last executing test programs:

16m27.006745668s ago: executing program 32 (id=735):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0)

14m56.973414625s ago: executing program 33 (id=1858):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0, 0x4}, 0x20)

9m41.164266046s ago: executing program 34 (id=6856):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendto(r2, &(0x7f00000000c0)='N', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2, 0x0, 0x52}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x989680})

9m33.736992992s ago: executing program 35 (id=6971):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f)

9m32.536418242s ago: executing program 36 (id=6984):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94)

9m9.499422802s ago: executing program 37 (id=7243):
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet(0x2, 0x1, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00'})
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090)
close_range(r0, 0xffffffffffffffff, 0x0)

8m50.866753642s ago: executing program 5 (id=7451):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setown(r0, 0x8, 0x0)
fcntl$setlease(r0, 0x400, 0x2)

8m50.718195787s ago: executing program 5 (id=7453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd99, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m50.401895055s ago: executing program 5 (id=7456):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000240)=[{0x13, '\x00', @data=0x6ac, 0x7ff}, {0xb, '\x00', @data=0xffffff7a, 0xb}, {0x34, '\x00', @st={0x4, [{0x0, @svalue=0x2}, {0x2, @svalue=0x27}, {0x1, @svalue=0xffffffffffff0004}, {0x0, @uvalue=0x5}]}, 0x13}]})

8m50.304315404s ago: executing program 5 (id=7457):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

8m50.087014609s ago: executing program 5 (id=7460):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffff9, @loopback, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)='a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0xc8844)

8m47.450684186s ago: executing program 5 (id=7468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000004"], 0x98}}, 0x0)

8m46.89138827s ago: executing program 38 (id=7468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000004"], 0x98}}, 0x0)

8m35.806073575s ago: executing program 9 (id=7469):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x40000})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r1, 0x3, 0x6, 0x4001})

8m35.722454033s ago: executing program 9 (id=7529):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040))

8m35.550704169s ago: executing program 9 (id=7531):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x7, 0x0, 0x6, 0x1000000002, 0x8000000, 0x80000000})

8m35.328029534s ago: executing program 9 (id=7533):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000030000000000000000efff000000000000000000"], 0x50)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x358, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
timer_create(0x7, 0x0, &(0x7f0000000180)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0xe94d, 0x1, 0x4, 0x0, 0x86})
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)

8m22.24168839s ago: executing program 7 (id=7606):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500002d003a2d002e0040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564703a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084)

8m22.177561555s ago: executing program 7 (id=7607):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x200000000000000, &(0x7f0000000580)="b318"})

8m22.120500956s ago: executing program 7 (id=7608):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c)

8m22.071622031s ago: executing program 7 (id=7609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff1, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090)

8m21.708633849s ago: executing program 8 (id=7611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x23, 0x4, 0xfffffff9, 0x400, 0x8, "6ffc9b", 0x7}})

8m21.669698662s ago: executing program 8 (id=7612):
socket$igmp(0x2, 0x3, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
rt_sigprocmask(0x1, &(0x7f0000000040)={[0x80000000]}, 0x0, 0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffff9, 0x7, 0x104, 0x8001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x0, 0x12, 0x80000006, 0x6}, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x1, 0x71, 0x100200000009})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}, {}, {}, {0xdd86}, {0x8, 0x22eb, 0x7ffffff}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r3, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x2000, r4, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})

8m20.477407406s ago: executing program 7 (id=7613):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
read$FUSE(r1, &(0x7f0000001380)={0x2020}, 0x2020)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

8m20.062255547s ago: executing program 39 (id=7533):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000030000000000000000efff000000000000000000"], 0x50)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x358, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
timer_create(0x7, 0x0, &(0x7f0000000180)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0xe94d, 0x1, 0x4, 0x0, 0x86})
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)

8m20.00710041s ago: executing program 8 (id=7615):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010003704000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00450200000000001800128009000100697069700000000008000280040013001400030074756e6c30"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x40020)

8m19.883218679s ago: executing program 8 (id=7616):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="00008000", 0x4)

8m19.829745748s ago: executing program 8 (id=7617):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
ftruncate(r3, 0xc17a)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)

8m19.58158886s ago: executing program 8 (id=7618):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m19.196085674s ago: executing program 7 (id=7619):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)
recvfrom(r2, &(0x7f00000003c0)=""/71, 0xfffffffffffffe83, 0x122, 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x9)

6m49.870879548s ago: executing program 40 (id=7619):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)
recvfrom(r2, &(0x7f00000003c0)=""/71, 0xfffffffffffffe83, 0x122, 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x9)

6m18.32489652s ago: executing program 41 (id=7618):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m57.258397911s ago: executing program 3 (id=7667):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x174990ee68771fbc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m56.890489313s ago: executing program 3 (id=7669):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)

5m56.652891686s ago: executing program 3 (id=7671):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = dup(r1)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)

5m56.299319259s ago: executing program 3 (id=7674):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

5m55.958159615s ago: executing program 3 (id=7676):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)

5m55.61095977s ago: executing program 3 (id=7684):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa)

5m55.544018304s ago: executing program 42 (id=7684):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa)

4m39.457888976s ago: executing program 4 (id=8562):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000))

4m39.402840384s ago: executing program 4 (id=8563):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x142, 0xfffffffc)

4m39.30961134s ago: executing program 4 (id=8565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

4m39.302885126s ago: executing program 4 (id=8566):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

4m39.270654758s ago: executing program 4 (id=8567):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'bond0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "ecad80", 0x10, 0x3a, 0xff, @local, @private0, {[], @ni={0x8b, 0x0, 0x0, 0x100, 0x4, 0xf85}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x34, 0x0, 0x0, 0x7}, 0x28)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe)

4m38.939695117s ago: executing program 4 (id=8568):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800)
r1 = syz_io_uring_setup(0x77a2, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x20000, 0x158, 0x0, r0}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000580)={<r6=>0xffffffffffffffff}, 0x0)
unshare(0x20000600)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
tee(r6, r7, 0x60000000000, 0x0)

4m38.762623923s ago: executing program 43 (id=8568):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800)
r1 = syz_io_uring_setup(0x77a2, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x20000, 0x158, 0x0, r0}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000580)={<r6=>0xffffffffffffffff}, 0x0)
unshare(0x20000600)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
tee(r6, r7, 0x60000000000, 0x0)

2m44.547704846s ago: executing program 2 (id=9794):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0)

2m44.547587649s ago: executing program 2 (id=9795):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x7}, {0x2, 0x1}, {0xffec, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000)

2m44.460086165s ago: executing program 2 (id=9796):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@host, 0x2})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000100)={@any, 0x7})

2m44.456776051s ago: executing program 2 (id=9797):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x802000, 0x0)

2m44.412223973s ago: executing program 2 (id=9798):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioprio_set$pid(0x2, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)

2m44.263210503s ago: executing program 2 (id=9799):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)="f931c2121e4d32237bd73fc131", 0xd}, 0x1, 0x0, 0x0, 0x40001}, 0x40810)

2m44.167310081s ago: executing program 44 (id=9799):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)="f931c2121e4d32237bd73fc131", 0xd}, 0x1, 0x0, 0x0, 0x40001}, 0x40810)

3.293925388s ago: executing program 1 (id=11445):
clock_gettime(0x6, &(0x7f0000004340))

3.255083911s ago: executing program 1 (id=11446):
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a0010000100000905", @ANYRES16], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x10, 0x3, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51)

2.565284193s ago: executing program 6 (id=11454):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000180)='&')

2.468310218s ago: executing program 6 (id=11455):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0)

2.415943988s ago: executing program 6 (id=11456):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@journal_checksum}, {@noblock_validity}, {@bh}, {@init_itable}, {@data_err_ignore}]}, 0x0, 0x642, &(0x7f0000000200)="$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")

2.199754664s ago: executing program 6 (id=11457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)

1.220756527s ago: executing program 6 (id=11459):
r0 = socket(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id, 0x10)
sendmmsg$unix(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}, {{&(0x7f0000004180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4050}}], 0x2, 0x101d0)

1.134328459s ago: executing program 6 (id=11460):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwrite64(r0, 0x0, 0x0, 0x4)

969.209272ms ago: executing program 0 (id=11463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0)

922.524427ms ago: executing program 0 (id=11464):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], 0xff, 0x6109, &(0x7f0000000940)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x2)
r1 = openat(r0, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)

602.609045ms ago: executing program 0 (id=11465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x18, 0x40, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8000, 0x3, 0x7}}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x800)

384.051051ms ago: executing program 0 (id=11466):
r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000)

339.001551ms ago: executing program 0 (id=11467):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0)

336.358578ms ago: executing program 0 (id=11468):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0)

140.046882ms ago: executing program 1 (id=11469):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108)

137.258917ms ago: executing program 1 (id=11470):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800)

63.819739ms ago: executing program 1 (id=11471):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40008)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r0, &(0x7f0000000040), 0x2)

0s ago: executing program 1 (id=11472):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
rmdir(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/ffs.usb0\x00')

kernel console output (not intermixed with test programs):

age index out of array
[  994.101070][T32096] hpfs: code page support is disabled
[  994.107895][T32096] hpfs: hpfs_map_4sectors(): unaligned read
[  994.110692][T32096] hpfs: hpfs_map_4sectors(): unaligned read
[  994.112913][T32096] hpfs: filesystem error: unable to find root dir
[  994.124362][T32096] hpfs: hpfs_map_4sectors(): unaligned read
[  994.310863][T32098] syzkaller0: entered promiscuous mode
[  994.315486][T32098] syzkaller0: entered allmulticast mode
[  994.483013][T32102] loop6: detected capacity change from 0 to 8
[  994.728667][T32107] loop0: detected capacity change from 0 to 32768
[  994.750557][T32107] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  994.765778][T32107] XFS (loop0): Ending clean mount
[  994.785824][T27368] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  995.433644][T32141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10364'.
[  995.497184][T32148] openvswitch: netlink: IP tunnel dst address not specified
[  995.711933][T32171] loop1: detected capacity change from 0 to 256
[  995.719555][T32171] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  995.724077][T32170] : entered promiscuous mode
[  995.730346][T32170] bond_slave_0: entered promiscuous mode
[  995.733050][T32170] bond_slave_1: entered promiscuous mode
[  995.799452][T32176] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.10380'.
[  995.846585][T32181] Invalid argument reading file caps for ./file0
[  996.012809][T32194] option changes via remount are deprecated (pid=32193 comm=syz.6.10389)
[  996.560362][T32200] netlink: 'syz.1.10391': attribute type 8 has an invalid length.
[  996.563880][T32200] bridge0: entered allmulticast mode
[  996.777459][T32202] loop1: detected capacity change from 0 to 32768
[  996.781027][T32202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10392 (32202)
[  996.792858][T32202] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  996.798436][T32202] BTRFS info (device loop1): using sha256 checksum algorithm
[  996.859969][T32218] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  996.889033][T32202] BTRFS info (device loop1): enabling ssd optimizations
[  996.892984][T32202] BTRFS info (device loop1): turning on async discard
[  996.895240][T32202] BTRFS info (device loop1): enabling free space tree
[  996.910129][T32222] loop0: detected capacity change from 0 to 128
[  996.918997][T32222] vfat: Unexpected value for 'dos1xfloppy'
[  996.925730][T32222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10395'.
[  997.005357][T24417] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  997.032206][T32226] loop0: detected capacity change from 0 to 512
[  997.036849][T32226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  997.050509][T32226] System zones: 1-12
[  997.089941][T32226] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.10397: missing EA_INODE flag
[  997.093946][T32226] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  997.095791][T32226] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.10397: error while reading EA inode 12 err=-117
[  997.098750][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  997.098763][    C1] EXT4-fs (loop0): initial error at time 1785254169: ext4_xattr_inode_iget:441: inode 12
[  997.098778][    C1] EXT4-fs (loop0): last error at time 1785254169: ext4_xattr_inode_iget:441: inode 12
[  997.112190][T32226] loop0: lost filesystem error report for type 5 error -117
[  997.112787][T32226] EXT4-fs (loop0): 1 orphan inode deleted
[  997.121547][T32226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  997.129811][T32226] fscrypt (loop0, inode 15): Unsupported log2_data_unit_size in encryption policy: 232
[  997.153578][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.551195][T32249] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  997.773867][T32256] syzkaller0: entered promiscuous mode
[  997.775714][T32256] syzkaller0: entered allmulticast mode
[  998.144034][T32273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10417'.
[  998.806338][T32295] loop6: detected capacity change from 0 to 32768
[  998.812994][T32295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10426 (32295)
[  998.819975][T32295] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  998.823189][T32295] BTRFS info (device loop6): using crc32c checksum algorithm
[  998.868897][T32295] BTRFS info (device loop6): enabling ssd optimizations
[  998.871115][T32295] BTRFS info (device loop6): turning on flush-on-commit
[  998.873390][T32295] BTRFS info (device loop6): turning on async discard
[  998.875459][T32295] BTRFS info (device loop6): enabling free space tree
[  998.877807][T32295] BTRFS info (device loop6): enabling auto defrag
[  998.880381][T32295] BTRFS info (device loop6): use lzo compression, level 1
[  998.882628][T32295] BTRFS info (device loop6): max_inline set to 4096
[  999.210101][T30651] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  999.237602][T32320] loop0: detected capacity change from 0 to 8
[  999.516720][T32330] netlink: 'syz.0.10436': attribute type 3 has an invalid length.
[  999.521362][T32330] netlink: 'syz.0.10436': attribute type 1 has an invalid length.
[  999.524174][T32330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10436'.
[  999.602436][T32332] loop0: detected capacity change from 0 to 256
[  999.612510][T32332] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[ 1000.267523][ T5868] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 1000.271309][T32357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10449'.
[ 1000.421434][ T5868] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1000.425864][ T5868] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1000.430523][ T5868] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[ 1000.437517][ T5868] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1000.441163][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1000.444477][ T5868] usb 7-1: SerialNumber: syz
[ 1000.663204][ T5868] rndis_host 7-1:253.0: RNDIS init failed, -71
[ 1000.669263][ T5868] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71
[ 1000.680566][ T5868] usb 7-1: USB disconnect, device number 12
[ 1001.852710][T32398] loop6: detected capacity change from 0 to 8
[ 1001.904423][T32400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10470'.
[ 1002.054276][T32408] loop6: detected capacity change from 0 to 512
[ 1002.056986][T32408] EXT4-fs: inline encryption not supported
[ 1002.060694][T32408] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1002.069529][T32408] EXT4-fs (loop6): 1 truncate cleaned up
[ 1002.072400][T32408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1002.088385][T32408] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10474: bad extra_isize 62 (inode size 256)
[ 1002.106635][T32408] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10474: bad extra_isize 62 (inode size 256)
[ 1002.111518][T32408] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #15: comm syz.6.10474: bad extra_isize 62 (inode size 256)
[ 1002.142417][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1002.325492][T32418] loop6: detected capacity change from 0 to 256
[ 1002.825073][    C1] bridge0: port 3(syz_tun) entered forwarding state
[ 1002.827248][    C1] bridge0: topology change detected, propagating
[ 1003.274757][T32430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10483'.
[ 1003.314470][T32432] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1004.304046][   T13] team0: Port device netdevsim1 removed
[ 1004.379512][T32452] : left promiscuous mode
[ 1004.390304][T32452] bond_slave_0: left promiscuous mode
[ 1004.392455][T32452] bond_slave_1: left promiscuous mode
[ 1004.394730][T32452] batadv0: left promiscuous mode
[ 1004.410724][T32452] mac80211_hwsim hwsim41 wlan0: left promiscuous mode
[ 1004.413500][T32452] mac80211_hwsim hwsim41 wlan0: left allmulticast mode
[ 1004.420871][T32452] bridge1: left promiscuous mode
[ 1004.424502][T32452] bridge2: left promiscuous mode
[ 1004.426325][T32452] bridge2: left allmulticast mode
[ 1004.431342][T32452] ip6tnl1: left allmulticast mode
[ 1004.733355][T32465] loop6: detected capacity change from 0 to 8
[ 1004.741733][T32465] squashfs image failed sanity check
[ 1005.173402][T32486] loop0: detected capacity change from 0 to 512
[ 1005.210421][T32486] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.10503: bad orphan inode 13
[ 1005.223399][T32486] loop0: lost filesystem error report for type 5 error -117
[ 1005.223680][T32486] ext4_test_bit(bit=12, block=4) = 1
[ 1005.227968][    C0] EXT4-fs (loop0): error count since last fsck: 1
[ 1005.227982][    C0] EXT4-fs (loop0): initial error at time 1785254177: ext4_orphan_get:1425
[ 1005.227992][    C0] EXT4-fs (loop0): last error at time 1785254177: ext4_orphan_get:1425
[ 1005.272101][T32486] is_bad_inode(inode)=0
[ 1005.275698][T32486] NEXT_ORPHAN(inode)=0
[ 1005.279164][T32486] max_ino=32
[ 1005.283626][T32486] i_nlink=1
[ 1005.285873][ T5356] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1005.294131][   T13] bridge_slave_0: left allmulticast mode
[ 1005.296065][   T13] bridge_slave_0: left promiscuous mode
[ 1005.298656][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1005.328528][T32486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1005.348548][T32486] EXT4-fs warning (device loop0): ext4_empty_dir:3094: inode #2: comm syz.0.10503: directory missing '.'
[ 1005.407142][T32477] loop6: detected capacity change from 0 to 40427
[ 1005.415087][T32477] F2FS-fs (loop6): Corrupted extension count (33554469 + 1 > 64)
[ 1005.419377][T32477] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1005.428227][T32477] F2FS-fs (loop6): invalid crc value
[ 1005.444790][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.566430][T32477] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1005.635357][T32477] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30
[ 1005.642660][T32477] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1005.725982][T32477] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[ 1005.740422][T32477] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[ 1005.755777][T32500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10508'.
[ 1005.837080][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1005.843002][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1005.852817][   T13] bond0 (unregistering): Released all slaves
[ 1005.863070][   T13] bond1 (unregistering): Released all slaves
[ 1005.913407][T32500] netlink: 'syz.0.10508': attribute type 1 has an invalid length.
[ 1005.916478][T32500] netlink: 'syz.0.10508': attribute type 2 has an invalid length.
[ 1006.741865][T32521] loop0: detected capacity change from 0 to 2048
[ 1006.812805][T32521]  loop0: p2 p3 < > p4 < p5 >
[ 1006.815108][T32521] loop0: partition table partially beyond EOD, truncated
[ 1006.820319][T32521] loop0: p2 start 53543428 is beyond EOD, truncated
[ 1006.826027][T32521] loop0: p3 start 4284289 is beyond EOD, truncated
[ 1006.841599][T32521] loop0: p5 start 53543428 is beyond EOD, truncated
[ 1006.938729][ T5356] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1006.958828][T25735] udevd[25735]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[ 1007.082125][T32524] loop6: detected capacity change from 0 to 32768
[ 1007.147060][T32524] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1007.297018][T32524] XFS (loop6): Ending clean mount
[ 1007.362344][T32524] XFS (loop6): Quotacheck needed: Please wait.
[ 1007.646845][ T5356] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1007.720707][T32524] XFS (loop6): Quotacheck: Done.
[ 1007.724787][   T13] hsr_slave_0: left promiscuous mode
[ 1007.730025][   T13] hsr_slave_1: left promiscuous mode
[ 1007.732954][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1007.765898][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1007.795813][   T34] audit: type=1800 audit(1785254180.515:489): pid=32524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10516" name="bus" dev="loop6" ino=9291 res=0 errno=0
[ 1007.897887][   T34] audit: type=1800 audit(1785254180.615:490): pid=32558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10516" name="file1" dev="loop6" ino=9286 res=0 errno=0
[ 1008.079475][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1008.091069][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1008.148229][   T34] audit: type=1800 audit(1785254180.875:491): pid=32524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10516" name="file1" dev="loop6" ino=9286 res=0 errno=0
[ 1008.203743][T30651] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1008.483784][T32562] bond2: option active_slave: mode dependency failed, not supported in mode 802.3ad(4)
[ 1008.490690][T32562] bond2 (unregistering): Released all slaves
[ 1008.757876][  T799] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1008.763999][T32572] overlayfs: conflicting options: nfs_export=on,metacopy=on
[ 1008.901991][ T5356] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1008.909812][  T799] usb 7-1: Using ep0 maxpacket: 8
[ 1008.915102][  T799] usb 7-1: config 0 has an invalid interface number: 131 but max is 0
[ 1008.918866][  T799] usb 7-1: config 0 has no interface number 0
[ 1008.923596][  T799] usb 7-1: config 0 interface 131 has no altsetting 0
[ 1008.940230][   T13] IPVS: stop unused estimator thread 0...
[ 1008.945793][  T799] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= a.10
[ 1008.952945][  T799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.961522][  T799] usb 7-1: Product: syz
[ 1008.965367][  T799] usb 7-1: Manufacturer: syz
[ 1008.970141][  T799] usb 7-1: SerialNumber: syz
[ 1009.019348][  T799] usb 7-1: config 0 descriptor??
[ 1009.253073][  T799] ims_pcu 7-1:0.131: Missing CDC union descriptor
[ 1009.261622][  T799] ims_pcu 7-1:0.131: probe with driver ims_pcu failed with error -22
[ 1009.289438][  T799] usb 7-1: USB disconnect, device number 13
[ 1010.095879][T32602] loop6: detected capacity change from 0 to 512
[ 1010.134960][T32602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1010.162643][T32602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1010.176458][T32602] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1010.249388][T32602] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10538: bg 0: block 217: padding at end of block bitmap is not set
[ 1010.255690][T32602] EXT4-fs (loop6): Remounting filesystem read-only
[ 1010.283074][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1010.463617][T32622] tmpfs: Bad value for 'mpol'
[ 1011.327599][  T799] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1011.477521][  T799] usb 7-1: Using ep0 maxpacket: 8
[ 1011.481558][  T799] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[ 1011.484541][  T799] usb 7-1: config 0 has no interface number 0
[ 1011.490608][  T799] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1011.493590][  T799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.496174][  T799] usb 7-1: Product: syz
[ 1011.497805][  T799] usb 7-1: Manufacturer: syz
[ 1011.499476][  T799] usb 7-1: SerialNumber: syz
[ 1011.502823][  T799] usb 7-1: config 0 descriptor??
[ 1011.710379][  T799] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1011.713166][  T799] uvcvideo 7-1:0.31: No valid video chain found.
[ 1011.922688][ T5868] usb 7-1: USB disconnect, device number 14
[ 1013.784148][T32669] io-wq is not configured for unbound workers
[ 1013.854853][T32677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10569'.
[ 1013.941237][T32683] bridge1: entered promiscuous mode
[ 1013.965498][T32668] loop0: detected capacity change from 0 to 40427
[ 1013.970649][T32668] F2FS-fs (loop0): invalid crc value
[ 1014.001355][T32668] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1014.015039][T32668] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[ 1014.018756][T32668] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1014.022136][T32668] F2FS-fs (loop0): Start checkpoint disabled!
[ 1014.045659][T32668] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[ 1014.048878][T32668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1014.063382][   T34] audit: type=1800 audit(1785254186.785:492): pid=32668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10566" name="file1" dev="loop0" ino=10 res=0 errno=0
[ 1014.072399][T29033] kworker/u10:4: attempt to access beyond end of device
[ 1014.072399][T29033] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1014.080382][T29033] CPU: 1 UID: 0 PID: 29033 Comm: kworker/u10:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1014.080404][T29033] Tainted: [L]=SOFTLOCKUP
[ 1014.080410][T29033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1014.080418][T29033] Workqueue: writeback wb_workfn (flush-7:0)
[ 1014.080445][T29033] Call Trace:
[ 1014.080450][T29033]  <TASK>
[ 1014.080457][T29033]  dump_stack_lvl+0xe8/0x150
[ 1014.080479][T29033]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1014.080501][T29033]  f2fs_write_end_io+0x124b/0x1710
[ 1014.080535][T29033]  __submit_merged_bio+0x258/0x6a0
[ 1014.080550][T29033]  ? rcu_is_watching+0x15/0xb0
[ 1014.080568][T29033]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1014.080591][T29033]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1014.080623][T29033]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1014.080666][T29033]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1014.080687][T29033]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1014.080708][T29033]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1014.080725][T29033]  ? __lock_acquire+0x683/0x2cf0
[ 1014.080742][T29033]  ? set_shrinker_bit+0x7c/0x350
[ 1014.080757][T29033]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1014.080776][T29033]  do_writepages+0x338/0x560
[ 1014.080798][T29033]  ? reacquire_held_locks+0x104/0x190
[ 1014.080811][T29033]  ? writeback_sb_inodes+0x450/0x1b00
[ 1014.080832][T29033]  __writeback_single_inode+0x12e/0xf90
[ 1014.080853][T29033]  writeback_sb_inodes+0x9de/0x1b00
[ 1014.080869][T29033]  ? __lock_acquire+0x683/0x2cf0
[ 1014.080904][T29033]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1014.080954][T29033]  ? rcu_is_watching+0x15/0xb0
[ 1014.080967][T29033]  ? queue_io+0x2d3/0x470
[ 1014.080986][T29033]  wb_writeback+0x41c/0xad0
[ 1014.081004][T29033]  ? queue_io+0x211/0x470
[ 1014.081025][T29033]  ? __pfx_wb_writeback+0x10/0x10
[ 1014.081039][T29033]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1014.081066][T29033]  wb_workfn+0x431/0x10f0
[ 1014.081123][T29033]  ? __pfx_wb_workfn+0x10/0x10
[ 1014.081136][T29033]  ? rcu_is_watching+0x15/0xb0
[ 1014.081143][T29033]  ? trace_hrtimer_start+0x82/0x200
[ 1014.081157][T29033]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1014.081167][T29033]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1014.081177][T29033]  ? process_scheduled_works+0xa20/0x14e0
[ 1014.081188][T29033]  ? process_scheduled_works+0xa20/0x14e0
[ 1014.081217][T29033]  ? rcu_is_watching+0x15/0xb0
[ 1014.081225][T29033]  ? process_scheduled_works+0xa20/0x14e0
[ 1014.081234][T29033]  process_scheduled_works+0xa8e/0x14e0
[ 1014.081254][T29033]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1014.081268][T29033]  ? assign_work+0x3cf/0x5d0
[ 1014.081279][T29033]  worker_thread+0xa47/0xfb0
[ 1014.081301][T29033]  kthread+0x388/0x470
[ 1014.081312][T29033]  ? __pfx_worker_thread+0x10/0x10
[ 1014.081320][T29033]  ? __pfx_kthread+0x10/0x10
[ 1014.081331][T29033]  ret_from_fork+0x514/0xb70
[ 1014.081345][T29033]  ? __pfx_ret_from_fork+0x10/0x10
[ 1014.081356][T29033]  ? __switch_to+0xc89/0x1420
[ 1014.081367][T29033]  ? __pfx_kthread+0x10/0x10
[ 1014.081378][T29033]  ret_from_fork_asm+0x1a/0x30
[ 1014.081393][T29033]  </TASK>
[ 1014.081955][T29033] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1014.123957][T32685] loop1: detected capacity change from 0 to 32768
[ 1014.191644][ T5868] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1014.241784][T32685] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1014.293257][T32685] XFS (loop1): Ending clean mount
[ 1014.317247][T24417] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1014.376838][ T5868] usb 7-1: Using ep0 maxpacket: 32
[ 1014.382813][ T5868] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 1014.386475][ T5868] usb 7-1: config 0 has no interface number 0
[ 1014.389494][ T5868] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1014.393534][ T5868] usb 7-1: config 0 interface 89 has no altsetting 0
[ 1014.435197][ T5868] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1014.439513][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.448863][ T5868] usb 7-1: Product: syz
[ 1014.454650][ T5868] usb 7-1: Manufacturer: syz
[ 1014.462025][ T5868] usb 7-1: SerialNumber: syz
[ 1014.518190][ T5868] usb 7-1: config 0 descriptor??
[ 1014.629845][ T5868] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1014.633847][ T5868] em28xx 7-1:0.89: Video interface 89 found:
[ 1014.715623][T32699] loop1: detected capacity change from 0 to 32768
[ 1014.720591][T32699] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10575 (32699)
[ 1014.745292][T32699] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1014.749679][T32699] BTRFS info (device loop1): using blake2b checksum algorithm
[ 1014.812587][T32699] BTRFS info (device loop1): enabling ssd optimizations
[ 1014.815225][T32699] BTRFS info (device loop1): turning on async discard
[ 1014.818733][T32699] BTRFS info (device loop1): enabling free space tree
[ 1014.990761][T24417] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1015.155669][ T5868] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 1015.353459][T32725] netlink: 'syz.0.10581': attribute type 1 has an invalid length.
[ 1015.356466][T32725] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10581'.
[ 1015.360502][T32725] netlink: 'syz.0.10581': attribute type 1 has an invalid length.
[ 1015.508544][T32731] loop1: detected capacity change from 0 to 16
[ 1015.873730][ T5868] em28xx 7-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=79)
[ 1015.882713][ T5868] em28xx 7-1:0.89: board has no eeprom
[ 1016.147482][ T5868] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 1016.150454][ T5868] em28xx 7-1:0.89: analog set to bulk mode.
[ 1016.153460][T24126] em28xx 7-1:0.89: Registering V4L2 extension
[ 1016.223524][ T5868] usb 7-1: USB disconnect, device number 15
[ 1016.227097][ T5868] em28xx 7-1:0.89: Disconnecting em28xx
[ 1016.279579][T24126] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 1016.284620][T24126] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 1016.287566][T24126] em28xx 7-1:0.89: No AC97 audio processor
[ 1016.340494][T24126] usb 7-1: Decoder not found
[ 1016.342181][T24126] em28xx 7-1:0.89: failed to create media graph
[ 1016.344485][T24126] em28xx 7-1:0.89: V4L2 device video103 deregistered
[ 1016.364031][T24126] em28xx 7-1:0.89: Registering snapshot button...
[ 1016.380231][T24126] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input42
[ 1016.400615][T24126] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 1016.403917][ T5868] em28xx 7-1:0.89: Closing input extension
[ 1016.412156][ T5868] em28xx 7-1:0.89: Deregistering snapshot button
[ 1016.490935][ T5868] em28xx 7-1:0.89: Freeing device
[ 1016.693242][T32745] loop6: detected capacity change from 0 to 256
[ 1016.696803][T32745] FAT-fs (loop6): Directory bread(block 1285) failed
[ 1016.702282][T32745] FAT-fs (loop6): Directory bread(block 1286) failed
[ 1016.704697][T32745] FAT-fs (loop6): Directory bread(block 1287) failed
[ 1016.706852][T32745] FAT-fs (loop6): Directory bread(block 1288) failed
[ 1016.715868][T32745] FAT-fs (loop6): FAT read failed (blocknr 1281)
[ 1016.807019][T32746] loop9: detected capacity change from 0 to 255852544
[ 1016.858754][T32746] loop9: detected capacity change from 255852544 to 524287999
[ 1019.373939][  T301] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10596'.
[ 1019.609624][  T316] vivid-000: disconnect
[ 1019.611423][  T315] vivid-000: reconnect
[ 1019.817568][  T328] loop1: detected capacity change from 0 to 2048
[ 1019.837821][  T328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1019.880367][T24417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1019.959230][  T333] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1019.974929][  T336] loop1: detected capacity change from 0 to 1024
[ 1019.982258][  T336] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1020.006421][  T336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1020.102275][T24417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1020.172422][  T343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10613'.
[ 1020.179901][  T343] xfrm0: entered promiscuous mode
[ 1020.181649][  T343] xfrm0: entered allmulticast mode
[ 1020.183801][  T343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10613'.
[ 1020.459537][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1020.462427][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1020.723245][T24404] libceph: connect (1)[c::]:6789 error -101
[ 1020.725264][T24404] libceph: mon0 (1)[c::]:6789 connect error
[ 1020.850435][  T344] ceph: No mds server is up or the cluster is laggy
[ 1021.132668][  T368] loop6: detected capacity change from 0 to 256
[ 1021.153129][  T368] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[ 1021.258784][ T5000] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1021.264675][ T5000] CPU: 0 UID: 0 PID: 5000 Comm: kworker/u11:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1021.264704][ T5000] Tainted: [L]=SOFTLOCKUP
[ 1021.264709][ T5000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1021.264721][ T5000] Workqueue: hci1 hci_rx_work
[ 1021.264744][ T5000] Call Trace:
[ 1021.264750][ T5000]  <TASK>
[ 1021.264759][ T5000]  dump_stack_lvl+0xe8/0x150
[ 1021.264787][ T5000]  sysfs_create_dir_ns+0x271/0x2a0
[ 1021.264811][ T5000]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1021.264833][ T5000]  ? do_raw_spin_unlock+0x4d/0x210
[ 1021.264854][ T5000]  kobject_add_internal+0x622/0xcd0
[ 1021.264877][ T5000]  kobject_add+0x163/0x240
[ 1021.264897][ T5000]  ? __pfx_kobject_add+0x10/0x10
[ 1021.264918][ T5000]  ? get_device_parent+0x366/0x3a0
[ 1021.264938][ T5000]  device_add+0x3fa/0xb80
[ 1021.264955][ T5000]  hci_conn_add_sysfs+0xd5/0x210
[ 1021.264972][ T5000]  le_conn_complete_evt+0xfef/0x1580
[ 1021.265024][ T5000]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1021.265047][ T5000]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1021.265065][ T5000]  ? skb_pull_data+0xf0/0x200
[ 1021.265085][ T5000]  hci_le_conn_complete_evt+0x187/0x470
[ 1021.265107][ T5000]  hci_event_packet+0x67a/0xf10
[ 1021.265128][ T5000]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1021.265143][ T5000]  ? __pfx_hci_event_packet+0x10/0x10
[ 1021.265159][ T5000]  ? audit_tree_freeing_mark+0x9e0/0xb20
[ 1021.265178][ T5000]  ? hci_send_to_monitor+0xe2/0x590
[ 1021.265198][ T5000]  hci_rx_work+0x3ee/0x1020
[ 1021.265216][ T5000]  ? process_scheduled_works+0xa20/0x14e0
[ 1021.265233][ T5000]  process_scheduled_works+0xa8e/0x14e0
[ 1021.265275][ T5000]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1021.265313][ T5000]  ? assign_work+0x3cf/0x5d0
[ 1021.265335][ T5000]  worker_thread+0xa47/0xfb0
[ 1021.265371][ T5000]  kthread+0x388/0x470
[ 1021.265394][ T5000]  ? __pfx_worker_thread+0x10/0x10
[ 1021.265412][ T5000]  ? __pfx_kthread+0x10/0x10
[ 1021.265434][ T5000]  ret_from_fork+0x514/0xb70
[ 1021.265456][ T5000]  ? __pfx_ret_from_fork+0x10/0x10
[ 1021.265475][ T5000]  ? __switch_to+0xc89/0x1420
[ 1021.265495][ T5000]  ? __pfx_kthread+0x10/0x10
[ 1021.265514][ T5000]  ret_from_fork_asm+0x1a/0x30
[ 1021.265539][ T5000]  </TASK>
[ 1021.266140][ T5000] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1021.365562][ T5000] Bluetooth: hci1: failed to register connection device
[ 1021.494456][   T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1021.647493][   T24] usb 7-1: Using ep0 maxpacket: 8
[ 1021.651124][   T24] usb 7-1: config 0 has no interfaces?
[ 1021.654968][   T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1021.658101][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.660661][   T24] usb 7-1: Product: syz
[ 1021.662017][   T24] usb 7-1: Manufacturer: syz
[ 1021.663596][   T24] usb 7-1: SerialNumber: syz
[ 1021.667713][   T24] usb 7-1: config 0 descriptor??
[ 1021.883887][   T24] usb 7-1: USB disconnect, device number 16
[ 1022.506368][  T389] loop6: detected capacity change from 0 to 2048
[ 1022.525860][  T389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1022.537233][  T389] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1022.553802][  T389] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1022.574894][  T389] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1022.600420][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1022.772616][  T399] loop0: detected capacity change from 0 to 64
[ 1023.022451][  T403] loop6: detected capacity change from 0 to 32768
[ 1023.027779][  T403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10627 (403)
[ 1023.036597][  T403] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1023.040511][  T403] BTRFS info (device loop6): using sha256 checksum algorithm
[ 1023.158828][  T403] BTRFS info (device loop6): enabling ssd optimizations
[ 1023.161730][  T403] BTRFS info (device loop6): turning on sync discard
[ 1023.164402][  T403] BTRFS info (device loop6): enabling free space tree
[ 1023.167069][  T403] BTRFS info (device loop6): use zlib compression, level 3
[ 1023.560423][   T34] audit: type=1800 audit(1785254196.135:493): pid=428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10627" name="file1" dev="loop6" ino=260 res=0 errno=0
[ 1023.915539][   T34] audit: type=1326 audit(1785254196.625:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1023.960676][   T34] audit: type=1326 audit(1785254196.635:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1023.987549][   T34] audit: type=1326 audit(1785254196.635:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1024.021182][   T34] audit: type=1326 audit(1785254196.635:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1024.041535][T30651] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1024.061633][   T34] audit: type=1326 audit(1785254196.635:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1024.076218][   T34] audit: type=1326 audit(1785254196.635:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1024.102368][   T34] audit: type=1326 audit(1785254196.635:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1024.105532][  T443] loop0: detected capacity change from 0 to 512
[ 1024.134596][   T34] audit: type=1326 audit(1785254196.635:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1024.140299][  T443] ext4: Unknown parameter 'measure'
[ 1024.144821][   T34] audit: type=1326 audit(1785254196.635:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=435 comm="syz.1.10634" exe="/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1024.212336][  T443] loop0: detected capacity change from 0 to 1024
[ 1024.224067][  T443] hfsplus: Unknown parameter 'creatoR'
[ 1024.350572][  T447] overlayfs: missing 'lowerdir'
[ 1024.759614][  T456] netlink: 'syz.6.10641': attribute type 2 has an invalid length.
[ 1025.128162][ T2305] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1025.330101][ T2305] usb 7-1: config 2 has an invalid interface number: 183 but max is 0
[ 1025.332863][ T2305] usb 7-1: config 2 has no interface number 0
[ 1025.334996][ T2305] usb 7-1: config 2 interface 183 has no altsetting 0
[ 1025.339670][ T2305] usb 7-1: New USB device found, idVendor=1690, idProduct=0712, bcdDevice=83.f9
[ 1025.344142][ T2305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.346873][ T2305] usb 7-1: Product: syz
[ 1025.353428][ T2305] usb 7-1: Manufacturer: syz
[ 1025.357999][ T2305] usb 7-1: SerialNumber: syz
[ 1025.380513][  T471] loop1: detected capacity change from 0 to 512
[ 1025.394477][  T471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1025.427774][  T471] EXT4-fs (loop1): 1 truncate cleaned up
[ 1025.433187][  T471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1025.610755][ T2305] usb 7-1: Could not find all expected endpoints
[ 1025.671859][ T2305] usb 7-1: USB disconnect, device number 17
[ 1026.309189][T24417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1026.496260][  T488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10656'.
[ 1026.758883][  T498] netlink: 'syz.1.10660': attribute type 1 has an invalid length.
[ 1026.762623][  T498] netlink: 'syz.1.10660': attribute type 1 has an invalid length.
[ 1026.929345][  T506] loop1: detected capacity change from 0 to 128
[ 1027.094345][  T517] netlink: 'syz.1.10669': attribute type 10 has an invalid length.
[ 1027.097091][  T517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10669'.
[ 1027.182674][  T521] loop1: detected capacity change from 0 to 1024
[ 1028.098096][T24424] Bluetooth: hci1: command 0x0406 tx timeout
[ 1028.514388][  T545] loop6: detected capacity change from 0 to 512
[ 1028.522620][  T545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022]
[ 1028.526005][  T545] System zones: 1-12
[ 1028.528769][  T545] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.10680: Directory hole found for htree index block 0
[ 1028.533924][  T545] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1028.538369][    C1] EXT4-fs (loop6): initial error at time 1785254201: dx_probe:791: inode 2
[ 1028.545424][    C1] EXT4-fs (loop6): last error at time 1785254201: dx_probe:791: inode 2
[ 1028.562453][  T545] EXT4-fs (loop6): Remounting filesystem read-only
[ 1028.565237][  T545] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[ 1028.568785][  T545] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[ 1028.573357][  T545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1028.603278][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1028.947672][T24126] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1029.107487][T24126] usb 7-1: Using ep0 maxpacket: 16
[ 1029.112851][T24126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1029.116466][T24126] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1029.120183][T24126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.126037][T24126] usb 7-1: config 0 descriptor??
[ 1029.539812][T24126] uclogic 0003:28BD:0071.0017: interface is invalid, ignoring
[ 1029.744579][   T24] usb 7-1: USB disconnect, device number 18
[ 1029.823044][  T558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10685'.
[ 1029.826879][  T558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10685'.
[ 1029.831085][  T558] netlink: 2116 bytes leftover after parsing attributes in process `syz.0.10685'.
[ 1030.152176][  T572] loop0: detected capacity change from 0 to 4096
[ 1030.158269][  T572] EXT4-fs: Ignoring removed orlov option
[ 1030.169481][  T572] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1030.178302][  T572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1030.212968][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1030.319021][  T577] loop6: detected capacity change from 0 to 16
[ 1030.326261][  T577] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 143300)
[ 1030.644144][  T586] loop6: detected capacity change from 0 to 32768
[ 1030.805031][  T596] loop0: detected capacity change from 0 to 512
[ 1030.813162][  T596] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1030.826500][  T596] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[ 1030.840133][  T596] EXT4-fs (loop0): 1 truncate cleaned up
[ 1030.882719][  T596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1030.923587][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1031.344065][  T613] loop1: detected capacity change from 0 to 4096
[ 1031.345684][  T606] loop6: detected capacity change from 0 to 65536
[ 1031.376389][  T606] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1031.395389][  T606] XFS (loop6): Ending clean mount
[ 1031.403489][  T613] NILFS (loop1): invalid segment: Checksum error in segment payload
[ 1031.414407][T30651] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1031.421784][  T613] NILFS (loop1): trying rollback from an earlier position
[ 1031.456008][  T613] NILFS (loop1): recovery complete
[ 1031.459728][  T630] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1031.859478][  T634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10716'.
[ 1032.065456][  T642] loop6: detected capacity change from 0 to 2048
[ 1032.072507][  T642] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096)
[ 1032.155730][  T649] Invalid source name
[ 1032.239787][  T651] loop6: detected capacity change from 0 to 1024
[ 1032.367889][  T655] loop1: detected capacity change from 0 to 4096
[ 1032.378869][  T655] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[ 1032.454151][  T658] loop0: detected capacity change from 0 to 4096
[ 1032.461696][  T658] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[ 1032.471223][  T658] ntfs3(loop0): ino=3, mi_enum_attr
[ 1032.484201][  T658] ntfs3(loop0): mft corrupted
[ 1032.486245][  T658] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 1032.500389][  T658] ntfs3(loop0): Failed to load $Bitmap (-22).
[ 1032.593062][ T9844] ntfs3(loop1): ino=1e, ni_find_attr
[ 1032.613576][  T667] sctp: [Deprecated]: syz.0.10729 (pid 667) Use of int in maxseg socket option.
[ 1032.613576][  T667] Use struct sctp_assoc_value instead
[ 1032.700086][  T671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10730'.
[ 1032.806658][T24126] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1032.979560][T24126] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1032.982726][T24126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.989441][T24126] usb 7-1: config 0 descriptor??
[ 1033.006967][T24126] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1033.028957][  T676] loop0: detected capacity change from 0 to 512
[ 1033.050093][  T676] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.10731: inode has both inline data and extents flags
[ 1033.058067][  T676] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1033.058384][  T676] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.10731: couldn't read orphan inode 15 (err -117)
[ 1033.065650][  T676] loop0: lost filesystem error report for type 5 error -117
[ 1033.067106][  T676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1033.107437][  T676] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1033.585459][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1033.660454][   T24] hid_parser_main: 47 callbacks suppressed
[ 1033.660468][   T24] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 1033.667093][   T24] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1033.845094][T24126] gspca_stv06xx: I2C: Read error writing address: -71
[ 1033.854224][T24126] usb 7-1: USB disconnect, device number 19
[ 1034.091920][  T688] loop0: detected capacity change from 0 to 1024
[ 1034.490230][  T692] loop0: detected capacity change from 0 to 32768
[ 1034.495462][  T692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10740 (692)
[ 1034.516842][  T692] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1034.521179][  T692] BTRFS info (device loop0): using sha256 checksum algorithm
[ 1034.540998][  T692] BTRFS info (device loop0): enabling ssd optimizations
[ 1034.543529][  T692] BTRFS info (device loop0): turning on async discard
[ 1034.545832][  T692] BTRFS info (device loop0): enabling free space tree
[ 1034.584317][T27368] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1034.767391][T24126] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[ 1035.021626][T24126] usb 7-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23
[ 1035.025448][T24126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.029142][T24126] usb 7-1: Product: syz
[ 1035.030972][T24126] usb 7-1: Manufacturer: syz
[ 1035.032936][T24126] usb 7-1: SerialNumber: syz
[ 1035.037998][T24126] usb 7-1: config 0 descriptor??
[ 1035.252662][T24126] usb 7-1: USB disconnect, device number 20
[ 1035.850131][  T719] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[ 1035.934483][  T723] netlink: 'syz.6.10748': attribute type 8 has an invalid length.
[ 1036.166940][  T726] loop6: detected capacity change from 0 to 32768
[ 1036.169788][  T726] btrfs: Deprecated parameter 'usebackuproot'
[ 1036.171707][  T726] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1036.175491][  T726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10749 (726)
[ 1036.183150][  T726] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1036.187081][  T726] BTRFS info (device loop6): using crc32c checksum algorithm
[ 1036.189884][  T726] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1036.296545][ T9861] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1036.308589][  T726] BTRFS error (device loop6): failed to load root extent
[ 1036.311536][  T726] BTRFS warning (device loop6): try to load backup roots slot 1
[ 1036.315258][ T9861] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1036.323028][  T726] BTRFS warning (device loop6): couldn't read tree root
[ 1036.325880][  T726] BTRFS warning (device loop6): try to load backup roots slot 2
[ 1036.333997][ T9847] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1036.338423][  T726] BTRFS warning (device loop6): couldn't read tree root
[ 1036.341174][  T726] BTRFS warning (device loop6): try to load backup roots slot 3
[ 1036.351245][  T726] BTRFS info (device loop6): rebuilding free space tree
[ 1036.389380][  T726] BTRFS info (device loop6): disabling free space tree
[ 1036.392383][  T726] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1036.396207][  T726] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1036.402080][  T726] BTRFS info (device loop6): checking UUID tree
[ 1036.404817][  T726] BTRFS info (device loop6): enabling ssd optimizations
[ 1036.407625][  T726] BTRFS info (device loop6): turning on async discard
[ 1036.409761][  T726] BTRFS info (device loop6): enabling disk space caching
[ 1036.411911][  T726] BTRFS info (device loop6): force clearing of disk cache
[ 1036.414120][  T726] BTRFS info (device loop6): enabling auto defrag
[ 1036.416214][  T726] BTRFS info (device loop6): trying to use backup root at mount time
[ 1036.419256][  T726] BTRFS info (device loop6): use zstd compression, level 3
[ 1036.489008][T30651] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1036.911547][  T748] netlink: 'syz.6.10753': attribute type 32 has an invalid length.
[ 1037.926370][  T759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1038.296595][  T780] loop0: detected capacity change from 0 to 8
[ 1038.313902][  T780] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1038.323684][  T780] SQUASHFS error: Failed to read block 0x91: -5
[ 1038.333406][  T780] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1038.339802][  T780] SQUASHFS error: Unable to read inode 0x11f
[ 1038.933499][  T782] loop6: detected capacity change from 0 to 32768
[ 1039.009834][  T782] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1039.064511][  T782] XFS (loop6): Ending clean mount
[ 1039.069486][  T782] XFS (loop6): Quotacheck needed: Please wait.
[ 1039.204027][  T782] XFS (loop6): Quotacheck: Done.
[ 1039.491036][T30651] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1039.537080][  T811] loop1: detected capacity change from 0 to 8
[ 1039.556576][  T811] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1039.614456][  T811] SQUASHFS error: Failed to read block 0x0: -5
[ 1039.800878][  T811] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1039.816049][  T811] SQUASHFS error: Failed to read block 0x0: -5
[ 1039.827913][   T34] kauditd_printk_skb: 21 callbacks suppressed
[ 1039.827927][   T34] audit: type=1800 audit(1785254212.545:524): pid=811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10775" name="file2" dev="loop1" ino=3 res=0 errno=0
[ 1040.032608][  T818] loop0: detected capacity change from 0 to 512
[ 1040.063478][  T818] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[ 1040.066073][  T818] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[ 1040.081881][  T818] EXT4-fs (loop0): 1 truncate cleaned up
[ 1040.084701][  T818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1040.107115][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1041.263976][  T840] loop6: detected capacity change from 0 to 32768
[ 1041.277405][  T840] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1041.313104][  T840] XFS (loop6): Ending clean mount
[ 1041.316081][  T840] XFS (loop6): Quotacheck needed: Please wait.
[ 1041.391524][  T840] XFS (loop6): Quotacheck: Done.
[ 1041.419176][T30651] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1041.887413][T24402] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1042.037504][T24402] usb 7-1: Using ep0 maxpacket: 16
[ 1042.044027][T24402] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1042.049396][T24402] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.052766][T24402] usb 7-1: Product: syz
[ 1042.054484][T24402] usb 7-1: Manufacturer: syz
[ 1042.056342][T24402] usb 7-1: SerialNumber: syz
[ 1042.061590][T24402] usb 7-1: config 0 descriptor??
[ 1042.272884][T24402] speedtch 7-1:0.0: speedtch_bind: data interface not found!
[ 1042.275336][T24402] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1042.479514][ T5861] usb 7-1: USB disconnect, device number 21
[ 1043.204535][T24424] Bluetooth: hci1: unexpected event for opcode 0x2007
[ 1043.699810][  T887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10803'.
[ 1043.769806][  T888] (syz.1.10801,888,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1043.773479][  T888] (syz.1.10801,888,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 1044.050714][  T891] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10804'.
[ 1044.077475][  T893] team0: entered allmulticast mode
[ 1044.079276][  T893] team_slave_0: entered allmulticast mode
[ 1044.081196][  T893] team_slave_1: entered allmulticast mode
[ 1044.083857][  T893] 8021q: adding VLAN 0 to HW filter on device team0
[ 1044.086915][  T893] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1044.211802][  T901] program syz.0.10809 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1044.278980][   T34] audit: type=1800 audit(1785254216.995:525): pid=882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10799" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1044.545898][  T913] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10814'.
[ 1044.549667][  T915] loop6: detected capacity change from 0 to 512
[ 1044.560727][  T913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10814'.
[ 1044.582269][  T915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1044.586892][  T915] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1044.609902][  T915] overlayfs: workdir and upperdir must reside under the same mount
[ 1044.636376][  T921] loop1: detected capacity change from 0 to 4096
[ 1044.642568][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.682030][  T921] NILFS (loop1): invalid segment: Checksum error in segment payload
[ 1044.685058][  T921] NILFS (loop1): trying rollback from an earlier position
[ 1044.705355][  T921] NILFS (loop1): recovery complete
[ 1044.710809][  T926] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1044.728974][   T34] audit: type=1326 audit(1785254217.445:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=929 comm="syz.6.10818" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c79de99 code=0x0
[ 1044.807749][  T936] sch_tbf: burst 1 is lower than device veth1_virt_wifi mtu (1514) !
[ 1045.165006][  T968] Bluetooth: MGMT ver 1.23
[ 1045.834916][  T982] tipc: Cannot configure node identity twice
[ 1045.837507][  T982] tipc: Cannot configure node identity twice
[ 1045.846670][  T982] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1045.867459][  T972] loop6: detected capacity change from 0 to 32768
[ 1045.879636][  T972] (syz.6.10829,972,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1045.898099][  T972] (syz.6.10829,972,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1045.924669][  T972] JBD2: Ignoring recovery information on journal
[ 1046.005798][  T972] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1046.180213][  T972] (syz.6.10829,972,0):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume.
[ 1046.185038][  T972] (syz.6.10829,972,0):ocfs2_group_add:513 ERROR: status = -22
[ 1046.300565][T30651] ocfs2: Unmounting device (7,6) on (node local)
[ 1046.821414][ T1011] loop6: detected capacity change from 0 to 16
[ 1046.824469][ T1011] erofs (device loop6): mounted with root inode @ nid 36.
[ 1046.829417][ T1011] syz.6.10845: attempt to access beyond end of device
[ 1046.829417][ T1011] loop6: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16
[ 1046.849521][ T1011] syz.6.10845: attempt to access beyond end of device
[ 1046.849521][ T1011] loop6: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16
[ 1046.856469][   T34] audit: type=1800 audit(1785254219.575:527): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10845" name="file1" dev="loop6" ino=86 res=0 errno=0
[ 1046.891399][ T1013] loop6: detected capacity change from 0 to 1024
[ 1046.915360][ T1013] hfsplus: cannot replace xattr
[ 1046.950921][ T1015] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 1047.314051][ T1026] loop0: detected capacity change from 0 to 512
[ 1047.336513][ T1026] EXT4-fs error (device loop0): ext4_quota_enable:7232: inode #3: comm syz.0.10852: iget: checksum invalid
[ 1047.352380][ T1026] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -74
[ 1047.353397][ T1026] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.10852: Bad quota inode: 3, type: 0
[ 1047.361623][    C0] EXT4-fs (loop0): error count since last fsck: 1
[ 1047.361642][    C0] EXT4-fs (loop0): initial error at time 1785254220: ext4_quota_enable:7232: inode 3
[ 1047.361662][    C0] EXT4-fs (loop0): last error at time 1785254220: ext4_quota_enable:7232: inode 3
[ 1047.388516][ T1026] loop0: lost filesystem error report for type 5 error -117
[ 1047.388899][ T1026] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix.
[ 1047.398883][ T1026] EXT4-fs (loop0): mount failed
[ 1047.463527][ T1024] loop6: detected capacity change from 0 to 131072
[ 1047.466476][ T1024] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[ 1047.468693][ T1024] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1047.471717][ T1024] F2FS-fs (loop6): invalid crc value
[ 1047.528051][ T1024] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1047.541944][ T1024] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1047.544292][ T1024] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1048.267452][T24126] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1048.422806][T24126] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1048.426197][T24126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.429606][T24126] usb 7-1: Product: syz
[ 1048.431400][T24126] usb 7-1: Manufacturer: syz
[ 1048.433422][T24126] usb 7-1: SerialNumber: syz
[ 1048.439214][T24126] usb 7-1: config 0 descriptor??
[ 1048.444720][T24126] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1048.855866][T24126] gspca_sunplus: reg_w_riv err -71
[ 1048.863735][T24126] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[ 1048.873589][T24126] usb 7-1: USB disconnect, device number 22
[ 1048.983911][ T1068] loop0: detected capacity change from 0 to 32768
[ 1048.988834][ T1068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10864 (1068)
[ 1049.006002][ T1068] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1049.010077][ T1068] BTRFS info (device loop0): using sha256 checksum algorithm
[ 1049.035157][ T1068] BTRFS info (device loop0): enabling ssd optimizations
[ 1049.038214][ T1068] BTRFS info (device loop0): turning on async discard
[ 1049.040475][ T1068] BTRFS info (device loop0): enabling free space tree
[ 1049.063648][T27368] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1049.291357][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10866'.
[ 1049.663380][ T1106] loop6: detected capacity change from 0 to 32768
[ 1049.691329][ T1106] find_entry called with index >= next_index
[ 1049.695218][ T1106] find_entry called with index >= next_index
[ 1049.700507][ T1106] find_entry called with index >= next_index
[ 1049.702582][ T1106] find_entry called with index >= next_index
[ 1049.704589][ T1106] find_entry called with index >= next_index
[ 1049.706650][ T1106] add_index: next_index = 0.  Resetting!
[ 1049.709152][ T1106] find_entry called with index >= next_index
[ 1049.711162][ T1106] find_entry called with index >= next_index
[ 1049.715657][ T1106] find_entry called with index >= next_index
[ 1049.717863][ T1106] find_entry called with index >= next_index
[ 1049.724610][ T1106] non-latin1 character 0x3ff found in JFS file name
[ 1049.737180][ T1120] binder: 1119:1120 ioctl c0306201 200000000640 returned -22
[ 1049.737782][ T1106] mount with iocharset=utf8 to access
[ 1049.982159][ T1136] loop6: detected capacity change from 0 to 1024
[ 1050.014679][ T1136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1050.064963][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1050.206742][ T1149] loop6: detected capacity change from 0 to 16
[ 1050.218282][ T1149] MTD: Attempt to mount non-MTD device "/dev/loop6"
[ 1050.511885][ T1178] tmpfs: Bad value for 'mpol'
[ 1050.547580][    T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1050.691759][ T1193] loop0: detected capacity change from 0 to 4096
[ 1050.699631][    T9] usb 7-1: Using ep0 maxpacket: 16
[ 1050.706166][ T1193] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[ 1050.713669][    T9] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[ 1050.730938][ T1193] ntfs3(loop0): failed to convert name for inode 1e.
[ 1050.731970][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.743636][    T9] usb 7-1: Product: syz
[ 1050.745129][    T9] usb 7-1: Manufacturer: syz
[ 1050.750021][    T9] usb 7-1: SerialNumber: syz
[ 1050.755465][    T9] usb 7-1: config 0 descriptor??
[ 1050.759757][    T9] usb-storage 7-1:0.0: USB Mass Storage device detected
[ 1050.763787][    T9] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1
[ 1050.769652][    T9] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[ 1050.769652][    T9]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1050.787109][ T1193] ntfs3(loop0): ino=1f, mi_enum_attr
[ 1050.794402][ T1193] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 1050.986684][T21386] usb 7-1: USB disconnect, device number 23
[ 1051.501567][ T1220] netlink: 'syz.0.10906': attribute type 21 has an invalid length.
[ 1051.504835][ T1220] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10906'.
[ 1051.721870][ T1225] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10907'.
[ 1051.885712][ T1228] loop0: detected capacity change from 0 to 1024
[ 1051.960631][ T1228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1051.965627][ T1228] ext4 filesystem being mounted at /771/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1051.994623][ T1233] netlink: 'syz.6.10910': attribute type 28 has an invalid length.
[ 1051.999000][ T1233] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10910'.
[ 1052.258915][ T1245] loop6: detected capacity change from 0 to 1024
[ 1052.265055][ T1245] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1052.285167][ T1245] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1052.306968][ T1245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1052.347049][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1052.501566][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1052.618968][ T1252] loop0: detected capacity change from 0 to 512
[ 1052.649721][ T1252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1052.659043][ T1252] ext4 filesystem being mounted at /772/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1052.668416][ T1252] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1052.673932][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10919'.
[ 1052.712551][ T1252] loop0: detected capacity change from 0 to 512
[ 1052.726992][ T1252] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.10918: bg 0: block 5: invalid block bitmap
[ 1052.741292][ T1252] loop0: lost filesystem error report for type 5 error -117
[ 1052.741726][ T1252] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1052.748543][    C0] EXT4-fs (loop0): error count since last fsck: 1
[ 1052.748559][    C0] EXT4-fs (loop0): initial error at time 1785254225: ext4_validate_block_bitmap:432
[ 1052.748576][    C0] EXT4-fs (loop0): last error at time 1785254225: ext4_validate_block_bitmap:432
[ 1052.781662][ T1261] loop6: detected capacity change from 0 to 512
[ 1052.793140][ T1261] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[ 1052.795749][ T1252] loop0: lost filesystem error report for type 5 error -117
[ 1052.796537][ T1261] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[ 1052.807118][ T1261] EXT4-fs (loop6): 1 truncate cleaned up
[ 1052.812238][ T1261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1052.859670][ T1252] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10918: invalid indirect mapped block 3 (level 2)
[ 1052.860100][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1052.864530][ T1252] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1052.868724][ T1252] EXT4-fs (loop0): 1 orphan inode deleted
[ 1052.873856][ T1252] EXT4-fs (loop0): 1 truncate cleaned up
[ 1052.876658][ T1252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1053.414038][ T1271] loop1: detected capacity change from 0 to 64
[ 1053.473109][ T1271] syz.1.10924: attempt to access beyond end of device
[ 1053.473109][ T1271] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[ 1053.593141][ T1278] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1053.601913][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1053.638634][ T1280] vxcan0: tx address claim with dest, not broadcast
[ 1053.693275][ T1278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1053.776167][ T1286] netlink: 'syz.0.10931': attribute type 1 has an invalid length.
[ 1053.933831][ T1278] overlayfs: upper fs needs to support d_type.
[ 1053.964379][ T1278] overlayfs: upper fs does not support tmpfile.
[ 1053.975334][ T1296] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[ 1053.985643][ T1296] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1053.990579][ T1296] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.10936: Block bitmap for bg 0 marked uninitialized
[ 1054.006370][ T1296] loop0: lost filesystem error report for type 5 error -117
[ 1054.006692][ T1296] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1054.009163][    C1] EXT4-fs (loop0): error count since last fsck: 1
[ 1054.009174][    C1] EXT4-fs (loop0): initial error at time 1785254226: ext4_read_block_bitmap_nowait:517
[ 1054.009184][    C1] EXT4-fs (loop0): last error at time 1785254226: ext4_read_block_bitmap_nowait:517
[ 1054.028347][ T1296] loop0: lost filesystem error report for type 5 error -117
[ 1054.033212][ T1296] EXT4-fs (loop0): 1 orphan inode deleted
[ 1054.045238][ T1296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1054.064219][ T1296] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[ 1054.070622][ T1296] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1054.076309][ T1296] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.10936: Block bitmap for bg 0 marked uninitialized
[ 1054.165508][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1054.215875][ T1303] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1054.232262][ T1303] XFS (loop6): Ending clean mount
[ 1054.235628][ T1303] XFS (loop6): Quotacheck needed: Please wait.
[ 1054.393671][ T1303] XFS (loop6): Quotacheck: Done.
[ 1054.715241][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.717663][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.720004][ T1382] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 1054.725823][   T34] audit: type=1800 audit(1785254227.405:528): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10940" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0
[ 1054.758620][ T1339] set_capacity_and_notify: 3 callbacks suppressed
[ 1054.758629][ T1339] loop0: detected capacity change from 0 to 512
[ 1054.784713][ T1339] EXT4-fs (loop0): 1 truncate cleaned up
[ 1054.787622][ T1339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1054.794386][ T1339] EXT4-fs warning (device loop0): ext4_resize_begin:72: won't resize using backup superblock at 1
[ 1054.819047][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1054.929595][ T1344] loop0: detected capacity change from 0 to 256
[ 1054.933331][ T1344] vfat: Deprecated parameter 'posix'
[ 1054.935747][ T1344] FAT-fs: "posix" option is obsolete, not supported now
[ 1055.015764][T30651] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1055.877836][T21386] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1056.047479][T21386] usb 7-1: Using ep0 maxpacket: 32
[ 1056.057008][T21386] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[ 1056.069142][T21386] usb 7-1: config 0 has no interface number 0
[ 1056.073632][T21386] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1056.145009][T21386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.147973][T21386] usb 7-1: Product: syz
[ 1056.149582][T21386] usb 7-1: Manufacturer: syz
[ 1056.151385][T21386] usb 7-1: SerialNumber: syz
[ 1056.157984][T21386] usb 7-1: config 0 descriptor??
[ 1056.205237][T21386] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1056.462217][T21386] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1056.473238][T21386] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1056.935822][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1056.951142][T21386] usb 7-1: USB disconnect, device number 24
[ 1056.992602][T21386] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1057.050996][T21386] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1057.065666][T21386] quatech2 7-1:0.51: device disconnected
[ 1057.314909][ T1364] loop0: detected capacity change from 0 to 8
[ 1057.480909][ T1367] loop1: detected capacity change from 0 to 4096
[ 1057.827998][T21386] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[ 1058.008874][T21386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1058.020866][T21386] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1058.027550][T21386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[ 1058.035522][T21386] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 1058.041149][T21386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.046119][T21386] usb 7-1: config 0 descriptor??
[ 1058.072195][ T1377] bridge2: entered promiscuous mode
[ 1058.259294][T21386] ath6kl: Failed to submit usb control message: -71
[ 1058.267028][T21386] ath6kl: unable to send the bmi data to the device: -71
[ 1058.272519][ T1388] loop1: detected capacity change from 0 to 4096
[ 1058.275041][T21386] ath6kl: Unable to send get target info: -71
[ 1058.288216][T21386] ath6kl: Failed to init ath6kl core: -71
[ 1058.291711][T21386] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1058.297902][T21386] usb 7-1: USB disconnect, device number 25
[ 1058.847154][   T34] audit: type=1800 audit(1785254231.555:529): pid=1406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10976" name="file1" dev="overlay" ino=2451 res=0 errno=0
[ 1059.079645][ T1415] bridge0: port 3(syz_tun) entered disabled state
[ 1059.091146][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.094855][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.274244][ T1415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1059.284660][ T1415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1059.401274][T17759] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.417528][T17759] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.421982][T17759] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.429310][T17759] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.503229][ T1436] loop1: detected capacity change from 0 to 1024
[ 1059.513730][ T1436] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1059.527173][ T1436] hfsplus: hfsplus: invalid btree header node
[ 1059.531528][ T1436] hfsplus: (loop1): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only.
[ 1059.536723][ T1436] hfsplus: Run fsck.hfsplus to repair.
[ 1060.056195][ T1450] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[ 1060.106635][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.111123][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.114508][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.525529][ T1463] loop6: detected capacity change from 0 to 256
[ 1060.777562][T24127] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[ 1060.835007][ T1459] loop1: detected capacity change from 0 to 131072
[ 1060.838652][ T1459] F2FS-fs (loop1): invalid crc value
[ 1060.866872][ T1459] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1060.874687][ T1459] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1060.885445][ T1459] F2FS-fs (loop1): access invalid blkaddr:0
[ 1060.887537][ T1459] CPU: 1 UID: 0 PID: 1459 Comm: syz.1.10998 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1060.887552][ T1459] Tainted: [L]=SOFTLOCKUP
[ 1060.887555][ T1459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1060.887560][ T1459] Call Trace:
[ 1060.887566][ T1459]  <TASK>
[ 1060.887571][ T1459]  dump_stack_lvl+0xe8/0x150
[ 1060.887590][ T1459]  __f2fs_is_valid_blkaddr+0xe62/0x14f0
[ 1060.887607][ T1459]  sanity_check_extent_cache+0x1a3/0x620
[ 1060.887623][ T1459]  ? f2fs_sanity_check_inline_data+0x70/0x740
[ 1060.887634][ T1459]  f2fs_iget+0x41fc/0x6230
[ 1060.887654][ T1459]  f2fs_lookup+0x3ff/0xa50
[ 1060.887664][ T1459]  ? __pfx_apparmor_path_mknod+0x10/0x10
[ 1060.887675][ T1459]  ? kernel_read_file_from_fd+0x120/0x130
[ 1060.887686][ T1459]  ? generic_permission+0x2bf/0x670
[ 1060.887698][ T1459]  ? __pfx_f2fs_lookup+0x10/0x10
[ 1060.887711][ T1459]  ? bpf_lsm_inode_permission+0x9/0x20
[ 1060.887720][ T1459]  ? security_inode_permission+0xb7/0x2e0
[ 1060.887730][ T1459]  ? may_o_create+0x2d2/0x370
[ 1060.887739][ T1459]  ? bpf_lsm_inode_create+0x9/0x20
[ 1060.887748][ T1459]  path_openat+0x111f/0x3830
[ 1060.887768][ T1459]  do_file_open+0x23e/0x4a0
[ 1060.887777][ T1459]  ? __pfx_do_file_open+0x10/0x10
[ 1060.887792][ T1459]  ? _raw_spin_unlock+0x28/0x50
[ 1060.887812][ T1459]  ? alloc_fd+0x651/0x6c0
[ 1060.887827][ T1459]  do_sys_openat2+0x115/0x200
[ 1060.887840][ T1459]  ? __se_sys_futex+0x3a8/0x450
[ 1060.887849][ T1459]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1060.887862][ T1459]  ? __pfx___se_sys_futex+0x10/0x10
[ 1060.887871][ T1459]  ? __se_sys_chdir+0x1ce/0x2a0
[ 1060.887881][ T1459]  ? __pfx___se_sys_chdir+0x10/0x10
[ 1060.887893][ T1459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1060.887903][ T1459]  __x64_sys_open+0x11e/0x150
[ 1060.887917][ T1459]  do_syscall_64+0x174/0x580
[ 1060.887927][ T1459]  ? trace_irq_disable+0x3b/0x140
[ 1060.887939][ T1459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1060.887947][ T1459] RIP: 0033:0x7f233219de99
[ 1060.887956][ T1459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1060.887962][ T1459] RSP: 002b:00007f2333083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1060.887972][ T1459] RAX: ffffffffffffffda RBX: 00007f2332425fa0 RCX: 00007f233219de99
[ 1060.887977][ T1459] RDX: 0000000000000070 RSI: 00000000001490c1 RDI: 00002000009e1000
[ 1060.887982][ T1459] RBP: 00007f2332233eaf R08: 0000000000000000 R09: 0000000000000000
[ 1060.887987][ T1459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1060.887991][ T1459] R13: 00007f2332426038 R14: 00007f2332425fa0 R15: 00007ffc0d946ca8
[ 1060.888003][ T1459]  </TASK>
[ 1060.888048][ T1459] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix
[ 1060.939769][T24127] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1060.986986][T24127] usb 7-1: config 1 has no interface number 0
[ 1060.995623][T24127] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1061.000637][T24127] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1061.005149][T24127] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1061.009277][T24127] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1061.013761][T24127] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1061.021536][T24127] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1061.024503][T24127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.027218][T24127] usb 7-1: Product: syz
[ 1061.030820][T24127] usb 7-1: Manufacturer: syz
[ 1061.033459][T24127] usb 7-1: SerialNumber: syz
[ 1061.044441][ T1463] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1061.253419][ T1463] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1061.339477][ T1469] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1061.344409][ T1469] bond2 (unregistering): Released all slaves
[ 1061.457769][ T1463] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1061.589617][ T1473] loop0: detected capacity change from 0 to 128
[ 1061.591966][ T1473] EXT4-fs: Ignoring removed orlov option
[ 1061.613719][ T1473] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1061.618872][ T1473] ext4 filesystem being mounted at /791/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1061.909219][ T1463] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1062.042746][T24127] cdc_ncm 7-1:1.1: bind() failure
[ 1062.142052][T22617] usb 7-1: USB disconnect, device number 26
[ 1062.489272][T27368] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1062.662446][ T1486] loop0: detected capacity change from 0 to 128
[ 1062.687952][ T1486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[ 1062.705582][ T1486] System zones: 1-3, 19-19, 35-36
[ 1062.718839][ T1486] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1062.734093][ T1486] ext4 filesystem being mounted at /795/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1062.806638][T27368] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1062.999429][ T1499] geneve1: entered promiscuous mode
[ 1063.009117][ T1501] loop9: detected capacity change from 0 to 7
[ 1063.035042][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.038432][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.041676][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.044763][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.050933][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.054080][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.056796][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.059915][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.062750][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.066259][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.069797][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.072961][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.076013][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.079388][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.080582][ T1502] ALSA: mixer_oss: invalid OSS volume ''
[ 1063.083151][ T1501] ldm_validate_partition_table(): Disk read failed.
[ 1063.088863][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.092107][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.102472][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.123252][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1063.126414][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.129455][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1063.134039][ T1501] Dev loop9: unable to read RDB block 0
[ 1063.136397][ T1501]  loop9: unable to read partition table
[ 1063.139384][ T1501] loop9: partition table beyond EOD, truncated
[ 1063.149849][ T1501] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X	%`ր{֐ȵ4FLQk݊) failed (rc=-5)
[ 1063.218660][ T1509] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[ 1063.288656][ T1513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11018'.
[ 1063.292024][ T1513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11018'.
[ 1063.295392][ T1513] netlink: 'syz.6.11018': attribute type 6 has an invalid length.
[ 1063.303910][T17759] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1063.312359][T17759] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1063.324437][T17759] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1063.340492][T17759] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1063.400731][ T1520] loop0: detected capacity change from 0 to 512
[ 1063.413730][ T1520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1063.430074][ T1520] EXT4-fs (loop0): 1 truncate cleaned up
[ 1063.436117][ T1520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1063.510349][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1063.774158][ T1535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11028'.
[ 1063.879051][ T1542] loop0: detected capacity change from 0 to 256
[ 1064.133252][ T1552] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11035'.
[ 1064.140991][ T1552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1064.146862][ T1552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1064.152509][ T1552] bond0 (unregistering): Released all slaves
[ 1064.280213][ T1555] loop6: detected capacity change from 0 to 512
[ 1064.284686][ T1555] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1064.301510][ T1555] EXT4-fs (loop6): 1 truncate cleaned up
[ 1064.313087][ T1555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1064.339408][ T1555] EXT4-fs: Can't set or change test_dummy_encryption on remount
[ 1064.376613][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1064.867465][T22617] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1065.027396][T22617] usb 7-1: Using ep0 maxpacket: 16
[ 1065.031658][T22617] usb 7-1: config index 0 descriptor too short (expected 1068, got 27)
[ 1065.035150][T22617] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1065.044031][T22617] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[ 1065.048655][T22617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.051995][T22617] usb 7-1: Product: syz
[ 1065.053803][T22617] usb 7-1: Manufacturer: syz
[ 1065.055733][T22617] usb 7-1: SerialNumber: syz
[ 1065.073447][T22617] usb 7-1: config 0 descriptor??
[ 1065.294785][T22617] usb 7-1: USB disconnect, device number 27
[ 1065.656436][ T1589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11051'.
[ 1065.864059][   T34] audit: type=1326 audit(1785254238.585:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1592 comm="syz.0.11053" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab3a19de99 code=0x0
[ 1065.892144][ T1599] loop6: detected capacity change from 0 to 4096
[ 1065.894878][ T1599] EXT4-fs: inline encryption not supported
[ 1065.897774][ T1599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1065.900434][ T1599] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1065.904821][ T1599] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 1065.907948][ T1599] System zones: 0-5
[ 1065.910506][ T1599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1066.252347][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1066.476700][ T1604] loop6: detected capacity change from 0 to 32768
[ 1066.480857][ T1604] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11056 (1604)
[ 1066.486792][ T1604] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1066.490635][ T1604] BTRFS info (device loop6): using crc32c checksum algorithm
[ 1066.532232][ T1604] BTRFS info (device loop6): enabling ssd optimizations
[ 1066.534693][ T1604] BTRFS info (device loop6): turning on flush-on-commit
[ 1066.538370][ T1604] BTRFS info (device loop6): enabling free space tree
[ 1066.547521][ T1604] BTRFS info (device loop6): enabling auto defrag
[ 1066.549940][ T1604] BTRFS info (device loop6): use lzo compression, level 1
[ 1066.554102][ T1604] BTRFS info (device loop6): max_inline set to 4096
[ 1066.635911][   T34] audit: type=1800 audit(1785254239.355:531): pid=1604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11056" name="file1" dev="loop6" ino=260 res=0 errno=0
[ 1066.886219][ T1624] loop1: detected capacity change from 0 to 32768
[ 1066.890521][ T1624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11059 (1624)
[ 1066.928746][ T1624] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1066.932998][ T1624] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1067.063173][ T1626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11060'.
[ 1067.095356][ T1624] BTRFS info (device loop1): enabling ssd optimizations
[ 1067.098029][ T1624] BTRFS info (device loop1): turning on sync discard
[ 1067.100326][ T1624] BTRFS info (device loop1): enabling free space tree
[ 1067.102524][ T1624] BTRFS info (device loop1): use zlib compression, level 3
[ 1067.118631][   T34] audit: type=1800 audit(1785254239.835:532): pid=1624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11059" name="file1" dev="loop1" ino=260 res=0 errno=0
[ 1067.281364][T24417] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1067.372795][T30651] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1068.094974][ T1658] loop6: detected capacity change from 0 to 40427
[ 1068.123490][ T1658] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1068.132305][ T1658] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1068.541444][ T1658] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1068.579639][ T1658] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1068.583023][ T1658] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1069.486533][ T1687] cgroup: noprefix used incorrectly
[ 1069.557145][ T1691] binder_alloc: 1690: pid 1690 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1070.455685][ T1698] orangefs_mount: mount request failed with -4
[ 1070.782000][ T1725] loop1: detected capacity change from 0 to 1024
[ 1070.785374][ T1725] EXT4-fs: Ignoring removed bh option
[ 1070.803719][ T1725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1070.842377][T24417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1070.898705][T22617] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1071.048004][ T1743] loop0: detected capacity change from 0 to 16
[ 1071.051485][ T1743] erofs (device loop0): mounted with root inode @ nid 36.
[ 1071.059983][T22617] usb 7-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1071.069867][T22617] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1071.083399][T22617] usb 7-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1071.093518][T22617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.100691][T22617] usb 7-1: Product: syz
[ 1071.105217][T22617] usb 7-1: Manufacturer: syz
[ 1071.112739][T22617] usb 7-1: SerialNumber: syz
[ 1071.140668][T22617] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input43
[ 1071.330557][ T5045] bcm5974 7-1:1.0: could not read from device
[ 1071.342695][ T5045] bcm5974 7-1:1.0: could not read from device
[ 1071.424215][T22617] bcm5974 7-1:1.0: could not read from device
[ 1071.445311][T22617] input: failed to attach handler mousedev to device input43, error: -5
[ 1071.458485][T22617] usb 7-1: USB disconnect, device number 28
[ 1071.473079][ T5045] bcm5974 7-1:1.0: could not read from device
[ 1072.240257][ T1785] loop1: detected capacity change from 0 to 16
[ 1072.248239][ T1785] erofs (device loop1): mounted with root inode @ nid 36.
[ 1072.487026][ T1782] loop6: detected capacity change from 0 to 131072
[ 1072.490241][ T1782] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[ 1072.492429][ T1782] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1072.495671][ T1782] F2FS-fs (loop6): invalid crc value
[ 1072.550472][ T1782] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1072.561466][ T1782] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1072.564415][ T1782] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1072.571777][   T34] audit: type=1800 audit(1785254245.295:533): pid=1782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11117" name="file1" dev="loop6" ino=7 res=0 errno=0
[ 1073.357404][T24127] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[ 1073.509830][T24127] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 1073.513745][T24127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1073.519772][T24127] usb 7-1: config 0 descriptor??
[ 1073.932183][T24127] koneplus 0003:1E7D:2E22.0019: hidraw0: USB HID vef.fd Device [HID 1e7d:2e22] on usb-dummy_hcd.6-1/input0
[ 1074.138600][T22617] usb 7-1: USB disconnect, device number 29
[ 1074.967432][T22617] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1075.120609][T22617] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.130655][T22617] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1075.147515][T22617] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1075.151855][T22617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1075.155345][T22617] usb 7-1: SerialNumber: syz
[ 1075.605505][T22617] usb 7-1: 0:2 : does not exist
[ 1075.646444][T22617] usb 7-1: USB disconnect, device number 30
[ 1075.676734][T25735] udevd[25735]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1076.010390][ T1812] loop6: detected capacity change from 0 to 512
[ 1076.013733][ T1812] EXT4-fs: Ignoring removed orlov option
[ 1076.022770][ T1812] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1076.042508][ T1812] EXT4-fs (loop6): 1 truncate cleaned up
[ 1076.047146][ T1812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1076.185153][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1076.804215][ T1832] binder: 1831:1832 ioctl c0306201 200000000480 returned -14
[ 1076.886797][ T1834] netlink: 'syz.1.11138': attribute type 1 has an invalid length.
[ 1076.890217][ T1834] netlink: 200 bytes leftover after parsing attributes in process `syz.1.11138'.
[ 1076.893910][ T1834] netlink: 41 bytes leftover after parsing attributes in process `syz.1.11138'.
[ 1076.937926][ T1836] loop1: detected capacity change from 0 to 128
[ 1076.941675][ T1836] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1076.945861][ T1836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1077.120939][   T34] audit: type=1326 audit(1785254249.845:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.135221][   T34] audit: type=1326 audit(1785254249.855:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.167983][   T34] audit: type=1326 audit(1785254249.855:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.192477][   T34] audit: type=1326 audit(1785254249.855:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.215956][   T34] audit: type=1326 audit(1785254249.855:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.240021][   T34] audit: type=1326 audit(1785254249.855:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.263322][   T34] audit: type=1326 audit(1785254249.855:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.263346][   T34] audit: type=1326 audit(1785254249.855:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.263363][   T34] audit: type=1326 audit(1785254249.855:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1842 comm="syz.1.11142" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f233219de99 code=0x7ffc0000
[ 1077.263587][ T1847] loop1: detected capacity change from 0 to 512
[ 1077.281796][ T1847] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1077.285923][ T1847] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.11144: inode has both inline data and extents flags
[ 1077.285954][ T1847] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1077.286192][ T1847] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.11144: couldn't read orphan inode 15 (err -117)
[ 1077.286211][ T1847] loop1: lost filesystem error report for type 5 error -117
[ 1077.289184][ T1847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1077.376852][T24417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1077.579888][ T1854] loop0: detected capacity change from 0 to 1024
[ 1077.583324][ T1854] EXT4-fs: Ignoring removed bh option
[ 1077.594929][ T1854] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[ 1077.621438][ T1854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1077.637522][ T1854] EXT4-fs (loop0): Online resizing not supported with bigalloc
[ 1077.664364][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1077.820285][ T1874] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11155'.
[ 1077.832944][ T1874] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11155'.
[ 1077.966205][ T1888] loop0: detected capacity change from 0 to 256
[ 1077.980942][ T1888] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[ 1078.056448][ T1892] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11164'.
[ 1078.447484][T24127] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1078.600425][T24127] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1078.603741][T24127] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1078.607986][T24127] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1078.611722][T24127] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1078.618028][T24127] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1078.621525][T24127] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1078.624842][T24127] usb 7-1: Product: syz
[ 1078.626562][T24127] usb 7-1: Manufacturer: syz
[ 1078.635634][T24127] cdc_wdm 7-1:1.0: skipping garbage
[ 1078.639102][T24127] cdc_wdm 7-1:1.0: skipping garbage
[ 1078.643546][T24127] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1078.646034][T24127] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1078.838853][T22617] usb 7-1: USB disconnect, device number 31
[ 1079.277467][T22617] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1079.430543][T22617] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1079.434192][T22617] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.438606][T22617] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1079.442535][T22617] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1079.449702][T22617] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1079.453503][T22617] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1079.456724][T22617] usb 7-1: Product: syz
[ 1079.460229][T22617] usb 7-1: Manufacturer: syz
[ 1079.468670][T22617] cdc_wdm 7-1:1.0: skipping garbage
[ 1079.473661][T22617] cdc_wdm 7-1:1.0: skipping garbage
[ 1079.485955][T22617] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1079.488644][T22617] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1080.492822][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.495809][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.503259][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.505993][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.517882][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.520649][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.523437][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.526134][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.528948][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.531692][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.534434][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.537143][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.539919][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.542631][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.545296][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.547998][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.550845][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.553565][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.556297][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1080.558988][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1080.562487][T22617] usb 7-1: USB disconnect, device number 32
[ 1080.564993][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1081.245752][ T1920] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11177'.
[ 1081.265098][ T1920] bridge_slave_1: left allmulticast mode
[ 1081.271771][ T1920] bridge_slave_1: left promiscuous mode
[ 1081.281877][ T1920] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1081.318706][ T1927] binder: 1926:1927 ioctl c0205867 200000000840 returned -22
[ 1081.566218][ T1949] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1082.025242][ T1958] loop1: detected capacity change from 0 to 4096
[ 1082.038604][ T1958] ntfs3(loop1): ino=0, mi_enum_attr
[ 1082.060412][ T1958] ntfs3(loop1): ino=0, mi_enum_attr
[ 1082.066120][ T1958] ntfs3(loop1): ino=0, mi_enum_attr
[ 1082.693416][ T1966] netlink: zone id is out of range
[ 1082.695259][ T1966] netlink: zone id is out of range
[ 1082.699976][ T1966] netlink: zone id is out of range
[ 1082.702699][ T1966] netlink: del zone limit has 8 unknown bytes
[ 1083.184900][T24424] Bluetooth: hci1: unexpected event for opcode 0x201c
[ 1083.494065][ T2000] netlink: 'syz.0.11211': attribute type 1 has an invalid length.
[ 1083.502264][ T2000] netlink: 232 bytes leftover after parsing attributes in process `syz.0.11211'.
[ 1083.506045][ T2000] netlink: 'syz.0.11211': attribute type 1 has an invalid length.
[ 1083.660536][ T2010] loop0: detected capacity change from 0 to 512
[ 1083.666695][ T2010] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1083.689325][ T2010] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.11217: bad orphan inode 131083
[ 1083.708548][ T2010] loop0: lost filesystem error report for type 5 error -117
[ 1083.716395][ T2010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1083.750684][   T34] audit: type=1800 audit(1785254256.465:543): pid=2010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11217" name="file2" dev="loop0" ino=18 res=0 errno=0
[ 1083.805635][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1083.952609][   T34] audit: type=1326 audit(1785254256.675:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.11219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3a19de99 code=0x7ffc0000
[ 1083.972045][   T34] audit: type=1326 audit(1785254256.675:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.11219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3a19de99 code=0x7ffc0000
[ 1083.986202][   T34] audit: type=1326 audit(1785254256.675:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.11219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3a19de99 code=0x7ffc0000
[ 1084.016006][   T34] audit: type=1326 audit(1785254256.675:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.11219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3a19de99 code=0x7ffc0000
[ 1084.041781][   T34] audit: type=1326 audit(1785254256.675:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.11219" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fab3a19de99 code=0x7ffc0000
[ 1084.054915][   T34] audit: type=1326 audit(1785254256.675:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.11219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3a19de99 code=0x7ffc0000
[ 1084.070874][   T34] audit: type=1326 audit(1785254256.675:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.11219" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab3a19de99 code=0x7ffc0000
[ 1084.080811][   T34] audit: type=1326 audit(1785254256.675:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.11219" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fab3a19de99 code=0x7ffc0000
[ 1084.461422][ T2032] xt_TCPMSS: Only works on TCP SYN packets
[ 1085.518775][ T2069] loop1: detected capacity change from 0 to 16
[ 1085.530653][ T2069] erofs (device loop1): mounted with root inode @ nid 36.
[ 1085.545208][   T34] audit: type=1800 audit(1785254258.265:552): pid=2069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11242" name="file1" dev="loop1" ino=86 res=0 errno=0
[ 1085.609262][ T2071] loop6: detected capacity change from 0 to 512
[ 1085.623270][ T2071] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1085.643352][ T2071] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.11244: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[ 1085.652675][ T2071] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1085.652973][ T2071] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.11244: couldn't read orphan inode 15 (err -117)
[ 1085.660227][    C0] EXT4-fs (loop6): error count since last fsck: 1
[ 1085.660325][    C0] EXT4-fs (loop6): initial error at time 1785254258: ext4_iget_extra_inode:5180: inode 15
[ 1085.660340][    C0] EXT4-fs (loop6): last error at time 1785254258: ext4_iget_extra_inode:5180: inode 15
[ 1085.670844][ T2071] loop6: lost filesystem error report for type 5 error -117
[ 1085.672285][ T2071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1085.716845][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1086.164891][ T2103] loop6: detected capacity change from 0 to 256
[ 1086.175692][ T2103] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[ 1086.275521][ T2108] loop6: detected capacity change from 0 to 512
[ 1086.342409][ T2108] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1086.437716][ T2108] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.11259: bg 0: block 104: invalid block bitmap
[ 1086.451433][ T2108] loop6: lost filesystem error report for type 5 error -117
[ 1086.457353][    C1] EXT4-fs (loop6): error count since last fsck: 1
[ 1086.462260][    C1] EXT4-fs (loop6): initial error at time 1785254259: ext4_validate_block_bitmap:432
[ 1086.465279][    C1] EXT4-fs (loop6): last error at time 1785254259: ext4_validate_block_bitmap:432
[ 1086.484742][ T2108] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1086.487631][ T2108] loop6: lost filesystem error report for type 5 error -117
[ 1086.494666][ T2108] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.11259: invalid indirect mapped block 1 (level 1)
[ 1086.512532][ T2108] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1086.521502][ T2108] EXT4-fs (loop6): 1 truncate cleaned up
[ 1086.552325][ T2108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1086.571256][ T2108] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1086.694464][ T2120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11265'.
[ 1086.696762][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.039126][ T2137] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11272'.
[ 1087.232373][ T2147] loop1: detected capacity change from 0 to 256
[ 1087.236956][ T2147] exFAT-fs (loop1): bogus number of FAT structure
[ 1087.240152][ T2147] exFAT-fs (loop1): failed to read boot sector
[ 1087.242943][ T2147] exFAT-fs (loop1): failed to recognize exfat type
[ 1087.259998][ T2147] loop1: detected capacity change from 0 to 512
[ 1087.263603][ T2147] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1087.268102][ T2147] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.11276: inode has both inline data and extents flags
[ 1087.272467][ T2147] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1087.272805][ T2147] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.11276: couldn't read orphan inode 15 (err -117)
[ 1087.280515][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1087.280533][    C0] EXT4-fs (loop1): initial error at time 1785254259: ext4_orphan_get:1399: inode 15
[ 1087.280553][    C0] EXT4-fs (loop1): last error at time 1785254259: ext4_orphan_get:1399: inode 15
[ 1087.290494][ T2147] loop1: lost filesystem error report for type 5 error -117
[ 1087.291478][ T2147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1087.306445][T24127] IPVS: starting estimator thread 0...
[ 1087.311641][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11276'.
[ 1087.337458][T24417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.369638][T24110] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1087.397660][ T2150] IPVS: using max 47 ests per chain, 112800 per kthread
[ 1087.546520][T24110] usb 7-1: Using ep0 maxpacket: 8
[ 1087.553675][T24110] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1087.560503][T24110] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1087.564152][T24110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1087.570857][T24110] usb 7-1: config 0 descriptor??
[ 1087.578737][T24110] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1087.698519][ T2160] loop1: detected capacity change from 0 to 512
[ 1087.748003][ T2160] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 1087.753754][ T2160] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 1087.759175][ T2160] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1087.764270][ T2160] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1087.771059][ T2160] EXT4-fs (loop1): Cannot turn on quotas: error -22
[ 1087.792797][ T2160] EXT4-fs (loop1): 1 orphan inode deleted
[ 1087.796640][ T2160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1087.831167][T24417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.956803][ T2165] loop1: detected capacity change from 0 to 1024
[ 1087.965541][ T2165] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1087.972164][ T2165] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.11283: Bad quota inum: 655363, type: 0
[ 1087.976782][ T2165] loop1: lost filesystem error report for type 5 error -117
[ 1087.977016][ T2165] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=655363). Please run e2fsck to fix.
[ 1087.980089][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1087.980100][    C1] EXT4-fs (loop1): initial error at time 1785254260: ext4_quota_enable:7228
[ 1087.980111][    C1] EXT4-fs (loop1): last error at time 1785254260: ext4_quota_enable:7228
[ 1087.996276][T24110] gspca_vc032x: reg_w err -71
[ 1087.999572][ T2165] EXT4-fs (loop1): mount failed
[ 1088.002737][T24110] vc032x 7-1:0.0: probe with driver vc032x failed with error -71
[ 1088.011799][T24110] usb 7-1: USB disconnect, device number 33
[ 1088.214622][ T2172] loop1: detected capacity change from 0 to 4096
[ 1088.221165][ T2172] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 1088.231466][ T2172] ntfs3(loop1): Failed to load $MFT (-2).
[ 1088.281115][ T2174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11287'.
[ 1088.604028][ T2188] loop1: detected capacity change from 0 to 4096
[ 1088.633199][ T2191] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1088.665033][ T2193] program syz.6.11296 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1088.736775][ T2195] loop6: detected capacity change from 0 to 128
[ 1088.768600][ T2195] qnx6: superblock #1 checksum error
[ 1088.961375][ T2205] loop1: detected capacity change from 0 to 1024
[ 1088.971700][ T2205] EXT4-fs: Ignoring removed bh option
[ 1088.993040][ T2205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1089.004108][   T34] audit: type=1800 audit(1785254261.725:553): pid=2205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11302" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1089.056249][   T34] audit: type=1800 audit(1785254261.775:554): pid=2205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11302" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1089.085641][ T2195] loop6: detected capacity change from 0 to 32768
[ 1089.088984][T24417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1089.093525][ T2195] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11298 (2195)
[ 1089.153835][ T2195] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1089.158168][ T2195] BTRFS info (device loop6): using crc32c checksum algorithm
[ 1089.209341][ T2218] scsi_nl_rcv_msg: discarding partial skb
[ 1089.273914][ T2195] BTRFS info (device loop6): enabling ssd optimizations
[ 1089.280634][ T2195] BTRFS info (device loop6): turning on flush-on-commit
[ 1089.286086][ T2195] BTRFS info (device loop6): enabling free space tree
[ 1089.297415][ T2195] BTRFS info (device loop6): enabling auto defrag
[ 1089.301005][ T2195] BTRFS info (device loop6): use lzo compression, level 1
[ 1089.308095][ T2195] BTRFS info (device loop6): max_inline set to 4096
[ 1089.384174][ T2195] BTRFS critical (device loop6 state E): emergency shutdown
[ 1089.455908][T30651] BTRFS info (device loop6 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1089.589751][ T2235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11309'.
[ 1089.597735][ T2235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11309'.
[ 1089.607050][ T2235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11309'.
[ 1089.617461][ T2235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11309'.
[ 1089.869752][ T2244] tmpfs: Bad value for 'mpol'
[ 1089.890095][ T2247] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11314'.
[ 1091.001676][ T2274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1091.004775][ T2274] IPv6: NLM_F_CREATE should be set when creating new route
[ 1091.007814][ T2274] IPv6: NLM_F_CREATE should be set when creating new route
[ 1091.376730][ T9847] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1091.539262][ T2291] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1091.541418][ T2291] syzkaller0: linktype set to 769
[ 1091.914918][ T2295] loop1: detected capacity change from 0 to 2048
[ 1091.922493][ T2295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1092.001243][ T2297] zero sized request
[ 1092.086666][ T2301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11338'.
[ 1092.122818][ T2303] x_tables: duplicate underflow at hook 2
[ 1092.144319][ T2306] squashfs image failed sanity check
[ 1092.176548][ T2308] openvswitch: netlink: Unknown nsh attribute 0
[ 1092.991951][ T2350] set_capacity_and_notify: 1 callbacks suppressed
[ 1092.992047][ T2350] loop0: detected capacity change from 0 to 4096
[ 1093.033016][ T2350] ntfs3(loop0): mft corrupted
[ 1093.089133][   T34] audit: type=1326 audit(1785254265.815:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2351 comm="syz.0.11362" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab3a19de99 code=0x0
[ 1093.383250][T24424] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1093.387174][ T5000] Bluetooth: hci3: command 0x1003 tx timeout
[ 1093.907540][ T2372] loop1: detected capacity change from 0 to 2048
[ 1093.931834][ T2372] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1094.068974][ T2374] loop0: detected capacity change from 0 to 512
[ 1094.145917][ T2374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1094.151134][ T2374] ext4 filesystem being mounted at /910/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1094.241688][T27368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1094.396987][   T34] audit: type=1326 audit(1785254267.105:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.1.11375" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f233219de99 code=0x0
[ 1095.054938][ T2394] loop6: detected capacity change from 0 to 131072
[ 1095.060237][ T2394] F2FS-fs (loop6): invalid crc value
[ 1095.103881][ T2394] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1095.113263][ T2394] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1096.984227][   T34] audit: type=1107 audit(1785254269.705:557): pid=2430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1QGp'Qx&DIprԛ/yv6Z>|i~>j^,Bd~$?i<Bd/%Uʪڴ.*qG%Sܤ1-y@cZJx8uȞZUA;~*k^$*1 JwPMkm: [rV&h9TSE~S$p'
[ 1098.005698][ T2454] netlink: 'syz.0.11404': attribute type 1 has an invalid length.
[ 1098.171112][ T2460] netlink: 'syz.0.11407': attribute type 3 has an invalid length.
[ 1098.177027][ T2460] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11407'.
[ 1098.403528][ T2472] loop0: detected capacity change from 0 to 256
[ 1098.557649][T24127] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1098.707623][T24127] usb 7-1: Using ep0 maxpacket: 8
[ 1098.711792][T24127] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1098.718129][T24127] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1098.721909][T24127] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1098.725012][T24127] usb 7-1: Product: syz
[ 1098.726759][T24127] usb 7-1: Manufacturer: syz
[ 1098.729262][T24127] usb 7-1: SerialNumber: syz
[ 1098.942078][T24127] usb 7-1: Handspring Visor / Palm OS: No valid connect info available
[ 1098.945274][T24127] usb 7-1: Handspring Visor / Palm OS: port 231, is for unknown use
[ 1098.951679][T24127] usb 7-1: Handspring Visor / Palm OS: port 193, is for Debugger use
[ 1098.954864][T24127] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2
[ 1099.091398][ T2495] loop1: detected capacity change from 0 to 4096
[ 1099.143027][T24127] usb 7-1: palm_os_3_probe - error -71 getting bytes available request
[ 1099.152045][T24127] visor 7-1:1.0: Handspring Visor / Palm OS converter detected
[ 1099.157878][ T2496] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1099.163183][T24127] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1099.173482][T24127] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1099.181070][T24127] usb 7-1: USB disconnect, device number 34
[ 1099.186351][T24127] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1099.197966][T24127] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1099.202591][T24127] visor 7-1:1.0: device disconnected
[ 1099.332244][ T2500] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1099.870911][ T2530] kAFS: No cell specified
[ 1099.965810][ T2532] loop6: detected capacity change from 0 to 8192
[ 1100.092160][ T2543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11440'.
[ 1100.317426][T22617] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1100.469235][T22617] usb 7-1: config 1 has an invalid interface number: 93 but max is 0
[ 1100.472770][T22617] usb 7-1: config 1 has no interface number 0
[ 1100.475018][T22617] usb 7-1: config 1 interface 93 has no altsetting 0
[ 1100.478038][T22617] usb 7-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02
[ 1100.481007][T22617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.692505][T22617] usb 7-1: string descriptor 0 read error: -71
[ 1100.701020][T22617] gl620a 7-1:1.93: probe with driver gl620a failed with error -22
[ 1100.710975][T22617] usb 7-1: USB disconnect, device number 35
[ 1101.413143][ T2567] loop6: detected capacity change from 0 to 512
[ 1101.431615][ T2567] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.11450: inode has both inline data and extents flags
[ 1101.436074][ T2567] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1101.436286][ T2567] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.11450: couldn't read orphan inode 15 (err -117)
[ 1101.439020][    C1] EXT4-fs (loop6): error count since last fsck: 1
[ 1101.439030][    C1] EXT4-fs (loop6): initial error at time 1785254274: ext4_orphan_get:1399: inode 15
[ 1101.439043][    C1] EXT4-fs (loop6): last error at time 1785254274: ext4_orphan_get:1399: inode 15
[ 1101.453268][ T2567] loop6: lost filesystem error report for type 5 error -117
[ 1101.454589][ T2567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1101.482860][T30651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1102.053057][ T2591] loop6: detected capacity change from 0 to 1024
[ 1102.060376][ T2591] EXT4-fs: Ignoring removed bh option
[ 1102.067886][ T2591] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (56563!=20869)
[ 1102.076593][ T2591] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1102.180084][ T2591] EXT4-fs (loop6): failed to open journal device unknown-block(0,5) -ENXIO
[ 1103.469441][ T2613] lo: MTU too low for tipc bearer
[ 1103.475426][ T2613] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[ 1103.497512][T22617] usb 7-1: new low-speed USB device number 36 using dummy_hcd
[ 1103.651624][T22617] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1103.655390][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1103.660155][T22617] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1103.664935][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1103.669819][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1103.675862][T22617] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1103.679390][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1103.683539][T22617] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1103.693425][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1103.700228][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1103.705866][T22617] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1103.709439][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1103.713895][T22617] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1103.719107][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1103.723503][T22617] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1103.731618][T22617] usb 7-1: string descriptor 0 read error: -22
[ 1103.734360][T22617] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1103.738284][T22617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.749248][ T2615] loop0: detected capacity change from 0 to 32768
[ 1103.779567][T22617] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1103.779884][   T34] audit: type=1800 audit(1785254276.505:558): pid=2615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11464" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 1103.968048][T21386] usb 7-1: USB disconnect, device number 36
[ 1104.333570][T24110] bridge0: entered promiscuous mode
[ 1104.383804][ T2626] loop0: detected capacity change from 0 to 32768
[ 1104.393811][ T2626] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11468 (2626)
[ 1104.426149][ T2626] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1104.443490][ T2626] BTRFS info (device loop0): using crc32c checksum algorithm
[ 1104.445419][ T2634] file system registered
[ 1104.453558][ T2634] 
[ 1104.454403][ T2634] ======================================================
[ 1104.456629][ T2634] WARNING: possible circular locking dependency detected
[ 1104.459150][ T2634] syzkaller #0 Tainted: G             L     
[ 1104.461482][ T2634] ------------------------------------------------------
[ 1104.463796][ T2634] syz.1.11472/2634 is trying to acquire lock:
[ 1104.466167][ T2634] ffffffff8f9f0928 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5f0/0x950
[ 1104.469984][ T2634] 
[ 1104.469984][ T2634] but task is already holding lock:
[ 1104.472516][ T2634] ffff888112df0f80 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0
[ 1104.475598][ T2634] 
[ 1104.475598][ T2634] which lock already depends on the new lock.
[ 1104.475598][ T2634] 
[ 1104.479478][ T2634] 
[ 1104.479478][ T2634] the existing dependency chain (in reverse order) is:
[ 1104.482430][ T2634] 
[ 1104.482430][ T2634] -> #2 (&sb->s_type->i_mutex_key#33){++++}-{4:4}:
[ 1104.485287][ T2634]        down_write+0x96/0x200
[ 1104.486894][ T2634]        configfs_depend_item_unlocked+0x153/0x420
[ 1104.489006][ T2634]        usbg_make_tpg+0x1f6/0x590
[ 1104.490720][ T2634]        target_fabric_make_tpg+0xa8/0x6d0
[ 1104.492739][ T2634]        configfs_mkdir+0x4f6/0x9e0
[ 1104.494437][ T2634]        vfs_mkdir+0x406/0x620
[ 1104.496074][ T2634]        filename_mkdirat+0x285/0x510
[ 1104.497868][ T2634]        __se_sys_mkdir+0x34/0x150
[ 1104.499787][ T2634]        do_syscall_64+0x174/0x580
[ 1104.501506][ T2634]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.503950][ T2634] 
[ 1104.503950][ T2634] -> #1 (&opts->dep_lock){+.+.}-{4:4}:
[ 1104.506983][ T2634]        __mutex_lock+0x19d/0x1550
[ 1104.509096][ T2634]        tcm_set_name+0x2b/0xd0
[ 1104.511123][ T2634]        function_make+0x1a8/0x360
[ 1104.513167][ T2634]        configfs_mkdir+0x4f6/0x9e0
[ 1104.515097][ T2634]        vfs_mkdir+0x406/0x620
[ 1104.516706][ T2634]        filename_mkdirat+0x285/0x510
[ 1104.518466][ T2634]        __se_sys_mkdir+0x34/0x150
[ 1104.520124][ T2634]        do_syscall_64+0x174/0x580
[ 1104.521795][ T2634]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.524244][ T2634] 
[ 1104.524244][ T2634] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[ 1104.527408][ T2634]        __lock_acquire+0x1520/0x2cf0
[ 1104.529486][ T2634]        lock_acquire+0x106/0x350
[ 1104.531556][ T2634]        __mutex_lock+0x19d/0x1550
[ 1104.533702][ T2634]        configfs_rmdir+0x5f0/0x950
[ 1104.535858][ T2634]        vfs_rmdir+0x3e6/0x6a0
[ 1104.537871][ T2634]        filename_rmdir+0x292/0x520
[ 1104.540003][ T2634]        __se_sys_rmdir+0x2e/0x140
[ 1104.542091][ T2634]        do_syscall_64+0x174/0x580
[ 1104.544142][ T2634]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.546616][ T2634] 
[ 1104.546616][ T2634] other info that might help us debug this:
[ 1104.546616][ T2634] 
[ 1104.550670][ T2634] Chain exists of:
[ 1104.550670][ T2634]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#33
[ 1104.550670][ T2634] 
[ 1104.556578][ T2634]  Possible unsafe locking scenario:
[ 1104.556578][ T2634] 
[ 1104.559611][ T2634]        CPU0                    CPU1
[ 1104.561833][ T2634]        ----                    ----
[ 1104.564037][ T2634]   lock(&sb->s_type->i_mutex_key#33);
[ 1104.566246][ T2634]                                lock(&opts->dep_lock);
[ 1104.569060][ T2634]                                lock(&sb->s_type->i_mutex_key#33);
[ 1104.572280][ T2634]   lock(gadget_subsys.su_mutex);
[ 1104.574357][ T2634] 
[ 1104.574357][ T2634]  *** DEADLOCK ***
[ 1104.574357][ T2634] 
[ 1104.577595][ T2634] 3 locks held by syz.1.11472/2634:
[ 1104.579744][ T2634]  #0: ffff888169824450 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1104.583416][ T2634]  #1: ffff8881ba5870c0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520
[ 1104.587866][ T2634]  #2: ffff888112df0f80 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0
[ 1104.591926][ T2634] 
[ 1104.591926][ T2634] stack backtrace:
[ 1104.594303][ T2634] CPU: 0 UID: 0 PID: 2634 Comm: syz.1.11472 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1104.594327][ T2634] Tainted: [L]=SOFTLOCKUP
[ 1104.594332][ T2634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1104.594341][ T2634] Call Trace:
[ 1104.594350][ T2634]  <TASK>
[ 1104.594360][ T2634]  dump_stack_lvl+0xe8/0x150
[ 1104.594388][ T2634]  print_circular_bug+0x2e1/0x300
[ 1104.594404][ T2634]  check_noncircular+0x12e/0x150
[ 1104.594418][ T2634]  __lock_acquire+0x1520/0x2cf0
[ 1104.594435][ T2634]  ? __pfx_hlock_conflict+0x10/0x10
[ 1104.594448][ T2634]  ? __bfs+0x153/0x290
[ 1104.594463][ T2634]  ? __pfx_hlock_conflict+0x10/0x10
[ 1104.594475][ T2634]  ? check_path+0x21/0x40
[ 1104.594486][ T2634]  ? check_noncircular+0xda/0x150
[ 1104.594498][ T2634]  ? configfs_rmdir+0x5f0/0x950
[ 1104.594510][ T2634]  lock_acquire+0x106/0x350
[ 1104.594526][ T2634]  ? configfs_rmdir+0x5f0/0x950
[ 1104.594542][ T2634]  __mutex_lock+0x19d/0x1550
[ 1104.594557][ T2634]  ? configfs_rmdir+0x5f0/0x950
[ 1104.594573][ T2634]  ? reacquire_held_locks+0x104/0x190
[ 1104.594585][ T2634]  ? configfs_rmdir+0x5f0/0x950
[ 1104.594596][ T2634]  ? fast_dput+0x29c/0x670
[ 1104.594615][ T2634]  ? __pfx___mutex_lock+0x10/0x10
[ 1104.594657][ T2634]  ? _raw_spin_unlock+0x28/0x50
[ 1104.594679][ T2634]  ? fast_dput+0x469/0x670
[ 1104.594696][ T2634]  configfs_rmdir+0x5f0/0x950
[ 1104.594714][ T2634]  vfs_rmdir+0x3e6/0x6a0
[ 1104.594728][ T2634]  ? bpf_lsm_path_rmdir+0x9/0x20
[ 1104.594742][ T2634]  filename_rmdir+0x292/0x520
[ 1104.594758][ T2634]  ? __pfx_filename_rmdir+0x10/0x10
[ 1104.594773][ T2634]  ? do_getname+0x151/0x250
[ 1104.594789][ T2634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.594803][ T2634]  __se_sys_rmdir+0x2e/0x140
[ 1104.594816][ T2634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.594828][ T2634]  do_syscall_64+0x174/0x580
[ 1104.594842][ T2634]  ? trace_irq_disable+0x3b/0x140
[ 1104.594870][ T2634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.594883][ T2634] RIP: 0033:0x7f233219de99
[ 1104.594898][ T2634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1104.594909][ T2634] RSP: 002b:00007f2333083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 1104.594924][ T2634] RAX: ffffffffffffffda RBX: 00007f2332425fa0 RCX: 00007f233219de99
[ 1104.594933][ T2634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000005c0
[ 1104.594941][ T2634] RBP: 00007f2332233eaf R08: 0000000000000000 R09: 0000000000000000
[ 1104.594948][ T2634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1104.594955][ T2634] R13: 00007f2332426038 R14: 00007f2332425fa0 R15: 00007ffc0d946ca8
[ 1104.594972][ T2634]  </TASK>
[ 1104.711565][ T2634] unloading
[ 1104.833104][ T2626] BTRFS info (device loop0): enabling ssd optimizations
[ 1104.836024][ T2626] BTRFS info (device loop0): turning on flush-on-commit
[ 1104.839026][ T2626] BTRFS info (device loop0): enabling free space tree
[ 1104.841919][ T2626] BTRFS info (device loop0): enabling auto defrag
[ 1104.844600][ T2626] BTRFS info (device loop0): use lzo compression, level 1
[ 1104.847835][ T2626] BTRFS info (device loop0): max_inline set to 4096
[ 1104.868473][T27368] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
