last executing test programs:

7m23.655209067s ago: executing program 32 (id=846):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280))

7m15.832643246s ago: executing program 33 (id=903):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000300)='./file1\x00', 0x1c886, &(0x7f0000005400)=ANY=[], 0x83, 0x614e, &(0x7f0000006ac0)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x103)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2)

7m12.02677488s ago: executing program 3 (id=932):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

7m11.935420139s ago: executing program 3 (id=933):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x0, 0x3ff, 0x0, 0x2, 0x7, 0x7, 0xdf, 0xcd6, 0x10000, 0x6, 0x9, 0xfffff86c, 0x6, 0x4, 0xa, 0x13, {0x2}, 0x18}})

7m11.847312215s ago: executing program 3 (id=934):
gettid()
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

7m11.746924446s ago: executing program 3 (id=935):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20)
umount2(&(0x7f0000000180)='./file0\x00', 0xa)

7m11.666682932s ago: executing program 3 (id=936):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)

7m11.415040238s ago: executing program 3 (id=941):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x20, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0)

7m11.220565842s ago: executing program 34 (id=941):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x20, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0)

6m14.489450298s ago: executing program 2 (id=1637):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40408c1)
socket$inet6(0xa, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

6m13.568857722s ago: executing program 2 (id=1650):
r0 = msgget$private(0x0, 0x193)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0xfb56651eff273128, 0x1000)
msgctl$IPC_STAT(r0, 0x2, &(0x7f00000001c0)=""/80)

6m13.568194285s ago: executing program 2 (id=1652):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80086c41, 0x0)

6m13.470237152s ago: executing program 2 (id=1654):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000040, &(0x7f0000000180)={[{@errors_remount}, {@nodioread_nolock}, {@minixdf}, {@barrier}, {@auto_da_alloc}, {@nodelalloc}]}, 0x81, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)

6m13.132713405s ago: executing program 2 (id=1656):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40408c1)
socket$inet6(0xa, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

6m12.64752869s ago: executing program 2 (id=1659):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r1 = epoll_create1(0x80000)
write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"})
r2 = syz_open_pts(r0, 0x40)
r3 = dup3(r2, r0, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x5, 0x7ff, 0x213c, 0x7fffffff, 0x6, "ba5d02d80d23f543af6ff1c21cb901de869d6b"})

6m12.433564579s ago: executing program 35 (id=1659):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r1 = epoll_create1(0x80000)
write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"})
r2 = syz_open_pts(r0, 0x40)
r3 = dup3(r2, r0, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x5, 0x7ff, 0x213c, 0x7fffffff, 0x6, "ba5d02d80d23f543af6ff1c21cb901de869d6b"})

5m7.230701654s ago: executing program 6 (id=2409):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000240)=0x8001, 0x4)

5m7.230541685s ago: executing program 6 (id=2410):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5m7.163451115s ago: executing program 6 (id=2411):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m7.16321849s ago: executing program 6 (id=2412):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000022c0)=ANY=[], 0x2, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

5m7.100964378s ago: executing program 6 (id=2413):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5m6.79345273s ago: executing program 6 (id=2415):
r0 = userfaultfd(0x80001)
open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})

5m6.727589381s ago: executing program 36 (id=2415):
r0 = userfaultfd(0x80001)
open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})

4m0.548473435s ago: executing program 4 (id=3156):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x90000000000002, 0x0)

4m0.45635805s ago: executing program 4 (id=3158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x0, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x26}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000000010161100000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0000001000370403000000030000", @ANYRES32, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

4m0.397323953s ago: executing program 4 (id=3160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206030000000000000000000700000014000780080008000000001008000640000000060500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004098)

4m0.257839715s ago: executing program 4 (id=3161):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x8a0741, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x4805, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

4m0.254074283s ago: executing program 4 (id=3162):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}, 0x1, 0x0, 0x0, 0x90c49c71b979d2da}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x401, 0x4, 0x3, {0x0, 0x0, 0x0, r1, 0x42035, 0x2ed85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x721b7}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20040850)

4m0.017960982s ago: executing program 4 (id=3168):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x90000000000002, 0x0)

3m59.896292322s ago: executing program 37 (id=3168):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x90000000000002, 0x0)

3m46.709504709s ago: executing program 7 (id=3261):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000480))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x4004662b, 0x0)

3m46.68172112s ago: executing program 7 (id=3262):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x35)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timerfd_create(0x0, 0x0)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
syz_ublk_setup_io_uring(0x2c73, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

3m46.545417272s ago: executing program 7 (id=3264):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))

3m46.475597607s ago: executing program 7 (id=3265):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x8a0741, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x4805, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

3m46.407891932s ago: executing program 7 (id=3266):
setuid(0xee01)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
wait4(0x0, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
tkill(r0, 0x13)

3m46.137942383s ago: executing program 7 (id=3268):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000480))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x4004662b, 0x0)

3m46.084111903s ago: executing program 38 (id=3268):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f0000000480))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x4004662b, 0x0)

3m44.414419789s ago: executing program 9 (id=3269):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0)

3m43.198721834s ago: executing program 9 (id=3279):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x8a0741, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInllM1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmJuaDAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX8znd/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHG9+X3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//OwzmfQ==")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x4805, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

3m43.108217758s ago: executing program 9 (id=3280):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24)
getdents64(r0, 0x0, 0x0)

3m42.650808452s ago: executing program 8 (id=3281):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7)
fchown(r0, 0x0, 0xee01)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
fchown(r0, 0xffffffffffffffff, 0xee01)

3m42.419540573s ago: executing program 8 (id=3283):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x6}}}, 0x84)

3m42.139027251s ago: executing program 8 (id=3285):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\a\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m41.608324305s ago: executing program 8 (id=3286):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x8a0741, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x4805, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

3m41.607936886s ago: executing program 8 (id=3287):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0)

3m41.527018948s ago: executing program 9 (id=3288):
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r1, &(0x7f00000003c0)='file0', 0x5)
read$FUSE(r1, &(0x7f0000000ec0)={0x2020}, 0x2020)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0x10, 0x3, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00f0ffffffffffff33001a800600000002"], 0x54}}, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x7fffffffffffffff)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700))
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0504"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084)

3m41.450262196s ago: executing program 39 (id=3288):
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r1, &(0x7f00000003c0)='file0', 0x5)
read$FUSE(r1, &(0x7f0000000ec0)={0x2020}, 0x2020)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0x10, 0x3, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00f0ffffffffffff33001a800600000002"], 0x54}}, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x7fffffffffffffff)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700))
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0504"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084)

3m41.31380637s ago: executing program 8 (id=3290):
r0 = timerfd_create(0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3})

3m41.172653371s ago: executing program 40 (id=3290):
r0 = timerfd_create(0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3})

5.969078434s ago: executing program 0 (id=5697):
rt_tgsigqueueinfo(0x0, 0x0, 0x41, &(0x7f0000000680)={0xf, 0x5, 0x2024})

5.90179299s ago: executing program 0 (id=5698):
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet_sctp(0x2, 0x5, 0x84)
landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x0)
r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0, &(0x7f00000004c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2002}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x20, 0x0, <r5=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240))
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x5, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f0000000200)=@new_dev={0x1, 0xeec}}}, 0x0)

5.820261911s ago: executing program 0 (id=5700):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '&\''}, 0x17, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

5.729752215s ago: executing program 0 (id=5702):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f42000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="b9c615adb435cca0e14c99165991425bf6869feb5bc91d16faaa1e553b9ba9b8885e3132b577ed920350b853789a3c023c2b935ea8b2b9b98d4523acf27f4e45df6667b26b934bf4a2e10acf78417923dcef99d0ddb6becfb3766973d20a95ee7e83108308969fca595741c7f50e9d35d0462bc65c295881993cbc4dfd962af204ba800dd23f3721fd98b3f6121083f68f408363a4a8620d535c1b29fbbe546f4a2b0b7681251f3ecc7b782f3df90e2942f9e737bb561ddd15b4b6b5ece9448a616a5221828a7ea71dfaaa7cf64f26b41375972d28cd3db598fa5a5625b6b00f13f7d6c194f39cc639e8a5b0ab06d35935e856555504eb25395adec288f6ff8e99de0119f863a5dbf4e3b18cf049d3b70379a3131cd90f25bd5e2f1c3b83e72b8cc88226def21b7824f92cddbf8f4271315ab0ba1dcab80dc1068d3491baacbbc651ba06cfd8bf3cfecce1c0b25124e28f839f25c7d4e2ad533f8fb14c514de63a86e4f06e9799ecaf00f7ff665a2fed73e567536d1d6b1e929a51d3d682559d4dbc174d9d389e53866249e58ff31a1832f453d299e7a3c4e4b673b546f2f0b670183e77f56a17f07c279bae471ce38124d34b6cb40dd5ac278f173c1296d07653d60ed4c1b8ccf2f3d7ff820bacfa26e4086a7bb79e5a72dbed2e8fff1340a9b158b0da2541074be22c160213fea049286cd8da7fb115968c622063040f9b2fbebbd3bbef6eddb51a1c7a082cc76fc7a8348c01b71d87631363e56cba171a1b501af0e02bcf4c1aaebde108a68de36ed5bbfd8037776f1b265716ace9faf8dfc59235cadfecf04f7fb81d03f112cab7c0ff3075d58ffa492652dd110adca2dda9a430535b9474c4faed55e8428fac436dd9723fb98cae9396cd56339b1012b84ba5181dcb5baf6e6f4aeeca6d138592c8e11abf0057f22c99aa0f3c64dd39f97e99a7be65e4dc45a5ef85ecf7c015cda60ae91b2eb439cb67e69b6eb9dd0b61043557530353d72e0468560d4bafcca1bd7f9c6afe1a3a662fb025fc19369ffee064153cbbeec0570b8fe3409f8309cfe934bc5583874e5ba8fd5612c1686dea7433e35aff9ff0e21204915e5c1239de29a5f38f110c4bf26ad1d167f17152d032fa550e8b36c4a45ebddfdbbce0cc2d90e84818ad6884e515091407be569cf665ab7d9274d33ea803cc08c1b3bc542dc81ce88acfcb1229aa5e7ba6f9f1a16495c11829d97b6bef2cd8decd5add93a5574cb84d2c6bb932222909916b2aba380cef005032d404d28cc3ab15c2de814412fc5f35e783687174fc7f80851ace4ce383e8e998bf94f0f87a6bc18d89c0c97c1ebe6e9247922f8535a0d23d44a64f538afa58b3c7a1e8cb5ee501c8e9cb7f476c89c4716f726ac9563c2c8fa14c1a5dd4cc3aa39c6dc1c87995b4f0334fd1f33437af245eb2a40d7e44293390397ae728acb1bf9a77cb8344ac9e2fa5e992bdbfa09767d44c17712941a4f52d888cb4377ab447deff3fca6953dd13eb9737d99d760cade6a9a0918d4cdfeffc8a7d8641c26d5ab5b367122b0b27055f9fc5633e85fc438969ca0a242f0cd14eec12e99bd7d7f8ad802c452566a86d69b8499822c3d04661de7e52124499e574f9e4c0482de31c798568f00432af1e4f988ff4097037c8a1f02a2aa36f9410bbbd47d647c63f22d7d3e72a92ff70934fd18e4b14f9be799308ba42d58c759e2f66696ead711902070c8d1dda1de261e9881429c5c9b4e4625b37b621928112dba116245f8a541f20dde2b4b820a93f153315fc7894cd9195c9076bd8b5fa922a2cce6a9af29c9401a45893936a3ce9485ddf84d043da66f966deb11fb2657b3a06eec71413a4eb3f035080c7368c53c1ce460b51a179ce81442fefef656d13b3ea789befda32fb6d3eb42f75cdeb62f9cc73b2429745f4a8105c64683ecd90734913f94699859c346c7bce9c828b1e0a2d15b8dc2ae8e4449febfd168c5719c039eb44ed314e060b063d3b32ee017ab1a28acc0861da4ba15e9a71040bf106bb45fe3b719ce40a0649f4f73265235164e88563bed2960a35007e46a539f96234b36750643dd239e482359221a3e75332d5beb627fa9d84bc3a2eb7266c890d1b2295042916fb89e935e8fa6237555f931fb312849571d8889152de3338a5c30e611698e4612c8c2586c182d799428352f3a9ec290985e427312a8d3365a8819097b1697f29f7a207e1323d96207a4e46ba4e5b50d984135da9cca6bcf4c62ea0dc2c1ad88c45163c420da885a456a06384deacd39eff91ae124c33749f007c9c73b39b5ef456e06c7394a010066d72790606d39add005ae84bdda4104077b8a797e24d329071c6e4836a5451f4a043b1f71388bbfade35b0ac98ca8711ddfe042f28cb8f76bb8fff0870c67c2c1150a580a93cc16edf6e73d15319263e36723e76d2203a96cb438b6246a3ac4da6621a7e4c89133584341862d547d7bb885c4c169507e30a16170a242a32ead68bd9a5ab169f7460df9c7a135f8b6af647101cdaf6fbd9c3b849ab70bce5dea4cbf5959dad2a91a2dbc095dfc8960e4c3872eabb62565d420c8df1b44e05ab16c69109a4c07733340d59fd3f9853d0183355f05ddeaee5a4f9a5f03f5d84c76634db61b6d9a4aea51ddbdf43aee55e7f3780cd31ee799f6f33003606a5df9db08849da7bf884df395b50474b24b3527682a87968cd1be63ec8405d38cba5db9c943987eda334efac5ff30b137259babe08532e2a930262edf64c7364dc0d987374d6ca78e16a63d56a63a05b6cd9044abc8599b97aefd6460b13dbef9ff09bb15d419f542eae4a237b0fe376605d300467679c06c33aba623c903a559d0836d8353afed6e39e68be56b775a4952e3edbdc461ea3e6883b596ae6e66e0a92f18d48abf9a23eb5ce70ceed4a2ab6611ed70600a9fced116864dcbf43cb72ea3af69f6a47a9728950fbc7c8c71f6c75713423e2b39ea8ea8e2ebdf68fe639fa8b2577c675a4706343577c8237431e91bd6c2a423d774ebd06db324361a0c6857fa0038974761d178224545a326093d945453119e18be577add7dc62317989bbd4ccc5c962c7c31ef56b5126e92adf8899a1cb3416b4087cc034c29b3518bcf8fe105f6bd70cd766a0617ea45ebf9750ac99ef104a7e14405fbab6d7d735fb7ddf72bc368ba08c14ccd6a1f35fb894b030136a05d882a2613fbcea5f934dcab251d047185eaf8e7e349998ec3cd220251a13d63a6926a27314234e55bfe66b125b502c82c7c8e0a7f71ac8deb73a8731d127ff8722cbc2794b99b4594f90cd62afc53a217ff5860146ec98f422191349a5c252ec81ddb055936712d2edf152564cfc0dc98dca3d1d4a6dca380aee72a4f1d33594a16c9f4a27fca028f2f328fc358962bfdfeaa2e060e19cc8232937d5d2b713ee45d6cd7b5a8fb1450f81653eef0cd73bbda10318abbb30daa1cacd59d30722b5264175a8c3ef10426647afa6eecd7d2cebef58b721de10a1dfe4fe1a7735912c9dc68576d5d462b4aa039f350135e2ca8c4203f379ba0afd22fbe84df3611a359e58bc73529517ff2c2b5d6f4cc44df1f37bb6910d9eaff57306a785715a237543f1b2f16b2ae50b5018e0b8988feaa1b24a9106497f87eeb12cbf705c17d5c53b41b7b6ed022ea3ce572a23e22f689fdc517a0d9cc6a997cfb0eefd67162cd727422f4164837dd349c0214922dbfc50c3657b1913ea1f88778320913229432c6c73527876b553b0a6158063323a7f2f36e0216ebaf5e9ea52a85447d43c8a0cbccdfb0b453ca1df93951471cb72225b97b75f1e77225779657bf6d77313ef8bda668c914769b1c0c0dbc5587e4ace985996a4b9ff4071488684d96d131810baa439ad5f9254217142a5697dbb7abf05a3bbde089b2a2e94153edce47b334ec35572bab1cb551c3c76acb7bc1ab82a7cfc6177b2dea4bb012a0cb3f71117f963a5fcf777c6d03ae50e2ffea596d0c5fb821a585352eace44cae8698c51889f341fc68bf0c0ff565f23aca99fe2194e6066c756848d8ff68d5b62075a374c3441217eb2b9ca87263de59a6240ceae2f8a86b6c064dafc6fb9a669e53c5cf815657766d9903d613fdf6fe2957be15eab0af44c1a4a933f940bea2e46518b31c2a1faf9596d086e4f397b200b040c0e5d090142cf42f7de30c3f8a6deb9331d5ea338470df38689f4456ab8d243d381dc7c551784d6ff11a1bcae327fb72cb4de6f04f9e0cbb5a069633baf800ff676d8efa4471a0d412f1d449b797a3c35cf6904db713639974d6f3d157b7dccf1526e0c65598b656cfb30be0643058ac33d6e51bd720a3aa1efe72148d9b2a2c58e44e453feb31956d67119ca0d4a75db27fd62c207902d27b59f7947691d6ac234522c7722ba04aacafd795a0cfa9d01fc4eecb9233ba819a48e22b9b9d2541f843e28bcd80fc058797d99438d20d39af224727c38a72c8ec008c0d286227dcb4799c8b0096c220fc450f10b2e52f293b624e64cac03084cc2e2626215522980f4d19ef37406f534b1061fe9691e721a38e6854c318433c574b17a841af00195306e2209b46021dda5126cc88a49046c17ae48f0a890fa8c53c248d12f96b2f2abe3155026679bc19f8abb0c90f6554b818294bca0525f49e20eb0daafea45ae572a00bc3a8fae5cefc6d5b90c52f0dfe0de4873f1ebd2cf1ebbf09acc9c83d491d5c7e8612c0a7a12376da52246c6bbd548e81e005e466e7848b4bf348b06f09a2da11ea1102c585549b4b7244e999e10f8a89f31d3855ac706742612c815552c784b4e30d51a4dd5a5b92e6cb1e36c19e8e424b450d590925f8bc94133b7a45feea68cd48bfa165d04d2a83c1374066a7cb98f3bf92c226624749eb5ce340be1178baea230909842503ec5696f8976b535f31ca52ed17c5befecb94ba9ec214ac36c3b0c955f30352e57e469564df9ab96e688e2449e821d84814e5d062a631721a3950bf2243a205ead77188121e4b44ddd0ea9946f0a10d805dc18940263", 0xdea}], 0x1}}], 0x2, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xc80, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)

4.812229551s ago: executing program 0 (id=5712):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)

4.811842988s ago: executing program 0 (id=5713):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f00000003c0)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0})

1.411706179s ago: executing program 1 (id=5727):
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)

1.339460261s ago: executing program 1 (id=5728):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)

1.339170129s ago: executing program 5 (id=5729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000202c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001"], 0x154}}, 0x0)

1.248900404s ago: executing program 5 (id=5730):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000340)=0xc291)

1.248372778s ago: executing program 5 (id=5731):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0xc0000000, 0x250, "dbf80da99065d4ef1c1700e3b3527e0bd28f71c360e1cd952f614cffbec517e7", 0x2, 0xffff, 0x7, 0x5, 0x5bdb, 0x2, 0x6, 0x5, [0x6, 0x6, 0x6, 0x1]})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x17b)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write(r5, &(0x7f0000000400)='p:lygroup/myevent ./dummy:0x2', 0x1d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010", @ANYRES16=r3, @ANYBLOB="95e81c56b0c66eed25bebda6bb7d6f0579e9be7fc1d3415e372e90873f8c0ec583088faf27205301bcc953f7877985f275f5696efe769853d32963ab68f463", @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ea73d19a7409f9533827c03fb325056e40"])
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/29)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000004c0)={0x4, 0xa5, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2e94cc07391db9d435442c7af91903d64b91294b7"})

304.738314ms ago: executing program 1 (id=5732):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4f23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
listen(r2, 0xb)
listen(r1, 0x50)

274.678819ms ago: executing program 1 (id=5733):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0)

251.439248ms ago: executing program 5 (id=5734):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/250, 0xfa)

86.42765ms ago: executing program 5 (id=5735):
socket$kcm(0x28, 0x0, 0x28)

86.18807ms ago: executing program 1 (id=5736):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

240.601µs ago: executing program 5 (id=5737):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000340)=0xc291)

0s ago: executing program 1 (id=5738):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff)
rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00')

kernel console output (not intermixed with test programs):

otify: 1 callbacks suppressed
[  475.443378][T18140] loop5: detected capacity change from 0 to 2048
[  475.449913][T18140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  475.938756][T18165] FAULT_INJECTION: forcing a failure.
[  475.938756][T18165] name fail_futex, interval 1, probability 0, space 0, times 0
[  475.938807][T18165] CPU: 0 UID: 0 PID: 18165 Comm: syz.0.4708 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  475.938835][T18165] Tainted: [L]=SOFTLOCKUP
[  475.938839][T18165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  475.938845][T18165] Call Trace:
[  475.938849][T18165]  <TASK>
[  475.938853][T18165]  dump_stack_lvl+0xe8/0x150
[  475.938920][T18165]  should_fail_ex+0x410/0x560
[  475.938965][T18165]  futex_lock_pi_atomic+0xf5/0xae0
[  475.938982][T18165]  futex_lock_pi+0x30a/0xac0
[  475.938998][T18165]  ? __pfx_futex_lock_pi+0x10/0x10
[  475.939020][T18165]  ? __pfx_futex_wake_mark+0x10/0x10
[  475.939039][T18165]  do_futex+0x3b0/0x4e0
[  475.939052][T18165]  ? __pfx_do_futex+0x10/0x10
[  475.939062][T18165]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  475.939104][T18165]  __se_sys_futex+0x3a8/0x450
[  475.939116][T18165]  ? ksys_write+0x242/0x270
[  475.939128][T18165]  ? __pfx___se_sys_futex+0x10/0x10
[  475.939139][T18165]  ? rcu_is_watching+0x16/0xb0
[  475.939154][T18165]  ? __x64_sys_futex+0x21/0xf0
[  475.939164][T18165]  do_syscall_64+0x166/0x520
[  475.939175][T18165]  ? trace_irq_disable+0x3b/0x140
[  475.939217][T18165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.939229][T18165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.939238][T18165] RIP: 0033:0x7f48dab9e159
[  475.939247][T18165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.939256][T18165] RSP: 002b:00007f48dbb03028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  475.939266][T18165] RAX: ffffffffffffffda RBX: 00007f48dae25fa0 RCX: 00007f48dab9e159
[  475.939273][T18165] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200
[  475.939278][T18165] RBP: 00007f48dac3506b R08: 0000000000000000 R09: 0000000034fffffd
[  475.939284][T18165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.939290][T18165] R13: 00007f48dae26038 R14: 00007f48dae25fa0 R15: 00007fffeafae828
[  475.939303][T18165]  </TASK>
[  476.169841][T18173] loop5: detected capacity change from 0 to 2048
[  476.193607][T18173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.230120][T18173] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  476.244022][T18173] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  476.249435][T18173] EXT4-fs (loop5): This should not happen!! Data will be lost
[  476.249435][T18173] 
[  476.253021][T18173] EXT4-fs (loop5): Total free blocks count 0
[  476.256789][T18173] EXT4-fs (loop5): Free/Dirty block details
[  476.259251][T18173] EXT4-fs (loop5): free_blocks=4096
[  476.261420][T18173] EXT4-fs (loop5): dirty_blocks=32
[  476.263664][T18173] EXT4-fs (loop5): Block reservation details
[  476.266271][T18173] EXT4-fs (loop5): i_reserved_data_blocks=2
[  476.295081][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[  476.328595][T10235] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  476.341899][T18142] loop1: detected capacity change from 0 to 131072
[  476.347235][T18142] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  476.347298][T18142] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  476.349488][T18142] F2FS-fs (loop1): invalid crc value
[  476.432835][T18142] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  476.462060][T18142] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  476.462135][T18142] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  476.464012][T18183] FAULT_INJECTION: forcing a failure.
[  476.464012][T18183] name failslab, interval 1, probability 0, space 0, times 0
[  476.464039][T18183] CPU: 1 UID: 0 PID: 18183 Comm: syz.5.4714 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.464057][T18183] Tainted: [L]=SOFTLOCKUP
[  476.464063][T18183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  476.464070][T18183] Call Trace:
[  476.464076][T18183]  <TASK>
[  476.464083][T18183]  dump_stack_lvl+0xe8/0x150
[  476.464109][T18183]  should_fail_ex+0x410/0x560
[  476.464133][T18183]  should_failslab+0xa8/0x100
[  476.464150][T18183]  __kmalloc_noprof+0xfe/0x720
[  476.464171][T18183]  ? x509_fabricate_name+0x580/0xa90
[  476.464239][T18183]  ? x509_fabricate_name+0x580/0xa90
[  476.464264][T18183]  x509_fabricate_name+0x580/0xa90
[  476.464289][T18183]  asn1_ber_decoder+0x1936/0x2590
[  476.464308][T18183]  ? __pfx_asn1_ber_decoder+0x10/0x10
[  476.464320][T18183]  ? __kasan_kmalloc+0x93/0xb0
[  476.464330][T18183]  ? __kmalloc_cache_noprof+0x14d/0x600
[  476.464341][T18183]  ? x509_cert_parse+0x16a/0x7a0
[  476.464354][T18183]  x509_cert_parse+0x1ba/0x7a0
[  476.464367][T18183]  x509_key_preparse+0x64/0x6d0
[  476.464374][T18183]  ? down_read+0x2be/0x330
[  476.464385][T18183]  asymmetric_key_preparse+0xb9/0x1b0
[  476.464396][T18183]  __key_create_or_update+0x3a9/0xa80
[  476.464409][T18183]  ? __pfx___key_create_or_update+0x10/0x10
[  476.464419][T18183]  ? lookup_user_key+0xb68/0x1150
[  476.464435][T18183]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  476.464451][T18183]  key_create_or_update+0x42/0x60
[  476.464462][T18183]  __se_sys_add_key+0x349/0x420
[  476.464480][T18183]  ? __pfx___se_sys_add_key+0x10/0x10
[  476.464493][T18183]  ? __x64_sys_add_key+0x20/0xc0
[  476.464506][T18183]  do_syscall_64+0x166/0x520
[  476.464524][T18183]  ? trace_irq_disable+0x3b/0x140
[  476.464537][T18183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.464554][T18183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.464567][T18183] RIP: 0033:0x7f497379e159
[  476.464581][T18183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.464593][T18183] RSP: 002b:00007f49745cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  476.464610][T18183] RAX: ffffffffffffffda RBX: 00007f4973a25fa0 RCX: 00007f497379e159
[  476.464619][T18183] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  476.464628][T18183] RBP: 00007f497383506b R08: ffffffffffffffff R09: 0000000000000000
[  476.464658][T18183] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  476.464668][T18183] R13: 00007f4973a26038 R14: 00007f4973a25fa0 R15: 00007ffff73d2c58
[  476.464691][T18183]  </TASK>
[  476.472852][T10235] usb 1-1: device descriptor read/64, error -71
[  476.530093][T18186] No source specified
[  476.726289][T10235] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  476.815502][T18192] loop5: detected capacity change from 0 to 32768
[  476.828972][T18192] read_mapping_page failed!
[  476.831581][T18192] ERROR: (device loop5): txCommit: 
[  476.831581][T18192] 
[  476.865822][T10235] usb 1-1: device descriptor read/64, error -71
[  476.974905][T10235] usb usb1-port1: attempt power cycle
[  477.013987][T18194] loop5: detected capacity change from 0 to 32768
[  477.017839][T18194] jfs: Unexpected value for 'integrity'
[  477.171744][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4723'.
[  477.178721][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4723'.
[  477.314774][T10235] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  477.335367][T10235] usb 1-1: device descriptor read/8, error -71
[  477.544824][   T33] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  477.608487][T10236] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  477.612030][T10235] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  477.647338][T10235] usb 1-1: device descriptor read/8, error -71
[  477.694707][   T33] usb 2-1: Using ep0 maxpacket: 8
[  477.695989][   T33] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  477.697163][   T33] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  477.697208][   T33] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  477.697235][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.702773][   T33] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected
[  477.718401][   T33] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  477.755442][T10235] usb usb1-port1: unable to enumerate USB device
[  477.785627][T10236] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00
[  477.792337][T10236] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  477.796710][T10236] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  477.800797][T10236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.807765][T18213] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  477.807909][T18213] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  477.841732][T15017] Bluetooth: hci3: Can't claim NULL iso interface
[  478.017850][T15017] Bluetooth: hci3: Failed to get device id (-71)
[  478.018026][T15017] Bluetooth: hci3: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported.
[  478.020274][   T33] usb 6-1: USB disconnect, device number 66
[  478.408735][   T33] usb 2-1: USB disconnect, device number 35
[  478.417645][   T33] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  478.422027][   T33] kobil_sct 2-1:1.0: device disconnected
[  478.898807][T18226] loop5: detected capacity change from 0 to 32768
[  478.907513][T18226] BTRFS warning: excessive commit interval 3581, use with care
[  478.942516][T18226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4733 (18226)
[  478.963820][T18230] loop1: detected capacity change from 0 to 32768
[  478.998560][T18226] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  478.998610][T18226] BTRFS info (device loop5): using crc32c checksum algorithm
[  479.032215][T18230] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  479.081130][T18230] XFS (loop1): Ending clean mount
[  479.098084][T18230] XFS (loop1): Quotacheck needed: Please wait.
[  479.111802][T18226] BTRFS info (device loop5): enabling ssd optimizations
[  479.125207][T18226] BTRFS info (device loop5): turning on flush-on-commit
[  479.125284][T18226] BTRFS info (device loop5): enabling free space tree
[  479.125321][T18226] BTRFS info (device loop5): force zlib compression, level 3
[  479.125357][T18226] BTRFS info (device loop5): max_inline set to 4096
[  479.188605][T18230] XFS (loop1): Quotacheck: Done.
[  479.213069][T18255] loop0: detected capacity change from 0 to 2048
[  479.249524][T14290] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  479.269774][T18255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.413809][ T8188] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  479.914577][T10236] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  480.066344][T10236] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  480.067489][T10236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  480.067534][T10236] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  480.070207][T10236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.070224][T10236] usb 2-1: Product: syz
[  480.070236][T10236] usb 2-1: Manufacturer: syz
[  480.070246][T10236] usb 2-1: SerialNumber: syz
[  480.258193][T18285] event trace: Could not enable event p
[  480.345223][T18289] netlink: 'syz.5.4752': attribute type 2 has an invalid length.
[  480.352660][T18289] loop5: detected capacity change from 0 to 128
[  480.371879][T18289] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  480.380736][T18289] ext4 filesystem being mounted at /1232/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  480.407762][ T8188] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  480.455509][T18296] loop5: detected capacity change from 0 to 2048
[  480.470720][T18296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  480.488962][T10236] snd-usb-caiaq 2-1:1.0: can't set alt interface.
[  480.489029][T10236] usb 2-1: unable to init card! (ret=-5)
[  480.489357][T10236] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  480.496688][T10236] usb 2-1: USB disconnect, device number 36
[  480.834611][   T33] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  480.995309][   T33] usb 1-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00
[  480.999900][   T33] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  481.005073][   T33] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  481.005192][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.015383][T18299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  481.015585][T18299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  481.047926][T15017] Bluetooth: hci3: Can't claim NULL iso interface
[  481.221590][T18311] loop1: detected capacity change from 0 to 2048
[  481.225013][T15017] Bluetooth: hci3: Failed to get device id (-71)
[  481.226435][T10236] usb 1-1: USB disconnect, device number 40
[  481.234467][T15017] Bluetooth: hci3: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported.
[  481.287935][T18311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.294149][T18311] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  481.301667][T18311] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  481.306272][T18311] EXT4-fs (loop1): This should not happen!! Data will be lost
[  481.306272][T18311] 
[  481.312357][T18311] EXT4-fs (loop1): Total free blocks count 0
[  481.314611][T18311] EXT4-fs (loop1): Free/Dirty block details
[  481.337778][T18311] EXT4-fs (loop1): free_blocks=4096
[  481.337826][T18311] EXT4-fs (loop1): dirty_blocks=32
[  481.337850][T18311] EXT4-fs (loop1): Block reservation details
[  481.337875][T18311] EXT4-fs (loop1): i_reserved_data_blocks=2
[  481.366369][ T4658] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[  481.488085][T18309] loop5: detected capacity change from 0 to 32768
[  481.512601][T18309] JBD2: Ignoring recovery information on journal
[  481.546325][T18309] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  481.599147][ T8188] ocfs2: Unmounting device (7,5) on (node local)
[  481.775602][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4769'.
[  481.877125][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4771'.
[  482.860702][T18364] loop5: detected capacity change from 0 to 32768
[  482.861635][T18364] xfs: Deprecated parameter 'noattr2'
[  482.861649][T18364] XFS: noattr2 mount option is deprecated.
[  482.931330][T18364] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  482.978338][T18364] XFS (loop5): Ending clean mount
[  482.987308][T18364] XFS (loop5): Quotacheck needed: Please wait.
[  483.003202][T18367] loop0: detected capacity change from 0 to 32768
[  483.044923][T18367] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  483.102249][T18364] XFS (loop5): Quotacheck: Done.
[  483.114518][T18367] XFS (loop0): Ending clean mount
[  483.137143][T18367] XFS (loop0): Quotacheck needed: Please wait.
[  483.137438][ T8188] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  483.182277][T18370] loop1: detected capacity change from 0 to 32768
[  483.303827][T18370] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  483.349031][T18370] XFS (loop1): Ending clean mount
[  483.385546][T18370] XFS (loop1): Quotacheck needed: Please wait.
[  483.508774][T18370] XFS (loop1): Quotacheck: Done.
[  483.583726][T18367] XFS (loop0): Quotacheck: Done.
[  483.596118][T14290] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  483.761080][T14279] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  484.114629][T18407] loop0: detected capacity change from 0 to 2048
[  484.163191][T18407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.251770][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.313797][T18411] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  484.313876][T18411] overlayfs: failed to set xattr on upper
[  484.315177][T18411] overlayfs: ...falling back to redirect_dir=nofollow.
[  484.315186][T18411] overlayfs: ...falling back to index=off.
[  484.315192][T18411] overlayfs: ...falling back to uuid=null.
[  484.732072][T18427] event trace: Could not enable event p
[  484.929483][T18425] loop5: detected capacity change from 0 to 32768
[  484.946642][T18425] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  484.966391][T18445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4801'.
[  485.005580][T18425] XFS (loop5): Ending clean mount
[  485.096069][T18425] XFS (loop5): Quotacheck needed: Please wait.
[  485.161194][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4806'.
[  485.218313][T18451] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  485.243065][T18425] XFS (loop5): Quotacheck: Done.
[  485.280933][ T8188] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  485.772025][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4810'.
[  485.884328][   T33] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  486.014432][   T33] usb 1-1: device descriptor read/64, error -71
[  486.034638][T18475] loop5: detected capacity change from 0 to 512
[  486.046813][T18475] EXT4-fs: Ignoring removed oldalloc option
[  486.088776][T18475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.126473][ T8188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.155614][T18480] loop1: detected capacity change from 0 to 2048
[  486.162988][T18480] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  486.199919][T18480] NILFS (loop1): Invalid checkpoint (checkpoint number=2)
[  486.239779][T18480] NILFS (loop1): error -22 while loading last checkpoint (checkpoint number=2)
[  486.275157][   T33] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  486.311467][T18482] event trace: Could not enable event p
[  486.406054][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4819'.
[  486.427493][   T33] usb 1-1: device descriptor read/64, error -71
[  486.534870][   T33] usb usb1-port1: attempt power cycle
[  486.878258][T18511] binder_alloc: 18510: binder_alloc_buf, no vma
[  486.884267][   T33] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  486.905282][   T33] usb 1-1: device descriptor read/8, error -71
[  487.295101][   T33] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  487.444292][   T33] usb 1-1: device descriptor read/8, error -71
[  487.664216][   T33] usb usb1-port1: unable to enumerate USB device
[  488.051514][T18538] loop1: detected capacity change from 0 to 4096
[  488.059736][T18538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.076205][T18538] sg_write: data in/out 467008/136 bytes for SCSI command 0x0-- guessing data in;
[  488.076205][T18538]    program syz.1.4842 not setting count and/or reply_len properly
[  488.106583][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.275053][T18541] loop1: detected capacity change from 0 to 32768
[  488.301319][T18541] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  488.321880][T18541] XFS (loop1): Ending clean mount
[  488.329585][T18541] XFS (loop1): User initiated shutdown received.
[  488.331810][T18541] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  488.334029][T18541] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  488.356919][T14290] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  488.546621][T18551] loop1: detected capacity change from 0 to 4096
[  488.630482][T18557] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  488.722978][T18562] loop0: detected capacity change from 0 to 2048
[  488.742088][T18562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.759995][T18562] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  488.769076][T18562] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  488.773992][T18562] EXT4-fs (loop0): This should not happen!! Data will be lost
[  488.773992][T18562] 
[  488.778800][T18562] EXT4-fs (loop0): Total free blocks count 0
[  488.781308][T18562] EXT4-fs (loop0): Free/Dirty block details
[  488.784799][T18562] EXT4-fs (loop0): free_blocks=4096
[  488.787033][T18562] EXT4-fs (loop0): dirty_blocks=32
[  488.789423][T18562] EXT4-fs (loop0): Block reservation details
[  488.792265][T18562] EXT4-fs (loop0): i_reserved_data_blocks=2
[  488.816509][T14758] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[  488.985095][T18577] loop1: detected capacity change from 0 to 512
[  488.990378][T18577] EXT4-fs (loop1): fragment/cluster size (4096) != block size (2048)
[  489.321957][T18603] loop1: detected capacity change from 0 to 256
[  489.459852][T18612] loop5: detected capacity change from 0 to 1024
[  489.507090][T18610] event trace: Could not enable event p
[  489.614975][T10235] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  489.666909][   T34] audit: type=1326 audit(1700000421.663:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18613 comm="syz.5.4874" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f497379e159 code=0x0
[  489.765764][T18622] sg_write: data in/out 204864/136 bytes for SCSI command 0x0-- guessing data in;
[  489.765764][T18622]    program syz.0.4877 not setting count and/or reply_len properly
[  489.778309][T10235] usb 2-1: unable to get BOS descriptor or descriptor too short
[  489.778378][T10235] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  489.789748][T10235] usb 2-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16
[  489.789802][T10235] usb 2-1: config 66 interface 0 has no altsetting 0
[  489.800797][T10235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.800836][T10235] usb 2-1: Product: syz
[  489.800867][T10235] usb 2-1: Manufacturer: syz
[  489.800891][T10235] usb 2-1: SerialNumber: syz
[  489.815801][T18606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  489.956964][T18626] input: syz1 as /devices/virtual/input/input34
[  490.054907][T10235] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint
[  490.080168][T10235] usb 2-1: USB disconnect, device number 37
[  490.357483][ T5651] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  490.527784][ T5651] usb 1-1: Using ep0 maxpacket: 32
[  490.528690][ T5651] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  490.531799][ T5651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.531817][ T5651] usb 1-1: Product: syz
[  490.531828][ T5651] usb 1-1: Manufacturer: syz
[  490.531837][ T5651] usb 1-1: SerialNumber: syz
[  490.535171][ T5651] usb 1-1: config 0 descriptor??
[  490.547306][ T5651] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  490.658483][T18633] event trace: Could not enable event p
[  490.745313][T18637] loop1: detected capacity change from 0 to 4096
[  490.768234][T18637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.826898][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.874001][   T33] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  491.009184][T18647] Unsupported ieee802154 address type: 0
[  491.034209][   T33] usb 6-1: Using ep0 maxpacket: 16
[  491.036973][   T33] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  491.043083][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  491.052392][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.052464][   T33] usb 6-1: Product: syz
[  491.052495][   T33] usb 6-1: Manufacturer: syz
[  491.052524][   T33] usb 6-1: SerialNumber: syz
[  491.065889][   T33] usb 6-1: config 0 descriptor??
[  491.095329][   T33] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  491.284021][   T12] usb 6-1: Failed to submit usb control message: -71
[  491.284170][   T12] usb 6-1: unable to send the bmi data to the device: -71
[  491.284207][   T12] usb 6-1: unable to get target info from device
[  491.284216][   T12] usb 6-1: could not get target info (-71)
[  491.284609][   T12] usb 6-1: could not probe fw (-71)
[  491.284804][T10235] usb 6-1: USB disconnect, device number 67
[  491.350282][ T5651] gspca_ov534_9: reg_w failed -71
[  491.653806][ T5651] gspca_ov534_9: Unknown sensor 0000
[  491.653950][ T5651] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  491.658518][ T5651] usb 1-1: USB disconnect, device number 45
[  491.900519][T18661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4893'.
[  491.957030][T18666] FAULT_INJECTION: forcing a failure.
[  491.957030][T18666] name failslab, interval 1, probability 0, space 0, times 0
[  491.962074][T18666] CPU: 1 UID: 0 PID: 18666 Comm: syz.5.4895 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  491.962129][T18666] Tainted: [L]=SOFTLOCKUP
[  491.962136][T18666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  491.962145][T18666] Call Trace:
[  491.962151][T18666]  <TASK>
[  491.962159][T18666]  dump_stack_lvl+0xe8/0x150
[  491.962185][T18666]  should_fail_ex+0x410/0x560
[  491.962203][T18666]  should_failslab+0xa8/0x100
[  491.962215][T18666]  __kvmalloc_node_noprof+0x176/0x820
[  491.962226][T18666]  ? listxattr+0xb9/0x380
[  491.962234][T18666]  ? listxattr+0xb9/0x380
[  491.962244][T18666]  listxattr+0xb9/0x380
[  491.962253][T18666]  ? __pfx_listxattr+0x10/0x10
[  491.962261][T18666]  ? __fget_files+0x2a/0x420
[  491.962271][T18666]  ? __fget_files+0x3a2/0x420
[  491.962280][T18666]  ? __fget_files+0x2a/0x420
[  491.962293][T18666]  __x64_sys_flistxattr+0x135/0x1b0
[  491.962307][T18666]  do_syscall_64+0x166/0x520
[  491.962319][T18666]  ? trace_irq_disable+0x3b/0x140
[  491.962327][T18666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.962337][T18666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.962345][T18666] RIP: 0033:0x7f497379e159
[  491.962354][T18666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  491.962362][T18666] RSP: 002b:00007f49745cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4
[  491.962372][T18666] RAX: ffffffffffffffda RBX: 00007f4973a25fa0 RCX: 00007f497379e159
[  491.962379][T18666] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004
[  491.962385][T18666] RBP: 00007f497383506b R08: 0000000000000000 R09: 0000000000000000
[  491.962390][T18666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  491.962395][T18666] R13: 00007f4973a26038 R14: 00007f4973a25fa0 R15: 00007ffff73d2c58
[  491.962407][T18666]  </TASK>
[  492.047564][T18668] loop0: detected capacity change from 0 to 256
[  492.179892][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4900'.
[  492.188098][T18674] overlayfs: failed to resolve './bus': -2
[  492.252040][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4901'.
[  492.273418][T18678] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  492.475980][T18690] loop0: detected capacity change from 0 to 512
[  492.486130][T18690] EXT4-fs (loop0): Test dummy encryption mode enabled
[  492.489065][T18690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  492.499017][T18690] EXT4-fs (loop0): 1 truncate cleaned up
[  492.503361][T18690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.572245][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.774164][T18701] overlayfs: failed to resolve './bus': -2
[  492.911892][T18687] loop1: detected capacity change from 0 to 32768
[  492.923935][T18687] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  492.949320][T18687] XFS (loop1): Ending clean mount
[  493.048687][T14290] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  493.163709][T10235] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  493.192042][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4911'.
[  493.204255][T18713] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  493.314056][T10235] usb 1-1: Using ep0 maxpacket: 8
[  493.314787][T10235] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[  493.316120][T10235] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  493.316161][T10235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.316239][T10235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.316254][T10235] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  493.316283][T10235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.327141][T10235] usb 1-1: config 0 descriptor??
[  493.334529][T10235] usbhid 1-1:0.0: can't add hid device: -22
[  493.334602][T10235] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  493.541959][   T33] usb 1-1: USB disconnect, device number 46
[  493.611010][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4918'.
[  495.995667][T18797] loop0: detected capacity change from 0 to 512
[  496.003026][T18797] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  496.014682][T18797] EXT4-fs (loop0): 1 truncate cleaned up
[  496.020537][T18797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.076001][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.434302][T10235] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  496.585769][T10235] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  496.586560][T10235] usb 2-1: config 0 has no interfaces?
[  496.588442][T10235] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  496.588459][T10235] usb 2-1: Product: syz
[  496.588469][T10235] usb 2-1: Manufacturer: syz
[  496.591673][T10235] usb 2-1: config 0 descriptor??
[  496.788660][T18813] loop5: detected capacity change from 0 to 32768
[  496.802635][T18813] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  496.805762][T10235] usb 2-1: USB disconnect, device number 38
[  496.846798][T18813] XFS (loop5): Ending clean mount
[  496.868467][T18813] XFS (loop5): User initiated shutdown received.
[  496.870931][T18813] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  496.876347][T18813] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  496.902880][ T8188] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  497.172135][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4954'.
[  497.188133][T18825] loop5: detected capacity change from 0 to 512
[  497.194891][T18825] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  497.204050][T18825] EXT4-fs (loop5): 1 truncate cleaned up
[  497.208056][T18825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.282854][ T8188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.327400][T18829] overlay: filesystem on ./file0 is read-only
[  497.464308][T18831] loop1: detected capacity change from 0 to 4096
[  497.484429][T18831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.501292][T18831] sg_write: data in/out 401472/136 bytes for SCSI command 0x0-- guessing data in;
[  497.501292][T18831]    program syz.1.4957 not setting count and/or reply_len properly
[  497.585063][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.783668][T10236] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  498.849452][T18867] fuse: Bad value for 'fd'
[  498.953317][T10236] usb 2-1: Using ep0 maxpacket: 8
[  498.955899][T10236] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  498.962732][T10236] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  498.962784][T10236] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  498.962831][T10236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.990415][T10236] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected
[  499.005417][T10236] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  499.691755][T10236] usb 2-1: USB disconnect, device number 39
[  499.708535][T10236] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  499.711890][T10236] kobil_sct 2-1:1.0: device disconnected
[  500.577872][T18906] syzkaller1: entered promiscuous mode
[  500.581820][T18906] syzkaller1: entered allmulticast mode
[  500.642631][T18910] sg_write: data in/out 401472/136 bytes for SCSI command 0x0-- guessing data in;
[  500.642631][T18910]    program syz.5.4991 not setting count and/or reply_len properly
[  500.708997][T18914] loop5: detected capacity change from 0 to 16
[  500.710120][T18914] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  500.908003][T18922] xt_hashlimit: size too large, truncated to 1048576
[  501.001371][T18927] xt_hashlimit: size too large, truncated to 1048576
[  501.053663][T18930] sg_write: data in/out 401472/136 bytes for SCSI command 0x0-- guessing data in;
[  501.053663][T18930]    program syz.5.4998 not setting count and/or reply_len properly
[  501.198411][T18937] loop5: detected capacity change from 0 to 256
[  501.218368][T18937] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  501.224548][   T34] audit: type=1800 audit(1700000433.213:100): pid=18937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5001" name="file1" dev="loop5" ino=1048822 res=0 errno=0
[  501.344869][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  501.347895][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  501.480047][T18939] loop5: detected capacity change from 0 to 4096
[  501.493584][T18939] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  501.510226][T18939] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  501.676164][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5006'.
[  501.917445][T18956] xt_hashlimit: size too large, truncated to 1048576
[  502.046558][T18951] loop5: detected capacity change from 0 to 32768
[  502.049573][T18951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5008 (18951)
[  502.067132][T18951] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  502.067203][T18951] BTRFS info (device loop5): using sha256 checksum algorithm
[  502.106329][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5013'.
[  502.147087][T18951] BTRFS info (device loop5): enabling ssd optimizations
[  502.147142][T18951] BTRFS info (device loop5): turning on async discard
[  502.147176][T18951] BTRFS info (device loop5): enabling free space tree
[  502.162115][T18971] bond1: entered promiscuous mode
[  502.162168][T18971] bond1: entered allmulticast mode
[  502.283492][ T8188] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  502.444252][T10238] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  502.595779][T18993] loop5: detected capacity change from 0 to 1024
[  502.599139][T18993] EXT4-fs: Ignoring removed oldalloc option
[  502.601106][T18993] EXT4-fs: Ignoring removed orlov option
[  502.603281][T10238] usb 2-1: Using ep0 maxpacket: 32
[  502.603990][T10238] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  502.605374][T10238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.607420][T10238] usb 2-1: config 0 descriptor??
[  502.639182][T18993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.669634][ T8188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.793630][T19000] loop5: detected capacity change from 0 to 512
[  502.814943][T10238] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  502.822018][T10238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  502.824778][T10238] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  502.824804][T10238] usb 2-1: media controller created
[  502.849653][T10238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  503.058978][T19010] loop0: detected capacity change from 0 to 1764
[  503.119152][T19010] iso9660: Corrupted directory entry in block 2 of inode 1920
[  503.289095][T19016] xt_hashlimit: size too large, truncated to 1048576
[  503.477932][T19026] program syz.0.5032 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  503.592700][T19033] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  503.592756][T19033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.656261][T10238] az6027: usb out operation failed. (-71)
[  503.656328][T10238] stb0899_attach: Driver disabled by Kconfig
[  503.656370][T10238] az6027: no front-end attached
[  503.656370][T10238] 
[  503.657568][T10238] az6027: usb out operation failed. (-71)
[  503.657605][T10238] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  503.681497][T10238] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36
[  503.688169][T10238] dvb-usb: schedule remote query interval to 400 msecs.
[  503.688232][T10238] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  503.708534][T10238] usb 2-1: USB disconnect, device number 40
[  503.864212][T19044] xt_hashlimit: size too large, truncated to 1048576
[  503.874125][T10238] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  503.991951][T19049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  504.570395][T10236] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  504.723519][T10236] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  504.727993][T10236] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  504.732474][T10236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  504.740626][T10236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  504.746388][T10236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.752071][T10236] usb 2-1: config 0 descriptor??
[  504.755260][T19058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  504.887182][T19068] netlink: NAT attribute has 8 unknown bytes
[  504.887256][T19068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.963680][ T5651] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  505.123106][ T5651] usb 1-1: Using ep0 maxpacket: 32
[  505.126388][ T5651] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  505.131992][ T5651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.139963][ T5651] usb 1-1: config 0 descriptor??
[  505.158710][T10236] usbhid 2-1:0.0: can't add hid device: -71
[  505.160929][T10236] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  505.165654][T10236] usb 2-1: USB disconnect, device number 41
[  505.302903][T19081] loop5: detected capacity change from 0 to 512
[  505.348960][ T5651] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  505.358295][ T5651] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  505.362336][ T5651] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  505.367241][T19083] loop5: detected capacity change from 0 to 256
[  505.370004][T19083] exfat: Deprecated parameter 'utf8'
[  505.370729][T19083] exfat: Deprecated parameter 'namecase'
[  505.370748][T19083] exfat: Deprecated parameter 'namecase'
[  505.378290][ T5651] usb 1-1: media controller created
[  505.378997][T19083] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  505.389435][ T5651] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  505.498115][T19087] xt_hashlimit: size too large, truncated to 1048576
[  505.730846][T19093] bond2: entered promiscuous mode
[  505.730916][T19093] bond2: entered allmulticast mode
[  505.904755][T15017] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  505.904812][T15017] CPU: 1 UID: 0 PID: 15017 Comm: kworker/u11:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  505.904841][T15017] Tainted: [L]=SOFTLOCKUP
[  505.904846][T15017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  505.904852][T15017] Workqueue: hci2 hci_rx_work
[  505.904870][T15017] Call Trace:
[  505.904874][T15017]  <TASK>
[  505.904880][T15017]  dump_stack_lvl+0xe8/0x150
[  505.904896][T15017]  sysfs_create_dir_ns+0x271/0x2a0
[  505.904910][T15017]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  505.904922][T15017]  ? do_raw_spin_unlock+0x4d/0x200
[  505.904936][T15017]  kobject_add_internal+0x622/0xcd0
[  505.904949][T15017]  kobject_add+0x163/0x240
[  505.904959][T15017]  ? __pfx_kobject_add+0x10/0x10
[  505.904969][T15017]  ? get_device_parent+0x366/0x3a0
[  505.904983][T15017]  device_add+0x3fa/0xb80
[  505.904995][T15017]  hci_conn_add_sysfs+0xd5/0x210
[  505.905006][T15017]  le_conn_complete_evt+0xfe3/0x16d0
[  505.905015][T15017]  ? le_conn_complete_evt+0x1b1/0x16d0
[  505.905023][T15017]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  505.905061][T15017]  ? __mutex_unlock_slowpath+0x731/0x900
[  505.905076][T15017]  ? skb_pull_data+0xf0/0x200
[  505.905090][T15017]  hci_le_conn_complete_evt+0x187/0x470
[  505.905106][T15017]  hci_event_packet+0x67a/0xf10
[  505.905120][T15017]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  505.905132][T15017]  ? __pfx_hci_event_packet+0x10/0x10
[  505.905145][T15017]  ? audit_watch_compare+0xd0/0xd0
[  505.905157][T15017]  ? hci_send_to_monitor+0xe2/0x590
[  505.905168][T15017]  hci_rx_work+0x3ee/0x1020
[  505.905181][T15017]  ? process_scheduled_works+0x97a/0x1630
[  505.905193][T15017]  process_scheduled_works+0xc3d/0x1630
[  505.905216][T15017]  ? __pfx_process_scheduled_works+0x10/0x10
[  505.905228][T15017]  ? assign_work+0x3cf/0x5d0
[  505.905240][T15017]  worker_thread+0xa47/0xfb0
[  505.905255][T15017]  ? __kthread_parkme+0x71/0x1f0
[  505.905270][T15017]  kthread+0x38b/0x480
[  505.905278][T15017]  ? __pfx_worker_thread+0x10/0x10
[  505.905287][T15017]  ? __pfx_kthread+0x10/0x10
[  505.905295][T15017]  ret_from_fork+0x514/0xb70
[  505.905309][T15017]  ? __pfx_ret_from_fork+0x10/0x10
[  505.905321][T15017]  ? __switch_to+0xc89/0x1420
[  505.905332][T15017]  ? __pfx_kthread+0x10/0x10
[  505.905340][T15017]  ret_from_fork_asm+0x1a/0x30
[  505.905358][T15017]  </TASK>
[  505.905410][T15017] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  505.905427][T15017] Bluetooth: hci2: failed to register connection device
[  506.215095][ T5651] az6027: usb out operation failed. (-71)
[  506.215133][ T5651] stb0899_attach: Driver disabled by Kconfig
[  506.215175][ T5651] az6027: no front-end attached
[  506.215175][ T5651] 
[  506.221638][ T5651] az6027: usb out operation failed. (-71)
[  506.221648][ T5651] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  506.228185][ T5651] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37
[  506.234173][ T5651] dvb-usb: schedule remote query interval to 400 msecs.
[  506.237326][ T5651] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  506.244147][ T5651] usb 1-1: USB disconnect, device number 47
[  506.361818][ T5651] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  506.560014][T19127] loop1: detected capacity change from 0 to 512
[  506.566709][T19127] EXT4-fs: Ignoring removed nobh option
[  506.592172][T19127] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  506.601463][T19127] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  506.605504][T19127] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.5074: inode has both inline data and extents flags
[  506.610972][T19127] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  506.611631][T19127] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.5074: couldn't read orphan inode 13 (err -117)
[  506.615520][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  506.615536][    C0] EXT4-fs (loop1): initial error at time 1700000438: ext4_orphan_get:1403: inode 13
[  506.615559][    C0] EXT4-fs (loop1): last error at time 1700000438: ext4_orphan_get:1403: inode 13
[  506.624127][T19127] loop1: lost filesystem error report for type 5 error -117
[  506.626048][T19127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.639911][T19127] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  506.674928][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.960402][T19137] loop0: detected capacity change from 0 to 32768
[  507.009665][T19137] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  507.025435][T19137] XFS (loop0): Ending clean mount
[  507.053631][T14279] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  507.291956][   T34] audit: type=1800 audit(1700000439.284:101): pid=19162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5082" name="file1" dev="tmpfs" ino=2894 res=0 errno=0
[  507.945700][T19185] loop0: detected capacity change from 0 to 4096
[  507.948858][T19185] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  507.987786][ T4992] Bluetooth: hci2: command 0x0406 tx timeout
[  508.011528][T19189] loop1: detected capacity change from 0 to 1024
[  508.014722][T19185] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  508.075008][T19189] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  508.075289][T19189] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  508.075306][T19189] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.5097: Failed to acquire dquot type 0
[  508.075323][T19189] loop1: lost filesystem error report for type 5 error -5
[  508.083216][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  508.083237][    C1] EXT4-fs (loop1): initial error at time 1700000440: ext4_acquire_dquot:7069
[  508.083254][    C1] EXT4-fs (loop1): last error at time 1700000440: ext4_acquire_dquot:7069
[  508.085503][T19189] EXT4-fs (loop1): 1 truncate cleaned up
[  508.087792][T19189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  508.327666][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.579914][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5099'.
[  509.009534][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5102'.
[  509.290940][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5113'.
[  509.471279][T19232] bond2: entered promiscuous mode
[  509.471358][T19232] bond2: entered allmulticast mode
[  509.709537][T19234] loop0: detected capacity change from 0 to 32768
[  509.726763][T19234] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  509.749423][T19234] XFS (loop0): Ending clean mount
[  509.765464][T10236] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  509.821653][T14279] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  509.964625][T10236] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  509.969292][T10236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.969375][T10236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.979375][T10236] usb 2-1: config 0 descriptor??
[  510.062780][T15017] Bluetooth: hci2: command 0x0406 tx timeout
[  510.141342][T19271] FAULT_INJECTION: forcing a failure.
[  510.141342][T19271] name failslab, interval 1, probability 0, space 0, times 0
[  510.141404][T19271] CPU: 1 UID: 0 PID: 19271 Comm: syz.0.5130 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  510.141432][T19271] Tainted: [L]=SOFTLOCKUP
[  510.141437][T19271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  510.141443][T19271] Call Trace:
[  510.141447][T19271]  <TASK>
[  510.141452][T19271]  dump_stack_lvl+0xe8/0x150
[  510.141469][T19271]  should_fail_ex+0x410/0x560
[  510.141485][T19271]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  510.141500][T19271]  should_failslab+0xa8/0x100
[  510.141512][T19271]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  510.141522][T19271]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  510.141536][T19271]  ? alloc_inode+0x6a/0x1b0
[  510.141546][T19271]  ? alloc_inode+0x6a/0x1b0
[  510.141557][T19271]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  510.141568][T19271]  alloc_inode+0x6a/0x1b0
[  510.141578][T19271]  new_inode+0x1f/0x170
[  510.141589][T19271]  __debugfs_create_file+0xb8/0x400
[  510.141601][T19271]  debugfs_create_file_full+0x3f/0x60
[  510.141612][T19271]  ref_tracker_dir_debugfs+0x197/0x360
[  510.141621][T19271]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  510.141642][T19271]  ? __raw_spin_lock_init+0x45/0x100
[  510.141655][T19271]  alloc_netdev_mqs+0x275/0x12a0
[  510.141666][T19271]  ? __pfx_tun_setup+0x10/0x10
[  510.141678][T19271]  tun_set_iff+0x51d/0xf20
[  510.141692][T19271]  __tun_chr_ioctl+0x7e5/0x1e70
[  510.141726][T19271]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  510.141740][T19271]  ? __fget_files+0x2a/0x420
[  510.141750][T19271]  ? __fget_files+0x3a2/0x420
[  510.141759][T19271]  ? __fget_files+0x2a/0x420
[  510.141770][T19271]  ? bpf_lsm_file_ioctl+0x9/0x20
[  510.141781][T19271]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  510.141791][T19271]  __se_sys_ioctl+0xfc/0x170
[  510.141801][T19271]  do_syscall_64+0x166/0x520
[  510.141813][T19271]  ? trace_irq_disable+0x3b/0x140
[  510.141821][T19271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.141832][T19271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.141842][T19271] RIP: 0033:0x7f48dab9e159
[  510.141851][T19271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.141858][T19271] RSP: 002b:00007f48dbb03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  510.141868][T19271] RAX: ffffffffffffffda RBX: 00007f48dae25fa0 RCX: 00007f48dab9e159
[  510.141874][T19271] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003
[  510.141879][T19271] RBP: 00007f48dac3506b R08: 0000000000000000 R09: 0000000000000000
[  510.141884][T19271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  510.141889][T19271] R13: 00007f48dae26038 R14: 00007f48dae25fa0 R15: 00007fffeafae828
[  510.141901][T19271]  </TASK>
[  510.143682][T19271] debugfs: out of free dentries, can not create file 'netdev@ffff88817ac50700'
[  510.217337][T19275] loop5: detected capacity change from 0 to 512
[  510.217851][T19275] EXT4-fs: Ignoring removed nobh option
[  510.228724][T19275] fscrypt (loop5, inode 2): Error -61 getting encryption context
[  510.228765][T19275] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61
[  510.228946][T19275] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #13: comm syz.5.5132: inode has both inline data and extents flags
[  510.228960][T19275] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  510.229261][T19275] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.5132: couldn't read orphan inode 13 (err -117)
[  510.229288][T19275] loop5: lost filesystem error report for type 5 error -117
[  510.230754][T19275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  510.277226][T10236] usbhid 2-1:0.0: can't add hid device: -71
[  510.277306][T10236] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  510.318873][T10236] usb 2-1: USB disconnect, device number 42
[  510.332062][ T8188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.468185][T19283] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5134'.
[  510.472190][T19283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5134'.
[  510.763561][T10236] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  510.785354][T19300] loop0: detected capacity change from 0 to 4096
[  510.923081][T10236] usb 2-1: Using ep0 maxpacket: 32
[  510.925323][T10236] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  510.929981][T10236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.934600][T10236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.938725][T10236] usb 2-1: config 0 descriptor??
[  510.944454][T10236] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  510.960992][T19304] loop0: detected capacity change from 0 to 1024
[  510.967913][ T5651] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  510.980425][T10236] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  510.981488][T19304] EXT4-fs: Ignoring removed orlov option
[  511.003464][T19304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  511.010609][T19304] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  511.030220][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.124630][ T5651] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  511.131041][ T5651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.135593][ T5651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.141297][ T5651] usb 6-1: config 0 descriptor??
[  511.311667][T19308] loop0: detected capacity change from 0 to 32768
[  511.354953][ T5651] usbhid 6-1:0.0: can't add hid device: -71
[  511.361333][ T5651] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  511.388769][ T5651] usb 6-1: USB disconnect, device number 68
[  511.390692][T19311] syzkaller1: entered promiscuous mode
[  511.390709][T19311] syzkaller1: entered allmulticast mode
[  511.618292][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5149'.
[  511.797242][T19322] FAULT_INJECTION: forcing a failure.
[  511.797242][T19322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  511.797312][T19322] CPU: 1 UID: 0 PID: 19322 Comm: syz.0.5152 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  511.797349][T19322] Tainted: [L]=SOFTLOCKUP
[  511.797354][T19322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  511.797362][T19322] Call Trace:
[  511.797369][T19322]  <TASK>
[  511.797375][T19322]  dump_stack_lvl+0xe8/0x150
[  511.797400][T19322]  should_fail_ex+0x410/0x560
[  511.797426][T19322]  _copy_from_user+0x2d/0xb0
[  511.797441][T19322]  __se_sys_epoll_ctl+0xbd/0x230
[  511.797462][T19322]  ? __pfx___se_sys_futex+0x10/0x10
[  511.797480][T19322]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  511.797507][T19322]  do_syscall_64+0x166/0x520
[  511.797525][T19322]  ? trace_irq_disable+0x3b/0x140
[  511.797538][T19322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.797556][T19322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.797570][T19322] RIP: 0033:0x7f48dab9e159
[  511.797583][T19322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.797597][T19322] RSP: 002b:00007f48dbb03028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  511.797612][T19322] RAX: ffffffffffffffda RBX: 00007f48dae25fa0 RCX: 00007f48dab9e159
[  511.797621][T19322] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004
[  511.797630][T19322] RBP: 00007f48dac3506b R08: 0000000000000000 R09: 0000000000000000
[  511.797638][T19322] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  511.797646][T19322] R13: 00007f48dae26038 R14: 00007f48dae25fa0 R15: 00007fffeafae828
[  511.797668][T19322]  </TASK>
[  511.924200][ T5651] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  512.093135][ T5651] usb 6-1: Using ep0 maxpacket: 32
[  512.096699][ T5651] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  512.100523][ T5651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  512.104844][ T5651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.111186][ T5651] usb 6-1: config 0 descriptor??
[  512.118697][ T5651] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  512.126966][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5159'.
[  512.132137][ T5651] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  512.527629][  T804] usb 6-1: USB disconnect, device number 69
[  512.530365][  T804] ldusb 6-1:0.0: LD USB Device #1 now disconnected
[  512.553036][ T5651] usb 2-1: USB disconnect, device number 43
[  512.563343][ T5651] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  512.675701][T19347] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  512.715411][T19349] loop1: detected capacity change from 0 to 128
[  512.728835][T19349] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  512.736693][T19349] ext4 filesystem being mounted at /657/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  512.757158][T14290] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  513.119460][T19357] block nbd5: Cannot add socket to a running device
[  513.901560][   T58] block nbd5: Receive control failed (result -32)
[  514.258102][T19356] block nbd5: shutting down sockets
[  515.218838][T19381] loop5: detected capacity change from 0 to 4096
[  515.439908][T19385] FAULT_INJECTION: forcing a failure.
[  515.439908][T19385] name failslab, interval 1, probability 0, space 0, times 0
[  515.440006][T19385] CPU: 0 UID: 0 PID: 19385 Comm: syz.5.5178 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  515.440034][T19385] Tainted: [L]=SOFTLOCKUP
[  515.440039][T19385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  515.440059][T19385] Call Trace:
[  515.440064][T19385]  <TASK>
[  515.440069][T19385]  dump_stack_lvl+0xe8/0x150
[  515.440087][T19385]  should_fail_ex+0x410/0x560
[  515.440104][T19385]  should_failslab+0xa8/0x100
[  515.440116][T19385]  __kmalloc_noprof+0xfe/0x720
[  515.440130][T19385]  ? kobject_get_path+0xc5/0x2f0
[  515.440138][T19385]  ? kobject_get_path+0xc5/0x2f0
[  515.440148][T19385]  kobject_get_path+0xc5/0x2f0
[  515.440158][T19385]  kobject_uevent_env+0x29e/0x9e0
[  515.440170][T19385]  device_add+0x544/0xb80
[  515.440183][T19385]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  515.440194][T19385]  wakeup_source_register+0x17f/0x380
[  515.440207][T19385]  ep_insert+0xfaf/0x1af0
[  515.440225][T19385]  ? __pfx_ep_insert+0x10/0x10
[  515.440242][T19385]  ? bpf_lsm_capable+0x9/0x20
[  515.440253][T19385]  ? security_capable+0x7e/0x2c0
[  515.440269][T19385]  do_epoll_ctl_file+0x8c2/0xee0
[  515.440283][T19385]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  515.440296][T19385]  ? __fget_files+0x3a2/0x420
[  515.440306][T19385]  ? __fget_files+0x2a/0x420
[  515.440319][T19385]  __se_sys_epoll_ctl+0x162/0x230
[  515.440332][T19385]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  515.440348][T19385]  do_syscall_64+0x166/0x520
[  515.440359][T19385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.440369][T19385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.440377][T19385] RIP: 0033:0x7f497379e159
[  515.440386][T19385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.440393][T19385] RSP: 002b:00007f49745cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  515.440403][T19385] RAX: ffffffffffffffda RBX: 00007f4973a25fa0 RCX: 00007f497379e159
[  515.440409][T19385] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004
[  515.440414][T19385] RBP: 00007f497383506b R08: 0000000000000000 R09: 0000000000000000
[  515.440419][T19385] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  515.440424][T19385] R13: 00007f4973a26038 R14: 00007f4973a25fa0 R15: 00007ffff73d2c58
[  515.440442][T19385]  </TASK>
[  515.677764][T19393] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  515.902463][T10235] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  516.053679][T10235] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  516.061048][T10235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.061129][T10235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.075286][T10235] usb 1-1: config 0 descriptor??
[  516.162683][T19402] loop1: detected capacity change from 0 to 164
[  516.293316][T10235] usbhid 1-1:0.0: can't add hid device: -71
[  516.293440][T10235] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  516.311382][T10235] usb 1-1: USB disconnect, device number 48
[  516.346514][T19406] loop1: detected capacity change from 0 to 512
[  516.356019][T19406] EXT4-fs: Ignoring removed bh option
[  516.368585][T19406] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.5187: inode #13: comm syz.1.5187: iget: illegal inode #
[  516.368666][T19406] loop1: lost filesystem error report for type 5 error -117
[  516.369249][T19406] EXT4-fs (loop1): Remounting filesystem read-only
[  516.370636][T19406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  516.704666][T19413] loop5: detected capacity change from 0 to 128
[  516.719011][T19413] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  516.725489][T19413] ext4 filesystem being mounted at /1407/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  516.733914][T19413] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x17)
[  516.742253][  T804] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  516.749288][ T8188] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  516.892314][  T804] usb 1-1: Using ep0 maxpacket: 32
[  516.895392][  T804] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  516.901350][  T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.901412][  T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.906823][  T804] usb 1-1: config 0 descriptor??
[  516.914370][  T804] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  516.923522][  T804] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  516.929247][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.042325][T10235] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  517.202706][T10235] usb 6-1: Using ep0 maxpacket: 32
[  517.205488][T10235] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  517.209954][T10235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.217131][T10235] usb 6-1: config 0 descriptor??
[  517.309606][T19424] loop1: detected capacity change from 0 to 40427
[  517.313142][T19424] F2FS-fs (loop1): build fault injection rate: 14
[  517.313155][T19424] F2FS-fs (loop1): build fault injection type: 0x30e4
[  517.314311][T19424] F2FS-fs (loop1): invalid crc value
[  517.328594][T19424] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  517.370296][T19424] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  517.379841][T19424] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  517.404176][T19424] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[  517.409944][T19424] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_setattr+0xb90/0x1c00
[  517.424629][T10235] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  517.428544][T10235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  517.433132][T10235] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  517.450591][T14290] syz-executor: attempt to access beyond end of device
[  517.450591][T14290] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  517.455117][T14290] CPU: 1 UID: 0 PID: 14290 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  517.455138][T14290] Tainted: [L]=SOFTLOCKUP
[  517.455143][T14290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  517.455152][T14290] Call Trace:
[  517.455158][T14290]  <TASK>
[  517.455165][T14290]  dump_stack_lvl+0xe8/0x150
[  517.455210][T14290]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  517.455230][T14290]  f2fs_write_end_bio+0x1211/0x16e0
[  517.455250][T14290]  ? blkg_put+0x22/0x240
[  517.455271][T14290]  __submit_merged_bio+0x258/0x6a0
[  517.455287][T14290]  ? rcu_is_watching+0x16/0xb0
[  517.455305][T14290]  __submit_merged_write_cond+0x3c9/0x4e0
[  517.455325][T14290]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  517.455348][T14290]  f2fs_write_data_pages+0x2a27/0x36f0
[  517.455364][T14290]  ? __lock_acquire+0x6df/0x2e50
[  517.455398][T14290]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  517.455413][T14290]  ? is_bpf_text_address+0x26/0x2b0
[  517.455436][T14290]  ? arch_stack_walk+0xfb/0x150
[  517.455465][T14290]  ? add_lock_to_list+0xc7/0x100
[  517.455482][T14290]  ? lockdep_unlock+0x5c/0xd0
[  517.455498][T14290]  ? __lock_acquire+0x14b9/0x2e50
[  517.455529][T14290]  ? do_raw_spin_lock+0x12b/0x2f0
[  517.455547][T14290]  ? do_raw_spin_unlock+0x4d/0x200
[  517.455563][T14290]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  517.455580][T14290]  do_writepages+0x338/0x560
[  517.455606][T14290]  ? do_raw_spin_unlock+0x4d/0x200
[  517.455625][T14290]  filemap_fdatawrite+0x1e9/0x2f0
[  517.455640][T14290]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  517.455678][T14290]  ? do_raw_spin_unlock+0x4d/0x200
[  517.455697][T14290]  f2fs_sync_dirty_inodes+0x30e/0x830
[  517.455723][T14290]  f2fs_write_checkpoint+0xa3d/0x2710
[  517.455739][T14290]  ? __lock_acquire+0x6df/0x2e50
[  517.455767][T14290]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  517.455816][T14290]  kill_f2fs_super+0x2dd/0x700
[  517.455840][T14290]  ? __pfx_kill_f2fs_super+0x10/0x10
[  517.455861][T14290]  ? call_rcu+0x64d/0x8b0
[  517.455875][T14290]  ? lockdep_hardirqs_on+0x7b/0x110
[  517.455909][T14290]  deactivate_locked_super+0xbc/0x110
[  517.455927][T14290]  cleanup_mnt+0x3d3/0x460
[  517.455944][T14290]  task_work_run+0x1d9/0x270
[  517.455961][T14290]  ? __pfx_task_work_run+0x10/0x10
[  517.456008][T14290]  exit_to_user_mode_loop+0x204/0x770
[  517.456022][T14290]  ? rcu_is_watching+0x16/0xb0
[  517.456038][T14290]  do_syscall_64+0x328/0x520
[  517.456054][T14290]  ? trace_irq_disable+0x3b/0x140
[  517.456064][T14290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.456081][T14290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.456093][T14290] RIP: 0033:0x7fad9799f397
[  517.456106][T14290] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  517.456117][T14290] RSP: 002b:00007ffedb6e1868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  517.456133][T14290] RAX: 0000000000000000 RBX: 00007fad97a344bb RCX: 00007fad9799f397
[  517.456142][T14290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedb6e1920
[  517.456150][T14290] RBP: 00007ffedb6e1920 R08: 00007ffedb6e2920 R09: 00000000ffffffff
[  517.456159][T14290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedb6e29b0
[  517.456167][T14290] R13: 00007fad97a344bb R14: 000000000007e4d0 R15: 00007ffedb6e29f0
[  517.456182][T14290]  </TASK>
[  517.456253][T14290] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  517.596129][T10235] usb 6-1: media controller created
[  517.604754][T10235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  517.779840][T19430] veth1: entered promiscuous mode
[  517.781747][T19430] veth1: entered allmulticast mode
[  517.896126][T19436] loop1: detected capacity change from 0 to 24
[  517.899606][T19436] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  517.947543][T19436] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  518.273652][T10235] az6027: usb out operation failed. (-71)
[  518.273691][T10235] stb0899_attach: Driver disabled by Kconfig
[  518.273732][T10235] az6027: no front-end attached
[  518.273732][T10235] 
[  518.283209][T10235] az6027: usb out operation failed. (-71)
[  518.283244][T10235] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  518.284323][T10235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38
[  518.318907][T10235] dvb-usb: schedule remote query interval to 400 msecs.
[  518.321276][T10235] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  518.327218][T10235] usb 6-1: USB disconnect, device number 70
[  518.360359][T10235] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  518.556170][T19462] vivid-002: disconnect
[  518.561155][T19462] vivid-002: reconnect
[  518.717838][T10236] usb 1-1: USB disconnect, device number 49
[  518.735748][T10236] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  518.897849][T19475] loop5: detected capacity change from 0 to 2048
[  518.919377][T19475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.076362][ T8188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.139880][T19484] block nbd5: shutting down sockets
[  519.413767][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5228'.
[  519.451631][T19497] bond3: entered promiscuous mode
[  519.451690][T19497] bond3: entered allmulticast mode
[  519.557901][T19504] loop5: detected capacity change from 0 to 2048
[  519.562690][T19504] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  519.616598][T19504] syz.5.5231: attempt to access beyond end of device
[  519.616598][T19504] loop5: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  519.625519][T19505] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  519.800520][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5234'.
[  520.198935][T19502] loop0: detected capacity change from 0 to 131072
[  520.200681][T19502] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  520.200701][T19502] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  520.201503][T19502] F2FS-fs (loop0): invalid crc value
[  520.283199][T19502] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  520.292027][T19502] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  520.292090][T19502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  521.094279][T10238] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  521.242313][T10238] usb 2-1: Using ep0 maxpacket: 8
[  521.243319][T10238] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  521.245968][T10238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.245980][T10238] usb 2-1: Product: syz
[  521.245986][T10238] usb 2-1: Manufacturer: syz
[  521.245992][T10238] usb 2-1: SerialNumber: syz
[  521.249451][T10238] usb 2-1: config 0 descriptor??
[  521.468915][T10238] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  521.470554][T19568] Console: switching to colour dummy device 80x25
[  521.889828][T10238] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  522.014368][T10238] usb 2-1: USB disconnect, device number 44
[  522.130060][T19579] tun0: tun_chr_ioctl cmd 1074025675
[  522.130118][T19579] tun0: persist disabled
[  522.289722][T19585] loop1: detected capacity change from 0 to 164
[  522.451829][T10235] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  522.606273][T10235] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  522.614124][T10235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  522.614197][T10235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.630681][T19594] loop1: detected capacity change from 0 to 2048
[  522.636871][T19594] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  522.646228][T10235] usb 1-1: config 0 descriptor??
[  522.686605][T19595] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  522.686745][T19594] syz.1.5270: attempt to access beyond end of device
[  522.686745][T19594] loop1: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  522.868036][T10235] usbhid 1-1:0.0: can't add hid device: -71
[  522.868160][T10235] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  522.883163][T10235] usb 1-1: USB disconnect, device number 50
[  522.973792][T19607] vivid-000: disconnect
[  522.986098][T19609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5277'.
[  522.991148][T19606] vivid-000: reconnect
[  523.042700][T19609] bond5: entered promiscuous mode
[  523.042774][T19609] bond5: entered allmulticast mode
[  523.096646][T19613] loop5: detected capacity change from 0 to 2048
[  523.113299][T19613] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  523.120709][T19615] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  523.121125][T19613] syz.5.5278: attempt to access beyond end of device
[  523.121125][T19613] loop5: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  523.364981][T10235] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  523.426670][T19627] loop1: detected capacity change from 0 to 16
[  523.440330][T19627] erofs (device loop1): mounted with root inode @ nid 36.
[  523.448334][T19627] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808
[  523.448822][T19627] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808
[  523.448847][T19627] erofs (device loop1): read error -117 @ 0 of nid 89
[  523.448990][   T34] audit: type=1800 audit(1700000455.435:102): pid=19627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5285" name="file2" dev="loop1" ino=89 res=0 errno=0
[  523.524512][T10235] usb 1-1: Using ep0 maxpacket: 32
[  523.527555][T10235] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  523.527893][T19631] loop1: detected capacity change from 0 to 2048
[  523.538269][T10235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.538334][T10235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.552024][T19631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.552088][T10235] usb 1-1: config 0 descriptor??
[  523.567895][T10235] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  523.590287][T10235] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  523.671180][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.825536][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5290'.
[  523.866908][T19641] bond7: entered promiscuous mode
[  523.866988][T19641] bond7: entered allmulticast mode
[  523.964810][T10238] usb 1-1: USB disconnect, device number 51
[  523.972216][T10238] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  524.050132][T19651] loop1: detected capacity change from 0 to 4096
[  524.079315][T19651] Cannot load nls iso8859s_names
[  525.547400][T19668] loop0: detected capacity change from 0 to 512
[  525.566779][T19668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  525.575318][T19668] EXT4-fs (loop0): 1 truncate cleaned up
[  525.576732][T19668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  525.576966][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5299'.
[  525.871391][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.031832][T10235] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  526.182324][T10235] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  526.183387][T10235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.183408][T10235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.187309][T10235] usb 2-1: config 0 descriptor??
[  526.395403][T10235] usbhid 2-1:0.0: can't add hid device: -71
[  526.395522][T10235] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  526.397135][T10235] usb 2-1: USB disconnect, device number 45
[  526.831755][T10235] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  526.981583][T10235] usb 2-1: Using ep0 maxpacket: 32
[  526.985688][T10235] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  526.987049][T10235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.987084][T10235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.992511][T10235] usb 2-1: config 0 descriptor??
[  526.995568][T10235] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  526.996769][T10235] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  527.396827][T14521] usb 2-1: USB disconnect, device number 46
[  527.401079][T14521] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  528.992395][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5312'.
[  529.084481][T19707] loop1: detected capacity change from 0 to 512
[  529.093216][T19707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  529.100650][T19707] EXT4-fs (loop1): 1 truncate cleaned up
[  529.106738][T19707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.175449][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.429645][T19728] loop5: detected capacity change from 0 to 512
[  532.433102][T19728] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  532.450740][T19728] EXT4-fs (loop5): 1 truncate cleaned up
[  532.452500][T19728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.545007][ T8188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.818179][T19751] loop0: detected capacity change from 0 to 512
[  535.819599][T19751] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  535.824133][T19751] EXT4-fs (loop0): 1 truncate cleaned up
[  535.825636][T19751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.864809][T10238] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  535.910623][T19757] loop5: detected capacity change from 0 to 2048
[  535.912835][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.978281][T19757] Alternate GPT is invalid, using primary GPT.
[  535.978360][T19757]  loop5: p1 p2 p3
[  535.978594][T19757] loop5: partition table partially beyond EOD, truncated
[  536.014328][T10238] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00
[  536.030296][T10238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  536.030351][T10238] usb 2-1: Product: syz
[  536.030407][T10238] usb 2-1: Manufacturer: syz
[  536.058333][T10238] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  536.058434][T10238] gspca_m5602: Forcing a PO1030 sensor
[  536.126357][T19737] udevd[19737]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  536.130196][T19739] udevd[19739]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  536.138825][T19770] udevd[19770]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  536.253544][T10238] ALi m5602 2-1:1.0: probe with driver ALi m5602 failed with error -71
[  536.259255][T10238] usb 2-1: USB disconnect, device number 47
[  536.342630][T10236] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  536.491366][T10236] usb 1-1: Using ep0 maxpacket: 8
[  536.492502][T10236] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  536.496060][T10236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.496079][T10236] usb 1-1: Product: syz
[  536.496090][T10236] usb 1-1: Manufacturer: syz
[  536.496101][T10236] usb 1-1: SerialNumber: syz
[  536.498946][T10236] usb 1-1: config 0 descriptor??
[  536.670951][T10238] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  536.705213][T10236] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  536.823097][T10238] usb 6-1: Using ep0 maxpacket: 16
[  536.828443][T10238] usb 6-1: unable to get BOS descriptor or descriptor too short
[  536.828532][T10238] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  536.838380][T10238] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.842724][T10238] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  536.849089][T10238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.854089][T10238] usb 6-1: Product: syz
[  536.855956][T10238] usb 6-1: Manufacturer: syz
[  536.858061][T10238] usb 6-1: SerialNumber: syz
[  536.911493][T10236] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  536.915706][T10236] usb 1-1: USB disconnect, device number 52
[  537.085088][T10238] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  537.095004][T10238] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  537.157515][T10238] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  537.164966][T10238] usb 6-1: USB disconnect, device number 71
[  537.193954][T19739] udevd[19739]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  537.627782][T19819] loop1: detected capacity change from 0 to 2048
[  537.661321][T19819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  537.697944][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.692196][T19851] loop1: detected capacity change from 0 to 512
[  538.696256][T19851] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  538.703295][T19851] EXT4-fs (loop1): 1 truncate cleaned up
[  538.704040][T19851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  538.813196][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.959324][T19862] 9pnet: p9_errstr2errno: server reported unknown error 
[  539.090735][T10236] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  539.243337][T10236] usb 2-1: Using ep0 maxpacket: 32
[  539.243909][T10236] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  539.244818][T10236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.244833][T10236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.244875][T10236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.252107][T10236] usb 2-1: config 0 descriptor??
[  539.253645][T10236] hub 2-1:0.0: USB hub found
[  539.270430][T19871] loop0: detected capacity change from 0 to 32768
[  539.275265][T19871] Mount JFS Failure: -5
[  539.277271][T19871] jfs_mount failed w/return code = -5
[  539.439453][T19885] loop0: detected capacity change from 0 to 4096
[  539.455285][T19885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  539.464913][T10236] hub 2-1:0.0: 1 port detected
[  539.474268][T10238] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  539.500597][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.600110][T19890] loop0: detected capacity change from 0 to 2048
[  539.618784][T19890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.623642][T10238] usb 6-1: Using ep0 maxpacket: 8
[  539.626529][T10238] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  539.643034][T10238] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  539.643087][T10238] usb 6-1: Product: syz
[  539.643142][T10238] usb 6-1: Manufacturer: syz
[  539.643175][T10238] usb 6-1: SerialNumber: syz
[  539.657137][T10238] usb 6-1: config 0 descriptor??
[  539.667760][T10238] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  539.673303][T10236] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  539.678756][T10236] usbhid 2-1:0.0: can't add hid device: -71
[  539.678950][T10236] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  539.701566][T10236] usb 2-1: USB disconnect, device number 48
[  539.715289][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.020709][T14521] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  540.068767][T10238] gspca_zc3xx: reg_r err -71
[  540.072236][T10238] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  540.077585][T10238] usb 6-1: USB disconnect, device number 72
[  540.171650][T14521] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  540.176683][T14521] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64
[  540.182345][T14521] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  540.190172][T14521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.193766][T14521] usb 1-1: Product: syz
[  540.195788][T14521] usb 1-1: Manufacturer: syz
[  540.197976][T14521] usb 1-1: SerialNumber: syz
[  540.379375][T19904] loop1: detected capacity change from 0 to 2048
[  540.391886][T19904] NILFS (loop1): invalid segment: Magic number mismatch
[  540.391952][T19904] NILFS (loop1): trying rollback from an earlier position
[  540.407208][T19904] NILFS (loop1): recovery complete
[  540.408200][T19905] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  540.626139][T19896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  540.840217][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5405'.
[  540.880738][T10238] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  541.030758][T10238] usb 2-1: Using ep0 maxpacket: 32
[  541.033261][T10238] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  541.037337][T10238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.042347][T14521] ATM dev 0: failed to start ADSL synchronisation: -71
[  541.042781][    C1] ATM dev 0: usbatm_complete: urb 0xffff88816fa0bd00 failed (-71)!
[  541.042833][    C1] ATM dev 0: usbatm_complete: urb 0xffff8881703dd600 failed (-71)!
[  541.042877][    C1] ATM dev 0: usbatm_complete: urb 0xffff888170ce6800 failed (-71)!
[  541.042899][    C1] ATM dev 0: usbatm_complete: urb 0xffff888170ce6900 failed (-71)!
[  541.056223][T10238] usb 2-1: config 0 descriptor??
[  541.066100][T14521] usb 1-1: USB disconnect, device number 53
[  541.160705][T10235] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  541.262608][T10238] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  541.280824][T10238] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  541.284444][T10238] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  541.331595][T10235] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  541.332901][T10235] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.332938][T10235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.337252][T10235] usb 6-1: config 0 descriptor??
[  541.547789][T10235] usbhid 6-1:0.0: can't add hid device: -71
[  541.547910][T10235] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  541.550706][T10235] usb 6-1: USB disconnect, device number 73
[  541.895802][T19936] loop0: detected capacity change from 0 to 512
[  541.901682][T19936] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  541.914230][T19936] EXT4-fs (loop0): 1 truncate cleaned up
[  541.917930][T19936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  541.950226][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.990602][T10235] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  542.140736][T10235] usb 6-1: Using ep0 maxpacket: 32
[  542.141455][T10235] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  542.143450][T10235] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  542.143485][T10235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.155026][T10235] usb 6-1: config 0 descriptor??
[  542.157518][T10235] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  542.161371][T10235] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  542.613020][   T33] usb 6-1: USB disconnect, device number 74
[  542.616368][   T33] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  543.013949][ T6904] IPVS: starting estimator thread 0...
[  543.101062][T19952] IPVS: using max 48 ests per chain, 115200 per kthread
[  543.174257][T19958] loop0: detected capacity change from 0 to 2048
[  543.185179][T19958] NILFS (loop0): invalid segment: Magic number mismatch
[  543.188646][T19958] NILFS (loop0): trying rollback from an earlier position
[  543.205855][T19958] NILFS (loop0): recovery complete
[  543.212680][T19961] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  543.408228][T19975] loop5: detected capacity change from 0 to 256
[  543.585955][T19983] loop5: detected capacity change from 0 to 256
[  543.587582][T19979] loop0: detected capacity change from 0 to 32768
[  543.590915][T19983] exfat: Deprecated parameter 'utf8'
[  543.594288][T19983] exfat: Deprecated parameter 'utf8'
[  543.596091][T19983] exfat: Deprecated parameter 'utf8'
[  543.599306][T19979] jfs_mount: Failed to read FILESYSTEM_I
[  543.599650][T19979] Mount JFS Failure: -5
[  543.604773][T19983] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  544.250456][T10236] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  544.401277][T10236] usb 1-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[  544.402406][T10236] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  544.402426][T10236] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  544.402444][T10236] usb 1-1: config 0 interface 0 has no altsetting 0
[  544.402462][T10236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.405813][T10236] usb 1-1: config 0 descriptor??
[  544.817807][T10236] hid_parser_main: 4 callbacks suppressed
[  544.818003][T10236] wacom 0003:056A:00B5.0018: unknown main item tag 0x3
[  545.018997][  T804] usb 1-1: USB disconnect, device number 54
[  545.117326][T20012] loop5: detected capacity change from 0 to 32768
[  545.120387][T20012] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5449 (20012)
[  545.129251][T20012] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  545.129305][T20012] BTRFS info (device loop5): using sha256 checksum algorithm
[  545.171401][T20012] BTRFS info (device loop5): enabling ssd optimizations
[  545.171461][T20012] BTRFS info (device loop5): turning on async discard
[  545.171736][T20012] BTRFS info (device loop5): enabling free space tree
[  545.206942][ T8188] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  545.519565][T20037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5454'.
[  545.839765][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810d498000: rx timeout, send abort
[  546.339763][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810d498c00: rx timeout, send abort
[  546.342438][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810d498000: abort rx timeout. Force session deactivation
[  546.618409][T20054] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  546.648079][T20054] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  546.648250][T20054] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  546.648927][T20054] pci 0000:00:01.0: ROM [mem 0xfebe0000-0xfebeffff pref]
[  546.649621][T20054] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  546.668144][T20054] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  546.668182][T20054] pci 0000:00:01.0: vgaarb: bridge control possible
[  546.668194][T20054] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  546.683667][T20054] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  546.683889][T20054] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  546.687124][T20054] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  546.710053][T20054] [drm] Found bochs VGA, ID 0xb0c5.
[  546.710126][T20054] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  546.787369][T20054] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  546.839889][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810d498c00: abort rx timeout. Force session deactivation
[  546.983422][T20065] loop0: detected capacity change from 0 to 2048
[  546.999494][T20065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  547.023086][T20065] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  547.035511][T20054] Console: switching to colour frame buffer device 160x50
[  547.063642][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.103738][T20054] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  547.787876][T20095] loop5: detected capacity change from 0 to 65
[  547.793283][T20095] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  547.793341][T20095] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  547.970181][T10235] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  548.120611][T10235] usb 1-1: Using ep0 maxpacket: 16
[  548.121544][T10235] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  548.122759][T10235] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  548.122781][T10235] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  548.122796][T10235] usb 1-1: config 0 interface 0 has no altsetting 0
[  548.122849][T10235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.125331][T10235] usb 1-1: config 0 descriptor??
[  548.541395][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.541452][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.541630][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.541643][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.541653][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.541663][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.541673][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.541683][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.541693][T10235] cougar 0003:060B:500A.0019: unknown main item tag 0x0
[  548.542060][T10235] cougar 0003:060B:500A.0019: unexpected long global item
[  548.542361][T10235] cougar 0003:060B:500A.0019: parse failed
[  548.542400][T10235] cougar 0003:060B:500A.0019: probe with driver cougar failed with error -22
[  548.743285][T10235] usb 1-1: USB disconnect, device number 55
[  548.894173][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5485'.
[  548.898537][T20107] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5485'.
[  549.056176][T20109] loop5: detected capacity change from 0 to 128
[  549.063427][T20109] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  549.075323][T20109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  549.345080][T20117] loop0: detected capacity change from 0 to 4096
[  549.348467][T20117] EXT4-fs (loop0): Test dummy encryption mode enabled
[  549.353716][T20117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.395498][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.440241][T14521] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  549.590674][T14521] usb 6-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[  549.594889][T14521] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  549.598892][T14521] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  549.603526][T14521] usb 6-1: config 0 interface 0 has no altsetting 0
[  549.607444][T14521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.612929][T14521] usb 6-1: config 0 descriptor??
[  550.013398][T20142] loop0: detected capacity change from 0 to 128
[  550.015024][T20142] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  550.017244][T20142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  550.033756][T14521] usbhid 6-1:0.0: can't add hid device: -71
[  550.033856][T14521] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  550.054834][T14521] usb 6-1: USB disconnect, device number 75
[  550.441328][T10236] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  550.590359][T10236] usb 1-1: Using ep0 maxpacket: 8
[  550.591195][T10236] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  550.601715][T10236] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  550.601778][T10236] usb 1-1: Product: syz
[  550.601856][T10236] usb 1-1: Manufacturer: syz
[  550.601890][T10236] usb 1-1: SerialNumber: syz
[  550.605882][T10236] usb 1-1: config 0 descriptor??
[  550.613495][T10236] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  550.814770][T10236] gspca_zc3xx: reg_w_i err -71
[  550.814903][T10236] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  550.819423][T10236] usb 1-1: USB disconnect, device number 56
[  550.875748][T20182] loop5: detected capacity change from 0 to 128
[  550.878498][T20182] udf: Bad value for 'fileset'
[  551.835965][T20191] loop5: detected capacity change from 0 to 256
[  551.846503][T20191] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  552.319904][   T33] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  552.326253][T20201] loop0: detected capacity change from 0 to 512
[  552.329326][T20201] EXT4-fs: Ignoring removed oldalloc option
[  552.339697][T20201] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4702: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  552.345567][T20201] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  552.467372][T20207] loop0: detected capacity change from 0 to 1024
[  552.469975][   T33] usb 6-1: Using ep0 maxpacket: 8
[  552.475676][   T33] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  552.483001][   T33] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  552.483049][   T33] usb 6-1: Product: syz
[  552.483083][   T33] usb 6-1: Manufacturer: syz
[  552.483116][   T33] usb 6-1: SerialNumber: syz
[  552.496380][   T33] usb 6-1: config 0 descriptor??
[  552.504200][T20207] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  552.508508][   T33] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  552.513947][T20207] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  552.518886][T20207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.529386][T20207] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  552.555451][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.707643][   T33] gspca_zc3xx: reg_w_i err -71
[  552.709494][   T33] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  552.715224][   T33] usb 6-1: USB disconnect, device number 76
[  552.744170][T20213] loop0: detected capacity change from 0 to 4096
[  552.747420][T20213] EXT4-fs (loop0): Test dummy encryption mode enabled
[  552.753702][T20213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.776480][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.682348][T20236] loop0: detected capacity change from 0 to 1024
[  553.685898][T20236] EXT4-fs: Ignoring removed nomblk_io_submit option
[  553.703352][T20236] EXT4-fs (loop0): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  553.718853][T20236] ext4 filesystem being mounted at /704/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  553.729211][T20236] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.5542: bg 0: block 112: padding at end of block bitmap is not set
[  553.738716][T20236] EXT4-fs (loop0): Remounting filesystem read-only
[  553.767808][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0100-0006-0000-000000000000.
[  554.280342][T20266] loop1: detected capacity change from 0 to 16
[  554.292895][T20266] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  554.293176][T20266] erofs (device loop1): mounted with root inode @ nid 36.
[  554.303565][T20266] syz.1.5555: attempt to access beyond end of device
[  554.303565][T20266] loop1: rw=0, sector=0, nr_sectors = 1025 limit=16
[  554.306731][T20266] erofs (device loop1): read error -5 @ 0 of nid 36
[  554.315338][T20266] syz.1.5555: attempt to access beyond end of device
[  554.315338][T20266] loop1: rw=0, sector=0, nr_sectors = 1025 limit=16
[  554.317204][T20266] erofs (device loop1): read error -5 @ 0 of nid 36
[  554.677965][T20289] FAULT_INJECTION: forcing a failure.
[  554.677965][T20289] name failslab, interval 1, probability 0, space 0, times 0
[  554.688949][T20289] CPU: 1 UID: 0 PID: 20289 Comm: syz.1.5565 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.689000][T20289] Tainted: [L]=SOFTLOCKUP
[  554.689006][T20289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  554.689015][T20289] Call Trace:
[  554.689022][T20289]  <TASK>
[  554.689028][T20289]  dump_stack_lvl+0xe8/0x150
[  554.689109][T20289]  should_fail_ex+0x410/0x560
[  554.689170][T20289]  should_failslab+0xa8/0x100
[  554.689188][T20289]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  554.689210][T20289]  ? __d_lookup+0x66/0x790
[  554.689231][T20289]  ? __d_alloc+0x37/0x6f0
[  554.689248][T20289]  ? __d_alloc+0x37/0x6f0
[  554.689271][T20289]  __d_alloc+0x37/0x6f0
[  554.689294][T20289]  d_alloc+0x4b/0x190
[  554.689311][T20289]  ? lookup_one_qstr_excl+0xc4/0x360
[  554.689332][T20289]  lookup_one_qstr_excl+0xd8/0x360
[  554.689351][T20289]  ? lookup_noperm_common+0x245/0x430
[  554.689371][T20289]  start_dirop+0x5c/0x90
[  554.689389][T20289]  simple_start_creating+0xcc/0x110
[  554.689432][T20289]  ? __pfx_simple_start_creating+0x10/0x10
[  554.689459][T20289]  devpts_fill_super+0x2bc/0x520
[  554.689480][T20289]  ? __pfx_devpts_fill_super+0x10/0x10
[  554.689499][T20289]  get_tree_nodev+0xbb/0x150
[  554.689521][T20289]  vfs_get_tree+0x92/0x2a0
[  554.689543][T20289]  do_new_mount+0x319/0xdc0
[  554.689565][T20289]  ? __pfx_do_new_mount+0x10/0x10
[  554.689584][T20289]  ? ns_capable+0x89/0xe0
[  554.689603][T20289]  ? path_mount+0x647/0x1050
[  554.689622][T20289]  ? user_path_at+0xd4/0x160
[  554.689642][T20289]  __se_sys_mount+0x31d/0x420
[  554.689664][T20289]  ? __pfx___se_sys_mount+0x10/0x10
[  554.689685][T20289]  ? __x64_sys_mount+0x20/0xc0
[  554.689704][T20289]  do_syscall_64+0x166/0x520
[  554.689756][T20289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.689802][T20289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.689817][T20289] RIP: 0033:0x7fad9799e159
[  554.689832][T20289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.689845][T20289] RSP: 002b:00007fad98843028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  554.689861][T20289] RAX: ffffffffffffffda RBX: 00007fad97c25fa0 RCX: 00007fad9799e159
[  554.689873][T20289] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000
[  554.689881][T20289] RBP: 00007fad97a3506b R08: 0000000000000000 R09: 0000000000000000
[  554.689891][T20289] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  554.689901][T20289] R13: 00007fad97c26038 R14: 00007fad97c25fa0 R15: 00007ffedb6e25f8
[  554.689923][T20289]  </TASK>
[  554.808134][T20289] devpts: Unable to alloc dentry for ptmx node
[  555.137221][T20313] loop0: detected capacity change from 0 to 32768
[  555.137943][T20313] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  555.143638][T20313] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5576 (20313)
[  555.153047][T20313] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  555.153087][T20313] BTRFS info (device loop0): using crc32c checksum algorithm
[  555.268281][T20313] BTRFS info (device loop0): rebuilding free space tree
[  555.296929][T20313] BTRFS info (device loop0): disabling free space tree
[  555.297033][T20313] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  555.297094][T20313] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  555.311006][T20313] BTRFS info (device loop0): enabling ssd optimizations
[  555.311045][T20313] BTRFS info (device loop0): turning on async discard
[  555.311089][T20313] BTRFS info (device loop0): force clearing of disk cache
[  555.311116][T20313] BTRFS info (device loop0): use zstd compression, level 3
[  555.807821][T14279] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  556.157275][T20356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5589'.
[  558.786293][T20428] loop1: detected capacity change from 0 to 1024
[  558.797398][T20428] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  558.801698][T20428] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  558.802726][T20428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.815734][T20428] syz.1.5620 (pid 20428) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  558.842493][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.959575][  T804] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  559.110850][  T804] usb 1-1: Using ep0 maxpacket: 32
[  559.113684][  T804] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  559.121368][  T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.124680][  T804] usb 1-1: Product: syz
[  559.126544][  T804] usb 1-1: Manufacturer: syz
[  559.128607][  T804] usb 1-1: SerialNumber: syz
[  559.133197][  T804] usb 1-1: config 0 descriptor??
[  559.138735][  T804] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  559.142496][  T804] dvb-usb: bulk message failed: -22 (4/0)
[  559.147080][  T804] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  559.151355][  T804] dvb-usb: bulk message failed: -22 (5/0)
[  559.153812][  T804] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  559.161161][  T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  559.164922][  T804] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  559.168274][  T804] usb 1-1: media controller created
[  559.181954][  T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  559.208120][  T804] usb 1-1: selecting invalid altsetting 3
[  559.210717][  T804] ttusb2: set interface to alts=3 failed
[  559.239234][  T804] DVB: Unable to find symbol tda10086_attach()
[  559.239280][  T804] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  559.245870][  T804] dvb-usb: bulk message failed: -22 (4/0)
[  559.248180][  T804] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  559.252950][  T804] dvb-usb: bulk message failed: -22 (5/0)
[  559.255290][  T804] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  559.259623][  T804] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  559.345441][  T804] usb 1-1: USB disconnect, device number 57
[  559.356507][ T5651] hid_parser_main: 72 callbacks suppressed
[  559.356725][ T5651] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  559.359280][ T5651] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  559.386376][  T804] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  559.487320][T20447] loop5: detected capacity change from 0 to 32768
[  559.488441][T20447] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  559.489711][T20447] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5627 (20447)
[  559.495461][T20447] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  559.495483][T20447] BTRFS info (device loop5): using crc32c checksum algorithm
[  559.564414][T20447] BTRFS info (device loop5): rebuilding free space tree
[  559.589674][T20447] BTRFS info (device loop5): disabling free space tree
[  559.589765][T20447] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  559.589812][T20447] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  559.593690][T20447] BTRFS info (device loop5): enabling ssd optimizations
[  559.593702][T20447] BTRFS info (device loop5): turning on async discard
[  559.593709][T20447] BTRFS info (device loop5): force clearing of disk cache
[  559.593717][T20447] BTRFS info (device loop5): use zstd compression, level 3
[  559.995868][ T8188] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  560.200814][T20475] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  560.330046][T20480] loop0: detected capacity change from 0 to 1024
[  560.350179][T20480] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  560.354017][T20480] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  560.354825][T20480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  560.410094][T14279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.487868][T20488] loop0: detected capacity change from 0 to 64
[  560.633461][T10236] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  560.728295][T20506] loop0: detected capacity change from 0 to 64
[  560.793055][T10236] usb 6-1: Using ep0 maxpacket: 32
[  560.795253][T10236] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00
[  560.795283][T10236] usb 6-1: no configurations
[  560.795293][T10236] usb 6-1: can't read configurations, error -22
[  560.919903][T10236] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  561.069479][T10236] usb 6-1: Using ep0 maxpacket: 32
[  561.070320][T10236] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00
[  561.070586][T10236] usb 6-1: no configurations
[  561.070838][T10236] usb 6-1: can't read configurations, error -22
[  561.071122][T10236] usb usb6-port1: attempt power cycle
[  561.087620][T20520] loop1: detected capacity change from 0 to 32768
[  561.088277][T20520] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  561.101205][T20520] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5653 (20520)
[  561.110816][T20520] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  561.110832][T20520] BTRFS info (device loop1): using crc32c checksum algorithm
[  561.220895][T20520] BTRFS info (device loop1): rebuilding free space tree
[  561.233545][T20520] BTRFS info (device loop1): disabling free space tree
[  561.233600][T20520] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  561.233645][T20520] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  561.246513][T20520] BTRFS info (device loop1): enabling ssd optimizations
[  561.246547][T20520] BTRFS info (device loop1): turning on async discard
[  561.246590][T20520] BTRFS info (device loop1): force clearing of disk cache
[  561.246616][T20520] BTRFS info (device loop1): use zstd compression, level 3
[  561.440688][T10236] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  561.462855][T10236] usb 6-1: Using ep0 maxpacket: 32
[  561.463527][T10236] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00
[  561.463556][T10236] usb 6-1: no configurations
[  561.463565][T10236] usb 6-1: can't read configurations, error -22
[  561.612927][T10236] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  561.631102][T10236] usb 6-1: Using ep0 maxpacket: 32
[  561.631903][T10236] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00
[  561.631931][T10236] usb 6-1: no configurations
[  561.631940][T10236] usb 6-1: can't read configurations, error -22
[  561.632104][T10236] usb usb6-port1: unable to enumerate USB device
[  561.854200][T14290] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  562.785272][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  562.785351][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  562.825330][    C1] vcan0: j1939_tp_rxtimer: 0xffff88817b07f000: rx timeout, send abort
[  563.325349][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816ba21800: rx timeout, send abort
[  563.328749][    C1] vcan0: j1939_tp_rxtimer: 0xffff88817b07f000: abort rx timeout. Force session deactivation
[  563.809757][T20584] loop1: detected capacity change from 0 to 32768
[  563.810319][T20584] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  563.810717][T20584] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5672 (20584)
[  563.816165][T20584] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  563.816190][T20584] BTRFS info (device loop1): using crc32c checksum algorithm
[  563.827594][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816ba21800: abort rx timeout. Force session deactivation
[  563.906792][T20584] BTRFS info (device loop1): rebuilding free space tree
[  563.927217][T20584] BTRFS info (device loop1): disabling free space tree
[  563.927299][T20584] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  563.927344][T20584] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  563.937265][T20584] BTRFS info (device loop1): enabling ssd optimizations
[  563.937279][T20584] BTRFS info (device loop1): turning on async discard
[  563.937286][T20584] BTRFS info (device loop1): force clearing of disk cache
[  563.937294][T20584] BTRFS info (device loop1): use zstd compression, level 3
[  564.192028][T20605] macvtap0: entered promiscuous mode
[  564.195340][T20605] mmap: syz.0.5675 (20605) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  564.440624][T14290] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  564.770431][T20623] loop5: detected capacity change from 0 to 1024
[  564.772094][T20623] EXT4-fs: Ignoring removed i_version option
[  564.772669][T20623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  564.772911][T20623] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  564.783792][T20623] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  564.784083][T20623] EXT4-fs (loop5): orphan cleanup on readonly fs
[  564.784465][T20623] EXT4-fs error (device loop5): ext4_free_blocks:6719: comm syz.5.5682: Freeing blocks not in datazone - block = 0, count = 4096
[  564.784487][T20623] loop5: lost filesystem error report for type 5 error -117
[  564.784857][T20623] EXT4-fs (loop5): Remounting filesystem read-only
[  564.784935][T20623] EXT4-fs (loop5): 1 orphan inode deleted
[  564.786207][T20623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  564.832302][T20626] netlink: 'syz.1.5683': attribute type 34 has an invalid length.
[  564.832338][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5683'.
[  564.853624][ T8188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.858259][T20626] bond9: option lacp_strict: invalid value (36)
[  564.885528][T20626] bond9 (unregistering): Released all slaves
[  565.106318][T20638] loop1: detected capacity change from 0 to 256
[  565.239213][T10236] usb 6-1: new full-speed USB device number 81 using dummy_hcd
[  565.409845][T10236] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  565.410889][T10236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.414948][T10236] usb 6-1: config 0 descriptor??
[  565.416892][T10236] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  565.619411][T10236] gp8psk: usb in 128 operation failed.
[  565.822292][T10236] gp8psk: usb in 146 operation failed.
[  565.822340][T10236] gp8psk: failed to get FW version
[  565.824136][T10236] gp8psk: usb in 149 operation failed.
[  565.824145][T10236] gp8psk: failed to get FPGA version
[  565.824514][T10236] gp8psk: usb in 138 operation failed.
[  565.824522][T10236] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  565.824537][T10236] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  565.828553][T10236] usb 6-1: USB disconnect, device number 81
[  565.886163][T20651] loop0: detected capacity change from 0 to 1024
[  565.891047][T20651] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  566.151550][T20663] trusted_key: encrypted_key: keylen parameter is missing
[  566.251809][T20669] loop1: detected capacity change from 0 to 1024
[  566.258199][T20669] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  566.266674][T20669] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  566.267555][T20669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.304273][T14290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.517851][T20685] trusted_key: encrypted_key: insufficient parameters specified
[  566.526080][T20685] trusted_key: encrypted_key: keylen parameter is missing
[  566.689037][T10235] usb 6-1: new full-speed USB device number 82 using dummy_hcd
[  566.840061][T10235] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  566.841200][T10235] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  566.841218][T10235] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  566.841232][T10235] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  566.841247][T10235] usb 6-1: config 1 has no interface number 0
[  566.841294][T10235] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  566.841311][T10235] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  566.841340][T10235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.848832][T10235] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  567.058648][T10235] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  567.480068][T10236] usb 6-1: USB disconnect, device number 82
[  567.481053][T10236] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  569.500969][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881be285400: rx timeout, send abort
[  570.001008][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881be287c00: rx timeout, send abort
[  570.001072][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881be285400: abort rx timeout. Force session deactivation
[  570.189803][T20714] loop5: detected capacity change from 0 to 512
[  570.195644][T20714] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  570.205430][T20714] EXT4-fs (loop5): 1 truncate cleaned up
[  570.234643][T20714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.249504][T20714] EXT4-fs (loop5): Online defrag not supported for non-extent files
[  570.277907][ T8188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.501108][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881be287c00: abort rx timeout. Force session deactivation
[  571.970480][T20751] LUN: removable file: (no medium)
[  571.976139][T20751] 
[  571.977175][T20751] ======================================================
[  571.979875][T20751] WARNING: possible circular locking dependency detected
[  571.982580][T20751] syzkaller #0 Tainted: G             L     
[  571.985024][T20751] ------------------------------------------------------
[  571.987789][T20751] syz.1.5738/20751 is trying to acquire lock:
[  571.990179][T20751] ffffffff8fc10448 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5f0/0x950
[  571.993972][T20751] 
[  571.993972][T20751] but task is already holding lock:
[  571.996817][T20751] ffff888111c84f80 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0
[  572.000379][T20751] 
[  572.000379][T20751] which lock already depends on the new lock.
[  572.000379][T20751] 
[  572.004409][T20751] 
[  572.004409][T20751] the existing dependency chain (in reverse order) is:
[  572.007924][T20751] 
[  572.007924][T20751] -> #3 (&sb->s_type->i_mutex_key#29){++++}-{4:4}:
[  572.011204][T20751]        down_write+0x96/0x200
[  572.013145][T20751]        configfs_depend_item_unlocked+0x153/0x420
[  572.015456][T20751]        usbg_make_tpg+0x1e0/0x550
[  572.017427][T20751]        target_fabric_make_tpg+0xa8/0x6d0
[  572.019838][T20751]        configfs_mkdir+0x4f6/0x9e0
[  572.021976][T20751]        vfs_mkdir+0x40c/0x620
[  572.023924][T20751]        filename_mkdirat+0x285/0x510
[  572.025924][T20751]        __se_sys_mkdirat+0x35/0x150
[  572.027863][T20751]        do_syscall_64+0x166/0x520
[  572.029674][T20751]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.032195][T20751] 
[  572.032195][T20751] -> #2 (tpg_instances_lock){+.+.}-{4:4}:
[  572.035214][T20751]        __mutex_lock+0x19d/0x1550
[  572.037093][T20751]        tcm_alloc_inst+0x65/0x1a0
[  572.038918][T20751]        usb_get_function_instance+0xe3/0x2f0
[  572.041349][T20751]        function_make+0x127/0x360
[  572.043417][T20751]        configfs_mkdir+0x4f6/0x9e0
[  572.045329][T20751]        vfs_mkdir+0x40c/0x620
[  572.047217][T20751]        filename_mkdirat+0x285/0x510
[  572.049373][T20751]        __se_sys_mkdirat+0x35/0x150
[  572.051375][T20751]        do_syscall_64+0x166/0x520
[  572.053423][T20751]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.055992][T20751] 
[  572.055992][T20751] -> #1 (func_lock){+.+.}-{4:4}:
[  572.058586][T20751]        __mutex_lock+0x19d/0x1550
[  572.060542][T20751]        usb_get_function_instance+0x2e/0x2f0
[  572.063033][T20751]        function_make+0x127/0x360
[  572.064914][T20751]        configfs_mkdir+0x4f6/0x9e0
[  572.066884][T20751]        vfs_mkdir+0x40c/0x620
[  572.068856][T20751]        filename_mkdirat+0x285/0x510
[  572.071026][T20751]        __se_sys_mkdirat+0x35/0x150
[  572.073169][T20751]        do_syscall_64+0x166/0x520
[  572.075292][T20751]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.077796][T20751] 
[  572.077796][T20751] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  572.081185][T20751]        __lock_acquire+0x15ff/0x2e50
[  572.083382][T20751]        lock_acquire+0x115/0x350
[  572.085481][T20751]        __mutex_lock+0x19d/0x1550
[  572.087628][T20751]        configfs_rmdir+0x5f0/0x950
[  572.089758][T20751]        vfs_rmdir+0x3e6/0x6a0
[  572.091591][T20751]        filename_rmdir+0x292/0x520
[  572.093625][T20751]        __se_sys_rmdir+0x2e/0x140
[  572.095708][T20751]        do_syscall_64+0x166/0x520
[  572.097601][T20751]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.100276][T20751] 
[  572.100276][T20751] other info that might help us debug this:
[  572.100276][T20751] 
[  572.104361][T20751] Chain exists of:
[  572.104361][T20751]   gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#29
[  572.104361][T20751] 
[  572.110248][T20751]  Possible unsafe locking scenario:
[  572.110248][T20751] 
[  572.113226][T20751]        CPU0                    CPU1
[  572.115374][T20751]        ----                    ----
[  572.117451][T20751]   lock(&sb->s_type->i_mutex_key#29);
[  572.119695][T20751]                                lock(tpg_instances_lock);
[  572.122592][T20751]                                lock(&sb->s_type->i_mutex_key#29);
[  572.125815][T20751]   lock(gadget_subsys.su_mutex);
[  572.127892][T20751] 
[  572.127892][T20751]  *** DEADLOCK ***
[  572.127892][T20751] 
[  572.131130][T20751] locks held by syz.1.5738/20751: 3, last CPU#0:
[  572.133708][T20751]  #0: ffff8881692b8460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  572.137417][T20751]  #1: ffff8881be463580 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520
[  572.141945][T20751]  #2: ffff888111c84f80 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0
[  572.145971][T20751] 
[  572.145971][T20751] stack backtrace:
[  572.148387][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.1.5738 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  572.152787][T20751] Tainted: [L]=SOFTLOCKUP
[  572.154494][T20751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  572.158360][T20751] Call Trace:
[  572.159644][T20751]  <TASK>
[  572.160821][T20751]  dump_stack_lvl+0xe8/0x150
[  572.162629][T20751]  print_circular_bug+0x2e2/0x300
[  572.164652][T20751]  check_noncircular+0x12f/0x150
[  572.166628][T20751]  __lock_acquire+0x15ff/0x2e50
[  572.168643][T20751]  ? set_normalized_timespec64+0xf0/0x1a0
[  572.170916][T20751]  ? __lock_acquire+0x6df/0x2e50
[  572.172923][T20751]  lock_acquire+0x115/0x350
[  572.174736][T20751]  ? configfs_rmdir+0x5f0/0x950
[  572.176702][T20751]  __mutex_lock+0x19d/0x1550
[  572.178571][T20751]  ? configfs_rmdir+0x5f0/0x950
[  572.180484][T20751]  ? do_raw_spin_unlock+0x4d/0x200
[  572.182551][T20751]  ? reacquire_held_locks+0x117/0x1a0
[  572.184730][T20751]  ? configfs_rmdir+0x5f0/0x950
[  572.186738][T20751]  ? __pfx___mutex_lock+0x10/0x10
[  572.188818][T20751]  ? _raw_spin_unlock+0x28/0x50
[  572.190797][T20751]  ? fast_dput+0x481/0x690
[  572.192621][T20751]  configfs_rmdir+0x5f0/0x950
[  572.194560][T20751]  vfs_rmdir+0x3e6/0x6a0
[  572.196308][T20751]  ? bpf_lsm_path_rmdir+0x9/0x20
[  572.198318][T20751]  filename_rmdir+0x292/0x520
[  572.200251][T20751]  ? __pfx_filename_rmdir+0x10/0x10
[  572.202352][T20751]  ? do_getname+0x151/0x250
[  572.204236][T20751]  __se_sys_rmdir+0x2e/0x140
[  572.206162][T20751]  do_syscall_64+0x166/0x520
[  572.208066][T20751]  ? trace_irq_disable+0x3b/0x140
[  572.210087][T20751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.212521][T20751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.214909][T20751] RIP: 0033:0x7fad9799e159
[  572.216709][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.224263][T20751] RSP: 002b:00007fad98843028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  572.227544][T20751] RAX: ffffffffffffffda RBX: 00007fad97c25fa0 RCX: 00007fad9799e159
[  572.230711][T20751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[  572.233852][T20751] RBP: 00007fad97a3506b R08: 0000000000000000 R09: 0000000000000000
[  572.236996][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  572.240189][T20751] R13: 00007fad97c26038 R14: 00007fad97c25fa0 R15: 00007ffedb6e25f8
[  572.243370][T20751]  </TASK>
