last executing test programs:

6m33.936230418s ago: executing program 2 (id=958):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
fsopen(0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f00000001c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)

6m33.625221655s ago: executing program 2 (id=963):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xc, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001a80)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
preadv(r5, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4088, 0xff8}], 0x1, 0x141, 0x9)

6m32.598037776s ago: executing program 2 (id=972):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20)

6m31.756865664s ago: executing program 2 (id=975):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

6m30.935538922s ago: executing program 2 (id=981):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x1007d, 0xffffffff, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

6m30.729548496s ago: executing program 2 (id=983):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0)

6m15.393394983s ago: executing program 32 (id=983):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0)

9.976038897s ago: executing program 5 (id=2175):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4004)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents(r4, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@snprintf], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r6 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x10000, 0x0, 0x2], [0x6, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0xfffffffe]], '\x00', [{0x0, 0xfe5b}, {0xfffffffd}, {}, {0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x2044}, {}, {}, {}, {}, {0x0, 0x5}], '\x00', 0x1000})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.449587208s ago: executing program 1 (id=2177):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x40)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840)

9.308590532s ago: executing program 3 (id=2179):
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
acct(&(0x7f0000000000)='./file0\x00')
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0xb1, 0x20, 0x40, 0xffffefff}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1400c800)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x3})
r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x181000)
ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)

8.841550981s ago: executing program 3 (id=2181):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003680)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4)
r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xde73, 0x1f400, 0x80000008, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000200), 0x4)
ioctl$EVIOCGMASK(r3, 0x80015b1a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

8.355501472s ago: executing program 1 (id=2182):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r4, 0x0, 0x4)

8.253438664s ago: executing program 0 (id=2183):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFxGkCCIWxD/Au8fiP+BfIWihSAl68BKZzWy7TXa7yXZrUufzgWnfm5nkO2/fvJfvzOyyARTWWPZPKeLliPg6iTjYtm048o1ja/utPLg2nS1JrK5+8mcSSb6utX+S/78/r7wUEb98EXG8tDFufWl5rlKtpgt5fbwxf3m8vrR84uJ8ZTadTS9NTk2demtq8t133h5YW18/9/d3H9/94NSXR1e+/eneodtJnIkD+bb2djyFG+2VsRjLX5OROLNux4kBBNtJkl47dDgH2H5D+TgfiWwOOBhD+agH/v+uR8QqUFCJ8Q8F1coDWtf2A7oOfm7cf3/tAqi9/V81b4IMr90biT3Na6N9K8ljV0bZ9e7oAOJnMX7+487tbIke9yGuDyAeQMuNmxFxcnh44/yf5PNf/05u4q7f+hhF+/sD2+lulv+80Sn/Kz3Mf6JD/rO/w9jtR+/xX7o3gDBdZfnfex3z34dT1+hQXnuhmfONJBcuVtOTEfFiRByLkd1Zvd/nOe35X7Zk8Vu5YH4c94Z3P/4zM5VGpc9wG9y/GfHKo/w3iQ3z/55mrru+/7PX49wmYxxJ77zabVvv9rcbfAa8+mPEax37/9ETreTJzyfHm+fDeOus2OivW0d+7RZ/a+0fvKz/9z25/aNJ+/Pa+tZj/LDnn7Tbtn7P/13Jp83yrnzd1UqjsTARsSv5aOP6yUc/26q39s/af+zok+e/Tuf/3oj4bJPtv3W4exq0E/p/Zkv9v/XCbx9+/n23+Jvr/zebpWP5ms3Mf5s9wKd57QAAAAAAAGCnKUXEgUhK5YflUqlcXnt/x+HYV6rW6o3jF2qLl2ai+VnZ0RgptZ50H2x7P8RE/n7YVn1yXX0qIg5FxDdDe5v18nStOrPdjQcAAAAAAAAAAAAAAAAAAIAdYn+Xz/9nfh/a7qMDnjlf+Q3F1XP8D+KbnoAdyd9/KC7jH4rL+IfiMv6huIx/KC7jH4rL+IfiMv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgoM6dPZstqysPrk1n9ZkrS4tztSsnZtL6XHl+cbo8XVu4XJ6t1WaraXm6Nt/r91VrtcsTk7F4dbyR1hvj9aXl8/O1xUuN8xfnK7Pp+XTkP2kVAAAAAAAAAAAAAAAAAAAAPF/qS8tzlWo1XVDoWjgdO+Iw+i4kvXr5dH4y9BViePsbqPAMCts8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAm38DAAD//wC8MHI=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x27)
getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x20000000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100))

7.359769883s ago: executing program 0 (id=2185):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x41, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
epoll_create1(0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0)

7.338058343s ago: executing program 4 (id=2186):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000100))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40c0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

7.124761828s ago: executing program 5 (id=2187):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000019640)=0x7)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)

7.00168083s ago: executing program 1 (id=2188):
add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f)
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94)
symlinkat(&(0x7f0000000140)='./mnt\x00', r0, 0x0)
io_setup(0x1ff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x71bd27, 0x25dfdc03, {0xa, 0x0, 0x10, 0x62, 0x6, 0x0, 0x0, 0x5, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5.682866098s ago: executing program 1 (id=2189):
socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019700)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x40000)
syz_emit_ethernet(0x76, 0x0, 0x0)
bpf$PROG_LOAD(0x25, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0xd231c4f959ad4808)
syz_open_dev$dri(0x0, 0x1, 0x2200)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000dc0), 0x11e3, 0x0, 0x0, 0x51c36fff766693eb}, 0x48004)

5.667208009s ago: executing program 0 (id=2190):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x8, 0x1, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

5.61344778s ago: executing program 4 (id=2191):
socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x6006, 0x0, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)

4.825402167s ago: executing program 3 (id=2192):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x5, &(0x7f0000000000)={0x3, "2853cd3d0da252b9fb4529c6271321e5ba83f0c1916fa90e053fbfad1ad197ab1c"}})

4.801735117s ago: executing program 5 (id=2193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x0, 0x57c}]}, 0x10)
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc)

4.709632369s ago: executing program 0 (id=2194):
open_tree(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername$unix(r1, 0x0, 0x0)
open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28)

4.300756268s ago: executing program 4 (id=2195):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

3.673413781s ago: executing program 5 (id=2196):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFxGkCCIWxD/Au8fiP+BfIWihSAl68BKZzWy7TXa7yXZrUufzgWnfm5nkO2/fvJfvzOyyARTWWPZPKeLliPg6iTjYtm048o1ja/utPLg2nS1JrK5+8mcSSb6utX+S/78/r7wUEb98EXG8tDFufWl5rlKtpgt5fbwxf3m8vrR84uJ8ZTadTS9NTk2demtq8t133h5YW18/9/d3H9/94NSXR1e+/eneodtJnIkD+bb2djyFG+2VsRjLX5OROLNux4kBBNtJkl47dDgH2H5D+TgfiWwOOBhD+agH/v+uR8QqUFCJ8Q8F1coDWtf2A7oOfm7cf3/tAqi9/V81b4IMr90biT3Na6N9K8ljV0bZ9e7oAOJnMX7+487tbIke9yGuDyAeQMuNmxFxcnh44/yf5PNf/05u4q7f+hhF+/sD2+lulv+80Sn/Kz3Mf6JD/rO/w9jtR+/xX7o3gDBdZfnfex3z34dT1+hQXnuhmfONJBcuVtOTEfFiRByLkd1Zvd/nOe35X7Zk8Vu5YH4c94Z3P/4zM5VGpc9wG9y/GfHKo/w3iQ3z/55mrru+/7PX49wmYxxJ77zabVvv9rcbfAa8+mPEax37/9ETreTJzyfHm+fDeOus2OivW0d+7RZ/a+0fvKz/9z25/aNJ+/Pa+tZj/LDnn7Tbtn7P/13Jp83yrnzd1UqjsTARsSv5aOP6yUc/26q39s/af+zok+e/Tuf/3oj4bJPtv3W4exq0E/p/Zkv9v/XCbx9+/n23+Jvr/zebpWP5ms3Mf5s9wKd57QAAAAAAAGCnKUXEgUhK5YflUqlcXnt/x+HYV6rW6o3jF2qLl2ai+VnZ0RgptZ50H2x7P8RE/n7YVn1yXX0qIg5FxDdDe5v18nStOrPdjQcAAAAAAAAAAAAAAAAAAIAdYn+Xz/9nfh/a7qMDnjlf+Q3F1XP8D+KbnoAdyd9/KC7jH4rL+IfiMv6huIx/KC7jH4rL+IfiMv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgoM6dPZstqysPrk1n9ZkrS4tztSsnZtL6XHl+cbo8XVu4XJ6t1WaraXm6Nt/r91VrtcsTk7F4dbyR1hvj9aXl8/O1xUuN8xfnK7Pp+XTkP2kVAAAAAAAAAAAAAAAAAAAAPF/qS8tzlWo1XVDoWjgdO+Iw+i4kvXr5dH4y9BViePsbqPAMCts8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAm38DAAD//wC8MHI=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x27)
getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x20000000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100))

3.636779832s ago: executing program 3 (id=2197):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4004)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents(r4, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@snprintf], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r6 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x10000, 0x0, 0x2], [0x6, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0xfffffffe]], '\x00', [{0x0, 0xfe5b}, {0xfffffffd}, {}, {0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x2044}, {}, {}, {}, {}, {0x0, 0x5}], '\x00', 0x1000})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.636266782s ago: executing program 0 (id=2198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r4, 0x0, 0x4)

2.432711247s ago: executing program 3 (id=2199):
socket$inet(0x2, 0x4000000000000001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=<r5=>0x0)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1aa5, 0x0, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x1, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3, 0x1, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

2.390055108s ago: executing program 5 (id=2200):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x41, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
epoll_create1(0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0)

2.262265201s ago: executing program 4 (id=2201):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_procfs$userns(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40c0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

2.137496104s ago: executing program 0 (id=2202):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003680)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4)
r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xde73, 0x1f400, 0x80000008, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000200), 0x4)
ioctl$EVIOCGMASK(r3, 0x80015b1a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

1.242720723s ago: executing program 4 (id=2203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.226419553s ago: executing program 5 (id=2204):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000019640)=0x7)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)

901.937211ms ago: executing program 1 (id=2205):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x8, 0x1, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

894.82281ms ago: executing program 3 (id=2206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x0, 0x57c}]}, 0x10)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc)

15.424109ms ago: executing program 1 (id=2207):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x5, &(0x7f0000000000)={0x3, "2853cd3d0da252b9fb4529c6271321e5ba83f0c1916fa90e053fbfad1ad197ab1c"}})

0s ago: executing program 4 (id=2208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2804001, 0x0, 0x1, 0x0, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2)
poll(&(0x7f0000000040)=[{r0, 0x34b}], 0x1, 0x4)

kernel console output (not intermixed with test programs):

= 0.00
[  384.923930][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.934783][ T4326] usb 4-1: config 0 descriptor??
[  385.004786][ T9083] device syzkaller0 entered promiscuous mode
[  385.367539][ T4326] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  385.534800][ T9072] loop4: detected capacity change from 0 to 32768
[  385.633297][ T9072] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1343 (9072)
[  385.856684][ T9072] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  385.902782][ T9072] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  385.969631][ T9072] BTRFS info (device loop4): using free space tree
[  386.048782][   T14] usb 4-1: USB disconnect, device number 9
[  386.382940][ T9072] BTRFS info (device loop4): enabling ssd optimizations
[  386.652219][ T4285] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  388.046093][ T9162] device syzkaller0 entered promiscuous mode
[  389.114782][ T9165] loop0: detected capacity change from 0 to 1024
[  389.128103][ T9165] EXT4-fs: Ignoring removed orlov option
[  390.465556][ T9165] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  390.932336][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  392.259436][   T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  393.247964][ T9206] loop0: detected capacity change from 0 to 512
[  393.449121][ T9206] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1367: iget: bad i_size value: 38620345925642
[  393.475057][   T22] usb 4-1: Using ep0 maxpacket: 16
[  393.491904][   T22] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.501090][ T9206] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1367: couldn't read orphan inode 15 (err -117)
[  393.515292][ T9206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  393.578062][   T22] usb 4-1: config 0 interface 0 has no altsetting 0
[  393.640235][ T9206] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1367: bg 0: block 5: invalid block bitmap
[  393.653114][   T22] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  393.671422][ T9215] loop1: detected capacity change from 0 to 16
[  393.693003][ T9215] erofs: (device loop1): mounted with root inode @ nid 36.
[  393.700994][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.819718][ T9206] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 124 with error 28
[  393.900715][   T22] usb 4-1: config 0 descriptor??
[  393.986086][ T4292] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  394.094873][ T9218] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  394.152610][   T26] audit: type=1800 audit(1782869948.884:50): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1368" name="file2" dev="loop1" ino=89 res=0 errno=0
[  394.170807][ T9206] EXT4-fs (loop0): This should not happen!! Data will be lost
[  394.170807][ T9206] 
[  394.204276][ T9206] EXT4-fs (loop0): Total free blocks count 0
[  394.211213][ T9206] EXT4-fs (loop0): Free/Dirty block details
[  394.218737][ T9206] EXT4-fs (loop0): free_blocks=0
[  394.224610][ T9206] EXT4-fs (loop0): dirty_blocks=124
[  394.231147][ T9206] EXT4-fs (loop0): Block reservation details
[  394.237344][ T9206] EXT4-fs (loop0): i_reserved_data_blocks=124
[  394.494141][   T22] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  394.720013][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  396.629013][ T9218] syz.1.1368 (9218) used greatest stack depth: 19568 bytes left
[  396.784365][   T22] usb 4-1: USB disconnect, device number 10
[  397.555660][ T9254] loop0: detected capacity change from 0 to 8
[  397.605637][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'.
[  398.201151][ T9265] SQUASHFS error: lzo decompression failed, data probably corrupt
[  398.209891][ T9265] SQUASHFS error: Failed to read block 0x71: -5
[  398.221825][ T9265] SQUASHFS error: lzo decompression failed, data probably corrupt
[  398.230009][ T9265] SQUASHFS error: Failed to read block 0x71: -5
[  398.253364][   T26] audit: type=1800 audit(1782869953.014:51): pid=9265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1379" name="file0" dev="loop0" ino=3 res=0 errno=0
[  398.845935][ T9267] loop3: detected capacity change from 0 to 4096
[  398.949778][ T9267] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  398.976245][ T9270] loop0: detected capacity change from 0 to 2048
[  399.046972][ T9270] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  399.149406][ T9272] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  399.155782][ T9270] NILFS (loop0): corrupt root inode
[  399.237011][ T4403] udevd[4403]: incorrect nilfs2 checksum on /dev/loop0
[  399.417644][ T9277] device syzkaller0 entered promiscuous mode
[  399.869526][   T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  400.069554][   T14] usb 1-1: Using ep0 maxpacket: 16
[  400.076786][   T14] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.119427][   T14] usb 1-1: config 0 interface 0 has no altsetting 0
[  400.126138][   T14] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  400.166022][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.201033][   T14] usb 1-1: config 0 descriptor??
[  400.616273][   T14] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  401.694252][ T4326] usb 1-1: USB disconnect, device number 6
[  403.058310][ T9326] loop3: detected capacity change from 0 to 128
[  403.088366][ T9325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1394'.
[  403.113088][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'.
[  403.159518][ T9326] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  403.209448][   T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  403.269766][ T9326] hpfs: filesystem error: improperly stopped
[  403.275881][ T9326] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  403.316050][ T9326] hpfs: You really don't want any checks? You are crazy...
[  403.345429][ T9326] hpfs: Code page index out of array
[  403.359489][ T9326] hpfs: code page support is disabled
[  403.385883][ T9326] hpfs: hpfs_map_4sectors(): unaligned read
[  403.401154][   T14] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  403.427851][ T9326] hpfs: hpfs_map_4sectors(): unaligned read
[  403.439393][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.466655][ T9326] hpfs: filesystem error: unable to find root dir
[  403.480333][   T14] usb 1-1: config 0 descriptor??
[  403.496750][ T9336] device syzkaller0 entered promiscuous mode
[  403.510844][   T14] cp210x 1-1:0.0: cp210x converter detected
[  404.259951][ T9346] hpfs: hpfs_map_4sectors(): unaligned read
[  404.420704][   T14] usb 1-1: cp210x converter now attached to ttyUSB0
[  404.467982][   T14] usb 1-1: USB disconnect, device number 7
[  404.520336][   T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  404.555347][   T14] cp210x 1-1:0.0: device disconnected
[  405.682004][ T9361] loop4: detected capacity change from 0 to 1024
[  405.707238][ T9365] loop1: detected capacity change from 0 to 256
[  405.714714][ T9361] EXT4-fs: Ignoring removed i_version option
[  405.729934][   T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  405.742129][ T9361] EXT4-fs (loop4): Test dummy encryption mode enabled
[  405.780168][ T9365] exfat: Deprecated parameter 'utf8'
[  405.795935][ T9365] exfat: Deprecated parameter 'namecase'
[  405.805629][ T9361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  405.929575][ T9371] ipt_REJECT: TCP_RESET invalid for non-tcp
[  405.971121][ T9365] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  406.339018][   T14] usb 4-1: Using ep0 maxpacket: 16
[  406.346069][   T14] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.367797][   T14] usb 4-1: config 0 interface 0 has no altsetting 0
[  406.389397][   T14] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  406.400137][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.420316][   T14] usb 4-1: config 0 descriptor??
[  406.519706][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'.
[  406.601957][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  406.805624][ T9382] device syzkaller0 entered promiscuous mode
[  406.848352][ T9386] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  408.485855][   T14] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  409.409471][   T22] usb 4-1: USB disconnect, device number 11
[  409.796106][ T9398] loop4: detected capacity change from 0 to 4096
[  409.819739][ T9404] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  409.826915][ T9404] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  409.997684][ T9398] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  410.628367][ T9404] vhci_hcd vhci_hcd.0: Device attached
[  410.784289][ T9415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1418'.
[  410.871077][ T9169] vhci_hcd: vhci_device speed not set
[  410.990033][ T9169] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  411.193513][ T9406] vhci_hcd: connection reset by peer
[  411.198467][ T4333] vhci_hcd: stop threads
[  411.199202][ T4333] vhci_hcd: release socket
[  411.203876][ T4333] vhci_hcd: disconnect device
[  412.168547][ T9424] hub 8-0:1.0: USB hub found
[  412.173559][ T9424] hub 8-0:1.0: 1 port detected
[  412.546635][ T9411] loop1: detected capacity change from 0 to 32768
[  412.699203][ T9411] XFS (loop1): Mounting V5 Filesystem
[  412.701124][ T9430] loop0: detected capacity change from 0 to 40427
[  412.714991][ T9430] F2FS-fs (loop0): build fault injection attr: rate: 174, type: 0x3ffff
[  412.981827][ T9411] XFS (loop1): Ending clean mount
[  414.654589][ T4272] XFS (loop1): Unmounting Filesystem
[  414.727640][ T9456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1429'.
[  415.251867][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'.
[  416.141321][ T9169] vhci_hcd: vhci_device speed not set
[  417.266990][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'.
[  417.434756][ T9169] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  417.495048][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1440'.
[  417.739434][ T9169] usb 6-1: Using ep0 maxpacket: 16
[  417.755500][ T9169] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.968582][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'.
[  418.523190][ T9169] usb 6-1: config 0 interface 0 has no altsetting 0
[  418.529990][ T9169] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  418.539093][ T9169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.549053][ T9169] usb 6-1: config 0 descriptor??
[  418.648259][ T9511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1444'.
[  418.793688][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'.
[  419.649666][ T9169] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  420.030755][ T4326] usb 6-1: USB disconnect, device number 3
[  420.619130][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'.
[  421.006589][ T9528] fido_id[9528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  421.250583][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1454'.
[  421.364268][ T9545] device syzkaller0 entered promiscuous mode
[  422.456134][ T9559] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1458'.
[  422.606027][ T9561] loop3: detected capacity change from 0 to 1024
[  422.632599][ T9561] EXT4-fs: Ignoring removed i_version option
[  422.655943][ T9561] EXT4-fs (loop3): Test dummy encryption mode enabled
[  422.741657][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'.
[  422.801755][ T9561] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  422.959628][ T4326] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  423.209581][ T4326] usb 6-1: Using ep0 maxpacket: 16
[  423.378686][ T4326] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.591334][ T4326] usb 6-1: config 0 interface 0 has no altsetting 0
[  423.672540][ T9577] ipt_REJECT: TCP_RESET invalid for non-tcp
[  423.686669][ T4326] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  423.727360][ T4326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.775346][ T4326] usb 6-1: config 0 descriptor??
[  424.427477][ T4326] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  424.899924][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'.
[  425.093720][  T125] usb 6-1: USB disconnect, device number 4
[  425.365233][ T9597] fido_id[9597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  426.047665][ T9607] loop1: detected capacity change from 0 to 512
[  426.166021][ T9607] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  426.274953][ T9607] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1470: bad orphan inode 13
[  426.290502][ T9607] ext4_test_bit(bit=12, block=18) = 1
[  426.298837][ T9607] is_bad_inode(inode)=0
[  426.323672][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1471'.
[  426.359538][ T9607] NEXT_ORPHAN(inode)=0
[  426.363699][ T9607] max_ino=32
[  426.366937][ T9607] i_nlink=1
[  426.405127][ T9607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  426.669532][ T4292] Bluetooth: hci5: command 0x0406 tx timeout
[  426.725215][ T9615] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  426.860239][ T9625] Quota error (device loop1): write_blk: dquota write failed
[  426.868524][ T9625] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  426.878803][ T9625] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1470: Failed to acquire dquot type 1
[  427.527178][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  427.634868][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'.
[  428.561883][ T9634] loop1: detected capacity change from 0 to 16
[  428.572212][ T9634] erofs: (device loop1): mounted with root inode @ nid 36.
[  428.603093][ T4292] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  428.619001][ T9634] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  428.630488][   T26] audit: type=1800 audit(1782869983.414:52): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1476" name="file2" dev="loop1" ino=89 res=0 errno=0
[  428.715779][ T9639] netlink: 'syz.5.1478': attribute type 10 has an invalid length.
[  428.741583][ T9639] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  429.814366][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  431.428084][ T9659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1485'.
[  431.489445][ T9169] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  431.699458][ T9169] usb 1-1: Using ep0 maxpacket: 16
[  431.707312][ T9169] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.798315][ T9169] usb 1-1: config 0 interface 0 has no altsetting 0
[  431.821565][ T9169] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  431.852950][ T9169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.917445][ T9169] usb 1-1: config 0 descriptor??
[  432.269450][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'.
[  433.119757][ T9169] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  434.187775][ T4326] usb 1-1: USB disconnect, device number 8
[  434.257804][ T9676] fido_id[9676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  434.388124][ T9684] loop4: detected capacity change from 0 to 256
[  434.450355][ T9684] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  434.738721][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'.
[  435.487270][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1500'.
[  437.653982][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1506'.
[  438.092371][ T9736] loop4: detected capacity change from 0 to 1024
[  438.101920][ T9736] EXT4-fs: Ignoring removed orlov option
[  438.223756][ T9736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  438.239453][   T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  438.304831][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'.
[  438.424481][ T9734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  438.431890][ T9734] IPv6: NLM_F_CREATE should be set when creating new route
[  438.879971][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'.
[  439.549791][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  439.778782][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1517'.
[  439.822205][ T9749] loop0: detected capacity change from 0 to 4096
[  439.860869][ T9749] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  439.954268][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  439.962751][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  440.271931][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1522'.
[  440.473745][ T9772] loop3: detected capacity change from 0 to 1024
[  440.541498][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1526'.
[  440.564891][ T9772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  440.578209][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'.
[  440.581921][ T9772] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.597979][ T9774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  440.605286][ T9774] IPv6: NLM_F_CREATE should be set when creating new route
[  440.710017][ T9776] loop1: detected capacity change from 0 to 1024
[  440.720256][ T9776] EXT4-fs: Ignoring removed orlov option
[  440.816166][ T9776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  441.794389][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  441.891256][ T9785] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.1524: lblock 3 mapped to illegal pblock 3 (length 3)
[  441.953968][ T9785] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  441.968201][ T9785] EXT4-fs (loop3): This should not happen!! Data will be lost
[  441.968201][ T9785] 
[  442.607166][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  442.905182][ T9802] ntfs3: loop0: try to read out of volume at offset 0x0
[  443.715393][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'.
[  443.774628][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1535'.
[  443.920297][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1540'.
[  443.929645][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'.
[  443.954055][ T9814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  444.106804][ T9822] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1541'.
[  444.266596][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1545'.
[  444.484540][ T9828] loop4: detected capacity change from 0 to 32768
[  444.500786][ T9828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1546 (9828)
[  444.519398][ T9828] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  444.530049][ T9828] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  444.538816][ T9828] BTRFS info (device loop4): use zlib compression, level 3
[  444.546135][ T9828] BTRFS info (device loop4): turning on sync discard
[  444.552894][ T9828] BTRFS info (device loop4): using free space tree
[  444.885970][ T9828] BTRFS info (device loop4): enabling ssd optimizations
[  445.279561][   T26] audit: type=1800 audit(1782870000.004:53): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1546" name="file1" dev="loop4" ino=260 res=0 errno=0
[  445.916133][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'.
[  446.111905][ T4285] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  446.607322][ T4390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4390)
[  446.656218][ T9857] loop0: detected capacity change from 0 to 32768
[  446.778043][ T9857] XFS (loop0): Mounting V5 Filesystem
[  446.917336][ T9857] XFS (loop0): Ending clean mount
[  446.945761][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'.
[  447.936876][ T4277] XFS (loop0): Unmounting Filesystem
[  448.362925][ T9923] loop3: detected capacity change from 0 to 512
[  448.465510][ T9923] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1568: iget: bad i_size value: 38620345925642
[  448.555075][ T9923] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1568: couldn't read orphan inode 15 (err -117)
[  448.597683][ T9923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  448.757925][ T9923] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1568: bg 0: block 5: invalid block bitmap
[  448.779665][ T9935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1566'.
[  448.889811][ T9923] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 356 with error 28
[  448.958735][ T9923] EXT4-fs (loop3): This should not happen!! Data will be lost
[  448.958735][ T9923] 
[  449.006401][ T9923] EXT4-fs (loop3): Total free blocks count 0
[  449.048951][ T9923] EXT4-fs (loop3): Free/Dirty block details
[  449.072968][ T9923] EXT4-fs (loop3): free_blocks=0
[  449.093213][ T9923] EXT4-fs (loop3): dirty_blocks=360
[  449.125538][ T9923] EXT4-fs (loop3): Block reservation details
[  449.144249][ T9923] EXT4-fs (loop3): i_reserved_data_blocks=360
[  449.273643][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  449.512623][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1575'.
[  451.444158][ T9953] loop3: detected capacity change from 0 to 32768
[  451.768487][ T9975] block device autoloading is deprecated and will be removed.
[  452.537420][ T9953] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  452.705795][ T9955] loop5: detected capacity change from 0 to 32768
[  452.829709][ T9955] XFS (loop5): Mounting V5 Filesystem
[  452.936293][ T9955] XFS (loop5): Ending clean mount
[  452.974845][ T9995] loop4: detected capacity change from 0 to 512
[  453.117464][ T9995] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1585: iget: bad i_size value: 38620345925642
[  453.179065][T10000] loop0: detected capacity change from 0 to 512
[  453.190457][ T9995] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1585: couldn't read orphan inode 15 (err -117)
[  453.204284][ T9995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  453.214683][T10000] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  453.239844][ T7763] XFS (loop5): Unmounting Filesystem
[  453.449871][ T9995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1585: bg 0: block 5: invalid block bitmap
[  453.451949][T10000] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1587: bad orphan inode 13
[  453.476378][ T9995] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 296 with error 28
[  453.489867][ T9995] EXT4-fs (loop4): This should not happen!! Data will be lost
[  453.489867][ T9995] 
[  453.501780][ T9995] EXT4-fs (loop4): Total free blocks count 0
[  453.507926][ T9995] EXT4-fs (loop4): Free/Dirty block details
[  453.514457][ T9995] EXT4-fs (loop4): free_blocks=0
[  453.520439][ T9995] EXT4-fs (loop4): dirty_blocks=300
[  453.526129][ T9995] EXT4-fs (loop4): Block reservation details
[  453.535091][ T4281] ocfs2: Unmounting device (7,3) on (node local)
[  453.542257][T10000] ext4_test_bit(bit=12, block=18) = 1
[  453.547829][T10000] is_bad_inode(inode)=0
[  453.557982][T10000] NEXT_ORPHAN(inode)=0
[  453.562552][ T9995] EXT4-fs (loop4): i_reserved_data_blocks=300
[  453.578524][T10000] max_ino=32
[  453.585616][T10000] i_nlink=1
[  453.588955][T10000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  453.686470][T10000] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  453.745728][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  453.765350][T10000] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1587: bg 0: block 248: padding at end of block bitmap is not set
[  453.869973][T10000] Quota error (device loop0): write_blk: dquota write failed
[  453.894078][T10000] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  453.954316][T10000] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1587: Failed to acquire dquot type 1
[  454.801876][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  455.091676][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'.
[  456.628551][T10034] device syzkaller0 entered promiscuous mode
[  459.066009][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'.
[  459.269458][T10030] loop4: detected capacity change from 0 to 32768
[  459.295730][T10059] loop5: detected capacity change from 0 to 512
[  459.446072][T10059] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1606: iget: bad i_size value: 38620345925642
[  459.515221][T10059] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1606: couldn't read orphan inode 15 (err -117)
[  459.545421][T10059] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  460.320915][T10072] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1606: bg 0: block 5: invalid block bitmap
[  460.484103][T10072] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 80 with error 28
[  460.517404][T10072] EXT4-fs (loop5): This should not happen!! Data will be lost
[  460.517404][T10072] 
[  460.535072][T10072] EXT4-fs (loop5): Total free blocks count 0
[  460.564811][T10072] EXT4-fs (loop5): Free/Dirty block details
[  460.607503][T10072] EXT4-fs (loop5): free_blocks=0
[  460.637155][T10072] EXT4-fs (loop5): dirty_blocks=84
[  460.663904][T10072] EXT4-fs (loop5): Block reservation details
[  460.739566][T10072] EXT4-fs (loop5): i_reserved_data_blocks=84
[  460.997233][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  461.996396][T10093] device syzkaller0 entered promiscuous mode
[  465.652316][T10138] loop4: detected capacity change from 0 to 4096
[  465.672175][T10138] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  467.747312][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'.
[  467.756468][T10114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  467.831693][T10132] device syzkaller0 entered promiscuous mode
[  467.864915][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'.
[  469.334450][T10177] Bluetooth: MGMT ver 1.22
[  469.356725][T10177] Bluetooth: hci0: invalid length 0, exp 2 for type 17
[  470.375851][T10187] loop3: detected capacity change from 0 to 4096
[  470.400852][T10187] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  472.718078][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1635'.
[  473.014293][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'.
[  473.129819][T10195] device syzkaller0 entered promiscuous mode
[  473.733652][T10224] IPVS: rr: FWM 3 0x00000003 - no destination available
[  476.147244][T10204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  477.168096][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'.
[  477.245707][T10252] device syzkaller0 entered promiscuous mode
[  477.863653][T10283] loop5: detected capacity change from 0 to 64
[  478.107544][   T26] audit: type=1800 audit(1782870032.884:54): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1662" name="file1" dev="loop5" ino=18 res=0 errno=0
[  480.611202][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'.
[  480.632649][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'.
[  480.964206][T10311] device syzkaller0 entered promiscuous mode
[  481.260287][   T14] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  481.321375][T10328] loop5: detected capacity change from 0 to 1024
[  481.400648][T10328] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  481.413626][T10328] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  481.455867][T10328] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.1674: lblock 3 mapped to illegal pblock 3 (length 3)
[  481.472506][T10328] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  481.484939][T10328] EXT4-fs (loop5): This should not happen!! Data will be lost
[  481.484939][T10328] 
[  481.499911][   T14] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  481.528461][   T14] usb 2-1: config 0 has no interface number 0
[  481.567745][   T14] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  481.584863][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.595184][   T14] usb 2-1: Product: syz
[  481.606073][   T14] usb 2-1: Manufacturer: syz
[  481.611270][   T14] usb 2-1: SerialNumber: syz
[  481.620621][   T14] usb 2-1: config 0 descriptor??
[  481.650781][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  481.658943][   T14] usb 2-1: selecting invalid altsetting 1
[  481.679635][   T14] dvb_ttusb_budget: ttusb_init_controller: error
[  481.696245][   T14] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  482.220402][T10336] loop5: detected capacity change from 0 to 32768
[  482.705770][T10336] JBD2: Ignoring recovery information on journal
[  483.231159][   T14] DVB: Unable to find symbol stv0299_attach()
[  483.260725][T10336] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  483.416277][   T26] audit: type=1800 audit(1782870038.194:55): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1675" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  483.570244][ T7763] ocfs2: Unmounting device (7,5) on (node local)
[  483.622611][   T14] DVB: Unable to find symbol tda8083_attach()
[  483.628777][   T14] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  483.731045][ T9889] usb 2-1: USB disconnect, device number 11
[  486.445978][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'.
[  487.950582][T10396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1687'.
[  488.884122][T10384] loop3: detected capacity change from 0 to 32768
[  489.038727][T10384] XFS (loop3): Mounting V5 Filesystem
[  489.123712][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1691'.
[  489.186919][T10416] loop5: detected capacity change from 0 to 512
[  489.220341][T10416] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  489.239171][T10384] XFS (loop3): Ending clean mount
[  489.496576][T10416] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1692: bad orphan inode 13
[  490.106014][T10416] ext4_test_bit(bit=12, block=18) = 1
[  490.111735][T10416] is_bad_inode(inode)=0
[  490.158344][T10416] NEXT_ORPHAN(inode)=0
[  490.176789][ T4281] XFS (loop3): Unmounting Filesystem
[  490.189527][T10416] max_ino=32
[  490.249870][T10416] i_nlink=1
[  490.253144][T10416] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  490.542830][T10430] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  490.563773][T10430] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1692: bg 0: block 248: padding at end of block bitmap is not set
[  490.583858][T10430] Quota error (device loop5): write_blk: dquota write failed
[  490.591447][T10430] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  490.602557][T10430] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1692: Failed to acquire dquot type 1
[  490.969108][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  491.198152][T10437] device syzkaller0 entered promiscuous mode
[  491.352440][T10443] loop1: detected capacity change from 0 to 256
[  491.391495][T10443] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  492.069155][T10427] loop4: detected capacity change from 0 to 32768
[  492.087752][T10427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1693 (10427)
[  492.175348][T10427] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  492.206793][T10427] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  492.249135][T10427] BTRFS info (device loop4): turning on sync discard
[  492.281929][T10427] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  492.339450][T10427] BTRFS info (device loop4): use zstd compression, level 3
[  492.364536][T10427] BTRFS info (device loop4): turning on async discard
[  492.412971][T10427] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  492.443478][T10427] BTRFS info (device loop4): trying to use backup root at mount time
[  492.454870][T10427] BTRFS info (device loop4): enabling auto defrag
[  492.462016][T10427] BTRFS info (device loop4): using free space tree
[  492.629155][   T32] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  492.697999][T10427] BTRFS error (device loop4): failed to load root extent
[  492.705393][T10427] BTRFS warning (device loop4): try to load backup roots slot 1
[  492.714526][ T4506] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  492.728125][T10427] BTRFS warning (device loop4): couldn't read tree root
[  492.757065][T10427] BTRFS warning (device loop4): try to load backup roots slot 2
[  492.786206][T10427] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  492.808451][T10427] BTRFS warning (device loop4): couldn't read tree root
[  492.817830][T10427] BTRFS warning (device loop4): try to load backup roots slot 3
[  492.847050][T10427] BTRFS info (device loop4): enabling ssd optimizations
[  492.862813][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1700'.
[  492.885453][T10427] BTRFS info (device loop4): rebuilding free space tree
[  493.005437][T10427] BTRFS info (device loop4): checking UUID tree
[  493.657975][ T4285] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  496.074624][T10443] netlink: 'syz.1.1698': attribute type 12 has an invalid length.
[  496.082670][T10443] netlink: 'syz.1.1698': attribute type 29 has an invalid length.
[  496.091071][T10443] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1698'.
[  496.405676][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1706'.
[  496.719400][   T22] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  497.639359][   T22] usb 2-1: Using ep0 maxpacket: 16
[  497.657323][   T22] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.669729][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  497.676708][   T22] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  497.686053][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.821108][   T22] usb 2-1: config 0 descriptor??
[  498.236787][   T22] nzxt-smart2 0003:1E71:2009.001D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  499.174969][   T22] usb 2-1: USB disconnect, device number 12
[  499.256030][T10518] fido_id[10518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  499.859450][T10527] device syzkaller0 entered promiscuous mode
[  499.885371][T10531] loop1: detected capacity change from 0 to 256
[  499.926209][T10531] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  501.393037][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  501.416409][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  502.843401][T10557] loop0: detected capacity change from 0 to 1024
[  502.855795][T10557] EXT4-fs: Ignoring removed orlov option
[  502.983124][T10557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  503.571575][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  503.717208][T10562] loop0: detected capacity change from 0 to 1024
[  503.787077][T10562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  503.801034][T10562] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  503.898177][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  505.186688][T10531] netlink: 'syz.1.1715': attribute type 12 has an invalid length.
[  505.194640][T10531] netlink: 'syz.1.1715': attribute type 29 has an invalid length.
[  505.202585][T10531] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1715'.
[  505.224107][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'.
[  505.467748][T10585] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  505.789590][   T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  506.029478][   T22] usb 5-1: Using ep0 maxpacket: 16
[  506.042813][   T22] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.069519][   T22] usb 5-1: config 0 interface 0 has no altsetting 0
[  506.093115][   T22] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  506.141098][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.146901][T10590] fuse: Bad value for 'fd'
[  506.232107][   T22] usb 5-1: config 0 descriptor??
[  506.776119][   T22] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  507.571357][T10606] loop5: detected capacity change from 0 to 1024
[  507.581345][T10606] EXT4-fs: Ignoring removed orlov option
[  509.370310][T10606] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  509.743148][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  509.825946][   T14] usb 5-1: USB disconnect, device number 10
[  510.876494][T10618] device syzkaller0 entered promiscuous mode
[  514.304016][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'.
[  514.559584][T10653] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  517.323856][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1752'.
[  517.570250][T10680] device syzkaller0 entered promiscuous mode
[  517.925680][T10688] loop5: detected capacity change from 0 to 4096
[  517.974971][T10688] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  518.981128][   T14] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  519.181937][   T14] usb 6-1: Using ep0 maxpacket: 16
[  519.205851][   T14] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.245470][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  519.252896][   T14] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  519.262812][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.274216][   T14] usb 6-1: config 0 descriptor??
[  519.717913][   T14] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  521.376288][ T4321] usb 6-1: USB disconnect, device number 6
[  521.489536][T10730] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  522.637515][T10737] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  522.772011][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'.
[  523.369488][   T14] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  523.964983][T10762] loop0: detected capacity change from 0 to 131072
[  523.996795][T10762] F2FS-fs (loop0): invalid crc value
[  524.006290][T10762] F2FS-fs (loop0): Found nat_bits in checkpoint
[  524.044898][T10762] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  524.055090][T10762] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  524.101202][   T14] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  524.129381][   T14] usb 2-1: config 0 has no interface number 0
[  524.181551][   T14] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  524.223277][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.262318][   T14] usb 2-1: Product: syz
[  524.303286][   T14] usb 2-1: Manufacturer: syz
[  524.339335][   T14] usb 2-1: SerialNumber: syz
[  524.385896][   T14] usb 2-1: config 0 descriptor??
[  524.442299][   T14] usb 2-1: selecting invalid altsetting 1
[  524.471833][   T14] dvb_ttusb_budget: ttusb_init_controller: error
[  524.502154][   T14] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  524.747068][T10778] device syzkaller0 entered promiscuous mode
[  524.964209][   T14] DVB: Unable to find symbol stv0299_attach()
[  525.242706][   T14] DVB: Unable to find symbol tda8083_attach()
[  525.254081][   T14] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  525.559920][ T9169] usb 2-1: USB disconnect, device number 13
[  526.814805][T10808] loop1: detected capacity change from 0 to 1024
[  526.857859][T10808] EXT4-fs: Ignoring removed i_version option
[  526.868350][T10808] EXT4-fs (loop1): Test dummy encryption mode enabled
[  526.899083][T10808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  527.079755][ T4321] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  527.290871][ T4321] usb 5-1: Using ep0 maxpacket: 16
[  527.306726][ T4321] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  527.417197][ T4321] usb 5-1: config 0 interface 0 has no altsetting 0
[  527.497507][ T4321] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  527.593103][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.735210][ T4321] usb 5-1: config 0 descriptor??
[  527.800500][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  528.427604][ T4321] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  530.826002][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'.
[  530.973205][ T9169] usb 5-1: USB disconnect, device number 11
[  531.106239][T10833] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  531.114703][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1783'.
[  533.186648][T10850] loop3: detected capacity change from 0 to 1024
[  533.194126][T10850] EXT4-fs: Ignoring removed i_version option
[  533.224209][T10850] EXT4-fs (loop3): Test dummy encryption mode enabled
[  533.299367][ T4320] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  533.309475][ T9150] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  533.320006][T10850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  533.520991][ T4320] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  533.578209][ T4320] usb 2-1: config 0 has no interface number 0
[  533.732441][ T4320] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  533.942626][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.989726][ T4320] usb 2-1: Product: syz
[  534.018727][ T4320] usb 2-1: Manufacturer: syz
[  534.037822][T10857] device syzkaller0 entered promiscuous mode
[  534.059713][ T4320] usb 2-1: SerialNumber: syz
[  534.100133][ T4320] usb 2-1: config 0 descriptor??
[  534.133703][ T4320] usb 2-1: selecting invalid altsetting 1
[  534.179383][ T9150] usb 6-1: Using ep0 maxpacket: 8
[  534.184638][ T4320] dvb_ttusb_budget: ttusb_init_controller: error
[  534.192683][ T9150] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  534.209338][ T9150] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  534.210278][ T4320] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  534.227612][ T9150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  534.227654][ T9150] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  534.227681][ T9150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  534.227707][ T9150] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  534.227754][ T9150] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  534.227781][ T9150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.286180][ T9150] usbtmc: probe of 6-1:16.0 failed with error -22
[  534.418288][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  534.707318][ T4320] DVB: Unable to find symbol stv0299_attach()
[  534.914991][ T4320] DVB: Unable to find symbol tda8083_attach()
[  534.924702][ T4320] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  534.958757][ T4320] usb 2-1: USB disconnect, device number 14
[  536.504098][ T4320] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  536.689356][ T4320] usb 2-1: Using ep0 maxpacket: 16
[  536.696528][ T4320] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.728454][ T4320] usb 2-1: config 0 interface 0 has no altsetting 0
[  536.735480][ T4320] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  536.751566][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.772776][ T4320] usb 2-1: config 0 descriptor??
[  537.253032][ T4320] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  538.350679][ T4320] usb 6-1: USB disconnect, device number 7
[  538.410941][   T14] usb 2-1: USB disconnect, device number 15
[  538.577020][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'.
[  539.413272][T10918] loop0: detected capacity change from 0 to 16
[  539.427389][T10918] erofs: (device loop0): mounted with root inode @ nid 36.
[  539.612140][ T4292] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  539.624089][T10918] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  539.636255][   T26] audit: type=1800 audit(1782870094.414:56): pid=10918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1801" name="file2" dev="loop0" ino=89 res=0 errno=0
[  542.014800][T10925] loop5: detected capacity change from 0 to 1024
[  542.071598][T10925] EXT4-fs: Ignoring removed i_version option
[  542.107583][T10925] EXT4-fs (loop5): Test dummy encryption mode enabled
[  542.155949][T10925] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  542.950248][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  543.569573][ T4320] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  543.577748][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'.
[  543.770081][ T4320] usb 5-1: Using ep0 maxpacket: 8
[  543.816055][ T4320] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  544.017126][ T4320] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  544.509014][ T4320] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  544.519967][ T4320] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  544.530714][ T4320] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  544.544034][ T4320] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  544.554278][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.869613][ T4320] usb 5-1: usb_control_msg returned -32
[  544.876738][ T4320] usbtmc 5-1:16.0: can't read capabilities
[  545.707903][T10977] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  545.829149][ T4274] usb 5-1: USB disconnect, device number 12
[  546.052163][T10986] loop5: detected capacity change from 0 to 1024
[  546.071548][T10986] EXT4-fs: Ignoring removed i_version option
[  546.103798][T10986] EXT4-fs (loop5): Test dummy encryption mode enabled
[  546.989046][T10986] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  548.423725][T11004] loop3: detected capacity change from 0 to 4096
[  548.642739][T11004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  548.731167][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  548.831373][T11016] loop1: detected capacity change from 0 to 512
[  548.870793][T11016] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  548.949200][T11020] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  550.288078][T11016] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1826: bad orphan inode 13
[  550.515393][T11016] ext4_test_bit(bit=12, block=18) = 1
[  550.582956][T11016] is_bad_inode(inode)=0
[  550.592431][T11016] NEXT_ORPHAN(inode)=0
[  550.617830][T11016] max_ino=32
[  550.621566][T11016] i_nlink=1
[  550.624845][T11016] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  550.909717][   T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  551.143744][T11035] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  551.199420][   T22] usb 1-1: Using ep0 maxpacket: 8
[  551.233517][   T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  551.374165][   T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  551.508439][   T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  551.613728][   T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  551.722832][T10992] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  551.753837][   T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  552.023921][   T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  552.045327][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.061194][T11035] Quota error (device loop1): write_blk: dquota write failed
[  552.234877][T11035] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  552.329494][T11035] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1826: Failed to acquire dquot type 1
[  552.366937][   T22] usb 1-1: usb_control_msg returned -32
[  552.372735][   T22] usbtmc 1-1:16.0: can't read capabilities
[  552.501902][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  552.763098][T11046] ucma_write: process 999 (syz.3.1834) changed security contexts after opening file descriptor, this is not allowed.
[  553.069707][ T9150] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  553.325935][ T9150] usb 4-1: unable to get BOS descriptor or descriptor too short
[  553.408061][ T9150] usb 4-1: not running at top speed; connect to a high speed hub
[  553.472076][ T9150] usb 4-1: config 1 has an invalid interface number: 93 but max is 0
[  553.511939][ T9150] usb 4-1: config 1 has no interface number 0
[  553.519540][T11047] usbtmc 1-1:16.0: stb usb_control_msg returned -32
[  553.529668][ T9150] usb 4-1: config 1 interface 93 has no altsetting 0
[  553.572319][ T9150] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d
[  553.602201][ T9150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.628217][ T9150] usb 4-1: Product: syz
[  553.654014][ T9150] usb 4-1: Manufacturer: syz
[  553.658725][ T9150] usb 4-1: SerialNumber: syz
[  553.712766][ T4274] usb 1-1: USB disconnect, device number 9
[  555.018826][T11063] loop5: detected capacity change from 0 to 512
[  555.206090][T11063] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  555.215493][T11063] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  555.247567][T11063] block nbd5: shutting down sockets
[  555.508193][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  555.730356][ T9150] usb 4-1: USB disconnect, device number 12
[  555.781603][T11074] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  558.177595][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  558.253635][T11091] loop0: detected capacity change from 0 to 4096
[  558.275361][T11091] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  558.436186][T11091] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  558.492195][T11094] loop5: detected capacity change from 0 to 1024
[  558.499889][T11094] EXT4-fs: Ignoring removed orlov option
[  558.538241][T11091] ntfs3: loop0: Inode r=b is not in use!
[  558.553037][T11094] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  558.613419][T11091] ntfs3: loop0: Failed to load $Extend.
[  558.794339][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  559.200948][T11089] loop3: detected capacity change from 0 to 32768
[  559.264530][T11089] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1846 (11089)
[  559.302293][ T4320] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  559.368929][T11089] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  559.419745][T11089] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  559.757763][   T22] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  559.778043][T11089] BTRFS info (device loop3): force clearing of disk cache
[  559.789598][ T4320] usb 5-1: Using ep0 maxpacket: 8
[  559.802945][ T4320] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  560.209064][T11089] BTRFS info (device loop3): enabling disk space caching
[  560.216304][T11089] BTRFS info (device loop3): disk space caching is enabled
[  560.230861][ T4320] usb 5-1: config 179 has no interface number 0
[  560.238739][ T4320] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  560.250336][ T4320] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  560.262073][ T4320] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  560.273951][ T4320] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  560.285614][ T4320] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  560.299329][ T4320] usb 5-1: config 179 interface 65 has no altsetting 0
[  560.306267][ T4320] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  560.316448][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.347691][ T4320] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input33
[  560.440303][T11089] BTRFS info (device loop3): enabling ssd optimizations
[  560.461454][T11089] BTRFS info (device loop3): rebuilding free space tree
[  560.509537][   T22] usb 6-1: Using ep0 maxpacket: 8
[  560.517284][   T22] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  560.525910][   T22] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  560.537125][   T22] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  560.548188][   T22] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  560.558446][   T22] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  560.576759][   T22] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  560.586173][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.620052][ T4320] usb 5-1: USB disconnect, device number 13
[  560.627011][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  560.650063][ T4320] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  560.662625][T11089] BTRFS info (device loop3): disabling free space tree
[  560.671385][T11089] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  560.685340][T11089] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  560.757880][T11089] BTRFS info (device loop3): checking UUID tree
[  560.810704][   T22] usb 6-1: usb_control_msg returned -32
[  560.816366][   T22] usbtmc 6-1:16.0: can't read capabilities
[  560.987275][T11135] loop0: detected capacity change from 0 to 512
[  561.018020][T11135] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  561.035354][ T4281] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  561.135828][T11135] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1853: bad orphan inode 13
[  561.225496][T11135] ext4_test_bit(bit=12, block=18) = 1
[  561.269632][T11135] is_bad_inode(inode)=0
[  561.315820][T11135] NEXT_ORPHAN(inode)=0
[  561.321039][T11145] usbtmc 6-1:16.0: stb usb_control_msg returned -32
[  561.348094][T11135] max_ino=32
[  561.370534][T11135] i_nlink=1
[  561.388284][T11135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  562.195211][T11149] device syzkaller0 entered promiscuous mode
[  562.204008][T11155] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  562.288868][ T9883] usb 6-1: USB disconnect, device number 8
[  562.370813][T11155] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1853: bg 0: block 248: padding at end of block bitmap is not set
[  562.549654][T11155] Quota error (device loop0): write_blk: dquota write failed
[  562.557183][T11155] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  562.781626][T11155] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1853: Failed to acquire dquot type 1
[  562.835198][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  562.847192][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  563.360271][T11166] loop5: detected capacity change from 0 to 1024
[  563.367761][T11166] EXT4-fs: Ignoring removed orlov option
[  563.420321][T11166] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  563.517851][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  563.844720][T11175] loop1: detected capacity change from 0 to 16
[  563.901069][T11175] erofs: (device loop1): mounted with root inode @ nid 36.
[  563.995224][ T4292] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  564.010481][T11179] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  564.046712][   T26] audit: type=1800 audit(1782870118.824:57): pid=11179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1862" name="file2" dev="loop1" ino=89 res=0 errno=0
[  564.491887][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  564.737392][T11181] loop0: detected capacity change from 0 to 4096
[  564.760711][T11181] EXT4-fs: Ignoring removed nomblk_io_submit option
[  564.782270][T11181] EXT4-fs: inline encryption not supported
[  564.791418][T11181] EXT4-fs: quotafile must be on filesystem root
[  567.701289][T11213] loop0: detected capacity change from 0 to 1024
[  567.708457][T11213] EXT4-fs: Ignoring removed orlov option
[  567.715782][ T9883] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  567.841687][T11209] loop5: detected capacity change from 0 to 32768
[  567.854625][T11209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1872 (11209)
[  567.881648][T11209] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  567.892001][T11209] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  567.900958][T11209] BTRFS info (device loop5): turning on sync discard
[  567.907709][T11209] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  567.917610][T11209] BTRFS info (device loop5): use zstd compression, level 3
[  567.925158][T11209] BTRFS info (device loop5): turning on async discard
[  567.932016][T11209] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  567.942699][T11209] BTRFS info (device loop5): trying to use backup root at mount time
[  567.950898][T11209] BTRFS info (device loop5): enabling auto defrag
[  567.957521][T11209] BTRFS info (device loop5): using free space tree
[  567.967717][T11213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  568.001098][ T9883] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  568.019499][ T9883] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  568.039668][ T9150] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  568.072549][ T9883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.104347][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  568.112245][ T9883] usb 5-1: config 0 descriptor??
[  568.225050][ T4557] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  568.244515][ T9150] usb 4-1: Using ep0 maxpacket: 32
[  568.257851][T11209] BTRFS error (device loop5): failed to load root extent
[  568.265246][T11209] BTRFS warning (device loop5): try to load backup roots slot 1
[  568.275054][T11085] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  568.296043][ T9150] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  568.312586][T11209] BTRFS warning (device loop5): couldn't read tree root
[  568.319653][T11209] BTRFS warning (device loop5): try to load backup roots slot 2
[  568.331645][T11209] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  568.343007][T11209] BTRFS warning (device loop5): couldn't read tree root
[  568.350088][T11209] BTRFS warning (device loop5): try to load backup roots slot 3
[  568.377022][T11209] BTRFS info (device loop5): enabling ssd optimizations
[  568.384833][T11209] BTRFS info (device loop5): rebuilding free space tree
[  568.399655][ T9150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.409933][ T9150] usb 4-1: config 0 descriptor??
[  568.415729][T11209] BTRFS info (device loop5): checking UUID tree
[  568.612917][ T7763] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  568.637974][ T9150] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  568.656209][ T9150] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  568.676433][ T9150] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  568.684700][ T9150] usb 4-1: media controller created
[  568.704379][ T9150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  568.842049][ T9150] az6027: usb out operation failed. (-71)
[  568.849141][ T9150] az6027: usb out operation failed. (-71)
[  568.855474][ T9150] stb0899_attach: Driver disabled by Kconfig
[  568.861743][ T9150] az6027: no front-end attached
[  568.861743][ T9150] 
[  568.889608][ T9150] az6027: usb out operation failed. (-71)
[  568.898946][ T9150] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  568.916970][ T9150] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34
[  568.942180][ T9150] dvb-usb: schedule remote query interval to 400 msecs.
[  568.949426][ T9150] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  568.972588][ T9150] usb 4-1: USB disconnect, device number 13
[  569.133171][ T4403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (4403)
[  569.198375][ T9150] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  569.410598][T11263] device syzkaller0 entered promiscuous mode
[  569.619457][ T4344] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  569.811854][T11265] device syzkaller0 entered promiscuous mode
[  569.839639][ T4344] usb 6-1: Using ep0 maxpacket: 16
[  569.854274][ T4344] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.886077][ T4344] usb 6-1: config 0 interface 0 has no altsetting 0
[  569.897624][ T4344] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  569.911982][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.932580][ T4344] usb 6-1: config 0 descriptor??
[  570.353876][T11261] loop1: detected capacity change from 0 to 131072
[  570.383317][T11261] F2FS-fs (loop1): invalid crc value
[  570.397287][ T4344] nzxt-smart2 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  570.414893][T11261] F2FS-fs (loop1): Found nat_bits in checkpoint
[  570.459670][T11261] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  570.479018][T11261] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  570.534163][T11271] loop0: detected capacity change from 0 to 256
[  570.570369][T11271] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  570.584896][ T9883] usb 5-1: USB disconnect, device number 14
[  570.756115][T11275] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1885'.
[  571.109685][ T4344] usb 6-1: USB disconnect, device number 9
[  571.656353][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1890'.
[  572.158000][T11300] device syzkaller0 entered promiscuous mode
[  572.343066][T11302] device syzkaller0 entered promiscuous mode
[  572.400012][ T9883] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  572.598254][ T9883] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  572.609515][ T9883] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  572.639329][ T9883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.663083][ T9883] usb 6-1: config 0 descriptor??
[  572.694174][T11306] loop4: detected capacity change from 0 to 16
[  572.729731][T11306] erofs: (device loop4): mounted with root inode @ nid 36.
[  573.088279][T11308] loop0: detected capacity change from 0 to 256
[  573.097838][T11308] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  573.896495][T11310] loop1: detected capacity change from 0 to 131072
[  573.929547][T11310] F2FS-fs (loop1): invalid crc value
[  573.971304][T11310] F2FS-fs (loop1): Found nat_bits in checkpoint
[  574.011198][T11310] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  574.044540][T11310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  574.106812][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1902'.
[  574.495100][T11328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1906'.
[  574.692048][T11333] device syzkaller0 entered promiscuous mode
[  575.700676][ T9883] usb 6-1: USB disconnect, device number 10
[  576.002153][T11349] loop5: detected capacity change from 0 to 256
[  576.063065][T11349] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  576.731314][T11346] loop0: detected capacity change from 0 to 131072
[  576.786436][T11346] F2FS-fs (loop0): invalid crc value
[  577.031361][ T1045] block nbd3: Attempted send on invalid socket
[  577.038011][ T1045] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  577.049427][T11356] qnx6: unable to read the first superblock
[  577.124180][ T1045] block nbd3: Attempted send on invalid socket
[  577.141588][ T1045] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  577.213774][T11346] F2FS-fs (loop0): Found nat_bits in checkpoint
[  577.260262][T11356] qnx6: unable to read the first superblock
[  577.269499][T11356] qnx6: unable to read the first superblock
[  577.289368][T11346] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  577.404725][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1916'.
[  577.457357][T11346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  578.446296][T11386] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1919'.
[  578.574387][T11390] loop1: detected capacity change from 0 to 256
[  578.581015][ T9150] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  578.590931][T11390] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  578.929114][ T9150] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  580.365771][T11400] loop0: detected capacity change from 0 to 131072
[  580.449510][T11400] F2FS-fs (loop0): invalid crc value
[  580.474490][T11400] F2FS-fs (loop0): Found nat_bits in checkpoint
[  580.517591][T11400] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  580.556516][T11400] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  580.573238][ T9150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.590278][ T9150] usb 4-1: config 0 descriptor??
[  580.620422][ T9150] cp210x 4-1:0.0: cp210x converter detected
[  580.801961][ T9150] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32
[  580.830516][ T9150] cp210x 4-1:0.0: querying part number failed
[  580.887583][ T9150] usb 4-1: cp210x converter now attached to ttyUSB0
[  580.930449][ T9150] usb 4-1: USB disconnect, device number 14
[  580.984552][ T9150] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  581.015892][ T9150] cp210x 4-1:0.0: device disconnected
[  581.016155][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1932'.
[  581.683136][T11428] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1939'.
[  582.393347][T11443] loop4: detected capacity change from 0 to 256
[  582.426623][T11443] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  583.314099][T11450] loop5: detected capacity change from 0 to 512
[  583.511309][T11454] loop4: detected capacity change from 0 to 16
[  583.535292][T11454] erofs: (device loop4): mounted with root inode @ nid 36.
[  583.555441][T11450] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1946: iget: bad i_size value: 38620345925642
[  583.597865][T11450] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1946: couldn't read orphan inode 15 (err -117)
[  583.682446][T11450] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  583.892020][ T4292] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  583.950977][T11458] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  583.979618][   T26] audit: type=1800 audit(1782870138.744:58): pid=11458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1948" name="file2" dev="loop4" ino=89 res=0 errno=0
[  584.226906][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1949'.
[  584.345630][T11450] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1946: bg 0: block 5: invalid block bitmap
[  584.396585][T11466] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  584.424822][T11450] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 568 with error 28
[  584.819929][T11450] EXT4-fs (loop5): This should not happen!! Data will be lost
[  584.819929][T11450] 
[  585.111724][T11450] EXT4-fs (loop5): Total free blocks count 0
[  585.247815][T11450] EXT4-fs (loop5): Free/Dirty block details
[  585.253928][T11450] EXT4-fs (loop5): free_blocks=0
[  585.259000][T11450] EXT4-fs (loop5): dirty_blocks=568
[  585.264310][T11450] EXT4-fs (loop5): Block reservation details
[  585.275857][T11450] EXT4-fs (loop5): i_reserved_data_blocks=568
[  585.476317][T11475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1953'.
[  585.528130][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  587.048708][T11489] loop1: detected capacity change from 0 to 256
[  587.141173][T11489] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  587.540728][T11498] loop4: detected capacity change from 0 to 32768
[  587.724905][T11505] device sit1 entered promiscuous mode
[  587.742416][T11505] team0: Device sit1 is of different type
[  588.302246][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1963'.
[  588.481155][T11504] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  588.490419][T11498] XFS (loop4): Mounting V5 Filesystem
[  588.509781][T11504] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  588.542724][T11513] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  588.578183][T11504] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  588.716939][ T4344] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  588.736835][T11498] XFS (loop4): Ending clean mount
[  588.757225][T11504] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  589.075699][T11498] XFS (loop4): Quotacheck needed: Please wait.
[  589.126579][T11504] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  589.145803][ T4344] usb 1-1: unable to get BOS descriptor or descriptor too short
[  589.208788][ T4344] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  589.330754][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.413824][ T4344] usb 1-1: Product: syz
[  589.438879][ T4344] usb 1-1: Manufacturer: syz
[  589.443654][ T4344] usb 1-1: SerialNumber: syz
[  589.475608][T11498] XFS (loop4): Quotacheck: Done.
[  589.669961][T11504] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  589.691043][T11504] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  590.103683][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout
[  590.110341][T11521] loop1: detected capacity change from 0 to 16
[  590.120092][T11504] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  590.148222][T11521] erofs: (device loop1): mounted with root inode @ nid 36.
[  590.272128][ T4288] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  590.705449][T11522] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  590.722573][   T26] audit: type=1800 audit(1782870145.504:59): pid=11522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1965" name="file2" dev="loop1" ino=89 res=0 errno=0
[  590.747130][T11504] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  590.791655][T11504] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  590.800977][T11504] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  590.829356][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout
[  590.843612][T11504] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  590.859561][T11504] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  590.873145][T11504] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  590.903827][T11504] Bluetooth: hci5: Suspend notifier action (1) failed: -4
[  590.961522][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.980248][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.025755][ T4344] usb 1-1: MIDIStreaming interface descriptor not found
[  591.134074][ T4344] usb 1-1: USB disconnect, device number 10
[  591.199121][T11526] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1968'.
[  591.243532][ T4285] XFS (loop4): Unmounting Filesystem
[  591.418701][T11532] comedi: valid board names for 8255 driver are:
[  591.472037][T11532]  8255
[  591.475008][T11532] comedi: valid board names for vmk80xx driver are:
[  591.481889][T11532]  vmk80xx
[  591.485107][T11532] comedi: valid board names for usbduxsigma driver are:
[  591.492329][T11532]  usbduxsigma
[  591.495908][T11532] comedi: valid board names for usbduxfast driver are:
[  591.503031][T11532]  usbduxfast
[  591.506552][T11532] comedi: valid board names for usbdux driver are:
[  591.522062][T11532]  usbdux
[  591.719386][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout
[  591.727837][T11532] comedi: valid board names for ni6501 driver are:
[  591.819468][T11532]  ni6501
[  591.822545][T11532] comedi: valid board names for dt9812 driver are:
[  591.829089][T11532]  dt9812
[  591.839400][T11532] comedi: valid board names for ni_labpc_cs driver are:
[  591.848256][T11532]  ni_labpc_cs
[  591.852270][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  591.871528][T11532] comedi: valid board names for ni_daq_700 driver are:
[  591.891778][T11532]  ni_daq_700
[  591.895211][T11532] comedi: valid board names for labpc_pci driver are:
[  591.908966][T11532]  labpc_pci
[  591.913159][T11532] comedi: valid board names for adl_pci9118 driver are:
[  591.926803][T11532]  pci9118dg
[  591.934669][T11532]  pci9118hg
[  591.938176][T11532]  pci9118hr
[  591.954638][T11532] comedi: valid board names for 8255_pci driver are:
[  591.962086][T11532]  8255_pci
[  591.965252][T11532] comedi: valid board names for s526 driver are:
[  591.979362][T11532]  s526
[  591.982833][T11532] comedi: valid board names for multiq3 driver are:
[  592.004893][T11532]  multiq3
[  592.015017][T11532] comedi: valid board names for pcmuio driver are:
[  592.055135][T11532]  pcmuio48
[  592.058726][T11532]  pcmuio96
[  592.066189][T11532] comedi: valid board names for pcmmio driver are:
[  592.073166][T11532]  pcmmio
[  592.076698][T11532] comedi: valid board names for pcmda12 driver are:
[  592.091492][T11532]  pcmda12
[  592.094680][T11532] comedi: valid board names for pcmad driver are:
[  592.104956][T11532]  pcmad12
[  592.108124][T11532]  pcmad16
[  592.122860][T11532] comedi: valid board names for ni_labpc driver are:
[  592.140228][T11532]  lab-pc-1200
[  592.143743][T11532]  lab-pc-1200ai
[  592.147404][T11532]  lab-pc+
[  592.179479][T11532] comedi: valid board names for atmio16 driver are:
[  592.196482][T11532]  atmio16
[  592.199979][T11532]  atmio16d
[  592.208190][T11532] comedi: valid board names for ni_at_ao driver are:
[  592.219370][ T4288] Bluetooth: hci0: command 0x0406 tx timeout
[  592.235062][T11540] loop0: detected capacity change from 0 to 256
[  592.272129][T11532]  at-ao-6
[  592.285615][T11540] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  592.307823][T11532]  at-ao-10
[  592.311343][T11532] comedi: valid board names for ni_at_a2150 driver are:
[  592.325674][T11532]  ni_at_a2150
[  592.399456][T11532] comedi: valid board names for adq12b driver are:
[  592.406056][T11532]  adq12b
[  592.409030][T11532] comedi: valid board names for mpc624 driver are:
[  592.515682][T11532]  mpc624
[  592.525306][T11532] comedi: valid board names for c6xdigio driver are:
[  592.819832][T11532]  c6xdigio
[  592.829591][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout
[  592.920940][ T4288] Bluetooth: hci5: command 0x0c1a tx timeout
[  592.920986][ T4292] Bluetooth: hci1: command 0x0406 tx timeout
[  593.048559][T11532] comedi: valid board names for aio_iiro_16 driver are:
[  593.062025][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1975'.
[  593.091579][T11532]  aio_iiro_16
[  593.095040][T11532] comedi: valid board names for aio_aio12_8 driver are:
[  593.152992][T11532]  aio_aio12_8
[  593.156481][T11532]  aio_ai12_8
[  593.201960][T11532]  aio_ao12_4
[  593.205332][T11532] comedi: valid board names for fl512 driver are:
[  593.212274][T11532]  fl512
[  593.215174][T11532] comedi: valid board names for dmm32at driver are:
[  593.221888][T11532]  dmm32at
[  593.224947][T11532] comedi: valid board names for dt282x driver are:
[  593.232353][T11532]  dt2821
[  593.235352][T11532]  dt2821-f
[  593.238500][T11532]  dt2821-g
[  593.243322][T11532]  dt2823
[  593.246311][T11532]  dt2824-pgh
[  593.253831][T11532]  dt2824-pgl
[  593.269437][T11532]  dt2825
[  593.272457][T11532]  dt2827
[  593.275447][T11532]  dt2828
[  593.310363][T11532]  dt2829
[  593.313481][T11532]  dt21-ez
[  593.316552][T11532]  dt23-ez
[  593.339331][T11532]  dt24-ez
[  593.349655][T11532]  dt24-ez-pgl
[  593.353102][T11532] comedi: valid board names for dt2817 driver are:
[  593.385677][T11549] loop3: detected capacity change from 0 to 128
[  593.388234][T11551] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  593.401765][T11532]  dt2817
[  593.404763][T11532] comedi: valid board names for dt2815 driver are:
[  593.559336][T11532]  dt2815
[  593.562447][T11532] comedi: valid board names for dt2814 driver are:
[  593.589574][T11549] EXT4-fs (loop3): Test dummy encryption mode enabled
[  593.613282][T11532]  dt2814
[  593.628246][T11549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  593.642744][T11532] comedi: valid board names for dt2811 driver are:
[  593.658083][T11549] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  593.734256][T11532]  dt2811-pgh
[  593.749064][T11532]  dt2811-pgl
[  593.783293][T11532] comedi: valid board names for dt2801 driver are:
[  593.792182][ T4288] Bluetooth: hci3: command 0x0406 tx timeout
[  593.799611][T11532]  dt2801
[  593.811563][T11532] comedi: valid board names for das6402 driver are:
[  593.860206][T11532]  das6402-12
[  593.917479][T11532]  das6402-16
[  594.010155][T11532] comedi: valid board names for das1800 driver are:
[  594.035314][T11532]  das-1701st
[  594.038685][T11532]  das-1701st-da
[  594.114047][T11532]  das-1702st
[  594.117434][T11532]  das-1702st-da
[  594.149396][T11532]  das-1702hr
[  594.152773][T11532]  das-1702hr-da
[  594.245507][T11532]  das-1701ao
[  594.248874][T11532]  das-1702ao
[  594.278454][T11532]  das-1801st
[  594.305364][T11532]  das-1801st-da
[  594.331407][T11532]  das-1802st
[  594.335211][T11532]  das-1802st-da
[  594.338797][T11532]  das-1802hr
[  594.940498][ T4288] Bluetooth: hci4: command 0x0406 tx timeout
[  594.989367][ T4288] Bluetooth: hci5: command 0x0406 tx timeout
[  595.009401][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  595.129788][T11532]  das-1802hr-da
[  595.234162][T11532]  das-1801hc
[  595.252563][T11561] overlayfs: failed to resolve './file1/file0': -2
[  595.279495][T11532]  das-1802hc
[  595.285363][T11532]  das-1801ao
[  595.288846][T11532]  das-1802ao
[  595.316057][T11561] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1978'.
[  595.347302][T11532] comedi: valid board names for das800 driver are:
[  595.439314][T11532]  das-800
[  595.442430][T11532]  cio-das800
[  595.445761][T11532]  das-801
[  595.469316][T11532]  cio-das801
[  595.500376][T11573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'.
[  595.510295][T11532]  das-802
[  595.533821][T11532]  cio-das802
[  595.533876][T11532]  cio-das802/16
[  595.533885][T11532] comedi: valid board names for isa-das08 driver are:
[  595.533898][T11532]  isa-das08
[  595.533906][T11532]  das08-pgm
[  595.533914][T11532]  das08-pgh
[  595.533922][T11532]  das08-pgl
[  595.533930][T11532]  das08-aoh
[  595.533938][T11532]  das08-aol
[  595.533946][T11532]  das08-aom
[  595.533954][T11532]  das08/jr-ao
[  595.533962][T11532]  das08jr-16-ao
[  595.533971][T11532]  pc104-das08
[  595.533978][T11532]  das08jr/16
[  595.533986][T11532] comedi: valid board names for das16m1 driver are:
[  595.534006][T11532]  das16m1
[  595.534015][T11532] comedi: valid board names for dac02 driver are:
[  595.534025][T11532]  dac02
[  595.534033][T11532] comedi: valid board names for rti802 driver are:
[  595.534043][T11532]  rti802
[  595.534051][T11532] comedi: valid board names for rti800 driver are:
[  595.534061][T11532]  rti800
[  595.534069][T11532]  rti815
[  595.534077][T11532] comedi: valid board names for pcm3724 driver are:
[  595.534088][T11532]  pcm3724
[  595.534095][T11532] comedi: valid board names for pcl818 driver are:
[  595.534106][T11532]  pcl818l
[  595.534113][T11532]  pcl818h
[  595.534122][T11532]  pcl818hd
[  595.534130][T11532]  pcl818hg
[  595.534137][T11532]  pcl818
[  595.534145][T11532]  pcl718
[  595.534153][T11532]  pcm3718
[  595.534161][T11532] comedi: valid board names for pcl816 driver are:
[  595.534171][T11532]  pcl816
[  595.534179][T11532]  pcl814b
[  595.534187][T11532] comedi: valid board names for pcl812 driver are:
[  595.534198][T11532]  pcl812
[  595.534205][T11532]  pcl812pg
[  595.534213][T11532]  acl8112pg
[  595.534221][T11532]  acl8112dg
[  595.534229][T11532]  acl8112hg
[  595.534237][T11532]  a821pgl
[  595.534244][T11532]  a821pglnda
[  595.534252][T11532]  a821pgh
[  595.534260][T11532]  a822pgl
[  595.534275][T11532]  a822pgh
[  595.534283][T11532]  a823pgl
[  595.534291][T11532]  a823pgh
[  595.534299][T11532]  pcl813
[  595.534307][T11532]  pcl813b
[  595.534315][T11532]  acl8113
[  595.534323][T11532]  iso813
[  595.534331][T11532]  acl8216
[  595.534339][T11532]  a826pg
[  595.534346][T11532] comedi: valid board names for pcl730 driver are:
[  595.534357][T11532]  pcl730
[  595.534365][T11532]  iso730
[  595.534373][T11532]  acl7130
[  595.534381][T11532]  pcm3730
[  595.534389][T11532]  pcl725
[  595.534396][T11532]  p8r8dio
[  595.534404][T11532]  acl7225b
[  595.534412][T11532]  p16r16dio
[  595.534421][T11532]  pcl733
[  595.534428][T11532]  pcl734
[  595.534436][T11532]  opmm-1616-xt
[  595.534445][T11532]  pearl-mm-p
[  595.534452][T11532]  ir104-pbf
[  595.534461][T11532] comedi: valid board names for pcl726 driver are:
[  595.534471][T11532]  pcl726
[  595.534479][T11532]  pcl727
[  595.534487][T11532]  pcl728
[  595.534495][T11532]  acl6126
[  595.534503][T11532]  acl6128
[  595.534511][T11532] comedi: valid board names for pcl724 driver are:
[  595.534521][T11532]  pcl724
[  595.534529][T11532]  pcl722
[  595.534537][T11532]  pcl731
[  595.534544][T11532]  acl7122
[  595.534552][T11532]  acl7124
[  595.534560][T11532]  pet48dio
[  595.534568][T11532]  pcmio48
[  595.534576][T11532]  onyx-mm-dio
[  595.534585][T11532] comedi: valid board names for pcl711 driver are:
[  595.534595][T11532]  pcl711
[  595.534603][T11532]  pcl711b
[  595.534610][T11532]  acl8112hg
[  595.534619][T11532]  acl8112dg
[  595.534626][T11532] comedi: valid board names for amplc_pc263 driver are:
[  595.534637][T11532]  pc263
[  595.534645][T11532] comedi: valid board names for amplc_pc236 driver are:
[  595.534655][T11532]  pc36at
[  595.534664][T11532] comedi: valid board names for amplc_dio200 driver are:
[  595.534674][T11532]  pc212e
[  595.534682][T11532]  pc214e
[  595.534690][T11532]  pc215e
[  595.534697][T11532]  pc218e
[  595.534705][T11532]  pc272e
[  595.534713][T11532] comedi: valid board names for comedi_parport driver are:
[  595.534723][T11532]  comedi_parport
[  595.534731][T11532] comedi: valid board names for comedi_test driver are:
[  595.534742][T11532]  comedi_test
[  595.534751][T11532] comedi: valid board names for comedi_bond driver are:
[  595.534761][T11532]  comedi_bond
[  595.751983][T11561] ceph: No mds server is up or the cluster is laggy
[  596.778198][T11594] loop0: detected capacity change from 0 to 256
[  596.779170][T11594] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  598.649461][T11605] loop4: detected capacity change from 0 to 4096
[  598.818187][T11605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  598.920511][T11614] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1993'.
[  599.160439][T11618] device syzkaller0 entered promiscuous mode
[  600.016832][T11631] loop5: detected capacity change from 0 to 16
[  600.039072][T11631] erofs: (device loop5): mounted with root inode @ nid 36.
[  600.169500][ T4288] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  600.272276][T11633] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  600.318292][   T26] audit: type=1800 audit(1782870155.074:60): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1999" name="file2" dev="loop5" ino=89 res=0 errno=0
[  600.838743][T11637] loop3: detected capacity change from 0 to 256
[  600.918718][T11637] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  601.931928][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  602.195064][T11644] loop3: detected capacity change from 0 to 512
[  602.260267][T11644] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  602.635741][T11644] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.2003: bad orphan inode 13
[  602.826436][T11644] ext4_test_bit(bit=12, block=18) = 1
[  603.159685][T11644] is_bad_inode(inode)=0
[  603.189494][T11644] NEXT_ORPHAN(inode)=0
[  603.199534][T11644] max_ino=32
[  603.216250][T11644] i_nlink=1
[  603.264657][T11644] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  603.379140][ T4288] Bluetooth: hci4: unexpected cc 0x0c57 length: 133 > 33
[  603.386585][ T4288] Bluetooth: hci4: unexpected event for opcode 0x0c57
[  603.480253][T11662] device syzkaller0 entered promiscuous mode
[  603.912653][T11666] device syzkaller0 entered promiscuous mode
[  603.990608][T11673] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  604.007080][T11673] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2003: bg 0: block 248: padding at end of block bitmap is not set
[  604.031469][T11673] Quota error (device loop3): write_blk: dquota write failed
[  604.039021][T11673] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  604.049046][T11673] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2003: Failed to acquire dquot type 1
[  604.515278][T11677] loop0: detected capacity change from 0 to 256
[  604.552992][T11677] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  604.591974][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  605.663068][T11689] loop1: detected capacity change from 0 to 256
[  606.029418][T11689] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  607.251438][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'.
[  610.251166][T11738] loop1: detected capacity change from 0 to 32768
[  610.269780][T11738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2024 (11738)
[  610.287537][T11738] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  610.297938][T11738] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  610.306704][T11738] BTRFS info (device loop1): use zlib compression, level 3
[  610.314536][T11738] BTRFS info (device loop1): turning on sync discard
[  610.321329][T11738] BTRFS info (device loop1): using free space tree
[  610.515379][T11738] BTRFS info (device loop1): enabling ssd optimizations
[  610.540967][   T26] audit: type=1800 audit(1782870165.324:61): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2024" name="file1" dev="loop1" ino=260 res=0 errno=0
[  610.613111][ T4272] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  611.108405][T11760] loop1: detected capacity change from 0 to 256
[  611.121145][T11760] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  613.661201][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'.
[  613.670352][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2020'.
[  614.782277][T11781] fuse: Bad value for 'group_id'
[  614.935787][T11790] loop5: detected capacity change from 0 to 256
[  614.954021][T11790] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  615.221093][T11791] loop3: detected capacity change from 0 to 32768
[  615.242619][T11791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2035 (11791)
[  615.257991][T11791] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  615.268284][T11791] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  615.277213][T11791] BTRFS info (device loop3): use zlib compression, level 3
[  615.284552][T11791] BTRFS info (device loop3): turning on sync discard
[  615.291331][T11791] BTRFS info (device loop3): using free space tree
[  615.442609][T11806] device syzkaller0 entered promiscuous mode
[  615.544177][ T4321] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  615.729435][ T4321] usb 1-1: Using ep0 maxpacket: 16
[  615.869271][ T4321] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.981699][T11791] BTRFS info (device loop3): enabling ssd optimizations
[  616.329414][ T4321] usb 1-1: config 0 interface 0 has no altsetting 0
[  616.336140][ T4321] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  616.347131][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.368298][ T4321] usb 1-1: config 0 descriptor??
[  616.388554][   T26] audit: type=1800 audit(1782870171.164:62): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2035" name="file1" dev="loop3" ino=260 res=0 errno=0
[  616.478220][ T4281] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  616.809476][   T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  616.839930][ T4321] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  617.019365][   T22] usb 2-1: Using ep0 maxpacket: 8
[  617.028220][   T22] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  617.049675][   T22] usb 2-1: config 179 has no interface number 0
[  617.056069][   T22] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  617.115356][   T22] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  617.180699][   T22] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  617.223428][   T22] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  617.242717][   T22] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  617.287211][   T22] usb 2-1: config 179 interface 65 has no altsetting 0
[  617.303066][   T22] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  617.326812][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.395457][   T22] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input35
[  617.781367][   T22] usb 2-1: USB disconnect, device number 16
[  617.787425][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  617.798137][   T22] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  618.379792][T11854] loop1: detected capacity change from 0 to 16
[  618.390484][T11854] erofs: (device loop1): mounted with root inode @ nid 36.
[  618.483509][ T4288] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  618.521615][T11855] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  618.535674][   T26] audit: type=1800 audit(1782870173.314:63): pid=11855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2045" name="file2" dev="loop1" ino=89 res=0 errno=0
[  622.140528][T11864] fuse: Bad value for 'group_id'
[  622.396446][T11868] loop1: detected capacity change from 0 to 256
[  622.407159][T11868] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  622.585927][T11844] device syzkaller0 entered promiscuous mode
[  622.611480][T11868] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2050'.
[  622.844957][   T22] usb 1-1: USB disconnect, device number 11
[  623.190152][T11874] loop3: detected capacity change from 0 to 32768
[  623.282510][T11874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2053 (11874)
[  623.967976][T11874] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  623.978443][T11874] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  623.987236][T11874] BTRFS info (device loop3): use zlib compression, level 3
[  623.994542][T11874] BTRFS info (device loop3): turning on sync discard
[  624.001337][T11874] BTRFS info (device loop3): using free space tree
[  624.168998][T11895] fuse: Bad value for 'group_id'
[  624.287800][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  624.298201][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  627.807938][T11915] loop4: detected capacity change from 0 to 256
[  627.959928][T11915] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  628.014165][T11915] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2062'.
[  628.084647][T11874] BTRFS error (device loop3): open_ctree failed: -12
[  628.108935][ T4390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4390)
[  628.375456][T11926] device syzkaller0 entered promiscuous mode
[  628.491321][T11253] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  628.701307][T11253] usb 4-1: Using ep0 maxpacket: 16
[  629.549142][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'.
[  630.105460][T11253] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  630.116565][T11253] usb 4-1: config 0 interface 0 has no altsetting 0
[  630.123285][T11253] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  630.132412][T11253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.177020][T11253] usb 4-1: config 0 descriptor??
[  630.380661][T11950] device syzkaller0 entered promiscuous mode
[  630.626757][T11253] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  630.774702][T11957] loop1: detected capacity change from 0 to 256
[  630.805364][T11957] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  630.996808][T11957] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2076'.
[  631.006307][T11955] loop0: detected capacity change from 0 to 32768
[  631.018672][T11955] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  631.028997][T11955] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  631.037785][T11955] BTRFS info (device loop0): use zlib compression, level 3
[  631.045167][T11955] BTRFS info (device loop0): turning on sync discard
[  631.051981][T11955] BTRFS info (device loop0): using free space tree
[  631.724063][T11955] BTRFS info (device loop0): enabling ssd optimizations
[  631.743349][ T4321] usb 4-1: USB disconnect, device number 15
[  632.720076][   T26] audit: type=1800 audit(1782870187.504:64): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2075" name="file1" dev="loop0" ino=260 res=0 errno=0
[  632.862344][T11974] fido_id[11974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  633.183929][T12007] device syzkaller0 entered promiscuous mode
[  634.103813][ T4288] Bluetooth: hci3: unexpected event for opcode 0x0c20
[  634.290841][T12020] loop5: detected capacity change from 0 to 512
[  634.319786][T12020] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  634.433536][T12020] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.2086: bad orphan inode 13
[  634.464531][T12020] ext4_test_bit(bit=12, block=18) = 1
[  634.489382][T12020] is_bad_inode(inode)=0
[  634.493630][T12020] NEXT_ORPHAN(inode)=0
[  634.497739][T12020] max_ino=32
[  634.539533][T12020] i_nlink=1
[  634.542808][T12020] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  634.622346][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2088'.
[  634.639438][T11253] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  634.851244][T11253] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  634.880893][T11253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.986605][T11253] usb 2-1: config 0 descriptor??
[  635.010273][T12030] loop3: detected capacity change from 0 to 32768
[  635.043052][T11253] cp210x 2-1:0.0: cp210x converter detected
[  635.175314][T12030] XFS (loop3): Mounting V5 Filesystem
[  635.221986][T11253] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32
[  635.249295][T11253] cp210x 2-1:0.0: querying part number failed
[  635.277625][T11253] usb 2-1: cp210x converter now attached to ttyUSB0
[  635.296898][T11253] usb 2-1: USB disconnect, device number 17
[  635.307580][T11253] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  635.316169][T11253] cp210x 2-1:0.0: device disconnected
[  635.397503][T12030] XFS (loop3): Ending clean mount
[  635.410204][T12030] XFS (loop3): Quotacheck needed: Please wait.
[  635.416563][T12042] device syzkaller0 entered promiscuous mode
[  635.494140][T12030] XFS (loop3): Quotacheck: Done.
[  635.872770][T12045] kAFS: unable to lookup cell '/'
[  636.208491][T12047] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  636.225451][T12047] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2086: bg 0: block 248: padding at end of block bitmap is not set
[  636.243107][T12047] Quota error (device loop5): write_blk: dquota write failed
[  636.250633][T12047] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  636.260621][T12047] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.2086: Failed to acquire dquot type 1
[  636.335985][ T4277] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  636.402506][ T4281] XFS (loop3): Unmounting Filesystem
[  636.789434][ T4321] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  637.079701][ T4321] usb 2-1: Using ep0 maxpacket: 16
[  637.098007][ T4321] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.207552][ T4321] usb 2-1: config 0 interface 0 has no altsetting 0
[  637.384773][ T4321] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  637.479008][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.630440][ T4321] usb 2-1: config 0 descriptor??
[  638.058716][ T4321] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  638.072687][T12060] device syzkaller0 entered promiscuous mode
[  638.148865][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  641.005122][ T9148] usb 2-1: USB disconnect, device number 18
[  641.012598][T12078] loop4: detected capacity change from 0 to 32768
[  641.047909][T12083] device syzkaller0 entered promiscuous mode
[  641.661267][T12078] XFS (loop4): Mounting V5 Filesystem
[  641.840558][T12078] XFS (loop4): Ending clean mount
[  641.852724][T12078] XFS (loop4): Quotacheck needed: Please wait.
[  642.945645][T12078] XFS (loop4): Quotacheck: Done.
[  643.246696][T12104] loop3: detected capacity change from 0 to 32768
[  643.417419][  T128] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  643.920338][T12104] XFS (loop3): Mounting V5 Filesystem
[  644.437231][ T4285] XFS (loop4): Unmounting Filesystem
[  644.488295][T12104] XFS (loop3): Ending clean mount
[  644.497405][T12104] XFS (loop3): Quotacheck needed: Please wait.
[  644.612189][  T128] usb 2-1: unable to get BOS descriptor or descriptor too short
[  644.713332][T12104] XFS (loop3): Quotacheck: Done.
[  644.768942][  T128] usb 2-1: unable to read config index 0 descriptor/start: -71
[  644.779257][  T128] usb 2-1: can't read configurations, error -71
[  644.870091][T12126] loop0: detected capacity change from 0 to 512
[  645.219600][T12126] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  645.298756][T12135] loop1: detected capacity change from 0 to 128
[  645.421915][T12135] EXT4-fs (loop1): Test dummy encryption mode enabled
[  645.520814][T12126] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.2109: bad orphan inode 13
[  645.571667][T12135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  645.585385][T12126] ext4_test_bit(bit=12, block=18) = 1
[  645.591528][T12135] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  645.602212][T12126] is_bad_inode(inode)=0
[  645.606517][T12126] NEXT_ORPHAN(inode)=0
[  645.611934][T12126] max_ino=32
[  645.615308][T12126] i_nlink=1
[  645.649177][T12126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  646.691664][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  646.926938][ T4281] XFS (loop3): Unmounting Filesystem
[  647.254532][T12161] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  647.340453][T12161] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2109: bg 0: block 248: padding at end of block bitmap is not set
[  647.356414][T12161] Quota error (device loop0): write_blk: dquota write failed
[  647.363967][T12161] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  647.373922][T12161] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2109: Failed to acquire dquot type 1
[  647.500400][   T22] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  647.699347][   T22] usb 6-1: Using ep0 maxpacket: 16
[  647.740588][   T22] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.771077][   T22] usb 6-1: config 0 interface 0 has no altsetting 0
[  647.777863][   T22] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  647.889135][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.913834][   T22] usb 6-1: config 0 descriptor??
[  648.064676][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  648.441323][   T22] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  649.466837][ T4261] usb 6-1: USB disconnect, device number 11
[  650.426902][T12195] loop1: detected capacity change from 0 to 4096
[  650.454407][T12192] fido_id[12192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  650.473681][T12195] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  650.599173][T12203] device syzkaller0 entered promiscuous mode
[  651.575707][T12219] loop3: detected capacity change from 0 to 1024
[  651.582752][T12219] EXT4-fs: Ignoring removed orlov option
[  651.667515][T12219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  652.081305][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  655.109305][ T9886] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  655.226942][T12257] loop1: detected capacity change from 0 to 4096
[  655.248484][T12257] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  655.319321][ T9886] usb 5-1: Using ep0 maxpacket: 16
[  655.330770][ T9886] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.022404][T12263] loop3: detected capacity change from 0 to 1024
[  657.029445][T12263] EXT4-fs: Ignoring removed orlov option
[  657.082074][ T9886] usb 5-1: config 0 interface 0 has no altsetting 0
[  657.101421][T12263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  657.195718][ T9886] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  657.349455][ T9886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.523182][ T9886] usb 5-1: config 0 descriptor??
[  657.552845][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  657.639815][T12272] loop5: detected capacity change from 0 to 1024
[  657.647269][T12272] EXT4-fs: Ignoring removed i_version option
[  657.653838][T12270] loop0: detected capacity change from 0 to 16
[  657.661709][T12270] erofs: (device loop0): mounted with root inode @ nid 36.
[  657.730542][T12272] EXT4-fs (loop5): Test dummy encryption mode enabled
[  657.791305][ T4288] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  657.809005][T12274] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  657.826599][   T26] audit: type=1800 audit(1782870212.604:65): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2141" name="file2" dev="loop0" ino=89 res=0 errno=0
[  658.044222][ T9886] nzxt-smart2 0003:1E71:2009.0027: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  658.078367][T12272] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  658.492638][T12280] ipt_REJECT: TCP_RESET invalid for non-tcp
[  658.936820][T12282] device sit3 entered promiscuous mode
[  659.050874][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  659.133314][ T9886] usb 5-1: USB disconnect, device number 15
[  659.585545][T12290] fuse: Unknown parameter 'grou00000000000000000000'
[  659.713031][T12283] fido_id[12283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  661.119799][T12305] loop4: detected capacity change from 0 to 512
[  661.166149][T12305] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  661.297880][T12305] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.2151: bad orphan inode 13
[  661.341582][T12305] ext4_test_bit(bit=12, block=18) = 1
[  661.347047][T12305] is_bad_inode(inode)=0
[  661.351376][T12305] NEXT_ORPHAN(inode)=0
[  661.355488][T12305] max_ino=32
[  661.358719][T12305] i_nlink=1
[  661.362030][T12305] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  661.689348][ T9886] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  661.756034][T12318] loop3: detected capacity change from 0 to 1024
[  661.796579][T12318] EXT4-fs: Ignoring removed i_version option
[  661.836286][T12318] EXT4-fs (loop3): Test dummy encryption mode enabled
[  661.879618][ T9886] usb 2-1: Using ep0 maxpacket: 8
[  661.888141][ T9886] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  661.903931][T12318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  661.944245][T12321] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  662.012464][ T9886] usb 2-1: config 179 has no interface number 0
[  662.018825][ T9886] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  662.095823][ T9886] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  662.120723][T12321] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2151: bg 0: block 248: padding at end of block bitmap is not set
[  662.167718][T12321] Quota error (device loop4): write_blk: dquota write failed
[  662.200691][T12326] ipt_REJECT: TCP_RESET invalid for non-tcp
[  662.212241][ T9886] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  662.224628][ T9886] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  662.235222][ T9886] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  662.248919][ T9886] usb 2-1: config 179 interface 65 has no altsetting 0
[  662.845460][T12321] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  662.879767][ T9886] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  662.889121][ T9886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.905582][ T9886] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input36
[  663.110766][T12331] loop0: detected capacity change from 0 to 128
[  663.120242][T12331] EXT4-fs (loop0): Test dummy encryption mode enabled
[  663.138533][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  663.164842][ T9886] usb 2-1: USB disconnect, device number 21
[  663.169939][T12321] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2151: Failed to acquire dquot type 1
[  663.171327][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  663.211586][T12331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  663.224226][T12331] ext4 filesystem being mounted at /487/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  663.235745][ T9886] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  664.294730][T12336] fuse: Unknown parameter 'grou00000000000000000000'
[  664.422014][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  665.019531][ T9886] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  665.429499][ T9886] usb 6-1: Using ep0 maxpacket: 16
[  665.437183][ T9886] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  665.478702][T12349] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  665.546384][ T9886] usb 6-1: config 0 interface 0 has no altsetting 0
[  665.609406][ T9886] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  665.699287][ T9886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.739647][ T9886] usb 6-1: config 0 descriptor??
[  665.931026][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  666.039445][   T22] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  666.159339][ T9886] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  666.229338][   T22] usb 2-1: Using ep0 maxpacket: 32
[  666.236718][   T22] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  666.267604][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.279045][   T22] usb 2-1: config 0 descriptor??
[  666.308189][T12366] loop4: detected capacity change from 0 to 1024
[  666.360541][T12366] EXT4-fs: Ignoring removed i_version option
[  666.389670][T12366] EXT4-fs (loop4): Test dummy encryption mode enabled
[  666.447275][T12366] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  666.538519][   T22] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  666.568122][   T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  666.585861][T12372] ipt_REJECT: TCP_RESET invalid for non-tcp
[  666.669991][   T22] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  666.809591][ T4288] Bluetooth: hci0: command 0x0c20 tx timeout
[  667.200491][   T22] usb 2-1: media controller created
[  667.326350][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  667.334128][  T128] usb 6-1: USB disconnect, device number 12
[  667.436125][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  667.553397][   T22] az6027: usb out operation failed. (-71)
[  667.569564][   T22] az6027: usb out operation failed. (-71)
[  667.592171][T12379] loop0: detected capacity change from 0 to 1024
[  667.599412][T12379] EXT4-fs: Ignoring removed orlov option
[  667.647446][   T22] stb0899_attach: Driver disabled by Kconfig
[  667.687253][T12379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  667.723441][   T22] az6027: no front-end attached
[  667.723441][   T22] 
[  667.733037][T12375] loop1: detected capacity change from 0 to 32768
[  667.746951][T12375] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  667.767605][T12375] overlayfs: overlapping lowerdir path
[  667.927611][   T22] az6027: usb out operation failed. (-71)
[  667.933610][   T22] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  667.942682][   T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37
[  667.956021][   T22] dvb-usb: schedule remote query interval to 400 msecs.
[  667.964342][   T22] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  667.975112][   T22] usb 2-1: USB disconnect, device number 22
[  668.151112][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  668.167073][T12387] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  668.315510][   T22] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  668.562875][T12390] fuse: Unknown parameter 'grou00000000000000000000'
[  668.653351][ T4390] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  668.977971][T12397] device syzkaller0 entered promiscuous mode
[  669.830573][ T9148] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  670.110172][ T9148] usb 4-1: Using ep0 maxpacket: 8
[  670.176696][ T9148] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  670.340931][ T9148] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  670.572869][ T9148] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  670.647992][ T9148] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  670.686009][ T9148] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  670.712695][T12422] device syzkaller0 entered promiscuous mode
[  670.736364][T12423] loop0: detected capacity change from 0 to 1024
[  670.743613][T12423] EXT4-fs: Ignoring removed orlov option
[  670.814864][ T9148] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  670.825421][T12423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  670.877049][ T9148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.120614][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  671.145103][ T9148] usb 4-1: usb_control_msg returned -32
[  671.159504][ T9148] usbtmc 4-1:16.0: can't read capabilities
[  671.497611][T12435] loop1: detected capacity change from 0 to 128
[  671.515112][T12435] EXT4-fs (loop1): Test dummy encryption mode enabled
[  671.547381][T12435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  671.563937][T12435] ext4 filesystem being mounted at /410/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  671.587653][T12440] usbtmc 4-1:16.0: control status returned 0
[  671.604382][T12441] loop5: detected capacity change from 0 to 16
[  671.622178][T12441] erofs: (device loop5): mounted with root inode @ nid 36.
[  672.717419][ T4288] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  672.768132][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  672.800063][T12444] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  672.852754][   T26] audit: type=1800 audit(1782870227.624:66): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2187" name="file2" dev="loop5" ino=89 res=0 errno=0
[  672.921354][ T4261] usb 4-1: USB disconnect, device number 16
[  673.447608][T12455] device syzkaller0 entered promiscuous mode
[  674.822713][T12476] device syzkaller0 entered promiscuous mode
[  674.879349][T12481] device syzkaller0 entered promiscuous mode
[  674.900307][T12479] loop5: detected capacity change from 0 to 1024
[  674.907283][T12479] EXT4-fs: Ignoring removed orlov option
[  675.108464][T12479] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  676.029891][ T7763] EXT4-fs (loop5): unmounting filesystem.
[  677.366974][T12503] loop4: detected capacity change from 0 to 32768
[  677.381755][T12503] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  677.534104][T12503] overlayfs: overlapping lowerdir path
[  677.542260][T12505] loop5: detected capacity change from 0 to 16
[  677.557749][T12505] erofs: (device loop5): mounted with root inode @ nid 36.
[  677.586479][T11253] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  677.823500][ T4288] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  677.960087][T11253] usb 1-1: Using ep0 maxpacket: 8
[  677.988322][T12508] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  678.029538][   T26] audit: type=1800 audit(1782870232.794:67): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2204" name="file2" dev="loop5" ino=89 res=0 errno=0
[  678.170646][T11253] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  678.180598][T11253] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  678.191507][T11253] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  678.201975][T11253] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  678.223811][T11253] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  678.268036][T11253] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  678.301409][T11253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.697214][T12515] loop4: detected capacity change from 0 to 32768
[  678.785843][T11253] usb 1-1: usb_control_msg returned -32
[  678.795952][T11253] usbtmc 1-1:16.0: can't read capabilities
[  678.826288][T12515] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  678.852260][T12515] 
[  678.854680][T12515] ======================================================
[  678.861724][T12515] WARNING: possible circular locking dependency detected
[  678.868793][T12515] syzkaller #0 Not tainted
[  678.873251][T12515] ------------------------------------------------------
[  678.880316][T12515] syz.4.2208/12515 is trying to acquire lock:
[  678.886416][T12515] ffff888028b4d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a2/0x820
[  678.897644][T12515] 
[  678.897644][T12515] but task is already holding lock:
[  678.905049][T12515] ffff888070bbb120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x6b7/0x4c40
[  678.915701][T12515] 
[  678.915701][T12515] which lock already depends on the new lock.
[  678.915701][T12515] 
[  678.926130][T12515] 
[  678.926130][T12515] the existing dependency chain (in reverse order) is:
[  678.935167][T12515] 
[  678.935167][T12515] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  678.944055][T12515]        down_read+0x42/0x2d0
[  678.948825][T12515]        ocfs2_read_virt_blocks+0x266/0x980
[  678.954763][T12515]        ocfs2_find_entry+0x3a8/0x2080
[  678.960252][T12515]        ocfs2_find_files_on_disk+0x102/0x390
[  678.966342][T12515]        ocfs2_lookup_ino_from_name+0x4f/0xf0
[  678.972461][T12515]        ocfs2_get_system_file_inode+0x34d/0x820
[  678.978830][T12515]        ocfs2_init_global_system_inodes+0x315/0x6e0
[  678.985541][T12515]        ocfs2_fill_super+0x2b5a/0x5020
[  678.991111][T12515]        mount_bdev+0x28a/0x3c0
[  678.996104][T12515]        legacy_get_tree+0xe6/0x180
[  679.001376][T12515]        vfs_get_tree+0x88/0x270
[  679.006388][T12515]        do_new_mount+0x247/0xa40
[  679.011538][T12515]        __se_sys_mount+0x2e3/0x3d0
[  679.016761][T12515]        do_syscall_64+0x4c/0xa0
[  679.021741][T12515]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  679.028254][T12515] 
[  679.028254][T12515] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}:
[  679.036782][T12515]        __lock_acquire+0x2c92/0x7bd0
[  679.042221][T12515]        lock_acquire+0x1bb/0x4a0
[  679.047275][T12515]        __mutex_lock+0x12d/0xae0
[  679.052321][T12515]        ocfs2_get_system_file_inode+0x1a2/0x820
[  679.058758][T12515]        ocfs2_reserve_suballoc_bits+0x12e/0x4810
[  679.065254][T12515]        ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  679.072131][T12515]        ocfs2_extend_dir+0xd70/0x4c40
[  679.077621][T12515]        ocfs2_prepare_dir_for_insert+0x3217/0x5600
[  679.084275][T12515]        ocfs2_mknod+0xb46/0x2580
[  679.089414][T12515]        ocfs2_mkdir+0x1b6/0x4b0
[  679.094385][T12515]        vfs_mkdir+0x386/0x570
[  679.099172][T12515]        do_mkdirat+0x1d8/0x440
[  679.104050][T12515]        __x64_sys_mkdirat+0x85/0x90
[  679.109365][T12515]        do_syscall_64+0x4c/0xa0
[  679.114325][T12515]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  679.120770][T12515] 
[  679.120770][T12515] other info that might help us debug this:
[  679.120770][T12515] 
[  679.131015][T12515]  Possible unsafe locking scenario:
[  679.131015][T12515] 
[  679.138479][T12515]        CPU0                    CPU1
[  679.143867][T12515]        ----                    ----
[  679.149250][T12515]   lock(&ocfs2_file_ip_alloc_sem_key);
[  679.154824][T12515]                                lock(&osb->system_file_mutex);
[  679.162476][T12515]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  679.170559][T12515]   lock(&osb->system_file_mutex);
[  679.175687][T12515] 
[  679.175687][T12515]  *** DEADLOCK ***
[  679.175687][T12515] 
[  679.183850][T12515] 3 locks held by syz.4.2208/12515:
[  679.189083][T12515]  #0: ffff88807b19c460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  679.198372][T12515]  #1: ffff888070bbb488 (&type->i_mutex_dir_key#18/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  679.209123][T12515]  #2: ffff888070bbb120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x6b7/0x4c40
[  679.220122][T12515] 
[  679.220122][T12515] stack backtrace:
[  679.226051][T12515] CPU: 1 PID: 12515 Comm: syz.4.2208 Not tainted syzkaller #0
[  679.233815][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  679.243897][T12515] Call Trace:
[  679.247262][T12515]  <TASK>
[  679.250273][T12515]  dump_stack_lvl+0x188/0x24e
[  679.255028][T12515]  ? load_image+0x410/0x410
[  679.259604][T12515]  ? show_regs_print_info+0x12/0x12
[  679.264823][T12515]  ? print_circular_bug+0x12b/0x1a0
[  679.270050][T12515]  check_noncircular+0x296/0x330
[  679.275024][T12515]  ? add_chain_block+0x9b0/0x9b0
[  679.279990][T12515]  ? lockdep_lock+0xf1/0x1f0
[  679.284608][T12515]  ? _find_first_zero_bit+0xd2/0x100
[  679.289940][T12515]  __lock_acquire+0x2c92/0x7bd0
[  679.295029][T12515]  ? mark_lock+0x94/0x320
[  679.299396][T12515]  ? verify_lock_unused+0x140/0x140
[  679.304632][T12515]  ? __lock_acquire+0x13e3/0x7bd0
[  679.309692][T12515]  lock_acquire+0x1bb/0x4a0
[  679.314491][T12515]  ? ocfs2_get_system_file_inode+0x1a2/0x820
[  679.320499][T12515]  ? __might_sleep+0xd0/0xd0
[  679.325176][T12515]  ? read_lock_is_recursive+0x10/0x10
[  679.330608][T12515]  ? check_path+0x40/0x40
[  679.334972][T12515]  ? check_path+0x21/0x40
[  679.339503][T12515]  ? check_noncircular+0x189/0x330
[  679.344644][T12515]  __mutex_lock+0x12d/0xae0
[  679.349172][T12515]  ? ocfs2_get_system_file_inode+0x1a2/0x820
[  679.355180][T12515]  ? ocfs2_get_system_file_inode+0x14f/0x820
[  679.361188][T12515]  ? ocfs2_get_system_file_inode+0x1a2/0x820
[  679.367196][T12515]  ? mutex_lock_nested+0x10/0x10
[  679.372170][T12515]  ? do_raw_spin_lock+0x128/0x2f0
[  679.377324][T12515]  ? __rwlock_init+0x140/0x140
[  679.382109][T12515]  ? __lock_acquire+0x2854/0x7bd0
[  679.387181][T12515]  ? do_raw_spin_unlock+0x11d/0x230
[  679.392397][T12515]  ocfs2_get_system_file_inode+0x1a2/0x820
[  679.398232][T12515]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  679.404457][T12515]  ? verify_lock_unused+0x140/0x140
[  679.409692][T12515]  ocfs2_reserve_suballoc_bits+0x12e/0x4810
[  679.415635][T12515]  ? mark_lock+0x94/0x320
[  679.420041][T12515]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  679.426064][T12515]  ? __lock_acquire+0x7bd0/0x7bd0
[  679.431120][T12515]  ? lock_chain_count+0x20/0x20
[  679.436004][T12515]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  679.441921][T12515]  ? lockdep_hardirqs_on+0x94/0x140
[  679.447149][T12515]  ? ocfs2_block_group_search+0x4f0/0x4f0
[  679.452893][T12515]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  679.458816][T12515]  ? _raw_spin_unlock+0x40/0x40
[  679.463695][T12515]  ? stack_trace_save+0xa6/0xf0
[  679.468701][T12515]  ? __stack_depot_save+0x439/0x480
[  679.474000][T12515]  ? kasan_set_track+0x60/0x70
[  679.478829][T12515]  ? kasan_set_track+0x4b/0x70
[  679.483618][T12515]  ? __kasan_kmalloc+0x8e/0xa0
[  679.488415][T12515]  ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0
[  679.494940][T12515]  ? ocfs2_extend_dir+0xd70/0x4c40
[  679.500087][T12515]  ? ocfs2_prepare_dir_for_insert+0x3217/0x5600
[  679.506356][T12515]  ? ocfs2_mknod+0xb46/0x2580
[  679.511064][T12515]  ? ocfs2_mkdir+0x1b6/0x4b0
[  679.515681][T12515]  ? vfs_mkdir+0x386/0x570
[  679.520115][T12515]  ? do_mkdirat+0x1d8/0x440
[  679.524635][T12515]  ? __x64_sys_mkdirat+0x85/0x90
[  679.529592][T12515]  ? do_syscall_64+0x4c/0xa0
[  679.534210][T12515]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  679.540327][T12515]  ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  679.546698][T12515]  ? ocfs2_init_steal_slots+0x150/0x150
[  679.552277][T12515]  ? rwsem_write_trylock+0x135/0x1c0
[  679.557589][T12515]  ? clear_nonspinnable+0x60/0x60
[  679.562639][T12515]  ? lockdep_lock+0xf1/0x1f0
[  679.567257][T12515]  ? lockdep_unlock+0x142/0x2e0
[  679.572162][T12515]  ocfs2_extend_dir+0xd70/0x4c40
[  679.577141][T12515]  ? ocfs2_dx_dir_name_hash+0xbd0/0xbd0
[  679.582715][T12515]  ? __lock_acquire+0x13e3/0x7bd0
[  679.587770][T12515]  ? ocfs2_allocate_extend_trans+0x670/0x670
[  679.593773][T12515]  ? verify_lock_unused+0x140/0x140
[  679.599003][T12515]  ? __lock_acquire+0x13e3/0x7bd0
[  679.604074][T12515]  ? verify_lock_unused+0x140/0x140
[  679.609314][T12515]  ? ocfs2_buffer_cached+0x34d/0x8d0
[  679.614633][T12515]  ? __lock_acquire+0x7bd0/0x7bd0
[  679.619687][T12515]  ? do_raw_spin_lock+0x128/0x2f0
[  679.624738][T12515]  ? ocfs2_read_blocks+0x11d9/0x1690
[  679.630055][T12515]  ? ocfs2_set_buffer_uptodate+0xac/0x1360
[  679.635880][T12515]  ? ocfs2_dx_dir_name_hash+0xa02/0xbd0
[  679.641450][T12515]  ? ocfs2_prepare_dir_for_insert+0x5600/0x5600
[  679.647718][T12515]  ? ocfs2_buffer_cached+0x3ef/0x8d0
[  679.653026][T12515]  ocfs2_prepare_dir_for_insert+0x3217/0x5600
[  679.659121][T12515]  ? ocfs2_set_buffer_uptodate+0xac/0x1360
[  679.664948][T12515]  ? ocfs2_fill_new_dir_el+0xad0/0xad0
[  679.670421][T12515]  ? rcu_is_watching+0x11/0xa0
[  679.675321][T12515]  ? ocfs2_search_dirblock+0x33a/0x860
[  679.680816][T12515]  ? ocfs2_read_dir_block_direct+0x4b0/0x4b0
[  679.686819][T12515]  ? rcu_is_watching+0x11/0xa0
[  679.691698][T12515]  ? ocfs2_buffer_cached+0x3ef/0x8d0
[  679.697133][T12515]  ? __brelse+0x55/0x90
[  679.701314][T12515]  ? ocfs2_find_entry+0x13dd/0x2080
[  679.706565][T12515]  ? ocfs2_free_dir_lookup_result+0x100/0x100
[  679.712664][T12515]  ? ocfs2_read_blocks_sync+0xc60/0xc60
[  679.718253][T12515]  ? ocfs2_inode_lock_full_nested+0x149/0x1b10
[  679.724427][T12515]  ? ocfs2_read_inode_block+0x120/0x190
[  679.729985][T12515]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  679.735979][T12515]  ? do_raw_spin_unlock+0x11d/0x230
[  679.741205][T12515]  ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10
[  679.747437][T12515]  ? __kernel_text_address+0x9/0x30
[  679.752721][T12515]  ? unwind_get_return_address+0x49/0x80
[  679.758413][T12515]  ? ocfs2_downconvert_lock+0x500/0x500
[  679.763987][T12515]  ? ocfs2_check_dir_for_entry+0x25d/0x450
[  679.769815][T12515]  ? ocfs2_lookup_ino_from_name+0xf0/0xf0
[  679.775555][T12515]  ? mark_lock+0x94/0x320
[  679.779912][T12515]  ocfs2_mknod+0xb46/0x2580
[  679.784460][T12515]  ? ocfs2_mkdir+0x4b0/0x4b0
[  679.789081][T12515]  ? __lock_acquire+0x13e3/0x7bd0
[  679.794137][T12515]  ? verify_lock_unused+0x140/0x140
[  679.799385][T12515]  ? _raw_spin_unlock+0x24/0x40
[  679.804281][T12515]  ? ocfs2_inode_lock_tracker+0x433/0x700
[  679.810026][T12515]  ? __kmem_cache_free+0xb6/0x200
[  679.815073][T12515]  ? __lock_acquire+0x7bd0/0x7bd0
[  679.820118][T12515]  ? do_raw_spin_lock+0x128/0x2f0
[  679.825167][T12515]  ? ocfs2_inode_unlock_tracker+0x26c/0x2e0
[  679.831090][T12515]  ? __lock_acquire+0x7bd0/0x7bd0
[  679.836152][T12515]  ? __rwlock_init+0x140/0x140
[  679.840935][T12515]  ? ocfs2_lookup+0x51c/0xae0
[  679.845639][T12515]  ? do_raw_spin_unlock+0x11d/0x230
[  679.850864][T12515]  ? put_pid+0xda/0x120
[  679.855046][T12515]  ocfs2_mkdir+0x1b6/0x4b0
[  679.859486][T12515]  ? make_kgid+0x650/0x650
[  679.863949][T12515]  ? ocfs2_symlink+0x2810/0x2810
[  679.868912][T12515]  ? HAS_UNMAPPED_ID+0x1c5/0x220
[  679.873865][T12515]  ? ocfs2_getattr+0x360/0x360
[  679.878655][T12515]  ? inode_permission+0xef/0x480
[  679.883617][T12515]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  679.888720][T12515]  ? security_inode_mkdir+0xb3/0x100
[  679.894079][T12515]  vfs_mkdir+0x386/0x570
[  679.898350][T12515]  do_mkdirat+0x1d8/0x440
[  679.902700][T12515]  ? vfs_mkdir+0x570/0x570
[  679.907137][T12515]  __x64_sys_mkdirat+0x85/0x90
[  679.911932][T12515]  do_syscall_64+0x4c/0xa0
[  679.916372][T12515]  ? clear_bhb_loop+0x60/0xb0
[  679.921066][T12515]  ? clear_bhb_loop+0x60/0xb0
[  679.925764][T12515]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  679.931709][T12515] RIP: 0033:0x7f81a519bcc7
[  679.936204][T12515] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.955900][T12515] RSP: 002b:00007f81a33f5e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  679.964390][T12515] RAX: ffffffffffffffda RBX: 00007f81a33f5ee0 RCX: 00007f81a519bcc7
[  679.972378][T12515] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c
[  679.980376][T12515] RBP: 0000200000000200 R08: 0000200000000000 R09: 0000000000000000
[  679.988381][T12515] R10: 0000200000000200 R11: 0000000000000246 R12: 00002000000000c0
[  679.996377][T12515] R13: 00007f81a33f5ea0 R14: 0000000000000000 R15: 0000000000000000
[  680.004376][T12515]  </TASK>
[  680.009970][   T22] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  680.179250][   T22] usb 2-1: device descriptor read/64, error -71
[  680.449481][   T22] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  680.609248][   T22] usb 2-1: device descriptor read/64, error -71
[  680.695706][T12515] syz.4.2208 (12515) used greatest stack depth: 19408 bytes left
[  680.723716][ T4285] ocfs2: Unmounting device (7,4) on (node local)
[  680.730202][   T22] usb usb2-port1: attempt power cycle
[  681.094614][ T4261] usb 1-1: USB disconnect, device number 12
[  681.139443][   T22] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  681.169690][   T22] usb 2-1: device descriptor read/8, error -71
[  681.439489][   T22] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  681.659283][   T22] usb 2-1: device not accepting address 26, error -71
[  681.668016][   T22] usb usb2-port1: unable to enumerate USB device
[  685.710886][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  685.718193][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len