last executing test programs:

36.061754058s ago: executing program 1 (id=2079):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_net\x00', 0x777)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)

35.832441054s ago: executing program 1 (id=2080):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x46c, &(0x7f0000000d00)="$eJzs3M9vFFUcAPDvTH8AArYi/uCHWkVj44+WAioHD2g08YCJiR702LSFIIUaWhMhRMEYPBlj4t149F/wpBdjPJl41bshIYYL4MGMmd0ZurvsLnTZMoH9fJJp39t50/e+O/N235u32wAG1kT+I4nYEhF/RsRYPdtcYKL+6+rls3PXLp+dSyLL3v0nqZW7cvnsXFm0PG5zkZlMI9IvktjVpt7l02eOzy4uLpwq8tMrJz6aXj595sVjJ2aPLhxdOLnv4MED+2deeXnfS32JM2/TlZ2fLu3e8dYH37x9+Kum+Fvi6JOJbjufybI+V1etrQ3pZLjChrAmQxGRn66RWv8fi6FYPXlj8ebnlTYOWFdZlmWbO+8+l3WSdtwD3DWSaM537vLAvaV8o8/nv+XWOgg41JAe7f8QpFKXXqtPgPK4rxZbfc9wpEWZkZb5bT9NRMT75/79Lt9ife5DAAA0+Skf/7zQbvyXxsMN5e4v1obGI+KBiNgWEQ9GxPaIeCiiVvaRiHh0jfW3LpLcOP5JL/YU2C3Kx3+vFmtbzeO/cvQX40NFbmst/pHkyLHFhb3FczIZIxvy/EyXOn5+44+vO+1rHP/lW15/ORYs2nFxeEPzMfOzK7O3E3OjS+cjdg63iz+5vhKQRMSOiNjZYx3Hnvthd6d9N4+/iz6sM2XfRzxbP//noiX+UtJ9fXJ6Yywu7J0ur4ob/fb7hXc61X9b8fdBfv7va3v9X49/PGlcr11eex0X/vqy45ym1+t/NHmvli7no5/MrqycmokYTQ7XG934+L7VY8t8WT6Pf3JP+/6/LVafiV0RkV/Ej0XE4xHxRNH2JyPiqYjY0yX+X19/+sPe419fefzzazr/q4nRaH2kfWLo+C8/NlU6fkP817qf/wO11GTxyK28/t1Ku3q7mgEAAODuk0bElkjSqevpNJ2aqn9efntEuri0vPL8kaWPT87XvyMwHiNpeadrrOF+6Ewxra/nz0dE/aMF5f79xX3jb4c21fJTc0uL81UHDwNuc4f+n/t7qOrWAevO97VgcK2p/3uxgHuKLg2DS/+HwdWm/2+qoh3Andfu/f+zCtoB3Hkt/d+yHwwQ838YXA39/7+s8R/THqqkOcAd5P0fBtLyprj5l+S7Jsq/1OPhd1tiYxHuTQvHSNVN7VMiS9qe3EirbtjCqXRQrroKEtW9JgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTT/wEAAP//PzHe+A==")
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x5)

35.17691361s ago: executing program 1 (id=2082):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x102302, 0xff)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000001", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0)

34.874538828s ago: executing program 1 (id=2084):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000080)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
sendfile(r0, r0, 0x0, 0x2000007ff)

33.883907174s ago: executing program 1 (id=2088):
r0 = epoll_create1(0x0)
syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xe000200d})
epoll_pwait(r0, &(0x7f0000000000), 0x0, 0xa19, 0x0, 0x0)

33.287705158s ago: executing program 1 (id=2091):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x3c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000007ff)

32.81420082s ago: executing program 32 (id=2091):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x3c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000007ff)

11.653726865s ago: executing program 0 (id=2147):
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x408)

11.390293112s ago: executing program 0 (id=2150):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x104)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x6, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x800})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@arm64={0x8, 0xe, 0x6, '\x00', 0x1})

10.887578895s ago: executing program 0 (id=2153):
r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="4097b600"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0x4081e18194798f64, 0x5, "68644444e3"}, 0x0, 0x0, 0x0, 0x0})

9.602392527s ago: executing program 4 (id=2159):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000600)={0x2, 0x0, 0x19, 0x9, 0xc2, 0x0})

9.411616212s ago: executing program 5 (id=2160):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x800)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)={0x414, 0x30, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@generic="01ba3052c19c7a8ca95ee91e82742e68a012f9a825e7d173011dac89f2bbc3397b8dc35d29a5be345d2b3a41e532256084b71c33570b4255806aeb9ea9d212c77c4294514d0318ea678daf311b9689451137deb91425c9f216eb202e0d3214d58f40a06d546e32af85e901f990a5eed7dbc9c6b9f31a172bcbe734c30fb50c7b21609cec8dde602e8f24ac8660491fb2533fef394764f8618fcec2fe2dbfe040546a4202d769b3739d0536", @typed={0x9b, 0xf7, 0x0, 0x0, @binary="dcc9e0bcdc3fb57d6b4b100ed407de0a5c2574b196ac0c089ed08a3e4bbd6c54a5ae1c59422457029ff3226db5610fc435abd1244aadcea0a553e23c712fb618a1fe9706e5787f5915768d1595f412c6c15debb6d7c835d43d0131695637108af376c55c7b3fd8bbcecd450e238779b60035429711e46ed0a1b69aab112d5cbe12318a7822fb3ee41b94465a6104c0a87df1f8aa635bc7"}, @generic="b6f9e40aae761990a05de173eb244dc1ed2c4d", @nested={0x1a5, 0xeb, 0x0, 0x1, [@generic="0c4693c2fbf85ada0a26979507adcd47ba7250f87ac1bfe753263c8b94bf87c51304a6061d2b04410f66192e6eca16164551ce0601aadd9bfb011155baef30baa5816424d7d8b619e78cbf99fb9acef91032851504263feed11debfa2516dc6b0d30fe437e0fab0de28e6ec830dd042d7a3b089f0a0fa116250f318228ae710bb67fd1735271a4c6a701bc36a16d36d0778967bb5588433c901b7cac07f602915012e50a8071a937214b6cffd653deb3e3908ab7637712affb6a48b701aae92476e38fc3281e4a30353fa3f94ed8863fc9c83930880bedf4fdcedffd94d6231691390c27540699f98d35", @generic="03f72e0c138f82ae92d2250a0688acc2376055354195c56c8bbcc12c3012b8a4ae6d32eb06d638b1d3d324a1c419b2ad3279b47b7d820204f5e3208440b31bebc24fab719a64ef25cf7f433148ad7e27cf59e5d9447e8ee742ff48ddfdd87a082e8c35f1c00d14c90d69468a2f0913640d9a26a7de0e4ef5c0037ea44f88360b34eae44a178d23b730a5571aea2d3f", @generic="c199cee0b7bb6451c66d27ae24a49663d21a7ab57c4576bc529547a70f19ddde6687902a66525c6e"]}, @nested={0xe5, 0x8a, 0x0, 0x1, [@generic="3749716cf6886e303faa16c36d83017cbff25287b73815fc0fce709e2de3c406bf302e9e05e15a94fae9b49b87db6bba002de833e2ea74efe3486a71f23dcdcfd2f892a3f1911ee6e3fd69364f479ef44a949348d935bf94c902b9f23ea67a9410fd9f3b81c1b6e1b93df486e96981a1eeb46fab92169a555ad81418d0bfc01fbbefc72a32b7cdab8c20311e5dbfb1b113fbccb7b841f2c791e56c6d6c9c35bb67cfc306286fd8635118997c8482090d23e8746c22c510c031555499f8d78810b5a857a5e1da1df692f9fee8f01daa4fbb72b4bd33199b0969856e1268d5e26299"]}, @generic="61c36d1a84f070a13636aa86d72f5b3c82c7cacb6009034231f4"]}, 0x414}], 0x1}, 0x4000040)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[])

9.317576044s ago: executing program 4 (id=2161):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x5865, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

8.887618375s ago: executing program 4 (id=2162):
unshare(0x20000600)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000100)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0)

8.599242513s ago: executing program 4 (id=2163):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
unshare(0x22020600)
bind$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
setns(0xffffffffffffffff, 0x24000000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x200000000001)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)

6.866341876s ago: executing program 5 (id=2164):
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb40, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xa0, 0xc8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xba0)
r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x8)
fchdir(r2)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r3, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
unshare(0x22020400)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
r4 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffc, 0x400)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c047c00000400c280f19f2626da056c9b6afbecab0b0b960400080000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060008"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c004)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040f20436120000000000010902240001000000090904001001030003000921fcff0501222900090581"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x8c, &(0x7f0000000340)=ANY=[@ANYBLOB="600d294000040000000000146e599f41b2ab6cfda5a500ed0000dbb93469de54922849f5d5cdae32bf5962dc36c705e153d7650e4682ff7535f93d9b28bf216a54bec8b65fa40d2e6a135d5e5d87d48645d51b91e341ebcaff149b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e1e, 0x78, @loopback, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0xc045)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
pipe2$9p(&(0x7f0000000100), 0x84800)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="0300000a00000000", @ANYRES32, @ANYBLOB="1e00940000181e0100000000000000070008001f000000000404000000c000000400bf0004004600"], 0x44}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000000)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)

6.856449927s ago: executing program 4 (id=2165):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x1000010, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61616170746976652c680400000000000000636f766572792c6673796e635f6d6f64653d706f7369782cf97365725f78617474722c64697361626c655f726f6c6c5f663272776172642c000000"], 0x1, 0x105ea, &(0x7f0000010600)="$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")
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x6, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f96400", [0x800]}})

6.71616125s ago: executing program 0 (id=2166):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa", 0xd9}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}], 0x2}}], 0x1, 0x4000000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa000905840240"], 0x0)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803", 0xb4}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b", 0x8a}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab48c", 0x16}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="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", 0x102}], 0x1}}], 0x2, 0x4000900)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

6.292290891s ago: executing program 2 (id=2169):
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
accept4(0xffffffffffffffff, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x71, 0x1, {{0x10, 0x1, 0x5}, 0x27}}, 0x18)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa00, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x1986ec, 0x0, 0x0}, 0x1a8)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000100))
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.036695687s ago: executing program 2 (id=2171):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x8c)

5.792954783s ago: executing program 2 (id=2172):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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")
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

5.321697976s ago: executing program 2 (id=2173):
setresuid(0xee00, 0xee01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

5.023586583s ago: executing program 2 (id=2175):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x800)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)={0x414, 0x30, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@generic="01ba3052c19c7a8ca95ee91e82742e68a012f9a825e7d173011dac89f2bbc3397b8dc35d29a5be345d2b3a41e532256084b71c33570b4255806aeb9ea9d212c77c4294514d0318ea678daf311b9689451137deb91425c9f216eb202e0d3214d58f40a06d546e32af85e901f990a5eed7dbc9c6b9f31a172bcbe734c30fb50c7b21609cec8dde602e8f24ac8660491fb2533fef394764f8618fcec2fe2dbfe040546a4202d769b3739d0536", @typed={0x9b, 0xf7, 0x0, 0x0, @binary="dcc9e0bcdc3fb57d6b4b100ed407de0a5c2574b196ac0c089ed08a3e4bbd6c54a5ae1c59422457029ff3226db5610fc435abd1244aadcea0a553e23c712fb618a1fe9706e5787f5915768d1595f412c6c15debb6d7c835d43d0131695637108af376c55c7b3fd8bbcecd450e238779b60035429711e46ed0a1b69aab112d5cbe12318a7822fb3ee41b94465a6104c0a87df1f8aa635bc7"}, @generic="b6f9e40aae761990a05de173eb244dc1ed2c4d", @nested={0x1a5, 0xeb, 0x0, 0x1, [@generic="0c4693c2fbf85ada0a26979507adcd47ba7250f87ac1bfe753263c8b94bf87c51304a6061d2b04410f66192e6eca16164551ce0601aadd9bfb011155baef30baa5816424d7d8b619e78cbf99fb9acef91032851504263feed11debfa2516dc6b0d30fe437e0fab0de28e6ec830dd042d7a3b089f0a0fa116250f318228ae710bb67fd1735271a4c6a701bc36a16d36d0778967bb5588433c901b7cac07f602915012e50a8071a937214b6cffd653deb3e3908ab7637712affb6a48b701aae92476e38fc3281e4a30353fa3f94ed8863fc9c83930880bedf4fdcedffd94d6231691390c27540699f98d35", @generic="03f72e0c138f82ae92d2250a0688acc2376055354195c56c8bbcc12c3012b8a4ae6d32eb06d638b1d3d324a1c419b2ad3279b47b7d820204f5e3208440b31bebc24fab719a64ef25cf7f433148ad7e27cf59e5d9447e8ee742ff48ddfdd87a082e8c35f1c00d14c90d69468a2f0913640d9a26a7de0e4ef5c0037ea44f88360b34eae44a178d23b730a5571aea2d3f", @generic="c199cee0b7bb6451c66d27ae24a49663d21a7ab57c4576bc529547a70f19ddde6687902a66525c6e"]}, @nested={0xe5, 0x8a, 0x0, 0x1, [@generic="3749716cf6886e303faa16c36d83017cbff25287b73815fc0fce709e2de3c406bf302e9e05e15a94fae9b49b87db6bba002de833e2ea74efe3486a71f23dcdcfd2f892a3f1911ee6e3fd69364f479ef44a949348d935bf94c902b9f23ea67a9410fd9f3b81c1b6e1b93df486e96981a1eeb46fab92169a555ad81418d0bfc01fbbefc72a32b7cdab8c20311e5dbfb1b113fbccb7b841f2c791e56c6d6c9c35bb67cfc306286fd8635118997c8482090d23e8746c22c510c031555499f8d78810b5a857a5e1da1df692f9fee8f01daa4fbb72b4bd33199b0969856e1268d5e26299"]}, @generic="61c36d1a84f070a13636aa86d72f5b3c82c7cacb6009034231f4"]}, 0x414}], 0x1}, 0x4000040)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[])

4.780829709s ago: executing program 0 (id=2176):
r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="4097b600"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0x4081e18194798f64, 0x5, "68644444e3"}, 0x0, 0x0, 0x0, 0x0})

4.594727224s ago: executing program 3 (id=2177):
syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000)
socket$kcm(0x2, 0xa, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$inet6(r1, 0x0, 0x8804)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0xf, 0xffffffffffffffff}, 0x0, &(0x7f0000000440)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffe}, 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

3.647290048s ago: executing program 5 (id=2178):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x5)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x9, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20)
sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0)

3.491766122s ago: executing program 3 (id=2179):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}], 0x18})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x2, 0x0, 0x6, 0x5, 0x63d, 0xf, 0xbebc, 0x565}, 0x0)

3.419521164s ago: executing program 5 (id=2180):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
chdir(&(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1)

3.302711587s ago: executing program 3 (id=2181):
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
accept4(0xffffffffffffffff, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x71, 0x1, {{0x10, 0x1, 0x5}, 0x27}}, 0x18)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa00, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x1986ec, 0x0, 0x0}, 0x1a8)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000100))
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.210004929s ago: executing program 5 (id=2182):
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0xb)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3800000001010103000000000000000002000000180001800700018008000100ffffffff08000200e00000010c0019800800010004"], 0x38}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0xffa8)
mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0xc0, &(0x7f0000000140)=ANY=[@ANYBLOB="646566636f6e74657874f79fd54c"])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="01001b00007fff00"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

3.106684302s ago: executing program 3 (id=2183):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c0288", 0x25}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a9", 0x8e}], 0x2, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.956019385s ago: executing program 2 (id=2184):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$vga_arbiter(r5, &(0x7f0000000040)=@other={'unlock', ' ', 'io+mem'}, 0xe)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

2.728551341s ago: executing program 3 (id=2185):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$eJzs3E1oHFUcAPD/bJJ+t4m1VltbjVax+JE06Yc9eFBR8KAg6KEeY7KttdtGkgi2BI0i9SgF7+JR8OjJmxdRDyJ4VfAohaJBaOopMl/pNtlNkzTpttnfDzb73szsvvefeW/zdt7OBNC2etM/ScS2iPg9Irrz7I0b9OZPM9OTw9emJ4eTmJ194+8k2+7q9ORwuWn5uq1F5mAlovJpEs8nC8sdP3/hzFCtVh0r8v0TZ9/rHz9/4ZnTZ4dOVU9Vzw0eP37k8MCzxwaPLjumzQ2WpXFd3fvh6L49r7x16bXhE5fe/umbtFq79+fr6+O4qWsNAmqgN91r/8xm5q97fMmF3R2216WTzhZWhGXpiIj0cHVl/b87OuL6weuOlz9paeWANZX+b9rYfPXULLCOJdHqGgCtUf6jT7//lo/bNPS4I1x5IWJDkZ6ZnhyemYu/MyrF8q41LL83Ik5M/fdl+ojlnocAAFiBbGzzdKPxXyV2Z8/5XMeOYg6lJyLuiYidEXFvROyKiPsism3vj4gH8hfPdi+x/N55+YXjn8rlhnVeJen477m6sd9MXfzFU09Hkduexd+VnDxdqx4q9snB6NqY5gcWKeP7l377vNm6+vFf+kjLL8eCRQUud+Yn6MphaowMTQyt1k648nHE3s5G8SdzMwFpC9gTEXuX99Y7ysTpJ7/e12yjm8e/iFWYZ5r9KuKJ/PhPxbz4S0mT+cm0jR8bPNq/KWrVQ/1lq1jo518vvt6s/FuKfxWkx3/Lje1/3hbd/yb5fG1X1GrVsfHll3Hxj8+afqdZRvufk7b/Dcmb2Zz1L+/kyz4YmpgYG4jYkLya5cvOki0fvP7aMl9un8Z/8EDj/r+zeE0a/4MRkTbi/RE7HoqIh4u6PxIRj0bEgUXi//HFx95dJP4kkmjp8R9p+Pk31/57kvr5+hUkOs788F2zGfOlHf8jMZV91uayz7+bWGoFb3H3AQAAwF2hEhHbIqn05enebVGp9PXlv+HfFVsqtdHxiadOjr5/biS/RqAnuirlma7uuvOhA8lU8Y55frA4V1yuP1ycN/6iY3OW7xserY20OHZod1tv7P9R9v/UXx2trh2w5prPoy1yaQCwLszv/5UW1QO4/ZbyOxrfBWB9atD/G91DA1iH3K8F2lej/v/RvPyC8b8RAqwLC/v/nw1uWQesR8b/0L70f2hf+j+0pVu5rn/lifJigZW/z6YlX+HfLonyjhdrWdbmuL4kKi0Pee0TEfHtHVCN6ljaY25voXU3HAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiL/R8AAP//bDTlOQ==")
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

1.132076961s ago: executing program 5 (id=2186):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa", 0xd9}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}], 0x2}}], 0x1, 0x4000000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa000905840240"], 0x0)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803", 0xb4}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b", 0x8a}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab48c", 0x16}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="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", 0x102}], 0x1}}], 0x2, 0x4000900)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

919.613627ms ago: executing program 4 (id=2187):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x787, &(0x7f0000001000)="$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")
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
creat(&(0x7f00000003c0)='./file1\x00', 0xb8)
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

862.732108ms ago: executing program 3 (id=2188):
io_setup(0x490, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x7, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
sendmsg$nl_xfrm(r0, 0x0, 0x48080)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

0s ago: executing program 0 (id=2189):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000440)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f0000000140)=@v3={0x3000000, [{0xb657}, {0xffffffff, 0x5}]}, 0x18, 0x2)
r1 = creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
syz_usbip_server_init(0x6)
setgroups(0x0, 0x0)
fsopen(&(0x7f00000001c0)='gadgetfs\x00', 0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r5 = socket(0x2, 0x80805, 0xfffffffc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x1})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

kernel console output (not intermixed with test programs):

xx 3-1:0.0: dvb set to bulk mode.
[  412.715920][ T4361] em28xx 3-1:0.0: Binding DVB extension
[  412.767251][   T14] usb 3-1: USB disconnect, device number 83
[  412.791271][   T14] em28xx 3-1:0.0: Disconnecting em28xx
[  412.951616][ T4361] em28xx 3-1:0.0: Registering input extension
[  412.959437][   T22] gspca_sunplus: reg_r err -32
[  412.967410][   T14] em28xx 3-1:0.0: Closing input extension
[  412.992281][   T14] em28xx 3-1:0.0: Freeing device
[  413.237744][ T4380] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  413.337814][ T6812] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  413.442319][ T4380] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  413.461729][ T4380] usb 1-1: config 0 has no interface number 1
[  413.478569][ T4380] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  413.499921][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.536260][ T4380] usb 1-1: config 0 descriptor??
[  413.545679][ T6812] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.567140][ T6812] usb 5-1: config 0 interface 0 has no altsetting 0
[  413.580682][ T6812] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  413.594727][ T6812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.630906][ T6812] usb 5-1: config 0 descriptor??
[  413.647687][ T6812] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  413.836293][ T8889] binder_alloc: 8877: binder_alloc_buf, no vma
[  413.857019][ T4380] usb 1-1: Could not set interface, error -71
[  413.887043][ T4380] usb 1-1: USB disconnect, device number 81
[  413.957026][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'.
[  414.230115][ T8894] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1557'.
[  414.527726][   T22] sunplus: probe of 2-1:0.0 failed with error -32
[  414.542458][   T22] usb 2-1: USB disconnect, device number 92
[  415.707637][    T7] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  415.887752][    T7] usb 4-1: Using ep0 maxpacket: 32
[  415.898717][    T7] usb 4-1: config index 0 descriptor too short (expected 3659, got 75)
[  415.954177][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.979859][ T4380] usb 5-1: USB disconnect, device number 85
[  416.029273][    T7] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  416.084191][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.118729][    T7] usb 4-1: Product: syz
[  416.124172][    T7] usb 4-1: Manufacturer: syz
[  416.129645][    T7] usb 4-1: SerialNumber: syz
[  416.133675][ T8923] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1569'.
[  416.149446][    T7] usb 4-1: config 0 descriptor??
[  416.165809][    T7] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  416.288233][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'.
[  416.400364][   T14] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[  416.587800][ T4362] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  416.603028][   T14] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  416.613933][   T14] usb 3-1: config 0 has no interface number 1
[  416.624153][   T14] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  416.634627][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.660241][   T14] usb 3-1: config 0 descriptor??
[  416.787734][ T4362] usb 1-1: Using ep0 maxpacket: 16
[  416.794748][ T4362] usb 1-1: config 4 has an invalid interface number: 9 but max is 0
[  416.806742][ T4362] usb 1-1: config 4 has no interface number 0
[  416.814071][ T4362] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  416.835922][ T4362] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  416.846121][ T4362] usb 1-1: config 4 interface 9 has no altsetting 0
[  416.879699][ T4362] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  416.902390][ T4362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.903875][ T8925] binder: BINDER_SET_CONTEXT_MGR already set
[  416.921190][ T4362] usb 1-1: Product: syz
[  416.923664][ T8925] binder: 8924:8925 ioctl 4018620d 200000004a80 returned -16
[  416.931362][ T4362] usb 1-1: Manufacturer: syz
[  416.941527][   T14] usb 3-1: Could not set interface, error -71
[  416.954723][ T4362] usb 1-1: SerialNumber: syz
[  416.985334][   T14] usb 3-1: USB disconnect, device number 84
[  416.995449][ T8929] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  417.005347][ T8929] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  417.041697][ T4362] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  417.238108][ T4343] usb 1-1: Failed to submit usb control message: -71
[  417.245564][   T26] usb 1-1: USB disconnect, device number 82
[  417.261696][ T4343] usb 1-1: unable to send the bmi data to the device: -71
[  417.279282][ T4343] usb 1-1: unable to get target info from device
[  417.293757][ T4343] usb 1-1: could not get target info (-71)
[  417.308939][ T4343] usb 1-1: could not probe fw (-71)
[  417.367065][    T7] gspca_sunplus: reg_r err -32
[  418.957857][    T7] sunplus: probe of 4-1:0.0 failed with error -32
[  418.979022][    T7] usb 4-1: USB disconnect, device number 71
[  419.100744][ T4362] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  419.288059][   T14] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[  419.299284][ T4362] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.339557][ T4362] usb 3-1: config 0 interface 0 has no altsetting 0
[  419.374039][ T4362] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  419.403746][ T4362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.425914][ T4362] usb 3-1: config 0 descriptor??
[  419.456430][ T4362] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  419.522346][   T14] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  419.531948][   T14] usb 5-1: config 0 has no interface number 1
[  419.547324][   T14] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  419.557385][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.580115][   T14] usb 5-1: config 0 descriptor??
[  419.852699][ T8990] binder_alloc: 8967: binder_alloc_buf, no vma
[  419.862599][   T14] usb 5-1: Could not set interface, error -71
[  419.899173][   T14] usb 5-1: USB disconnect, device number 86
[  420.247701][   T26] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  420.447777][   T26] usb 1-1: Using ep0 maxpacket: 32
[  420.456044][   T26] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[  420.487061][   T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.526089][   T26] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  420.553443][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.595220][   T26] usb 1-1: Product: syz
[  420.611585][   T26] usb 1-1: Manufacturer: syz
[  420.627045][   T26] usb 1-1: SerialNumber: syz
[  420.649952][   T26] usb 1-1: config 0 descriptor??
[  420.684279][   T26] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  421.861448][    T7] usb 3-1: USB disconnect, device number 85
[  421.880450][   T26] gspca_sunplus: reg_r err -32
[  422.463069][ T9016] loop3: detected capacity change from 0 to 40427
[  422.488385][ T9016] F2FS-fs (loop3): invalid crc value
[  422.496812][ T9016] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  422.571635][ T9016] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  422.581709][ T9016] F2FS-fs (loop3): Start checkpoint disabled!
[  422.607723][ T9016] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  422.806800][   T47] kworker/u4:3: attempt to access beyond end of device
[  422.806800][   T47] loop3: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  422.826534][   T47] kworker/u4:3: attempt to access beyond end of device
[  422.826534][   T47] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  423.047811][    T7] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[  423.239879][    T7] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  423.250773][    T7] usb 3-1: config 0 has no interface number 1
[  423.268177][    T7] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  423.285205][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.333409][    T7] usb 3-1: config 0 descriptor??
[  423.368372][   T26] sunplus: probe of 1-1:0.0 failed with error -32
[  423.387016][   T26] usb 1-1: USB disconnect, device number 83
[  423.526977][ T9042] loop0: detected capacity change from 0 to 256
[  423.600659][ T9042] exfat: Deprecated parameter 'utf8'
[  423.620947][ T9045] binder_alloc: 9026: binder_alloc_buf, no vma
[  423.649764][    T7] usb 3-1: Could not set interface, error -71
[  423.687873][ T9042] exfat: Deprecated parameter 'utf8'
[  423.727155][    T7] usb 3-1: USB disconnect, device number 86
[  423.807977][ T9042] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  424.137704][   T26] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  424.213176][ T9036] loop3: detected capacity change from 0 to 40427
[  424.232672][ T9036] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  424.244572][ T9036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  424.293073][ T9036] F2FS-fs (loop3): invalid crc value
[  424.335425][ T9036] F2FS-fs (loop3): Found nat_bits in checkpoint
[  424.348927][   T26] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  424.376829][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  424.400212][   T26] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  424.424027][ T9036] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  424.438860][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.447018][ T9036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  424.455066][   T14] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  424.541529][   T26] usb 5-1: config 0 descriptor??
[  424.576540][   T26] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  424.598763][   T27] audit: type=1400 audit(1785825143.332:9): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9035 comm="syz.3.1605"
[  424.654289][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.679400][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  424.731521][   T14] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  424.760513][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.788215][   T14] usb 1-1: config 0 descriptor??
[  425.310284][   T26] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  425.507649][   T26] usb 3-1: Using ep0 maxpacket: 32
[  425.514735][   T26] usb 3-1: config index 0 descriptor too short (expected 3659, got 75)
[  425.535322][   T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  425.566630][   T26] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  425.575896][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.592652][   T26] usb 3-1: Product: syz
[  425.597749][   T26] usb 3-1: Manufacturer: syz
[  425.602681][   T26] usb 3-1: SerialNumber: syz
[  425.610480][   T26] usb 3-1: config 0 descriptor??
[  425.620477][   T26] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  425.825586][   T14] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #100: -71
[  425.842963][   T14] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71
[  425.852012][   T14] uclogic 0003:256C:006D.000B: failed probing pen v1 parameters: -71
[  425.860421][   T14] uclogic 0003:256C:006D.000B: failed probing parameters: -71
[  425.868163][   T14] uclogic: probe of 0003:256C:006D.000B failed with error -71
[  425.897662][   T14] usb 1-1: USB disconnect, device number 84
[  426.527681][   T14] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  426.717709][   T14] usb 4-1: Using ep0 maxpacket: 8
[  426.727299][   T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  426.743502][ T6812] usb 5-1: USB disconnect, device number 87
[  426.758621][   T14] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  426.780158][   T14] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  426.801538][   T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  426.828790][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.878238][   T14] usbtmc 4-1:16.0: bulk endpoints not found
[  427.026206][   T26] gspca_sunplus: reg_r err -32
[  427.311819][ T6812] usb 4-1: USB disconnect, device number 72
[  427.607907][ T4362] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[  427.793372][ T4362] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  427.801966][ T4362] usb 1-1: config 0 has no interface number 1
[  427.811553][ T4362] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  427.820781][ T4362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.845858][ T4362] usb 1-1: config 0 descriptor??
[  428.131546][ T9099] binder_alloc: 9084: binder_alloc_buf, no vma
[  428.158736][ T4362] usb 1-1: Could not set interface, error -71
[  428.175818][ T4362] usb 1-1: USB disconnect, device number 85
[  428.257828][ T6812] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  428.277677][   T14] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  428.437734][ T6812] usb 4-1: Using ep0 maxpacket: 32
[  428.444442][ T6812] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  428.463798][ T6812] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  428.467632][   T14] usb 5-1: Using ep0 maxpacket: 16
[  428.474231][ T6812] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  428.486147][   T14] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  428.486798][ T6812] usb 4-1: config 1 has no interface number 0
[  428.504133][   T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  428.509147][ T6812] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  428.524677][   T14] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  428.531106][ T6812] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  428.548468][   T14] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  428.554762][ T6812] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  428.566841][ T6812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.566857][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.583275][   T26] sunplus: probe of 3-1:0.0 failed with error -32
[  428.600160][   T26] usb 3-1: USB disconnect, device number 87
[  428.606905][   T14] usb 5-1: Product: syz
[  428.623715][   T14] usb 5-1: Manufacturer: syz
[  428.629172][ T6812] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  428.633606][   T14] usb 5-1: SerialNumber: syz
[  428.658014][   T14] r8152-cfgselector 5-1: config 0 descriptor??
[  428.825441][ T6812] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  429.294641][ T6812] usb 4-1: USB disconnect, device number 73
[  429.311388][ T6812] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  429.579081][ T9112] hub 8-0:1.0: USB hub found
[  429.615725][ T9112] hub 8-0:1.0: 1 port detected
[  431.067619][   T22] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  431.267692][   T22] usb 1-1: Using ep0 maxpacket: 32
[  431.275346][   T22] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  431.310157][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.345181][   T22] usb 1-1: config 0 descriptor??
[  431.443422][   T22] as10x_usb: device has been detected
[  431.475504][   T22] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  431.644351][   T22] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  431.672370][   T22] as10x_usb: error during firmware upload part1
[  431.704508][   T22] Registered device nBox DVB-T Dongle
[  432.109059][ T9133] loop3: detected capacity change from 0 to 512
[  432.177578][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  432.187572][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  432.197569][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  432.207569][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  432.217571][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  432.227565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  432.237565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  432.247565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  433.756254][ T9129] sched: RT throttling activated
[  433.762695][ T9121] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  433.791702][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout
[  433.793713][   T14] r8152-cfgselector 5-1: Unknown version 0x0000
[  433.807432][ T9121] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  433.814348][ T9121] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  433.820966][ T9121] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  433.827249][ T9121] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  433.865610][ T4361] usb 1-1: USB disconnect, device number 86
[  434.803023][ T9133] EXT4-fs: failed to create workqueue
[  434.808783][ T9133] EXT4-fs (loop3): mount failed
[  435.378670][ T4380] r8152-cfgselector 5-1: USB disconnect, device number 88
[  435.409020][ T4361] Unregistered device nBox DVB-T Dongle
[  435.421073][ T4361] as10x_usb: device has been disconnected
[  435.629265][ T9144] fuse: Invalid rootmode
[  435.848251][ T4280] Bluetooth: hci4: command 0x0c1a tx timeout
[  435.848389][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout
[  435.854357][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout
[  435.860757][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout
[  436.017723][ T4380] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  436.207693][ T4380] usb 5-1: Using ep0 maxpacket: 16
[  436.215034][ T4380] usb 5-1: config 4 has an invalid interface number: 9 but max is 0
[  436.228947][ T4380] usb 5-1: config 4 has no interface number 0
[  436.235321][ T4380] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  436.237751][   T14] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  436.250776][ T4380] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  436.270682][ T4380] usb 5-1: config 4 interface 9 has no altsetting 0
[  436.281019][ T4380] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  436.291205][ T4380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.299569][ T4380] usb 5-1: Product: syz
[  436.303996][ T4380] usb 5-1: Manufacturer: syz
[  436.309021][ T4380] usb 5-1: SerialNumber: syz
[  436.322823][ T9151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  436.347957][ T9151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  436.364446][ T4326] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  436.433526][ T4380] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  436.451093][   T14] usb 4-1: Using ep0 maxpacket: 32
[  436.459742][   T14] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  436.469760][   T14] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  436.479987][   T14] usb 4-1: config 0 interface 0 has no altsetting 0
[  436.498858][   T14] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  436.509380][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.526457][   T14] usb 4-1: Product: syz
[  436.531168][   T14] usb 4-1: Manufacturer: syz
[  436.536386][   T14] usb 4-1: SerialNumber: syz
[  436.560449][   T14] usb 4-1: config 0 descriptor??
[  436.587426][ T4326] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.602335][ T4303] usb 5-1: Failed to submit usb control message: -71
[  436.605998][ T4326] usb 2-1: config 0 interface 0 has no altsetting 0
[  436.613003][ T4361] usb 5-1: USB disconnect, device number 89
[  436.623471][ T4303] usb 5-1: unable to send the bmi data to the device: -71
[  436.633052][ T4303] usb 5-1: unable to get target info from device
[  436.641046][ T4303] usb 5-1: could not get target info (-71)
[  436.644488][ T4326] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  436.647168][ T4303] usb 5-1: could not probe fw (-71)
[  436.690231][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.719709][ T4326] usb 2-1: config 0 descriptor??
[  436.739099][ T4326] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  436.972864][   T14] gs_usb 4-1:0.0: Couldn't get device config: (err=-32)
[  436.984017][   T14] gs_usb: probe of 4-1:0.0 failed with error -32
[  437.507657][   T14] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  437.697660][   T14] usb 5-1: Using ep0 maxpacket: 8
[  437.705214][   T14] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  437.714845][   T14] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  437.728140][   T14] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  437.741724][   T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  437.759940][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.784303][   T14] usbtmc 5-1:16.0: bulk endpoints not found
[  438.107754][ T4326] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  438.170843][ T6812] usb 5-1: USB disconnect, device number 90
[  438.299336][ T4326] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  438.311129][ T4326] usb 1-1: config 0 has no interface number 1
[  438.317740][ T4326] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  438.327097][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.340736][ T4326] usb 1-1: config 0 descriptor??
[  438.609186][ T9186] binder_alloc: 9182: binder_alloc_buf, no vma
[  438.617495][ T4326] usb 1-1: Could not set interface, error -71
[  438.642722][ T4326] usb 1-1: USB disconnect, device number 87
[  438.948733][   T14] usb 4-1: USB disconnect, device number 74
[  439.139464][ T6812] usb 2-1: USB disconnect, device number 93
[  439.308306][ T9196] fuse: Invalid rootmode
[  439.685831][ T9203] loop3: detected capacity change from 0 to 128
[  439.766093][ T9203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  439.777310][ T9203] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  439.844753][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  440.169883][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.176274][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.537632][ T4361] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  440.678138][ T6812] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[  440.728543][ T4361] usb 4-1: Using ep0 maxpacket: 32
[  440.740867][ T4361] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  440.777682][ T4361] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  440.807484][ T4361] usb 4-1: config 0 interface 0 has no altsetting 0
[  440.855526][ T4361] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  440.880329][ T6812] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  440.882745][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.909100][ T4361] usb 4-1: Product: syz
[  440.910147][ T6812] usb 2-1: config 0 has no interface number 1
[  440.913312][ T4361] usb 4-1: Manufacturer: syz
[  440.913331][ T4361] usb 4-1: SerialNumber: syz
[  440.962742][ T4361] usb 4-1: config 0 descriptor??
[  440.980364][ T6812] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  441.019172][ T6812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.066892][ T6812] usb 2-1: config 0 descriptor??
[  441.217779][   T14] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  441.297128][ T9241] loop0: detected capacity change from 0 to 256
[  441.322253][ T9241] exfat: Deprecated parameter 'utf8'
[  441.335837][ T9241] exfat: Deprecated parameter 'utf8'
[  441.346729][ T9242] binder_alloc: 9228: binder_alloc_buf, no vma
[  441.365573][ T6812] usb 2-1: Could not set interface, error -71
[  441.385709][ T9241] exfat: Deprecated parameter 'namecase'
[  441.392459][ T4361] gs_usb 4-1:0.0: Couldn't get device config: (err=-32)
[  441.399683][ T9172] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  441.408854][ T9241] exfat: Deprecated parameter 'namecase'
[  441.418121][ T4361] gs_usb: probe of 4-1:0.0 failed with error -32
[  441.436971][ T6812] usb 2-1: USB disconnect, device number 94
[  441.445709][   T14] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.476878][   T14] usb 3-1: config 0 interface 0 has no altsetting 0
[  441.498954][ T9241] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  441.516146][   T14] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  441.539156][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.554772][   T14] usb 3-1: config 0 descriptor??
[  441.566683][   T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  441.609448][ T9172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.628118][ T9172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.641578][ T9172] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  441.651486][ T9172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.691600][ T9172] usb 5-1: config 0 descriptor??
[  442.007186][ T9250] fuse: Invalid rootmode
[  442.751843][ T9172] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71
[  442.769978][ T9172] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71
[  442.803745][ T9172] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71
[  442.826868][ T9172] uclogic 0003:256C:006D.000C: failed probing parameters: -71
[  442.852381][ T9172] uclogic: probe of 0003:256C:006D.000C failed with error -71
[  442.893702][ T9172] usb 5-1: USB disconnect, device number 91
[  443.314275][ T6812] usb 4-1: USB disconnect, device number 75
[  443.886205][ T9172] usb 3-1: USB disconnect, device number 88
[  444.178773][ T9268] loop2: detected capacity change from 0 to 512
[  444.233593][ T9268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1679: bg 0: block 5: invalid block bitmap
[  444.277721][ T9268] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  444.287219][ T9268] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1679: invalid indirect mapped block 3 (level 2)
[  444.302328][ T9268] EXT4-fs (loop2): 1 orphan inode deleted
[  444.310273][ T9268] EXT4-fs (loop2): 1 truncate cleaned up
[  444.316387][ T9268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  444.408821][   T27] audit: type=1326 audit(1785825163.142:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.4.1682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f72f9e019 code=0x7ffc0000
[  444.435312][   T27] audit: type=1326 audit(1785825163.142:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.4.1682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f9f72f9e019 code=0x7ffc0000
[  444.460575][   T27] audit: type=1326 audit(1785825163.142:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.4.1682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f72f9e019 code=0x7ffc0000
[  444.607677][ T6812] usb 3-1: new full-speed USB device number 89 using dummy_hcd
[  444.788715][ T9282] loop1: detected capacity change from 0 to 512
[  444.798120][ T9282] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  444.813391][ T6812] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  444.847000][ T6812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  444.870431][ T6812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  444.903538][   T22] usb 5-1: new full-speed USB device number 92 using dummy_hcd
[  444.926611][ T6812] usb 3-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00
[  444.941956][ T6812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.973628][ T6812] usb 3-1: config 0 descriptor??
[  444.995358][   T27] audit: type=1800 audit(1785825163.722:13): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1686" name="file1" dev="loop1" ino=1048596 res=0 errno=0
[  445.049138][ T9282] FAT-fs (loop1): error, clusters badly computed (0 != 1)
[  445.096709][ T9279] loop3: detected capacity change from 0 to 40427
[  445.110451][   T22] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  445.138542][ T9279] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  445.146124][   T22] usb 5-1: config 0 has no interface number 1
[  445.154596][ T9279] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  445.164532][   T22] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  445.177507][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.194209][ T9279] F2FS-fs (loop3): invalid crc value
[  445.214445][ T9279] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  445.228391][   T22] usb 5-1: config 0 descriptor??
[  445.312885][ T9279] F2FS-fs (loop3): Start checkpoint disabled!
[  445.335638][ T9279] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  445.343968][ T9279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  445.394736][ T6812] ntrig 0003:1B96:000F.000D: unbalanced collection at end of report description
[  445.415345][ T6812] ntrig 0003:1B96:000F.000D: parse failed
[  445.421292][ T6812] ntrig: probe of 0003:1B96:000F.000D failed with error -22
[  445.458003][   T22] usb 5-1: Could not set interface, error -71
[  445.467926][ T9172] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  445.485243][   T22] usb 5-1: USB disconnect, device number 92
[  445.597655][ T4322] usb 3-1: USB disconnect, device number 89
[  445.687822][ T9172] usb 2-1: Using ep0 maxpacket: 32
[  445.695604][ T9172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  445.716910][ T9172] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  445.727730][ T9172] usb 2-1: config 0 interface 0 has no altsetting 0
[  445.736966][ T9172] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  445.754867][ T9172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.765057][ T9172] usb 2-1: Product: syz
[  445.777508][ T9172] usb 2-1: Manufacturer: syz
[  445.782746][ T9172] usb 2-1: SerialNumber: syz
[  445.809403][ T9172] usb 2-1: config 0 descriptor??
[  446.176121][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  446.223469][ T9172] gs_usb 2-1:0.0: Couldn't get device config: (err=-32)
[  446.260299][ T9172] gs_usb: probe of 2-1:0.0 failed with error -32
[  446.732215][ T9310] tipc: Started in network mode
[  446.744506][ T9310] tipc: Node identity -, cluster identity 4711
[  447.005829][ T9314] loop3: detected capacity change from 0 to 512
[  447.045950][ T9314] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  447.055776][ T9314] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1697: corrupted in-inode xattr
[  447.070982][ T9314] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1697: couldn't read orphan inode 15 (err -117)
[  447.084320][ T9314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  447.135968][ T9314] =======================================================
[  447.135968][ T9314] WARNING: The mand mount option has been deprecated and
[  447.135968][ T9314]          and is ignored by this kernel. Remove the mand
[  447.135968][ T9314]          option from the mount to silence this warning.
[  447.135968][ T9314] =======================================================
[  447.148751][ T9317] loop4: detected capacity change from 0 to 256
[  447.198046][ T9314] EXT4-fs: Ignoring sb option on remount
[  447.204900][ T9314] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring
[  447.216721][ T9317] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  447.229592][ T9314] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  447.302182][ T9318] Core dump to core aborted: cannot preserve file owner
[  447.784621][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  447.887864][ T9172] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  447.895696][ T4322] usb 3-1: new full-speed USB device number 90 using dummy_hcd
[  448.077792][ T9172] usb 1-1: Using ep0 maxpacket: 16
[  448.088856][ T4322] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  448.101662][ T9172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  448.115595][ T4322] usb 3-1: config 0 has no interface number 1
[  448.127201][ T4322] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  448.143365][ T9172] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  448.157512][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.171922][ T9172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.184959][ T9172] usb 1-1: Product: syz
[  448.204534][ T4322] usb 3-1: config 0 descriptor??
[  448.217721][ T9172] usb 1-1: Manufacturer: syz
[  448.222922][ T9172] usb 1-1: SerialNumber: syz
[  448.225354][ T6813] usb 2-1: USB disconnect, device number 95
[  448.247133][ T9172] usb 1-1: config 0 descriptor??
[  448.342057][ T9334] loop3: detected capacity change from 0 to 512
[  448.524173][ T9334] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  448.591098][ T9334] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  448.599012][ T9334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  448.628752][ T9334] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1705: Unimplemented hash flags: 0x0001
[  448.640836][ T9334] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1705: Corrupt directory, running e2fsck is recommended
[  449.667754][ T6813] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  449.894731][ T6813] usb 5-1: Using ep0 maxpacket: 16
[  449.910691][ T6813] usb 5-1: config 4 has an invalid interface number: 9 but max is 0
[  449.952659][ T6813] usb 5-1: config 4 has no interface number 0
[  449.973760][ T6813] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  449.999791][ T4322] usb 3-1: Could not set interface, error -71
[  450.010844][ T9172] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  450.026907][ T6813] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  450.031370][ T4322] usb 3-1: USB disconnect, device number 90
[  450.042803][ T9172] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  450.092038][ T6813] usb 5-1: config 4 interface 9 has no altsetting 0
[  450.151562][ T6813] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  450.206489][ T6813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.243840][ T6813] usb 5-1: Product: syz
[  450.264439][ T6813] usb 5-1: Manufacturer: syz
[  450.293721][ T6813] usb 5-1: SerialNumber: syz
[  450.333013][ T9342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  450.368721][ T9342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  450.399290][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  450.423284][ T6813] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  450.821754][ T9358] loop1: detected capacity change from 0 to 256
[  450.911711][ T9172] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  451.449821][ T4651] usb 5-1: Failed to submit usb control message: -110
[  451.462568][ T4361] usb 5-1: USB disconnect, device number 93
[  451.512899][ T9172] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  451.526155][ T4651] usb 5-1: unable to send the bmi data to the device: -110
[  451.609724][ T9172] em28xx 1-1:0.0: board has no eeprom
[  451.703116][ T4651] usb 5-1: unable to get target info from device
[  451.881313][ T4651] usb 5-1: could not get target info (-110)
[  451.920719][ T4651] usb 5-1: could not probe fw (-110)
[  452.649373][ T9324] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5)
[  452.727837][ T9172] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  452.735737][ T9172] em28xx 1-1:0.0: dvb set to bulk mode.
[  452.806141][ T9172] em28xx 1-1:0.0: Binding DVB extension
[  452.930415][ T4261] usb 1-1: USB disconnect, device number 88
[  452.937133][ T4261] em28xx 1-1:0.0: Disconnecting em28xx
[  453.303515][ T9384] loop2: detected capacity change from 0 to 512
[  453.460253][ T9384] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  453.532119][ T9384] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  453.540674][ T9384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  453.605292][ T9384] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.1718: Unimplemented hash flags: 0x0001
[  453.616929][ T9384] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1718: Corrupt directory, running e2fsck is recommended
[  454.591001][ T9390] loop1: detected capacity change from 0 to 512
[  454.997598][   T14] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  455.008347][ T9172] em28xx 1-1:0.0: Registering input extension
[  455.014662][ T4261] em28xx 1-1:0.0: Closing input extension
[  455.193837][ T9394] loop4: detected capacity change from 0 to 512
[  455.705711][ T9394] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  455.727686][ T9394] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  455.735373][ T9394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  455.758731][ T9394] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.1722: Unimplemented hash flags: 0x0001
[  455.770365][ T9394] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1722: Corrupt directory, running e2fsck is recommended
[  456.035156][ T4261] em28xx 1-1:0.0: Freeing device
[  456.039867][ T9390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  456.062090][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  457.039094][ T4291] EXT4-fs (loop4): unmounting filesystem.
[  457.047107][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  458.203710][ T9431] --map-set only usable from mangle table
[  459.426825][ T9444] loop1: detected capacity change from 0 to 512
[  461.031143][ T9444] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  461.194090][ T9444] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  461.202037][ T9444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  461.226137][ T9444] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.1737: Unimplemented hash flags: 0x0001
[  461.237772][ T9444] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1737: Corrupt directory, running e2fsck is recommended
[  462.142164][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  462.294059][ T9448] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  462.348238][ T9463] loop1: detected capacity change from 0 to 128
[  462.412716][ T9463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  462.425177][ T9463] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  462.516631][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  462.747676][   T14] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  462.803413][ T9460] loop4: detected capacity change from 0 to 40427
[  462.832292][ T9460] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[  462.859479][ T9460] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  462.887419][ T9460] F2FS-fs (loop4): invalid crc value
[  462.932024][ T9460] F2FS-fs (loop4): Found nat_bits in checkpoint
[  462.938486][   T14] usb 1-1: Using ep0 maxpacket: 32
[  462.957755][   T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  462.997725][   T14] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  463.041738][   T14] usb 1-1: config 0 interface 0 has no altsetting 0
[  463.067222][   T14] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  463.107162][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.127436][   T14] usb 1-1: Product: syz
[  463.136429][   T14] usb 1-1: Manufacturer: syz
[  463.147328][   T14] usb 1-1: SerialNumber: syz
[  463.157108][   T14] usb 1-1: config 0 descriptor??
[  463.286071][ T9460] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  463.301625][ T9460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  464.271694][   T14] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[  464.290839][   T14] gs_usb: probe of 1-1:0.0 failed with error -121
[  464.314340][   T27] audit: type=1800 audit(1785825183.042:14): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1743" name="file2" dev="loop4" ino=10 res=0 errno=0
[  464.502744][ T4291] syz-executor: attempt to access beyond end of device
[  464.502744][ T4291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  464.717696][ T6813] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  464.927885][ T6813] usb 4-1: Using ep0 maxpacket: 32
[  464.937215][ T6813] usb 4-1: config index 0 descriptor too short (expected 3659, got 75)
[  464.977701][ T6813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.027400][ T6813] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  465.066131][ T6813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.084686][ T6813] usb 4-1: Product: syz
[  465.110738][ T6813] usb 4-1: Manufacturer: syz
[  465.117959][ T6813] usb 4-1: SerialNumber: syz
[  465.138659][ T6813] usb 4-1: config 0 descriptor??
[  465.160508][ T6813] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  465.216066][ T9495] fuse: Invalid rootmode
[  465.582049][ T4326] usb 1-1: USB disconnect, device number 89
[  466.936292][ T6813] gspca_sunplus: reg_r err -32
[  466.946059][ T6813] sunplus: probe of 4-1:0.0 failed with error -32
[  467.757409][ T9564] loop4: detected capacity change from 0 to 512
[  468.009323][ T9564] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1763: inode has both inline data and extents flags
[  468.138076][ T9564] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1763: couldn't read orphan inode 15 (err -117)
[  468.208270][   T14] usb 4-1: USB disconnect, device number 77
[  468.214797][ T9564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  468.485897][ T4291] EXT4-fs (loop4): unmounting filesystem.
[  468.570524][ T9580] fuse: Invalid rootmode
[  468.712185][ T9584] loop4: detected capacity change from 0 to 512
[  468.798247][ T9584] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1771: invalid indirect mapped block 256 (level 2)
[  468.930539][ T9584] EXT4-fs (loop4): Remounting filesystem read-only
[  468.940422][ T9584] EXT4-fs (loop4): 2 truncates cleaned up
[  468.946507][ T9584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  469.870864][   T27] audit: type=1326 audit(1785825188.602:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9585 comm="syz.3.1772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993e99e019 code=0x0
[  469.929416][ T4291] EXT4-fs (loop4): unmounting filesystem.
[  470.272054][ T9610] loop1: detected capacity change from 0 to 128
[  470.272968][ T9612] loop3: detected capacity change from 0 to 512
[  470.298553][ T9610] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  470.482261][ T9616] loop2: detected capacity change from 0 to 128
[  470.503687][ T9612] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1781: iget: bad i_size value: 38620345925642
[  470.524339][ T9612] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1781: couldn't read orphan inode 15 (err -117)
[  470.613974][ T9612] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  470.629312][ T9360] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  470.904398][ T9616] syz.2.1783: attempt to access beyond end of device
[  470.904398][ T9616] loop2: rw=2049, sector=145, nr_sectors = 272 limit=128
[  470.922616][ T9619] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1781: bg 0: block 5: invalid block bitmap
[  470.979739][ T9619] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 28
[  471.107709][ T9619] EXT4-fs (loop3): This should not happen!! Data will be lost
[  471.107709][ T9619] 
[  471.127684][ T9619] EXT4-fs (loop3): Total free blocks count 0
[  471.133819][ T9619] EXT4-fs (loop3): Free/Dirty block details
[  471.143733][ T9619] EXT4-fs (loop3): free_blocks=0
[  471.149814][ T9619] EXT4-fs (loop3): dirty_blocks=564
[  471.155458][ T9619] EXT4-fs (loop3): Block reservation details
[  471.163351][ T9619] EXT4-fs (loop3): i_reserved_data_blocks=564
[  471.238205][ T9629] loop4: detected capacity change from 0 to 512
[  471.850365][ T4515] kworker/u4:9: attempt to access beyond end of device
[  471.850365][ T4515] loop2: rw=1, sector=150, nr_sectors = 1 limit=128
[  471.947872][ T4515] Buffer I/O error on dev loop2, logical block 150, lost async page write
[  472.157215][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  473.050867][ T9645] loop2: detected capacity change from 0 to 512
[  473.088478][ T9645] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  473.111265][ T9645] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1793: corrupted in-inode xattr
[  473.136058][ T9645] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1793: couldn't read orphan inode 15 (err -117)
[  473.148315][ T4261] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  473.158624][ T9645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  473.187902][ T9645] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  473.347633][ T4261] usb 5-1: Using ep0 maxpacket: 32
[  473.355195][ T4261] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  473.370924][ T4261] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  473.381599][ T4261] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  473.400152][ T4261] usb 5-1: config 1 has no interface number 0
[  473.413919][ T4261] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  473.428460][ T4261] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  473.443671][ T4261] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  473.457305][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.502575][ T4261] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  473.692126][ T4261] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  473.782716][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  473.791374][ T9655] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  474.122369][   T22] usb 5-1: USB disconnect, device number 94
[  474.134851][   T22] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  474.520418][ T9662] loop3: detected capacity change from 0 to 512
[  475.441022][ T9662] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  476.420112][ T9662] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  476.427805][ T9662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  477.082292][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  477.365663][ T9677] loop0: detected capacity change from 0 to 512
[  477.455257][ T9677] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1803: inode has both inline data and extents flags
[  477.543917][ T9677] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1803: couldn't read orphan inode 15 (err -117)
[  477.572236][ T9677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  477.656373][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'.
[  478.025680][ T9677] bond0: (slave bond_slave_1): Releasing backup interface
[  480.189956][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  480.703432][ T9704] loop0: detected capacity change from 0 to 512
[  481.607991][ T9704] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  481.644889][ T9704] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  481.652698][ T9704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  482.089161][ T9707] Illegal XDP return value 4294967274 on prog  (id 6) dev syz_tun, expect packet loss!
[  482.762552][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  482.817820][ T4361] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  483.027789][ T4361] usb 2-1: Using ep0 maxpacket: 32
[  483.035029][ T4361] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  483.071058][ T4361] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  483.107705][ T4361] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  483.153089][ T4361] usb 2-1: config 1 has no interface number 0
[  483.173909][ T4361] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  483.191803][ T4361] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  483.208627][ T4361] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  483.254228][ T4361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.270377][ T9726] loop2: detected capacity change from 0 to 512
[  483.292050][ T9726] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  483.465214][ T9726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  483.487638][ T6813] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  483.626896][ T4361] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  483.843013][ T4361] snd_usb_pod 2-1:1.1: set_interface failed
[  483.893837][ T4361] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  483.903182][ T4361] snd_usb_pod: probe of 2-1:1.1 failed with error -71
[  483.923577][ T4361] usb 2-1: USB disconnect, device number 96
[  485.247818][ T9726] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  485.627741][ T4326] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  485.772355][ T6813] usb 5-1: device descriptor read/all, error -71
[  485.827774][ T4326] usb 1-1: Using ep0 maxpacket: 32
[  485.834937][ T4326] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[  485.923846][ T4326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.056103][ T4326] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  486.072249][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.080910][ T4326] usb 1-1: Product: syz
[  486.086103][ T4326] usb 1-1: Manufacturer: syz
[  486.094452][ T4326] usb 1-1: SerialNumber: syz
[  486.172951][ T9745] --map-set only usable from mangle table
[  486.846880][ T4326] usb 1-1: config 0 descriptor??
[  486.919867][ T4326] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  487.041151][ T9747] loop1: detected capacity change from 0 to 128
[  487.136547][ T9747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  487.147956][ T9747] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  487.468073][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  489.402798][ T4326] gspca_sunplus: reg_r err -32
[  489.874238][ T9771] loop4: detected capacity change from 0 to 512
[  489.912707][ T9172] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  489.921668][ T9771] EXT4-fs: Ignoring removed nomblk_io_submit option
[  489.994396][ T9771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  490.065460][ T9771] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  490.138027][ T9172] usb 2-1: Using ep0 maxpacket: 32
[  490.149952][ T9172] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  490.169156][ T9172] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  490.183658][ T9172] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  490.198825][ T9172] usb 2-1: config 1 has no interface number 0
[  490.211436][ T9172] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  490.233271][ T9172] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  490.254145][ T9172] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  490.263928][ T9172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.289294][ T4291] EXT4-fs (loop4): unmounting filesystem.
[  490.308411][ T9172] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  490.484229][ T9172] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  491.958267][ T9787] --map-set only usable from mangle table
[  492.395314][ T9172] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  492.513049][ T9789] loop2: detected capacity change from 0 to 512
[  492.676322][ T9172] usb 2-1: USB disconnect, device number 97
[  492.693868][ T9172] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  492.744692][ T9789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.1841: iget: bad extra_isize 58 (inode size 256)
[  492.856384][ T9789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1841: error while reading EA inode 11 err=-117
[  492.888660][ T9789] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  492.918414][ T9789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.1841: iget: bad extra_isize 58 (inode size 256)
[  492.959068][ T9789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1841: error while reading EA inode 11 err=-117
[  492.988104][ T4326] sunplus: probe of 1-1:0.0 failed with error -32
[  492.996897][ T9789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.1841: iget: bad extra_isize 58 (inode size 256)
[  493.018161][ T4326] usb 1-1: USB disconnect, device number 90
[  493.048165][ T9789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1841: error while reading EA inode 18 err=-117
[  493.097917][ T9789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.1841: iget: bad extra_isize 58 (inode size 256)
[  493.117946][ T9789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1841: error while reading EA inode 18 err=-117
[  493.131485][ T9789] EXT4-fs (loop2): 1 orphan inode deleted
[  493.137364][ T9789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  493.235781][ T9789] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.1841: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  493.410914][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  493.667787][ T9172] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  493.867645][ T9172] usb 2-1: Using ep0 maxpacket: 32
[  493.875683][ T9172] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  493.897270][ T9172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.928773][ T9172] usb 2-1: config 0 descriptor??
[  493.961427][ T9172] as10x_usb: device has been detected
[  493.973634][ T9172] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  494.024725][ T9172] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  494.051130][ T9172] as10x_usb: error during firmware upload part1
[  494.065494][ T9172] Registered device nBox DVB-T Dongle
[  494.175585][ T9812] loop4: detected capacity change from 0 to 40427
[  494.251281][ T6271] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  496.388737][ T9811] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  496.398294][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout
[  496.409448][ T9811] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  496.415709][ T9811] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  496.426455][ T9811] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  496.432873][ T9811] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  496.586658][ T6813] usb 2-1: USB disconnect, device number 98
[  496.632638][ T6813] Unregistered device nBox DVB-T Dongle
[  496.636617][ T6813] as10x_usb: device has been disconnected
[  496.674288][ T9838] loop2: detected capacity change from 0 to 256
[  496.733345][ T9838] FAT-fs (loop2): Directory bread(block 64) failed
[  496.759441][ T9838] FAT-fs (loop2): Directory bread(block 65) failed
[  496.777934][ T9838] FAT-fs (loop2): Directory bread(block 66) failed
[  496.786515][ T9838] FAT-fs (loop2): Directory bread(block 67) failed
[  496.801520][ T9838] FAT-fs (loop2): Directory bread(block 68) failed
[  496.832367][ T9838] FAT-fs (loop2): Directory bread(block 69) failed
[  496.864476][ T9838] FAT-fs (loop2): Directory bread(block 70) failed
[  496.877172][ T9838] FAT-fs (loop2): Directory bread(block 71) failed
[  496.914029][ T9838] FAT-fs (loop2): Directory bread(block 72) failed
[  496.957687][ T9838] FAT-fs (loop2): Directory bread(block 73) failed
[  497.248975][ T9360] kworker/u4:5: attempt to access beyond end of device
[  497.248975][ T9360] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256
[  497.752785][ T9172] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  497.867568][ T9862] --map-set only usable from mangle table
[  498.477406][ T9842] loop1: detected capacity change from 0 to 40427
[  498.491937][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout
[  498.535992][ T9842] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x3ffff
[  498.548302][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout
[  498.556567][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout
[  498.558316][ T4280] Bluetooth: hci1: command 0x0c1a tx timeout
[  498.657765][ T9172] usb 3-1: Using ep0 maxpacket: 32
[  498.686545][ T9172] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  498.744939][ T9172] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  498.778274][ T9172] usb 3-1: config 0 interface 0 has no altsetting 0
[  498.812869][ T9172] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  498.857571][ T9172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.865675][ T9172] usb 3-1: Product: syz
[  498.890320][ T9172] usb 3-1: Manufacturer: syz
[  498.895009][ T9172] usb 3-1: SerialNumber: syz
[  498.942003][ T9172] usb 3-1: config 0 descriptor??
[  499.016537][ T9882] loop4: detected capacity change from 0 to 512
[  499.112347][ T9882] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  499.227930][   T14] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  499.263346][ T9882] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  499.300240][ T9882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  499.356132][ T9172] gs_usb 3-1:0.0: Couldn't get device config: (err=-121)
[  499.374984][ T9172] gs_usb: probe of 3-1:0.0 failed with error -121
[  499.417818][   T14] usb 2-1: Using ep0 maxpacket: 16
[  499.425328][   T14] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  499.454850][   T14] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  499.510259][   T14] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  499.525626][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.538061][ T9886] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  499.544322][   T14] usb 2-1: Product: syz
[  499.610668][   T14] usb 2-1: Manufacturer: syz
[  499.622697][ T9886] EXT4-fs (loop4): Remounting filesystem read-only
[  499.634650][   T14] usb 2-1: SerialNumber: syz
[  499.663575][   T14] r8152-cfgselector 2-1: config 0 descriptor??
[  500.074886][ T9894] --map-set only usable from mangle table
[  500.819470][ T4362] usb 3-1: USB disconnect, device number 91
[  500.885112][ T9896] loop2: detected capacity change from 0 to 256
[  501.610612][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.617371][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.680729][ T9907] hub 8-0:1.0: USB hub found
[  501.701353][ T9907] hub 8-0:1.0: 1 port detected
[  503.396186][ T9922] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1883'.
[  503.940931][ T9926] --map-set only usable from mangle table
[  504.808968][   T14] r8152-cfgselector 2-1: Unknown version 0x0000
[  505.080985][   T14] r8152-cfgselector 2-1: USB disconnect, device number 99
[  507.123170][ T4291] EXT4-fs (loop4): unmounting filesystem.
[  507.166264][ T9957] loop1: detected capacity change from 0 to 128
[  507.263995][ T9957] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  507.491659][ T9961] --map-set only usable from mangle table
[  508.377903][ T4343] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  509.695200][ T9967] loop1: detected capacity change from 0 to 40427
[  509.727675][ T9967] F2FS-fs (loop1): Invalid log_blocksize (2060), supports only 12
[  509.737348][ T9967] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  509.746968][ T9967] F2FS-fs (loop1): invalid crc value
[  509.754919][ T9967] F2FS-fs (loop1): invalid crc value
[  509.762728][ T9967] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  509.818110][ T4362] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  510.047628][ T4362] usb 4-1: Using ep0 maxpacket: 32
[  510.059800][ T4362] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  510.078236][ T4362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.108905][ T4362] usb 4-1: config 0 descriptor??
[  510.137217][ T4362] as10x_usb: device has been detected
[  510.143899][ T4362] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  510.195844][ T4362] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  510.226510][ T4362] as10x_usb: error during firmware upload part1
[  510.247207][ T4362] Registered device nBox DVB-T Dongle
[  510.529628][ T9995] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1905'.
[  511.589110][T10004] --map-set only usable from mangle table
[  512.263171][T10008] loop1: detected capacity change from 0 to 512
[  512.348780][T10008] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  512.360149][T10008] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.1909: corrupted in-inode xattr
[  512.375914][T10008] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1909: couldn't read orphan inode 15 (err -117)
[  512.401403][T10008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  512.407709][ T9980] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  512.417873][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout
[  512.449924][T10008] EXT4-fs: Ignoring sb option on remount
[  512.459761][T10008] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  512.488654][T10008] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  512.516568][ T9980] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  512.529255][ T9980] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  512.549008][ T9980] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  512.555634][ T9980] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  512.603970][ T4326] usb 4-1: USB disconnect, device number 78
[  512.662971][ T4326] Unregistered device nBox DVB-T Dongle
[  512.667165][ T4326] as10x_usb: device has been disconnected
[  513.092853][T10033] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1917'.
[  513.108196][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  513.188013][ T4326] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  513.300776][T10039] loop1: detected capacity change from 0 to 1024
[  513.336629][T10039] EXT4-fs: inline encryption not supported
[  513.377954][ T4326] usb 4-1: Using ep0 maxpacket: 32
[  513.385524][ T4326] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  513.399425][ T4326] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  513.417922][ T4326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  513.431505][T10039] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  513.446686][ T4326] usb 4-1: config 1 has no interface number 0
[  513.457926][ T4326] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  513.471562][ T4326] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  513.502893][ T4326] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  513.523139][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.555970][ T4326] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  513.576997][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  513.751294][ T4326] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  514.127711][ T4362] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  514.186799][ T4326] usb 4-1: USB disconnect, device number 79
[  514.194093][ T4326] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  514.347724][ T4362] usb 5-1: Using ep0 maxpacket: 32
[  514.362840][ T4362] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  514.372527][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.402518][ T4362] usb 5-1: config 0 descriptor??
[  514.420822][ T4362] as10x_usb: device has been detected
[  514.426639][ T4362] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  514.447752][   T14] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  514.460751][ T4362] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  514.474285][ T4362] as10x_usb: error during firmware upload part1
[  514.480861][ T4362] Registered device nBox DVB-T Dongle
[  514.487801][ T4280] Bluetooth: hci1: command 0x0c1a tx timeout
[  514.567794][ T4280] Bluetooth: hci4: command 0x0c1a tx timeout
[  514.573933][ T4280] Bluetooth: hci3: command 0x0c1a tx timeout
[  514.580205][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout
[  514.651519][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'.
[  514.660672][   T14] usb 1-1: Using ep0 maxpacket: 16
[  514.675871][   T14] usb 1-1: config 0 has no interfaces?
[  514.719747][   T14] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  514.738640][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.764263][   T14] usb 1-1: Product: syz
[  514.779517][   T14] usb 1-1: Manufacturer: syz
[  514.784196][   T14] usb 1-1: SerialNumber: syz
[  514.794485][T10067] loop1: detected capacity change from 0 to 512
[  514.803890][T10067] EXT4-fs: Ignoring removed i_version option
[  514.817094][T10067] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  514.836457][   T14] usb 1-1: config 0 descriptor??
[  514.841774][T10067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  514.846221][T10069] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1930'.
[  514.878845][T10067] EXT4-fs error (device loop1): __ext4_fill_super:5465: inode #2: comm syz.1.1929: iget: bogus i_mode (755)
[  514.906154][T10067] EXT4-fs (loop1): get root inode failed
[  514.942231][T10067] EXT4-fs (loop1): mount failed
[  515.885749][T10079] loop3: detected capacity change from 0 to 40427
[  515.907377][T10079] F2FS-fs (loop3): Invalid log_blocksize (2060), supports only 12
[  515.928572][T10079] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  515.939337][T10079] F2FS-fs (loop3): invalid crc value
[  515.945615][T10079] F2FS-fs (loop3): invalid crc value
[  515.951469][T10079] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  516.074117][T10100] loop3: detected capacity change from 0 to 2048
[  516.103211][T10100] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  516.112241][T10100] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.162154][T10100] fs-verity: sha512 using implementation "sha512-avx2"
[  516.264250][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  516.346701][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1940'.
[  516.453215][T10106] bond0: (slave bond_slave_1): Releasing backup interface
[  516.555597][T10109] loop3: detected capacity change from 0 to 1024
[  516.563800][T10109] EXT4-fs: Ignoring removed nobh option
[  516.569696][T10109] EXT4-fs: Ignoring removed bh option
[  516.609067][T10109] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  516.622967][T10109] System zones: 0-1, 3-12
[  516.632324][T10109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  516.681200][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  516.727907][T10053] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  516.727934][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout
[  516.862315][T10053] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  516.869052][T10053] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  516.875164][T10053] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  516.881554][T10053] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  516.998621][ T6813] usb 5-1: USB disconnect, device number 97
[  517.044918][ T6813] Unregistered device nBox DVB-T Dongle
[  517.059957][ T6813] as10x_usb: device has been disconnected
[  517.284757][   T26] usb 1-1: USB disconnect, device number 91
[  517.402638][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'.
[  517.752490][T10139] fuse: Bad value for 'fd'
[  518.687672][ T6813] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  518.690990][T10170] fuse: Bad value for 'fd'
[  518.807737][ T4280] Bluetooth: hci1: command 0x0c1a tx timeout
[  518.877733][ T6813] usb 1-1: Using ep0 maxpacket: 16
[  518.888453][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout
[  518.897669][ T4280] Bluetooth: hci4: command 0x0c1a tx timeout
[  518.897829][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout
[  518.911207][ T6813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  518.947976][ T6813] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  518.960464][ T6813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.972673][ T6813] usb 1-1: Product: syz
[  518.977836][ T6813] usb 1-1: Manufacturer: syz
[  518.985750][ T6813] usb 1-1: SerialNumber: syz
[  519.000115][ T6813] usb 1-1: config 0 descriptor??
[  519.522921][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'.
[  519.626891][T10168] loop2: detected capacity change from 0 to 40427
[  519.672954][T10168] F2FS-fs (loop2): invalid crc value
[  519.681321][T10168] F2FS-fs (loop2): Found nat_bits in checkpoint
[  520.591581][T10188] syz.3.1965 (10188) used greatest stack depth: 16704 bytes left
[  520.665952][T10168] F2FS-fs (loop2): Start checkpoint disabled!
[  520.704089][T10168] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  520.869500][T10168] syz.2.1962: attempt to access beyond end of device
[  520.869500][T10168] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  521.127359][ T9360] kworker/u4:5: attempt to access beyond end of device
[  521.127359][ T9360] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  521.146456][ T9360] kworker/u4:5: attempt to access beyond end of device
[  521.146456][ T9360] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  521.463661][ T6813] usb 1-1: USB disconnect, device number 92
[  521.488338][ T9172] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  521.740813][ T9172] usb 2-1: Using ep0 maxpacket: 16
[  521.751552][ T9172] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  521.782957][ T9172] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  521.819407][ T9172] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  521.846614][ T9172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.861520][ T4362] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  521.880670][ T9172] usb 2-1: Product: syz
[  521.901685][ T9172] usb 2-1: Manufacturer: syz
[  521.906456][ T9172] usb 2-1: SerialNumber: syz
[  521.941100][ T9172] usb 2-1: config 0 descriptor??
[  522.047703][ T4362] usb 3-1: Using ep0 maxpacket: 32
[  522.060656][ T4362] usb 3-1: config index 0 descriptor too short (expected 3659, got 75)
[  522.091863][ T4362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.138481][ T4362] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  522.154505][ T4362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.163608][ T4362] usb 3-1: Product: syz
[  522.169206][ T4362] usb 3-1: Manufacturer: syz
[  522.173907][ T4362] usb 3-1: SerialNumber: syz
[  522.196117][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'.
[  522.198349][ T4362] usb 3-1: config 0 descriptor??
[  522.224004][ T4362] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  522.288204][T10232] loop0: detected capacity change from 0 to 512
[  522.338393][T10232] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1980: inode has both inline data and extents flags
[  522.353828][T10232] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1980: couldn't read orphan inode 15 (err -117)
[  522.375095][T10232] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  522.463316][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'.
[  522.581080][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  524.029178][T10272] loop3: detected capacity change from 0 to 512
[  524.052539][ T4362] gspca_sunplus: reg_r err -32
[  524.060196][ T4362] sunplus: probe of 3-1:0.0 failed with error -32
[  525.743735][T10272] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  526.735556][ T9172] usb 3-1: USB disconnect, device number 92
[  526.755959][T10272] EXT4-fs: error -4 creating inode table initialization thread
[  526.764610][T10272] EXT4-fs (loop3): mount failed
[  527.355405][ T4326] usb 2-1: USB disconnect, device number 100
[  529.021245][T10302] fuse: Bad value for 'fd'
[  531.525875][T10318] loop4: detected capacity change from 0 to 128
[  531.683272][T10318] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  531.763658][T10327] loop3: detected capacity change from 0 to 512
[  532.739352][T10327] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  532.752975][   T47] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  533.084928][T10327] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  533.092920][T10327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  533.119971][T10327] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.2003: Unimplemented hash flags: 0x0001
[  533.131785][T10327] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2003: Corrupt directory, running e2fsck is recommended
[  534.551480][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  534.794456][T10339] loop4: detected capacity change from 0 to 256
[  535.203997][   T22] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  535.407592][   T22] usb 2-1: Using ep0 maxpacket: 32
[  535.416011][   T22] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  535.431652][   T22] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  535.446248][   T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  535.462294][   T22] usb 2-1: config 1 has no interface number 0
[  535.562803][   T22] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  535.573990][   T22] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  535.586969][   T22] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  535.596137][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.620791][   T22] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  535.691499][ T4361] smpboot: CPU 1 is now offline
[  535.781381][T10350] x86: Booting SMP configuration:
[  535.797002][T10354] loop2: detected capacity change from 0 to 1024
[  535.805470][T10350] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  535.824003][   T22] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  535.842013][T10354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  535.945884][T10354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  536.179680][T10362] loop0: detected capacity change from 0 to 128
[  536.217261][T10362] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  536.249145][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  536.271090][ T9172] usb 2-1: USB disconnect, device number 101
[  536.300498][ T9172] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  536.406504][ T9557] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  536.760973][T10378] binder: 10377:10378 ioctl c0306201 2000000003c0 returned -14
[  537.448404][T10379] loop0: detected capacity change from 0 to 131072
[  537.477992][T10379] F2FS-fs (loop0): Test dummy encryption mode enabled
[  537.485872][T10379] F2FS-fs (loop0): invalid crc value
[  537.566174][T10379] F2FS-fs (loop0): Found nat_bits in checkpoint
[  537.637762][T10379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  537.729546][T10386] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2025'.
[  539.130660][T10393] fscrypt (loop0, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  540.212392][T10391] loop3: detected capacity change from 0 to 2048
[  540.406493][T10391] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  540.432722][T10391] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  540.640448][T10409] loop4: detected capacity change from 0 to 128
[  540.693324][T10409] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  540.704444][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  540.909255][T10331] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  541.471717][T10424] --map-set only usable from mangle table
[  541.768738][   T14] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  541.884974][T10434] loop0: detected capacity change from 0 to 8192
[  541.957934][   T14] usb 5-1: Using ep0 maxpacket: 32
[  541.965964][   T14] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  541.988665][   T14] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  542.003936][   T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  542.015713][   T14] usb 5-1: config 1 has no interface number 0
[  542.022353][   T14] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  542.035369][   T14] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  542.049090][   T14] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  542.065090][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.232957][   T14] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  542.286031][   T14] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  542.543620][T10446] loop0: detected capacity change from 0 to 128
[  542.595592][T10446] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  542.711969][ T4362] usb 5-1: USB disconnect, device number 98
[  542.732268][ T4362] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  542.786744][ T9557] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  542.927775][   T14] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  543.117640][   T14] usb 4-1: Using ep0 maxpacket: 16
[  543.124309][   T14] usb 4-1: config 4 has an invalid interface number: 9 but max is 0
[  543.144317][   T14] usb 4-1: config 4 has no interface number 0
[  543.157358][   T14] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  543.178283][   T14] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  543.189762][   T14] usb 4-1: config 4 interface 9 has no altsetting 0
[  543.210926][   T14] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  543.241039][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.268236][   T14] usb 4-1: Product: syz
[  543.283383][   T14] usb 4-1: Manufacturer: syz
[  543.297419][   T14] usb 4-1: SerialNumber: syz
[  543.322282][T10448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  543.333107][T10448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  543.364871][   T14] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  543.375096][T10461] loop2: detected capacity change from 0 to 16
[  543.384494][T10460] loop4: detected capacity change from 0 to 512
[  543.437124][T10461] erofs: (device loop2): mounted with root inode @ nid 36.
[  543.468958][T10460] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  543.481827][T10460] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  543.580773][ T9362] usb 4-1: Failed to submit usb control message: -71
[  543.580987][   T14] usb 4-1: USB disconnect, device number 80
[  543.604467][ T9362] usb 4-1: unable to send the bmi data to the device: -71
[  543.657048][ T9362] usb 4-1: unable to get target info from device
[  543.670126][ T9362] usb 4-1: could not get target info (-71)
[  543.676129][ T9362] usb 4-1: could not probe fw (-71)
[  546.237357][ T4291] EXT4-fs (loop4): unmounting filesystem.
[  546.579299][T10482] --map-set only usable from mangle table
[  546.836905][T10488] --map-set only usable from mangle table
[  546.851467][ T9172] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  547.037928][ T9172] usb 1-1: Using ep0 maxpacket: 32
[  547.045543][ T9172] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[  547.072580][ T9172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  547.102830][ T9172] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  547.131714][ T9172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.153215][ T9172] usb 1-1: Product: syz
[  547.162646][ T9172] usb 1-1: Manufacturer: syz
[  547.180087][ T9172] usb 1-1: SerialNumber: syz
[  547.196782][ T9172] usb 1-1: config 0 descriptor??
[  547.312116][ T9172] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  548.067782][ T4261] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  548.097665][   T14] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  548.953011][T10504] loop4: detected capacity change from 0 to 256
[  549.737403][ T9172] gspca_sunplus: reg_r err -110
[  549.767773][   T14] usb 2-1: Using ep0 maxpacket: 16
[  550.735107][ T4261] usb 3-1: Using ep0 maxpacket: 32
[  550.745209][ T4261] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  550.754520][   T14] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  550.907533][T10504] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d)
[  552.768911][ T4261] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  553.414358][   T14] usb 2-1: string descriptor 0 read error: -71
[  553.437151][   T14] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  553.454457][ T4261] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  553.497687][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.512444][ T4261] usb 3-1: config 1 has no interface number 0
[  553.548645][ T4261] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  553.561720][   T14] r8152-cfgselector 2-1: config 0 descriptor??
[  553.602935][T10510] loop2: detected capacity change from 0 to 512
[  553.611126][   T14] r8152-cfgselector 2-1: can't set config #0, error -71
[  553.619775][ T4261] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  553.657902][   T14] r8152-cfgselector 2-1: Unknown version 0x0000
[  553.697256][   T14] r8152-cfgselector 2-1: USB disconnect, device number 102
[  553.705070][T10510] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  553.717683][ T4261] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  553.762490][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.782088][T10510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002]
[  553.816156][T10510] System zones: 1-12
[  553.857866][ T4261] usb 3-1: can't set config #1, error -71
[  553.866720][T10510] EXT4-fs (loop2): orphan cleanup on readonly fs
[  553.897755][ T4261] usb 3-1: USB disconnect, device number 93
[  553.915543][T10510] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2067: bg 0: block 361: padding at end of block bitmap is not set
[  554.003995][T10510] EXT4-fs (loop2): Remounting filesystem read-only
[  554.031098][T10510] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  554.075706][T10510] EXT4-fs (loop2): Remounting filesystem read-only
[  554.097647][T10510] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.2067: attempt to clear invalid blocks 33619980 len 1
[  554.146140][T10510] EXT4-fs (loop2): Remounting filesystem read-only
[  554.167727][T10510] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2067: invalid indirect mapped block 1811939328 (level 0)
[  554.199812][T10510] EXT4-fs (loop2): Remounting filesystem read-only
[  554.213413][T10510] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2067: invalid indirect mapped block 2 (level 2)
[  554.243264][T10510] EXT4-fs (loop2): Remounting filesystem read-only
[  554.257145][T10510] EXT4-fs (loop2): 1 truncate cleaned up
[  554.269691][T10510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  554.392395][T10510] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 5: comm syz.2.2067: lblock 0 mapped to illegal pblock 5 (length 1)
[  554.461690][T10510] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2067: error -117 reading directory block
[  554.505298][T10510] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 5: comm syz.2.2067: lblock 0 mapped to illegal pblock 5 (length 1)
[  554.562113][T10510] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2067: error -117 reading directory block
[  554.607861][ T9172] sunplus: probe of 1-1:0.0 failed with error -110
[  554.627206][ T9172] usb 1-1: USB disconnect, device number 93
[  554.830016][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  555.878719][T10529] --map-set only usable from mangle table
[  556.296961][T10532] loop1: detected capacity change from 0 to 128
[  556.353543][T10532] EXT4-fs (loop1): Test dummy encryption mode enabled
[  556.422542][T10532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  556.442140][T10532] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  556.648078][ T4261] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  556.802161][T10532] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  556.847590][ T4261] usb 1-1: Using ep0 maxpacket: 32
[  556.854255][ T4261] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[  556.898745][ T4261] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  556.965122][ T4261] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  557.016043][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.057868][ T4261] usb 1-1: Product: syz
[  557.082481][ T4261] usb 1-1: Manufacturer: syz
[  557.114034][ T4261] usb 1-1: SerialNumber: syz
[  557.135648][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  557.145474][ T4261] usb 1-1: config 0 descriptor??
[  557.186453][ T4261] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  557.798310][T10539] loop4: detected capacity change from 0 to 40427
[  557.830959][T10560] loop1: detected capacity change from 0 to 512
[  557.862124][T10539] F2FS-fs (loop4): invalid crc value
[  557.888053][T10560] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  557.901418][T10539] F2FS-fs (loop4): Found nat_bits in checkpoint
[  557.993628][T10560] EXT4-fs (loop1): 1 truncate cleaned up
[  558.031335][T10560] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  558.195388][T10539] F2FS-fs (loop4): Start checkpoint disabled!
[  558.319436][T10539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  558.361669][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  558.504716][T10566] loop2: detected capacity change from 0 to 1024
[  558.558653][T10566] EXT4-fs (loop2): filesystem is read-only
[  558.575017][T10566] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  558.626384][T10566] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #32: comm syz.2.2081: iget: special inode unallocated
[  558.668217][T10566] EXT4-fs (loop2): no journal found
[  558.683989][T10566] EXT4-fs (loop2): can't get journal size
[  558.714112][T10331] kworker/u4:22: attempt to access beyond end of device
[  558.714112][T10331] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  558.714179][T10566] EXT4-fs (loop2): filesystem is read-only
[  558.714218][T10566] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  558.731359][T10331] kworker/u4:22: attempt to access beyond end of device
[  558.731359][T10331] loop4: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[  558.869382][T10571] loop1: detected capacity change from 0 to 512
[  558.928850][T10571] EXT4-fs (loop1): orphan cleanup on readonly fs
[  558.955732][T10571] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  559.037119][T10566] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.2081: bad inode number: 15
[  559.052420][T10571] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  559.134140][T10571] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2084: attempt to clear invalid blocks 2 len 1
[  559.204801][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  559.214636][T10571] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2084: invalid indirect mapped block 1819239214 (level 0)
[  559.296488][T10571] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2084: invalid indirect mapped block 1819239214 (level 1)
[  559.362001][T10571] EXT4-fs (loop1): 1 truncate cleaned up
[  559.375233][T10571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  559.493859][T10571] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  559.648405][ T4274] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0
[  560.145894][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  560.274911][ T9362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.295769][ T4362] usb 1-1: USB disconnect, device number 94
[  560.309071][    T7] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  560.433984][ T9362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.497614][    T7] usb 5-1: Using ep0 maxpacket: 32
[  560.505210][    T7] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  560.523768][    T7] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  560.574597][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  560.607744][    T7] usb 5-1: config 1 has no interface number 0
[  560.613937][    T7] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  560.679727][    T7] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  560.713361][    T7] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  560.757628][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.814192][    T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  560.843148][ T9362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.993232][ T9362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.012282][    T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  561.354826][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  561.367557][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  561.377744][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  561.385722][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  561.397758][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  561.405149][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  561.445494][    T7] usb 5-1: USB disconnect, device number 99
[  561.455012][    T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  561.776233][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  561.782690][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.447634][ T4277] Bluetooth: hci1: command 0x0409 tx timeout
[  563.690056][T10599] chnl_net:caif_netlink_parms(): no params data found
[  563.810180][T10628] loop2: detected capacity change from 0 to 512
[  563.968977][T10628] EXT4-fs: Ignoring removed mblk_io_submit option
[  564.076422][T10599] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.084340][T10599] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.093157][T10599] device bridge_slave_0 entered promiscuous mode
[  564.104987][T10628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  564.138094][T10628] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  564.161815][T10599] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.178520][T10599] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.216204][T10599] device bridge_slave_1 entered promiscuous mode
[  564.304650][T10599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.370371][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  564.384121][T10599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.460836][T10599] team0: Port device team_slave_0 added
[  564.540999][T10599] team0: Port device team_slave_1 added
[  564.872366][T10599] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.882238][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  564.985146][T10599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.041305][T10599] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.077887][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.149807][T10599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.453194][T10599] device hsr_slave_0 entered promiscuous mode
[  565.475348][T10599] device hsr_slave_1 entered promiscuous mode
[  565.498683][T10599] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  565.506346][T10599] Cannot create hsr debugfs directory
[  565.528025][ T4277] Bluetooth: hci1: command 0x041b tx timeout
[  565.563183][ T9362] device hsr_slave_0 left promiscuous mode
[  565.579540][ T9362] device hsr_slave_1 left promiscuous mode
[  565.617318][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  565.639108][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.665090][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.695630][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.726200][ T9362] device bridge_slave_1 left promiscuous mode
[  565.743380][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.758854][T10652] loop2: detected capacity change from 0 to 40427
[  565.776060][ T9362] device bridge_slave_0 left promiscuous mode
[  565.793334][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.801454][T10652] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value
[  565.893003][ T9362] device veth1_macvtap left promiscuous mode
[  565.907439][ T9362] device veth0_macvtap left promiscuous mode
[  565.920772][ T9362] device veth1_vlan left promiscuous mode
[  565.938278][ T9362] device veth0_vlan left promiscuous mode
[  566.639706][T10675] loop2: detected capacity change from 0 to 512
[  566.754453][T10675] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  566.816638][T10675] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.2109: corrupted in-inode xattr
[  566.868250][T10675] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2109: couldn't read orphan inode 15 (err -117)
[  566.888557][T10675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  566.983249][T10675] EXT4-fs: Ignoring sb option on remount
[  567.009912][T10675] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring
[  567.037875][T10675] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  567.607811][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[  567.627377][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  567.895726][ T9362] team0 (unregistering): Port device team_slave_1 removed
[  568.000095][ T9362] team0 (unregistering): Port device team_slave_0 removed
[  568.066478][ T9362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  568.143090][ T9362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  568.484538][T10693] loop0: detected capacity change from 0 to 1024
[  568.546532][T10693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  568.562514][T10693] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  568.975750][ T9362] bond0 (unregistering): Released all slaves
[  570.566137][ T4277] Bluetooth: hci1: command 0x0419 tx timeout
[  570.927693][T10599] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  570.937999][T10599] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  570.957847][T10599] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  570.978055][T10599] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  571.109017][T10599] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.138225][T10599] 8021q: adding VLAN 0 to HW filter on device team0
[  571.209703][T10599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  571.227511][T10599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  571.576881][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  571.612828][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  571.662766][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  571.696028][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  571.725922][T10331] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.734889][T10331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.761850][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  571.781218][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  571.796462][T10331] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.803837][T10331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.824518][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  571.833726][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  571.853471][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  571.873959][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  571.888841][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  571.906935][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  571.918526][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  571.927355][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  571.946246][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  571.956893][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  572.049641][T10599] 8021q: adding VLAN 0 to HW filter on device batadv0
[  572.059730][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  572.080578][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  572.148645][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  572.209256][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  572.216976][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  572.707333][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  573.560475][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  573.595877][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  573.667051][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  573.698801][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  573.732058][T10599] device veth0_vlan entered promiscuous mode
[  573.766899][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  573.784361][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  573.825393][T10599] device veth1_vlan entered promiscuous mode
[  573.914828][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  573.948643][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  573.971408][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  573.998572][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  574.032705][T10599] device veth0_macvtap entered promiscuous mode
[  574.070688][T10599] device veth1_macvtap entered promiscuous mode
[  574.127729][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.164827][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.195392][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.227555][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.237440][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.286596][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.314717][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  574.345506][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.376983][T10599] batman_adv: batadv0: Interface activated: batadv_slave_0
[  574.398668][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  574.416838][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  574.429447][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  574.448569][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  574.510874][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.534126][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.550333][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.566027][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.583987][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.600708][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.615990][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  574.629230][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  574.673641][T10599] batman_adv: batadv0: Interface activated: batadv_slave_1
[  574.698033][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  574.714516][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  574.726924][T10599] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.750779][T10599] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.765962][T10599] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.776669][T10599] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.007115][ T9360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.027310][ T9360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.070071][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  575.113272][ T9360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.146353][ T9360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.149323][T10713] overlayfs: failed to resolve './file0': -2
[  575.186988][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  575.530504][T10736] loop0: detected capacity change from 0 to 256
[  575.570685][T10740] loop2: detected capacity change from 0 to 128
[  575.783873][T10740] syz.2.2123: attempt to access beyond end of device
[  575.783873][T10740] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128
[  576.737732][   T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  576.965229][   T26] usb 6-1: Using ep0 maxpacket: 32
[  577.002981][   T26] usb 6-1: config index 0 descriptor too short (expected 3659, got 75)
[  577.031932][   T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  577.072377][   T26] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  577.102162][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.146425][   T26] usb 6-1: Product: syz
[  577.151235][   T26] usb 6-1: Manufacturer: syz
[  577.155869][   T26] usb 6-1: SerialNumber: syz
[  577.195478][   T26] usb 6-1: config 0 descriptor??
[  577.228776][T10752] --map-set only usable from mangle table
[  577.231493][   T26] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  577.714213][T10769] loop0: detected capacity change from 0 to 512
[  577.864154][T10769] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  577.907919][T10769] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  578.120147][T10777] loop2: detected capacity change from 0 to 4096
[  578.151264][T10777] EXT4-fs: inline encryption not supported
[  578.186247][T10777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  578.225824][T10777] EXT4-fs (loop2): Test dummy encryption mode enabled
[  578.269791][T10777] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  578.283191][T10777] System zones: 0-5
[  578.326851][T10777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  578.522654][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  579.039374][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  579.427646][T10814] binder: binder_mmap: 10813 200000000000-200000003000 bad vm_flags failed -1
[  579.582432][T10819] binder: BINDER_SET_CONTEXT_MGR already set
[  579.627668][T10819] binder: 10818:10819 ioctl 4018620d 200000004a80 returned -16
[  580.313215][   T26] usb 6-1: USB disconnect, device number 2
[  581.060313][T10844] --map-set only usable from mangle table
[  581.857790][ T6812] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  582.061182][ T6812] usb 6-1: Using ep0 maxpacket: 16
[  582.086476][ T6812] usb 6-1: config 4 has an invalid interface number: 9 but max is 0
[  582.130752][ T6812] usb 6-1: config 4 has no interface number 0
[  582.174014][ T6812] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  582.192141][ T6812] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  582.223007][ T6812] usb 6-1: config 4 interface 9 has no altsetting 0
[  582.245431][ T6812] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  582.277662][ T6812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.295986][ T6812] usb 6-1: Product: syz
[  582.312997][   T14] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  582.322844][ T6812] usb 6-1: Manufacturer: syz
[  582.343647][ T6812] usb 6-1: SerialNumber: syz
[  582.370183][T10866] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  582.387772][T10866] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  582.451802][ T6812] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  582.520197][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  582.556575][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.614806][ T9557] usb 6-1: Failed to submit usb control message: -71
[  582.622684][ T6812] usb 6-1: USB disconnect, device number 3
[  582.627582][   T14] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  582.633998][ T9557] usb 6-1: unable to send the bmi data to the device: -71
[  582.683572][ T9557] usb 6-1: unable to get target info from device
[  582.684439][   T14] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  582.709975][ T9557] usb 6-1: could not get target info (-71)
[  582.715943][ T9557] usb 6-1: could not probe fw (-71)
[  582.779767][   T14] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  582.815654][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.843451][   T14] usb 4-1: Product: syz
[  582.858908][   T14] usb 4-1: Manufacturer: syz
[  582.875661][   T14] usb 4-1: SerialNumber: syz
[  582.895969][   T14] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  582.938340][   T14] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  582.956884][T10905] loop4: detected capacity change from 0 to 128
[  582.980063][   T14] usbserial_generic 4-1:1.0: generic converter detected
[  583.005454][   T14] usb 4-1: generic converter now attached to ttyUSB0
[  583.017003][T10905] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  583.123392][   T14] usb 4-1: USB disconnect, device number 81
[  583.146659][   T14] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  583.194614][   T14] usbserial_generic 4-1:1.0: device disconnected
[  583.201374][    T7] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  583.285543][ T9362] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  583.407665][    T7] usb 1-1: Using ep0 maxpacket: 32
[  583.418578][    T7] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[  583.447325][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.453213][T10914] binder_alloc: 10908: binder_alloc_buf, no vma
[  583.486516][    T7] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  583.526594][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.558499][    T7] usb 1-1: Product: syz
[  583.563218][    T7] usb 1-1: Manufacturer: syz
[  583.598667][    T7] usb 1-1: SerialNumber: syz
[  583.628210][    T7] usb 1-1: config 0 descriptor??
[  583.665874][    T7] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  584.527974][ T6812] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  584.729719][ T6812] usb 6-1: Using ep0 maxpacket: 32
[  584.742862][ T6812] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  584.768770][ T6812] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  584.802900][ T6812] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  584.844455][ T6812] usb 6-1: config 1 has no interface number 0
[  584.851478][ T6812] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  584.888698][ T6812] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  584.970041][ T6812] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  584.996057][ T6812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.062178][ T6812] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  585.258749][ T6812] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  585.702804][ T6812] usb 6-1: USB disconnect, device number 4
[  585.716903][ T6812] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  586.378180][T10947] --map-set only usable from mangle table
[  586.671636][    T7] gspca_sunplus: reg_r err -110
[  586.676674][    T7] sunplus: probe of 1-1:0.0 failed with error -110
[  586.788654][    T7] usb 1-1: USB disconnect, device number 95
[  587.177731][ T4380] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  587.377411][ T4380] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.407722][    T7] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  587.435825][ T4380] usb 6-1: config 0 interface 0 has no altsetting 0
[  587.455225][ T4380] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  587.482113][ T4380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.547294][ T4380] usb 6-1: config 0 descriptor??
[  587.569803][ T4380] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  587.609617][T10972] binder_alloc: 10968: binder_alloc_buf, no vma
[  587.617714][    T7] usb 1-1: Using ep0 maxpacket: 16
[  587.626220][    T7] usb 1-1: config 4 has an invalid interface number: 9 but max is 0
[  587.668823][    T7] usb 1-1: config 4 has no interface number 0
[  587.691206][    T7] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  587.724488][    T7] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  587.771207][    T7] usb 1-1: config 4 interface 9 has no altsetting 0
[  587.808735][    T7] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  587.840784][T10974] loop2: detected capacity change from 0 to 512
[  587.857312][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.877308][    T7] usb 1-1: Product: syz
[  587.881729][    T7] usb 1-1: Manufacturer: syz
[  587.893573][    T7] usb 1-1: SerialNumber: syz
[  587.920250][T10961] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  587.932059][T10974] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2172: inode has both inline data and extents flags
[  587.945744][T10961] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  587.974145][T10974] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2172: couldn't read orphan inode 15 (err -117)
[  587.998384][T10974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  588.008973][    T7] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  588.083076][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'.
[  588.172569][ T9362] usb 1-1: Failed to submit usb control message: -71
[  588.172731][    T7] usb 1-1: USB disconnect, device number 96
[  588.197706][ T9362] usb 1-1: unable to send the bmi data to the device: -71
[  588.205241][ T9362] usb 1-1: unable to get target info from device
[  588.214342][ T9362] usb 1-1: could not get target info (-71)
[  588.215591][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  588.220952][ T9362] usb 1-1: could not probe fw (-71)
[  588.837605][    T7] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  589.047697][    T7] usb 3-1: Using ep0 maxpacket: 32
[  589.055211][    T7] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  589.087148][    T7] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  589.115130][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  589.144410][    T7] usb 3-1: config 1 has no interface number 0
[  589.150796][ T9172] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  589.171085][    T7] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  589.205119][    T7] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  589.250789][    T7] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  589.282944][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.320753][    T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  589.357662][ T9172] usb 1-1: Using ep0 maxpacket: 32
[  589.364642][ T9172] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[  589.392531][ T9172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  589.461650][ T9172] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  589.497704][ T9172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.516560][    T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  589.565969][ T9172] usb 1-1: Product: syz
[  589.584630][ T9172] usb 1-1: Manufacturer: syz
[  589.607881][ T9172] usb 1-1: SerialNumber: syz
[  589.643211][ T9172] usb 1-1: config 0 descriptor??
[  589.674630][ T9172] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  589.705555][ T4380] usb 6-1: USB disconnect, device number 5
[  589.947284][    T7] usb 3-1: USB disconnect, device number 94
[  589.964705][    T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  590.428254][T11014] loop5: detected capacity change from 0 to 512
[  590.504262][T11014] EXT4-fs (loop5): 1 truncate cleaned up
[  590.516921][T11014] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  590.901139][T11023] cgroup2: Unknown parameter 'defcontext÷ŸÕL'
[  590.913012][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2182'.
[  592.396247][ T9172] gspca_sunplus: reg_r err -110
[  592.404271][T10599] EXT4-fs (loop5): unmounting filesystem.
[  592.458695][T11030] loop3: detected capacity change from 0 to 512
[  592.497383][T11030] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2185: inode has both inline data and extents flags
[  592.528175][T11030] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2185: couldn't read orphan inode 15 (err -117)
[  592.550521][T11030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  592.583096][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'.
[  592.593222][   T14] usb 3-1: new full-speed USB device number 95 using dummy_hcd
[  592.666389][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  592.683569][T11035] loop4: detected capacity change from 0 to 2048
[  592.736901][T11035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  592.768521][   T14] usb 3-1: device descriptor read/64, error -71
[  592.907682][   T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  593.057696][   T14] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[  593.107667][   T22] usb 6-1: Using ep0 maxpacket: 16
[  593.114759][   T22] usb 6-1: config 4 has an invalid interface number: 9 but max is 0
[  593.130005][   T22] usb 6-1: config 4 has no interface number 0
[  593.136291][   T22] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  593.152451][   T22] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  593.162751][   T22] usb 6-1: config 4 interface 9 has no altsetting 0
[  593.180508][   T22] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  593.196289][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.215000][   T22] usb 6-1: Product: syz
[  593.224662][   T22] usb 6-1: Manufacturer: syz
[  593.227587][   T14] usb 3-1: device descriptor read/64, error -71
[  593.229845][   T22] usb 6-1: SerialNumber: syz
[  593.257825][T11034] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  593.273257][T11034] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  593.300379][    T7] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  593.312416][   T22] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  593.354748][    T7] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  593.362899][   T14] usb usb3-port1: attempt power cycle
[  593.481250][    T7] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  593.493225][ T9362] usb 6-1: Failed to submit usb control message: -71
[  593.493436][   T22] usb 6-1: USB disconnect, device number 6
[  593.513732][ T9362] usb 6-1: unable to send the bmi data to the device: -71
[  593.537207][ T9362] usb 6-1: unable to get target info from device
[  593.545514][ T9362] usb 6-1: could not get target info (-71)
[  593.557888][ T9362] usb 6-1: could not probe fw (-71)
[  593.718611][T11041] 
[  593.721018][T11041] ======================================================
[  593.728073][T11041] WARNING: possible circular locking dependency detected
[  593.735124][T11041] syzkaller #0 Not tainted
[  593.739563][T11041] ------------------------------------------------------
[  593.746610][T11041] syz.4.2187/11041 is trying to acquire lock:
[  593.752770][T11041] ffff88807275b2f0 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0
[  593.762663][T11041] 
[  593.762663][T11041] but task is already holding lock:
[  593.770122][T11041] ffff888055454c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70
[  593.780346][T11041] 
[  593.780346][T11041] which lock already depends on the new lock.
[  593.780346][T11041] 
[  593.790773][T11041] 
[  593.790773][T11041] the existing dependency chain (in reverse order) is:
[  593.799825][T11041] 
[  593.799825][T11041] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}:
[  593.808285][T11041]        percpu_down_read+0x44/0x1a0
[  593.813592][T11041]        ext4_writepages+0x213/0x2e70
[  593.818973][T11041]        do_writepages+0x3c6/0x640
[  593.824154][T11041]        __writeback_single_inode+0x153/0x1170
[  593.830362][T11041]        writeback_single_inode+0x3d2/0x8e0
[  593.836263][T11041]        write_inode_now+0x17f/0x210
[  593.841555][T11041]        iput+0x643/0x9c0
[  593.845908][T11041]        ext4_xattr_block_set+0x2224/0x2fe0
[  593.851905][T11041]        ext4_expand_extra_isize_ea+0xfca/0x1d40
[  593.858247][T11041]        __ext4_expand_extra_isize+0x301/0x3e0
[  593.864410][T11041]        __ext4_mark_inode_dirty+0x478/0x760
[  593.870423][T11041]        ext4_evict_inode+0xa67/0x10e0
[  593.875894][T11041]        evict+0x4b6/0x8b0
[  593.880320][T11041]        ext4_orphan_cleanup+0xc32/0x1470
[  593.886056][T11041]        ext4_fill_super+0x6f0c/0x78f0
[  593.891520][T11041]        get_tree_bdev+0x3e6/0x610
[  593.896689][T11041]        vfs_get_tree+0x88/0x270
[  593.901634][T11041]        do_new_mount+0x247/0xa40
[  593.906664][T11041]        __se_sys_mount+0x2e3/0x3d0
[  593.911870][T11041]        do_syscall_64+0x4c/0xa0
[  593.917462][T11041]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  593.924001][T11041] 
[  593.924001][T11041] -> #0 (&ei->xattr_sem){++++}-{3:3}:
[  593.931591][T11041]        __lock_acquire+0x2d18/0x7c40
[  593.937008][T11041]        lock_acquire+0x1bb/0x4a0
[  593.942042][T11041]        down_write+0x36/0x60
[  593.946727][T11041]        ext4_destroy_inline_data+0x24/0xe0
[  593.952640][T11041]        ext4_writepages+0x599/0x2e70
[  593.958018][T11041]        do_writepages+0x3c6/0x640
[  593.963133][T11041]        filemap_fdatawrite_wbc+0x11e/0x180
[  593.969035][T11041]        filemap_flush+0xe0/0x140
[  593.974068][T11041]        ext4_rename2+0xfb7/0x3180
[  593.979224][T11041]        vfs_rename+0xd57/0x10f0
[  593.984191][T11041]        do_renameat2+0x8ac/0xc80
[  593.989224][T11041]        __x64_sys_rename+0x82/0x90
[  593.994428][T11041]        do_syscall_64+0x4c/0xa0
[  593.999382][T11041]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  594.005959][T11041] 
[  594.005959][T11041] other info that might help us debug this:
[  594.005959][T11041] 
[  594.016368][T11041]  Possible unsafe locking scenario:
[  594.016368][T11041] 
[  594.023824][T11041]        CPU0                    CPU1
[  594.029250][T11041]        ----                    ----
[  594.034615][T11041]   lock(&sbi->s_writepages_rwsem);
[  594.039819][T11041]                                lock(&ei->xattr_sem);
[  594.046673][T11041]                                lock(&sbi->s_writepages_rwsem);
[  594.054397][T11041]   lock(&ei->xattr_sem);
[  594.058733][T11041] 
[  594.058733][T11041]  *** DEADLOCK ***
[  594.058733][T11041] 
[  594.066972][T11041] 7 locks held by syz.4.2187/11041:
[  594.072176][T11041]  #0: ffff8880785c6460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  594.081431][T11041]  #1: ffff8880785c6748 (&type->s_vfs_rename_key#2){+.+.}-{3:3}, at: do_renameat2+0x36a/0xc80
[  594.091885][T11041]  #2: ffff88807275c030 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_renameat2+0x401/0xc80
[  594.102344][T11041]  #3: ffff88807275a218 (&type->i_mutex_dir_key#3/5){+.+.}-{3:3}, at: do_renameat2+0x43c/0xc80
[  594.112718][T11041]  #4: ffff888072759810 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: lock_two_nondirectories+0xf7/0x150
[  594.123964][T11041]  #5: ffff88807275b628 (&sb->s_type->i_mutex_key#9/4){+.+.}-{3:3}, at: vfs_rename+0x804/0x10f0
[  594.134427][T11041]  #6: ffff888055454c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70
[  594.145049][T11041] 
[  594.145049][T11041] stack backtrace:
[  594.150939][T11041] CPU: 0 PID: 11041 Comm: syz.4.2187 Not tainted syzkaller #0
[  594.158399][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  594.168459][T11041] Call Trace:
[  594.171793][T11041]  <TASK>
[  594.174791][T11041]  dump_stack_lvl+0x188/0x24e
[  594.179527][T11041]  ? load_image+0x410/0x410
[  594.184049][T11041]  ? show_regs_print_info+0x12/0x12
[  594.189264][T11041]  ? print_circular_bug+0x12b/0x1a0
[  594.194474][T11041]  check_noncircular+0x296/0x330
[  594.199427][T11041]  ? add_chain_block+0x9b0/0x9b0
[  594.204372][T11041]  ? lockdep_lock+0xf1/0x1f0
[  594.208974][T11041]  ? _find_first_zero_bit+0xd2/0x100
[  594.214336][T11041]  __lock_acquire+0x2d18/0x7c40
[  594.219287][T11041]  ? __lock_acquire+0x190/0x7c40
[  594.224236][T11041]  ? deref_stack_reg+0x18e/0x220
[  594.229203][T11041]  ? verify_lock_unused+0x140/0x140
[  594.234411][T11041]  ? verify_lock_unused+0x140/0x140
[  594.239637][T11041]  ? is_bpf_text_address+0x22/0x2a0
[  594.244853][T11041]  lock_acquire+0x1bb/0x4a0
[  594.249474][T11041]  ? ext4_destroy_inline_data+0x24/0xe0
[  594.255033][T11041]  ? read_lock_is_recursive+0x10/0x10
[  594.260414][T11041]  ? ext4_journal_check_start+0x17d/0x240
[  594.266146][T11041]  down_write+0x36/0x60
[  594.270329][T11041]  ? ext4_destroy_inline_data+0x24/0xe0
[  594.275911][T11041]  ext4_destroy_inline_data+0x24/0xe0
[  594.281315][T11041]  ext4_writepages+0x599/0x2e70
[  594.286197][T11041]  ? add_chain_block+0x9b0/0x9b0
[  594.291174][T11041]  ? verify_lock_unused+0x140/0x140
[  594.296384][T11041]  ? __lock_acquire+0x28d6/0x7c40
[  594.301418][T11041]  ? ext4_read_folio+0x370/0x370
[  594.306382][T11041]  ? __lock_acquire+0x7c40/0x7c40
[  594.311510][T11041]  ? do_raw_spin_lock+0x128/0x2f0
[  594.316555][T11041]  ? do_raw_spin_unlock+0x11d/0x230
[  594.321756][T11041]  ? ext4_read_folio+0x370/0x370
[  594.326722][T11041]  do_writepages+0x3c6/0x640
[  594.331500][T11041]  ? filemap_fdatawrite_wbc+0x113/0x180
[  594.337138][T11041]  ? __writepage+0x130/0x130
[  594.341741][T11041]  ? __lock_acquire+0x7c40/0x7c40
[  594.346771][T11041]  ? __rwlock_init+0x140/0x140
[  594.351546][T11041]  ? do_raw_spin_unlock+0x11d/0x230
[  594.356767][T11041]  filemap_fdatawrite_wbc+0x11e/0x180
[  594.362155][T11041]  filemap_flush+0xe0/0x140
[  594.366675][T11041]  ? filemap_fdatawrite_range+0x160/0x160
[  594.372519][T11041]  ? rcu_is_watching+0x11/0xa0
[  594.377379][T11041]  ext4_rename2+0xfb7/0x3180
[  594.381982][T11041]  ? ext4_mknod+0x480/0x480
[  594.386495][T11041]  ? _raw_spin_lock_irq+0xb7/0xf0
[  594.391529][T11041]  ? trace_contention_end+0x5f/0x190
[  594.396832][T11041]  ? rwsem_down_read_slowpath+0x880/0x880
[  594.402572][T11041]  ? clear_nonspinnable+0x60/0x60
[  594.407601][T11041]  ? bpf_lsm_inode_permission+0x5/0x10
[  594.413138][T11041]  ? try_break_deleg+0x79/0x120
[  594.418004][T11041]  ? ext4_mknod+0x480/0x480
[  594.422619][T11041]  vfs_rename+0xd57/0x10f0
[  594.427046][T11041]  ? __ia32_sys_link+0x90/0x90
[  594.431821][T11041]  ? _raw_spin_unlock+0x24/0x40
[  594.436683][T11041]  ? bpf_lsm_path_rename+0x5/0x10
[  594.441719][T11041]  ? security_path_rename+0x178/0x200
[  594.447224][T11041]  do_renameat2+0x8ac/0xc80
[  594.451739][T11041]  ? fsnotify_move+0x4e0/0x4e0
[  594.456597][T11041]  ? __check_object_size+0x4f6/0xa70
[  594.462030][T11041]  ? strncpy_from_user+0x1dc/0x340
[  594.467175][T11041]  ? getname_flags+0x206/0x500
[  594.471945][T11041]  __x64_sys_rename+0x82/0x90
[  594.476639][T11041]  do_syscall_64+0x4c/0xa0
[  594.481065][T11041]  ? clear_bhb_loop+0x60/0xb0
[  594.485749][T11041]  ? clear_bhb_loop+0x60/0xb0
[  594.490445][T11041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  594.496347][T11041] RIP: 0033:0x7f9f72f9e019
[  594.500814][T11041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.520461][T11041] RSP: 002b:00007f9f711d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  594.528947][T11041] RAX: ffffffffffffffda RBX: 00007f9f73226090 RCX: 00007f9f72f9e019
[  594.536929][T11041] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000040
[  594.544906][T11041] RBP: 00007f9f7303500c R08: 0000000000000000 R09: 0000000000000000
[  594.552907][T11041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  594.561357][T11041] R13: 00007f9f73226128 R14: 00007f9f73226090 R15: 00007ffed9b6e7d8
[  594.569358][T11041]  </TASK>
[  594.576889][   T14] usb 3-1: new full-speed USB device number 97 using dummy_hcd
[  594.612136][T11050] fido_id[11050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  594.662861][   T14] usb 3-1: device descriptor read/8, error -71
[  594.746293][T11049] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  594.758215][T11041] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  594.773340][T11041] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28
[  594.786555][T11041] EXT4-fs (loop4): This should not happen!! Data will be lost
[  594.786555][T11041] 
[  594.796726][T11041] EXT4-fs (loop4): Total free blocks count 0
[  594.803043][T11041] EXT4-fs (loop4): Free/Dirty block details
[  594.809232][T11041] EXT4-fs (loop4): free_blocks=2415919104
[  594.815103][T11041] EXT4-fs (loop4): dirty_blocks=3040
[  594.820837][T11041] EXT4-fs (loop4): Block reservation details
[  594.826938][T11041] EXT4-fs (loop4): i_reserved_data_blocks=190
[  594.867595][ T9172] sunplus: probe of 1-1:0.0 failed with error -110
[  594.878775][ T9172] usb 1-1: USB disconnect, device number 97
[  594.894466][ T9362] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 982 with error 28