
[  999.105637][T19322] 
[  999.233203][T13313] EXT4-fs (loop0): unmounting filesystem.
[  999.290131][T19329] kvm: pic: level sensitive irq not supported
[  999.290217][T19329] kvm: pic: non byte read
[  999.311765][T19329] kvm: pic: non byte read
[  999.317453][T19329] kvm: pic: single mode not supported
[  999.317528][T19329] kvm: pic: non byte read
[  999.328833][T19329] kvm: pic: non byte read
[  999.333967][T19329] kvm: pic: non byte read
[  999.339084][T19329] kvm: pic: level sensitive irq not supported
[  999.339153][T19329] kvm: pic: non byte read
[  999.351832][T19329] kvm: pic: level sensitive irq not supported
[  999.351908][T19329] kvm: pic: non byte read
[  999.352238][T19334] loop0: detected capacity change from 0 to 2048
[  999.358790][T19329] kvm: pic: level sensitive irq not supported
[  999.370382][T19329] kvm: pic: non byte read
[  999.392406][ T4436] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  999.404846][T19329] kvm: pic: level sensitive irq not supported
[  999.405217][T19329] kvm: pic: non byte read
[  999.422258][T19334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  999.584367][ T4436] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  999.602366][ T4436] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  999.660689][ T4436] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  999.685796][ T4436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  999.710407][ T4436] usb 5-1: config 0 descriptor??
[  999.732702][ T4436] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1000.067634][T19353] loop5: detected capacity change from 0 to 2048
[ 1000.094408][T19353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1000.728302][   T27] audit: type=1326 audit(1743113027.573:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19320 comm="syz.4.4851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92cb38d169 code=0x0
[ 1000.799493][T13313] EXT4-fs (loop0): unmounting filesystem.
[ 1001.018285][T19366] loop5: detected capacity change from 0 to 128
[ 1001.078550][T19366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1001.108194][T19366] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1001.448370][T19366] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1001.543731][T17883] EXT4-fs (loop5): unmounting filesystem.
[ 1001.686932][T19381] fuse: Bad value for 'fd'
[ 1001.705404][T19382] loop1: detected capacity change from 0 to 8
[ 1001.748660][T19382] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1001.785615][T19382] SQUASHFS error: Failed to read block 0x91: -5
[ 1001.804488][T19382] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1001.821944][T19382] SQUASHFS error: Unable to read inode 0x11f
[ 1001.913882][ T4294] usb 5-1: USB disconnect, device number 71
[ 1001.960795][T19389] loop0: detected capacity change from 0 to 512
[ 1001.996711][T19389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1002.090194][T19389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1002.114162][T19389] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1002.168676][T19389] EXT4-fs (loop0): shut down requested (2)
[ 1002.263335][T19397] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1002.331955][T13313] EXT4-fs (loop0): unmounting filesystem.
[ 1003.585667][T19420] loop0: detected capacity change from 0 to 2048
[ 1003.689620][T19420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1004.759274][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4883'.
[ 1004.784540][T13313] EXT4-fs (loop0): unmounting filesystem.
[ 1005.083344][ T4299] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1005.168426][T19448] loop4: detected capacity change from 0 to 1024
[ 1005.242941][T19448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1005.258258][T19448] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1005.284901][ T4299] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.293032][T19448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4890: bg 0: block 393: padding at end of block bitmap is not set
[ 1005.302471][ T4299] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1005.338398][ T4299] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1005.360845][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.371707][ T4299] usb 6-1: config 0 descriptor??
[ 1005.398790][T14602] usb 2-1: new low-speed USB device number 60 using dummy_hcd
[ 1005.408899][ T4299] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1005.409400][T14437] EXT4-fs (loop4): unmounting filesystem.
[ 1005.575037][T19452] loop4: detected capacity change from 0 to 1764
[ 1005.598832][T14602] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1005.617029][T14602] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[ 1005.627919][T14602] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt
[ 1005.638032][T14602] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1005.648914][T14602] usb 2-1: string descriptor 0 read error: -22
[ 1005.655399][T14602] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1005.664639][T14602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.720107][T19447] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1005.782545][T19447] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1005.800140][T14602] cdc_ether: probe of 2-1:1.0 failed with error -22
[ 1005.944126][T19456] 9pnet_fd: Insufficient options for proto=fd
[ 1005.988287][   T27] audit: type=1326 audit(1743113032.913:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19434 comm="syz.5.4884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadb978d169 code=0x0
[ 1006.472007][T19447] loop1: detected capacity change from 0 to 512
[ 1006.526598][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4893'.
[ 1006.553857][T19447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1006.582505][T19447] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1006.735477][T19447] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes
[ 1006.781045][T19447] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes
[ 1006.849587][T19470] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes
[ 1006.911885][ T4339] usb 2-1: USB disconnect, device number 60
[ 1007.789454][T13659] EXT4-fs (loop1): unmounting filesystem.
[ 1007.910878][ T4297] usb 6-1: USB disconnect, device number 7
[ 1007.958954][T19486] loop1: detected capacity change from 0 to 128
[ 1008.000177][T19486] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1008.028177][T19488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1008.041672][T19488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1008.051394][T19486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1008.063572][T19488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1008.094462][T19488] device bridge_slave_0 left promiscuous mode
[ 1008.100737][T19488] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.115095][T19490] loop5: detected capacity change from 0 to 2048
[ 1008.157717][T19488] device bridge_slave_1 left promiscuous mode
[ 1008.169849][T19488] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1008.198332][T19490] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1008.217335][T19488] bond0: (slave bond_slave_0): Releasing backup interface
[ 1008.327529][T19488] bond0: (slave bond_slave_1): Releasing backup interface
[ 1010.420704][T19503] loop0: detected capacity change from 0 to 256
[ 1010.510517][T17883] EXT4-fs (loop5): unmounting filesystem.
[ 1010.718589][T19488] team0: Port device team_slave_0 removed
[ 1010.770528][T19488] team0: Port device team_slave_1 removed
[ 1010.821456][T19488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1010.825157][T19514] loop5: detected capacity change from 0 to 2048
[ 1010.849829][T19488] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1010.874930][T19488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1010.882844][T19488] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1010.934965][T19488] bond1: (slave veth3): Releasing backup interface
[ 1010.963142][T19514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1010.968960][T19488] bond2: (slave veth5): Releasing backup interface
[ 1011.011622][T19523] loop1: detected capacity change from 0 to 512
[ 1011.023341][T19523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1011.038924][T19523] EXT4-fs (loop1): shut down requested (0)
[ 1011.103244][T19488] bond3: (slave ip6gretap2): Releasing backup interface
[ 1011.221934][   T27] audit: type=1326 audit(1743113038.143:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19526 comm="syz.2.4913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6b478d169 code=0x0
[ 1012.079308][T17883] EXT4-fs (loop5): unmounting filesystem.
[ 1012.087786][T13659] EXT4-fs (loop1): unmounting filesystem.
[ 1012.246066][T19537] loop5: detected capacity change from 0 to 2048
[ 1012.276087][T19537] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1012.325636][T19538] loop4: detected capacity change from 0 to 2048
[ 1012.417375][T19538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1014.723656][T19521] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[ 1014.744259][   T27] audit: type=1800 audit(1743113041.653:412): pid=19553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4918" name="file1" dev="loop4" ino=15 res=0 errno=0
[ 1014.805019][T17883] EXT4-fs (loop5): unmounting filesystem.
[ 1014.915482][T14437] EXT4-fs (loop4): unmounting filesystem.
[ 1015.190899][T19570] loop1: detected capacity change from 0 to 256
[ 1015.363196][ T4298] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1015.558368][T19580] loop1: detected capacity change from 0 to 8
[ 1015.564730][ T4298] usb 5-1: Using ep0 maxpacket: 32
[ 1015.571961][ T4298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1015.602528][ T4298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.661312][ T4298] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1015.695329][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.792525][ T4298] usb 5-1: config 0 descriptor??
[ 1015.822056][ T4298] hub 5-1:0.0: USB hub found
[ 1016.892493][ T4298] hub 5-1:0.0: 1 port detected
[ 1017.284064][T19586] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4930'.
[ 1017.757343][T19597] fuse: Invalid rootmode
[ 1018.538604][ T4298] usb 5-1: USB disconnect, device number 72
[ 1018.847108][T19606] loop1: detected capacity change from 0 to 1024
[ 1018.856877][T19606] EXT4-fs: Ignoring removed orlov option
[ 1018.862697][T19606] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1019.562659][T19606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1019.751426][T19606] EXT4-fs (loop1): unmounting filesystem.
[ 1019.994227][T19626] loop5: detected capacity change from 0 to 128
[ 1020.026552][T19626] EXT4-fs: Ignoring removed nobh option
[ 1020.052735][T19630] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4942'.
[ 1020.093958][T19626] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1020.142539][T19626] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1020.200099][T19638] fuse: Invalid rootmode
[ 1020.272705][T17883] EXT4-fs (loop5): unmounting filesystem.
[ 1020.307965][T19640] loop4: detected capacity change from 0 to 2048
[ 1020.365557][T19640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1020.551319][T19605] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1020.752514][T19605] usb 1-1: Using ep0 maxpacket: 32
[ 1020.789266][T19605] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[ 1020.930159][T19605] usb 1-1: config 0 has no interface number 0
[ 1021.211407][T19605] usb 1-1: config 0 interface 184 has no altsetting 0
[ 1021.419887][T19605] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1021.429194][T19605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.438760][T19605] usb 1-1: Product: syz
[ 1021.444388][T19605] usb 1-1: Manufacturer: syz
[ 1021.449026][T19605] usb 1-1: SerialNumber: syz
[ 1021.455252][T19658] loop5: detected capacity change from 0 to 512
[ 1021.456055][T19605] usb 1-1: config 0 descriptor??
[ 1021.470128][T19605] smsc75xx v1.0.0
[ 1021.491257][T19658] EXT4-fs: Ignoring removed i_version option
[ 1021.521247][T19658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1021.525639][T14437] EXT4-fs (loop4): unmounting filesystem.
[ 1021.572548][T19658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[ 1021.580652][T19658] System zones: 1-12
[ 1021.600542][T19658] EXT4-fs (loop5): 1 truncate cleaned up
[ 1021.663086][T19658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1021.664887][T19665] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4956'.
[ 1021.775567][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4957'.
[ 1021.824873][T19669] ==================================================================
[ 1021.833083][T19669] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x909/0x1fa0
[ 1021.840863][T19669] Read of size 18446744073709551572 at addr ffff8880624af850 by task syz.5.4951/19669
[ 1021.850435][T19669] 
[ 1021.852791][T19669] CPU: 1 PID: 19669 Comm: syz.5.4951 Not tainted 6.1.131-syzkaller #0
[ 1021.860972][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1021.871067][T19669] Call Trace:
[ 1021.874372][T19669]  <TASK>
[ 1021.877319][T19669]  dump_stack_lvl+0x1e3/0x2cb
[ 1021.882042][T19669]  ? nf_tcp_handle_invalid+0x647/0x647
[ 1021.887534][T19669]  ? panic+0x764/0x764
[ 1021.891637][T19669]  ? _printk+0xd1/0x111
[ 1021.895828][T19669]  ? __virt_addr_valid+0x17f/0x530
[ 1021.900965][T19669]  ? __virt_addr_valid+0x17f/0x530
[ 1021.906112][T19669]  print_report+0x15f/0x4f0
[ 1021.910641][T19669]  ? __virt_addr_valid+0x17f/0x530
[ 1021.915789][T19669]  ? __virt_addr_valid+0x17f/0x530
[ 1021.920931][T19669]  ? __virt_addr_valid+0x45b/0x530
[ 1021.926052][T19669]  ? __phys_addr+0xb6/0x170
[ 1021.930595][T19669]  ? ext4_xattr_set_entry+0x909/0x1fa0
[ 1021.936094][T19669]  kasan_report+0x136/0x160
[ 1021.940629][T19669]  ? __x64_sys_lsetxattr+0xb4/0xd0
[ 1021.945771][T19669]  ? ext4_xattr_set_entry+0x909/0x1fa0
[ 1021.951257][T19669]  ? ext4_xattr_set_entry+0x909/0x1fa0
[ 1021.956743][T19669]  kasan_check_range+0x27f/0x290
[ 1021.961700][T19669]  ? ext4_xattr_set_entry+0x909/0x1fa0
[ 1021.967181][T19669]  memmove+0x25/0x60
[ 1021.968288][T19674] fuse: Unknown parameter '00000000000000000000'
[ 1021.971082][T19669]  ext4_xattr_set_entry+0x909/0x1fa0
[ 1021.971122][T19669]  ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0
[ 1021.989151][T19669]  ? ext4_xattr_block_set+0x7f4/0x3820
[ 1021.994636][T19669]  ? kmemdup+0x41/0x60
[ 1021.998733][T19669]  ? memcpy+0x3c/0x60
[ 1022.002762][T19669]  ext4_xattr_block_set+0x97e/0x3820
[ 1022.008088][T19669]  ? proc_nr_inodes+0x310/0x310
[ 1022.012963][T19669]  ? ext4_xattr_block_find+0x2b0/0x2b0
[ 1022.018447][T19669]  ? ext4_xattr_ibody_set+0x58c/0x720
[ 1022.023855][T19669]  ext4_xattr_set_handle+0xdac/0x1560
[ 1022.029279][T19669]  ? ext4_xattr_inode_free_quota+0x190/0x190
[ 1022.035276][T19669]  ? register_lock_class+0x100/0x990
[ 1022.040599][T19669]  ? dquot_initialize+0x20/0x20
[ 1022.045493][T19669]  ? ext4_journal_check_start+0x179/0x240
[ 1022.051240][T19669]  ? __ext4_journal_start_sb+0x1f1/0x410
[ 1022.056906][T19669]  ext4_xattr_set+0x26e/0x3d0
[ 1022.061608][T19669]  ? ext4_xattr_set_credits+0x2a0/0x2a0
[ 1022.067180][T19669]  ? posix_xattr_acl+0xa5/0xd0
[ 1022.071984][T19669]  ? evm_protect_xattr+0x366/0xb10
[ 1022.077127][T19669]  ? ext4_xattr_trusted_get+0x40/0x40
[ 1022.082540][T19669]  __vfs_setxattr+0x3e7/0x420
[ 1022.087250][T19669]  __vfs_setxattr_noperm+0x12a/0x5e0
[ 1022.092569][T19669]  vfs_setxattr+0x21d/0x420
[ 1022.097102][T19669]  ? xattr_permission+0x4f0/0x4f0
[ 1022.102146][T19669]  ? refcount_dec_and_lock_irqsave+0x111/0x130
[ 1022.108346][T19669]  ? copy_user_enhanced_fast_string+0xa/0x40
[ 1022.114377][T19669]  ? _copy_from_user+0x109/0x170
[ 1022.119359][T19669]  setxattr+0x250/0x2b0
[ 1022.123551][T19669]  ? path_setxattr+0x2a0/0x2a0
[ 1022.128361][T19669]  ? __mnt_want_write+0x222/0x2a0
[ 1022.133422][T19669]  path_setxattr+0x1bc/0x2a0
[ 1022.138045][T19669]  ? simple_xattr_list_add+0xf0/0xf0
[ 1022.143362][T19669]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1022.149368][T19669]  __x64_sys_lsetxattr+0xb4/0xd0
[ 1022.154336][T19669]  do_syscall_64+0x3b/0xb0
[ 1022.158772][T19669]  ? clear_bhb_loop+0x45/0xa0
[ 1022.163480][T19669]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1022.169394][T19669] RIP: 0033:0x7fadb978d169
[ 1022.173835][T19669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1022.193461][T19669] RSP: 002b:00007fadba5aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 1022.201902][T19669] RAX: ffffffffffffffda RBX: 00007fadb99a6080 RCX: 00007fadb978d169
[ 1022.209904][T19669] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000100
[ 1022.217897][T19669] RBP: 00007fadb980e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1022.225877][T19669] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[ 1022.233892][T19669] R13: 0000000000000001 R14: 00007fadb99a6080 R15: 00007ffdb0df1748
[ 1022.241921][T19669]  </TASK>
[ 1022.244942][T19669] 
[ 1022.247263][T19669] Allocated by task 19669:
[ 1022.251664][T19669]  kasan_set_track+0x4b/0x70
[ 1022.256250][T19669]  __kasan_kmalloc+0x97/0xb0
[ 1022.260842][T19669]  __kmalloc_node_track_caller+0xb1/0x220
[ 1022.266585][T19669]  kmemdup+0x26/0x60
[ 1022.270508][T19669]  ext4_xattr_block_set+0x7f4/0x3820
[ 1022.275817][T19669]  ext4_xattr_set_handle+0xdac/0x1560
[ 1022.281218][T19669]  ext4_xattr_set+0x26e/0x3d0
[ 1022.285911][T19669]  __vfs_setxattr+0x3e7/0x420
[ 1022.290611][T19669]  __vfs_setxattr_noperm+0x12a/0x5e0
[ 1022.295930][T19669]  vfs_setxattr+0x21d/0x420
[ 1022.300448][T19669]  setxattr+0x250/0x2b0
[ 1022.304630][T19669]  path_setxattr+0x1bc/0x2a0
[ 1022.309238][T19669]  __x64_sys_lsetxattr+0xb4/0xd0
[ 1022.314189][T19669]  do_syscall_64+0x3b/0xb0
[ 1022.318616][T19669]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1022.324525][T19669] 
[ 1022.326853][T19669] The buggy address belongs to the object at ffff8880624af800
[ 1022.326853][T19669]  which belongs to the cache kmalloc-1k of size 1024
[ 1022.340919][T19669] The buggy address is located 80 bytes inside of
[ 1022.340919][T19669]  1024-byte region [ffff8880624af800, ffff8880624afc00)
[ 1022.354208][T19669] 
[ 1022.356538][T19669] The buggy address belongs to the physical page:
[ 1022.362970][T19669] page:ffffea0001892a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x624a8
[ 1022.373136][T19669] head:ffffea0001892a00 order:3 compound_mapcount:0 compound_pincount:0
[ 1022.381490][T19669] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1022.389505][T19669] raw: 00fff00000010200 ffffea00009cb600 dead000000000002 ffff888017c41dc0
[ 1022.398114][T19669] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 1022.406712][T19669] page dumped because: kasan: bad access detected
[ 1022.413167][T19669] page_owner tracks the page as allocated
[ 1022.418901][T19669] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4437, tgid 4437 (kworker/u4:13), ts 793547200716, free_ts 793537817452
[ 1022.441346][T19669]  post_alloc_hook+0x18d/0x1b0
[ 1022.446144][T19669]  get_page_from_freelist+0x3731/0x38d0
[ 1022.451722][T19669]  __alloc_pages+0x28d/0x770
[ 1022.456347][T19669]  alloc_slab_page+0x6a/0x150
[ 1022.461059][T19669]  new_slab+0x84/0x2d0
[ 1022.462613][T14602] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1022.465143][T19669]  ___slab_alloc+0xc20/0x1270
[ 1022.465175][T19669]  __kmem_cache_alloc_node+0x19f/0x260
[ 1022.465201][T19669]  __kmalloc_node_track_caller+0xa0/0x220
[ 1022.465227][T19669]  pskb_expand_head+0x1ae/0x1350
[ 1022.465249][T19669]  batadv_skb_head_push+0x160/0x1f0
[ 1022.465270][T19669]  batadv_send_skb_packet+0xea/0x660
[ 1022.465288][T19669]  batadv_iv_send_outstanding_bat_ogm_packet+0x66f/0x800
[ 1022.465328][T19669]  process_one_work+0x917/0x1260
[ 1022.465352][T19669]  worker_thread+0xa47/0x1200
[ 1022.465375][T19669]  kthread+0x28d/0x320
[ 1022.465392][T19669]  ret_from_fork+0x1f/0x30
[ 1022.465419][T19669] page last free stack trace:
[ 1022.465427][T19669]  free_unref_page_prepare+0x12a6/0x15b0
[ 1022.465450][T19669]  free_unref_page+0x33/0x3e0
[ 1022.465471][T19669]  __unfreeze_partials+0x1b7/0x210
[ 1022.465500][T19669]  put_cpu_partial+0x17b/0x250
[ 1022.465527][T19669]  qlist_free_all+0x76/0xe0
[ 1022.465552][T19669]  kasan_quarantine_reduce+0x156/0x170
[ 1022.465578][T19669]  __kasan_slab_alloc+0x1f/0x70
[ 1022.465599][T19669]  slab_post_alloc_hook+0x52/0x3a0
[ 1022.465626][T19669]  __kmem_cache_alloc_node+0x137/0x260
[ 1022.465653][T19669]  __kmalloc+0xa1/0x230
[ 1022.465674][T19669]  load_elf_binary+0x2ec/0x2720
[ 1022.465692][T19669]  bprm_execve+0x96a/0x18a0
[ 1022.465711][T19669]  kernel_execve+0x8e6/0xa10
[ 1022.465731][T19669]  call_usermodehelper_exec_async+0x22f/0x370
[ 1022.465764][T19669]  ret_from_fork+0x1f/0x30
[ 1022.465789][T19669] 
[ 1022.465794][T19669] Memory state around the buggy address:
[ 1022.465805][T19669]  ffff8880624af700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1022.465821][T19669]  ffff8880624af780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1022.481483][T19672] loop4: detected capacity change from 0 to 512
[ 1022.483473][T19669] >ffff8880624af800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1022.483487][T19669]                                                  ^
[ 1022.483499][T19669]  ffff8880624af880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1022.483513][T19669]  ffff8880624af900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1022.483524][T19669] ==================================================================
[ 1022.570428][T19669] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1022.570448][T19669] CPU: 1 PID: 19669 Comm: syz.5.4951 Not tainted 6.1.131-syzkaller #0
[ 1022.570474][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1022.570487][T19669] Call Trace:
[ 1022.570495][T19669]  <TASK>
[ 1022.570506][T19669]  dump_stack_lvl+0x1e3/0x2cb
[ 1022.570537][T19669]  ? nf_tcp_handle_invalid+0x647/0x647
[ 1022.570564][T19669]  ? panic+0x764/0x764
[ 1022.570589][T19669]  ? preempt_schedule_common+0xa6/0xd0
[ 1022.570625][T19669]  ? vscnprintf+0x59/0x80
[ 1022.570655][T19669]  panic+0x318/0x764
[ 1022.570681][T19669]  ? check_panic_on_warn+0x1d/0xa0
[ 1022.570710][T19669]  ? memcpy_page_flushcache+0xfc/0xfc
[ 1022.570740][T19669]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 1022.570767][T19669]  ? _raw_spin_unlock+0x40/0x40
[ 1022.570796][T19669]  check_panic_on_warn+0x7e/0xa0
[ 1022.570832][T19669]  ? ext4_xattr_set_entry+0x909/0x1fa0
[ 1022.570856][T19669]  end_report+0x66/0x110
[ 1022.570879][T19669]  kasan_report+0x143/0x160
[ 1022.570902][T19669]  ? __x64_sys_lsetxattr+0xb4/0xd0
[ 1022.570926][T19669]  ? ext4_xattr_set_entry+0x909/0x1fa0
[ 1022.570952][T19669]  ? ext4_xattr_set_entry+0x909/0x1fa0
[ 1022.570978][T19669]  kasan_check_range+0x27f/0x290
[ 1022.571001][T19669]  ? ext4_xattr_set_entry+0x909/0x1fa0
[ 1022.571026][T19669]  memmove+0x25/0x60
[ 1022.571052][T19669]  ext4_xattr_set_entry+0x909/0x1fa0
[ 1022.571089][T19669]  ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0
[ 1022.571114][T19669]  ? ext4_xattr_block_set+0x7f4/0x3820
[ 1022.571138][T19669]  ? kmemdup+0x41/0x60
[ 1022.571164][T19669]  ? memcpy+0x3c/0x60
[ 1022.571200][T19669]  ext4_xattr_block_set+0x97e/0x3820
[ 1022.571236][T19669]  ? proc_nr_inodes+0x310/0x310
[ 1022.571258][T19669]  ? ext4_xattr_block_find+0x2b0/0x2b0
[ 1022.571286][T19669]  ? ext4_xattr_ibody_set+0x58c/0x720
[ 1022.571318][T19669]  ext4_xattr_set_handle+0xdac/0x1560
[ 1022.571351][T19669]  ? ext4_xattr_inode_free_quota+0x190/0x190
[ 1022.571377][T19669]  ? register_lock_class+0x100/0x990
[ 1022.571409][T19669]  ? dquot_initialize+0x20/0x20
[ 1022.571442][T19669]  ? ext4_journal_check_start+0x179/0x240
[ 1022.571474][T19669]  ? __ext4_journal_start_sb+0x1f1/0x410
[ 1022.571505][T19669]  ext4_xattr_set+0x26e/0x3d0
[ 1022.571533][T19669]  ? ext4_xattr_set_credits+0x2a0/0x2a0
[ 1022.571555][T19669]  ? posix_xattr_acl+0xa5/0xd0
[ 1022.571581][T19669]  ? evm_protect_xattr+0x366/0xb10
[ 1022.571607][T19669]  ? ext4_xattr_trusted_get+0x40/0x40
[ 1022.571632][T19669]  __vfs_setxattr+0x3e7/0x420
[ 1022.571661][T19669]  __vfs_setxattr_noperm+0x12a/0x5e0
[ 1022.571688][T19669]  vfs_setxattr+0x21d/0x420
[ 1022.571714][T19669]  ? xattr_permission+0x4f0/0x4f0
[ 1022.571735][T19669]  ? refcount_dec_and_lock_irqsave+0x111/0x130
[ 1022.571765][T19669]  ? copy_user_enhanced_fast_string+0xa/0x40
[ 1022.571788][T19669]  ? _copy_from_user+0x109/0x170
[ 1022.571815][T19669]  setxattr+0x250/0x2b0
[ 1022.571840][T19669]  ? path_setxattr+0x2a0/0x2a0
[ 1022.571877][T19669]  ? __mnt_want_write+0x222/0x2a0
[ 1022.571906][T19669]  path_setxattr+0x1bc/0x2a0
[ 1022.571934][T19669]  ? simple_xattr_list_add+0xf0/0xf0
[ 1022.571960][T19669]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1022.571988][T19669]  __x64_sys_lsetxattr+0xb4/0xd0
[ 1022.572012][T19669]  do_syscall_64+0x3b/0xb0
[ 1022.572030][T19669]  ? clear_bhb_loop+0x45/0xa0
[ 1022.572056][T19669]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1022.572080][T19669] RIP: 0033:0x7fadb978d169
[ 1022.572099][T19669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1022.572117][T19669] RSP: 002b:00007fadba5aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 1022.572139][T19669] RAX: ffffffffffffffda RBX: 00007fadb99a6080 RCX: 00007fadb978d169
[ 1022.572155][T19669] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000100
[ 1022.572170][T19669] RBP: 00007fadb980e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1022.572184][T19669] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[ 1022.572197][T19669] R13: 0000000000000001 R14: 00007fadb99a6080 R15: 00007ffdb0df1748
[ 1022.572219][T19669]  </TASK>
[ 1022.575702][T19669] Kernel Offset: disabled
[ 1023.077270][T19669] Rebooting in 86400 seconds..