last executing test programs:

2m37.420766519s ago: executing program 1 (id=147):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})

2m37.371471322s ago: executing program 1 (id=149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x7}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)

2m37.248997484s ago: executing program 1 (id=151):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmmsg$inet6(r0, &(0x7f00000008c0), 0x0, 0x408c0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0xb5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r6], 0x10)
close(r5)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r7, 0xd75)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, <r8=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r8, &(0x7f0000000200)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000003c0)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_int(r0, &(0x7f0000000200)=0x7fffffffff000000, 0x12)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

2m37.126032616s ago: executing program 1 (id=155):
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])

2m37.015063891s ago: executing program 1 (id=157):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0})

2m36.911636791s ago: executing program 1 (id=160):
r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x44, @string={0x2}}}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000006740)={0x2c, 0x0, &(0x7f0000006640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}, 0x0, 0x0, 0x0}, 0x0)

2m36.717702742s ago: executing program 32 (id=160):
r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x44, @string={0x2}}}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000006740)={0x2c, 0x0, &(0x7f0000006640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}, 0x0, 0x0, 0x0}, 0x0)

2m8.195258177s ago: executing program 0 (id=430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r3, r0, 0x4, r0}, 0x10)

2m8.194809391s ago: executing program 0 (id=432):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, r0, 0x2f, 0x2034, r0}, 0x20)

2m8.119105027s ago: executing program 0 (id=434):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x8000000000000000, 0xffffffff, 0x2000000000000000, 0x3, 0x2, 0x5, 0x7b, 0xfffffffffffffffd, 0x3a7b60ae})

2m7.718532825s ago: executing program 0 (id=437):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)

2m7.491044431s ago: executing program 0 (id=438):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m7.281375967s ago: executing program 0 (id=439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)

2m7.183951883s ago: executing program 33 (id=439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)

1m43.259727446s ago: executing program 2 (id=663):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000004c0)=[{0x800000000, 0x0, 0x3}], 0x1, 0x5, 0x0, 0x40, 0x8, 0x6e})

1m43.118781928s ago: executing program 2 (id=665):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9)

1m43.040226701s ago: executing program 2 (id=666):
r0 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x20000, 0x0, 0x803, 0x257}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1m42.989939674s ago: executing program 2 (id=667):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x1]})
write$char_usb(r0, &(0x7f0000000080)="2206bf", 0x3)

1m42.465774033s ago: executing program 2 (id=668):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0)

1m42.170369842s ago: executing program 2 (id=670):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x138})
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

1m42.0356576s ago: executing program 34 (id=670):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x138})
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

1m33.729671478s ago: executing program 3 (id=718):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x20, 0x4, @void, @void, @void, @value=0xffffffffffffffff}, 0x20)

1m33.657426646s ago: executing program 3 (id=719):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, &(0x7f00000000c0), 0x8000, 0x10000})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)

1m33.657066197s ago: executing program 3 (id=720):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r2}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000002840)='./file1\x00', 0x20240, 0x131)

1m33.589484262s ago: executing program 3 (id=721):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000140)={[{@map_off}, {@check_strict}, {@hide}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {}]}, 0x1, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

1m33.507816778s ago: executing program 3 (id=722):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f00000024c0)={0x20, r1, 0x1, 0x0, &(0x7f0000004c40)=[{}]})

1m33.444967676s ago: executing program 3 (id=723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x5c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty=0x7f000001}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

1m33.381250984s ago: executing program 35 (id=723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x5c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty=0x7f000001}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

2.729361706s ago: executing program 5 (id=1848):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)

2.648541857s ago: executing program 5 (id=1850):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060010"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

2.569317706s ago: executing program 5 (id=1852):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='sys_exit\x00', r1}, 0x18)
dup3(0xffffffffffffffff, r0, 0x0)

2.508191508s ago: executing program 5 (id=1855):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x40, 0x5, 0x1b, "c98c0c53c9d6aa9eb492d81508574deceb9528209e09265f9f504d"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0xf0f0]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000440)={0x40, 0xb, 0x2, "44ab"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, 0x0, &(0x7f0000000540)={0x40, 0x19, 0x2, "9142"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x1b}})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x7f, 0x7, 0x8000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x8}, 0x50)

1.113757303s ago: executing program 6 (id=1875):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x1f, 0x1, 0x3, "27625ba20900000000000000e302f5ffffff0054b5000000010100000000e4ff", 0xc9ff1448cab384aa})

966.574338ms ago: executing program 6 (id=1878):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

966.282943ms ago: executing program 4 (id=1879):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000bc0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nolazytime}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@nogrpid}]}, 0x1, 0xbcc, &(0x7f0000003380)="$eJzs3N1rW+cZAPDnHMsfSbzJGWMsgxGPMRIYU5wMhyUMloyMMdjFYLsdxDhyMFY+sD0yO76Qt39gbLsu9KbQNrTkornOTQu9LYU2pXcNvSiE4sYtlNK6HH3YaizZTiL5OPHvB6/O++o50vs8OkjnvCApgH1rNLtJI45ExMUkoti4P42IgVpvKKJa3291ZWnyi5WlySTW1v76aRJJRDxcWZpsPlfS2B5qDIYi4p3fJ/GDf2+ed25hcWaiUinPNsYn5q9cPzG3sPir6SsTl8uXy1dPnv7N+Knx02NnxrtW65cfnbvz+c/++HH1q1e+vvXZ/15K4lwMN2KtdXTLaIyuvyatChEx0e3JctLXqKe1zqSwzYPSHicFAEBHacs13I+iGH2xcfFWjDffyzU5AAAAoCvW+iLWOil0DgEAAADPksQiHwAAAJ5zze8BPFxZmmy2TV8S+Om7u/21hF3z4HxEjNTrX220eqQQ1dp2KPoj4uDDJFp/1prUH/bURiPi/gdnXs9a9Oh3yFupLkfEj9sd/6RW/0jtV9yb608jYqwL848+Mn6W6j/Xhfnzrh+A/enu+fqJbPP5L12//ok2579Cm3PXk8j7/Ne8/lvddP23UX9fh+u/v+xwjpsvv3CjUyyr/7d3/vBas2XzZ9unKuoxPFiO+EmhXf3Jev1Jh/ov7nCO4jc3yp1iede/9mLEsWhff1Oy9f8TnZiarpTH6rdt51h+e/zVTvPnXX92/A92qH+74399h3P8/cKF251i29effjKQ/K3WG2jc88+J+fnZkxEDyZ83339q61ya+zSfI6v/+M+3fv+3qz/7TKg2XodsLbDc2Gbjfz0y5+9u3Xxjq/qztV+ex//SEx7//+zwn5x+8dZ/j3eKta5/s5bNfz+pr4UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0tJ6P01LpYhDEfHDOJhWrs3N/3Lq2j+uXspiESPRn05NV8pjEVGsj5NsfLLW3xifemT864g4HBH/Lx6ojUuT1yqX8i4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdYciYjiStBQRaUSsFtO0VMo7KwAAAKDrRvJOAAAAAOg5638AAAB4/ln/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GOHj969l0RE9eyBWssMNGL9uWYG9FqadwJAbvryTgDITWGH+33Y4zyA3feYa3yXC/AcSraJD3WMDHY9FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2rmNH7t5LIqJ69kCtZQYasf62jzi6i9kBvZTmnQCQm76tgoXdywPYfd7isH+1X+MD+0myTXxoY5/qdyODPcsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL1nuNaStBQRaa2fpqVSxPciYiT6k6npSnksIr4fEe8X+wez8WDeSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB1cwuLMxOVSnlWZw90ChGxB9LQ6dD5U2+nSHIvsKWT9ycTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mFtYnJmoVMqzc3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtbmFxZqJSKc/uoHP7cXZu6eRdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+fk2AAD//08HC/o=")
fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})

966.163293ms ago: executing program 6 (id=1880):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
r1 = fanotify_init(0x0, 0x1)
fanotify_mark(r1, 0x141, 0x40001029, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100))

881.249695ms ago: executing program 6 (id=1881):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000020000130200000002000008"], &(0x7f0000000240)=""/220, 0x3e, 0xdc, 0xa}, 0x28)

881.076148ms ago: executing program 6 (id=1882):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f00000006c0)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@abort, 0x0}, {@noload}, {@jqfmt_vfsv1}, {@mb_optimize_scan}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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")
ioctl$EXT4_IOC_GETFSUUID(r0, 0x40106614, &(0x7f0000000000))

753.566941ms ago: executing program 4 (id=1883):
add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000280)="f487441bd636011fb505068b0d37dd26ffe7dfe6ae582033b82e095096ae43fab17f0dc832e3c64158404d00c44751bd751a2dcf7f6304f2", 0x38, 0xfffffffffffffffe)

753.37824ms ago: executing program 6 (id=1884):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)

299.509361ms ago: executing program 5 (id=1885):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000)

276.915727ms ago: executing program 4 (id=1886):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

214.882351ms ago: executing program 5 (id=1887):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
setxattr$system_posix_acl(&(0x7f00000000c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0)

214.654037ms ago: executing program 4 (id=1888):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast1, 0x1f}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x73}, 0x8)
sendmmsg$inet6(r0, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="4ddbdbb694", 0xfffffea5}], 0x1, &(0x7f00000005c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44)

140.138142ms ago: executing program 4 (id=1889):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

0s ago: executing program 4 (id=1890):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008000100000080000000a2856a46082a23d62ff2030fbf9089ba60a39bd0543729a47f21087914ee18cf4f0145451c3042c34b89fd9dc168850a779db72549f49e5dfac04ad2becd454339e54930981240e3c7f9c3439a3c122c1580ee3b7fb3702be645c34ff14642183e4a341ddd1e9b3cd01d8f6fea9461ec338e81a2b952da5b13dbb0ca143a365844b3"], 0x50)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c)
listen(r0, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xdc}]}}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

  134.811623][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.818573][ T5741] bridge_slave_0: left allmulticast mode
[  134.820523][ T5741] bridge_slave_0: left promiscuous mode
[  134.822903][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.880369][ T7809] loop4: detected capacity change from 0 to 512
[  134.888061][ T7809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  134.908731][ T7809] EXT4-fs (loop4): 1 truncate cleaned up
[  134.912688][ T7809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.981625][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.198538][ T7816] loop3: detected capacity change from 0 to 32768
[  135.223145][ T5741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.228557][ T7816] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  135.243250][ T5741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.249313][ T5741] bond0 (unregistering): Released all slaves
[  135.280150][ T6334] ocfs2: Unmounting device (7,3) on (node local)
[  135.406310][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.409303][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.412286][ T7789] bridge_slave_0: entered allmulticast mode
[  135.426201][ T7789] bridge_slave_0: entered promiscuous mode
[  135.430573][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.433469][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.434621][ T7825] loop3: detected capacity change from 0 to 512
[  135.437363][ T7789] bridge_slave_1: entered allmulticast mode
[  135.444616][ T7825] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  135.449719][ T7825] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  135.450045][ T7789] bridge_slave_1: entered promiscuous mode
[  135.484639][ T7825] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  135.490217][ T7825] System zones: 0-2, 18-18, 34-34
[  135.503215][ T7825] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.684: iget: bad i_size value: 360287970189639680
[  135.515848][ T7825] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.684: couldn't read orphan inode 15 (err -117)
[  135.525650][ T7825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.565288][ T7789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.575875][ T7789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.647902][ T6334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.649375][ T7789] team0: Port device team_slave_0 added
[  135.676138][ T5741] hsr_slave_0: left promiscuous mode
[  135.682652][ T5741] hsr_slave_1: left promiscuous mode
[  135.691995][ T5741] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.700336][ T5741] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.704422][ T5741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.711801][ T5741] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.727651][ T5741] veth1_macvtap: left promiscuous mode
[  135.730077][ T5741] veth0_macvtap: left promiscuous mode
[  135.732430][ T5741] veth1_vlan: left promiscuous mode
[  135.734667][ T5741] veth0_vlan: left promiscuous mode
[  135.936190][ T5910] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  135.948645][ T7836] CIFS: VFS: Malformed UNC in devname
[  136.011864][ T7840] loop4: detected capacity change from 0 to 256
[  136.023809][ T7840] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[  136.027538][ T7840] exFAT-fs (loop4): failed to count the number of clusters in root
[  136.030573][ T7840] exFAT-fs (loop4): failed to recognize exfat type
[  136.126103][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  136.131083][ T5910] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.134680][ T5910] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  136.139719][ T5910] usb 4-1: config 0 interface 0 has no altsetting 0
[  136.142190][ T5910] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  136.145423][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.151768][ T5910] usb 4-1: config 0 descriptor??
[  136.245436][ T5741] team0 (unregistering): Port device team_slave_1 removed
[  136.266080][ T5849] Bluetooth: hci1: command tx timeout
[  136.280557][ T5741] team0 (unregistering): Port device team_slave_0 removed
[  136.579325][ T5910] betop 0003:20BC:5500.0007: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.3-1/input0
[  136.583090][ T5910] betop 0003:20BC:5500.0007: no inputs found
[  136.639879][ T7789] team0: Port device team_slave_1 added
[  136.679649][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.682220][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.707122][ T7789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.728116][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.730586][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.740688][ T7789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.775273][ T5313] usb 4-1: USB disconnect, device number 12
[  136.884771][ T7789] hsr_slave_0: entered promiscuous mode
[  136.889218][ T7789] hsr_slave_1: entered promiscuous mode
[  136.899839][ T7789] debugfs: 'hsr0' already exists in 'hsr'
[  136.902962][ T7789] Cannot create hsr debugfs directory
[  137.593806][ T7789] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  137.611879][ T7789] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  137.619894][ T7789] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  137.637018][ T7789] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  137.794816][ T7853] loop3: detected capacity change from 0 to 32768
[  137.798129][ T7853] XFS: ikeep mount option is deprecated.
[  137.895741][ T7853] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.050567][ T7853] XFS (loop3): Ending clean mount
[  138.069273][ T7853] XFS (loop3): Quotacheck needed: Please wait.
[  138.174486][ T7853] XFS (loop3): Quotacheck: Done.
[  138.289376][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.359636][ T5849] Bluetooth: hci1: command tx timeout
[  138.480823][ T7789] 8021q: adding VLAN 0 to HW filter on device team0
[  138.578749][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.581716][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.629403][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.632521][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.978881][ T6334] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.036541][ T7892] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  139.044335][ T7892] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  139.095343][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.155060][ T7892] vhci_hcd vhci_hcd.0: Device attached
[  139.306030][   T10] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  139.326375][   T49] vhci_hcd: vhci_device speed not set
[  139.398660][   T49] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  139.542363][ T7789] veth0_vlan: entered promiscuous mode
[  139.563147][ T7789] veth1_vlan: entered promiscuous mode
[  139.599200][ T7789] veth0_macvtap: entered promiscuous mode
[  139.605864][ T7789] veth1_macvtap: entered promiscuous mode
[  139.637274][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.651642][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.670849][ T5876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.682085][ T5876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.698425][ T5876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.720360][ T5876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.790093][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.797191][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.833614][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.839583][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.057498][   T10] usb 5-1: config 0 has no interfaces?
[  140.059534][   T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  140.062588][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.076950][   T10] usb 5-1: config 0 descriptor??
[  140.081409][ T7917] loop3: detected capacity change from 0 to 512
[  140.112749][ T7917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.123470][ T7917] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.697: lblock 23 mapped to illegal pblock 18 (length 1)
[  140.133927][ T7917] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.697: path /192/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  140.142069][ T7917] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.697: path /192/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  140.150809][ T7917] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.697: path /192/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  140.160155][ T7917] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.697: path /192/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  140.167836][ T7917] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.697: path /192/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  140.192065][ T7917] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.697: path /192/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  140.204906][ T7917] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.697: lblock 23 mapped to illegal pblock 18 (length 1)
[  140.220662][ T7917] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 19: comm syz.3.697: path /192/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  140.229196][ T7917] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 20: comm syz.3.697: path /192/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  140.284405][ T7894] vhci_hcd: unknown pdu 1
[  140.287347][   T10] usb 5-1: USB disconnect, device number 5
[  140.290431][ T5875] vhci_hcd: stop threads
[  140.292621][ T5875] vhci_hcd: release socket
[  140.300690][ T5875] vhci_hcd: disconnect device
[  140.356756][   T49] vhci_hcd: vhci_device speed not set
[  140.426097][ T5849] Bluetooth: hci1: command tx timeout
[  140.671627][ T7930] loop5: detected capacity change from 0 to 4096
[  140.718804][ T7930] ntfs3(loop5): ino=b, mi_enum_attr
[  140.724463][ T7930] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  140.733263][ T7930] ntfs3(loop5): Failed to load $Extend (-22).
[  140.736304][ T7930] ntfs3(loop5): Failed to initialize $Extend.
[  140.929038][ T7937] loop5: detected capacity change from 0 to 512
[  140.935325][ T7937] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  140.950884][ T7937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002]
[  140.954348][ T7937] System zones: 1-12
[  140.961138][ T7937] EXT4-fs (loop5): 1 truncate cleaned up
[  140.965088][ T7937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.029464][ T6334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.043219][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.237207][ T5313] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  141.428047][ T5313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  141.432716][ T5313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.448582][ T5313] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  141.451657][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.455768][ T5313] usb 5-1: config 0 descriptor??
[  141.725420][ T7955] loop3: detected capacity change from 0 to 4096
[  141.750276][ T7955] NILFS (loop3): invalid segment: Checksum error in segment payload
[  141.753843][ T7955] NILFS (loop3): trying rollback from an earlier position
[  141.760102][ T7955] NILFS (loop3): invalid segment: Checksum error in segment payload
[  141.763405][ T7955] NILFS (loop3): error -22 while searching super root
[  141.872551][ T7961] loop3: detected capacity change from 0 to 1024
[  141.903566][ T5313] topre 0003:0853:0148.0008: unknown main item tag 0x0
[  141.916393][ T5313] topre 0003:0853:0148.0008: unknown main item tag 0x0
[  141.934959][ T5313] topre 0003:0853:0148.0008: hidraw0: USB HID v0.00 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0
[  142.012163][ T7965] loop3: detected capacity change from 0 to 64
[  142.034594][ T7965] minix_free_block (loop3:2): bit already cleared
[  142.038957][ T7965] minix_free_block (loop3:3): bit already cleared
[  142.041809][ T7965] minix_free_block (loop3:4): bit already cleared
[  142.090906][ T7967] netlink: 'syz.3.716': attribute type 11 has an invalid length.
[  142.094179][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'.
[  142.112048][   T49] usb 5-1: USB disconnect, device number 6
[  142.290776][ T7977] loop3: detected capacity change from 0 to 164
[  142.342988][ T6334] iso9660: Corrupted directory entry in block 2 of inode 1920
[  142.348711][ T6334] iso9660: Corrupted directory entry in block 2 of inode 1920
[  142.355657][ T6334] iso9660: Corrupted directory entry in block 2 of inode 1920
[  142.358978][ T6334] iso9660: Corrupted directory entry in block 2 of inode 1920
[  142.454568][ T5876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.506243][ T5849] Bluetooth: hci1: command tx timeout
[  142.537002][ T5876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.619348][ T5876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.680868][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.5.726'.
[  142.696077][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.5.726'.
[  142.698471][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.727'.
[  142.723799][ T5876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.727542][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  142.732252][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  142.735796][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  142.740332][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  142.744121][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  142.765198][ T7984] smc: net device bond0 applied user defined pnetid SYZ
[  142.977417][ T7998] loop5: detected capacity change from 0 to 8
[  142.983054][ T7998] SQUASHFS error: lzo decompression failed, data probably corrupt
[  142.986824][ T7998] SQUASHFS error: Failed to read block 0x82: -5
[  142.989278][ T7998] SQUASHFS error: Unable to read metadata cache entry [80]
[  142.992193][ T7998] SQUASHFS error: Unable to read inode 0x11f
[  143.031728][ T5876] bridge_slave_1: left allmulticast mode
[  143.034100][ T5876] bridge_slave_1: left promiscuous mode
[  143.043913][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.046120][  T791] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  143.079824][ T5876] bridge_slave_0: left allmulticast mode
[  143.082504][ T5876] bridge_slave_0: left promiscuous mode
[  143.084923][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.112720][ T8000] loop5: detected capacity change from 0 to 4096
[  143.117161][ T8000] ntfs3(loop5): Unsupported bytes per MFT record 8192.
[  143.119688][ T8000] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  143.138107][ T8000] ISOFS: Unable to identify CD-ROM format.
[  143.201212][  T791] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  143.205841][  T791] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  143.212207][  T791] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  143.215410][  T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.220870][ T7990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  143.233898][  T791] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  143.440350][  T791] usb 5-1: USB disconnect, device number 7
[  143.517526][ T8002] loop5: detected capacity change from 0 to 32768
[  143.534458][ T8002] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  143.567330][ T8002] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  143.616385][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.616934][ T7789] ocfs2: Unmounting device (7,5) on (node local)
[  143.631436][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.637248][ T5876] bond0 (unregistering): Released all slaves
[  143.710540][ T7985] chnl_net:caif_netlink_parms(): no params data found
[  143.888862][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.891833][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.894978][ T7985] bridge_slave_0: entered allmulticast mode
[  143.900193][ T7985] bridge_slave_0: entered promiscuous mode
[  143.943805][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.947643][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.950663][ T7985] bridge_slave_1: entered allmulticast mode
[  143.954585][ T7985] bridge_slave_1: entered promiscuous mode
[  144.017756][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.737'.
[  144.018125][ T7985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.032638][ T7985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.128984][ T7985] team0: Port device team_slave_0 added
[  144.145066][ T7985] team0: Port device team_slave_1 added
[  144.260730][ T5876] hsr_slave_0: left promiscuous mode
[  144.266549][ T5876] hsr_slave_1: left promiscuous mode
[  144.269111][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.271976][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.294766][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.306241][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.343624][ T5876] veth1_macvtap: left promiscuous mode
[  144.350264][ T8036] netlink: 'syz.5.741': attribute type 1 has an invalid length.
[  144.353277][ T8036] netlink: 224 bytes leftover after parsing attributes in process `syz.5.741'.
[  144.356104][ T5876] veth0_macvtap: left promiscuous mode
[  144.360262][ T5876] veth1_vlan: left promiscuous mode
[  144.362271][ T5876] veth0_vlan: left promiscuous mode
[  144.489128][ T8030] loop4: detected capacity change from 0 to 32768
[  144.519276][ T8030] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.541059][ T8030] XFS (loop4): Ending clean mount
[  144.548092][ T8030] XFS (loop4): Quotacheck needed: Please wait.
[  144.582436][ T8030] XFS (loop4): Quotacheck: Done.
[  144.631968][ T7093] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.826297][   T55] Bluetooth: hci0: command tx timeout
[  145.375664][ T5876] team0 (unregistering): Port device team_slave_1 removed
[  145.412189][ T5876] team0 (unregistering): Port device team_slave_0 removed
[  146.001890][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.007684][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.022991][ T7985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.033306][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.039335][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.052524][ T7985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.181123][ T7985] hsr_slave_0: entered promiscuous mode
[  146.183818][ T7985] hsr_slave_1: entered promiscuous mode
[  146.187317][ T7985] debugfs: 'hsr0' already exists in 'hsr'
[  146.195068][ T7985] Cannot create hsr debugfs directory
[  146.198227][ T8077] loop4: detected capacity change from 0 to 4096
[  146.230530][ T8077] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  146.240271][ T8077] ntfs3(loop4): ino=0, mi_enum_attr
[  146.263046][ T8077] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  146.378832][ T8083] loop4: detected capacity change from 0 to 1024
[  146.784125][ T7985] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  146.798806][ T7985] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  146.810678][ T7985] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  146.818332][ T8081] loop5: detected capacity change from 0 to 32768
[  146.833896][ T7985] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  146.849698][ T8098] loop4: detected capacity change from 0 to 512
[  146.861995][ T8098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  146.896659][ T8098] EXT4-fs (loop4): 1 truncate cleaned up
[  146.909264][ T8098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.917378][   T55] Bluetooth: hci0: command tx timeout
[  146.957739][   T33] kauditd_printk_skb: 167 callbacks suppressed
[  146.957753][   T33] audit: type=1800 audit(402.831:194): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.760" name="file1" dev="loop4" ino=15 res=0 errno=0
[  147.034240][ T8110] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.760: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  147.048406][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.050484][ T8110] EXT4-fs (loop4): Remounting filesystem read-only
[  147.061443][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.761'.
[  147.110952][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.131197][ T7985] 8021q: adding VLAN 0 to HW filter on device team0
[  147.191930][ T8111] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  147.198190][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.201055][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.219465][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.222247][ T7761] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.282095][ T8123] vivid-000: disconnect
[  147.321781][ T8118] vivid-000: reconnect
[  147.348154][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.508721][ T8142] netlink: 666 bytes leftover after parsing attributes in process `syz.5.766'.
[  147.588623][ T7985] veth0_vlan: entered promiscuous mode
[  147.599820][ T7985] veth1_vlan: entered promiscuous mode
[  147.624929][ T7985] veth0_macvtap: entered promiscuous mode
[  147.631183][ T7985] veth1_macvtap: entered promiscuous mode
[  147.647451][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.658471][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.667698][ T5875] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.671126][ T5875] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.676862][  T792] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  147.692074][ T5875] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.698847][ T5875] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.772220][ T7761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.781478][ T7761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.812629][ T7761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.816996][ T7761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.852264][  T792] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  147.856788][  T792] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  147.864902][  T792] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  147.868672][  T792] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  147.872078][  T792] usb 5-1: Manufacturer: syz
[  147.874033][  T792] usb 5-1: SerialNumber: syz
[  148.081848][ T8160] netlink: 27 bytes leftover after parsing attributes in process `syz.5.771'.
[  148.108397][  T792] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  148.128060][  T792] usb 5-1: USB disconnect, device number 8
[  148.576101][ T5896] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  148.747278][ T5896] usb 6-1: Using ep0 maxpacket: 16
[  148.752814][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  148.767775][ T5896] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  148.771493][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.786626][ T5896] usb 6-1: Product: syz
[  148.788404][ T5896] usb 6-1: Manufacturer: syz
[  148.790311][ T5896] usb 6-1: SerialNumber: syz
[  148.802217][ T5896] usb 6-1: config 0 descriptor??
[  148.811094][ T8174] loop4: detected capacity change from 0 to 512
[  148.814470][ T5896] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  148.814510][ T8174] ext4: Unknown parameter 'fsuuid'
[  148.826004][ T5896] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  148.873976][ T8174] tmpfs: Bad value for 'mpol'
[  148.986330][   T55] Bluetooth: hci0: command tx timeout
[  149.103994][ T8186] loop4: detected capacity change from 0 to 4096
[  149.143677][ T8186] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  149.159926][ T8186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.214299][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.273540][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'.
[  149.419287][ T5896] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  149.470610][ T8203] loop4: detected capacity change from 0 to 128
[  149.479402][ T8203] FAT-fs (loop4): Directory bread(block 414) failed
[  149.481511][ T8203] FAT-fs (loop4): Directory bread(block 415) failed
[  149.483703][ T8203] FAT-fs (loop4): Directory bread(block 416) failed
[  149.485750][ T8203] FAT-fs (loop4): Directory bread(block 417) failed
[  149.492811][ T8203] FAT-fs (loop4): Directory bread(block 418) failed
[  149.495043][ T8203] FAT-fs (loop4): Directory bread(block 419) failed
[  149.498119][ T8203] FAT-fs (loop4): Directory bread(block 420) failed
[  149.500342][ T8203] FAT-fs (loop4): Directory bread(block 421) failed
[  149.637115][ T5313] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  149.652352][ T8209] batadv_slave_1: entered promiscuous mode
[  149.655481][ T8208] batadv_slave_1: left promiscuous mode
[  149.789673][ T5313] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  149.796496][ T5313] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  149.806044][ T5313] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  149.809153][ T5313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.827652][ T8199] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  149.837944][ T5313] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  149.851196][ T5896] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  149.863042][ T5896] em28xx 6-1:0.0: board has no eeprom
[  150.006022][   T49] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  150.040382][ T5897] usb 7-1: USB disconnect, device number 2
[  150.156130][ T5896] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  150.156191][   T49] usb 5-1: Using ep0 maxpacket: 32
[  150.159136][ T5896] em28xx 6-1:0.0: dvb set to bulk mode.
[  150.169644][ T5896] usb 6-1: USB disconnect, device number 2
[  150.172118][ T5896] em28xx 6-1:0.0: Disconnecting em28xx
[  150.174989][   T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.185731][    T9] em28xx 6-1:0.0: Binding DVB extension
[  150.187493][   T49] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  150.205001][   T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.208740][   T49] usb 5-1: Product: syz
[  150.210501][   T49] usb 5-1: Manufacturer: syz
[  150.212417][   T49] usb 5-1: SerialNumber: syz
[  150.222284][    T9] em28xx 6-1:0.0: Registering input extension
[  150.224836][ T5896] em28xx 6-1:0.0: Closing input extension
[  150.226919][   T49] usb 5-1: config 0 descriptor??
[  150.229034][   T49] usb 5-1: bad CDC descriptors
[  150.231888][   T49] usb 5-1: unsupported MDLM descriptors
[  150.251337][ T5896] em28xx 6-1:0.0: Freeing device
[  150.441887][   T49] usb 5-1: USB disconnect, device number 9
[  150.827712][ T8234] loop6: detected capacity change from 0 to 16
[  150.852494][ T8234] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 122700)
[  151.066002][   T55] Bluetooth: hci0: command tx timeout
[  151.076756][ T8246] loop6: detected capacity change from 0 to 256
[  151.092183][ T8246] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.208925][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'.
[  151.212620][ T8252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.807'.
[  151.219781][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'.
[  151.224086][ T8252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.807'.
[  151.256263][ T8254] overlayfs: missing 'lowerdir'
[  151.300889][ T8257] bridge_slave_0: invalid flags given to default FDB implementation
[  151.502888][ T8274] loop5: detected capacity change from 0 to 8
[  151.529618][ T8274] SQUASHFS error: lzo decompression failed, data probably corrupt
[  151.532608][ T8274] SQUASHFS error: Failed to read block 0x91: -5
[  151.566959][ T8274] SQUASHFS error: Unable to read metadata cache entry [8f]
[  151.578102][ T8274] SQUASHFS error: Unable to read inode 0x11f
[  151.683221][ T8282] loop5: detected capacity change from 0 to 512
[  151.714251][ T8284] loop6: detected capacity change from 0 to 512
[  151.726457][ T8284] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  151.728078][ T8282] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  151.737145][ T8284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  151.753130][ T8284] EXT4-fs (loop6): orphan cleanup on readonly fs
[  151.758208][ T8284] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.818: iget: bad i_size value: 12154761577498
[  151.768786][ T8284] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.818: couldn't read orphan inode 13 (err -117)
[  151.775319][ T8284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  151.784577][ T8282] EXT4-fs (loop5): 1 truncate cleaned up
[  151.789320][ T8284] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.818: dx entry: limit 65535 != root limit 120
[  151.794589][ T8284] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.818: Corrupt directory, running e2fsck is recommended
[  151.811248][ T8282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.843070][ T7985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.897640][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.018816][ T8276] loop4: detected capacity change from 0 to 32768
[  152.406220][  T791] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  152.529201][ T8307] loop4: detected capacity change from 0 to 4096
[  152.568238][  T791] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  152.575065][  T791] usb 7-1: config 1 has no interface number 0
[  152.581074][  T791] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  152.594492][  T791] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  152.600699][  T791] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.609836][  T791] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  152.621305][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.626924][  T791] usb 7-1: Product: syz
[  152.630901][  T791] usb 7-1: Manufacturer: syz
[  152.635031][  T791] usb 7-1: SerialNumber: syz
[  152.649904][ T8303] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  152.667311][ T8310] loop4: detected capacity change from 0 to 16
[  152.674288][ T8310] erofs (device loop4): mounted with root inode @ nid 36.
[  152.900246][ T8303] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  153.155764][  T791] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  153.756765][   T49] usb 7-1: USB disconnect, device number 3
[  153.767393][  T792] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  153.775886][   T49] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem
[  153.832788][   T49] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  153.929508][  T792] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.935387][  T792] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.940585][  T792] usb 6-1: config 0 interface 0 has no altsetting 0
[  153.943155][  T792] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  153.948202][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.953945][  T792] usb 6-1: config 0 descriptor??
[  153.976379][  T791] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  154.129246][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.133709][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.139216][  T791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.144405][  T791] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  154.148206][  T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.153415][  T791] usb 5-1: config 0 descriptor??
[  154.407584][  T792] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0009/input/input15
[  154.438537][  T792] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0
[  154.557515][ T8341] loop6: detected capacity change from 0 to 32768
[  154.561062][ T8341] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  154.561062][ T8341] clean (size 2912):
[  154.561062][ T8341] flags:          0
[  154.561062][ T8341] journal_seq:    10
[  154.561062][ T8341] usage: type=inodes v=8
[  154.561062][ T8341] usage: type=key_version v=0
[  154.561062][ T8341] usage: type=reserved v=0
[  154.561062][ T8341] usage: type=reserved v=0
[  154.561062][ T8341] usage: type=reserved v=0
[  154.561062][ T8341] usage: type=reserved v=0
[  154.561062][ T8341] data_usage: btree: 1/1 [0]=2816
[  154.561062][ T8341] data_usage: journal: 1/1 [0]=0
[  154.561062][ T8341] data_usage: user: 1/1 [0]=16
[  154.561062][ T8341] dev_usage: dev=0  
[  154.561062][ T8341]   free: buckets=83 sectors=0 fragmented=0
[  154.561062][ T8341]   sb: buckets=25 sectors=6152 fragmented=248
[  154.561062][ T8341]   journal: buckets=8 sectors=2048 fragmented=0
[  154.561062][ T8341]   btree: buckets=11 sectors=2816 fragmented=0
[  154.561062][ T8341]   user: buckets=1 sectors=16 fragmented=240
[  154.561062][ T8341]   cached: buckets=0 sectors=0 fragmented=0
[  154.561062][ T8341]   parity: buckets=0 sectors=0 fragmented=0
[  154.561062][ T8341]   stripe: buckets=0 sectors=0 fragmented=0
[  154.561062][ T8341]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  154.561062][ T8341]   need_discard: buckets=0 sectors=0 fragmented=0
[  154.561062][ T8341] log: 
[  154.561062][ T8341] clock: write=1280
[  154.561062][ T8341] 
[  154.623146][ T8341] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  154.623771][ T5910] usb 6-1: USB disconnect, device number 3
[  154.626934][  T791] hid-multitouch 0003:0EEF:72D0.000A: hidraw1: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0
[  154.763388][ T8343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  154.770037][ T8343] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  154.822279][  T791] usb 5-1: USB disconnect, device number 10
[  154.996947][ T8345] mmap: syz.6.836 (8345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  155.428648][ T8369] loop4: detected capacity change from 0 to 1024
[  155.451951][ T8369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.492487][ T8369] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  155.526906][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.603117][ T8383] loop5: detected capacity change from 0 to 32768
[  156.618771][ T8383] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.846 (8383)
[  156.652364][ T8383] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  156.669000][ T8383] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  156.743205][ T8402] loop6: detected capacity change from 0 to 512
[  156.804939][ T8402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.818444][ T8408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.852'.
[  156.842433][ T8383] BTRFS info (device loop5): rebuilding free space tree
[  156.888073][ T8383] BTRFS info (device loop5): setting nodatasum
[  156.893231][ T8383] BTRFS info (device loop5): setting nodatacow
[  156.916053][ T8383] BTRFS info (device loop5): enabling ssd optimizations
[  156.918822][ T8383] BTRFS info (device loop5): disabling tree log
[  156.938404][ T8383] BTRFS info (device loop5): turning on sync discard
[  156.940990][ T8383] BTRFS info (device loop5): enabling free space tree
[  156.942002][ T7985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.943490][ T8383] BTRFS info (device loop5): force clearing of disk cache
[  156.984843][ T8383] BTRFS info (device loop5): enabling auto defrag
[  156.991604][ T8383] BTRFS info (device loop5): doing ref verification
[  157.080387][ T8423] loop4: detected capacity change from 0 to 2048
[  157.108579][ T7789] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  157.136165][ T6143]  loop4: p1 p2 < > p3 < p5 > p4
[  157.147791][ T6143] loop4: partition table partially beyond EOD, truncated
[  157.150930][ T6143] loop4: p1 size 917504 extends beyond EOD, truncated
[  157.164896][ T6143] loop4: p2 start 4278190080 is beyond EOD, truncated
[  157.184257][ T6143] loop4: p4 start 150994949 is beyond EOD, truncated
[  157.188791][ T6143] loop4: p5 size 917504 extends beyond EOD, truncated
[  157.209925][ T8423]  loop4: p1 p2 < > p3 < p5 > p4
[  157.212106][ T8423] loop4: partition table partially beyond EOD, truncated
[  157.228708][ T8423] loop4: p1 size 917504 extends beyond EOD, truncated
[  157.240924][ T8423] loop4: p2 start 4278190080 is beyond EOD, truncated
[  157.265742][ T8423] loop4: p4 start 150994949 is beyond EOD, truncated
[  157.270583][ T8423] loop4: p5 size 917504 extends beyond EOD, truncated
[  157.289538][ T5295]  loop4: p1 p2 < > p3 < p5 > p4
[  157.291661][ T5295] loop4: partition table partially beyond EOD, truncated
[  157.294863][ T5295] loop4: p1 size 917504 extends beyond EOD, truncated
[  157.300136][ T5295] loop4: p2 start 4278190080 is beyond EOD, truncated
[  157.309337][ T5295] loop4: p4 start 150994949 is beyond EOD, truncated
[  157.312122][ T5295] loop4: p5 size 917504 extends beyond EOD, truncated
[  157.368531][ T8429] netlink: 140 bytes leftover after parsing attributes in process `syz.6.861'.
[  157.515709][ T7573] udevd[7573]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  157.522052][ T8440] loop4: detected capacity change from 0 to 512
[  157.523460][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  157.540051][ T7685] udevd[7685]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  157.567921][ T8440] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  157.574778][ T8440] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.864: invalid indirect mapped block 2683928664 (level 1)
[  157.616748][ T8440] EXT4-fs (loop4): Remounting filesystem read-only
[  157.623953][ T8440] EXT4-fs (loop4): 1 truncate cleaned up
[  157.629606][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  157.638076][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  157.643684][ T7573] udevd[7573]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  157.653834][ T8440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.718084][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.792187][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  157.793793][ T7573] udevd[7573]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  157.806826][ T8452] use of bytesused == 0 is deprecated and will be removed in the future,
[  157.810175][ T7685] udevd[7685]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  157.821174][ T8452] use the actual size instead.
[  157.990117][ T8469] openvswitch: netlink: Unknown key attributes 2
[  158.030614][ T8471] loop6: detected capacity change from 0 to 2048
[  158.049753][ T8471] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  158.070776][ T8471] NILFS (loop6): corrupt root inode
[  158.108865][ T7685] udevd[7685]: incorrect nilfs2 checksum on /dev/loop6
[  158.115415][ T8474] loop5: detected capacity change from 0 to 4096
[  158.164121][ T8478] mmap: syz.4.874 (8478): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  158.177452][ T8474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.295126][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.322021][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.878'.
[  158.475654][ T8501] binder: 8500:8501 ioctl c0306201 0 returned -14
[  159.146575][   T49] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  159.360807][   T49] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  159.390190][   T49] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  159.394454][   T49] usb 5-1: config 0 interface 0 has no altsetting 0
[  159.412594][   T49] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  159.440584][   T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.548973][   T49] usb 5-1: config 0 descriptor??
[  159.565431][ T8505] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  160.050326][   T49] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  160.083203][   T49] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  160.105863][   T49] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  160.120689][   T49] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  160.123248][   T49] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  160.125612][   T49] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  160.164072][   T49] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  160.189784][   T49] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  160.231194][   T49] holtek_mouse 0003:04D9:A067.000B: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0
[  160.298849][   T49] usb 5-1: USB disconnect, device number 11
[  160.536155][ T5944] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  160.688777][ T5944] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  160.694322][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0
[  160.697314][ T5944] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.00
[  160.701179][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.708334][ T5944] usb 6-1: config 0 descriptor??
[  160.715576][ T8522] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  160.737149][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  160.899422][ T5897] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  160.902443][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.905428][ T5897] usb 7-1: Product: syz
[  160.907980][ T5897] usb 7-1: Manufacturer: syz
[  160.909715][ T5897] usb 7-1: SerialNumber: syz
[  160.913492][ T5897] usb 7-1: config 0 descriptor??
[  160.955090][ T8534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.895'.
[  161.114630][ T8539] delete_channel: no stack
[  161.130837][ T5897] usb 7-1: ignoring: probably an ADSL modem
[  161.145007][ T5944] hid-corsair-void 0003:1B1C:0A1A.000C: hidraw0: USB HID v0.07 Device [HID 1b1c:0a1a] on usb-dummy_hcd.5-1/input0
[  161.331588][ T5944] hid-corsair-void 0003:1B1C:0A1A.000C: failed to request firmware (reason: -71)
[  161.335456][ T5313] hid-corsair-void 0003:1B1C:0A1A.000C: failed to request battery (reason: -71)
[  161.337311][  T792] usb 6-1: USB disconnect, device number 4
[  161.506049][   T49] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  161.541373][ T5897] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  161.659703][   T49] usb 5-1: config 5 has an invalid interface number: 42 but max is 0
[  161.662758][   T49] usb 5-1: config 5 has no interface number 0
[  161.665054][   T49] usb 5-1: config 5 interface 42 has no altsetting 0
[  161.669816][   T49] usb 5-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice= 0.15
[  161.673187][   T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.677974][   T49] usb 5-1: Product: syz
[  161.679558][   T49] usb 5-1: Manufacturer: syz
[  161.681325][   T49] usb 5-1: SerialNumber: syz
[  161.748167][  T792] usb 7-1: USB disconnect, device number 4
[  161.915458][   T49] dvb-usb: found a 'PCTV HDTV USB' in warm state.
[  161.918050][   T49] pctv452e: pctv452e_power_ctrl: 1
[  161.918050][   T49] 
[  161.921864][   T49] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  161.921864][   T49] 
[  161.926563][   T49] dvb-usb: bulk message failed: -22 (5/0)
[  161.943778][   T49] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  161.959204][   T49] dvb-usb: PCTV HDTV USB error while loading driver (-19)
[  161.966613][   T49] usb 5-1: USB disconnect, device number 12
[  162.966853][ T8553] loop4: detected capacity change from 0 to 32768
[  162.982460][ T8553] XFS: ikeep mount option is deprecated.
[  162.984399][ T8553] XFS: ikeep mount option is deprecated.
[  163.016773][ T8553] XFS: noikeep mount option is deprecated.
[  163.029604][ T8553] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.133712][ T8553] XFS (loop4): Ending clean mount
[  163.321548][ T7093] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.358228][ T8568] loop5: detected capacity change from 0 to 512
[  163.393476][ T8568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.456880][  T792] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  163.469996][ T8568] EXT4-fs error (device loop5): ext4_empty_dir:3080: inode #12: comm syz.5.908: Directory hole found for htree leaf block 0
[  163.530978][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.551633][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'.
[  163.623765][  T792] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  163.627908][  T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.635585][  T792] usb 7-1: Product: syz
[  163.643992][  T792] usb 7-1: Manufacturer: syz
[  163.652817][  T792] usb 7-1: SerialNumber: syz
[  163.670387][  T792] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  163.716430][    T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  163.869797][ T8590] loop4: detected capacity change from 0 to 16
[  163.882518][ T8590] erofs (device loop4): mounted with root inode @ nid 36.
[  163.900719][ T8590] syz.4.916: attempt to access beyond end of device
[  163.900719][ T8590] loop4: rw=524288, sector=34359738360, nr_sectors = 64 limit=16
[  163.913775][ T8590] syz.4.916: attempt to access beyond end of device
[  163.913775][ T8590] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  163.919948][ T8590] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[  163.936463][ T8590] syz.4.916: attempt to access beyond end of device
[  163.936463][ T8590] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  163.944659][ T8590] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[  164.063078][   T49] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  164.146975][ T5910] usb 7-1: USB disconnect, device number 5
[  164.218285][   T49] usb 6-1: unable to get BOS descriptor or descriptor too short
[  164.218684][ T8602] loop4: detected capacity change from 0 to 1024
[  164.221074][   T49] usb 6-1: not running at top speed; connect to a high speed hub
[  164.232198][   T49] usb 6-1: config 188 has an invalid interface number: 3 but max is 1
[  164.234718][   T49] usb 6-1: config 188 has an invalid interface number: 9 but max is 1
[  164.241220][   T49] usb 6-1: config 188 has no interface number 0
[  164.243788][   T49] usb 6-1: config 188 has no interface number 1
[  164.252574][   T49] usb 6-1: config 188 interface 3 has no altsetting 0
[  164.255618][   T49] usb 6-1: config 188 interface 9 has no altsetting 0
[  164.262369][   T49] usb 6-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0
[  164.266152][   T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.268747][   T49] usb 6-1: Product: syz
[  164.270086][   T49] usb 6-1: Manufacturer: syz
[  164.271990][   T49] usb 6-1: SerialNumber: syz
[  164.279707][   T36] hfsplus: b-tree write err: -5, ino 4
[  164.497626][   T49] usb 6-1: unknown number of interfaces: 2
[  164.502149][   T49] usb 6-1: USB disconnect, device number 5
[  164.676263][ T5313] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  164.841162][    T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  164.844516][    T9] ath9k_htc: Failed to initialize the device
[  164.850793][ T5910] usb 7-1: ath9k_htc: USB layer deinitialized
[  164.886119][ T5313] usb 5-1: Using ep0 maxpacket: 16
[  164.890213][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.894124][ T5313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.913605][ T5313] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.917808][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.922004][ T5313] usb 5-1: Product: syz
[  164.924466][ T5313] usb 5-1: Manufacturer: syz
[  164.929773][ T5313] usb 5-1: SerialNumber: syz
[  164.964838][ T8614] loop6: detected capacity change from 0 to 16
[  164.981600][ T8614] erofs (device loop6): negative i_size @ nid 36
[  165.267070][ T5313] usb 5-1: 0:2 : does not exist
[  165.301615][ T5313] usb 5-1: USB disconnect, device number 13
[  165.336838][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.409802][ T8619] netlink: 260 bytes leftover after parsing attributes in process `syz.5.929'.
[  165.868852][ T8635] loop4: detected capacity change from 0 to 256
[  165.872279][ T8635] exfat: Deprecated parameter 'codepage'
[  165.874734][ T8635] exfat: Bad value for 'codepage'
[  166.106096][ T5944] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  166.346981][ T8655] ip6erspan0: entered promiscuous mode
[  166.421110][ T8657] input: syz1 as /devices/virtual/input/input16
[  166.460678][ T6143] udevd[6143]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  166.869184][ T5944] usb 7-1: config index 0 descriptor too short (expected 63524, got 36)
[  166.872024][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  166.926275][ T5910] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  166.954163][ T5944] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  166.957781][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.965872][ T5944] usb 7-1: Product: syz
[  166.968164][ T5944] usb 7-1: Manufacturer: syz
[  166.969973][ T5944] usb 7-1: SerialNumber: syz
[  166.976502][ T5944] usb 7-1: config 0 descriptor??
[  166.980633][ T5944] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  167.076037][ T5910] usb 6-1: Using ep0 maxpacket: 8
[  167.082228][ T5910] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  167.086374][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.089493][ T5910] usb 6-1: Product: syz
[  167.091186][ T5910] usb 6-1: Manufacturer: syz
[  167.093096][ T5910] usb 6-1: SerialNumber: syz
[  167.098010][ T5910] usb 6-1: config 0 descriptor??
[  167.197899][ T5944] usb 7-1: USB disconnect, device number 6
[  167.220496][ T6802] udevd[6802]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.238515][ T5313] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  167.312758][ T5910] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  167.392169][ T5313] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  167.395487][ T5313] usb 5-1: config 0 has no interface number 0
[  167.398328][ T5313] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  167.401965][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.408254][ T5313] usb 5-1: config 0 descriptor??
[  167.414957][ T5313] cp210x 5-1:0.1: cp210x converter detected
[  167.793238][ T8673] deleting an unspecified loop device is not supported.
[  167.817934][ T5313] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32
[  168.034807][ T5313] usb 5-1: cp210x converter now attached to ttyUSB0
[  168.199348][ T5910] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  168.356898][ T5313] usb 5-1: USB disconnect, device number 14
[  168.372235][ T5313] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  168.380554][ T5910] usb 6-1: USB disconnect, device number 6
[  168.395494][ T5313] cp210x 5-1:0.1: device disconnected
[  168.859716][ T8685] loop6: detected capacity change from 0 to 128
[  168.867906][ T8687] IPv6: addrconf: prefix option has invalid lifetime
[  168.889936][ T8685] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.071303][ T7985] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  169.354500][ T8712] ubi: mtd0 is already attached to ubi31
[  169.686061][ T5910] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  169.836048][ T5910] usb 7-1: Using ep0 maxpacket: 8
[  169.842049][ T5910] usb 7-1: config 0 interface 0 has no altsetting 0
[  169.847747][ T5910] usb 7-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=4d.b9
[  169.850989][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.854111][ T5910] usb 7-1: Product: syz
[  169.855465][ T5910] usb 7-1: Manufacturer: syz
[  169.857096][ T5910] usb 7-1: SerialNumber: syz
[  169.859963][ T5910] usb 7-1: config 0 descriptor??
[  170.032647][ T8720] loop4: detected capacity change from 0 to 4096
[  170.037501][ T8720] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  170.072653][ T5910] pwc: Sotec Afina Eye USB webcam detected.
[  170.087914][ T5910] pwc: Failed to set LED on/off time (-71)
[  170.096550][ T5910] pwc: send_video_command error -71
[  170.099361][ T5910] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  170.106636][ T5910] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  170.112669][ T8722] loop4: detected capacity change from 0 to 4096
[  170.122141][ T8722] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  170.125236][ T5910] usb 7-1: USB disconnect, device number 7
[  170.148365][ T8722] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  170.151897][ T8722] ntfs3(loop4): ino=19, mi_enum_attr
[  170.162982][ T8722] ntfs3(loop4): failed to convert "c46c" to default
[  170.165596][ T8722] ntfs3(loop4): ino=20, mi_enum_attr
[  170.738783][ T8749] loop6: detected capacity change from 0 to 164
[  170.750975][ T8749] rock: directory entry would overflow storage
[  170.754025][ T8749] rock: sig=0x4f50, size=4, remaining=3
[  170.761299][ T8749] isofs: Unable to find the ".." directory for NFS.
[  170.961959][ T8752] loop6: detected capacity change from 0 to 32768
[  170.981886][ T8752] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  170.995422][ T8752] XFS (loop6): Ending clean mount
[  171.109936][ T7985] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  171.326167][ T5313] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  171.389510][ T8773] [U] V3Fپ"W/4:XTZWTLW=
[  171.393607][ T8773] [U] J"E:"
[  171.504891][ T5313] usb 5-1: unable to get BOS descriptor or descriptor too short
[  171.517010][ T5313] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  171.538358][ T5313] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  171.542458][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.546552][ T5313] usb 5-1: SerialNumber: ᴋ
[  171.991283][ T8796] block nbd6: Attempted send on invalid socket
[  171.994492][ T8796] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  172.178915][ T8807] netlink: 'syz.6.1003': attribute type 2 has an invalid length.
[  172.182288][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1003'.
[  172.347859][ T8817] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1009'.
[  172.361912][ T8815] binder: 8814:8815 ioctl c0306201 2000000003c0 returned -14
[  172.466870][ T5313] usb 5-1: reset high-speed USB device number 15 using dummy_hcd
[  172.619065][ T8836] loop6: detected capacity change from 0 to 512
[  172.632009][ T8836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  172.654318][ T5313] usb 5-1: unable to get BOS descriptor or descriptor too short
[  172.663966][ T5313] usb 5-1: device firmware changed
[  172.664746][ T8836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.677036][ T5313] usb 5-1: USB disconnect, device number 15
[  172.710564][ T7985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.346568][ T8853] loop4: detected capacity change from 0 to 32768
[  173.371821][ T8853] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.390180][ T8853] XFS (loop4): Ending clean mount
[  173.395129][ T8853] XFS (loop4): Quotacheck needed: Please wait.
[  173.422083][ T8853] XFS (loop4): Quotacheck: Done.
[  173.473525][ T8853] evm: overlay not supported
[  173.519187][ T7093] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.929799][ T8871] loop4: detected capacity change from 0 to 4096
[  174.000124][ T8881] loop6: detected capacity change from 0 to 1024
[  174.018271][   T32] ntfs3(loop4): ino=5, mi_enum_attr
[  174.071867][   T33] audit: type=1326 audit(429.941:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.4.1034" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa36d8ebe9 code=0x0
[  174.081854][   T32] hfsplus: b-tree write err: -5, ino 4
[  174.429426][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1043'.
[  174.939629][ T8917] loop4: detected capacity change from 0 to 64
[  174.953686][ T8917] minix_free_block (loop4:1): bit already cleared
[  174.955807][ T8917] minix_free_block (loop4:4): bit already cleared
[  174.961627][ T8917] minix_free_block (loop4:3): bit already cleared
[  174.963819][ T8917] minix_free_block (loop4:2): bit already cleared
[  174.965875][ T8917] minix_free_block (loop4:1): bit already cleared
[  175.202940][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'.
[  175.274782][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'.
[  176.145162][ T8997] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  176.226238][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  176.281498][ T9012] loop4: detected capacity change from 0 to 512
[  176.284748][ T9012] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  176.290736][ T9012] EXT4-fs (loop4): failed to open journal device unknown-block(8,1) -16
[  176.377388][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.381976][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  176.384481][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  176.388794][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.394818][    T9] usb 6-1: config 0 descriptor??
[  176.546098][ T5896] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  176.698032][ T5896] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  176.702373][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.706565][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  176.711651][ T5896] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  176.715280][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.722413][ T5896] usb 5-1: config 0 descriptor??
[  176.730905][ T5896] usb-storage 5-1:0.0: USB Mass Storage device detected
[  176.742960][ T5896] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  176.824483][    T9] logitech 0003:046D:C29C.000D: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0
[  176.938783][ T5313] usb 5-1: USB disconnect, device number 16
[  177.009693][    T9] logitech 0003:046D:C29C.000D: no inputs found
[  177.019901][    T9] usb 6-1: USB disconnect, device number 7
[  177.477276][ T9039] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.1076'.
[  177.733697][ T9060] loop5: detected capacity change from 0 to 16
[  177.743993][ T9060] erofs (device loop5): mounted with root inode @ nid 36.
[  177.769689][ T9060] erofs (device loop5): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[  177.778969][ T9060] erofs (device loop5): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[  177.798154][ T9060] erofs (device loop5): read error -95 @ 8200 of nid 36
[  177.960618][ T9055] loop4: detected capacity change from 0 to 32768
[  177.996181][ T9055] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.040870][ T9055] XFS (loop4): Ending clean mount
[  178.116762][ T7093] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.169395][ T9078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.721842][ T9105] loop5: detected capacity change from 0 to 128
[  178.733982][ T9105] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.774443][ T7789] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  179.023725][ T9111] loop5: detected capacity change from 0 to 40427
[  179.027038][ T9111] F2FS-fs (loop5): Image doesn't support compression
[  179.029391][ T9111] F2FS-fs (loop5): build fault injection rate: 690
[  179.031477][ T9111] F2FS-fs (loop5): build fault injection type: 0x35f7
[  179.041863][ T9111] F2FS-fs (loop5): invalid crc value
[  179.072949][ T9111] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  179.076990][ T9111] F2FS-fs (loop5): Start checkpoint disabled!
[  179.080392][ T9111] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  179.538091][ T9141] loop5: detected capacity change from 0 to 4096
[  179.542758][ T9141] ntfs3(loop5): ino=3, Correct links count -> 2.
[  180.390968][ T9147] loop5: detected capacity change from 0 to 131072
[  180.402012][ T9147] F2FS-fs (loop5): invalid crc value
[  180.460494][ T9147] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.466660][ T9147] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  180.485698][ T9147] F2FS-fs (loop5): truncate node fail, ino:7, nid:256, offset[0]:927, offset[1]:0, nofs:1022
[  180.936878][   T33] audit: type=1107 audit(436.791:196): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  181.886075][ T5896] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  182.536384][ T9185] loop4: detected capacity change from 0 to 131072
[  182.544148][ T9185] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  182.547488][ T9185] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  182.559506][ T9185] F2FS-fs (loop4): invalid crc value
[  182.614633][ T9185] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.621978][ T9185] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  182.624835][ T9185] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  182.708192][ T5896] usb 6-1: Using ep0 maxpacket: 16
[  182.712007][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.718890][ T5896] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  182.722727][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.728392][ T5896] usb 6-1: config 0 descriptor??
[  183.072914][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'.
[  183.141695][ T5896] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  183.198230][ T9210] tmpfs: Bad value for 'mpol'
[  183.394702][ T9216] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1147'.
[  183.451564][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'.
[  183.455255][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1148'.
[  183.459258][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'.
[  183.552686][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1148'.
[  183.556361][ T9218] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1148'.
[  183.562021][ T5896] usb 6-1: USB disconnect, device number 8
[  184.599967][ T9260] loop5: detected capacity change from 0 to 256
[  185.026152][ T5910] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  185.176033][ T5910] usb 6-1: Using ep0 maxpacket: 32
[  185.184762][ T5910] usb 6-1: config 4 has an invalid interface number: 228 but max is 0
[  185.188233][ T5910] usb 6-1: config 4 has no interface number 0
[  185.190437][ T5910] usb 6-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  185.193743][ T5910] usb 6-1: config 4 interface 228 has no altsetting 0
[  185.202959][ T9289] loop4: detected capacity change from 0 to 32768
[  185.210764][ T9289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1180 (9289)
[  185.211370][ T5910] usb 6-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  185.223693][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  185.226617][ T5910] usb 6-1: Product: syz
[  185.227948][ T5910] usb 6-1: Manufacturer: syz
[  185.229618][ T5910] usb 6-1: SerialNumber: syz
[  185.231347][ T9289] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.235840][ T9289] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  185.302627][ T9289] BTRFS info (device loop4): rebuilding free space tree
[  185.320926][ T9289] BTRFS info (device loop4): checking UUID tree
[  185.324211][ T9289] BTRFS info (device loop4): enabling ssd optimizations
[  185.328384][ T9289] BTRFS info (device loop4): turning on async discard
[  185.330916][ T9289] BTRFS info (device loop4): enabling free space tree
[  185.333694][ T9289] BTRFS info (device loop4): force clearing of disk cache
[  185.339476][ T9289] BTRFS info (device loop4): force zstd compression, level 3
[  185.421392][ T9314] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1184'.
[  185.436588][ T9314] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  185.453289][ T7093] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.510644][ T5910] usb 6-1: USB disconnect, device number 9
[  185.553073][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  185.956341][ T9340] loop4: detected capacity change from 0 to 1024
[  185.995819][   T85] hfsplus: bad catalog file entry
[  185.998675][   T85] hfsplus: b-tree write err: -5, ino 3
[  186.111956][ T9354] netlink: 'syz.4.1204': attribute type 12 has an invalid length.
[  186.114544][ T9354] netlink: 'syz.4.1204': attribute type 29 has an invalid length.
[  186.122254][ T9354] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1204'.
[  186.125103][ T9354] netlink: 'syz.4.1204': attribute type 2 has an invalid length.
[  186.125436][ T9355] loop5: detected capacity change from 0 to 256
[  186.128207][ T9354] netlink: 'syz.4.1204': attribute type 3 has an invalid length.
[  186.162025][ T9355] FAT-fs (loop5): Directory bread(block 64) failed
[  186.166110][ T9355] FAT-fs (loop5): Directory bread(block 65) failed
[  186.168358][ T9355] FAT-fs (loop5): Directory bread(block 66) failed
[  186.170685][ T9355] FAT-fs (loop5): Directory bread(block 67) failed
[  186.173062][ T9355] FAT-fs (loop5): Directory bread(block 68) failed
[  186.188565][ T9355] FAT-fs (loop5): Directory bread(block 69) failed
[  186.191438][ T9355] FAT-fs (loop5): Directory bread(block 70) failed
[  186.195177][ T9355] FAT-fs (loop5): Directory bread(block 71) failed
[  186.203934][ T9355] FAT-fs (loop5): Directory bread(block 72) failed
[  186.214538][ T9355] FAT-fs (loop5): Directory bread(block 73) failed
[  186.337483][ T9369] loop4: detected capacity change from 0 to 1024
[  186.355451][ T9369] hfsplus: invalid btree extent records (0 size)
[  186.366113][ T9369] hfsplus: failed to load catalog file
[  186.725746][ T5741] nci: nci_ntf_packet: unsupported ntf opcode 0xf05
[  187.977845][ T9422] bond1: entered promiscuous mode
[  187.980010][ T9422] bond1: entered allmulticast mode
[  187.983010][ T9422] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.288991][ T9456] unknown channel width for channel at 909000KHz?
[  189.293148][ T9456] unknown channel width for channel at 909000KHz?
[  189.539235][ T9458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1241'.
[  190.085328][ T9466] netlink: 'syz.6.1245': attribute type 21 has an invalid length.
[  190.108447][ T9466] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1245'.
[  190.268084][ T9475] loop4: detected capacity change from 0 to 1024
[  190.271175][ T9475] EXT4-fs: Ignoring removed orlov option
[  190.317142][ T9475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.348084][ T9482] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1252'.
[  190.379535][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.676053][ T5313] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  190.712664][ T9491] loop4: detected capacity change from 0 to 32768
[  190.722477][ T9491] XFS: noikeep mount option is deprecated.
[  190.753162][ T9491] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.773741][ T9491] XFS (loop4): Ending clean mount
[  190.782335][ T9491] XFS (loop4): Quotacheck needed: Please wait.
[  190.809967][ T9491] XFS (loop4): Quotacheck: Done.
[  190.835323][ T5313] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  190.838620][ T5313] usb 6-1: config 1 has no interface number 0
[  190.846255][ T5313] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.849966][ T5313] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  190.853024][ T5313] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  190.858889][ T5313] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[  190.870192][ T7093] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.874813][ T5313] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  190.879874][ T5313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.882568][ T5313] usb 6-1: Product: syz
[  190.884158][ T5313] usb 6-1: Manufacturer: syz
[  190.886203][ T5313] usb 6-1: SerialNumber: syz
[  191.104678][ T9488] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  191.130265][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1257'.
[  191.171276][   T33] audit: type=1326 audit(447.041:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.6.1260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  191.184282][   T33] audit: type=1326 audit(447.041:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.6.1260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  191.202903][   T33] audit: type=1326 audit(447.061:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.6.1260" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  191.213050][   T33] audit: type=1326 audit(447.061:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.6.1260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  191.231251][   T33] audit: type=1326 audit(447.061:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.6.1260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  191.273247][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1263'.
[  191.567573][ T9520] loop4: detected capacity change from 0 to 32768
[  191.587147][ T9520] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.612196][ T9520] XFS (loop4): Ending clean mount
[  191.618384][ T9520] XFS (loop4): Quotacheck needed: Please wait.
[  191.651160][ T9520] XFS (loop4): Quotacheck: Done.
[  191.692660][ T7093] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.763695][ T9488] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  191.779910][ T5313] cdc_ncm 6-1:1.1: bind() failure
[  191.980211][ T5313] usb 6-1: USB disconnect, device number 10
[  192.004269][ T9536] loop4: detected capacity change from 0 to 32768
[  192.905376][ T9552] loop4: detected capacity change from 0 to 128
[  192.915667][ T9552] EXT4-fs: Ignoring removed nobh option
[  192.930821][ T9552] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  192.961259][ T7093] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  193.326439][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  193.350519][ T9569] netlink: 'syz.6.1282': attribute type 12 has an invalid length.
[  193.353744][ T9569] netlink: 'syz.6.1282': attribute type 29 has an invalid length.
[  193.357337][ T9569] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1282'.
[  193.360755][ T9569] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1282'.
[  193.476257][   T10] usb 5-1: Using ep0 maxpacket: 32
[  193.488346][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  193.491185][   T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  193.504459][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.515867][   T10] usb 5-1: config 0 descriptor??
[  193.680469][ T9587] loop5: detected capacity change from 0 to 256
[  193.702131][ T9587] FAT-fs (loop5): Directory bread(block 64) failed
[  193.704820][ T9587] FAT-fs (loop5): Directory bread(block 65) failed
[  193.708230][ T9587] FAT-fs (loop5): Directory bread(block 66) failed
[  193.711141][ T9587] FAT-fs (loop5): Directory bread(block 67) failed
[  193.713869][ T9587] FAT-fs (loop5): Directory bread(block 68) failed
[  193.717364][ T9587] FAT-fs (loop5): Directory bread(block 69) failed
[  193.720383][ T9587] FAT-fs (loop5): Directory bread(block 70) failed
[  193.723289][ T9587] FAT-fs (loop5): Directory bread(block 71) failed
[  193.732966][ T9587] FAT-fs (loop5): Directory bread(block 72) failed
[  193.735755][ T9587] FAT-fs (loop5): Directory bread(block 73) failed
[  193.953958][   T10] corsair-psu 0003:1B1C:1C09.000F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[  194.032545][ T9593] loop5: detected capacity change from 0 to 32768
[  194.035126][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.038087][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.060530][ T9593] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  194.179703][ T7789] ocfs2: Unmounting device (7,5) on (node local)
[  194.189636][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1300'.
[  194.541770][   T10] corsair-psu 0003:1B1C:1C09.000F: unable to initialize device (-71)
[  194.555457][   T10] corsair-psu 0003:1B1C:1C09.000F: probe with driver corsair-psu failed with error -71
[  194.571891][   T10] usb 5-1: USB disconnect, device number 17
[  195.162864][ T9620] loop4: detected capacity change from 0 to 1024
[  195.192439][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1305'.
[  195.196748][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1305'.
[  195.218006][ T9620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.249322][ T9620] EXT4-fs error (device loop4): ext4_get_first_dir_block:3552: inode #11: comm syz.4.1304: directory missing '..'
[  195.311876][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.422398][ T9634] delete_channel: no stack
[  195.517677][ T5896] IPVS: starting estimator thread 0...
[  195.533080][ T9639] loop5: detected capacity change from 0 to 4096
[  195.537366][ T9639] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  195.553549][ T9639] ntfs3(loop5): ino=19, mi_enum_attr
[  195.558860][ T9639] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  195.585115][ T9639] ntfs3(loop5): failed to convert "c46c" to cp862
[  195.591943][ T9639] ntfs3(loop5): ino=20, mi_enum_attr
[  195.618181][ T9645] IPVS: using max 81 ests per chain, 194400 per kthread
[  195.714402][ T9658] loop5: detected capacity change from 0 to 512
[  195.725307][ T9658] EXT4-fs: Ignoring removed orlov option
[  195.737989][ T9658] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  195.744226][ T9658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  195.751011][ T9658] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1320: corrupted in-inode xattr: e_value size too large
[  195.758599][ T9658] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1320: couldn't read orphan inode 15 (err -117)
[  195.765034][ T9658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.838571][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'.
[  195.842659][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.040724][ T9675] loop5: detected capacity change from 0 to 8192
[  196.088210][ T9675]  loop5: [ICS]
[  196.174760][ T9681] loop5: detected capacity change from 0 to 256
[  196.192029][ T9681] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  196.316660][ T9685] overlayfs: statfs failed on './file0'
[  196.466883][ T9695] loop4: detected capacity change from 0 to 1024
[  196.525827][ T9698] loop5: detected capacity change from 0 to 256
[  196.538461][ T9698] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  196.823060][ T9702] loop5: detected capacity change from 0 to 32768
[  196.827446][ T9702] XFS: attr2 mount option is deprecated.
[  196.860477][ T9702] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  196.891644][ T9702] XFS (loop5): Ending clean mount
[  196.900665][ T9702] XFS (loop5): Quotacheck needed: Please wait.
[  196.930155][ T9702] XFS (loop5): Quotacheck: Done.
[  196.984418][ T7789] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  197.330717][   T36] hfsplus: b-tree write err: -5, ino 4
[  197.581972][ T9720] loop5: detected capacity change from 0 to 32768
[  197.879188][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1348'.
[  197.886388][ T9724] netlink: 'syz.6.1348': attribute type 5 has an invalid length.
[  197.890386][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1348'.
[  197.938837][ T9726] syzkaller1: entered promiscuous mode
[  197.944805][ T9726] syzkaller1: entered allmulticast mode
[  198.515486][ T9748] syz.6.1360 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  198.562225][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.016445][ T9757] loop4: detected capacity change from 0 to 4096
[  199.056729][   T49] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  199.170302][ T9765] CIFS: VFS: Malformed UNC in devname
[  199.211655][ T5896] IPVS: starting estimator thread 0...
[  199.211855][   T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.223028][   T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.229415][   T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  199.247193][   T49] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  199.251052][   T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.270255][   T49] usb 6-1: config 0 descriptor??
[  199.309253][ T9770] IPVS: using max 83 ests per chain, 199200 per kthread
[  199.600147][ T9784] loop4: detected capacity change from 0 to 32768
[  199.614642][ T9784] JBD2: Ignoring recovery information on journal
[  199.643168][ T9784] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  199.677235][   T33] audit: type=1800 audit(455.551:202): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1376" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  199.710633][   T49] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  199.947153][   T49] usb 6-1: USB disconnect, device number 11
[  199.979349][ T9784] (syz.4.1376,9784,1):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -28
[  200.060172][ T7093] ocfs2: Unmounting device (7,4) on (node local)
[  200.506541][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1388'.
[  200.551947][   T49] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  200.706782][   T49] usb 5-1: Using ep0 maxpacket: 32
[  200.711233][   T49] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  200.715130][   T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.723092][   T49] usb 5-1: config 0 descriptor??
[  200.728208][   T49] gspca_main: nw80x-2.14.0 probing 055f:d001
[  200.876313][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  200.930143][   T49] gspca_nw80x: reg_w err -71
[  200.932166][   T49] nw80x 5-1:0.0: probe with driver nw80x failed with error -71
[  200.941895][   T49] usb 5-1: USB disconnect, device number 18
[  201.049705][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  201.054099][   T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  201.058636][   T10] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  201.062777][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  201.069658][   T10] usb 6-1: language id specifier not provided by device, defaulting to English
[  201.075044][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  201.079419][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.086027][   T10] usb 6-1: Product: syz
[  201.093171][   T10] usb 6-1: Manufacturer: ᨕ昉ﺴꖂ쯍넊꿊퐃ﯻ뵫ਖ਼汢鏎餗␫芯ﰤ齐ജၥ仵챹苵弨鞆찠꛷异ⵡ✩빏󔏪
[  201.098739][   T10] usb 6-1: SerialNumber: syz
[  201.335648][   T10] usb 6-1: 0:2 : does not exist
[  201.355829][   T10] usb 6-1: USB disconnect, device number 12
[  201.602351][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'.
[  201.605447][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'.
[  201.775572][ T9844] loop4: detected capacity change from 0 to 256
[  201.790335][ T9844] FAT-fs (loop4): Directory bread(block 64) failed
[  201.793031][ T9844] FAT-fs (loop4): Directory bread(block 65) failed
[  201.795266][ T9844] FAT-fs (loop4): Directory bread(block 66) failed
[  201.797719][ T9844] FAT-fs (loop4): Directory bread(block 67) failed
[  201.800603][ T9844] FAT-fs (loop4): Directory bread(block 68) failed
[  201.803058][ T9844] FAT-fs (loop4): Directory bread(block 69) failed
[  201.805658][ T9844] FAT-fs (loop4): Directory bread(block 70) failed
[  201.810105][ T9844] FAT-fs (loop4): Directory bread(block 71) failed
[  201.812924][ T9844] FAT-fs (loop4): Directory bread(block 72) failed
[  201.815358][ T9844] FAT-fs (loop4): Directory bread(block 73) failed
[  201.940568][ T9854] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1409'.
[  202.105216][ T9865] loop5: detected capacity change from 0 to 512
[  202.112664][ T9865] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  202.128622][ T9865] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #17: comm syz.5.1414: iget: bad i_size value: -6917529027641081756
[  202.133795][ T9865] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1414: couldn't read orphan inode 17 (err -117)
[  202.139658][ T9865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.158353][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.239268][ T9874] loop5: detected capacity change from 0 to 8
[  202.267689][ T9874] SQUASHFS error: Failed to read block 0x1ec: -5
[  202.270457][ T9874] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  202.499202][ T9878] loop5: detected capacity change from 0 to 32768
[  202.507140][ T9878] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  202.511590][ T9878] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.543822][ T9878] XFS (loop5): Ending clean mount
[  202.581948][ T7789] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.980820][ T9902] loop5: detected capacity change from 0 to 1024
[  202.984428][ T9902] EXT4-fs: Ignoring removed bh option
[  202.987369][ T9902] EXT4-fs: inline encryption not supported
[  202.997058][ T9902] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  203.010350][ T9902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  203.034237][ T9902] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1427: lblock 2 mapped to illegal pblock 2 (length 1)
[  203.042393][ T9902] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  203.046092][ T9902] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1427: lblock 0 mapped to illegal pblock 48 (length 1)
[  203.052516][ T9902] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  203.056473][ T9902] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1427: Failed to acquire dquot type 0
[  203.061604][ T9902] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  203.068982][ T9902] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1427: mark_inode_dirty error
[  203.074480][ T9902] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  203.079162][ T9902] EXT4-fs (loop5): 1 orphan inode deleted
[  203.082880][ T9902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.088067][ T5896] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  203.097627][ T8993] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  203.104033][ T8993] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  203.107980][ T8993] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u9:8: Failed to release dquot type 0
[  203.115874][ T9902] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  203.137815][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.250788][ T5896] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  203.254492][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.257951][ T5896] usb 5-1: Product: syz
[  203.259621][ T5896] usb 5-1: Manufacturer: syz
[  203.261207][ T5896] usb 5-1: SerialNumber: syz
[  203.269777][ T5896] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  203.290229][ T5896] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  203.456067][   T49] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  203.608757][   T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  203.613606][   T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  203.620919][   T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  203.628854][   T49] usb 6-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  203.632577][   T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.644831][   T49] usb 6-1: config 0 descriptor??
[  203.649401][ T9908] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  203.699783][ T5897] usb 5-1: USB disconnect, device number 19
[  204.068251][   T49] sigmamicro 0003:1C4F:0059.0011: unknown main item tag 0x0
[  204.078153][   T49] sigmamicro 0003:1C4F:0059.0011: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.5-1/input0
[  204.259729][ T5910] usb 6-1: USB disconnect, device number 13
[  204.346053][ T5896] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  204.348817][ T5896] ath9k_htc: Failed to initialize the device
[  204.377811][ T5897] usb 5-1: ath9k_htc: USB layer deinitialized
[  204.932778][ T9938] loop5: detected capacity change from 0 to 1024
[  204.964235][ T9938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.054664][ T9938] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1443: Allocating blocks 497-513 which overlap fs metadata
[  205.076505][ T9938] EXT4-fs (loop5): pa ffff88801ddf8570: logic 256, phys. 385, len 8
[  205.080096][ T9938] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  205.139526][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.899562][ T9969] loop4: detected capacity change from 0 to 32768
[  205.928152][ T9969] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1456 (9969)
[  206.020930][ T9969] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  206.031786][ T9969] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  206.434121][ T9969] BTRFS info (device loop4): rebuilding free space tree
[  206.452221][ T9969] BTRFS info (device loop4): disabling free space tree
[  206.458700][ T9969] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  206.464786][ T9969] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  206.491345][ T9969] BTRFS info (device loop4): enabling ssd optimizations
[  206.494258][ T9969] BTRFS info (device loop4): force clearing of disk cache
[  206.497836][ T9969] BTRFS info (device loop4): enabling auto defrag
[  206.502018][ T9969] BTRFS info (device loop4): doing ref verification
[  206.540712][   T33] audit: type=1800 audit(462.411:203): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1456" name="file1" dev="loop4" ino=258 res=0 errno=0
[  206.580558][ T7093] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  206.715073][T10003] loop4: detected capacity change from 0 to 512
[  206.744314][T10003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  206.822760][T10003] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  206.901385][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.948928][T10014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.952329][T10014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.961646][T10014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.965358][T10014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.016257][T10021] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1472'.
[  207.208496][T10032] input: syz0 as /devices/virtual/input/input18
[  207.229069][T10036] 9pnet: p9_errstr2errno: server reported unknown error t/event#
[  207.281666][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'.
[  207.684453][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1495'.
[  207.910051][T10076] loop5: detected capacity change from 0 to 32768
[  208.012904][T10095] tipc: Failed to remove unknown binding: 66,1,1/0:2426795681/2426795683
[  208.178010][   T55] Bluetooth: hci0: Malformed Event: 0x13
[  208.697642][   T33] audit: type=1800 audit(464.311:204): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1499" name="file1" dev="loop5" ino=4 res=0 errno=0
[  208.804545][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'.
[  208.862555][T10109] sctp: [Deprecated]: syz.4.1514 (pid 10109) Use of int in maxseg socket option.
[  208.862555][T10109] Use struct sctp_assoc_value instead
[  209.005736][T10115] bond0: option miimon: invalid value (18446744073709551613)
[  209.013626][T10115] bond0: option miimon: allowed values 0 - 2147483647
[  209.047496][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1519'.
[  209.084279][T10123] loop4: detected capacity change from 0 to 8
[  209.246079][ T5897] delete_channel: no stack
[  209.525612][T10141] orangefs: client-core tried to read wrong size
[  209.786294][ T5944] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  209.942473][ T5944] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30
[  209.955139][ T5944] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  209.968993][ T5944] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.973279][ T5944] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242
[  209.980695][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0
[  209.983372][ T5944] usb 6-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00
[  209.988668][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.994020][ T5944] usb 6-1: config 0 descriptor??
[  210.619031][ T5944] usb 6-1: USB disconnect, device number 14
[  210.860803][T10161] can0: slcan on ttyprintk.
[  210.985583][T10167] raw_sendmsg: syz.6.1540 forgot to set AF_INET. Fix it!
[  211.185476][T10182] tmpfs: Bad value for 'mpol'
[  211.225734][T10184] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1546'.
[  211.669739][T10160] can0 (unregistered): slcan off ttyprintk.
[  211.895489][T10214] loop4: detected capacity change from 0 to 32768
[  211.914905][T10214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1558 (10214)
[  211.954279][T10214] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.966028][T10214] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  212.017531][T10214] BTRFS info (device loop4): enabling ssd optimizations
[  212.020248][T10214] BTRFS info (device loop4): enabling free space tree
[  212.038073][T10214] BTRFS error: failed to open device for path k8/";W_#GdteRU':ryA*5ڤ)di$6yrfߋHcDH,	J{dDn with flags 0x1: -2
[  212.060866][ T7093] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.379526][T10258] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1566'.
[  212.382673][T10258] tipc: Invalid UDP bearer configuration
[  212.382698][T10258] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  212.909240][   T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  213.256683][   T10] usb 6-1: Using ep0 maxpacket: 32
[  213.264924][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  213.269999][   T10] usb 6-1: config 2 has an invalid interface number: 221 but max is 0
[  213.273280][   T10] usb 6-1: config 2 has no interface number 0
[  213.276985][   T10] usb 6-1: config 2 interface 221 has no altsetting 0
[  213.283848][   T10] usb 6-1: string descriptor 0 read error: -22
[  213.293623][   T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  213.304445][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.325287][   T10] usb 6-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  213.335396][   T10] usb 6-1: No valid video chain found.
[  213.534851][   T10] usb 6-1: USB disconnect, device number 15
[  213.711461][T10276] loop4: detected capacity change from 0 to 32768
[  213.725875][T10276] ERROR: (device loop4): diNewExt: no free extents
[  213.725875][T10276] 
[  213.742993][T10276] ERROR: (device loop4): remounting filesystem as read-only
[  213.753185][T10276] ialloc: diAlloc returned -5!
[  213.972324][T10296] netlink: 'syz.4.1583': attribute type 1 has an invalid length.
[  213.975331][T10296] netlink: 'syz.4.1583': attribute type 4 has an invalid length.
[  213.979498][T10296] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1583'.
[  214.013785][T10298] Bluetooth: MGMT ver 1.23
[  214.096448][T10302] loop5: detected capacity change from 0 to 736
[  214.893275][T10323] netlink: 'syz.6.1595': attribute type 142 has an invalid length.
[  214.896552][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1595'.
[  215.013675][   T33] audit: type=1326 audit(470.881:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.4.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa36d8ebe9 code=0x7fc00000
[  215.127625][T10335] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  215.198610][T10334] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1601'.
[  216.735474][T10385] loop5: detected capacity change from 0 to 128
[  216.818712][T10387] loop5: detected capacity change from 0 to 512
[  216.831074][T10387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.850324][T10387] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1622: corrupted inode contents
[  216.859724][T10387] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1622: mark_inode_dirty error
[  216.864353][T10387] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1622: corrupted inode contents
[  216.869440][T10387] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1622: mark_inode_dirty error
[  216.881041][T10387] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #18: comm syz.5.1622: directory missing '.'
[  216.906836][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.020109][T10396] loop5: detected capacity change from 0 to 1024
[  217.083206][T10398] netlink: 'syz.4.1626': attribute type 4 has an invalid length.
[  217.085866][T10398] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1626'.
[  217.087971][T10396] syz.5.1625: attempt to access beyond end of device
[  217.087971][T10396] loop5: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[  217.106968][T10396] buffer_io_error: 7019 callbacks suppressed
[  217.106979][T10396] Buffer I/O error on dev loop5, logical block 2889, lost async page write
[  217.232180][ T5875] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.364259][T10413] loop4: detected capacity change from 0 to 8192
[  217.396914][ T6143]  loop4: AHDI p2 p3 p4
[  217.404363][ T6143] loop4: p3 size 4294967042 extends beyond EOD, truncated
[  217.419585][ T6143] loop4: p4 size 16777216 extends beyond EOD, truncated
[  217.437675][T10413]  loop4: AHDI p2 p3 p4
[  217.466929][T10413] loop4: p3 size 4294967042 extends beyond EOD, truncated
[  217.471170][T10413] loop4: p4 size 16777216 extends beyond EOD, truncated
[  217.527873][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  217.531616][ T7685] udevd[7685]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  217.538472][ T7573] udevd[7573]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  217.563973][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  217.569984][ T7685] udevd[7685]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  217.578693][ T7573] udevd[7573]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  217.753354][T10447] loop5: detected capacity change from 0 to 16
[  217.759000][T10447] erofs (device loop5): mounted with root inode @ nid 36.
[  217.762998][T10447] erofs (device loop5): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[  217.766588][T10447] erofs (device loop5): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[  217.769796][T10447] erofs (device loop5): read error -95 @ 8200 of nid 36
[  217.830175][T10451] erofs (device loop5): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[  217.840463][T10451] erofs (device loop5): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[  217.860263][T10451] erofs (device loop5): read error -95 @ 8200 of nid 36
[  218.986220][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  219.147602][   T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  219.156196][   T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  219.159409][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  219.172860][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.196343][T10469] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  219.203087][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  219.405095][   T10] usb 5-1: USB disconnect, device number 20
[  219.461205][T10473] loop5: detected capacity change from 0 to 32768
[  219.678090][T10484] loop5: detected capacity change from 0 to 128
[  219.688636][T10484] EXT4-fs: Ignoring removed nomblk_io_submit option
[  219.695549][T10484] EXT4-fs: Ignoring removed nomblk_io_submit option
[  219.703933][T10484] EXT4-fs (loop5): Test dummy encryption mode enabled
[  219.714520][T10484] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  219.741180][ T7789] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.958877][T10493] loop5: detected capacity change from 0 to 32768
[  219.980391][T10493] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  220.015180][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1664'.
[  220.028099][   T33] audit: type=1800 audit(475.901:206): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1663" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=9555 res=0 errno=0
[  220.069107][ T7789] ocfs2: Unmounting device (7,5) on (node local)
[  220.175129][T10509] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.1666'.
[  220.582455][T10531] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  220.590330][T10531] block device autoloading is deprecated and will be removed.
[  220.815888][T10546] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1681'.
[  221.290832][T10572] loop5: detected capacity change from 0 to 512
[  221.334287][T10572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.490512][ T7789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.577859][T10578] ptrace attach of "/syz-executor exec"[7789] was attempted by ""[10578]
[  221.729582][T10580] loop5: detected capacity change from 0 to 32768
[  221.732955][T10580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1696 (10580)
[  221.742976][T10580] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.749669][T10580] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  221.840395][T10580] BTRFS info (device loop5): enabling ssd optimizations
[  221.843298][T10580] BTRFS info (device loop5): enabling free space tree
[  221.891800][ T7789] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  222.164633][T10611] netlink: 'syz.6.1703': attribute type 9 has an invalid length.
[  222.214520][T10613] loop5: detected capacity change from 0 to 16
[  222.226758][T10613] erofs (device loop5): bogus i_mode (6) @ nid 36
[  222.305840][T10615] overlayfs: failed to clone upperpath
[  222.463525][T10621] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1708'.
[  222.923413][T10621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.930378][T10621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.935122][T10621] bond0 (unregistering): Released all slaves
[  223.242201][T10625] netlink: 'syz.5.1709': attribute type 1 has an invalid length.
[  223.688134][ T5944] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  223.846007][ T5944] usb 6-1: Using ep0 maxpacket: 32
[  223.849527][ T5944] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  223.852281][ T5944] usb 6-1: config 0 has no interface number 0
[  223.859407][ T5944] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  223.864387][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.868222][ T5944] usb 6-1: Product: syz
[  223.870025][ T5944] usb 6-1: Manufacturer: syz
[  223.871968][ T5944] usb 6-1: SerialNumber: syz
[  223.881385][ T5944] usb 6-1: config 0 descriptor??
[  223.885751][ T5944] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  223.986165][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  224.094798][ T5944] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  224.108210][ T5944] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  224.136688][    T9] usb 5-1: Using ep0 maxpacket: 8
[  224.150357][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  224.157830][    T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  224.161909][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.175538][    T9] usb 5-1: config 0 descriptor??
[  224.498261][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  224.498526][ T5896] usb 6-1: USB disconnect, device number 16
[  224.509780][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  224.516791][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  224.521469][ T5896] quatech2 6-1:0.51: device disconnected
[  224.589240][    T9] corsair 0003:1B1C:1B09.0013: unbalanced collection at end of report description
[  224.599350][    T9] corsair 0003:1B1C:1B09.0013: parse failed
[  224.601423][    T9] corsair 0003:1B1C:1B09.0013: probe with driver corsair failed with error -22
[  224.787235][ T5896] usb 5-1: USB disconnect, device number 21
[  225.211336][T10676] netlink: 'syz.5.1733': attribute type 14 has an invalid length.
[  225.422103][T10686] loop4: detected capacity change from 0 to 1764
[  225.435465][T10686] iso9660: Corrupted directory entry in block 2 of inode 1920
[  226.589271][T10718] loop5: detected capacity change from 0 to 512
[  226.937732][T10724] loop4: detected capacity change from 0 to 128
[  226.996857][ T5944] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  227.080845][T10730] loop4: detected capacity change from 0 to 1024
[  227.114058][T10730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.128001][T10730] EXT4-fs warning (device loop4): ext4_rmdir:3187: inode #11: comm syz.4.1757: empty directory 'file1' has too many links (111)
[  227.151782][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.167795][ T5944] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config
[  227.171801][ T5944] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  227.177984][ T5944] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  227.181118][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.183846][ T5944] usb 6-1: Product: syz
[  227.185258][ T5944] usb 6-1: Manufacturer: syz
[  227.194991][ T5944] usb 6-1: SerialNumber: syz
[  227.443147][ T5944] usb 6-1: 0:2 : does not exist
[  227.452298][ T5944] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  227.492372][ T5944] usb 6-1: USB disconnect, device number 17
[  227.503738][T10742] netlink: 340 bytes leftover after parsing attributes in process `syz.6.1760'.
[  227.521386][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  228.040980][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1767'.
[  228.198655][T10762] loop5: detected capacity change from 0 to 4096
[  228.230390][T10762] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  228.242344][T10762] ntfs3(loop5): Failed to load $Extend (-22).
[  228.245005][T10762] ntfs3(loop5): Failed to initialize $Extend.
[  228.315135][   T33] audit: type=1326 audit(484.171:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.6.1772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  228.337538][   T33] audit: type=1326 audit(484.181:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.6.1772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  228.359778][   T33] audit: type=1326 audit(484.181:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.6.1772" exe="/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  228.405381][   T33] audit: type=1326 audit(484.181:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.6.1772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  228.419578][   T33] audit: type=1326 audit(484.181:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.6.1772" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35618ebe9 code=0x7ffc0000
[  228.515373][T10780] loop4: detected capacity change from 0 to 128
[  228.521393][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1779'.
[  228.525596][T10780] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  228.557501][T10780] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  228.643610][T10791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1782'.
[  228.656337][ T8996] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  229.214913][T10809] netlink: 'syz.5.1789': attribute type 29 has an invalid length.
[  229.223521][T10809] netlink: 'syz.5.1789': attribute type 29 has an invalid length.
[  229.622912][ T5910] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  229.782124][ T5910] usb 6-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  229.786764][ T5910] usb 6-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.796554][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0
[  229.800563][ T5910] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  229.803740][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.819478][ T5910] usb 6-1: config 0 descriptor??
[  230.560850][ T5910] sony 0003:054C:024B.0014: unbalanced delimiter at end of report description
[  230.568282][ T5910] sony 0003:054C:024B.0014: parse failed
[  230.570729][ T5910] sony 0003:054C:024B.0014: probe with driver sony failed with error -22
[  230.763470][ T5910] usb 6-1: USB disconnect, device number 18
[  231.173070][T10864] loop4: detected capacity change from 0 to 512
[  231.183303][T10862] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  231.183682][T10864] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1813: casefold flag without casefold feature
[  231.198738][T10864] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1813: couldn't read orphan inode 15 (err -117)
[  231.208602][T10864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.273586][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.352478][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'.
[  231.356375][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'.
[  231.706201][T10881] 9pnet_fd: Insufficient options for proto=fd
[  231.866853][   T49] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  232.029125][T10884] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1820'.
[  232.049194][   T49] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  232.053506][   T49] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  232.058221][   T49] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  232.061913][   T49] usb 5-1: config 220 has no interface number 2
[  232.064444][   T49] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  232.070058][   T49] usb 5-1: config 220 interface 0 has no altsetting 0
[  232.072777][   T49] usb 5-1: config 220 interface 76 has no altsetting 0
[  232.075579][   T49] usb 5-1: config 220 interface 1 has no altsetting 0
[  232.080790][   T49] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  232.084502][   T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.088025][   T49] usb 5-1: Product: syz
[  232.089786][   T49] usb 5-1: Manufacturer: syz
[  232.091552][   T49] usb 5-1: SerialNumber: syz
[  232.342820][   T49] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  232.345384][   T49] usb 5-1: No valid video chain found.
[  232.347949][   T49] usb 5-1: selecting invalid altsetting 0
[  232.355296][   T49] usb 5-1: selecting invalid altsetting 0
[  232.358126][   T49] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  232.372270][   T49] usb 5-1: USB disconnect, device number 22
[  232.382458][T10886] comedi comedi0: pcl711: I/O port conflict (0x3,16)
[  232.594928][T10896] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1826'.
[  232.811441][T10911] loop5: detected capacity change from 0 to 256
[  233.010756][T10923] loop4: detected capacity change from 0 to 2048
[  233.039659][T10923]  loop4: p3 < > p4 < >
[  233.041325][T10923] loop4: partition table partially beyond EOD, truncated
[  233.044721][T10929] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1842'.
[  233.061205][T10923] loop4: p3 start 4284289 is beyond EOD, truncated
[  233.122971][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  233.218713][T10939] loop4: detected capacity change from 0 to 4096
[  233.263054][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1850'.
[  233.636301][   T49] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  233.652299][T10978] loop4: detected capacity change from 0 to 736
[  233.685840][T10978] rock: directory entry would overflow storage
[  233.690068][T10978] rock: sig=0x00, size=4, remaining=3
[  233.744184][T10981] loop4: detected capacity change from 0 to 1024
[  233.796206][   T49] usb 6-1: Using ep0 maxpacket: 32
[  233.804609][   T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.909129][   T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.915057][   T49] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  233.936123][   T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.946820][   T49] usb 6-1: config 0 descriptor??
[  234.381860][   T49] koneplus 0003:1E7D:2D51.0015: unknown main item tag 0x0
[  234.384916][   T49] koneplus 0003:1E7D:2D51.0015: unknown main item tag 0x0
[  234.406254][   T49] koneplus 0003:1E7D:2D51.0015: unknown main item tag 0x0
[  234.410884][   T49] koneplus 0003:1E7D:2D51.0015: unknown main item tag 0x0
[  234.413793][   T49] koneplus 0003:1E7D:2D51.0015: unknown main item tag 0x0
[  234.429968][   T49] koneplus 0003:1E7D:2D51.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0
[  234.808757][    T9] usb 6-1: USB disconnect, device number 19
[  234.993898][T11007] loop4: detected capacity change from 0 to 4096
[  235.023554][T11007] EXT4-fs (loop4): Test dummy encryption mode enabled
[  235.065425][T11007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.118746][ T7093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.874179][T11025] loop5: detected capacity change from 0 to 32768
[  235.889882][T11025] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  235.911107][T11025] 
[  235.911993][T11025] ======================================================
[  235.914436][T11025] WARNING: possible circular locking dependency detected
[  235.917067][T11025] syzkaller #0 Not tainted
[  235.919131][T11025] ------------------------------------------------------
[  235.922474][T11025] syz.5.1887/11025 is trying to acquire lock:
[  235.924545][T11025] ffff88811c2ee0c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  235.927885][T11037] usb usb8: usbfs: process 11037 (syz.4.1891) did not claim interface 2 before use
[  235.929350][T11025] 
[  235.929350][T11025] but task is already holding lock:
[  235.929358][T11025] ffff88811c2ecf78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  235.929396][T11025] 
[  235.929396][T11025] which lock already depends on the new lock.
[  235.929396][T11025] 
[  235.942805][T11025] 
[  235.942805][T11025] the existing dependency chain (in reverse order) is:
[  235.946219][T11025] 
[  235.946219][T11025] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  235.949436][T11025]        lock_acquire+0x120/0x360
[  235.951503][T11025]        down_read+0x46/0x2e0
[  235.953445][T11025]        ocfs2_init_acl+0x2f9/0x720
[  235.955569][T11025]        ocfs2_mknod+0x1321/0x2050
[  235.957680][T11025]        ocfs2_create+0x1a5/0x440
[  235.959718][T11025]        path_openat+0x14f4/0x3830
[  235.961821][T11025]        do_filp_open+0x1fa/0x410
[  235.963491][T11025]        do_sys_openat2+0x121/0x1c0
[  235.965311][T11025]        __x64_sys_openat+0x138/0x170
[  235.967193][T11025]        do_syscall_64+0xfa/0x3b0
[  235.968960][T11025]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.971116][T11025] 
[  235.971116][T11025] -> #4 (jbd2_handle){++++}-{0:0}:
[  235.973467][T11025]        lock_acquire+0x120/0x360
[  235.975117][T11025]        start_this_handle+0x1fa7/0x21c0
[  235.977041][T11025]        jbd2__journal_start+0x2c1/0x5b0
[  235.978856][T11025]        jbd2_journal_start+0x2a/0x40
[  235.980590][T11025]        ocfs2_start_trans+0x376/0x6d0
[  235.982325][T11025]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  235.984277][T11025]        ocfs2_dismount_volume+0x201/0x8d0
[  235.986355][T11025]        generic_shutdown_super+0x135/0x2c0
[  235.988570][T11025]        kill_block_super+0x44/0x90
[  235.990356][T11025]        deactivate_locked_super+0xbc/0x130
[  235.992319][T11025]        cleanup_mnt+0x425/0x4c0
[  235.993962][T11025]        task_work_run+0x1d4/0x260
[  235.995650][T11025]        exit_to_user_mode_loop+0xec/0x110
[  235.997629][T11025]        do_syscall_64+0x2bd/0x3b0
[  235.999331][T11025]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.001444][T11025] 
[  236.001444][T11025] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  236.004685][T11025]        lock_acquire+0x120/0x360
[  236.006353][T11025]        down_read+0x46/0x2e0
[  236.007968][T11025]        ocfs2_start_trans+0x36a/0x6d0
[  236.010128][T11025]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  236.012192][T11025]        ocfs2_dismount_volume+0x201/0x8d0
[  236.013941][T11025]        generic_shutdown_super+0x135/0x2c0
[  236.015918][T11025]        kill_block_super+0x44/0x90
[  236.017666][T11025]        deactivate_locked_super+0xbc/0x130
[  236.019622][T11025]        cleanup_mnt+0x425/0x4c0
[  236.021271][T11025]        task_work_run+0x1d4/0x260
[  236.022976][T11025]        exit_to_user_mode_loop+0xec/0x110
[  236.025104][T11025]        do_syscall_64+0x2bd/0x3b0
[  236.027031][T11025]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.029192][T11025] 
[  236.029192][T11025] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  236.031731][T11025]        lock_acquire+0x120/0x360
[  236.033456][T11025]        ocfs2_start_trans+0x26b/0x6d0
[  236.035171][T11025]        ocfs2_mknod+0xe93/0x2050
[  236.036762][T11025]        ocfs2_create+0x1a5/0x440
[  236.038351][T11025]        path_openat+0x14f4/0x3830
[  236.040157][T11025]        do_filp_open+0x1fa/0x410
[  236.041831][T11025]        do_sys_openat2+0x121/0x1c0
[  236.043566][T11025]        __x64_sys_openat+0x138/0x170
[  236.045351][T11025]        do_syscall_64+0xfa/0x3b0
[  236.047157][T11025]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.049642][T11025] 
[  236.049642][T11025] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  236.053578][T11025]        lock_acquire+0x120/0x360
[  236.055462][T11025]        down_write+0x96/0x1f0
[  236.057037][T11025]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  236.059518][T11025]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  236.061992][T11025]        ocfs2_mknod+0xe32/0x2050
[  236.063778][T11025]        ocfs2_create+0x1a5/0x440
[  236.065483][T11025]        path_openat+0x14f4/0x3830
[  236.067173][T11025]        do_filp_open+0x1fa/0x410
[  236.068892][T11025]        do_sys_openat2+0x121/0x1c0
[  236.070717][T11025]        __x64_sys_openat+0x138/0x170
[  236.072543][T11025]        do_syscall_64+0xfa/0x3b0
[  236.074292][T11025]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.076450][T11025] 
[  236.076450][T11025] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  236.080137][T11025]        validate_chain+0xb9b/0x2140
[  236.081957][T11025]        __lock_acquire+0xab9/0xd20
[  236.083821][T11025]        lock_acquire+0x120/0x360
[  236.085469][T11025]        down_write+0x96/0x1f0
[  236.087213][T11025]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  236.089575][T11025]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  236.092003][T11025]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  236.094085][T11025]        ocfs2_xattr_set+0xb70/0x11f0
[  236.095962][T11025]        ocfs2_set_acl+0x701/0x7b0
[  236.097865][T11025]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  236.099798][T11025]        vfs_set_acl+0x887/0xb00
[  236.101527][T11025]        do_set_acl+0xf6/0x190
[  236.103187][T11025]        filename_setxattr+0x2e0/0x600
[  236.105168][T11025]        path_setxattrat+0x364/0x3a0
[  236.107199][T11025]        __x64_sys_setxattr+0xbc/0xe0
[  236.109160][T11025]        do_syscall_64+0xfa/0x3b0
[  236.110972][T11025]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.113576][T11025] 
[  236.113576][T11025] other info that might help us debug this:
[  236.113576][T11025] 
[  236.117568][T11025] Chain exists of:
[  236.117568][T11025]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  236.117568][T11025] 
[  236.122954][T11025]  Possible unsafe locking scenario:
[  236.122954][T11025] 
[  236.125742][T11025]        CPU0                    CPU1
[  236.127821][T11025]        ----                    ----
[  236.129830][T11025]   lock(&oi->ip_xattr_sem);
[  236.131373][T11025]                                lock(jbd2_handle);
[  236.133720][T11025]                                lock(&oi->ip_xattr_sem);
[  236.136475][T11025]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  236.139578][T11025] 
[  236.139578][T11025]  *** DEADLOCK ***
[  236.139578][T11025] 
[  236.142876][T11025] 3 locks held by syz.5.1887/11025:
[  236.144989][T11025]  #0: ffff8880344ba428 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  236.148554][T11025]  #1: ffff88811c2ed240 (&type->i_mutex_dir_key#20){+.+.}-{4:4}, at: vfs_set_acl+0x3cd/0xb00
[  236.152649][T11025]  #2: ffff88811c2ecf78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  236.156545][T11025] 
[  236.156545][T11025] stack backtrace:
[  236.158954][T11025] CPU: 0 UID: 0 PID: 11025 Comm: syz.5.1887 Not tainted syzkaller #0 PREEMPT(full) 
[  236.158969][T11025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.158977][T11025] Call Trace:
[  236.158982][T11025]  <TASK>
[  236.158987][T11025]  dump_stack_lvl+0x189/0x250
[  236.159004][T11025]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.159017][T11025]  ? __pfx__printk+0x10/0x10
[  236.159033][T11025]  ? print_lock_name+0xde/0x100
[  236.159047][T11025]  print_circular_bug+0x2ee/0x310
[  236.159062][T11025]  check_noncircular+0x134/0x160
[  236.159074][T11025]  validate_chain+0xb9b/0x2140
[  236.159085][T11025]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  236.159103][T11025]  ? look_up_lock_class+0x74/0x170
[  236.159117][T11025]  ? register_lock_class+0x51/0x320
[  236.159133][T11025]  __lock_acquire+0xab9/0xd20
[  236.159148][T11025]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  236.159161][T11025]  lock_acquire+0x120/0x360
[  236.159175][T11025]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  236.159189][T11025]  down_write+0x96/0x1f0
[  236.159201][T11025]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  236.159213][T11025]  ? __pfx_down_write+0x10/0x10
[  236.159224][T11025]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  236.159243][T11025]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  236.159256][T11025]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.159272][T11025]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  236.159284][T11025]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  236.159299][T11025]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  236.159311][T11025]  ? stack_depot_save_flags+0x41b/0x860
[  236.159327][T11025]  ? kasan_save_track+0x4f/0x80
[  236.159339][T11025]  ? kasan_save_track+0x3e/0x80
[  236.159349][T11025]  ? __kasan_kmalloc+0x93/0xb0
[  236.159363][T11025]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  236.159375][T11025]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  236.159387][T11025]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  236.159406][T11025]  ? ocfs2_xattr_set+0xb70/0x11f0
[  236.159418][T11025]  ? ocfs2_set_acl+0x701/0x7b0
[  236.159429][T11025]  ? ocfs2_iop_set_acl+0x1aa/0x2a0
[  236.159438][T11025]  ? vfs_set_acl+0x887/0xb00
[  236.159450][T11025]  ? do_set_acl+0xf6/0x190
[  236.159462][T11025]  ? filename_setxattr+0x2e0/0x600
[  236.159477][T11025]  ? path_setxattrat+0x364/0x3a0
[  236.159490][T11025]  ? __x64_sys_setxattr+0xbc/0xe0
[  236.159499][T11025]  ? do_syscall_64+0xfa/0x3b0
[  236.159508][T11025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.159526][T11025]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  236.159539][T11025]  ? __kasan_kmalloc+0x93/0xb0
[  236.159553][T11025]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  236.159565][T11025]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  236.159577][T11025]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  236.159590][T11025]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  236.159631][T11025]  ? __lock_acquire+0xab9/0xd20
[  236.159648][T11025]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  236.159665][T11025]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  236.159681][T11025]  ? ocfs2_xattr_set+0xb36/0x11f0
[  236.159695][T11025]  ? up_write+0x1c4/0x420
[  236.159705][T11025]  ? ocfs2_xattr_set+0x334/0x11f0
[  236.159719][T11025]  ocfs2_xattr_set+0xb70/0x11f0
[  236.159737][T11025]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  236.159749][T11025]  ? vfs_set_acl+0x887/0xb00
[  236.159761][T11025]  ? filename_setxattr+0x2e0/0x600
[  236.159775][T11025]  ? path_setxattrat+0x364/0x3a0
[  236.159784][T11025]  ? __x64_sys_setxattr+0xbc/0xe0
[  236.159792][T11025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.159813][T11025]  ? rcu_is_watching+0x15/0xb0
[  236.159823][T11025]  ? trace_kmalloc+0x1f/0xd0
[  236.159835][T11025]  ? __kmalloc_noprof+0x29b/0x4f0
[  236.159847][T11025]  ? ocfs2_set_acl+0x11c/0x7b0
[  236.159858][T11025]  ocfs2_set_acl+0x701/0x7b0
[  236.159873][T11025]  ocfs2_iop_set_acl+0x1aa/0x2a0
[  236.159884][T11025]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  236.159897][T11025]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  236.159910][T11025]  ? __pfx_down_write+0x10/0x10
[  236.159922][T11025]  ? evm_revalidate_status+0x4f/0xb0
[  236.159934][T11025]  ? posix_acl_valid+0x352/0x3e0
[  236.159945][T11025]  vfs_set_acl+0x887/0xb00
[  236.159960][T11025]  do_set_acl+0xf6/0x190
[  236.159974][T11025]  filename_setxattr+0x2e0/0x600
[  236.159991][T11025]  ? __pfx_filename_setxattr+0x10/0x10
[  236.160006][T11025]  ? getname_flags+0x1e5/0x540
[  236.160018][T11025]  path_setxattrat+0x364/0x3a0
[  236.160030][T11025]  ? __pfx_path_setxattrat+0x10/0x10
[  236.160042][T11025]  ? do_futex+0x333/0x420
[  236.160059][T11025]  ? rcu_is_watching+0x15/0xb0
[  236.160070][T11025]  __x64_sys_setxattr+0xbc/0xe0
[  236.160081][T11025]  do_syscall_64+0xfa/0x3b0
[  236.160090][T11025]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.160103][T11025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.160115][T11025]  ? exc_page_fault+0x9f/0xf0
[  236.160130][T11025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.160140][T11025] RIP: 0033:0x7f7158b8ebe9
[  236.160151][T11025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.160160][T11025] RSP: 002b:00007f7159acb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  236.160173][T11025] RAX: ffffffffffffffda RBX: 00007f7158dc5fa0 RCX: 00007f7158b8ebe9
[  236.160181][T11025] RDX: 0000200000000700 RSI: 0000200000002a40 RDI: 00002000000000c0
[  236.160189][T11025] RBP: 00007f7158c11e19 R08: 0000000000000000 R09: 0000000000000000
[  236.160195][T11025] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[  236.160203][T11025] R13: 00007f7158dc6038 R14: 00007f7158dc5fa0 R15: 00007ffc2495bf48
[  236.160215][T11025]  </TASK>
[  236.364451][    C0] vkms_vblank_simulate: vblank timer overrun
[  236.410985][ T7789] ocfs2: Unmounting device (7,5) on (node local)
[  242.186205][ T5849] Bluetooth: hci2: command 0x0406 tx timeout

VM DIAGNOSIS:
11:34:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013fa RDI=00000000000013fb RBP=00000000000003f8 RSP=ffffc9000aeae3d0
R8 =ffff888021298237 R9 =1ffff11004253046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8c3 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7159acb6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002a40 CR3=000000010831e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffff00ff00000000 0000000000000000
XMM02=ffffff0000000000 ffffffffffffff00 XMM03=00000000000000ff ffffffffff000000
XMM04=0000000000000000 0000000000000000 XMM05=0000343a37622f2a 00006c61037a4973
XMM06=ffff000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffff000000000000 ffff000000000000 XMM09=0000343a37622f72 656c6c616b7a7973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900075c0000 RBX=1ffff110045f025a RCX=ffff888107e18000 RDX=0000000000010000
RSI=ffff888022f80000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0dc0
R8 =ffffffff8fa39037 R9 =1ffffffff1f47206 R10=dffffc0000000000 R11=ffffffff8699e0a0
R12=dffffc0000000000 R13=ffff888022f812d0 R14=ffff888022f80000 R15=dffffc0000000000
RIP=ffffffff8699e0e8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556f1cc500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556f1e75c8 CR3=000000010d868000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=2f2330302f627375 2f7375622f766564
XMM02=0001ec1000048004 060075c800233030 XMM03=8082080008030408 0000030180cc8210
XMM04=0100041080c2d488 0800010000000806 XMM05=060129c810808080 8208000803040800
XMM06=00030180cc821000 01ec100004800406 XMM07=0075c8002330302f 2330302f6273752f
XMM08=0a0d8c0303b80200 0d98030602000d96 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
