last executing test programs:

1m28.475667476s ago: executing program 3 (id=303):
syz_emit_ethernet(0x1e6, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b\x00', 0x1b0, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x3, 0x1, "020000000400000126000400"}, {0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x18, 0x27, "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"}]}}}}}}, 0x0)

1m28.405607108s ago: executing program 3 (id=304):
r0 = syz_open_dev$evdev(&(0x7f0000001840), 0x1, 0x0)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001880)=""/219)

1m28.252242443s ago: executing program 3 (id=315):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x7200, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x80000000, 0x6, 0x80000001, 0x3, 0x1, 0x9bc, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0x40000b, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0x4bf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x8600, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x0, 0x807, 0x1ff, 0x3, 0x400, 0xffffffff, 0x1040, 0x3, 0xfffffffa, 0x9a6, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084)

1m28.041830158s ago: executing program 3 (id=307):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x80000)
socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000200))
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

1m24.992196745s ago: executing program 3 (id=323):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="210329bd7000fbdbdf0e0100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)

1m24.712008314s ago: executing program 3 (id=324):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
lseek(0xffffffffffffffff, 0xfff, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
lseek(r5, 0x3, 0x0)
getdents(r5, 0x0, 0x48)
mkdir(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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")

1m7.98832773s ago: executing program 32 (id=324):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
lseek(0xffffffffffffffff, 0xfff, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
lseek(r5, 0x3, 0x0)
getdents(r5, 0x0, 0x48)
mkdir(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=")

1m7.962309671s ago: executing program 0 (id=363):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
pwritev2(r0, &(0x7f00000035c0)=[{&(0x7f00000011c0)="1dbf", 0x2}, {0x0}], 0x2, 0x1, 0x4, 0x11)

1m5.459625223s ago: executing program 0 (id=369):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

1m3.491624218s ago: executing program 0 (id=371):
timer_create(0x3, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
timer_gettime(r0, &(0x7f0000000000))

1m2.431164709s ago: executing program 0 (id=372):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2ca, &(0x7f0000001440)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m2.064653059s ago: executing program 0 (id=373):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x80000)
socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
pipe2$9p(&(0x7f0000000240), 0x0)

1m1.33944615s ago: executing program 0 (id=375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x44}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80a4)

1m1.056769568s ago: executing program 33 (id=375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x44}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80a4)

12.729631217s ago: executing program 5 (id=516):
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711835000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = gettid()
timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timer_gettime(r4, 0x0)

10.330394925s ago: executing program 5 (id=524):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x80000)
socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pipe(&(0x7f0000000200))
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

10.271864517s ago: executing program 2 (id=525):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000180)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0)
getgid()
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0xb, 0x0, 0x0)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)={0x0, 0x1})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000880)="17000000020001000003d68c5ee17688a2003208030300ecff3fffa4000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ff2457521b5c950a3108400200000000e90554062a80e60571174aa951ff0f0000db43a06046c2e98423523047a5", 0xb8)

9.162801648s ago: executing program 4 (id=528):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080))

9.08825357s ago: executing program 2 (id=530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x84)

8.955476884s ago: executing program 1 (id=531):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x20, 0xc, 0x10, "65b12ad55ddc565681aadbb24d3fbc60"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x19, 0x2, "5fa3"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

8.891576556s ago: executing program 4 (id=532):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00')
preadv(r0, &(0x7f0000001680)=[{&(0x7f0000001700)=""/203, 0xcb}, {0x0}], 0x2, 0x8001, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
close_range(r6, r1, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8.631233733s ago: executing program 2 (id=534):
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711835000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = gettid()
timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timer_gettime(r4, 0x0)

7.575206314s ago: executing program 4 (id=537):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000000ffffff80180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f)

7.469531927s ago: executing program 5 (id=538):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x2603)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r0, 0x0, 0x0)
listen(0xffffffffffffffff, 0xfff)
r1 = creat(0x0, 0x0)
r2 = open$dir(0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RVERSION(r1, 0x0, 0x13)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r3, &(0x7f0000000080)=""/1, 0x1)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)

7.429052888s ago: executing program 4 (id=539):
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711835000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$eJzs3M9rHFUcAPDvTH70t4m1/ugPNbWKwR9Jk1btwYui4EFB0EM9xiQttWkjTQRbilaRepSCF0/iUfAv8CB6EfUkePGgdykU6aWtIIzM7kyz2e5uk3STjdnPB6Z9b+fNvvfdN2/3zbxOA+haQ/kfScT2iPgjIgaq2cUFhqp/Xb96fvLG1fOTSWTZG38nlXLXrp6fLIuWx20rMsNpRPpJEnsb1Dt39tzJiZmZ6TNFfnT+1Lujc2fPPX3i1MTx6ePTp8ePHDl8aOy5Z8efqTtyf/9K4szbdG3PB7P7dr/y1qXXJo9eevvnb5Iy/ro42mSo1c7HsqzN1XXWjpp00tvBhrAsPRGRd1dfZfwPRE8sdN5AvPxxRxsHrKosy7JtzXdfyIANLImlljxZfF8AG0P5Q59f/5bbGk091oUrL1QvgPK4rxdbdU9vpEWZvrrr23YaioijF/75Mt9iefchdn63Sm0CADa27/P5z1ON5n9p3FdT7q5ibWgwIu7OJx8RcU9E7IqIeyMqZe+PiAeWWX/9Ismt85/0ckR88fuKoru9fP73fLG2tXj+V87+YrCnyO2oxN+XHDsxM32w+EyGo29Tnh9rUccPL/32WbN9tfO/fMvrL+eCRTsu925afMzUxPzEncRc68pHEXt6G8Wf3FwJSCJid0TsafYmm1vXceKJr/c129cs/r6lNL4N60zZVxGPV/v/QtTFX0par0+Obo6Z6YOj5Vlxq19+vfh6s/pv3/+rK+//rQ3P/5vxDya167Vzy6/j4p+fNr2mWen535+8WUmXi8HvT8zPnxmL6E9erTa69vXxhWPLfFk+j3/4QOPxvzMWPom9EZGfxA9GxEMR8XDR9v0R8UhEHGgR/08vPvrO0uNP17z/p5bV/wuJ/qh/pXGi5+SP3y6qdLBV/I36/3AlNVy8spTvvxbNuZFl2R2czQAAAPD/k0bE9kjSkZvpNB0Zqf57+V2xNZ2ZnZt/8tjse6enqs8IDEZfWt7pGqi5HzpWXNaX+fG6/KHivvHnPVsq+ZHJ2ZmpTgcPXW5bk/Gf+6un060DVp3ntaB7Gf/QvYx/6F7GP3SvBuN/SyfaAay9Rr//H3agHcDaqxv/lv2gi7j+h+5l/EP36r39M/zAxjO3JVo/vL/ixL/FfyDQ/neWWA+JSNdFMyRWKdHpbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//E8nlDg==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
r6 = gettid()
timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timer_gettime(r7, 0x0)
ftruncate(r5, 0x2007ffc)
sendfile(r5, r5, 0x0, 0x2000000000006)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100), 0x4000)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.61072932s ago: executing program 1 (id=542):
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0)
write$vga_arbiter(r3, &(0x7f0000000340)=@target={'target ', {'PCI:', '6', ':', '10', ':', '1b', '.', '5'}}, 0x15)

5.61010078s ago: executing program 2 (id=543):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000240)=@svm={0x2, 0x1, 0x1080, {0x54000}, {"f1f72def32c17269941174da3bf6d626c3df03774c037679f704fce264ae53af6f82e169bab9639c00385b884e62abde132bde5ee4b2c0db9aff39153e933215a2260a9b0a860d5805c9ca5c9191073e95a25c8ac3acb093143e5353d6fcea54f671d4dc11eb32238e8141218a5b211765c117b3b303710d1e3d9371d9245fe2fe57cd99cf3b06739eb859f2dfa4ca62efe6e456a6ed26e6e24b11898649928a3c005b37c553ecc6d2bc1741240f524cc01f0197f7ae770e86d4801edc68b425140fa4d0349517bc0ef0e883b3437a1719c24b0e95612fc1c477fbb6265915e40c6d67e6ff5f540139080ad19cc8c32064b9aa522242d926229cad8dfd87e00f0dac277170dbbf579362cb70e933663458d213d7b96db12a16e1dc6a70dfbe5bd81f8f92876aa8847aa46a55532d3cf5d590abdcdfc3d65c0ca6b5414eaeaddaf8a3d4e3a5688690057e115fbff71a72b927b480f6a8e565df196113e693a13081370380a905b080c939692608ce984406aeb73718d4d69a9d1494f9d41303ed4667efecb308a3c2fb91689dc2f4a595e22f7fefb4be442dc24b6188b06f6dcbcffd8cce4c23b55cf39bf70dc5fe16e5c391c21f5432faa81382a11d460174ce79e1db67e0e6cfff61edcf3ce1897ff4446e3a056cbf08fd615ae1c8945a2fac65ff6e9bd3805433f778de124def2e89a4da10249e8f2a3d3c3c860ccc983e086a1d66d80ebce6836ec669044e8369df1477c1524b54f6312f79d66a91ae909cd3f1577bceb0f752545cdda5b1ed3ce7b4a2a69ed1ef4e64ec34f61936b2db9d1cc32e22dc5bfe49783c1ac9c65fe018b321ec21d7b707bb27b445d56d73500c6ae617e6416911797653f49c09bdb9641085ae4f84207ea885c51ccdd55c7d08c7e81872f07c71d7d3f99ce35b80f1171924c6d39e73e33ec235a6a631f40a47bbeccb8a75c1174af78ca7f319b8ae026d2c88507afcb7c99b47eece09b0530d56986dd30a8656892954a42b786719da9091948f6a52f3ed3cf45ea961406c7e4b120809417332a6b6ba4dc16d5fbd1e9349561488fa67367e0902655cdf7a6b89ff12d6788a56fdf9547eab1b1fe5ff276bb55e8685cb6c57efe5466c03a97eefb847f5e86311052118fd8aae0bc5a95f1e00edddfe72bbca501303ffc7d248551c88a5fd25f0876df70693e1fad23f56c6165064b58120e625c91850a76eedc5da935dfd960f9b1df2242f09d3a7a9de7dbdd154f294285b53be657bc81992839f1835ba2ca4f94cf01a6ffb1152529873c4f735c7d87d7d893aeb92095ae9baee086b3c2504e8bcd394659e4b67c36f706cc2325b26f66458a08e86bbe8303a71ac32552a7c8002056ef79ca2f45abb0ecf86a8e121f39dbe4e793f7c545f417f7e48970e14ef7ea492209e07d54eaecb01bcc886a1f5f11843fd30da2a8c1c2017a2383d575ad17617c86473c53efd4b1f66087232697f9b71c5ac90ee5fe003d3954455842c59272bc6cfecf7eded29bdb4b5f060735f03e091e4ddb82aa9cdbad36e31316934a86261f32e5077236641263528632dc4f403d22b20023c5dbd9e250d4b38f0e74f29189bba878364862cdeb2f3c73e14f45db6dd99707b9b35f98b814b45e98538f96f53b7b0ce342a3ee9240891912e43095121d6af6e16c795a053331051ba9852014a72220d0ba70fdf2343e12b9c02a902d8ee57d1a98757ad2b44d59d4a58f4a94c4020f9b6e8c13052d4d302461fd3435319aabc43d480c00219b9f4ed3aa2aaf930936d8408531cbb7a4cd624244bc415a84e913a7a55777ee0d09881990b5db5dfdd98b8a471919eef06f2a2c0442178b8801bd66b1e2aed5efb5cbd24c7ea2cc66a7ef075923ee73742c121b8d08d073b6a43fff633fe27e897162eacc44ef1a1fb4c7400e242ced568af73360ebf406d99da77363cb9b18b255c81439f1ff1111f2aa8121b25abd8b790dfcc95951c4539763bac7c1541c4f9e956117f0bc1a243cf9a9b22d689f3070f39993cf836260005eabdcf3c0f1590ff8834d7ea4cf31606342d17fa56d454f67684b0a3a9b960e8e89e050c7532dfff1ec131b2d58097364e6758aba0c06d30f008be6f7265d2a499ce1e7b5df7cd20f2608ece54a56c432f07cbb687db97367e282534b454194e5b8c738f42bf6208aab889e90f7c6cbe02a63c88d2a5d734f0212792189e0f170964d6c6bc1b7009f710b8e0c36d133c2aa6f1c60c0f52991a0c9d06668126acfe6ebd294cfc27c166b4d96e94dd89190f01b3fb84c8dd882f71aaf5281b2e186d8ca21a7f252f39258afe723206ac9725969d442ce4f4a5f8f2084cb0e070ff2e7ca85f7b300411b70b936581133226a0f9603205a23759ec37a363e97acded9d546e9108bb5d3bb79cfa3026879d236b2ce40564724254f38c06030a4e3074c3d35224458fc43c45a09c4c5e303cc46f157db8003c71f3f37c770e4c45fc326c48f3daf7e5a9f269e9781127223307ced7b74384ef88fb64fbb2b0a50414820ac4a71eea972d51cfd1296fa7d66224f56b6b96d324ebff0a53ba62d8674e1645595468cda742218de4cb73d33897c5ffca95299b901db628ca530bf96e295610aa66f4e0c50340d3bdb69636faeeabb4518b78a499d24be5b178ee17e36fc493647831dc54615f213acf60d406b3e6bcde1e410a8618d1fa69ab762bb221820244c18aa32840b2cabfdd34121a5e6074c0ba9097bef126c988989aa1ec57321cd3f7881a9cb96505b1859405e5c642ed7f963d66706ad072c65b3b9dc061145aa7e596908acfc39792acf8142979d986dff9fefcfc1fa408db35b89197a77771eb2abe7cf925c804738739b18f1596ce8f1e7dcefef4e28ba5e2af3827281ec59e14c75814ee11303be6fea4bb0a48af22befef33e8da3d57f74d32907bf4ac3fb77e1c9b22309c03c0690e3709d9d7d9e05f5283ad7322a4b543ed9a6dd30931e45f32069b01017b799a8b165b1585ddc60edd077fc8268f9f16aeb50484a3828e1ce3706a27d046f9b886b83a1716bcfed4bd6b389518149cde7fee41dbc4b93a5db5c7a9010e2b2496fe33eef4c28f40bcd9af6c15bbe67c644b539c75ccf31ea078dbe7f57daa2f62d782b066634cfcf7c51f825e8d7b0a7aeaf33fd34ce8f9a166395aa905b71398d414a5787abf7ec127a8530c7b69fde5cd98429a7562f3e742e010ed7af9c40b7ccc4be4770d21e2f61b35212ffa7d671b37e7cb3ea3c2026382b3aac7e86d50836d54b944aaaa379399a69e19e373ef04dd52fce1c0246038db87ad34472ccd30365cc2e5f40b3781d3aa61785384a52d6e0a309e57078fddad12d401ca25d7b600caeab084b61cae2a965140cc9683eadc6e8bb1d05fb4a85fdc8cb53916998414d743eb6a3bfb5f22206acd1bfd274efb999e7cbbf38baf218d416364dbda12096a91d87e1bc416b7a30b9da36be43dd0d9500f68fe9eb929e36951875fefd3ea4e47cae5baa8ea0600a650952900e10e7ef99cbac01abd1b2584723a6107cb5631aba12ecd0a49d7b67a4fa07e7644063cc5acc6c82903abb38fa8793d4f17737e59d6810c0d6332027d75f4737e2a423f6db1b685a38cc1b1858c3853cdc567ac16a33817a8696a3fcac72dac273c998eaa53b2f403403095e00744a2f521ac7afb6ad15004300ac5c83ae7a2a5d6aabdd3d1989ff2f714302aa8a0d71fce1ec76719804ee46fccfb4b9e6fe5295a3892a73491c12b9ded0ba9550f2c80cfab70e98dddb03ee8913a19e4bc76492a0009737392e858867152cc7e9d750b6e48d571785d1b460f5ca4bff618a8b9647fdc73d3bcdd4dcaa1c8a477074de70a98e65f3dc577cb9638f209e8f09dfe94d87ef1ca49029e29442dd0ed5a5dafc91b2585a69b8f8d85e5a04d990f18e0f60d320664db8c82d1f2d8b4a574477cba32faff54fd73a1c86fc16f7614dd78a2b3f94b4cf52184d95b37701795675af0daa892aabeae4ac31f104f0086b34ec1054ae8ffacd98dd1c4133581dab6703bd2120969c2841bab934d014a052a709d6436e05e6ec8a2f450e840b20ef31f72129f34e0f37b960e2c3550252617f257b5e9f61aeb92b2672367c333fbc07886aee1d751eec964b5447b258cc8ee216e129852b9b24df91a604e6e510179b68f76c2ef777eca6a2c20d2cb2ff3429269687973d88fece8f32230b68a1be06eca3f6a9cf889d97b6850f319611d8b28b36914983f9d7a202b72b5a7330f8a22036c2c5a5c063451b059befaecea719cab62b9a241aa173ebf032713a274d92afa50af0a7470af933a74fe66680158754d8382fa68438c3cdbabc922e6c604a162e0fbb430f7ae0b9ae9f1981540a648596fd4455d7ac95b65e8a38279619e7e94f2b0ec17cca72355884e52d5f0510a7678a7bec031eb87c76f22e57a875441f40bbe1d616a6c2be4f6de5e45357d2d61a18040eb66a70857cfb1c19878f3dd59f3cc9d3e2283fc2c96fe3ef0d0130d021559459a45e209954b24826a3fce1fddd90e032409c68df3e0388955f3b740514d5aa4880761c18e5c5b8b7bf71300b130cf930417644ca5fe6dcf267f354aa75ce6af2ec9a56768740a48188d9e5ad43452a275ffdc62b1558caa53b958b4220cef9ffd445ebad303162d8861e5dfe580d4320f5cf0269b53c31d3c5b2e4daad6c472c741ce7a350329757da5e8531e33e2b0cfd01f2265cda5a21384b49979d1e2c60d4385c75fc8baeee272f07f638ef57ae0dcf84f3116264c919242848bc70915c7944f89163e4ce3c72d6d1b3d71680cbc43d3b3e788ce990a580ff6f5ed570b1292ef45871c76f5f3bc806df81a443aff89b16a27680eb2484bc7b4e2a4dccc3a07b065b03fdc7019b7405eef141ec3182e619dacd25c7e9794a05b8404c96c61fcbcbadeec20ea8859132962e0723ba7f3ad7ffdb3ac70b183e96ab6ab36ea7e96c9db601db191cae6e7cbf99934388de82e6aabd399870106bf0c7d6c970c54b3e8e6d30fc3edbbcd6fe83af4fc571eb7ae8aebb5de3610cb045f486ef4acb1ec45e348cc1a5d392cc9e87d1563cd0ca0cd26db281c9a8308deabcc32dc124e4a004a952b64e8b1adb6c805963c4edc419546110ec3a7c9540f9bd22d213714f81bb7526829d8b16acd3ce52ad17d86672789fe14a4a4e52fa2ba9ec07bd0503870af5fb0abb55f0f0962e7f1a19802b09e8a2f88a49c36a9f4e9cdcc5f91b5c8d51752cafa7823d6ba5ca79380f488e13b05fdfe82b2707ab1c6c796d2def503a638fcdfc7d6f5ebd6945742223ac6de1891a1ad3a761ff57684dae3315d924f0bf53faf8544f9a561435e8338651d0292e6725e5ca261ede3f9e142dece8e6ff1c3b5d065f3c6cf269cd58b6fbb161b31ecc70b9929d1631dc1258599746e80892cd737414a3d23dbb58007f208c42638fbd1a69b30cc7e67613553b48296a20825aad57035282163a2d01ed542122aacc1a011c5c8920a51e8d4f53629832afc7859372c5c09bf33f51ca65f3094051ea71b25855623dfb87803a9ada8cf54e16c8d278a125add82b0fe81713bb07f5ae66d0562bf4a13a88344cab7aedb9887ee42ea67970f27196868b347307ebe18062d79078c1a666b4613a0a95888d86a41343ad259dfed85ff483f938f12c8b79db1cb68c22ef5d2dc71be4d44cdb623afbe28933e22a0637e9f1f2e30e753a9336d3e61cd80b15a43e83b4f726ccd6843164ede6659b23cc31df005e6ecf00daea6024efd98671aaaa19ee7d1b"}})

4.185496921s ago: executing program 5 (id=544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x84)

2.934769956s ago: executing program 1 (id=546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

2.835479899s ago: executing program 4 (id=547):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00')
preadv(r0, &(0x7f0000001680)=[{&(0x7f0000001700)=""/203, 0xcb}, {0x0}], 0x2, 0x8001, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.524107578s ago: executing program 1 (id=548):
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@minixdf}, {@stripe}, {@noblock_validity}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)
rmdir(&(0x7f00000001c0)='./file1\x00')

2.459660909s ago: executing program 6 (id=549):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}]}, 0x40}}, 0x800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r5 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="0dfb", 0x2}], 0x1}, 0x4)

2.44367604s ago: executing program 2 (id=550):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x10)

2.4269581s ago: executing program 5 (id=551):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000180)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0)
getgid()
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0xb, 0x0, 0x0)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)={0x0, 0x1})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000880)="17000000020001000003d68c5ee17688a2003208030300ecff3fffa4000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ff2457521b5c950a3108400200000000e90554062a80e60571174aa951ff0f0000db43a06046c2e98423523047a5", 0xb8)

1.315748902s ago: executing program 6 (id=552):
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0))

1.283756393s ago: executing program 5 (id=553):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0)

1.211623215s ago: executing program 4 (id=554):
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x7, 0x71, 0x0, 0x0)
syz_usb_connect(0x6, 0x57, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
tkill(0x0, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138)

1.081516619s ago: executing program 6 (id=555):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x7200, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x80000000, 0x6, 0x80000001, 0x3, 0x1, 0x9bc, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0x40000b, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0x4bf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x8600, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x0, 0x807, 0x1ff, 0x3, 0x400, 0xffffffff, 0x1040, 0x3, 0xfffffffa, 0x9a6, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084)

862.494235ms ago: executing program 6 (id=556):
r0 = socket$inet6(0xa, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}], 0x18}, 0xc4)

786.406637ms ago: executing program 1 (id=557):
symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(n~'], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

785.879597ms ago: executing program 6 (id=558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

735.593059ms ago: executing program 2 (id=559):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
times(0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendfile(r5, r4, &(0x7f0000000200)=0xa, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRESDEC=r5], 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$lan78xx(r6, 0x0, 0x0)
syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r6, 0x0, 0x0)
r7 = syz_usb_connect$uac2(0x1, 0x99, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0xe41, 0x424a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0xd, 0x40, 0x90, {0x8, 0xb, 0x0, 0x2, 0x1, 0x2, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0xff6bfe39097236ff, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x0, 0xfe, {0x8, 0x25, 0x1, 0x1, 0x30, 0x10, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0xc, 0xf1, "f684a9f665d0ea48ef"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3b}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x59, 0x2, 0x0, {0x8, 0x25, 0x1, 0x2, 0xc, 0x40, 0x2}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x1, 0x3, 0x9, 0x8, 0x2}, 0x0, 0x0})
syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x20, 0xe, 0x77, "a27e428dcc5987f748521b1e247e9a739ffb633290cb9df1b05e14cb279a050cf5e7292e39bf2fa9b10ef8509c0c431aa4ffd8d4304ebecb7e32e3259a221fabf179ab35a9a59923925ee0ca7d60d57436aafa4fef8e4fba302bb9e13dffafcbeab2e64bf2eb5dbe17959cf8cd3b626a2964f74e0b351b"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xe9}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000900)={0x20, 0x81, 0x1, "83"}, &(0x7f0000000940)={0x20, 0x82, 0x2, "feda"}, &(0x7f0000000980)={0x20, 0x83, 0x3, "0e8976"}, &(0x7f00000009c0)={0x20, 0x84, 0x2, "45d9"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "d0c44d"}})

349.71453ms ago: executing program 6 (id=560):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@bh}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000004a80)="$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")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6)
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2d, 'memory'}]}, 0x8)
fallocate(r0, 0x0, 0x2000000, 0x41001f3)
fallocate(r0, 0x8, 0x2000000, 0x10000)

0s ago: executing program 1 (id=561):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x84)

kernel console output (not intermixed with test programs):

ror (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   96.853635][ T4790] device syzkaller0 entered promiscuous mode
[   96.992490][ T4794] loop4: detected capacity change from 0 to 256
[   97.643880][ T4815] loop4: detected capacity change from 0 to 512
[   97.829230][ T4815] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noload,,errors=continue. Quota mode: writeback.
[   97.898596][ T4815] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.361534][   T26] audit: type=1326 audit(1777470869.860:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.386100][   T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   98.401772][   T26] audit: type=1326 audit(1777470869.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.527904][   T26] audit: type=1326 audit(1777470869.900:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.633699][ T4845] loop2: detected capacity change from 0 to 512
[   98.640845][   T26] audit: type=1326 audit(1777470869.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.663568][   T26] audit: type=1326 audit(1777470869.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.686163][   T26] audit: type=1326 audit(1777470869.900:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.720081][   T26] audit: type=1326 audit(1777470869.900:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.742944][   T26] audit: type=1326 audit(1777470869.900:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.801930][   T26] audit: type=1326 audit(1777470869.900:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.932497][   T26] audit: type=1326 audit(1777470869.900:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5ce9acbdd9 code=0x7ffc0000
[   98.955028][   T21] usb 2-1: Using ep0 maxpacket: 8
[   99.038979][ T4854] loop3: detected capacity change from 0 to 1024
[   99.082589][ T4854] EXT4-fs (loop3): inline encryption not supported
[   99.169062][ T4854] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback.
[   99.309529][ T4867] loop0: detected capacity change from 0 to 512
[   99.316725][   T21] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[   99.346296][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.354911][   T21] usb 2-1: Product: syz
[   99.365526][   T21] usb 2-1: Manufacturer: syz
[   99.370184][   T21] usb 2-1: SerialNumber: syz
[   99.384228][   T21] usb 2-1: config 0 descriptor??
[   99.456239][   T21] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[   99.515702][   T21] dvb-usb: bulk message failed: -22 (2/0)
[   99.536206][ T4867] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   99.552550][   T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   99.595341][   T21] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[   99.610655][   T21] usb 2-1: media controller created
[   99.626352][ T4867] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.641815][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   99.745136][   T21] cxusb: set interface failed
[   99.750653][   T21] dvb-usb: bulk message failed: -22 (1/0)
[   99.798012][ T4888] loop2: detected capacity change from 0 to 256
[   99.919824][   T21] DVB: Unable to find symbol mt352_attach()
[   99.926476][   T21] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[   99.945091][ T4888] FAT-fs (loop2): Directory bread(block 64) failed
[   99.983972][ T4888] FAT-fs (loop2): Directory bread(block 65) failed
[  100.034724][ T4888] FAT-fs (loop2): Directory bread(block 66) failed
[  100.074079][ T4888] FAT-fs (loop2): Directory bread(block 67) failed
[  100.112276][ T4888] FAT-fs (loop2): Directory bread(block 68) failed
[  100.152396][ T4888] FAT-fs (loop2): Directory bread(block 69) failed
[  100.225837][ T4888] FAT-fs (loop2): Directory bread(block 70) failed
[  100.232448][ T4888] FAT-fs (loop2): Directory bread(block 71) failed
[  100.305050][   T21] rc_core: IR keymap rc-dvico-portable not found
[  100.311444][   T21] Registered IR keymap rc-empty
[  100.340730][ T4888] FAT-fs (loop2): Directory bread(block 72) failed
[  100.353160][   T21] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  100.387237][ T4888] FAT-fs (loop2): Directory bread(block 73) failed
[  100.414904][   T21] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10
[  100.619817][ T4911] device syzkaller0 entered promiscuous mode
[  100.679777][   T21] dvb-usb: schedule remote query interval to 100 msecs.
[  100.686850][   T21] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  100.703082][   T21] usb 2-1: USB disconnect, device number 3
[  101.256903][   T21] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  101.403302][   T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  101.655398][   T13] usb 1-1: Using ep0 maxpacket: 8
[  101.789352][ T4173] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  103.454995][    C0] sched: RT throttling activated
[  104.199534][ T4945] loop4: detected capacity change from 0 to 512
[  104.529098][ T4945] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  104.752006][ T4945] EXT4-fs (loop4): 1 truncate cleaned up
[  104.758521][ T4945] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  105.063902][ T4945] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  106.483383][   T13] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  106.492627][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.502919][   T13] usb 1-1: Product: syz
[  106.517598][   T13] usb 1-1: config 0 descriptor??
[  106.535519][   T13] usb 1-1: can't set config #0, error -71
[  106.547290][   T13] usb 1-1: USB disconnect, device number 5
[  106.695248][ T4173] usb 3-1: device not accepting address 5, error -71
[  106.852477][ T4989] device syzkaller0 entered promiscuous mode
[  106.885342][ T4236] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  106.945178][   T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  107.108046][ T4993] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  107.145546][ T4993] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  107.165833][ T4991] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  107.184230][ T4991] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  107.205059][   T13] usb 1-1: Using ep0 maxpacket: 8
[  107.335262][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  107.355767][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  107.377248][ T4236] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  107.439796][ T4995] loop4: detected capacity change from 0 to 2048
[  107.534260][ T4995] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  107.551644][   T13] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  107.580754][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.609532][ T4995] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.651030][   T13] usb 1-1: Product: syz
[  107.675250][   T13] usb 1-1: Manufacturer: syz
[  107.756732][   T13] usb 1-1: config 0 descriptor??
[  107.766260][ T4995] fs-verity: sha512 using implementation "sha512-avx2"
[  107.805225][   T13] usb 1-1: can't set config #0, error -71
[  107.842751][   T13] usb 1-1: USB disconnect, device number 6
[  108.019893][ T4236] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.029364][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.038169][ T4236] usb 4-1: Product: syz
[  108.042448][ T4236] usb 4-1: Manufacturer: syz
[  108.047152][ T4236] usb 4-1: SerialNumber: syz
[  108.272367][ T5006] loop1: detected capacity change from 0 to 512
[  108.304213][ T4977] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  108.390117][ T5006] EXT4-fs (loop1): Ignoring removed nobh option
[  108.566821][ T5006] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.203: invalid block
[  108.584134][ T5006] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.203: invalid indirect mapped block 1024 (level 0)
[  108.604924][ T5006] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.203: bg 0: block 35: padding at end of block bitmap is not set
[  108.622725][ T5006] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  108.638667][ T5006] EXT4-fs (loop1): 1 truncate cleaned up
[  108.644558][ T5006] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nobh,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.
[  108.990354][ T4977] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  109.945814][ T4977] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  110.315386][ T4236] cdc_ncm 4-1:1.0: failed to get mac address
[  110.442869][ T5015] loop2: detected capacity change from 0 to 512
[  110.525352][ T4236] cdc_ncm 4-1:1.0: bind() failure
[  110.568254][ T4236] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  110.596131][ T5015] EXT4-fs (loop2): 1 truncate cleaned up
[  110.605233][ T4236] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  110.613104][ T5015] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  110.625190][ T4236] usbtest: probe of 4-1:1.1 failed with error -71
[  110.655623][ T4236] usb 4-1: USB disconnect, device number 4
[  110.766720][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[  110.794171][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'.
[  110.847316][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[  110.920281][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[  111.366313][ T4236] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  111.618746][ T4236] usb 5-1: device descriptor read/64, error -71
[  111.885864][ T5032] loop3: detected capacity change from 0 to 512
[  111.968135][ T5035] device syzkaller0 entered promiscuous mode
[  112.052528][ T4236] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  112.071558][ T5032] EXT4-fs (loop3): 1 truncate cleaned up
[  112.087588][ T5032] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  112.275296][ T4236] usb 5-1: device descriptor read/64, error -71
[  112.450770][ T4236] usb usb5-port1: attempt power cycle
[  112.966544][ T4236] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  113.066147][ T4236] usb 5-1: device descriptor read/8, error -71
[  113.176125][ T4222] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  113.335204][ T4224] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  113.345323][ T4236] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  113.425461][ T4222] usb 3-1: Using ep0 maxpacket: 8
[  113.445694][ T4236] usb 5-1: device descriptor read/8, error -71
[  113.565642][ T4236] usb usb5-port1: unable to enumerate USB device
[  113.595578][ T4224] usb 1-1: Using ep0 maxpacket: 8
[  113.750957][ T4222] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  113.765133][ T4222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.824486][ T4222] usb 3-1: Product: syz
[  113.835887][ T4222] usb 3-1: Manufacturer: syz
[  113.842332][ T4222] usb 3-1: SerialNumber: syz
[  113.857429][ T4222] usb 3-1: config 0 descriptor??
[  113.927465][ T4222] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  113.945272][ T4224] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  113.955486][ T4222] dvb-usb: bulk message failed: -22 (2/0)
[  113.979006][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.001600][ T4222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  114.017148][ T4224] usb 1-1: Product: syz
[  114.028683][ T4224] usb 1-1: Manufacturer: syz
[  114.041447][ T4224] usb 1-1: SerialNumber: syz
[  114.071180][ T4222] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  114.083918][ T4224] usb 1-1: config 0 descriptor??
[  114.101405][ T4222] usb 3-1: media controller created
[  114.137034][ T5067] loop3: detected capacity change from 0 to 512
[  114.139895][ T4222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  114.154158][ T4224] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  114.176112][ T4224] dvb-usb: bulk message failed: -22 (2/0)
[  114.190750][ T5067] EXT4-fs (loop3): Ignoring removed oldalloc option
[  114.204290][ T5067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  114.222776][ T4224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  114.275483][ T4224] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  114.277170][ T5067] EXT4-fs (loop3): 1 truncate cleaned up
[  114.284615][ T4222] cxusb: set interface failed
[  114.284657][ T4222] dvb-usb: bulk message failed: -22 (1/0)
[  114.315617][ T4224] usb 1-1: media controller created
[  114.461047][ T5067] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  114.487548][ T4224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  114.524271][ T4222] DVB: Unable to find symbol mt352_attach()
[  114.536146][ T4222] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  114.785244][ T4224] cxusb: set interface failed
[  114.791872][ T4224] dvb-usb: bulk message failed: -22 (1/0)
[  114.798160][ T5079] device syzkaller0 entered promiscuous mode
[  116.215907][ T4224] DVB: Unable to find symbol mt352_attach()
[  116.221879][ T4224] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  116.316176][ T4222] rc_core: IR keymap rc-dvico-portable not found
[  116.324384][ T4222] Registered IR keymap rc-empty
[  116.385101][ T4222] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  116.480533][ T4222] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11
[  116.515213][ T4224] rc_core: IR keymap rc-dvico-portable not found
[  116.524651][ T4224] Registered IR keymap rc-empty
[  116.557684][ T4222] dvb-usb: schedule remote query interval to 100 msecs.
[  116.566614][ T4224] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1
[  116.602060][ T4222] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  116.629640][ T4224] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input12
[  116.705050][ T4222] usb 3-1: USB disconnect, device number 7
[  116.755960][ T4224] dvb-usb: schedule remote query interval to 100 msecs.
[  116.791354][ T4224] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  116.886307][ T4224] usb 1-1: USB disconnect, device number 7
[  117.049187][ T4222] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  117.209229][ T4224] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  117.448053][ T5096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.233'.
[  117.475012][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'.
[  117.549727][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'.
[  117.720966][ T5113] loop4: detected capacity change from 0 to 4096
[  117.785232][   T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  117.798026][ T5113] EXT4-fs (loop4): Unrecognized mount option "audit" or missing value
[  117.955205][ T4226] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  117.962851][ T4173] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  118.185690][   T13] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  118.319246][ T5123] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.342366][ T4226] usb 2-1: Using ep0 maxpacket: 8
[  118.347541][ T4173] usb 1-1: Using ep0 maxpacket: 8
[  118.357397][   T13] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  118.369228][   T13] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  118.915417][   T13] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40
[  118.931046][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.941082][   T13] usb 3-1: Product: syz
[  118.952008][   T13] usb 3-1: Manufacturer: syz
[  118.956993][   T13] usb 3-1: SerialNumber: syz
[  119.085123][ T4173] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  119.096064][ T4226] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  119.106518][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.114578][ T4226] usb 2-1: Product: syz
[  119.124750][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.133633][ T4173] usb 1-1: Product: syz
[  119.143974][ T4226] usb 2-1: Manufacturer: syz
[  119.150710][ T4173] usb 1-1: Manufacturer: syz
[  119.169457][ T4226] usb 2-1: SerialNumber: syz
[  119.174901][ T4173] usb 1-1: SerialNumber: syz
[  119.190224][ T4226] usb 2-1: config 0 descriptor??
[  119.199436][ T4173] usb 1-1: config 0 descriptor??
[  119.237357][ T4226] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  119.251368][ T4173] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  119.273720][ T4226] dvb-usb: bulk message failed: -22 (2/0)
[  119.283990][ T4173] dvb-usb: bulk message failed: -22 (2/0)
[  119.310509][ T4226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  119.331382][ T4173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  119.355742][ T4173] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  119.364750][ T4173] usb 1-1: media controller created
[  119.371769][ T4226] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  119.381117][ T4226] usb 2-1: media controller created
[  119.412752][ T5145] loop2: detected capacity change from 0 to 128
[  119.424822][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  119.511828][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  119.718393][ T4226] cxusb: set interface failed
[  119.723145][ T4226] dvb-usb: bulk message failed: -22 (1/0)
[  119.730150][ T4173] cxusb: set interface failed
[  119.734910][ T4173] dvb-usb: bulk message failed: -22 (1/0)
[  119.748535][   T13] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  119.766322][   T13] gspca_stv06xx: st6422 sensor detected
[  119.862704][ T5155] loop3: detected capacity change from 0 to 512
[  119.956430][ T5155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  120.093304][ T5155] EXT4-fs (loop3): 1 truncate cleaned up
[  120.099214][ T5155] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  121.496270][ T4173] DVB: Unable to find symbol mt352_attach()
[  121.502350][ T4173] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  121.668246][ T5169] loop1: detected capacity change from 0 to 128
[  121.700136][ T5170] netlink: 52 bytes leftover after parsing attributes in process `syz.2.249'.
[  121.767825][ T5169] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  121.798862][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'.
[  121.840488][ T4185] Bluetooth: hci4: link tx timeout
[  121.846220][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.870696][ T5169] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  122.026093][ T5169] syz.1.252 (pid 5169) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  122.325148][ T4173] rc_core: IR keymap rc-dvico-portable not found
[  122.331665][ T4173] Registered IR keymap rc-empty
[  122.363995][ T4173] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  122.385463][ T4226] DVB: Unable to find symbol mt352_attach()
[  122.391427][ T4226] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  122.400771][ T5178] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  122.419517][ T4173] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input13
[  122.482829][   T13] STV06xx: probe of 3-1:1.0 failed with error -71
[  122.504498][ T4173] dvb-usb: schedule remote query interval to 100 msecs.
[  122.512777][ T4173] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  122.570653][ T4173] usb 1-1: USB disconnect, device number 8
[  122.578211][   T13] usb 3-1: BAAD SPEAKERPHONE c_chmask mismatch
[  122.620365][   T13] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  122.655206][   T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  122.712492][   T13] usb 3-1: USB disconnect, device number 8
[  122.725749][ T4226] rc_core: IR keymap rc-dvico-portable not found
[  122.732165][ T4226] Registered IR keymap rc-empty
[  122.779337][ T4226] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1
[  122.799412][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.807828][ T4226] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input14
[  122.912204][ T4226] dvb-usb: schedule remote query interval to 100 msecs.
[  122.935050][ T4226] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  122.945110][   T21] usb 4-1: Using ep0 maxpacket: 16
[  122.956479][ T4173] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  122.986212][ T4226] usb 2-1: USB disconnect, device number 4
[  123.089064][   T21] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping
[  123.101720][   T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.115538][   T21] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  123.130337][   T21] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  123.145908][ T4226] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  123.223518][ T5201] kvm: vcpu 0: requested 48 ns lapic timer period limited to 200000 ns
[  123.232514][   T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.242131][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  123.250537][   T21] usb 4-1: SerialNumber: syz
[  123.316682][ T4224] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  123.326402][   T21] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  123.334270][   T21] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  123.342266][   T21] cdc_acm: probe of 4-1:1.0 failed with error -22
[  123.376046][ T4173] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  123.525165][ T4226] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  123.539481][   T21] usb 4-1: USB disconnect, device number 5
[  123.605111][ T4224] usb 5-1: Using ep0 maxpacket: 8
[  123.719432][ T5205] loop2: detected capacity change from 0 to 40427
[  123.758466][ T5205] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  123.767564][ T5205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  123.775902][ T4226] usb 2-1: Using ep0 maxpacket: 8
[  123.776685][ T5205] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6
[  123.798977][ T5205] F2FS-fs (loop2): invalid crc value
[  123.823358][ T5205] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  123.901070][ T4173] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  123.920929][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.935555][ T4236] Bluetooth: hci4: command 0x0406 tx timeout
[  123.942744][ T4224] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  123.945937][ T4173] usb 1-1: Product: syz
[  123.962897][ T4224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.974011][ T4173] usb 1-1: Manufacturer: syz
[  123.990951][ T4173] usb 1-1: SerialNumber: syz
[  123.993410][ T4224] usb 5-1: Product: syz
[  123.999809][ T4224] usb 5-1: Manufacturer: syz
[  124.013780][ T5205] F2FS-fs (loop2): Start checkpoint disabled!
[  124.020732][ T4224] usb 5-1: SerialNumber: syz
[  124.023112][ T4173] usb 1-1: config 0 descriptor??
[  124.063956][ T4224] usb 5-1: config 0 descriptor??
[  124.074507][ T5205] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  124.082111][ T4226] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  124.093729][ T4173] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  124.106023][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.124830][ T4226] usb 2-1: Product: syz
[  124.135054][ T4226] usb 2-1: Manufacturer: syz
[  124.139690][ T4226] usb 2-1: SerialNumber: syz
[  124.141148][ T4224] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  124.163315][ T5205] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  124.176749][ T4226] usb 2-1: config 0 descriptor??
[  124.184243][ T4224] dvb-usb: bulk message failed: -22 (2/0)
[  124.226441][ T4224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  124.242839][ T5207] binder: 5206:5207 ioctl c018620c 200000000000 returned -22
[  124.264103][ T4226] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  124.275428][ T4224] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  124.313984][ T4226] dvb-usb: bulk message failed: -22 (2/0)
[  124.336950][ T4226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  124.346741][ T4224] usb 5-1: media controller created
[  124.395411][ T4226] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  124.420895][ T4226] usb 2-1: media controller created
[  124.485789][ T5008] attempt to access beyond end of device
[  124.485789][ T5008] loop2: rw=2049, want=45104, limit=40427
[  124.516980][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  124.605143][ T4226] cxusb: set interface failed
[  124.609981][ T4226] dvb-usb: bulk message failed: -22 (1/0)
[  124.622852][ T4224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  124.625385][ T4173] gspca_sunplus: reg_r err -110
[  124.717472][ T4226] DVB: Unable to find symbol mt352_attach()
[  124.724239][ T4226] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  124.785165][ T4224] cxusb: set interface failed
[  124.790000][ T4224] dvb-usb: bulk message failed: -22 (1/0)
[  124.946468][ T4224] DVB: Unable to find symbol mt352_attach()
[  124.952428][ T4224] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  125.035214][ T4226] rc_core: IR keymap rc-dvico-portable not found
[  125.044095][ T4226] Registered IR keymap rc-empty
[  125.060850][ T4226] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  125.131861][ T4226] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15
[  125.211631][ T4226] dvb-usb: schedule remote query interval to 100 msecs.
[  125.246934][ T4226] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  125.305385][ T4224] rc_core: IR keymap rc-dvico-portable not found
[  125.318738][ T4224] Registered IR keymap rc-empty
[  125.318756][ T4226] usb 2-1: USB disconnect, device number 5
[  125.364384][ T4224] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1
[  125.371188][ T5231] loop1: detected capacity change from 0 to 4096
[  125.417041][ T4224] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input16
[  125.489082][ T4224] dvb-usb: schedule remote query interval to 100 msecs.
[  125.504103][ T5231] EXT4-fs (loop1): Unrecognized mount option "audit" or missing value
[  125.528002][ T4224] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  125.573965][ T4224] usb 5-1: USB disconnect, device number 6
[  125.635826][ T4226] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  125.659610][   T26] kauditd_printk_skb: 55 callbacks suppressed
[  125.659624][   T26] audit: type=1326 audit(1777470897.160:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.2.265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80737bbdd9 code=0x0
[  125.715780][ T4224] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  126.178850][ T5240] xt_CT: You must specify a L4 protocol and not use inversions on it
[  126.896543][   T13] usb 1-1: USB disconnect, device number 9
[  127.064478][ T5250] loop0: detected capacity change from 0 to 4096
[  127.120845][ T5250] EXT4-fs (loop0): inline encryption not supported
[  127.133343][ T5255] loop4: detected capacity change from 0 to 512
[  127.357372][ T5263] loop2: detected capacity change from 0 to 256
[  127.452422][ T5250] EXT4-fs (loop0): Test dummy encryption mode enabled
[  127.506433][ T5250] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  127.525451][ T5263] FAT-fs (loop2): Directory bread(block 64) failed
[  127.571270][ T5263] FAT-fs (loop2): Directory bread(block 65) failed
[  127.598778][ T5250] System zones: 0-5
[  127.652400][ T5250] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  127.665198][   T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  127.675366][ T5263] FAT-fs (loop2): Directory bread(block 66) failed
[  127.715129][ T5263] FAT-fs (loop2): Directory bread(block 67) failed
[  127.733088][ T5243] loop1: detected capacity change from 0 to 40427
[  127.740374][ T5263] FAT-fs (loop2): Directory bread(block 68) failed
[  127.755179][ T5263] FAT-fs (loop2): Directory bread(block 69) failed
[  127.774426][ T5263] FAT-fs (loop2): Directory bread(block 70) failed
[  127.792699][ T5263] FAT-fs (loop2): Directory bread(block 71) failed
[  127.817858][ T5243] F2FS-fs (loop1): invalid crc value
[  127.851670][ T5263] FAT-fs (loop2): Directory bread(block 72) failed
[  127.885053][ T5263] FAT-fs (loop2): Directory bread(block 73) failed
[  127.908443][ T5243] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  127.950494][   T13] usb 5-1: Using ep0 maxpacket: 8
[  128.019041][ T5250] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  128.049883][ T5250] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.274: mark_inode_dirty error
[  128.095671][ T5250] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 49: comm syz.0.274: lblock 1 mapped to illegal pblock 49 (length 1)
[  128.144278][ T5250] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  128.155283][ T5243] F2FS-fs (loop1): Start checkpoint disabled!
[  128.174208][ T5250] EXT4-fs error (device loop0): ext4_write_dquot:6216: comm syz.0.274: Failed to commit dquot type 0
[  128.189816][ T5243] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  128.218297][ T5250] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #4: block 65: comm syz.0.274: lblock 1 mapped to illegal pblock 65 (length 1)
[  128.235704][   T13] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  128.263971][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.266795][   T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  128.282956][ T5250] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  128.301307][   T13] usb 5-1: Product: syz
[  128.305186][ T5250] EXT4-fs error (device loop0): ext4_write_dquot:6216: comm syz.0.274: Failed to commit dquot type 1
[  128.334317][ T5250] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  128.363892][ T5250] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.274: mark_inode_dirty error
[  128.385557][   T13] usb 5-1: Manufacturer: syz
[  128.392021][ T5250] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.274: Invalid block bitmap block 2 in block_group 0
[  128.408673][   T13] usb 5-1: SerialNumber: syz
[  128.437142][   T13] usb 5-1: config 0 descriptor??
[  128.445701][ T5250] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 49: comm syz.0.274: lblock 1 mapped to illegal pblock 49 (length 1)
[  128.472927][ T5250] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  128.484234][ T5250] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  128.507354][   T13] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  128.532383][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  128.550394][   T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  128.562668][ T5008] attempt to access beyond end of device
[  128.562668][ T5008] loop1: rw=2049, want=45104, limit=40427
[  128.565729][   T23] usb 3-1: Using ep0 maxpacket: 16
[  128.595395][   T13] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  128.609859][   T13] usb 5-1: media controller created
[  128.647334][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  128.705155][ T4236] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.743379][   T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.764672][   T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.765984][   T13] cxusb: set interface failed
[  128.798812][   T13] dvb-usb: bulk message failed: -22 (1/0)
[  128.805265][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[  128.819491][   T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  128.838985][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.851588][   T23] usb 3-1: config 0 descriptor??
[  128.881901][   T13] DVB: Unable to find symbol mt352_attach()
[  128.892669][   T13] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  128.896895][ T5276] loop0: detected capacity change from 0 to 4096
[  128.981653][ T5276] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value
[  128.991084][ T4236] usb 4-1: Using ep0 maxpacket: 8
[  129.127865][   T13] rc_core: IR keymap rc-dvico-portable not found
[  129.153182][   T13] Registered IR keymap rc-empty
[  129.211333][   T13] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  129.224265][   T13] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input17
[  130.226723][   T23] hid (null): invalid report_size 24934
[  130.233866][ T4236] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  130.260758][   T23] hid (null): nested delimiters
[  130.266087][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.304306][   T23] hid (null): unknown global tag 0xd
[  130.323737][ T4236] usb 4-1: Product: syz
[  130.338190][   T23] hid (null): global environment stack underflow
[  130.344894][ T4236] usb 4-1: Manufacturer: syz
[  130.361199][ T4236] usb 4-1: SerialNumber: syz
[  130.369370][   T23] hid (null): global environment stack underflow
[  130.380993][   T23] hid (null): global environment stack underflow
[  130.388904][   T23] hid (null): invalid report_count 2074831786
[  130.400340][   T23] hid (null): unknown global tag 0xd
[  130.407066][   T23] hid (null): invalid report_size 14296
[  130.416411][   T23] hid (null): unknown global tag 0xd
[  130.422626][   T23] hid (null): global environment stack underflow
[  130.435308][   T23] hid (null): bogus close delimiter
[  130.441819][   T23] hid (null): unknown global tag 0xc
[  130.458382][   T23] hid (null): unknown global tag 0xd
[  130.472864][   T23] hid (null): unknown global tag 0xe
[  130.487978][   T23] hid (null): unknown global tag 0xe
[  130.532624][   T23] usb 3-1: USB disconnect, device number 9
[  130.590402][   T13] dvb-usb: schedule remote query interval to 100 msecs.
[  130.592635][ T4236] usb 4-1: config 0 descriptor??
[  130.602820][   T13] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  130.673705][   T13] usb 5-1: USB disconnect, device number 7
[  130.707440][ T4236] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  130.740871][ T4236] dvb-usb: bulk message failed: -22 (2/0)
[  130.777522][ T4236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  130.833904][   T13] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  130.855364][ T4236] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  130.873410][ T4236] usb 4-1: media controller created
[  130.903208][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  130.961507][ T5308] loop0: detected capacity change from 0 to 256
[  131.016852][ T4236] cxusb: set interface failed
[  131.021643][ T4236] dvb-usb: bulk message failed: -22 (1/0)
[  131.087647][ T4236] DVB: Unable to find symbol mt352_attach()
[  131.111582][ T4236] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  131.365182][ T4236] rc_core: IR keymap rc-dvico-portable not found
[  131.381977][ T4236] Registered IR keymap rc-empty
[  131.398227][ T4236] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  131.450535][ T4236] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input19
[  131.508837][ T4236] dvb-usb: schedule remote query interval to 100 msecs.
[  131.539706][ T4236] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  131.570958][ T4236] usb 4-1: USB disconnect, device number 6
[  131.716211][ T4236] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  131.795123][   T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  131.914775][ T5302] loop1: detected capacity change from 0 to 40427
[  131.969044][ T5302] F2FS-fs (loop1): invalid crc value
[  132.075093][   T23] usb 1-1: Using ep0 maxpacket: 8
[  132.080533][ T5302] F2FS-fs (loop1): Found nat_bits in checkpoint
[  132.235522][ T5302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  132.244441][ T5318] loop2: detected capacity change from 0 to 40427
[  132.320452][ T5318] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  132.367444][ T5318] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  132.400814][   T23] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  132.415805][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.424579][   T23] usb 1-1: Product: syz
[  132.465113][   T23] usb 1-1: Manufacturer: syz
[  132.482038][   T23] usb 1-1: SerialNumber: syz
[  132.517424][   T23] usb 1-1: config 0 descriptor??
[  132.582784][   T23] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  132.626550][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  132.702674][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  132.748128][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.754575][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.765305][   T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  132.824699][   T23] usb 1-1: media controller created
[  132.854130][ T5348] loop1: detected capacity change from 0 to 256
[  132.865155][ T4236] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  132.922694][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.003687][ T5348] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  133.027124][   T23] cxusb: set interface failed
[  133.031875][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  133.160431][   T23] DVB: Unable to find symbol mt352_attach()
[  133.167090][   T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  133.195903][ T4236] usb 3-1: Using ep0 maxpacket: 16
[  133.231280][ T5357] cgroup2: Unknown parameter 'pids_localevents'
[  133.325381][ T4236] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.355468][   T23] rc_core: IR keymap rc-dvico-portable not found
[  133.367264][   T23] Registered IR keymap rc-empty
[  133.372777][ T4236] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  133.396009][   T23] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  133.460229][   T23] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input20
[  133.483942][   T23] dvb-usb: schedule remote query interval to 100 msecs.
[  133.515209][ T4236] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.524324][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  133.534040][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  133.549676][   T23] usb 1-1: USB disconnect, device number 10
[  133.558853][ T4236] usb 3-1: SerialNumber: syz
[  133.646553][ T5367] loop0: detected capacity change from 0 to 512
[  133.656349][ T4236] cdc_acm 3-1:1.0: skipping garbage
[  133.687681][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  133.705249][ T1111] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  133.839374][ T5367] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  133.888494][ T5367] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.955210][ T1111] usb 4-1: Using ep0 maxpacket: 8
[  134.235767][ T1111] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  134.258523][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.313470][ T1111] usb 4-1: Product: syz
[  134.343121][ T1111] usb 4-1: Manufacturer: syz
[  134.483991][   T23] usb 3-1: USB disconnect, device number 10
[  135.197408][ T5385] loop2: detected capacity change from 0 to 512
[  135.257804][ T5385] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.314: inode has both inline data and extents flags
[  135.302541][ T5385] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.314: couldn't read orphan inode 15 (err -117)
[  135.341658][ T5385] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback.
[  135.416068][ T5385] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 1769366884 > max in inode 18
[  136.059073][ T1111] usb 4-1: SerialNumber: syz
[  136.076116][ T1111] usb 4-1: config 0 descriptor??
[  136.247844][ T1111] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  136.256370][ T1111] dvb-usb: bulk message failed: -22 (2/0)
[  136.271102][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.305360][ T1111] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  136.324589][ T1111] usb 4-1: media controller created
[  136.395824][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  136.485683][ T1111] cxusb: set interface failed
[  136.490550][ T1111] dvb-usb: bulk message failed: -22 (1/0)
[  136.649210][   T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  136.797791][ T5408] loop2: detected capacity change from 0 to 512
[  136.945145][   T23] usb 5-1: Using ep0 maxpacket: 8
[  137.285841][   T23] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  137.342557][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.453986][   T23] usb 5-1: Product: syz
[  137.499994][   T23] usb 5-1: Manufacturer: syz
[  137.540641][   T23] usb 5-1: SerialNumber: syz
[  137.595783][   T23] usb 5-1: config 0 descriptor??
[  137.719902][   T23] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  137.807320][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  137.928637][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  138.047185][   T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  138.059015][ T1111] DVB: Unable to find symbol mt352_attach()
[  138.074418][ T1111] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  138.088714][ T5408] EXT4-fs (loop2): Ignoring removed nobh option
[  138.113140][   T23] usb 5-1: media controller created
[  138.247471][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.442717][ T5408] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.322: invalid block
[  138.468186][ T5408] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.322: invalid indirect mapped block 1024 (level 0)
[  138.487849][ T5408] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.322: bg 0: block 35: padding at end of block bitmap is not set
[  138.508875][ T5408] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  138.520529][ T5408] EXT4-fs (loop2): 1 truncate cleaned up
[  138.526463][ T5408] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nobh,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.
[  139.376413][ T5426] loop3: detected capacity change from 0 to 128
[  140.125383][   T23] cxusb: set interface failed
[  140.130142][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  140.255716][ T5431] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=149 (298 ns) > initial count (48 ns). Using initial count to start timer.
[  140.285275][ T1111] rc_core: IR keymap rc-dvico-portable not found
[  140.292842][ T1111] Registered IR keymap rc-empty
[  140.303950][ T1111] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  140.306957][   T23] DVB: Unable to find symbol mt352_attach()
[  140.320058][ T1111] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input21
[  140.333311][ T1111] dvb-usb: schedule remote query interval to 100 msecs.
[  140.341619][ T1111] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  140.351302][   T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  140.399999][ T5428] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  140.422039][ T1111] usb 4-1: USB disconnect, device number 7
[  140.499826][ T5428] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  140.669531][ T1111] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  140.875021][   T23] rc_core: IR keymap rc-dvico-portable not found
[  140.881522][   T23] Registered IR keymap rc-empty
[  140.932239][   T23] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1
[  140.994171][   T23] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input22
[  141.058799][   T23] dvb-usb: schedule remote query interval to 100 msecs.
[  141.094430][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  141.134379][   T23] usb 5-1: USB disconnect, device number 8
[  141.859995][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  142.333903][ T5464] loop0: detected capacity change from 0 to 128
[  142.566118][ T5464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  142.663237][ T5472] loop1: detected capacity change from 0 to 512
[  142.799209][ T5464] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  142.875186][   T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  143.865350][   T23] usb 5-1: Using ep0 maxpacket: 8
[  144.150379][ T5472] EXT4-fs (loop1): Ignoring removed nobh option
[  144.175289][   T23] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  144.224255][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.351220][ T5472] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.339: invalid block
[  144.365155][ T5472] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.339: invalid indirect mapped block 1024 (level 0)
[  144.394079][ T5472] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.339: bg 0: block 35: padding at end of block bitmap is not set
[  144.410340][ T5472] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  144.425035][ T5472] EXT4-fs (loop1): 1 truncate cleaned up
[  144.430824][ T5472] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nobh,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.
[  144.566929][   T23] usb 5-1: Product: syz
[  144.736193][   T23] usb 5-1: Manufacturer: syz
[  144.740860][   T23] usb 5-1: SerialNumber: syz
[  144.792793][   T23] usb 5-1: config 0 descriptor??
[  144.897663][   T23] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  144.946470][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  144.985829][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  145.055442][   T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  145.131255][   T23] usb 5-1: media controller created
[  145.229753][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  145.385244][   T23] cxusb: set interface failed
[  145.395073][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  145.572876][   T23] DVB: Unable to find symbol mt352_attach()
[  145.584637][   T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  145.625351][ T4224] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  145.740575][   T23] rc_core: IR keymap rc-dvico-portable not found
[  145.753549][   T23] Registered IR keymap rc-empty
[  145.761042][   T23] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  145.792632][   T23] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input23
[  145.816129][   T23] dvb-usb: schedule remote query interval to 100 msecs.
[  145.823914][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  145.857248][   T23] usb 5-1: USB disconnect, device number 9
[  145.978385][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  146.035653][ T4224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.051102][ T5505] loop0: detected capacity change from 0 to 512
[  146.060825][ T4224] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  146.109094][ T4224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.126581][ T5504] loop4: detected capacity change from 0 to 4096
[  146.152912][ T5505] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.357: inode has both inline data and extents flags
[  146.175627][ T4224] usb 3-1: config 0 descriptor??
[  146.221189][ T5504] EXT4-fs (loop4): inline encryption not supported
[  146.230948][ T5505] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.357: couldn't read orphan inode 15 (err -117)
[  146.277032][ T5504] EXT4-fs (loop4): Test dummy encryption mode enabled
[  146.351896][ T5505] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback.
[  146.379161][ T5504] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  146.422414][ T5504] System zones: 0-5
[  146.450614][ T5505] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1769366884 > max in inode 18
[  146.468123][ T5504] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  146.606876][ T5513] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  146.640035][ T5513] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.347: mark_inode_dirty error
[  146.670811][ T5513] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 49: comm syz.4.347: lblock 1 mapped to illegal pblock 49 (length 1)
[  146.711606][ T5513] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  146.787252][ T5513] EXT4-fs error (device loop4): ext4_write_dquot:6216: comm syz.4.347: Failed to commit dquot type 0
[  146.804829][ T5513] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #4: block 65: comm syz.4.347: lblock 1 mapped to illegal pblock 65 (length 1)
[  146.834233][ T5513] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  146.942376][ T5513] EXT4-fs error (device loop4): ext4_write_dquot:6216: comm syz.4.347: Failed to commit dquot type 1
[  146.997872][ T5513] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  147.105581][ T4224] usbhid 3-1:0.0: can't add hid device: -71
[  147.113061][ T4224] usbhid: probe of 3-1:0.0 failed with error -71
[  147.211004][ T4224] usb 3-1: USB disconnect, device number 11
[  147.327718][ T5513] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.347: mark_inode_dirty error
[  147.759487][ T5513] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.347: Invalid block bitmap block 2 in block_group 0
[  147.886799][ T5513] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 49: comm syz.4.347: lblock 1 mapped to illegal pblock 49 (length 1)
[  147.912111][ T5513] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  147.932753][ T5513] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  148.248330][ T4222] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  148.565548][ T4222] usb 2-1: Using ep0 maxpacket: 16
[  148.941881][ T4222] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping
[  149.041927][ T4222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.054277][ T4222] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  149.065815][ T4222] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  149.195302][ T4222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  149.215017][ T4222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  149.223070][ T4222] usb 2-1: SerialNumber: syz
[  149.296220][ T4222] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  149.304110][ T4222] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  149.325054][ T4222] cdc_acm: probe of 2-1:1.0 failed with error -22
[  149.425255][ T1111] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  149.556950][   T21] usb 2-1: USB disconnect, device number 6
[  149.611883][ T5530] loop0: detected capacity change from 0 to 40427
[  149.665098][ T1111] usb 3-1: Using ep0 maxpacket: 8
[  149.687798][ T5530] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  149.734188][ T5530] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  149.904838][ T5545] loop4: detected capacity change from 0 to 512
[  152.745686][ T5545] EXT4-fs (loop4): Ignoring removed nobh option
[  153.065304][ T4221] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  153.073775][ T1111] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  153.086769][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.095572][ T1111] usb 3-1: Product: syz
[  153.264359][ T5545] EXT4-fs: failed to create workqueue
[  153.270222][ T5545] EXT4-fs (loop4): mount failed
[  154.063049][ T4187] Bluetooth: hci4: link tx timeout
[  154.067696][ T1111] usb 3-1: Manufacturer: syz
[  154.068506][ T4187] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  154.072856][ T1111] usb 3-1: SerialNumber: syz
[  154.085733][ T4187] Bluetooth: hci4: link tx timeout
[  154.091360][ T4187] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  154.264976][ T5556] loop0: detected capacity change from 0 to 512
[  154.616787][ T1111] usb 3-1: config 0 descriptor??
[  154.680359][ T1111] usb 3-1: can't set config #0, error -71
[  154.688344][ T1111] usb 3-1: USB disconnect, device number 12
[  154.812297][ T5556] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.363: iget: bad i_size value: 38620345925642
[  155.249222][ T5556] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.363: couldn't read orphan inode 15 (err -117)
[  155.576102][ T5556] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  156.454809][ T4224] Bluetooth: hci5: command 0x0409 tx timeout
[  156.483456][ T4224] Bluetooth: hci4: command 0x0406 tx timeout
[  156.557186][ T5581] loop4: detected capacity change from 0 to 512
[  156.785380][ T5581] EXT4-fs (loop4): Ignoring removed nobh option
[  156.843562][ T5592] loop1: detected capacity change from 0 to 256
[  156.870024][ T5581] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.368: invalid block
[  156.883903][ T5581] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.368: invalid indirect mapped block 1024 (level 0)
[  156.898765][ T5581] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.368: bg 0: block 35: padding at end of block bitmap is not set
[  156.913409][ T5581] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  156.923136][ T5581] EXT4-fs (loop4): 1 truncate cleaned up
[  156.928935][ T5581] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nobh,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.
[  157.000711][ T5558] chnl_net:caif_netlink_parms(): no params data found
[  157.610300][ T5595] device syzkaller0 entered promiscuous mode
[  157.981347][ T4770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.089468][ T4770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.140064][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.157975][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.179517][ T5558] device bridge_slave_0 entered promiscuous mode
[  158.229758][ T4770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.272627][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.291413][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.312842][ T5558] device bridge_slave_1 entered promiscuous mode
[  158.352824][ T4770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.462864][ T5558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.496031][   T23] Bluetooth: hci5: command 0x041b tx timeout
[  158.539361][ T5558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.753330][ T5558] team0: Port device team_slave_0 added
[  158.794637][ T5558] team0: Port device team_slave_1 added
[  158.984147][ T5558] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.027703][ T5558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.058642][ T5629] loop0: detected capacity change from 0 to 256
[  159.137596][ T5558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.197623][ T5558] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.275033][ T5558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.313476][ T4184] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  159.354395][ T4184] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  159.424434][ T5558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.783185][ T5558] device hsr_slave_0 entered promiscuous mode
[  159.831810][ T5558] device hsr_slave_1 entered promiscuous mode
[  159.848579][ T5558] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.864997][ T5558] Cannot create hsr debugfs directory
[  160.413971][ T5558] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  160.473027][ T5651] loop1: detected capacity change from 0 to 4096
[  160.506913][ T5558] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  160.527983][ T5651] EXT4-fs (loop1): Unrecognized mount option "audit" or missing value
[  160.548477][ T5558] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  160.620895][ T5558] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  160.745821][   T23] Bluetooth: hci5: command 0x040f tx timeout
[  161.716306][ T5558] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.735269][ T4221] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  161.752461][ T4770] device hsr_slave_0 left promiscuous mode
[  161.766197][ T4770] device hsr_slave_1 left promiscuous mode
[  161.783172][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.805539][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.828308][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.845146][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.853196][ T4770] device bridge_slave_1 left promiscuous mode
[  161.874521][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.920992][ T4770] device bridge_slave_0 left promiscuous mode
[  161.937516][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.985176][ T4221] usb 2-1: Using ep0 maxpacket: 16
[  162.013269][ T4770] device veth1_macvtap left promiscuous mode
[  162.036701][ T4770] device veth0_macvtap left promiscuous mode
[  162.053087][ T4770] device veth1_vlan left promiscuous mode
[  162.063428][ T4770] device veth0_vlan left promiscuous mode
[  162.111455][ T4221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.135737][ T4221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.162685][ T4221] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  162.202267][ T4221] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  162.231663][ T4221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.259752][ T4221] usb 2-1: config 0 descriptor??
[  162.521509][ T4770] team0 (unregistering): Port device team_slave_1 removed
[  162.540793][ T4770] team0 (unregistering): Port device team_slave_0 removed
[  162.557174][ T4770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.581592][ T4770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.687210][ T4770] bond0 (unregistering): Released all slaves
[  162.756835][ T4221] appleir 0003:05AC:8241.0004: item fetching failed at offset 3/5
[  162.765768][ T4221] appleir 0003:05AC:8241.0004: parse failed
[  162.771743][ T4221] appleir: probe of 0003:05AC:8241.0004 failed with error -22
[  162.824307][ T5558] 8021q: adding VLAN 0 to HW filter on device team0
[  162.831259][ T4224] Bluetooth: hci5: command 0x0419 tx timeout
[  162.852116][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.876325][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.916216][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.933823][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.969019][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.976187][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.004334][   T23] usb 2-1: USB disconnect, device number 7
[  163.055683][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  163.069106][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  163.094253][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.103373][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.110522][ T4949] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.160372][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.206027][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.215447][ T4236] Bluetooth: hci0: command 0x0409 tx timeout
[  163.245651][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  163.273155][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  163.288497][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  163.297894][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.331325][ T5656] chnl_net:caif_netlink_parms(): no params data found
[  163.389994][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.422911][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.434995][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.473354][ T5681] device syzkaller0 entered promiscuous mode
[  163.495692][  T716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.511756][  T716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.689193][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.797780][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.804894][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.885659][ T5656] device bridge_slave_0 entered promiscuous mode
[  163.952644][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.962349][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.986240][ T5656] device bridge_slave_1 entered promiscuous mode
[  164.098408][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.150276][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.159730][ T4224] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  164.241444][ T5656] team0: Port device team_slave_0 added
[  164.269118][ T5656] team0: Port device team_slave_1 added
[  164.390104][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.405473][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.463915][ T4224] usb 3-1: Using ep0 maxpacket: 8
[  164.535297][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.579952][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.605781][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.667996][ T5558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.704386][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.712720][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.797800][ T4224] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  164.812671][ T4224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.835145][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.846191][ T4224] usb 3-1: Product: syz
[  164.850401][ T4224] usb 3-1: Manufacturer: syz
[  164.889064][ T5733] loop1: detected capacity change from 0 to 256
[  164.898947][ T4224] usb 3-1: SerialNumber: syz
[  164.928571][ T4224] usb 3-1: config 0 descriptor??
[  164.978446][ T4224] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  165.004716][ T4224] dvb-usb: bulk message failed: -22 (2/0)
[  165.042874][ T4224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  165.068833][ T5656] device hsr_slave_0 entered promiscuous mode
[  165.084276][ T4224] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  165.123809][ T4224] usb 3-1: media controller created
[  165.182096][ T4224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  165.254611][ T5656] device hsr_slave_1 entered promiscuous mode
[  165.267221][ T5656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.283086][ T4224] cxusb: set interface failed
[  165.292073][ T5714] loop4: detected capacity change from 0 to 40427
[  165.295555][ T4224] dvb-usb: bulk message failed: -22 (1/0)
[  165.305257][ T4222] Bluetooth: hci0: command 0x041b tx timeout
[  165.311913][ T5656] Cannot create hsr debugfs directory
[  165.380023][ T5714] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  165.410518][ T5714] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  165.443377][ T4224] DVB: Unable to find symbol mt352_attach()
[  165.455065][ T4224] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  165.515341][ T5714] F2FS-fs (loop4): invalid crc_offset: 33558524
[  165.610972][ T5714] F2FS-fs (loop4): Found nat_bits in checkpoint
[  165.745137][ T4224] rc_core: IR keymap rc-dvico-portable not found
[  165.764159][ T4224] Registered IR keymap rc-empty
[  165.776064][ T4224] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  165.783361][  T716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  165.797838][ T5714] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  165.809099][ T5761] loop1: detected capacity change from 0 to 128
[  165.815346][ T5714] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  165.848715][  T716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.857257][ T4224] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input25
[  165.921079][ T4224] dvb-usb: schedule remote query interval to 100 msecs.
[  165.960200][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.969642][ T4224] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  165.985725][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  166.050285][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.057983][ T4224] usb 3-1: USB disconnect, device number 13
[  166.071149][ T5765] loop2: detected capacity change from 0 to 2048
[  166.145674][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  166.200089][ T5558] device veth0_vlan entered promiscuous mode
[  166.258963][ T5765] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.303198][ T5558] device veth1_vlan entered promiscuous mode
[  166.304192][ T5765] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.333841][ T4224] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  166.400048][ T5558] device veth0_macvtap entered promiscuous mode
[  166.410585][ T5558] device veth1_macvtap entered promiscuous mode
[  166.440936][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  166.454824][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  166.535095][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  166.596573][ T5558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.618514][ T5558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.633322][ T5558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.793958][ T5558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.125873][ T5558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.375092][ T4236] Bluetooth: hci0: command 0x040f tx timeout
[  167.423916][ T5558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.433898][ T5558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.454987][ T5558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.556909][ T5558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.625957][ T5656] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  167.647899][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  167.657882][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  167.671070][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.683310][ T5558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.705921][ T5558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.725005][ T5558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.746486][ T5558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.766743][ T5558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.791472][ T5558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.811804][ T5558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.832745][ T5558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.874296][ T5558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.930146][ T5656] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  167.950507][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  167.958768][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  167.979812][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.016711][ T5558] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.058648][ T5558] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.074299][ T5558] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.083376][ T5558] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.101085][ T5656] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  168.129310][ T5656] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  168.245266][ T1108] usb 2-1: Using ep0 maxpacket: 8
[  168.392917][ T5008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.425045][ T5008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.453616][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  168.543864][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.551893][ T4769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.561509][ T4769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.605320][ T1108] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  168.615122][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.623319][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.632432][ T1108] usb 2-1: Product: syz
[  168.642404][ T1108] usb 2-1: Manufacturer: syz
[  168.657442][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  168.681860][ T1108] usb 2-1: SerialNumber: syz
[  168.690152][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.714226][ T1108] usb 2-1: config 0 descriptor??
[  168.728533][ T5656] 8021q: adding VLAN 0 to HW filter on device team0
[  168.770665][ T1108] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  168.802398][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  168.818743][ T1108] dvb-usb: bulk message failed: -22 (2/0)
[  168.835805][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  168.859289][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  168.894916][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.902243][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.935557][ T1108] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  168.963372][ T1108] usb 2-1: media controller created
[  168.972628][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.039821][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.070766][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.090426][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.102253][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.109414][ T4951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.158505][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.240091][ T1108] cxusb: set interface failed
[  169.244851][ T1108] dvb-usb: bulk message failed: -22 (1/0)
[  169.246888][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.332271][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.377283][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.409828][ T1108] DVB: Unable to find symbol mt352_attach()
[  169.422840][ T1108] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  169.428393][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.463027][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  169.490891][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[  169.497647][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.532142][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.561771][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.581791][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.600106][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  169.776191][ T1108] rc_core: IR keymap rc-dvico-portable not found
[  169.782698][ T1108] Registered IR keymap rc-empty
[  169.796433][ T1108] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  169.883531][ T5837] loop4: detected capacity change from 0 to 512
[  169.939178][ T1108] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input26
[  169.979009][ T5837] EXT4-fs (loop4): Ignoring removed nobh option
[  170.249961][ T5837] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.404: invalid block
[  170.263611][ T5837] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.404: invalid indirect mapped block 1024 (level 0)
[  170.282334][ T5837] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.404: bg 0: block 35: padding at end of block bitmap is not set
[  170.305822][ T5837] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  170.320290][ T5837] EXT4-fs (loop4): 1 truncate cleaned up
[  170.326173][ T5837] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nobh,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.
[  170.712514][ T1108] dvb-usb: schedule remote query interval to 100 msecs.
[  171.119111][ T5819] loop2: detected capacity change from 0 to 40427
[  171.670077][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  171.683611][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  171.727405][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.871316][ T1108] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  171.889124][ T1108] usb 2-1: USB disconnect, device number 8
[  172.086608][ T1108] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  172.276800][ T4770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.295835][ T5869] loop4: detected capacity change from 0 to 1024
[  172.365243][ T5869] EXT4-fs (loop4): Ignoring removed bh option
[  172.468455][ T5869] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  172.551786][ T5892] netlink: 'syz.1.411': attribute type 1 has an invalid length.
[  172.691812][ T4770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.978303][ T4770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.102498][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.117201][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.140267][ T5915] loop2: detected capacity change from 0 to 512
[  173.191889][ T5915] EXT4-fs (loop2): Ignoring removed nobh option
[  173.201897][ T4770] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.223210][ T5915] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.413: invalid block
[  173.246677][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.265909][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.280152][ T5656] device veth0_vlan entered promiscuous mode
[  173.291718][ T5915] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.413: invalid indirect mapped block 1024 (level 0)
[  173.333943][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.377537][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.382985][ T5922] netlink: 'syz.1.415': attribute type 2 has an invalid length.
[  173.392939][ T4226] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  173.412887][ T5915] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.413: bg 0: block 35: padding at end of block bitmap is not set
[  173.441220][ T5656] device veth1_vlan entered promiscuous mode
[  173.558494][ T5915] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  173.635175][ T4226] usb 6-1: Using ep0 maxpacket: 8
[  173.642440][ T5915] EXT4-fs (loop2): 1 truncate cleaned up
[  173.684818][ T5915] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nobh,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.
[  173.769637][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  173.804067][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  174.238894][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  174.283821][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  174.341740][ T5656] device veth0_macvtap entered promiscuous mode
[  174.391163][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  174.422075][ T5656] device veth1_macvtap entered promiscuous mode
[  174.539574][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.635399][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.683698][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.743162][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.756655][ T4226] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  174.794494][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.812938][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.908477][ T5941] loop1: detected capacity change from 0 to 512
[  175.092968][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.188201][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.302286][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.409954][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.527139][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.661921][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.696266][ T5941] EXT4-fs (loop1): Ignoring removed nobh option
[  175.874180][ T5941] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.417: invalid block
[  175.891083][ T5941] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.417: invalid indirect mapped block 1024 (level 0)
[  175.909682][ T5941] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.417: bg 0: block 35: padding at end of block bitmap is not set
[  175.935054][ T5941] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  175.947180][ T5941] EXT4-fs (loop1): 1 truncate cleaned up
[  175.952918][ T5941] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nobh,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.
[  176.242454][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.334136][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.517590][ T4226] usb 6-1: Product: syz
[  176.521834][ T4226] usb 6-1: Manufacturer: syz
[  176.526844][ T4226] usb 6-1: SerialNumber: syz
[  176.614173][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.470956][ T4226] usb 6-1: config 0 descriptor??
[  177.495168][ T4226] usb 6-1: can't set config #0, error -71
[  177.546700][ T4226] usb 6-1: USB disconnect, device number 2
[  177.566290][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.628137][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.699869][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.750047][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.775748][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.785994][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.796555][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.807907][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.834698][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  177.857174][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.879265][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.906157][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.997881][ T5656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.071856][ T5656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.096466][ T5656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.132053][ T5656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.800828][  T716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.858933][  T716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.994215][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  179.096392][ T5983] futex_wake_op: syz.4.425 tries to shift op by 144; fix this program
[  179.120427][ T4927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.255458][   T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  179.382387][ T4927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.585558][   T21] usb 6-1: Using ep0 maxpacket: 8
[  179.623529][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  179.756399][   T21] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  179.937152][   T21] usb 6-1: config 179 has no interface number 0
[  179.945477][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  179.957084][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  179.969212][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  179.983696][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  180.004854][ T5988] loop1: detected capacity change from 0 to 512
[  180.045110][   T21] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  180.092205][   T21] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  180.149577][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.185236][ T5988] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  180.195635][ T5980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  180.267631][ T5988] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  180.313141][ T5988] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  180.363709][ T5988] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  180.401582][ T5988] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  180.456438][ T5988] EXT4-fs (loop1): orphan cleanup on readonly fs
[  180.527799][ T4222] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input27
[  180.576226][ T5988] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.426: bg 0: block 34: padding at end of block bitmap is not set
[  180.666176][ T5988] Quota error (device loop1): write_blk: dquota write failed
[  180.685811][ T5988] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  180.716662][ T4222] usb 6-1: USB disconnect, device number 3
[  180.725133][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  180.730600][ T5988] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.426: Failed to acquire dquot type 1
[  180.733516][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  180.810128][ T5988] EXT4-fs (loop1): 1 truncate cleaned up
[  180.852122][ T4222] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  180.891822][ T5988] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,data_err=ignore,sysvgroups,,errors=continue. Quota mode: writeback.
[  181.000532][ T5988] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.426: deleted inode referenced: 12
[  181.305052][ T5933] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  181.314692][ T6009] netlink: 76 bytes leftover after parsing attributes in process `syz.1.429'.
[  181.422839][ T6009] device syzkaller0 entered promiscuous mode
[  181.575071][ T5933] usb 5-1: Using ep0 maxpacket: 8
[  181.875302][ T5933] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  181.885466][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.893558][ T5933] usb 5-1: Product: syz
[  181.960953][ T5933] usb 5-1: Manufacturer: syz
[  181.991715][ T5933] usb 5-1: SerialNumber: syz
[  182.043803][ T5933] usb 5-1: config 0 descriptor??
[  182.090270][ T4770] device hsr_slave_0 left promiscuous mode
[  182.101222][ T4770] device hsr_slave_1 left promiscuous mode
[  182.114429][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.137278][ T5933] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  182.160294][ T5933] dvb-usb: bulk message failed: -22 (2/0)
[  182.195998][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  182.245411][ T5933] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  182.283074][ T5933] usb 5-1: media controller created
[  182.294225][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.405382][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.464002][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.515094][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.532043][ T6053] loop5: detected capacity change from 0 to 512
[  182.538974][ T5933] cxusb: set interface failed
[  182.543698][ T5933] dvb-usb: bulk message failed: -22 (1/0)
[  182.596277][ T4770] device bridge_slave_1 left promiscuous mode
[  182.602579][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.684312][ T6053] EXT4-fs (loop5): orphan cleanup on readonly fs
[  182.694815][ T6016] loop6: detected capacity change from 0 to 40427
[  182.710759][ T4770] device bridge_slave_0 left promiscuous mode
[  182.719385][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.732817][ T6053] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  182.751643][ T6016] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  182.764440][ T5933] DVB: Unable to find symbol mt352_attach()
[  182.774687][ T5933] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  182.810470][ T4770] device veth1_macvtap left promiscuous mode
[  182.825961][ T6016] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  182.857484][ T4770] device veth0_macvtap left promiscuous mode
[  182.863632][ T4770] device veth1_vlan left promiscuous mode
[  182.866620][ T6053] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  182.889391][ T6016] F2FS-fs (loop6): invalid crc value
[  182.933264][ T6053] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.435: couldn't read orphan inode 26 (err -116)
[  182.953692][ T4770] device veth0_vlan left promiscuous mode
[  182.966538][ T6016] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  183.010959][ T6053] EXT4-fs (loop5): Remounting filesystem read-only
[  183.025064][ T5933] rc_core: IR keymap rc-dvico-portable not found
[  183.045092][ T5933] Registered IR keymap rc-empty
[  183.063862][ T6053] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback.
[  183.093009][ T6065] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  183.106729][ T5933] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  183.184277][ T5933] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input28
[  183.267549][ T5933] dvb-usb: schedule remote query interval to 100 msecs.
[  183.304674][ T6016] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  183.313101][ T5933] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  183.332512][ T6016] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  183.355543][ T6068] loop4: detected capacity change from 0 to 4096
[  183.383004][ T6068] EXT4-fs (loop4): Unrecognized mount option "audit" or missing value
[  183.411546][ T5933] usb 5-1: USB disconnect, device number 10
[  183.424537][ T4221] dvb-usb: bulk message failed: -22 (1/0)
[  183.474643][ T6016] attempt to access beyond end of device
[  183.474643][ T6016] loop6: rw=2049, want=53288, limit=40427
[  183.526214][ T5933] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  184.011425][ T5656] attempt to access beyond end of device
[  184.011425][ T5656] loop6: rw=2049, want=45104, limit=40427
[  184.593124][ T4770] team0 (unregistering): Port device team_slave_1 removed
[  184.624557][ T4770] team0 (unregistering): Port device team_slave_0 removed
[  184.697655][ T6074] loop6: detected capacity change from 0 to 512
[  184.704656][ T4770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.773149][ T4770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.801114][ T6074] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  184.855397][ T6074] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  186.115711][ T4770] bond0 (unregistering): Released all slaves
[  186.519921][ T6090] loop2: detected capacity change from 0 to 256
[  186.602676][ T6094] netlink: 76 bytes leftover after parsing attributes in process `syz.1.444'.
[  186.668059][ T6097] device syzkaller0 entered promiscuous mode
[  187.118880][ T6110] loop1: detected capacity change from 0 to 4096
[  187.210110][ T6110] EXT4-fs (loop1): Unrecognized mount option "audit" or missing value
[  187.561330][ T6119] xt_CT: You must specify a L4 protocol and not use inversions on it
[  187.575442][ T4227] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  188.235097][ T4227] usb 7-1: Using ep0 maxpacket: 8
[  188.279639][ T6130] loop4: detected capacity change from 0 to 512
[  188.335126][ T6130] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  188.378037][ T6130] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  188.394980][ T6130] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.451: bad orphan inode 1048591
[  188.412959][ T6130] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nombcache,errors=continue,,errors=continue. Quota mode: writeback.
[  188.491083][ T6137] loop2: detected capacity change from 0 to 512
[  188.515831][ T4227] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  188.566979][ T4227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.607749][ T4227] usb 7-1: Product: syz
[  188.611988][ T4227] usb 7-1: Manufacturer: syz
[  188.666833][ T4227] usb 7-1: SerialNumber: syz
[  188.703004][ T6137] EXT4-fs (loop2): Ignoring removed nobh option
[  188.714396][ T4227] usb 7-1: config 0 descriptor??
[  188.721017][ T6139] loop4: detected capacity change from 0 to 4096
[  188.759753][ T6137] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.452: invalid block
[  188.797431][ T4227] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  188.820645][ T4227] dvb-usb: bulk message failed: -22 (2/0)
[  188.836961][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  188.845636][ T6139] EXT4-fs (loop4): Unrecognized mount option "audit" or missing value
[  188.875401][ T4227] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  188.904833][ T4227] usb 7-1: media controller created
[  188.908119][ T6137] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.452: invalid indirect mapped block 1024 (level 0)
[  188.994492][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  189.030941][ T6137] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.452: bg 0: block 35: padding at end of block bitmap is not set
[  189.095556][ T6137] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  189.130044][ T6137] EXT4-fs (loop2): 1 truncate cleaned up
[  189.143536][ T6137] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nobh,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none.
[  189.175389][ T4227] cxusb: set interface failed
[  189.182563][ T4227] dvb-usb: bulk message failed: -22 (1/0)
[  189.482085][ T6154] xt_CT: You must specify a L4 protocol and not use inversions on it
[  189.960476][ T4227] DVB: Unable to find symbol mt352_attach()
[  189.966505][ T4227] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  190.105182][ T4227] rc_core: IR keymap rc-dvico-portable not found
[  190.111699][ T4227] Registered IR keymap rc-empty
[  190.125788][ T4227] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  190.166082][ T6165] netlink: 76 bytes leftover after parsing attributes in process `syz.4.457'.
[  190.196172][ T4227] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input29
[  190.225981][ T6165] device syzkaller0 entered promiscuous mode
[  190.253790][ T4227] dvb-usb: schedule remote query interval to 100 msecs.
[  190.315824][ T4227] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  190.389638][ T4227] usb 7-1: USB disconnect, device number 2
[  190.529703][ T4227] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  191.135331][ T1108] Bluetooth: hci3: command 0x0406 tx timeout
[  191.143279][ T1108] Bluetooth: hci1: command 0x0406 tx timeout
[  191.179604][ T1108] Bluetooth: hci2: command 0x0406 tx timeout
[  191.222134][ T6188] loop1: detected capacity change from 0 to 4096
[  191.264164][ T6188] EXT4-fs (loop1): Unrecognized mount option "audit" or missing value
[  191.631179][ T6196] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.747509][ T6220] loop4: detected capacity change from 0 to 16
[  192.867168][ T6220] erofs: (device loop4): mounted with root inode @ nid 36.
[  192.879712][ T6217] loop6: detected capacity change from 0 to 4096
[  193.012616][ T4236] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  193.021833][ T6217] EXT4-fs (loop6): Unrecognized mount option "audit" or missing value
[  193.160551][ T6227] netlink: 76 bytes leftover after parsing attributes in process `syz.4.470'.
[  193.234174][ T6227] device syzkaller0 entered promiscuous mode
[  193.429638][ T4236] usb 2-1: Using ep0 maxpacket: 8
[  193.909693][ T4236] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  193.946050][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.954242][ T4236] usb 2-1: Product: syz
[  193.967724][ T4236] usb 2-1: Manufacturer: syz
[  193.972574][ T4236] usb 2-1: SerialNumber: syz
[  194.119074][ T4236] usb 2-1: config 0 descriptor??
[  194.179173][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.185641][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.197330][ T4236] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  194.241856][ T4236] dvb-usb: bulk message failed: -22 (2/0)
[  194.266022][ T4236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  194.378188][ T4236] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  194.394764][ T6239] loop4: detected capacity change from 0 to 4096
[  194.405756][ T4236] usb 2-1: media controller created
[  194.437077][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  194.471595][ T6239] EXT4-fs (loop4): Unrecognized mount option "audit" or missing value
[  194.691474][ T4236] cxusb: set interface failed
[  194.696298][ T4236] dvb-usb: bulk message failed: -22 (1/0)
[  194.835409][ T6252] xt_CT: You must specify a L4 protocol and not use inversions on it
[  194.862668][ T4236] DVB: Unable to find symbol mt352_attach()
[  194.890165][ T4236] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  195.467607][ T6261] loop4: detected capacity change from 0 to 512
[  195.475017][ T4236] rc_core: IR keymap rc-dvico-portable not found
[  195.483514][ T4236] Registered IR keymap rc-empty
[  195.495628][ T4236] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  195.510537][ T6259] loop5: detected capacity change from 0 to 512
[  195.546120][ T4236] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input30
[  195.578982][ T6261] EXT4-fs (loop4): Ignoring removed oldalloc option
[  195.590787][ T6261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  195.641986][ T4236] dvb-usb: schedule remote query interval to 100 msecs.
[  195.694482][ T6259] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback.
[  195.707676][ T6261] EXT4-fs (loop4): 1 truncate cleaned up
[  195.707962][ T4236] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  195.713370][ T6261] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  195.786963][ T6259] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.823017][ T4236] usb 2-1: USB disconnect, device number 9
[  196.006419][ T4236] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  196.162760][ T6274] loop6: detected capacity change from 0 to 256
[  196.552206][ T6274] FAT-fs (loop6): Directory bread(block 64) failed
[  196.586496][ T6274] FAT-fs (loop6): Directory bread(block 65) failed
[  196.683911][ T6274] FAT-fs (loop6): Directory bread(block 66) failed
[  196.763259][ T6274] FAT-fs (loop6): Directory bread(block 67) failed
[  196.834250][ T6274] FAT-fs (loop6): Directory bread(block 68) failed
[  196.891643][ T6274] FAT-fs (loop6): Directory bread(block 69) failed
[  196.953598][ T6274] FAT-fs (loop6): Directory bread(block 70) failed
[  197.011852][ T6274] FAT-fs (loop6): Directory bread(block 71) failed
[  197.089874][ T6274] FAT-fs (loop6): Directory bread(block 72) failed
[  197.183485][ T6274] FAT-fs (loop6): Directory bread(block 73) failed
[  197.282004][ T6290] loop5: detected capacity change from 0 to 4096
[  197.334417][ T6300] netlink: 76 bytes leftover after parsing attributes in process `syz.1.483'.
[  197.397117][ T6300] device syzkaller0 entered promiscuous mode
[  197.458998][ T6290] EXT4-fs (loop5): Unrecognized mount option "audit" or missing value
[  198.489455][ T6315] ipt_CLUSTERIP: Please specify destination IP
[  198.555514][ T6324] xt_CT: You must specify a L4 protocol and not use inversions on it
[  198.569722][ T5933] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  199.195452][ T6331] netlink: 'syz.5.487': attribute type 4 has an invalid length.
[  199.225043][ T5933] usb 5-1: Using ep0 maxpacket: 8
[  199.507931][ T5933] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  199.527207][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.567367][ T5933] usb 5-1: Product: syz
[  199.571700][ T5933] usb 5-1: Manufacturer: syz
[  199.623989][ T5933] usb 5-1: SerialNumber: syz
[  199.663530][ T6339] loop5: detected capacity change from 0 to 256
[  199.670359][ T5933] usb 5-1: config 0 descriptor??
[  199.732415][ T5933] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  199.769312][ T5933] dvb-usb: bulk message failed: -22 (2/0)
[  199.786237][ T6339] FAT-fs (loop5): Directory bread(block 64) failed
[  199.792848][ T6339] FAT-fs (loop5): Directory bread(block 65) failed
[  199.820397][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  199.840052][ T6339] FAT-fs (loop5): Directory bread(block 66) failed
[  199.851242][ T6339] FAT-fs (loop5): Directory bread(block 67) failed
[  199.863896][ T6339] FAT-fs (loop5): Directory bread(block 68) failed
[  199.871260][ T5933] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  199.887808][ T6339] FAT-fs (loop5): Directory bread(block 69) failed
[  199.894464][ T6339] FAT-fs (loop5): Directory bread(block 70) failed
[  199.907747][ T5933] usb 5-1: media controller created
[  199.943604][ T6339] FAT-fs (loop5): Directory bread(block 71) failed
[  199.961753][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.975312][ T6339] FAT-fs (loop5): Directory bread(block 72) failed
[  199.992199][ T6339] FAT-fs (loop5): Directory bread(block 73) failed
[  200.063241][ T5933] cxusb: set interface failed
[  200.068095][ T5933] dvb-usb: bulk message failed: -22 (1/0)
[  200.203281][ T5933] DVB: Unable to find symbol mt352_attach()
[  200.221845][ T5933] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  200.919047][ T6333] loop1: detected capacity change from 0 to 40427
[  201.025020][ T5933] rc_core: IR keymap rc-dvico-portable not found
[  201.031427][ T5933] Registered IR keymap rc-empty
[  201.049905][ T5933] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  201.080129][ T6333] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  201.106151][ T6333] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  201.156691][ T5933] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input31
[  201.185905][ T6333] F2FS-fs (loop1): invalid crc value
[  201.213041][ T5933] dvb-usb: schedule remote query interval to 100 msecs.
[  201.253751][ T6333] F2FS-fs (loop1): Found nat_bits in checkpoint
[  201.275322][ T5933] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  201.350381][ T5933] usb 5-1: USB disconnect, device number 11
[  201.522337][ T6333] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  201.546388][ T5933] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  201.585072][ T6333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  201.720066][ T6370] loop5: detected capacity change from 0 to 512
[  202.725070][ T6370] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.494: inode has both inline data and extents flags
[  202.800493][ T6370] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.494: couldn't read orphan inode 15 (err -117)
[  202.871699][ T6370] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback.
[  202.905842][ T4946] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  202.949472][ T4946] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  202.991034][ T6376] netlink: 76 bytes leftover after parsing attributes in process `syz.4.496'.
[  203.003411][ T6377] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 1769366884 > max in inode 18
[  203.023669][ T6376] device syzkaller0 entered promiscuous mode
[  203.704139][ T6396] loop1: detected capacity change from 0 to 512
[  203.739391][ T6396] EXT4-fs (loop1): Ignoring removed oldalloc option
[  203.769902][ T6396] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  203.855819][ T6396] EXT4-fs (loop1): 1 truncate cleaned up
[  203.874812][ T6396] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  206.905798][   T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  207.106066][ T6430] netlink: 76 bytes leftover after parsing attributes in process `syz.5.509'.
[  207.124257][ T6430] device syzkaller0 entered promiscuous mode
[  207.155604][   T23] usb 3-1: Using ep0 maxpacket: 8
[  207.315050][ T4173] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  207.636698][   T23] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  207.646345][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.654380][   T23] usb 3-1: Product: syz
[  207.659096][   T23] usb 3-1: Manufacturer: syz
[  207.663726][   T23] usb 3-1: SerialNumber: syz
[  207.675275][ T4173] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.692007][ T4173] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  207.705704][   T23] usb 3-1: config 0 descriptor??
[  207.711970][ T4173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.437150][   T23] usb 3-1: can't set config #0, error -71
[  208.466008][   T23] usb 3-1: USB disconnect, device number 14
[  208.559147][ T4173] usb 7-1: config 0 descriptor??
[  208.717976][ T6458] device syzkaller0 entered promiscuous mode
[  208.737277][ T6462] loop5: detected capacity change from 0 to 512
[  208.780447][ T6462] EXT4-fs (loop5): Ignoring removed oldalloc option
[  208.825971][ T6462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  208.879252][ T6462] EXT4-fs (loop5): 1 truncate cleaned up
[  208.899177][ T6462] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  209.036861][ T4173] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  209.134088][ T4173] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0005/input/input32
[  210.386425][ T6478] netlink: 76 bytes leftover after parsing attributes in process `syz.4.521'.
[  211.090191][ T4173] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  211.111547][ T4173] usb 7-1: USB disconnect, device number 3
[  211.117799][ T4227] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  211.475325][ T6498] fido_id[6498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  212.263348][ T6508] loop6: detected capacity change from 0 to 512
[  212.272655][ T5933] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  212.325295][ T4227] usb 2-1: unable to read config index 0 descriptor/all
[  212.332321][ T4227] usb 2-1: can't read configurations, error -71
[  212.413365][ T6516] device syzkaller0 entered promiscuous mode
[  212.447129][ T6508] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  212.481491][ T6508] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  212.515085][ T5933] usb 6-1: Using ep0 maxpacket: 8
[  212.795267][ T5933] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  212.810664][ T4227] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  212.824033][ T6534] loop2: detected capacity change from 0 to 512
[  212.835165][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.844553][ T5933] usb 6-1: Product: syz
[  212.859457][ T5933] usb 6-1: Manufacturer: syz
[  212.864357][ T5933] usb 6-1: SerialNumber: syz
[  212.872425][ T5933] usb 6-1: config 0 descriptor??
[  212.882095][ T6534] EXT4-fs (loop2): Ignoring removed oldalloc option
[  212.890306][ T6534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  212.937231][ T5933] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  212.950467][ T5933] dvb-usb: bulk message failed: -22 (2/0)
[  212.959040][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  212.969735][ T6534] EXT4-fs (loop2): 1 truncate cleaned up
[  212.977592][ T6534] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  213.015308][ T5933] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  213.030375][ T5933] usb 6-1: media controller created
[  213.053018][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  213.165318][ T5933] cxusb: set interface failed
[  213.172214][ T5933] dvb-usb: bulk message failed: -22 (1/0)
[  213.195375][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.251546][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.029677][ T6555] loop4: detected capacity change from 0 to 512
[  214.082858][ T6555] EXT4-fs (loop4): Ignoring removed oldalloc option
[  214.125396][ T6555] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  214.232290][ T6555] EXT4-fs (loop4): 1 truncate cleaned up
[  214.246464][ T6555] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  214.285070][ T5933] DVB: Unable to find symbol mt352_attach()
[  214.291224][ T5933] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  214.300142][ T4227] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  214.309742][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.277129][ T4227] usb 2-1: config 0 descriptor??
[  217.141595][ T4227] usbhid 2-1:0.0: can't add hid device: -71
[  217.171304][ T4227] usbhid: probe of 2-1:0.0 failed with error -71
[  217.223239][ T4227] usb 2-1: USB disconnect, device number 11
[  217.395159][ T5933] rc_core: IR keymap rc-dvico-portable not found
[  217.402211][ T5933] Registered IR keymap rc-empty
[  217.478126][ T5933] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  217.505938][ T6583] device syzkaller0 entered promiscuous mode
[  217.555162][ T5933] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input33
[  217.634543][ T5933] dvb-usb: schedule remote query interval to 100 msecs.
[  217.663447][ T5933] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  217.726752][ T5933] usb 6-1: USB disconnect, device number 4
[  218.606987][ T5933] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  218.784434][ T6614] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  218.801109][ T6614] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  218.966145][ T6622] loop1: detected capacity change from 0 to 512
[  220.110701][ T6622] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.548: inode #1: comm syz.1.548: iget: illegal inode #
[  220.130552][ T6622] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.548: error while reading EA inode 1 err=-117
[  220.199186][ T6622] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  220.286936][ T6622] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.548: inode #1: comm syz.1.548: iget: illegal inode #
[  220.333225][ T6622] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.548: error while reading EA inode 1 err=-117
[  220.372109][ T6622] EXT4-fs (loop1): 1 orphan inode deleted
[  220.378281][ T5933] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  220.392555][ T6622] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,noblock_validity,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005a,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  220.472451][ T6622] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.548: deleted inode referenced: 15
[  220.515175][ T4223] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  220.755361][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.793835][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.075526][ T4223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  221.215609][ T4223] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  221.545715][ T4223] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  221.708314][ T5933] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  221.725045][ T5933] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  221.733097][ T5933] usb 6-1: Manufacturer: syz
[  221.733382][ T4223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.761003][ T5933] usb 6-1: config 0 descriptor??
[  221.794524][ T4223] usb 5-1: config 0 descriptor??
[  221.831484][ T6676] loop6: detected capacity change from 0 to 4096
[  221.836174][ T6654] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  221.847662][ T6678] device syzkaller0 entered promiscuous mode
[  221.875106][ T6676] EXT4-fs (loop6): inline encryption not supported
[  221.881987][ T6676] EXT4-fs (loop6): Test dummy encryption mode enabled
[  221.922106][ T6676] EXT4-fs (loop6): Ignoring removed bh option
[  221.928429][ T6676] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  221.938584][ T4236] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  221.954803][ T6676] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  221.966748][ T6676] System zones: 0-5
[  221.976693][ T6676] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  222.010941][ T6676] 
[  222.013348][ T6676] ======================================================
[  222.020423][ T6676] WARNING: possible circular locking dependency detected
[  222.027574][ T6676] syzkaller #0 Not tainted
[  222.032021][ T6676] ------------------------------------------------------
[  222.039060][ T6676] syz.6.560/6676 is trying to acquire lock:
[  222.044975][ T6676] ffff888073b82b28 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  222.053921][ T6676] 
[  222.053921][ T6676] but task is already holding lock:
[  222.061337][ T6676] ffff88807385b450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0
[  222.070707][ T6676] 
[  222.070707][ T6676] which lock already depends on the new lock.
[  222.070707][ T6676] 
[  222.081139][ T6676] 
[  222.081139][ T6676] the existing dependency chain (in reverse order) is:
[  222.090182][ T6676] 
[  222.090182][ T6676] -> #2 (&ei->i_data_sem/2){++++}-{3:3}:
[  222.098062][ T6676]        down_read+0x44/0x2e0
[  222.102775][ T6676]        ext4_map_blocks+0x33c/0x1b30
[  222.108175][ T6676]        ext4_getblk+0x176/0x670
[  222.113146][ T6676]        ext4_bread+0x26/0x180
[  222.117944][ T6676]        ext4_quota_read+0x1b3/0x3a0
[  222.123282][ T6676]        find_tree_dqentry+0x188/0xb30
[  222.128765][ T6676]        find_tree_dqentry+0x3eb/0xb30
[  222.134479][ T6676]        find_tree_dqentry+0x3eb/0xb30
[  222.139978][ T6676]        find_tree_dqentry+0x3eb/0xb30
[  222.145471][ T6676]        qtree_read_dquot+0x13c/0x680
[  222.150924][ T6676]        v2_read_dquot+0xc0/0x110
[  222.155989][ T6676]        dquot_acquire+0x152/0x520
[  222.161130][ T6676]        ext4_acquire_dquot+0x2d9/0x4a0
[  222.166710][ T6676]        dqget+0x778/0xeb0
[  222.171304][ T6676]        __dquot_initialize+0x333/0xcd0
[  222.176888][ T6676]        ext4_process_orphan+0x54/0x300
[  222.182642][ T6676]        ext4_orphan_cleanup+0xad2/0x1320
[  222.188405][ T6676]        ext4_fill_super+0x8d6e/0x94f0
[  222.193898][ T6676]        mount_bdev+0x287/0x3c0
[  222.198786][ T6676]        legacy_get_tree+0xe6/0x180
[  222.204023][ T6676]        vfs_get_tree+0x88/0x270
[  222.208994][ T6676]        do_new_mount+0x24a/0xa40
[  222.214051][ T6676]        __se_sys_mount+0x2e3/0x3d0
[  222.219281][ T6676]        do_syscall_64+0x4c/0xa0
[  222.224260][ T6676]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  222.230708][ T6676] 
[  222.230708][ T6676] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  222.238827][ T6676]        down_read+0x44/0x2e0
[  222.243546][ T6676]        v2_read_dquot+0x4a/0x110
[  222.248774][ T6676]        dquot_acquire+0x152/0x520
[  222.253928][ T6676]        ext4_acquire_dquot+0x2d9/0x4a0
[  222.259509][ T6676]        dqget+0x778/0xeb0
[  222.263957][ T6676]        dquot_set_dqblk+0x27/0xf90
[  222.269188][ T6676]        quota_setquota+0x4d6/0x590
[  222.274417][ T6676]        __se_sys_quotactl+0x28b/0x6f0
[  222.279910][ T6676]        do_syscall_64+0x4c/0xa0
[  222.284883][ T6676]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  222.291337][ T6676] 
[  222.291337][ T6676] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  222.299016][ T6676]        __lock_acquire+0x2c42/0x7d10
[  222.304429][ T6676]        lock_acquire+0x19e/0x400
[  222.309497][ T6676]        __mutex_lock_common+0x1e3/0x2400
[  222.315341][ T6676]        mutex_lock_nested+0x17/0x20
[  222.320675][ T6676]        dquot_commit+0x5a/0x410
[  222.325655][ T6676]        ext4_write_dquot+0x1f0/0x360
[  222.331058][ T6676]        mark_all_dquot_dirty+0xf9/0x400
[  222.336722][ T6676]        __dquot_free_space+0x7ca/0xb90
[  222.342396][ T6676]        ext4_free_blocks+0x1b2b/0x24d0
[  222.348071][ T6676]        ext4_ext_remove_space+0x211e/0x42b0
[  222.354092][ T6676]        ext4_ext_truncate+0x192/0x240
[  222.359586][ T6676]        ext4_truncate+0xa09/0x10f0
[  222.364822][ T6676]        ext4_setattr+0x1147/0x1b60
[  222.370070][ T6676]        notify_change+0xbcd/0xee0
[  222.375251][ T6676]        do_truncate+0x1ac/0x240
[  222.380242][ T6676]        path_openat+0x2922/0x2fa0
[  222.385438][ T6676]        do_filp_open+0x1e2/0x410
[  222.390494][ T6676]        do_sys_openat2+0x150/0x4b0
[  222.395723][ T6676]        __x64_sys_open+0x11b/0x140
[  222.401057][ T6676]        do_syscall_64+0x4c/0xa0
[  222.406031][ T6676]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  222.412494][ T6676] 
[  222.412494][ T6676] other info that might help us debug this:
[  222.412494][ T6676] 
[  222.422867][ T6676] Chain exists of:
[  222.422867][ T6676]   &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2
[  222.422867][ T6676] 
[  222.436561][ T6676]  Possible unsafe locking scenario:
[  222.436561][ T6676] 
[  222.444042][ T6676]        CPU0                    CPU1
[  222.449447][ T6676]        ----                    ----
[  222.454853][ T6676]   lock(&ei->i_data_sem/2);
[  222.459494][ T6676]                                lock(&s->s_dquot.dqio_sem);
[  222.467084][ T6676]                                lock(&ei->i_data_sem/2);
[  222.474368][ T6676]   lock(&dquot->dq_lock);
[  222.478998][ T6676] 
[  222.478998][ T6676]  *** DEADLOCK ***
[  222.478998][ T6676] 
[  222.487175][ T6676] 5 locks held by syz.6.560/6676:
[  222.492227][ T6676]  #0: ffff88806444c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  222.501430][ T6676]  #1: ffff88807385b5c8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240
[  222.511769][ T6676]  #2: ffff88807385b768 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xf16/0x1b60
[  222.522123][ T6676]  #3: ffff88807385b450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0
[  222.532220][ T6676]  #4: ffffffff8c4415f8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30
[  222.541318][ T6676] 
[  222.541318][ T6676] stack backtrace:
[  222.547248][ T6676] CPU: 1 PID: 6676 Comm: syz.6.560 Not tainted syzkaller #0
[  222.554552][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  222.564782][ T6676] Call Trace:
[  222.568092][ T6676]  <TASK>
[  222.571157][ T6676]  dump_stack_lvl+0x188/0x250
[  222.575861][ T6676]  ? load_image+0x400/0x400
[  222.580378][ T6676]  ? show_regs_print_info+0x20/0x20
[  222.585735][ T6676]  ? print_circular_bug+0x12b/0x1a0
[  222.590954][ T6676]  check_noncircular+0x296/0x330
[  222.595919][ T6676]  ? add_chain_block+0x940/0x940
[  222.600874][ T6676]  ? lockdep_lock+0xf1/0x1f0
[  222.605489][ T6676]  ? mark_lock+0x94/0x320
[  222.609833][ T6676]  __lock_acquire+0x2c42/0x7d10
[  222.614725][ T6676]  ? __bfs+0x2a3/0x5c0
[  222.618864][ T6676]  ? verify_lock_unused+0x140/0x140
[  222.624085][ T6676]  ? check_noncircular+0x189/0x330
[  222.629304][ T6676]  ? add_chain_block+0x940/0x940
[  222.634266][ T6676]  ? lockdep_lock+0xf1/0x1f0
[  222.638875][ T6676]  ? lockdep_unlock+0x143/0x2e0
[  222.643756][ T6676]  lock_acquire+0x19e/0x400
[  222.648463][ T6676]  ? dquot_commit+0x5a/0x410
[  222.653085][ T6676]  ? __might_sleep+0xf0/0xf0
[  222.657696][ T6676]  ? read_lock_is_recursive+0x10/0x10
[  222.663099][ T6676]  ? mark_lock+0x94/0x320
[  222.667453][ T6676]  ? dquot_commit+0x5a/0x410
[  222.672063][ T6676]  __mutex_lock_common+0x1e3/0x2400
[  222.677306][ T6676]  ? dquot_commit+0x5a/0x410
[  222.681928][ T6676]  ? __might_sleep+0xf0/0xf0
[  222.686544][ T6676]  ? mutex_lock_io_nested+0x60/0x60
[  222.691769][ T6676]  mutex_lock_nested+0x17/0x20
[  222.696551][ T6676]  dquot_commit+0x5a/0x410
[  222.700982][ T6676]  ? __ext4_journal_start_sb+0x1bd/0x360
[  222.706635][ T6676]  ext4_write_dquot+0x1f0/0x360
[  222.711503][ T6676]  mark_all_dquot_dirty+0xf9/0x400
[  222.716630][ T6676]  __dquot_free_space+0x7ca/0xb90
[  222.721680][ T6676]  ext4_free_blocks+0x1b2b/0x24d0
[  222.726751][ T6676]  ? ext4_mb_discard_preallocations_should_retry+0x690/0x690
[  222.734177][ T6676]  ? do_raw_read_unlock+0x39/0x70
[  222.739228][ T6676]  ? _raw_read_unlock+0x24/0x40
[  222.744089][ T6676]  ? ext4_is_pending+0x176/0x1c0
[  222.749051][ T6676]  ext4_ext_remove_space+0x211e/0x42b0
[  222.754542][ T6676]  ? ext4_ext_index_trans_blocks+0xf0/0xf0
[  222.760365][ T6676]  ? ext4_es_remove_extent+0x24f/0x3e0
[  222.765853][ T6676]  ext4_ext_truncate+0x192/0x240
[  222.770813][ T6676]  ext4_truncate+0xa09/0x10f0
[  222.775632][ T6676]  ? __ext4_mark_inode_dirty+0x700/0x700
[  222.781316][ T6676]  ? unmap_mapping_range+0xc8/0x100
[  222.786553][ T6676]  ext4_setattr+0x1147/0x1b60
[  222.791261][ T6676]  ? ext4_write_inode+0x5f0/0x5f0
[  222.796308][ T6676]  notify_change+0xbcd/0xee0
[  222.800964][ T6676]  do_truncate+0x1ac/0x240
[  222.805403][ T6676]  ? rcu_lock_release+0x20/0x20
[  222.810279][ T6676]  ? ima_bprm_check+0x200/0x200
[  222.815260][ T6676]  ? bpf_lsm_path_truncate+0x5/0x10
[  222.820478][ T6676]  path_openat+0x2922/0x2fa0
[  222.825112][ T6676]  ? do_filp_open+0x410/0x410
[  222.829816][ T6676]  do_filp_open+0x1e2/0x410
[  222.834366][ T6676]  ? vfs_tmpfile+0x300/0x300
[  222.838981][ T6676]  ? _raw_spin_unlock+0x24/0x40
[  222.843858][ T6676]  ? alloc_fd+0x598/0x630
[  222.848333][ T6676]  do_sys_openat2+0x150/0x4b0
[  222.853062][ T6676]  ? do_sys_open+0xe0/0xe0
[  222.857542][ T6676]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  222.863562][ T6676]  ? lock_chain_count+0x20/0x20
[  222.868447][ T6676]  ? vtime_user_exit+0x2c8/0x3e0
[  222.873416][ T6676]  __x64_sys_open+0x11b/0x140
[  222.878148][ T6676]  do_syscall_64+0x4c/0xa0
[  222.882590][ T6676]  ? clear_bhb_loop+0x30/0x80
[  222.887296][ T6676]  ? clear_bhb_loop+0x30/0x80
[  222.892116][ T6676]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  222.898061][ T6676] RIP: 0033:0x7f00db8e3dd9
[  222.902628][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.922256][ T6676] RSP: 002b:00007f00d9b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  222.930846][ T6676] RAX: ffffffffffffffda RBX: 00007f00dbb5cfa0 RCX: 00007f00db8e3dd9
[  222.938838][ T6676] RDX: 0000000000000006 RSI: 000000000014b27e RDI: 0000200000000340
[  222.946843][ T6676] RBP: 00007f00db979d69 R08: 0000000000000000 R09: 0000000000000000
[  222.954855][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.962859][ T6676] R13: 00007f00dbb5d038 R14: 00007f00dbb5cfa0 R15: 00007ffeefd0a488
[  222.970866][ T6676]  </TASK>
[  223.016426][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.023428][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.044578][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.051963][ T4236] usb 3-1: device descriptor read/64, error -71
[  223.058450][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.073280][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.088109][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.095393][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.102467][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.117856][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.124874][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.135896][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.142823][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.151240][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.159325][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.167696][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.174809][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.183062][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.191550][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.199454][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.207869][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.214784][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.222759][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.231058][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.240625][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.249225][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.257384][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.264414][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.272785][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.280727][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.289152][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.297268][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.304189][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.312617][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.320618][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.329019][ T4236] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  223.338952][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.347594][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.354540][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.362677][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.371533][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.379597][ T4223] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  223.397873][ T4223] acrux 0003:1A34:0802.0006: hidraw0: USB HID v0.08 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0
[  223.411645][ T4223] acrux 0003:1A34:0802.0006: no inputs found
[  223.419988][ T4223] acrux 0003:1A34:0802.0006: Failed to enable force feedback support, error: -19
[  223.510674][ T4223] usb 5-1: USB disconnect, device number 12
[  223.535194][ T4236] usb 3-1: device descriptor read/64, error -71
[  223.598592][ T6705] fido_id[6705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  223.665199][ T4236] usb usb3-port1: attempt power cycle
[  223.865105][ T5933] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71
[  223.874066][ T5933] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71
[  223.882512][ T5933] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71
[  223.890723][ T5933] uclogic 0003:256C:006D.0007: failed probing parameters: -71
[  223.898417][ T5933] uclogic: probe of 0003:256C:006D.0007 failed with error -71
[  223.911023][ T5933] usb 6-1: USB disconnect, device number 5