last executing test programs:

13m11.77693196s ago: executing program 2 (id=1524):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13m11.755727535s ago: executing program 32 (id=1524):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13m8.688738056s ago: executing program 33 (id=1545):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
landlock_restrict_self(r1, 0x6)
bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1}, 0x6e)
listen(0xffffffffffffffff, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0xe)
connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e)

13m8.444754309s ago: executing program 34 (id=1546):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0)

13m6.43631086s ago: executing program 35 (id=1553):
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0)
setuid(0xee01)
r0 = syz_io_uring_setup(0x38, &(0x7f00000000c0)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1)

13m0.903406194s ago: executing program 36 (id=1561):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
close(0x3)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsmount(r1, 0x0, 0x2)

12m44.141140585s ago: executing program 37 (id=1721):
socket(0x10, 0x80002, 0x0)
socket(0xa, 0x3, 0xff)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
tkill(r1, 0xb)

12m36.359002389s ago: executing program 8 (id=1723):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

12m36.289694187s ago: executing program 6 (id=1786):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file1'}, 0xb)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20)

12m36.15048297s ago: executing program 8 (id=1787):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f}, 0x38)

12m35.823855684s ago: executing program 4 (id=1790):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

12m35.820227702s ago: executing program 4 (id=1791):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
open(0x0, 0x8c00, 0x5)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
r0 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xe88000000, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x21, 0x3, 0x0, {0x6}}, 0x21)

12m35.748035767s ago: executing program 4 (id=1792):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe")
readv(0xffffffffffffffff, 0x0, 0x0)

12m35.677839806s ago: executing program 4 (id=1793):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

12m35.592977507s ago: executing program 4 (id=1794):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0)
writev(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x4000000000009)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}})
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd})
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f00000002c0))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$can_bcm(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x1, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$nl_route(r6, 0x0, 0x0)

12m35.328423901s ago: executing program 8 (id=1795):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r0, @ANYBLOB="010026bd7000ffffffff0c000000180001801400020076657468315f746f5f62617461647600200103801c"], 0x14c}}, 0x804)

12m35.176702526s ago: executing program 38 (id=1795):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r0, @ANYBLOB="010026bd7000ffffffff0c000000180001801400020076657468315f746f5f62617461647600200103801c"], 0x14c}}, 0x804)

12m35.138491018s ago: executing program 4 (id=1797):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

12m35.138343217s ago: executing program 39 (id=1797):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

12m35.136487792s ago: executing program 6 (id=1798):
memfd_create(&(0x7f0000000240)='y\x105\xfb\xf7u\x83%:r\xc2\xb98\xa4q\xc1\xea\x7f\x8cZ\xff\x00\x00\x00t\xcda\x99%\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00t\a\x00'/51, 0x3)

12m35.080806793s ago: executing program 6 (id=1799):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc)

12m35.030647579s ago: executing program 6 (id=1800):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

12m34.936907885s ago: executing program 6 (id=1801):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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")
readv(0xffffffffffffffff, 0x0, 0x0)

12m34.677760692s ago: executing program 6 (id=1803):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0)
writev(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x4000000000009)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}})
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd})
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f00000002c0))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$can_bcm(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x1, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$nl_route(r6, 0x0, 0x0)

12m34.513324495s ago: executing program 40 (id=1803):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0)
writev(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x4000000000009)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}})
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd})
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f00000002c0))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$can_bcm(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x1, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$nl_route(r6, 0x0, 0x0)

12m29.802492568s ago: executing program 9 (id=1796):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x6f}, 0x2c)

12m29.748533675s ago: executing program 9 (id=1805):
fcntl$addseals(0xffffffffffffffff, 0x409, 0x4)

12m29.672225422s ago: executing program 9 (id=1806):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

12m29.550388352s ago: executing program 9 (id=1807):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xab5, 0x5)
write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x17a1, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

12m28.9665769s ago: executing program 9 (id=1808):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f00000018c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xabe65b98cd194cdc, {0x9}, 0x0, 0x0, '\x00', {0x1000, 0xa84, 0x0, 0x0}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40)

12m28.703301439s ago: executing program 41 (id=1808):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f00000018c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xabe65b98cd194cdc, {0x9}, 0x0, 0x0, '\x00', {0x1000, 0xa84, 0x0, 0x0}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40)

12m28.637752121s ago: executing program 2 (id=1802):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28)

12m28.57372951s ago: executing program 2 (id=1810):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

12m28.531382923s ago: executing program 2 (id=1811):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

12m28.362916044s ago: executing program 2 (id=1812):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000400)={0x5, 0x2})
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2)

12m27.837653879s ago: executing program 2 (id=1813):
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000)
close_range(r0, 0xffffffffffffffff, 0x0)

12m27.692455897s ago: executing program 42 (id=1813):
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000)
close_range(r0, 0xffffffffffffffff, 0x0)

6m44.558343339s ago: executing program 1 (id=5799):
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1)

6m44.519209969s ago: executing program 1 (id=5800):
r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

6m44.495123574s ago: executing program 1 (id=5801):
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x42000004, 0x0, 0x0)

6m44.460087548s ago: executing program 1 (id=5802):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1b9047, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)

6m44.418752025s ago: executing program 1 (id=5804):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe)

6m43.965826289s ago: executing program 1 (id=5809):
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='adfs\x00', 0x0, 0x0)

6m43.91601231s ago: executing program 43 (id=5809):
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='adfs\x00', 0x0, 0x0)

2m15.04874884s ago: executing program 5 (id=9378):
pipe2(&(0x7f0000001440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x24}], 0x1}, 0x4040000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
write(r1, &(0x7f00000002c0)="fe", 0xfdef)
read$watch_queue(r0, &(0x7f00000001c0)=""/221, 0xdd)

2m14.179579118s ago: executing program 5 (id=9391):
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e1e, @empty}, 0x10, &(0x7f0000005540)=[{&(0x7f00000001c0)="0800fbfaffab2be7", 0x8}], 0x8, 0x0, 0x0, 0xe0000000}, 0x40810)

2m14.083248231s ago: executing program 5 (id=9392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a382f", @ANYRESDEC, @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2400c014)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840)
fanotify_mark(0xffffffffffffffff, 0x1, 0x8000039, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x2c, 0x6e})
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0)

2m14.048351913s ago: executing program 5 (id=9395):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m13.963230126s ago: executing program 5 (id=9398):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

2m13.562814912s ago: executing program 5 (id=9401):
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0xfffffff, 0x2, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1}}, 0x1)

2m13.496763051s ago: executing program 44 (id=9401):
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0xfffffff, 0x2, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1}}, 0x1)

1.073600022s ago: executing program 3 (id=10977):
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

1.073286926s ago: executing program 3 (id=10978):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000002500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x26020480)
r3 = mq_open(&(0x7f00000020c0)='%[\x8c({)@#{\x00', 0x40, 0x120, 0x0)
mq_getsetattr(r3, &(0x7f0000002140)={0x0, 0x7, 0x2, 0x5}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240))
r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x200000ba, 0x800, 0xd7, 0xffffffff9555b8f5})
r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, <r7=>r0})
syz_open_procfs$namespace(r7, &(0x7f00000003c0)='ns/user\x00')
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r6, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
setns(0xc9, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="a183fffffffffcdb"], 0x20}}, 0x4c044)

788.625027ms ago: executing program 0 (id=10980):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}})

701.782884ms ago: executing program 0 (id=10981):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\\', 0x1}], 0x1}, 0x24000800)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)

677.55135ms ago: executing program 0 (id=10982):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x7, 0x3)

434.130679ms ago: executing program 0 (id=10983):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)

433.936319ms ago: executing program 0 (id=10984):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

372.592635ms ago: executing program 0 (id=10985):
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = inotify_init1(0x0)
read(r0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)

263.66908ms ago: executing program 7 (id=10987):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}})

175.004828ms ago: executing program 7 (id=10988):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x330, 0x40000, 0x198, 0x0, 0x198, 0x410, 0x358, 0x358, 0x410, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r0}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x401, {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x508)

169.980718ms ago: executing program 3 (id=10989):
rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r0, 0x0, 0x0)

169.741881ms ago: executing program 7 (id=10990):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)

136.200663ms ago: executing program 7 (id=10991):
landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)

122.028394ms ago: executing program 3 (id=10992):
memfd_create(&(0x7f0000000000)='{#\')!\x00', 0x20000006)

99.489645ms ago: executing program 7 (id=10993):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000280)={0x0, 0x4, 0x1, [0x59, 0xfffffffffffffffd, 0x9, 0x8, 0xfffffffffffff991], [0xfffffffffffffff8, 0x81, 0xf7, 0x0, 0x2, 0x84fb, 0x76, 0x8000000000000001, 0x0, 0x8, 0x100000001, 0x5, 0x3, 0x3, 0x593, 0x8, 0x3, 0x1e, 0x6, 0x7, 0x10001, 0x83b4, 0x8000000000000000, 0xe, 0x1002, 0x2, 0x4d5afdaf, 0x3, 0x4, 0x7, 0xe03, 0x2b79, 0x7, 0x6, 0x3, 0x2, 0x0, 0x4, 0x6, 0xffffffffffff7fff, 0x912d, 0xe729, 0x80000001, 0x1, 0x401, 0x0, 0x3, 0x40, 0x0, 0x84d7, 0x100, 0x2, 0x3, 0x9, 0x200, 0x6, 0x1000, 0x3, 0x10, 0x4, 0x5, 0x1000, 0x1, 0x7, 0x4, 0xc6d, 0x2, 0x6fd0, 0x6, 0x6, 0x8, 0x8000, 0x9, 0xd87, 0x89, 0x0, 0x62, 0x9a39, 0x4, 0x200, 0x9, 0x4, 0x400, 0x7, 0xb, 0xf, 0x1d68, 0x3, 0x20e, 0xfd, 0x5e, 0x1, 0x40, 0x5, 0xff, 0x4, 0x7fff, 0x1000, 0xfffffffffffffffd, 0x5, 0xd, 0xfff, 0x100, 0xb, 0x7, 0x7, 0x1, 0x0, 0x9, 0xe, 0x1, 0x3000000000000000, 0xa, 0x10000, 0x0, 0x800, 0xff, 0x7ff, 0x9, 0x4, 0x9]})
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r2 = socket(0x10, 0x803, 0x6)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

90.082511ms ago: executing program 3 (id=10994):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000580))

49.457079ms ago: executing program 7 (id=10995):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180), 0x0)

0s ago: executing program 3 (id=10996):
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r2, 0x1, 0x1)
getdents64(r2, 0x0, 0x22)

kernel console output (not intermixed with test programs):

dding VLAN 0 to HW filter on device eth2
[  282.047444][T11282] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  282.062904][ T8790] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  282.223123][ T8790] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  282.229314][ T8790] usb 2-1: config index 0 descriptor too short (expected 1572, got 36)
[  282.229388][ T8790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.243953][ T8790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.243992][ T8790] usb 2-1: Product: syz
[  282.244023][ T8790] usb 2-1: Manufacturer: syz
[  282.244047][ T8790] usb 2-1: SerialNumber: syz
[  282.272468][ T8790] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9
[  282.602682][T11017] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  282.650902][ T5339] 8021q: adding VLAN 0 to HW filter on device eth3
[  282.755056][T11017] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  282.756410][T11017] usb 4-1: config index 0 descriptor too short (expected 1572, got 36)
[  282.756424][T11017] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.759447][T11017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.759467][T11017] usb 4-1: Product: syz
[  282.759477][T11017] usb 4-1: Manufacturer: syz
[  282.759486][T11017] usb 4-1: SerialNumber: syz
[  282.780559][T11017] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10
[  282.860425][ T5339] 8021q: adding VLAN 0 to HW filter on device eth32
[  283.542744][ T5028] bcm5974 1-1:1.0: could not read from device
[  283.559084][ T5028] bcm5974 1-1:1.0: could not read from device
[  283.564830][ T5752] bcm5974 1-1:1.0: could not read from device
[  283.578556][ T5752] input: failed to attach handler mousedev to device input8, error: -5
[  283.603881][ T5752] usb 1-1: USB disconnect, device number 18
[  283.620478][ T5028] bcm5974 1-1:1.0: could not read from device
[  283.650865][ T8790] usb 2-1: USB disconnect, device number 13
[  283.703560][T11017] usb 4-1: USB disconnect, device number 2
[  283.753071][ T8932] udevd[8932]: Error opening device "/dev/input/event2": No such file or directory
[  283.753170][ T8932] udevd[8932]: Unable to EVIOCGABS device "/dev/input/event2"
[  283.753470][ T8932] udevd[8932]: Unable to EVIOCGABS device "/dev/input/event2"
[  283.753800][ T8932] udevd[8932]: Unable to EVIOCGABS device "/dev/input/event2"
[  283.753839][ T8932] udevd[8932]: Unable to EVIOCGABS device "/dev/input/event2"
[  283.827721][T11350] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1877'.
[  283.841197][ T8932] udevd[8932]: Error opening device "/dev/input/event5": No such file or directory
[  283.841412][ T8932] udevd[8932]: Unable to EVIOCGABS device "/dev/input/event5"
[  283.841430][ T8932] udevd[8932]: Unable to EVIOCGABS device "/dev/input/event5"
[  283.841445][ T8932] udevd[8932]: Unable to EVIOCGABS device "/dev/input/event5"
[  283.841460][ T8932] udevd[8932]: Unable to EVIOCGABS device "/dev/input/event5"
[  283.870542][T11352] loop0: detected capacity change from 0 to 764
[  284.575481][T11400] loop0: detected capacity change from 0 to 32768
[  284.577854][T11400] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1890 (11400)
[  284.602705][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  284.609231][T11400] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  284.609291][T11400] BTRFS info (device loop0): using blake2b checksum algorithm
[  284.672464][T11017] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  284.681256][T11400] BTRFS info (device loop0): enabling ssd optimizations
[  284.681631][T11400] BTRFS info (device loop0): turning on async discard
[  284.681641][T11400] BTRFS info (device loop0): enabling free space tree
[  284.681649][T11400] BTRFS info (device loop0): use zstd compression, level 3
[  284.719621][T10700] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  284.794918][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  284.800125][   T10] usb 4-1: config index 0 descriptor too short (expected 1572, got 36)
[  284.800189][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.817128][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.817185][   T10] usb 4-1: Product: syz
[  284.817223][   T10] usb 4-1: Manufacturer: syz
[  284.817254][   T10] usb 4-1: SerialNumber: syz
[  284.827926][T11017] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  284.829116][T11017] usb 2-1: config index 0 descriptor too short (expected 1572, got 36)
[  284.829130][T11017] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.831029][T11017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.831039][T11017] usb 2-1: Product: syz
[  284.831045][T11017] usb 2-1: Manufacturer: syz
[  284.831051][T11017] usb 2-1: SerialNumber: syz
[  284.895775][T11017] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11
[  284.931111][   T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12
[  285.908629][ T5339] 8021q: adding VLAN 0 to HW filter on device eth9
[  286.119907][ T5339] 8021q: adding VLAN 0 to HW filter on device eth10
[  286.284965][ T5339] 8021q: adding VLAN 0 to HW filter on device eth11
[  286.430433][ T5339] 8021q: adding VLAN 0 to HW filter on device eth12
[  287.258365][ T1498] IPVS: starting estimator thread 0...
[  287.353340][T11528] IPVS: using max 80 ests per chain, 192000 per kthread
[  288.142459][ T5006] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  288.292460][ T5006] usb 1-1: Using ep0 maxpacket: 16
[  288.295166][ T5006] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  288.296992][ T5006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.297071][ T5006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.297081][ T5006] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  288.297099][ T5006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.298968][ T5006] usb 1-1: config 0 descriptor??
[  288.706189][ T5006] usbhid 1-1:0.0: can't add hid device: -71
[  288.706353][ T5006] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  288.709162][ T5006] usb 1-1: USB disconnect, device number 19
[  289.243597][T11541] loop0: detected capacity change from 0 to 64
[  289.344420][T11548] loop0: detected capacity change from 0 to 1024
[  289.348183][T11548] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  289.351424][T11548] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  289.585542][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1904'.
[  289.923119][T11017] bcm5974 2-1:1.0: could not read from device
[  289.930207][ T5028] bcm5974 2-1:1.0: could not read from device
[  289.936223][T11017] input: failed to attach handler mousedev to device input11, error: -5
[  289.938739][ T5028] bcm5974 2-1:1.0: could not read from device
[  289.955426][T11017] usb 2-1: USB disconnect, device number 14
[  289.980885][   T10] usb 4-1: USB disconnect, device number 3
[  290.011858][ T5028] bcm5974 4-1:1.0: could not read from device
[  290.022074][ T5028] bcm5974 4-1:1.0: could not read from device
[  290.168042][T11562] 9p: Bad value for 'source'
[  290.319030][T11568] loop0: detected capacity change from 0 to 2048
[  290.360948][T11571] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  290.537689][T11581] loop0: detected capacity change from 0 to 256
[  290.573733][T11581] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  290.901906][T11590] loop1: detected capacity change from 0 to 2048
[  290.941591][T11591] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.490228][T11609] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  291.490432][T11609] block device autoloading is deprecated and will be removed.
[  291.649882][T11619] loop0: detected capacity change from 0 to 2048
[  291.705581][T11619] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  291.718241][T11619] FAT-fs (loop0): Filesystem has been set read-only
[  291.747837][T11623] loop1: detected capacity change from 0 to 256
[  291.820112][T11623] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  293.140443][T11672] loop0: detected capacity change from 0 to 64
[  293.553471][T11674] loop3: detected capacity change from 0 to 40427
[  293.580818][T11674] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[  293.600194][T11674] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  293.624311][T11678] loop0: detected capacity change from 0 to 40427
[  293.625975][T11674] F2FS-fs (loop3): invalid crc value
[  293.642731][T11678] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[  293.642790][T11678] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  293.650668][T11678] F2FS-fs (loop0): invalid crc value
[  293.738505][T11678] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  293.756088][T11678] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  293.757948][T11674] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  293.763923][T11678] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  293.780004][T11674] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  293.780063][T11674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  295.331592][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'.
[  295.350889][T11751] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  295.577735][T11761] loop1: detected capacity change from 0 to 512
[  296.186153][T11771] loop0: detected capacity change from 0 to 32768
[  296.186747][T11771] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  296.194993][T11771] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1979 (11771)
[  296.220667][T11771] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  296.220712][T11771] BTRFS info (device loop0): using crc32c checksum algorithm
[  296.392960][T11771] BTRFS info (device loop0): rebuilding free space tree
[  296.422796][T11771] BTRFS info (device loop0): disabling free space tree
[  296.423553][T11771] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  296.423586][T11771] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  296.442513][T11771] BTRFS info (device loop0): enabling ssd optimizations
[  296.442867][T11771] BTRFS info (device loop0): turning on async discard
[  296.442896][T11771] BTRFS info (device loop0): force clearing of disk cache
[  296.442923][T11771] BTRFS info (device loop0): use zstd compression, level 3
[  296.488393][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  296.488473][   T33] audit: type=1800 audit(1790257835.603:90): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1979" name="file1" dev="loop0" ino=260 res=0 errno=0
[  296.554649][T10700] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  296.768280][ T3318] IPVS: starting estimator thread 0...
[  296.870027][T11811] binder: 11810:11811 ioctl 4018620d 0 returned -22
[  296.889713][T11811] binder: 11810:11811 ioctl c0306201 200000000040 returned -22
[  296.913238][T11808] IPVS: using max 81 ests per chain, 194400 per kthread
[  297.005594][T11815] loop1: detected capacity change from 0 to 512
[  297.165870][T11807] loop0: detected capacity change from 0 to 32768
[  297.205053][T11807] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  297.212807][T11807] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1983 (11807)
[  297.456481][T11807] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  297.459896][T11807] BTRFS info (device loop0): using crc32c checksum algorithm
[  297.519965][T11807] BTRFS info (device loop0): rebuilding free space tree
[  297.593713][T11807] BTRFS info (device loop0): disabling free space tree
[  297.597187][T11807] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  297.611376][T11807] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  297.624737][T11807] BTRFS info (device loop0): enabling ssd optimizations
[  297.624778][T11807] BTRFS info (device loop0): turning on async discard
[  297.624810][T11807] BTRFS info (device loop0): force clearing of disk cache
[  297.624836][T11807] BTRFS info (device loop0): use zstd compression, level 3
[  297.685373][T10700] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  297.950038][T11854] loop1: detected capacity change from 0 to 512
[  297.963316][T11855] loop0: detected capacity change from 0 to 1024
[  297.965111][T11855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  297.965417][T11855] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  298.415384][T11859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1989'.
[  298.592501][ T1112] IPVS: starting estimator thread 0...
[  298.683810][T11863] IPVS: using max 80 ests per chain, 192000 per kthread
[  298.700731][T11865] autofs: Unknown parameter './file1'
[  299.030217][T11874] loop1: detected capacity change from 0 to 512
[  299.778431][T11884] autofs: Unknown parameter './file1'
[  299.821559][T11886] openvswitch: netlink: IP tunnel dst address not specified
[  299.825177][T11886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.906919][T11889] loop0: detected capacity change from 0 to 512
[  300.042498][T11898] loop1: detected capacity change from 0 to 256
[  300.079364][T11898] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  300.458817][T11905] autofs: Bad value for 'fd'
[  300.737631][T11919] loop3: detected capacity change from 0 to 512
[  301.363927][T11934] autofs: Bad value for 'fd'
[  301.438040][T11937] loop0: detected capacity change from 0 to 256
[  301.453911][T11937] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  301.553761][ T8790] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  301.713663][ T8790] usb 2-1: not running at top speed; connect to a high speed hub
[  301.713719][ T8790] usb 2-1: New USB device found, idVendor=0596, idProduct=0500, bcdDevice= 0.40
[  301.714838][ T8790] usb 2-1: config 1 interface 0 has no altsetting 0
[  301.716643][ T8790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.716655][ T8790] usb 2-1: Product: syz
[  301.716661][ T8790] usb 2-1: Manufacturer: syz
[  301.716667][ T8790] usb 2-1: SerialNumber: syz
[  301.726924][T11952] loop3: detected capacity change from 0 to 512
[  302.470374][T11965] loop0: detected capacity change from 0 to 256
[  302.480893][T11965] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  302.634726][ T8790] usbhid 2-1:1.0: can't add hid device: -71
[  302.635950][ T8790] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  302.641048][ T8790] usb 2-1: USB disconnect, device number 15
[  302.726711][T11972] autofs: Bad value for 'fd'
[  302.765184][T11974] loop3: detected capacity change from 0 to 512
[  303.259937][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.297760][T11982] loop1: detected capacity change from 0 to 128
[  303.410995][T11986] loop0: detected capacity change from 0 to 512
[  303.806179][T11996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.875844][T12001] loop3: detected capacity change from 0 to 256
[  303.881459][T12001] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  304.119648][T12009] loop1: detected capacity change from 0 to 512
[  304.601423][T12019] loop0: detected capacity change from 0 to 512
[  304.770481][T12021] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  304.877447][T12025] hfsplus: invalid length 1280 has been corrected to 255
[  304.921129][T12027] cgroup: noprefix used incorrectly
[  305.535640][T12031] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[  305.538367][T12031] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  305.542073][T12031] F2FS-fs (loop3): invalid crc value
[  305.600585][T12031] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  305.614647][T12033] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  305.616339][T12033] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2046 (12033)
[  305.624862][T12031] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  305.627934][T12031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  305.628963][T12033] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  305.628986][T12033] BTRFS info (device loop1): using crc32c checksum algorithm
[  305.708796][T12033] BTRFS info (device loop1): rebuilding free space tree
[  305.729109][T12033] BTRFS info (device loop1): disabling free space tree
[  305.729222][T12033] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  305.730583][T12033] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  305.739059][T12033] BTRFS info (device loop1): enabling ssd optimizations
[  305.739077][T12033] BTRFS info (device loop1): turning on async discard
[  305.739091][T12033] BTRFS info (device loop1): force clearing of disk cache
[  305.739104][T12033] BTRFS info (device loop1): use zstd compression, level 3
[  305.760067][T10910] syz-executor: attempt to access beyond end of device
[  305.760067][T10910] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  305.769189][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  305.769247][T10910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  305.769269][T10910] Call Trace:
[  305.769274][T10910]  <TASK>
[  305.769278][T10910]  dump_stack_lvl+0xe8/0x150
[  305.769295][T10910]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  305.769308][T10910]  f2fs_write_end_bio+0x1211/0x16e0
[  305.769337][T10910]  ? blkg_put+0x22/0x240
[  305.769352][T10910]  __submit_merged_bio+0x258/0x6a0
[  305.769361][T10910]  ? rcu_is_watching+0x16/0xb0
[  305.769372][T10910]  __submit_merged_write_cond+0x3c9/0x4e0
[  305.769384][T10910]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  305.769401][T10910]  f2fs_write_data_pages+0x2a27/0x36f0
[  305.769411][T10910]  ? __lock_acquire+0x6df/0x2e50
[  305.769431][T10910]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  305.769457][T10910]  ? __pfx_hlock_conflict+0x10/0x10
[  305.769465][T10910]  ? __bfs+0x153/0x290
[  305.769472][T10910]  ? __pfx_hlock_conflict+0x10/0x10
[  305.769487][T10910]  ? lockdep_unlock+0x5c/0xd0
[  305.769497][T10910]  ? __lock_acquire+0x14b9/0x2e50
[  305.769519][T10910]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  305.769530][T10910]  do_writepages+0x338/0x560
[  305.769545][T10910]  ? do_raw_spin_unlock+0x4d/0x200
[  305.769557][T10910]  filemap_fdatawrite+0x1e9/0x2f0
[  305.769566][T10910]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  305.769590][T10910]  ? do_raw_spin_unlock+0x4d/0x200
[  305.769601][T10910]  f2fs_sync_dirty_inodes+0x30e/0x830
[  305.769618][T10910]  f2fs_write_checkpoint+0xa3d/0x2710
[  305.769628][T10910]  ? __lock_acquire+0x6df/0x2e50
[  305.769646][T10910]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  305.769675][T10910]  kill_f2fs_super+0x2dd/0x700
[  305.769689][T10910]  ? __pfx_kill_f2fs_super+0x10/0x10
[  305.769703][T10910]  ? call_rcu+0x64d/0x8b0
[  305.769712][T10910]  ? lockdep_hardirqs_on+0x7b/0x110
[  305.769727][T10910]  deactivate_locked_super+0xbc/0x110
[  305.769739][T10910]  cleanup_mnt+0x3d3/0x460
[  305.769752][T10910]  task_work_run+0x1d9/0x270
[  305.769762][T10910]  ? __pfx_task_work_run+0x10/0x10
[  305.769774][T10910]  exit_to_user_mode_loop+0x204/0x770
[  305.769782][T10910]  ? rcu_is_watching+0x16/0xb0
[  305.769792][T10910]  do_syscall_64+0x328/0x520
[  305.769802][T10910]  ? trace_irq_disable+0x3b/0x140
[  305.769810][T10910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.769820][T10910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.769828][T10910] RIP: 0033:0x7f494599f397
[  305.769837][T10910] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  305.769844][T10910] RSP: 002b:00007ffe5c0914e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  305.769854][T10910] RAX: 0000000000000000 RBX: 00007f4945a344bb RCX: 00007f494599f397
[  305.769859][T10910] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5c0915a0
[  305.769864][T10910] RBP: 00007ffe5c0915a0 R08: 00007ffe5c0925a0 R09: 00000000ffffffff
[  305.769870][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5c092630
[  305.769875][T10910] R13: 00007f4945a344bb R14: 000000000004a9ab R15: 00007ffe5c092670
[  305.769886][T10910]  </TASK>
[  305.781090][   T33] audit: type=1800 audit(1790257844.913:91): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2046" name="file1" dev="loop1" ino=260 res=0 errno=0
[  305.939074][T10868] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  306.028111][T10910] F2FS-fs (loop3): Remounting filesystem read-only
[  306.133483][T12058] set_capacity_and_notify: 6 callbacks suppressed
[  306.133560][T12058] loop0: detected capacity change from 0 to 128
[  306.336117][T12062] loop1: detected capacity change from 0 to 512
[  306.362743][T12064] loop0: detected capacity change from 0 to 128
[  306.363309][T12064] omfs: Bad value for 'gid'
[  306.364424][T12064] omfs: Bad value for 'gid'
[  306.479731][T12071] capability: warning: `syz.0.2054' uses 32-bit capabilities (legacy support in use)
[  306.736841][T12074] loop0: detected capacity change from 0 to 512
[  306.877451][T12079] loop3: detected capacity change from 0 to 128
[  307.330542][T12090] loop1: detected capacity change from 0 to 1024
[  307.331678][T12090] EXT4-fs: Ignoring removed mblk_io_submit option
[  307.360227][T12090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.393074][ T8790] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  307.418811][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.553724][ T8790] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  307.607835][ T8790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  307.607894][ T8790] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  307.608128][ T8790] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.609641][ T8790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  307.609654][ T8790] usb 4-1: Product: syz
[  307.609660][ T8790] usb 4-1: Manufacturer: syz
[  307.612222][T12082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  307.614663][ T8790] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[  307.627945][ T8790] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  307.665979][T12098] loop0: detected capacity change from 0 to 512
[  307.752531][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  307.843884][ T8790] usb 4-1: USB disconnect, device number 4
[  308.175786][ T8790] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  308.179475][ T8790] garmin_gps 4-1:1.0: device disconnected
[  308.193343][    T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  308.198388][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.203331][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.207331][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.213597][    T9] usb 2-1: config 0 descriptor??
[  308.635491][    T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  308.639360][    T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  308.641716][    T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  308.644103][    T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  308.646419][    T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  308.648773][    T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  308.651122][    T9] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  308.669877][    T9] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  308.721004][T12112] loop3: detected capacity change from 0 to 512
[  308.849583][    T9] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00
[  308.863958][T12115] loop0: detected capacity change from 0 to 1024
[  309.266335][T12122] loop0: detected capacity change from 0 to 512
[  309.768564][    T9] cp2112 0003:10C4:EA90.0001: error reading lock byte: -32
[  309.782414][    T9] usb 2-1: USB disconnect, device number 16
[  309.850554][T12128] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  310.237228][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'.
[  311.040334][T12168] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  311.040518][T12168] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  311.318263][T12176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2095'.
[  312.094013][T12189] FAULT_INJECTION: forcing a failure.
[  312.094013][T12189] name failslab, interval 1, probability 0, space 0, times 0
[  312.094065][T12189] CPU: 0 UID: 0 PID: 12189 Comm: syz.0.2102 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  312.094092][T12189] Tainted: [L]=SOFTLOCKUP
[  312.094097][T12189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  312.094102][T12189] Call Trace:
[  312.094106][T12189]  <TASK>
[  312.094110][T12189]  dump_stack_lvl+0xe8/0x150
[  312.094127][T12189]  should_fail_ex+0x410/0x560
[  312.094142][T12189]  should_failslab+0xa8/0x100
[  312.094154][T12189]  __kmalloc_cache_noprof+0xa3/0x600
[  312.094191][T12189]  ? __kmalloc_cache_noprof+0x321/0x600
[  312.094202][T12189]  ? nfs_alloc_fhandle+0x4a/0xa0
[  312.094210][T12189]  ? nfs_alloc_fhandle+0x4a/0xa0
[  312.094219][T12189]  nfs_alloc_fhandle+0x4a/0xa0
[  312.094227][T12189]  nfs_init_fs_context+0x68/0x1300
[  312.094240][T12189]  ? mutex_init_lockdep+0xdf/0x110
[  312.094251][T12189]  alloc_fs_context+0x9a3/0xd00
[  312.094268][T12189]  __se_sys_fsopen+0xa5/0x2c0
[  312.094278][T12189]  do_syscall_64+0x166/0x520
[  312.094288][T12189]  ? trace_irq_disable+0x3b/0x140
[  312.094296][T12189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.094305][T12189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.094313][T12189] RIP: 0033:0x7f18eb19e159
[  312.094321][T12189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.094329][T12189] RSP: 002b:00007f18ebfa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  312.094339][T12189] RAX: ffffffffffffffda RBX: 00007f18eb425fa0 RCX: 00007f18eb19e159
[  312.094344][T12189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300
[  312.094350][T12189] RBP: 00007f18eb23506b R08: 0000000000000000 R09: 0000000000000000
[  312.094355][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.094360][T12189] R13: 00007f18eb426038 R14: 00007f18eb425fa0 R15: 00007fff6c6a1518
[  312.094372][T12189]  </TASK>
[  312.117545][   T25] libceph: connect (1)[c::]:6789 error -101
[  312.117653][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  312.144584][T12185] ceph: No mds server is up or the cluster is laggy
[  312.321321][T12203] set_capacity_and_notify: 4 callbacks suppressed
[  312.322227][T12203] loop1: detected capacity change from 0 to 256
[  312.471845][T12205] loop3: detected capacity change from 0 to 1024
[  312.476292][T12205] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  312.479773][T12205] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  312.494980][T12209] loop0: detected capacity change from 0 to 256
[  312.619918][T12212] loop1: detected capacity change from 0 to 256
[  312.647630][T12212] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  312.698431][T12215] loop0: detected capacity change from 0 to 256
[  312.711344][T12215] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  312.796895][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2109'.
[  313.776486][T12231] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  313.866357][T12235] loop1: detected capacity change from 0 to 256
[  313.869685][T12235] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  313.958640][T12238] loop0: detected capacity change from 0 to 256
[  313.965575][T12238] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  315.013223][T12269] loop0: detected capacity change from 0 to 256
[  315.043825][T12269] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  315.941812][T12282] loop0: detected capacity change from 0 to 256
[  315.948843][T12282] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  316.856646][T12292] loop0: detected capacity change from 0 to 1024
[  316.886376][T12292] hfsplus: failed to load extents file
[  316.955868][T12294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.028882][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.029864][T12299] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  317.029997][T12299] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  317.078743][T12301] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  317.248039][T12305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2149'.
[  317.325253][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  317.325335][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  317.539005][T12313] set_capacity_and_notify: 3 callbacks suppressed
[  317.542121][T12313] loop0: detected capacity change from 0 to 1024
[  317.547239][T12313] hfsplus: failed to load extents file
[  317.658100][T12319] netlink: 'syz.0.2157': attribute type 2 has an invalid length.
[  318.002957][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  318.163251][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  318.165681][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  318.165695][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  318.167502][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.167514][    T9] usb 1-1: Product: syz
[  318.167520][    T9] usb 1-1: Manufacturer: syz
[  318.167526][    T9] usb 1-1: SerialNumber: syz
[  318.170052][    T9] hub 1-1:1.0: bad descriptor, ignoring hub
[  318.170063][    T9] hub 1-1:1.0: probe with driver hub failed with error -5
[  318.342516][ T1687] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  318.507487][ T1687] usb 4-1: not running at top speed; connect to a high speed hub
[  318.507555][ T1687] usb 4-1: New USB device found, idVendor=0596, idProduct=0500, bcdDevice= 0.40
[  318.512980][ T1687] usb 4-1: config 1 interface 0 has no altsetting 0
[  318.520939][ T1687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.521021][ T1687] usb 4-1: Product: syz
[  318.521053][ T1687] usb 4-1: Manufacturer: syz
[  318.521085][ T1687] usb 4-1: SerialNumber: syz
[  318.665696][T10992] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[  318.933743][ T1687] usbhid 4-1:1.0: can't add hid device: -71
[  318.933830][ T1687] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  318.937508][ T1687] usb 4-1: USB disconnect, device number 5
[  319.152820][ T5759] usb 1-1: USB disconnect, device number 20
[  319.469928][T12341] loop3: detected capacity change from 0 to 1024
[  319.473624][T12341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  319.473866][T12341] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  319.705585][T12347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2168'.
[  319.814519][T12348] loop1: detected capacity change from 0 to 1024
[  319.938702][T12348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.010245][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.096989][T12362] loop1: detected capacity change from 0 to 1024
[  320.105450][T12362] hfsplus: failed to load extents file
[  320.412432][T12370] loop3: detected capacity change from 0 to 1024
[  320.441594][T12370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.448746][   T33] audit: type=1804 audit(1790257859.593:92): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2179" name="/newroot/97/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  320.455659][   T33] audit: type=1800 audit(1790257859.593:93): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2179" name="bus" dev="loop3" ino=18 res=0 errno=0
[  320.476483][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.648474][T12380] loop3: detected capacity change from 0 to 1024
[  320.653737][T12380] hfsplus: failed to load extents file
[  320.853048][T12382] loop3: detected capacity change from 0 to 32768
[  320.886911][T12382] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  320.906842][T12382] XFS (loop3): Ending clean mount
[  320.940059][T10910] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  321.168979][T12394] loop3: detected capacity change from 0 to 1024
[  321.183317][T12394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.190926][   T33] audit: type=1804 audit(1790257860.323:94): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2186" name="/newroot/104/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  321.199492][   T33] audit: type=1800 audit(1790257860.333:95): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2186" name="bus" dev="loop3" ino=18 res=0 errno=0
[  321.223379][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.532472][T10992] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  321.683860][T10992] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  321.684893][T10992] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.684914][T10992] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  321.684931][T10992] usb 4-1: config 0 interface 0 has no altsetting 0
[  321.684953][T10992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.687148][T10992] usb 4-1: config 0 descriptor??
[  322.093658][T10992] usbhid 4-1:0.0: can't add hid device: -71
[  322.093776][T10992] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  322.095790][T10992] usb 4-1: USB disconnect, device number 6
[  322.776425][T12410] loop3: detected capacity change from 0 to 1024
[  322.798706][T12410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.807260][   T33] audit: type=1804 audit(1790257861.943:96): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2193" name="/newroot/111/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  322.807346][   T33] audit: type=1800 audit(1790257861.943:97): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2193" name="bus" dev="loop3" ino=18 res=0 errno=0
[  322.846221][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.914943][T12416] netlink: 'syz.3.2195': attribute type 1 has an invalid length.
[  322.917547][T12416] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2195'.
[  323.125728][T12426] loop3: detected capacity change from 0 to 512
[  323.355372][T12438] loop0: detected capacity change from 0 to 1024
[  324.297531][T12453] loop3: detected capacity change from 0 to 512
[  325.081786][T12471] loop0: detected capacity change from 0 to 8192
[  325.085269][T12471] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  325.403586][T11016] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  325.521140][T12487] loop1: detected capacity change from 0 to 512
[  325.553819][T11016] usb 1-1: Using ep0 maxpacket: 32
[  325.556450][T11016] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  325.560994][T11016] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  325.561030][T11016] usb 1-1: config 0 has no interface number 0
[  325.561071][T11016] usb 1-1: config 0 interface 12 has no altsetting 0
[  325.570337][T11016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.570373][T11016] usb 1-1: Product: syz
[  325.574385][T11016] usb 1-1: Manufacturer: syz
[  325.576046][T11016] usb 1-1: SerialNumber: syz
[  325.581019][T11016] usb 1-1: config 0 descriptor??
[  325.652724][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  325.803719][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  325.805022][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  325.805044][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  325.807660][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.807832][    T9] usb 4-1: Product: syz
[  325.807844][    T9] usb 4-1: Manufacturer: syz
[  325.807854][    T9] usb 4-1: SerialNumber: syz
[  325.818453][    T9] hub 4-1:1.0: bad descriptor, ignoring hub
[  325.818474][    T9] hub 4-1:1.0: probe with driver hub failed with error -5
[  326.020778][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.021191][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.132705][    T9] usb 4-1: USB disconnect, device number 7
[  326.629697][T12498] FAULT_INJECTION: forcing a failure.
[  326.629697][T12498] name failslab, interval 1, probability 0, space 0, times 0
[  326.629779][T12498] CPU: 0 UID: 0 PID: 12498 Comm: syz.1.2233 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  326.629818][T12498] Tainted: [L]=SOFTLOCKUP
[  326.629824][T12498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  326.629833][T12498] Call Trace:
[  326.629839][T12498]  <TASK>
[  326.629845][T12498]  dump_stack_lvl+0xe8/0x150
[  326.629871][T12498]  should_fail_ex+0x410/0x560
[  326.629897][T12498]  should_failslab+0xa8/0x100
[  326.629916][T12498]  __kmalloc_cache_noprof+0xa3/0x600
[  326.629937][T12498]  ? __pfx___mutex_lock+0x10/0x10
[  326.629957][T12498]  ? pty_common_install+0xad/0x780
[  326.629972][T12498]  ? pty_common_install+0xad/0x780
[  326.629991][T12498]  pty_common_install+0xad/0x780
[  326.630014][T12498]  tty_init_dev+0xd7/0x4d0
[  326.630032][T12498]  tty_open+0x7d9/0xcc0
[  326.630059][T12498]  ? __pfx_tty_open+0x10/0x10
[  326.630080][T12498]  ? do_raw_spin_unlock+0x4d/0x200
[  326.630131][T12498]  chrdev_open+0x4d9/0x600
[  326.630149][T12498]  ? __pfx_chrdev_open+0x10/0x10
[  326.630165][T12498]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  326.630189][T12498]  ? __pfx_chrdev_open+0x10/0x10
[  326.630202][T12498]  do_dentry_open+0x816/0x1380
[  326.630225][T12498]  vfs_open+0x3b/0x340
[  326.630237][T12498]  ? path_openat+0x1428/0x1d60
[  326.630258][T12498]  path_openat+0x1443/0x1d60
[  326.630290][T12498]  do_file_open+0x23e/0x4a0
[  326.630312][T12498]  ? __pfx_do_file_open+0x10/0x10
[  326.630345][T12498]  ? _raw_spin_unlock+0x28/0x50
[  326.630359][T12498]  ? alloc_fd+0x651/0x6c0
[  326.630382][T12498]  do_sys_openat2+0x115/0x200
[  326.630397][T12498]  ? __se_sys_futex+0x3a8/0x450
[  326.630413][T12498]  ? __pfx_do_sys_openat2+0x10/0x10
[  326.630431][T12498]  ? rcu_is_watching+0x16/0xb0
[  326.630450][T12498]  __x64_sys_openat+0x138/0x170
[  326.630468][T12498]  do_syscall_64+0x166/0x520
[  326.630486][T12498]  ? trace_irq_disable+0x3b/0x140
[  326.630497][T12498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.630515][T12498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.630537][T12498] RIP: 0033:0x7f11d295e98e
[  326.630550][T12498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  326.630563][T12498] RSP: 002b:00007f11d3892b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  326.630580][T12498] RAX: ffffffffffffffda RBX: 00007f11d38936c0 RCX: 00007f11d295e98e
[  326.630590][T12498] RDX: 0000000000000002 RSI: 00007f11d3892c00 RDI: ffffffffffffff9c
[  326.630601][T12498] RBP: 00007f11d2a3506b R08: 0000000000000000 R09: 0000000000000000
[  326.630610][T12498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  326.630619][T12498] R13: 00007f11d2c26038 R14: 00007f11d2c25fa0 R15: 00007fff4e45c048
[  326.630641][T12498]  </TASK>
[  326.775627][T12502] loop1: detected capacity change from 0 to 512
[  326.965594][    T9] libceph: connect (1)[c::]:6789 error -101
[  326.965749][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  326.973578][T12496] ceph: No mds server is up or the cluster is laggy
[  327.197234][T12510] netlink: 'syz.0.2237': attribute type 2 has an invalid length.
[  327.490521][T12520] loop0: detected capacity change from 0 to 512
[  327.549066][   T33] audit: type=1326 audit(1790257866.683:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12521 comm="syz.0.2243" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18eb19e159 code=0x0
[  327.713588][T11016] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  327.713657][T11016] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  327.713693][T11016] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  327.713770][T11016] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  327.716766][T11016] usb 1-1: USB disconnect, device number 21
[  327.847267][T12532] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058)
[  327.855915][T12534] loop3: detected capacity change from 0 to 512
[  328.035223][T11016] libceph: connect (1)[c::]:6789 error -101
[  328.035414][T11016] libceph: mon0 (1)[c::]:6789 connect error
[  328.057514][T12545] ceph: No mds server is up or the cluster is laggy
[  328.292804][T11016] libceph: connect (1)[c::]:6789 error -101
[  328.292979][T11016] libceph: mon0 (1)[c::]:6789 connect error
[  328.306590][T12552] loop0: detected capacity change from 0 to 512
[  329.064575][T11016] libceph: connect (1)[c::]:6789 error -101
[  329.064765][T11016] libceph: mon0 (1)[c::]:6789 connect error
[  329.069745][T11016] libceph: connect (1)[c::]:6789 error -101
[  329.069878][T11016] libceph: mon0 (1)[c::]:6789 connect error
[  329.111455][T12577] ceph: No mds server is up or the cluster is laggy
[  329.281057][T12586] loop3: detected capacity change from 0 to 512
[  329.281741][T12586] EXT4-fs: Ignoring removed bh option
[  329.284582][T12586] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.2271: corrupted in-inode xattr: e_value size too large
[  329.284599][T12586] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  329.284776][T12586] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2271: couldn't read orphan inode 15 (err -117)
[  329.284789][T12586] loop3: lost filesystem error report for type 5 error -117
[  329.285688][T12586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.301577][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.888653][   T33] audit: type=1800 audit(1790257869.023:99): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2273" name="idVendor" dev="configfs" ino=36496 res=0 errno=0
[  330.276194][T12611] FAULT_INJECTION: forcing a failure.
[  330.276194][T12611] name fail_futex, interval 1, probability 0, space 0, times 1
[  330.276254][T12611] CPU: 0 UID: 0 PID: 12611 Comm: syz.1.2281 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  330.276281][T12611] Tainted: [L]=SOFTLOCKUP
[  330.276285][T12611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  330.276290][T12611] Call Trace:
[  330.276295][T12611]  <TASK>
[  330.276299][T12611]  dump_stack_lvl+0xe8/0x150
[  330.276316][T12611]  should_fail_ex+0x410/0x560
[  330.276332][T12611]  get_futex_key+0x1b4/0x1580
[  330.276344][T12611]  ? __pfx_futex_wake_mark+0x10/0x10
[  330.276360][T12611]  ? __pfx_get_futex_key+0x10/0x10
[  330.276369][T12611]  ? lock_acquire+0x115/0x350
[  330.276382][T12611]  futex_wake+0x119/0x5f0
[  330.276395][T12611]  ? memfd_add_seals+0x2ec/0x420
[  330.276410][T12611]  ? __pfx_futex_wake+0x10/0x10
[  330.276424][T12611]  ? memfd_add_seals+0x2ec/0x420
[  330.276435][T12611]  do_futex+0x458/0x4e0
[  330.276447][T12611]  ? __pfx_do_futex+0x10/0x10
[  330.276458][T12611]  ? lock_acquire+0x115/0x350
[  330.276466][T12611]  ? __pfx_do_fcntl+0x10/0x10
[  330.276484][T12611]  __se_sys_futex+0x3a8/0x450
[  330.276500][T12611]  ? __fget_files+0x2a/0x420
[  330.276514][T12611]  ? __pfx___se_sys_futex+0x10/0x10
[  330.276531][T12611]  ? __x64_sys_futex+0x21/0xf0
[  330.276541][T12611]  do_syscall_64+0x166/0x520
[  330.276552][T12611]  ? trace_irq_disable+0x3b/0x140
[  330.276560][T12611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.276569][T12611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.276577][T12611] RIP: 0033:0x7f11d299e159
[  330.276587][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.276598][T12611] RSP: 002b:00007f11d38930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  330.276612][T12611] RAX: ffffffffffffffda RBX: 00007f11d2c25fa8 RCX: 00007f11d299e159
[  330.276621][T12611] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f11d2c25fac
[  330.276631][T12611] RBP: 00007f11d2c25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  330.276640][T12611] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  330.276647][T12611] R13: 00007f11d2c26038 R14: 00007fff4e45bf60 R15: 00007fff4e45c048
[  330.276661][T12611]  </TASK>
[  330.622528][T11016] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  330.776325][T11016] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  330.781281][T11016] usb 2-1: config index 0 descriptor too short (expected 1572, got 36)
[  330.785160][T11016] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.797459][T11016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.800461][T11016] usb 2-1: Product: syz
[  330.802191][T11016] usb 2-1: Manufacturer: syz
[  330.802224][T11016] usb 2-1: SerialNumber: syz
[  330.829937][T11016] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13
[  331.015236][ T5028] bcm5974 2-1:1.0: could not read from device
[  331.028159][T11016] usb 2-1: USB disconnect, device number 17
[  331.505344][T12645] loop0: detected capacity change from 0 to 1024
[  331.506956][T12645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  331.507226][T12645] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  332.083385][   T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  332.234566][   T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  332.239656][   T25] usb 2-1: config index 0 descriptor too short (expected 1572, got 36)
[  332.244148][   T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  332.250040][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.254115][   T25] usb 2-1: Product: syz
[  332.255887][   T25] usb 2-1: Manufacturer: syz
[  332.258562][   T25] usb 2-1: SerialNumber: syz
[  332.275953][   T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14
[  332.491156][ T5028] bcm5974 2-1:1.0: could not read from device
[  332.507646][ T5028] bcm5974 2-1:1.0: could not read from device
[  332.513327][ T1687] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  332.520181][ T5028] bcm5974 2-1:1.0: could not read from device
[  332.520190][   T25] usb 2-1: USB disconnect, device number 18
[  332.663244][ T1687] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  332.664312][ T1687] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.664332][ T1687] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  332.664348][ T1687] usb 4-1: config 0 interface 0 has no altsetting 0
[  332.664371][ T1687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.667155][ T1687] usb 4-1: config 0 descriptor??
[  332.764891][T12682] loop0: detected capacity change from 0 to 1024
[  332.776977][T12682] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  332.777147][T12682] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  333.077804][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.077886][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.077935][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.077972][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.078010][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.078047][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.078111][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.078148][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.078186][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.078232][ T1687] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  333.086078][ T1687] acrux 0003:1A34:0802.0002: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0
[  333.133858][T10992] libceph: connect (1)[c::]:6789 error -101
[  333.134104][T10992] libceph: mon0 (1)[c::]:6789 connect error
[  333.169186][T12686] ceph: No mds server is up or the cluster is laggy
[  333.339210][ T1687] usb 4-1: USB disconnect, device number 8
[  333.966369][T12691] binder: BINDER_SET_CONTEXT_MGR already set
[  333.966435][T12691] binder: 12690:12691 ioctl 4018620d 200000000180 returned -16
[  334.642637][T12712] loop1: detected capacity change from 0 to 1024
[  334.654222][T12712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  334.654349][T12712] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  335.402648][ T1687] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  335.553582][ T1687] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  335.556283][ T1687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.556308][ T1687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.556335][ T1687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.560087][ T1687] usb 4-1: config 0 descriptor??
[  335.983559][ T1687] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  336.176917][ T1687] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00
[  336.378229][ T1687] cp2112 0003:10C4:EA90.0003: error requesting SMBus config
[  336.408377][ T1687] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32
[  336.425237][ T1687] usb 4-1: USB disconnect, device number 9
[  336.569521][T12741] loop0: detected capacity change from 0 to 32768
[  336.570970][T12741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2340 (12741)
[  336.575244][T12741] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  336.575266][T12741] BTRFS info (device loop0): using sha256 checksum algorithm
[  336.658890][T12741] BTRFS info (device loop0): enabling ssd optimizations
[  336.658967][T12741] BTRFS info (device loop0): turning on async discard
[  336.659012][T12741] BTRFS info (device loop0): enabling free space tree
[  336.670631][T12756] loop1: detected capacity change from 0 to 1024
[  336.680604][T12756] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  336.693144][T12756] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  336.761118][T10700] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  338.002618][T11016] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  338.166708][T11016] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  338.171320][T11016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.171379][T11016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.171414][T11016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.196863][T11016] usb 1-1: config 0 descriptor??
[  338.615449][T11016] hid_parser_main: 15 callbacks suppressed
[  338.617513][T11016] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  338.617561][T11016] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  338.617606][T11016] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  338.617635][T11016] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  338.617662][T11016] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  338.617690][T11016] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  338.617719][T11016] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  338.636318][T11016] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  338.697387][T12794] loop1: detected capacity change from 0 to 32768
[  338.703590][T12794] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2356 (12794)
[  338.717730][T12794] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  338.717794][T12794] BTRFS info (device loop1): using blake2b checksum algorithm
[  338.762844][T12794] BTRFS info (device loop1): enabling ssd optimizations
[  338.765265][T12794] BTRFS info (device loop1): turning on async discard
[  338.767708][T12794] BTRFS info (device loop1): enabling free space tree
[  338.781285][   T33] audit: type=1800 audit(1790257877.913:100): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2356" name="file1" dev="loop1" ino=260 res=0 errno=0
[  338.807521][T11016] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00
[  338.811111][T10868] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  338.943837][T12813] loop1: detected capacity change from 0 to 512
[  338.957355][T12813] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.2358: bg 0: block 5: invalid block bitmap
[  338.977536][T12813] loop1: lost filesystem error report for type 5 error -117
[  338.981295][T12813] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  338.983711][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  338.983721][    C1] EXT4-fs (loop1): initial error at time 1790257878: ext4_validate_block_bitmap:436
[  338.983731][    C1] EXT4-fs (loop1): last error at time 1790257878: ext4_validate_block_bitmap:436
[  338.989394][T12813] loop1: lost filesystem error report for type 5 error -117
[  338.999002][T12813] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2358: invalid indirect mapped block 3 (level 2)
[  339.001502][T12813] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  339.006372][T12813] EXT4-fs (loop1): 1 orphan inode deleted
[  339.009528][T11016] cp2112 0003:10C4:EA90.0004: error requesting SMBus config
[  339.012945][T12813] EXT4-fs (loop1): 1 truncate cleaned up
[  339.028687][T12813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.041097][T11016] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32
[  339.054964][T11016] usb 1-1: USB disconnect, device number 22
[  339.130667][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.354913][T12829] netlink: 'syz.3.2365': attribute type 1 has an invalid length.
[  339.391811][T12831] fuse: Bad value for 'fd'
[  339.561976][T12837] Bluetooth: MGMT ver 1.23
[  339.859814][T12848] fuse: Bad value for 'fd'
[  340.153965][T11016] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  340.158089][T12852] loop1: detected capacity change from 0 to 256
[  340.328065][T11016] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  340.333533][T11016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.333576][T11016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.333612][T11016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.346319][T11016] usb 1-1: config 0 descriptor??
[  340.452000][T12863] fuse: Bad value for 'fd'
[  340.757390][T11016] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  340.761051][T11016] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  340.764036][T11016] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  340.775273][T11016] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  340.956818][T11016] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00
[  341.157382][T11016] cp2112 0003:10C4:EA90.0005: error requesting SMBus config
[  341.163172][T11016] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -32
[  341.170476][T12896] loop3: detected capacity change from 0 to 256
[  341.176734][T12896] exfat: Deprecated parameter 'utf8'
[  341.179862][T11016] usb 1-1: USB disconnect, device number 23
[  341.185503][T12896] exfat: Deprecated parameter 'namecase'
[  341.195938][T12896] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  341.561175][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'.
[  341.911245][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2413'.
[  342.006157][T12934] binder: BINDER_SET_CONTEXT_MGR already set
[  342.006281][T12934] binder: 12933:12934 ioctl 4018620d 200000000180 returned -16
[  342.221636][T12952] loop3: detected capacity change from 0 to 256
[  342.227980][T12952] exfat: Deprecated parameter 'utf8'
[  342.228148][T12952] exfat: Deprecated parameter 'namecase'
[  342.243291][T12952] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  342.330075][T12958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.359429][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'.
[  342.466460][T12966] loop3: detected capacity change from 0 to 1024
[  342.469233][T12966] EXT4-fs: Ignoring removed bh option
[  342.471756][T12966] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  342.500592][T12966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.532101][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.576160][T12971] loop3: detected capacity change from 0 to 1024
[  342.581129][T12971] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  342.616978][T12971] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.2430: Invalid block bitmap block 0 in block_group 0
[  342.623265][T12971] loop3: lost filesystem error report for type 5 error -117
[  342.632478][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  342.632577][    C1] EXT4-fs (loop3): initial error at time 1790257881: ext4_read_block_bitmap_nowait:487
[  342.632706][    C1] EXT4-fs (loop3): last error at time 1790257881: ext4_read_block_bitmap_nowait:487
[  342.647494][T12971] Quota error (device loop3): write_blk: dquota write failed
[  342.656253][T12971] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  342.656357][T12971] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.2430: Failed to acquire dquot type 0
[  342.656369][T12971] loop3: lost filesystem error report for type 5 error -117
[  342.657167][T12971] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.2430: Freeing blocks not in datazone - block = 0, count = 4096
[  342.657190][T12971] loop3: lost filesystem error report for type 5 error -117
[  342.657993][T12971] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.2430: Invalid inode bitmap blk 0 in block_group 0
[  342.658043][T12971] loop3: lost filesystem error report for type 5 error -117
[  342.658204][T12971] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem
[  342.658217][T12971] loop3: lost filesystem error report for type 5 error -117
[  342.658392][T12971] EXT4-fs (loop3): 1 orphan inode deleted
[  342.659228][T12971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.675576][ T3318] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7
[  342.675719][ T3318] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u9:4: Failed to release dquot type 0
[  342.730187][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.818367][T12977] loop3: detected capacity change from 0 to 2048
[  342.836669][T12977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  342.943536][T12983] loop1: detected capacity change from 0 to 512
[  342.945623][T12983] EXT4-fs: Ignoring removed i_version option
[  342.950716][T12983] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  342.973803][T12983] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  342.982374][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  342.982422][    C0] EXT4-fs (loop1): initial error at time 1790257882: ext4_mb_generate_buddy:1317
[  342.982474][    C0] EXT4-fs (loop1): last error at time 1790257882: ext4_mb_generate_buddy:1317
[  342.993629][T12983] Quota error (device loop1): write_blk: dquota write failed
[  342.993685][T12983] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  342.993763][T12983] Quota error (device loop1): write_blk: dquota write failed
[  342.993811][T12983] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  342.993832][T12983] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.2435: Failed to acquire dquot type 1
[  342.993842][T12983] loop1: lost filesystem error report for type 5 error -28
[  342.994671][T12983] EXT4-fs (loop1): 1 truncate cleaned up
[  342.995426][T12983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.078068][T12982] loop3: detected capacity change from 0 to 32768
[  343.081086][T12982] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2434 (12982)
[  343.091573][T12982] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  343.091599][T12982] BTRFS info (device loop3): using blake2b checksum algorithm
[  343.116949][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.185445][T12982] BTRFS info (device loop3): enabling ssd optimizations
[  343.187905][T12982] BTRFS info (device loop3): turning on async discard
[  343.190168][T12982] BTRFS info (device loop3): enabling free space tree
[  343.201880][T13002] loop1: detected capacity change from 0 to 16
[  343.220636][T13002] erofs (device loop1): mounted with root inode @ nid 36.
[  343.233820][T10910] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  343.743236][T13019] loop1: detected capacity change from 0 to 32768
[  343.751038][T13019] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2443 (13019)
[  343.766189][T13019] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  343.770431][T13019] BTRFS info (device loop1): using blake2b checksum algorithm
[  343.809240][T13019] BTRFS info (device loop1): enabling ssd optimizations
[  343.812246][T13019] BTRFS info (device loop1): turning on async discard
[  343.815638][T13019] BTRFS info (device loop1): enabling free space tree
[  343.841951][T10868] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  344.145622][T13046] exfat: Deprecated parameter 'utf8'
[  344.148855][T13046] exfat: Deprecated parameter 'namecase'
[  344.156310][T13046] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  344.214507][T13048] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  344.217608][T13048] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  344.423246][T13055] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  344.441308][T13055] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.2452: Invalid block bitmap block 0 in block_group 0
[  344.450442][T13055] loop3: lost filesystem error report for type 5 error -117
[  344.450776][T13055] Quota error (device loop3): write_blk: dquota write failed
[  344.452707][T13055] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  344.452752][T13055] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.2452: Failed to acquire dquot type 0
[  344.452763][T13055] loop3: lost filesystem error report for type 5 error -117
[  344.453099][T13055] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.2452: Freeing blocks not in datazone - block = 0, count = 4096
[  344.453112][T13055] loop3: lost filesystem error report for type 5 error -117
[  344.453269][    C1] EXT4-fs (loop3): error count since last fsck: 3
[  344.453275][T13055] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.2452: Invalid inode bitmap blk 0 in block_group 0
[  344.453280][    C1] EXT4-fs (loop3): initial error at time 1790257883: ext4_read_block_bitmap_nowait:487
[  344.453286][T13055] loop3: lost filesystem error report for type 5 error -117
[  344.453292][    C1] 
[  344.453297][    C1] EXT4-fs (loop3): last error at time 1790257883: ext4_read_inode_bitmap:141
[  344.453372][T13055] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem
[  344.453380][T13055] loop3: lost filesystem error report for type 5 error -117
[  344.453484][T13055] EXT4-fs (loop3): 1 orphan inode deleted
[  344.454590][T13055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.478445][ T3318] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7
[  344.478493][ T3318] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u9:4: Failed to release dquot type 0
[  344.531490][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.648802][T13063] exfat: Deprecated parameter 'utf8'
[  344.648901][T13063] exfat: Deprecated parameter 'namecase'
[  344.663331][T13063] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  345.255713][T13078] set_capacity_and_notify: 4 callbacks suppressed
[  345.258929][T13078] loop0: detected capacity change from 0 to 256
[  345.260122][T13078] exfat: Deprecated parameter 'utf8'
[  345.260227][T13078] exfat: Deprecated parameter 'namecase'
[  345.265715][T13078] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  345.306090][T13080] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  345.324310][T13080] loop1: detected capacity change from 0 to 8
[  345.383411][T13080] SQUASHFS error: Failed to read block 0x71: -5
[  345.383763][   T33] audit: type=1800 audit(1790257884.523:101): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2463" name="file1" dev="loop1" ino=1 res=0 errno=0
[  346.229601][T13088] loop1: detected capacity change from 0 to 2048
[  346.445206][T13094] loop1: detected capacity change from 0 to 2048
[  346.451657][T13094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  347.456500][T13106] loop1: detected capacity change from 0 to 4096
[  347.483338][T13106] ntfs3(loop1): Failed to load $Extend (-22).
[  347.485781][T13106] ntfs3(loop1): Failed to initialize $Extend.
[  347.488483][T13106] ntfs3(loop1): Failed to load root (-22).
[  347.657757][T13112] loop3: detected capacity change from 0 to 256
[  347.661403][T13112] exfat: Deprecated parameter 'utf8'
[  347.664644][T13112] exfat: Deprecated parameter 'namecase'
[  347.669799][T13108] loop1: detected capacity change from 0 to 4096
[  347.686269][T13112] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  347.758771][T13114] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  347.758936][T13108] ntfs3(loop1): ino=b, mi_enum_attr
[  347.758949][T13108] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  347.759223][T13108] ntfs3(loop1): Failed to load $Extend (-22).
[  347.759236][T13108] ntfs3(loop1): Failed to initialize $Extend.
[  347.794823][T13114] loop3: detected capacity change from 0 to 8
[  347.810488][T13114] SQUASHFS error: Failed to read block 0x71: -5
[  347.810805][   T33] audit: type=1800 audit(1790257886.943:102): pid=13114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2478" name="file1" dev="loop3" ino=1 res=0 errno=0
[  348.930684][T13145] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  348.937879][T13145] loop1: detected capacity change from 0 to 8
[  348.946796][T13145] SQUASHFS error: Failed to read block 0x71: -5
[  348.955948][   T33] audit: type=1800 audit(1790257888.093:103): pid=13145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2492" name="file1" dev="loop1" ino=1 res=0 errno=0
[  350.112511][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  350.263372][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  350.270602][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.275009][    T9] usb 2-1: Product: syz
[  350.275075][    T9] usb 2-1: Manufacturer: syz
[  350.275107][    T9] usb 2-1: SerialNumber: syz
[  350.700191][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  350.704806][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  351.001351][T13162] loop3: detected capacity change from 0 to 256
[  351.154576][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'.
[  351.439538][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'.
[  351.515813][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  351.520874][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  351.531632][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  351.549424][    T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  351.564447][    T9] usb 2-1: USB disconnect, device number 19
[  351.906036][T13213] loop3: detected capacity change from 0 to 1024
[  351.906840][T13213] EXT4-fs: Ignoring removed bh option
[  351.907350][T13213] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  351.931079][T13213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.933917][T13213] fuse: Bad value for 'fd'
[  351.957096][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.089118][T13222] loop1: detected capacity change from 0 to 512
[  352.107731][T13222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.116663][T13222] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  352.199283][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.203934][T13228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2529'.
[  352.204062][T13228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2529'.
[  352.316936][T13236] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2533'.
[  353.281251][T13247] tipc: Started in network mode
[  353.281315][T13247] tipc: Node identity 4, cluster identity 4711
[  353.281895][T13247] tipc: Node number set to 4
[  354.547496][T13273] loop3: detected capacity change from 0 to 512
[  354.711845][T13281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2553'.
[  354.711906][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2553'.
[  354.798142][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'.
[  354.798205][T13288] block nbd0: Unsupported socket: should be TCP or UNIX.
[  354.860089][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2557'.
[  354.887673][T13294] loop1: detected capacity change from 0 to 256
[  355.055846][T13302] loop0: detected capacity change from 0 to 512
[  355.087332][T13302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.094061][T13302] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  355.110483][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.222056][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2565'.
[  355.591972][T13316] loop3: detected capacity change from 0 to 256
[  355.649204][T13320] loop3: detected capacity change from 0 to 512
[  355.676393][T13320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.683470][T13320] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  355.703683][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.131345][T13347] tipc: Started in network mode
[  357.133339][T13347] tipc: Node identity 4, cluster identity 4711
[  357.135429][T13347] tipc: Node number set to 4
[  358.049114][T13360] loop1: detected capacity change from 0 to 256
[  358.168202][T13366] __nla_validate_parse: 1 callbacks suppressed
[  358.168277][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'.
[  358.207359][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'.
[  358.383449][T13377] loop1: detected capacity change from 0 to 4096
[  358.388949][T13377] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  358.424143][T13377] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  358.571337][T13383] loop1: detected capacity change from 0 to 8192
[  358.576477][T13383] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  358.606980][T13381] loop0: detected capacity change from 0 to 32768
[  358.609468][T13381] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2597 (13381)
[  358.619649][T13381] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  358.619702][T13381] BTRFS info (device loop0): using sha256 checksum algorithm
[  358.697819][T13381] BTRFS info (device loop0): turning off barriers
[  358.701147][T13381] BTRFS info (device loop0): enabling free space tree
[  358.757521][T10700] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  358.913785][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2602'.
[  359.337029][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'.
[  359.762498][T11016] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  359.934936][T11016] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  359.938296][T11016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.938318][T11016] usb 1-1: Product: syz
[  359.938328][T11016] usb 1-1: Manufacturer: syz
[  359.938337][T11016] usb 1-1: SerialNumber: syz
[  360.232599][ T1687] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  360.350548][T11016] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  360.350616][T11016] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  360.383803][ T1687] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  360.387961][ T1687] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.391962][ T1687] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  360.397161][ T1687] usb 2-1: config 0 interface 0 has no altsetting 0
[  360.397187][ T1687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.403334][ T1687] usb 2-1: config 0 descriptor??
[  360.810364][ T1687] usbhid 2-1:0.0: can't add hid device: -71
[  360.812966][ T1687] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  360.817632][ T1687] usb 2-1: USB disconnect, device number 20
[  361.162711][T11016] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  361.162776][T11016] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  361.163567][T11016] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  361.168518][T11016] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  361.176206][T11016] usb 1-1: USB disconnect, device number 24
[  361.352046][T13449] loop1: detected capacity change from 0 to 512
[  361.355414][T13449] EXT4-fs: Ignoring removed nomblk_io_submit option
[  361.355442][T13449] EXT4-fs: Ignoring removed oldalloc option
[  361.366373][T13449] EXT4-fs: old and new quota format mixing
[  362.819959][T13470] loop0: detected capacity change from 0 to 512
[  362.831969][T13470] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  362.834812][T13470] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.2632: corrupted in-inode xattr: e_value size too large
[  362.840196][T13470] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  362.840557][T13470] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2632: couldn't read orphan inode 15 (err -117)
[  362.844405][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  362.844418][    C0] EXT4-fs (loop0): initial error at time 1790257901: ext4_iget_extra_inode:5210: inode 15
[  362.844440][    C0] EXT4-fs (loop0): last error at time 1790257901: ext4_iget_extra_inode:5210: inode 15
[  362.852936][T13470] loop0: lost filesystem error report for type 5 error -117
[  362.854973][T13470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.882146][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.331631][T13495] overlayfs: failed to resolve './bus': -2
[  363.334429][T13495] overlayfs: failed to resolve './bus': -2
[  363.608782][T13500] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.609173][T13500] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.609255][T13500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.080467][T13505] loop0: detected capacity change from 0 to 512
[  364.087437][T13505] EXT4-fs: Ignoring removed oldalloc option
[  364.097228][T13505] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.2647: Parent and EA inode have the same ino 15
[  364.102081][T13505] loop0: lost filesystem error report for type 5 error -117
[  364.107234][T13505] EXT4-fs (loop0): Remounting filesystem read-only
[  364.113277][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  364.113295][    C0] EXT4-fs (loop0): initial error at time 1790257903: ext4_xattr_inode_iget:433
[  364.113307][    C0] EXT4-fs (loop0): last error at time 1790257903: ext4_xattr_inode_iget:433
[  364.128969][T13505] EXT4-fs (loop0): 1 orphan inode deleted
[  364.131861][T13505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.148709][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.270251][T13512] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2649'.
[  364.405205][T13522] loop0: detected capacity change from 0 to 512
[  364.407839][T13522] EXT4-fs: Ignoring removed oldalloc option
[  364.414385][T13522] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.2655: Parent and EA inode have the same ino 15
[  364.420153][T13522] loop0: lost filesystem error report for type 5 error -117
[  364.420559][T13522] EXT4-fs (loop0): Remounting filesystem read-only
[  364.423740][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  364.423754][    C0] EXT4-fs (loop0): initial error at time 1790257903: ext4_xattr_inode_iget:433
[  364.423771][    C0] EXT4-fs (loop0): last error at time 1790257903: ext4_xattr_inode_iget:433
[  364.437706][T13522] EXT4-fs (loop0): 1 orphan inode deleted
[  364.448070][T13522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.494655][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.935946][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'.
[  365.312496][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  365.483842][    T9] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  365.488559][    T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.493900][    T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  365.493959][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  365.493996][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.505026][    T9] usb 4-1: config 0 descriptor??
[  365.917416][    T9] hid_parser_main: 4 callbacks suppressed
[  365.919780][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.919832][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.919904][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.919933][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.919961][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.919989][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.920022][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.920051][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.920080][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.920108][    T9] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  365.955502][    T9] acrux 0003:1A34:0802.0006: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0
[  366.116467][    T9] usb 4-1: USB disconnect, device number 10
[  368.494123][ T5759] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  368.654064][ T5759] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  368.657237][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.657770][ T5759] usb 2-1: Product: syz
[  368.657781][ T5759] usb 2-1: Manufacturer: syz
[  368.657791][ T5759] usb 2-1: SerialNumber: syz
[  369.073329][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  369.073398][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  369.078310][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  369.078337][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  369.094240][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  369.104595][ T5759] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  369.117625][T13730] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  369.121640][T13730] loop3: detected capacity change from 0 to 8
[  369.137837][T13730] SQUASHFS error: Failed to read block 0x71: -5
[  369.140140][   T33] audit: type=1800 audit(1790257908.273:104): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2742" name="file1" dev="loop3" ino=1 res=0 errno=0
[  369.343334][T13748] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  369.410562][T13752] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  369.415573][T13752] loop3: detected capacity change from 0 to 8
[  369.489836][T13755] loop3: detected capacity change from 0 to 512
[  369.517185][T13755] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  369.559805][T13757] loop3: detected capacity change from 0 to 2048
[  369.570719][T13757] NILFS (loop3): invalid segment: Magic number mismatch
[  369.574026][T13757] NILFS (loop3): trying rollback from an earlier position
[  369.587499][T13757] NILFS (loop3): recovery complete
[  369.595542][T13758] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  369.618494][T13757] NILFS (loop3): bad btree node (ino=3, blocknr=8): level = 0, flags = 0x1, nchildren = 0
[  369.623481][T13757] NILFS (loop3): error -5 preparing GC: cannot read source blocks
[  369.804532][T13769] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  369.809405][T13769] loop3: detected capacity change from 0 to 8
[  370.904308][T13784] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  370.910180][T13784] loop3: detected capacity change from 0 to 8
[  371.100644][ T5006] usb 2-1: USB disconnect, device number 21
[  371.375254][T13800] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  371.706627][T13814] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  371.752445][T10992] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  371.772930][T13818] loop0: detected capacity change from 0 to 2048
[  371.777600][T13818] NILFS (loop0): invalid segment: Magic number mismatch
[  371.780010][T13818] NILFS (loop0): trying rollback from an earlier position
[  371.791128][T13818] NILFS (loop0): recovery complete
[  371.794649][T13819] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  371.945155][T10992] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  371.952190][T10992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.956405][T10992] usb 2-1: Product: syz
[  371.958314][T10992] usb 2-1: Manufacturer: syz
[  371.960370][T10992] usb 2-1: SerialNumber: syz
[  372.037077][T13830] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  372.089921][T13832] loop3: detected capacity change from 0 to 1024
[  372.090688][T13832] EXT4-fs: Ignoring removed bh option
[  372.110649][T13832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.128538][T13832] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  372.157626][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.286901][T13841] serio: Serial port ptm0
[  372.387884][T10992] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  372.391740][T10992] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  372.397235][T10992] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  372.401723][T10992] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  372.405469][T10992] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  372.409354][T10992] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  373.265679][T13849] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  373.270702][T13849] loop3: detected capacity change from 0 to 8
[  373.287535][T13849] SQUASHFS error: Failed to read block 0x71: -5
[  373.289656][   T33] audit: type=1800 audit(1790257912.423:105): pid=13849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2791" name="file1" dev="loop3" ino=1 res=0 errno=0
[  374.283150][T13858] loop3: detected capacity change from 0 to 512
[  374.302245][T13858] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  374.310641][T13858] EXT4-fs (loop3): Remounting filesystem read-only
[  374.312577][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  374.312594][    C1] EXT4-fs (loop3): initial error at time 1790257913: ext4_mb_generate_buddy:1317
[  374.312610][    C1] EXT4-fs (loop3): last error at time 1790257913: ext4_mb_generate_buddy:1317
[  374.313823][T13858] EXT4-fs (loop3): 1 truncate cleaned up
[  374.315035][T13858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.347980][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.424559][T13863] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2797'.
[  374.451545][T13865] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  374.456548][T13865] loop3: detected capacity change from 0 to 8
[  374.467488][T13865] SQUASHFS error: Failed to read block 0x71: -5
[  374.469662][   T33] audit: type=1800 audit(1790257913.603:106): pid=13865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2798" name="file1" dev="loop3" ino=1 res=0 errno=0
[  374.530717][T11017] usb 2-1: USB disconnect, device number 22
[  374.689162][T13880] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  374.697734][T13880] loop3: detected capacity change from 0 to 8
[  374.719669][T13880] SQUASHFS error: Failed to read block 0x71: -5
[  374.719900][   T33] audit: type=1800 audit(1790257913.853:107): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2805" name="file1" dev="loop3" ino=1 res=0 errno=0
[  374.992808][T13889] loop1: detected capacity change from 0 to 16
[  375.013563][T13889] erofs (device loop1): mounted with root inode @ nid 36.
[  375.034416][T13889] erofs (device loop1): bogus i_mode (4355) @ nid 46
[  375.170039][T11017] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  375.256405][T13897] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  375.258130][T13897] loop0: detected capacity change from 0 to 8
[  375.265266][T13897] SQUASHFS error: Failed to read block 0x71: -5
[  375.268112][   T33] audit: type=1800 audit(1790257914.403:108): pid=13897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2812" name="file1" dev="loop0" ino=1 res=0 errno=0
[  375.323203][T11017] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  375.330657][T11017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.330695][T11017] usb 4-1: Product: syz
[  375.333631][T11017] usb 4-1: Manufacturer: syz
[  375.333645][T11017] usb 4-1: SerialNumber: syz
[  375.548322][T13911] loop0: detected capacity change from 0 to 8
[  375.554062][T13911] SQUASHFS error: Failed to read block 0x71: -5
[  375.556978][   T33] audit: type=1800 audit(1790257914.693:109): pid=13911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2819" name="file1" dev="loop0" ino=1 res=0 errno=0
[  375.771439][T11017] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  375.775514][T11017] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  375.779571][T11017] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  375.783559][T11017] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  375.784032][T11017] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  375.790899][T11017] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  376.692579][T13931] loop1: detected capacity change from 0 to 8
[  376.706537][T13931] SQUASHFS error: Failed to read block 0x71: -5
[  376.709094][   T33] audit: type=1800 audit(1790257915.843:110): pid=13931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2826" name="file1" dev="loop1" ino=1 res=0 errno=0
[  377.102412][T10992] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  377.253159][T10992] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  377.257160][T10992] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  377.260496][T10992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.260511][T10992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  377.260545][T10992] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.275755][T10992] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  377.278536][T10992] usb 1-1: Product: syz
[  377.280576][T10992] usb 1-1: Manufacturer: syz
[  377.287244][T10992] cdc_wdm 1-1:1.0: skipping garbage
[  377.289488][T10992] cdc_wdm 1-1:1.0: skipping garbage
[  377.294883][T10992] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  377.297221][T10992] cdc_wdm 1-1:1.0: Unknown control protocol
[  377.493615][T10992] usb 1-1: USB disconnect, device number 25
[  377.727866][T13946] loop1: detected capacity change from 0 to 8
[  377.749937][T13946] SQUASHFS error: Failed to read block 0x71: -5
[  377.760536][   T33] audit: type=1800 audit(1790257916.893:111): pid=13946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2833" name="file1" dev="loop1" ino=1 res=0 errno=0
[  377.826742][T11017] usb 4-1: USB disconnect, device number 11
[  377.880314][T13953] loop3: detected capacity change from 0 to 512
[  377.883606][T13953] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  377.894059][T13953] EXT4-fs (loop3): 1 truncate cleaned up
[  377.894899][T13953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.929914][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.050422][T13961] lo: entered allmulticast mode
[  378.053024][T13965] loop3: detected capacity change from 0 to 8
[  378.067963][T13965] SQUASHFS error: Failed to read block 0x71: -5
[  378.069661][   T33] audit: type=1800 audit(1790257917.203:112): pid=13965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2840" name="file1" dev="loop3" ino=1 res=0 errno=0
[  378.227775][T13975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  378.240343][T13975] EXT4-fs (loop0): 1 truncate cleaned up
[  378.241125][T13975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.283457][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.320497][T13980] lo: entered allmulticast mode
[  378.394472][T11016] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  378.538950][T13996] lo: entered allmulticast mode
[  378.563708][T13998] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  378.564794][T11016] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  378.571604][T11016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.571688][T11016] usb 2-1: Product: syz
[  378.571721][T11016] usb 2-1: Manufacturer: syz
[  378.571752][T11016] usb 2-1: SerialNumber: syz
[  378.646390][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  378.647959][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  378.764299][T14010] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  378.892922][T14016] FAULT_INJECTION: forcing a failure.
[  378.892922][T14016] name failslab, interval 1, probability 0, space 0, times 0
[  378.892975][T14016] CPU: 1 UID: 0 PID: 14016 Comm: syz.0.2865 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.893005][T14016] Tainted: [L]=SOFTLOCKUP
[  378.893010][T14016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.893016][T14016] Call Trace:
[  378.893021][T14016]  <TASK>
[  378.893026][T14016]  dump_stack_lvl+0xe8/0x150
[  378.893059][T14016]  should_fail_ex+0x410/0x560
[  378.893074][T14016]  should_failslab+0xa8/0x100
[  378.893085][T14016]  ? copy_pid_ns+0x241/0x900
[  378.893095][T14016]  kmem_cache_alloc_noprof+0xa1/0x600
[  378.893105][T14016]  ? __pfx_inc_ucount+0x10/0x10
[  378.893117][T14016]  ? copy_pid_ns+0x241/0x900
[  378.893127][T14016]  copy_pid_ns+0x241/0x900
[  378.893137][T14016]  ? __pfx_copy_pid_ns+0x10/0x10
[  378.893151][T14016]  ? rcu_is_watching+0x16/0xb0
[  378.893161][T14016]  ? __pfx_copy_mnt_ns+0x10/0x10
[  378.893172][T14016]  ? kmem_cache_alloc_noprof+0x31f/0x600
[  378.893185][T14016]  ? copy_ipcs+0x2a9/0x6c0
[  378.893195][T14016]  ? copy_utsname+0x184/0x620
[  378.893208][T14016]  create_new_namespaces+0x2ad/0x6b0
[  378.893220][T14016]  ? security_capable+0x7e/0x2c0
[  378.893236][T14016]  unshare_nsproxy_namespaces+0x149/0x190
[  378.893248][T14016]  ksys_unshare+0x5a7/0x950
[  378.893262][T14016]  ? __pfx_ksys_unshare+0x10/0x10
[  378.893272][T14016]  ? __pfx___se_sys_prctl+0x10/0x10
[  378.893284][T14016]  __x64_sys_unshare+0x38/0x50
[  378.893294][T14016]  do_syscall_64+0x166/0x520
[  378.893308][T14016]  ? trace_irq_disable+0x3b/0x140
[  378.893315][T14016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.893325][T14016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.893333][T14016] RIP: 0033:0x7f18eb19e159
[  378.893341][T14016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  378.893348][T14016] RSP: 002b:00007f18ebfa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  378.893357][T14016] RAX: ffffffffffffffda RBX: 00007f18eb425fa0 RCX: 00007f18eb19e159
[  378.893363][T14016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000
[  378.893368][T14016] RBP: 00007f18eb23506b R08: 0000000000000000 R09: 0000000000000000
[  378.893373][T14016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  378.893377][T14016] R13: 00007f18eb426038 R14: 00007f18eb425fa0 R15: 00007fff6c6a1518
[  378.893389][T14016]  </TASK>
[  379.203222][T11016] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  379.203338][T11016] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  379.203648][T11016] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  379.209332][T11016] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  379.317276][T14041] set_capacity_and_notify: 3 callbacks suppressed
[  379.321994][T14041] loop0: detected capacity change from 0 to 4096
[  379.331826][T14041] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  379.655856][T14061] loop0: detected capacity change from 0 to 32768
[  379.656846][T14061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2884 (14061)
[  379.659295][T14061] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  379.659309][T14061] BTRFS info (device loop0): using sha256 checksum algorithm
[  379.701313][T14061] BTRFS info (device loop0): enabling ssd optimizations
[  379.701369][T14061] BTRFS info (device loop0): turning on async discard
[  379.701401][T14061] BTRFS info (device loop0): enabling free space tree
[  379.732598][T10700] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  380.322694][T10992] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  380.483388][T10992] usb 4-1: Using ep0 maxpacket: 32
[  380.486350][T10992] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  380.491384][T10992] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  380.494946][T10992] usb 4-1: config 0 has no interface number 0
[  380.500524][T10992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.500596][T10992] usb 4-1: Product: syz
[  380.500630][T10992] usb 4-1: Manufacturer: syz
[  380.500662][T10992] usb 4-1: SerialNumber: syz
[  380.512466][T10992] usb 4-1: config 0 descriptor??
[  380.899256][T14098] loop0: detected capacity change from 0 to 1024
[  380.905697][T14098] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  380.910719][T14098] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  380.918127][T14098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.938681][T14098] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - no `..'
[  380.961408][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.144590][ T8790] usb 2-1: USB disconnect, device number 23
[  381.534058][T10992] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  381.537970][T10992] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  381.541542][T10992] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  381.548038][T10992] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  381.559398][T10992] usb 4-1: USB disconnect, device number 12
[  381.612632][ T5759] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  381.670894][T14135] loop0: detected capacity change from 0 to 16
[  381.719086][T14135] erofs (device loop0): mounted with root inode @ nid 36.
[  381.726138][T14135] erofs (device loop0): bogus i_mode (4355) @ nid 46
[  381.774213][ T5759] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  381.781816][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.785153][ T5759] usb 2-1: Product: syz
[  381.786650][ T5759] usb 2-1: Manufacturer: syz
[  381.788656][ T5759] usb 2-1: SerialNumber: syz
[  382.398379][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  382.398495][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  382.398829][ T5759] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  382.414960][ T5759] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  382.449698][T14142] loop3: detected capacity change from 0 to 32768
[  382.494035][T14142] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  382.515015][T14142] XFS (loop3): Ending clean mount
[  382.617955][T10910] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  382.751464][T14160] loop0: detected capacity change from 0 to 16
[  382.763892][T14160] erofs (device loop0): mounted with root inode @ nid 36.
[  383.578367][T14170] loop3: detected capacity change from 0 to 16
[  383.665203][T14170] erofs (device loop3): mounted with root inode @ nid 36.
[  383.672746][T14169] erofs (device loop3): bogus i_mode (4355) @ nid 46
[  384.201063][T14186] loop0: detected capacity change from 0 to 16
[  384.223162][T14186] erofs (device loop0): mounted with root inode @ nid 36.
[  384.446161][ T5006] usb 2-1: USB disconnect, device number 24
[  384.903233][T10992] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  385.053445][T10992] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  385.059753][T10992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.063559][T10992] usb 2-1: Product: syz
[  385.065561][T10992] usb 2-1: Manufacturer: syz
[  385.067853][T10992] usb 2-1: SerialNumber: syz
[  385.572576][ T1687] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  385.721758][T10992] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  385.727482][T10992] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  385.732085][T10992] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  385.736055][ T1687] usb 1-1: Using ep0 maxpacket: 32
[  385.739410][ T1687] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  385.744343][ T1687] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  385.747905][ T1687] usb 1-1: config 0 has no interface number 0
[  385.754880][T10992] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  385.758392][ T1687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.758444][ T1687] usb 1-1: Product: syz
[  385.758486][ T1687] usb 1-1: Manufacturer: syz
[  385.758519][ T1687] usb 1-1: SerialNumber: syz
[  385.787546][ T1687] usb 1-1: config 0 descriptor??
[  385.887546][T14236] loop3: detected capacity change from 0 to 16
[  385.897686][T14236] erofs (device loop3): mounted with root inode @ nid 36.
[  386.639822][ T1687] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  386.639901][ T1687] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  386.640330][ T1687] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  386.640510][ T1687] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  386.650649][ T1687] usb 1-1: USB disconnect, device number 26
[  387.003317][T14254] loop3: detected capacity change from 0 to 16
[  387.034115][T14254] erofs (device loop3): mounted with root inode @ nid 36.
[  387.480366][T14262] loop0: detected capacity change from 0 to 16
[  387.488049][T14262] erofs (device loop0): mounted with root inode @ nid 36.
[  387.496437][T14262] erofs (device loop0): bogus i_mode (4355) @ nid 46
[  387.735862][ T8790] usb 2-1: USB disconnect, device number 25
[  387.840124][T14269] loop3: detected capacity change from 0 to 512
[  387.848368][T14269] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  387.855158][T14269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  387.858455][T14269] EXT4-fs (loop3): orphan cleanup on readonly fs
[  387.876198][T14269] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2961: bg 0: block 361: padding at end of block bitmap is not set
[  387.876246][T14269] loop3: lost filesystem error report for type 5 error -117
[  387.882638][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  387.882653][    C1] EXT4-fs (loop3): initial error at time 1790257927: ext4_validate_block_bitmap:445
[  387.882664][    C1] EXT4-fs (loop3): last error at time 1790257927: ext4_validate_block_bitmap:445
[  387.906152][T14269] EXT4-fs (loop3): Remounting filesystem read-only
[  387.908685][T14269] EXT4-fs (loop3): 1 truncate cleaned up
[  387.909490][T14269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  387.929797][T14269] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.2961: dx entry: limit 0 != root limit 125
[  387.929873][T14269] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2961: Corrupt directory, running e2fsck is recommended
[  387.946253][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  388.253217][T14283] loop3: detected capacity change from 0 to 16
[  388.287106][T14283] erofs (device loop3): mounted with root inode @ nid 36.
[  388.586369][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'.
[  388.623554][T14290] loop0: detected capacity change from 0 to 512
[  388.624458][T14290] EXT4-fs: Ignoring removed nobh option
[  388.633325][T14290] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  388.636517][T14290] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2969: attempt to clear invalid blocks 1 len 1
[  388.636750][T14290] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  388.637459][T14290] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  388.640698][T14290] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2969: invalid indirect mapped block 1819239214 (level 0)
[  388.640724][T14290] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  388.641036][T14290] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2969: invalid indirect mapped block 1819239214 (level 1)
[  388.641058][T14290] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  388.643487][    C0] EXT4-fs (loop0): error count since last fsck: 4
[  388.643499][    C0] EXT4-fs (loop0): initial error at time 1790257927: ext4_clear_blocks:876: inode 13
[  388.643515][    C0] EXT4-fs (loop0): last error at time 1790257927: ext4_free_branches:1023: inode 13
[  388.645869][ T8790] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  388.656015][T14290] EXT4-fs (loop0): 1 truncate cleaned up
[  388.657472][T14290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.661142][T14290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.806102][ T8790] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  388.821888][ T8790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.821939][ T8790] usb 2-1: Product: syz
[  388.822171][ T8790] usb 2-1: Manufacturer: syz
[  388.822182][ T8790] usb 2-1: SerialNumber: syz
[  388.949210][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'.
[  389.055219][ T8790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  389.055302][ T8790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  389.055316][ T8790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  389.068729][ T8790] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  389.216119][T14323] binder: BINDER_SET_CONTEXT_MGR already set
[  389.216181][T14323] binder: 14322:14323 ioctl 4018620d 200000000100 returned -16
[  389.217303][T14323] binder: BINDER_SET_CONTEXT_MGR already set
[  389.217311][T14323] binder: 14322:14323 ioctl 4018620d 200000001000 returned -16
[  390.146937][T14343] binder_alloc: 14342: binder_alloc_buf, no vma
[  390.249382][T14349] loop0: detected capacity change from 0 to 512
[  390.253218][T14349] EXT4-fs: Ignoring removed nobh option
[  390.261247][T14349] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  390.271902][T14349] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2994: attempt to clear invalid blocks 1 len 1
[  390.281360][T14349] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  390.282079][T14349] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  390.282400][    C1] EXT4-fs (loop0): error count since last fsck: 2
[  390.282435][    C1] EXT4-fs (loop0): initial error at time 1790257929: ext4_clear_blocks:876: inode 13
[  390.282520][    C1] EXT4-fs (loop0): last error at time 1790257929: ext4_mb_generate_buddy:1317
[  390.283681][T14349] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2994: invalid indirect mapped block 1819239214 (level 0)
[  390.283702][T14349] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  390.293272][T14349] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2994: invalid indirect mapped block 1819239214 (level 1)
[  390.293311][T14349] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  390.299105][T14349] EXT4-fs (loop0): 1 truncate cleaned up
[  390.300502][T14349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.344851][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.550770][T14358] loop0: detected capacity change from 0 to 256
[  390.701656][T14360] loop0: detected capacity change from 0 to 16
[  390.705933][T14360] erofs (device loop0): mounted with root inode @ nid 36.
[  390.755318][T14362] binder: BINDER_SET_CONTEXT_MGR already set
[  390.760160][T14362] binder: 14361:14362 ioctl 4018620d 200000000100 returned -16
[  390.962443][ T4992] Bluetooth: hci1: command 0x0406 tx timeout
[  391.160078][ T5006] usb 2-1: USB disconnect, device number 26
[  391.384496][T14389] loop3: detected capacity change from 0 to 16
[  391.401854][T14389] erofs (device loop3): mounted with root inode @ nid 36.
[  391.766201][T14396] binder: BINDER_SET_CONTEXT_MGR already set
[  391.766261][T14396] binder: 14395:14396 ioctl 4018620d 200000000100 returned -16
[  391.804224][ T5006] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  391.953535][ T5006] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  391.957446][ T5006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.123107][ T5759] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  392.176051][ T5006] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  392.273507][ T5759] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  392.280651][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.280722][ T5759] usb 1-1: Product: syz
[  392.280763][ T5759] usb 1-1: Manufacturer: syz
[  392.280795][ T5759] usb 1-1: SerialNumber: syz
[  392.400284][T14410] binder: BINDER_SET_CONTEXT_MGR already set
[  392.400428][T14410] binder: 14409:14410 ioctl 4018620d 200000001000 returned -16
[  392.446896][ T1687] usb 2-1: USB disconnect, device number 27
[  392.637086][ T5759] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  392.637180][ T5759] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  392.637240][ T5759] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  392.646514][ T5759] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  392.768759][T14415] loop3: detected capacity change from 0 to 16
[  392.782117][T14415] erofs (device loop3): mounted with root inode @ nid 36.
[  393.448139][T14423] loop3: detected capacity change from 0 to 16
[  393.458229][T14423] erofs (device loop3): mounted with root inode @ nid 36.
[  393.533574][T14428] binder: BINDER_SET_CONTEXT_MGR already set
[  393.535817][T14428] binder: 14427:14428 ioctl 4018620d 200000001000 returned -16
[  393.575434][T14430] Process accounting resumed
[  393.743463][T14441] loop3: detected capacity change from 0 to 64
[  393.817789][T14441] syz.3.3033: attempt to access beyond end of device
[  393.817789][T14441] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  393.827103][T14441] Buffer I/O error on dev loop3, logical block 512, async page read
[  393.827282][T14441] syz.3.3033: attempt to access beyond end of device
[  393.827282][T14441] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  393.827314][T14441] Buffer I/O error on dev loop3, logical block 56576, async page read
[  393.948876][T14447] binder: BINDER_SET_CONTEXT_MGR already set
[  393.961125][T14445] Process accounting resumed
[  393.972864][T14447] binder: 14446:14447 ioctl 4018620d 200000001000 returned -16
[  394.052479][T14450] loop3: detected capacity change from 0 to 128
[  394.097358][T14452] loop1: detected capacity change from 0 to 512
[  394.106691][T14452] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  394.120377][T14452] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  394.133629][T14452] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3038: bg 0: block 248: padding at end of block bitmap is not set
[  394.138945][T14452] loop1: lost filesystem error report for type 5 error -117
[  394.139466][T14452] Quota error (device loop1): write_blk: dquota write failed
[  394.144452][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  394.144462][    C1] EXT4-fs (loop1): last error at time 1790257933: ext4_validate_block_bitmap:445
[  394.154353][T14452] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  394.154423][T14452] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3038: Failed to acquire dquot type 1
[  394.154451][T14452] loop1: lost filesystem error report for type 5 error -28
[  394.167761][T14452] EXT4-fs (loop1): 1 truncate cleaned up
[  394.174628][T14452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  394.255421][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  395.220393][T10992] usb 1-1: USB disconnect, device number 27
[  395.297127][T14464] loop3: detected capacity change from 0 to 4096
[  395.298060][T14464] ntfs3: Unknown parameter '0x0000000000000000'
[  395.310244][T14472] binder: BINDER_SET_CONTEXT_MGR already set
[  395.350672][T14472] binder: 14471:14472 ioctl 4018620d 200000000100 returned -16
[  395.361931][T14472] binder: BINDER_SET_CONTEXT_MGR already set
[  395.364785][T14472] binder: 14471:14472 ioctl 4018620d 200000001000 returned -16
[  395.574045][T14487] loop1: detected capacity change from 0 to 4096
[  395.578950][T14487] ntfs3: Unknown parameter '0x0000000000000000'
[  395.592433][T14491] loop0: detected capacity change from 0 to 256
[  396.082455][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  396.082558][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  396.436101][T14496] loop0: detected capacity change from 0 to 4096
[  396.436699][T14496] ntfs3: Unknown parameter '0x0000000000000000'
[  396.955816][T14524] loop0: detected capacity change from 0 to 1024
[  396.959021][T14524] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  396.988962][   T27] nvmet: connect request for invalid subsystem te!
[  397.003419][T14521] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te"
[  397.012154][T14524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.237034][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.439517][T14558] loop3: detected capacity change from 0 to 1024
[  397.440602][T14558] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  397.458773][T14558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.469304][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.633525][T14560] loop1: detected capacity change from 0 to 32768
[  397.655898][T14560] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  397.866467][T14560] XFS (loop1): Ending clean mount
[  397.905459][T10868] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  398.595382][T14602] loop0: detected capacity change from 0 to 4096
[  398.596694][T14602] ntfs3: Unknown parameter '0x0000000000000000'
[  398.718785][T14601] loop3: detected capacity change from 0 to 32768
[  398.768137][T14601] lmLogInit: exit(-22)
[  398.768198][T14601] lmLogOpen: exit(-22)
[  400.188416][T14611] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  400.986405][T14630] ieee802154 phy0 wpan0: encryption failed: -22
[  401.626924][T14655] loop3: detected capacity change from 0 to 32768
[  401.641559][T14655] 
[  401.641559][T14655]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  401.641559][T14655] 
[  401.646531][T10992] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  401.672081][T14655] ERROR: (device loop3): diWrite: ixpxd invalid
[  401.672081][T14655] 
[  401.681181][T14655] ERROR: (device loop3): txCommit: 
[  401.681181][T14655] 
[  401.709893][T10910] 
[  401.709893][T10910]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  401.709893][T10910] 
[  401.718376][T10910] 
[  401.718376][T10910]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  401.718376][T10910] 
[  401.802486][T10992] usb 2-1: Using ep0 maxpacket: 32
[  401.805055][T10992] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  401.811881][T10992] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  401.811919][T10992] usb 2-1: config 0 has no interface number 0
[  401.820244][T10992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.820282][T10992] usb 2-1: Product: syz
[  401.820328][T10992] usb 2-1: Manufacturer: syz
[  401.820359][T10992] usb 2-1: SerialNumber: syz
[  401.830964][T10992] usb 2-1: config 0 descriptor??
[  402.240436][T10992] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  402.244946][T10992] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  402.324201][T14661] loop0: detected capacity change from 0 to 8192
[  402.455141][T10992] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  402.459560][T10992] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  402.464710][T10992] usb 2-1: USB disconnect, device number 28
[  403.267381][T14670] loop1: detected capacity change from 0 to 32768
[  403.278086][T14670] 
[  403.278086][T14670]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  403.278086][T14670] 
[  403.305396][T14670] ERROR: (device loop1): diWrite: ixpxd invalid
[  403.305396][T14670] 
[  403.305717][T14670] ERROR: (device loop1): txCommit: 
[  403.305717][T14670] 
[  403.345958][T10868] 
[  403.345958][T10868]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  403.345958][T10868] 
[  403.352469][T10868] 
[  403.352469][T10868]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  403.352469][T10868] 
[  403.562002][T14678] loop1: detected capacity change from 0 to 1024
[  403.566235][T14678] EXT4-fs: Ignoring removed bh option
[  403.573161][T14678] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  403.599272][T14678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.638184][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.024615][T14691] loop1: detected capacity change from 0 to 32768
[  404.048783][T14691] 
[  404.048783][T14691]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.048783][T14691] 
[  404.063540][T14691] ERROR: (device loop1): diWrite: ixpxd invalid
[  404.063540][T14691] 
[  404.063786][T14691] ERROR: (device loop1): txCommit: 
[  404.063786][T14691] 
[  404.084492][T10868] 
[  404.084492][T10868]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.084492][T10868] 
[  404.084706][T10868] 
[  404.084706][T10868]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.084706][T10868] 
[  404.345926][T14695] loop1: detected capacity change from 0 to 164
[  404.771768][T14697] loop0: detected capacity change from 0 to 16
[  404.776156][T14697] erofs (device loop0): mounted with root inode @ nid 36.
[  404.780325][T14697] erofs (device loop0): bogus i_mode (4355) @ nid 46
[  405.152131][T14708] loop1: detected capacity change from 0 to 4096
[  405.166418][T14708] ntfs3: Unknown parameter '0x0000000000000000'
[  405.919383][T14723] loop3: detected capacity change from 0 to 16
[  405.955992][T14725] loop1: detected capacity change from 0 to 16
[  406.080641][T14725] erofs (device loop1): mounted with root inode @ nid 36.
[  406.087951][T14724] erofs (device loop1): bogus i_mode (4355) @ nid 46
[  406.091230][T14723] erofs (device loop3): mounted with root inode @ nid 36.
[  406.095121][T14723] erofs (device loop3): bogus i_mode (4355) @ nid 46
[  406.382146][T14731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3153 (14731)
[  406.388997][T14731] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  406.393021][T14731] BTRFS info (device loop0): using crc32c checksum algorithm
[  406.430140][T14731] BTRFS info (device loop0): enabling ssd optimizations
[  406.434841][T14731] BTRFS info (device loop0): turning on flush-on-commit
[  406.437026][T14731] BTRFS info (device loop0): enabling free space tree
[  406.439518][T14731] BTRFS info (device loop0): enabling auto defrag
[  406.441725][T14731] BTRFS info (device loop0): use lzo compression, level 1
[  406.444231][T14731] BTRFS info (device loop0): max_inline set to 4096
[  406.461416][T10700] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  408.215329][T14778] set_capacity_and_notify: 1 callbacks suppressed
[  408.215387][T14778] loop0: detected capacity change from 0 to 4096
[  408.233155][T14778] ntfs3(loop0): Failed to load $Extend (-22).
[  408.235316][T14778] ntfs3(loop0): Failed to initialize $Extend.
[  408.766811][T14810] loop3: detected capacity change from 0 to 4096
[  408.767797][T14810] ntfs3: Unknown parameter '0x0000000000000000'
[  409.517477][T14834] loop0: detected capacity change from 0 to 4096
[  409.546090][T14834] ntfs3(loop0): Failed to load $Extend (-22).
[  409.548675][T14834] ntfs3(loop0): Failed to initialize $Extend.
[  409.550744][T14839] loop1: detected capacity change from 0 to 128
[  409.605889][T14839] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  409.605974][T14839] hpfs: filesystem error: improperly stopped
[  409.606016][T14839] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  409.606057][T14839] hpfs: You really don't want any checks? You are crazy...
[  409.606080][T14839] hpfs: Code page index out of array
[  409.606101][T14839] hpfs: code page support is disabled
[  409.606564][T14839] hpfs: hpfs_map_4sectors(): unaligned read
[  409.606800][T14839] hpfs: hpfs_map_4sectors(): unaligned read
[  409.606826][T14839] hpfs: filesystem error: unable to find root dir
[  409.638312][T14834] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  409.652096][T14834] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  409.663346][T14834] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  409.669349][T14834] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  409.675549][T14834] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  409.678311][T14834] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  409.690240][T14834] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  409.695108][T14834] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  409.785425][T14842] loop3: detected capacity change from 0 to 16384
[  409.809904][T14847] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  409.855224][T14846] loop0: detected capacity change from 0 to 4096
[  409.865083][T14846] ntfs3(loop0): Failed to load $Extend (-22).
[  409.867272][T14846] ntfs3(loop0): Failed to initialize $Extend.
[  409.955390][T14855] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  409.980891][T14857] loop3: detected capacity change from 0 to 128
[  409.988560][T14857] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  409.996386][T14857] hpfs: filesystem error: improperly stopped
[  409.998584][T14857] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  410.001551][T14857] hpfs: You really don't want any checks? You are crazy...
[  410.005333][T14857] hpfs: Code page index out of array
[  410.005381][T14857] hpfs: code page support is disabled
[  410.005532][T14857] hpfs: hpfs_map_4sectors(): unaligned read
[  410.005604][T14857] hpfs: hpfs_map_4sectors(): unaligned read
[  410.005632][T14857] hpfs: filesystem error: unable to find root dir
[  410.096695][T14859] loop0: detected capacity change from 0 to 4096
[  410.132544][T14859] ntfs3(loop0): Failed to load $Extend (-22).
[  410.132598][T14859] ntfs3(loop0): Failed to initialize $Extend.
[  410.166037][T14859] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  410.167007][T14859] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  410.167021][T14859] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  410.167741][T14859] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  410.167830][T14859] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  410.167918][T14859] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  410.169100][T14859] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  410.169197][T14859] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  410.318915][T14873] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[  410.482214][T14882] loop3: detected capacity change from 0 to 4096
[  410.515701][T14882] ntfs3(loop3): Failed to load $Extend (-22).
[  410.518334][T14882] ntfs3(loop3): Failed to initialize $Extend.
[  410.544602][T14882] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  410.549934][T14882] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  410.552523][T14882] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  410.556249][T14882] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  410.559016][T14882] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  410.561768][T14882] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  410.563392][T14886] loop0: detected capacity change from 0 to 1024
[  410.575971][T14882] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  410.578491][T14882] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  411.183795][T14920] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  411.183875][T14920] hpfs: filesystem error: improperly stopped
[  411.183882][T14920] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  411.183888][T14920] hpfs: You really don't want any checks? You are crazy...
[  411.183894][T14920] hpfs: Code page index out of array
[  411.183897][T14920] hpfs: code page support is disabled
[  411.184559][T14920] hpfs: hpfs_map_4sectors(): unaligned read
[  411.184595][T14920] hpfs: hpfs_map_4sectors(): unaligned read
[  411.184599][T14920] hpfs: filesystem error: unable to find root dir
[  411.423612][T14934] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  411.952897][ T8790] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  412.126418][ T8790] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  412.127548][ T8790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.416403][ T8790] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  412.565686][T14960] ntfs3(loop1): Failed to load $Extend (-22).
[  412.565726][T14960] ntfs3(loop1): Failed to initialize $Extend.
[  412.572879][ T5759] usb 1-1: USB disconnect, device number 28
[  412.660681][T14966] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  412.668600][T14966] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002]
[  412.672194][T14966] EXT4-fs (loop1): orphan cleanup on readonly fs
[  412.676783][T14966] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.3254: Allocating blocks 41-42 which overlap fs metadata
[  412.682954][T14966] loop1: lost filesystem error report for type 5 error -117
[  412.683326][T14966] Quota error (device loop1): write_blk: dquota write failed
[  412.689386][T14966] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  412.692649][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  412.692659][    C1] EXT4-fs (loop1): initial error at time 1790257951: ext4_mb_mark_diskspace_used:4223
[  412.692668][    C1] EXT4-fs (loop1): last error at time 1790257951: ext4_mb_mark_diskspace_used:4223
[  412.702071][T14966] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3254: Failed to acquire dquot type 0
[  412.706008][T14966] loop1: lost filesystem error report for type 5 error -117
[  412.709204][T14966] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  412.715041][T14966] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.3254: corrupted inode contents
[  412.720764][T14966] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  412.721171][T14966] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #12: comm syz.1.3254: mark_inode_dirty error
[  412.723231][T14966] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  412.723659][T14966] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.3254: corrupted inode contents
[  412.723681][T14966] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  412.723917][T14966] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.3254: mark_inode_dirty error
[  412.723932][T14966] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  412.724205][T14966] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.3254: corrupted inode contents
[  412.724223][T14966] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  412.724606][T14966] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem
[  412.724622][T14966] loop1: lost filesystem error report for type 5 error -117
[  412.724892][T14966] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.3254: corrupted inode contents
[  412.724910][T14966] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  412.725115][T14966] EXT4-fs error (device loop1): ext4_truncate:4721: inode #12: comm syz.1.3254: mark_inode_dirty error
[  412.725133][T14966] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  412.725566][T14966] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[  412.725588][T14966] loop1: lost filesystem error report for type 5 error -117
[  412.726018][T14966] EXT4-fs (loop1): 1 truncate cleaned up
[  412.729312][T14966] EXT4-fs (loop1): pa ffff888167994910: logic 1, phys. 41, len 23
[  412.729332][T14966] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23
[  412.741759][T14966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  412.748523][T14966] EXT4-fs: Cannot specify journal on remount
[  412.775940][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.724147][T15003] set_capacity_and_notify: 5 callbacks suppressed
[  413.729585][T15003] loop3: detected capacity change from 0 to 16384
[  414.063302][T15050] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  414.201026][T15052] netlink: 'syz.1.3260': attribute type 7 has an invalid length.
[  414.201100][T15052] netlink: 'syz.1.3260': attribute type 8 has an invalid length.
[  414.539459][T15060] loop1: detected capacity change from 0 to 16
[  414.557565][T15060] erofs (device loop1): mounted with root inode @ nid 36.
[  414.561050][T15060] erofs (device loop1): bogus i_mode (4355) @ nid 46
[  416.017175][T15130] loop0: detected capacity change from 0 to 16
[  416.033273][T15130] erofs (device loop0): mounted with root inode @ nid 36.
[  417.017402][T15178] loop3: detected capacity change from 0 to 128
[  417.061080][T15178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  417.061206][T15178] System zones: 1-3, 19-19, 35-36
[  417.094255][T15178] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  417.101241][T15178] ext4 filesystem being mounted at /550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  417.151111][T10910] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  417.155066][T15190] overlayfs: failed to resolve './bus': -2
[  417.592442][   T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  417.679737][T15228] syz.3.3296 uses obsolete (PF_INET,SOCK_PACKET)
[  417.744494][   T25] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  417.745855][   T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.745877][   T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  417.745904][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.775922][   T25] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  417.984136][T15233] loop3: detected capacity change from 0 to 4096
[  417.987793][T15233] ntfs3: Unknown parameter '0x0000000000000000'
[  419.686064][   T25] usb 1-1: USB disconnect, device number 29
[  419.695283][   T25] idmouse 1-1:1.0: disconnected
[  420.331464][T15291] loop3: detected capacity change from 0 to 736
[  420.335018][T15291] iso9660: Unexpected value for 'norock'
[  420.695252][T15306] kAFS: unable to lookup cell '/,cL'
[  421.647350][T15326] netlink: 'syz.0.3333': attribute type 11 has an invalid length.
[  421.701271][T15324] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  421.701332][T15324] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode
[  421.819623][T15335] befs: (nbd1): No write support. Marking filesystem read-only
[  422.153116][T15358] loop3: detected capacity change from 0 to 512
[  422.169226][T15358] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.3345: bg 0: block 5: invalid block bitmap
[  422.169286][T15358] loop3: lost filesystem error report for type 5 error -117
[  422.172726][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  422.172737][    C1] EXT4-fs (loop3): initial error at time 1790257961: ext4_validate_block_bitmap:436
[  422.172747][    C1] EXT4-fs (loop3): last error at time 1790257961: ext4_validate_block_bitmap:436
[  422.178167][T15358] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  422.178179][T15358] loop3: lost filesystem error report for type 5 error -117
[  422.181533][T15358] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3345: invalid indirect mapped block 3 (level 2)
[  422.181550][T15358] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  422.181776][T15358] EXT4-fs (loop3): 1 orphan inode deleted
[  422.181785][T15358] EXT4-fs (loop3): 1 truncate cleaned up
[  422.183241][T15358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.437754][T15367] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  422.437810][T15367] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  422.813103][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3350'.
[  422.885300][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.956474][T15405] loop3: detected capacity change from 0 to 8
[  423.967383][T15405] SQUASHFS error: zlib decompression failed, data probably corrupt
[  423.986940][T15405] SQUASHFS error: Failed to read block 0x9b: -5
[  423.987072][T15405] SQUASHFS error: Unable to read metadata cache entry [99]
[  423.987099][T15405] SQUASHFS error: Unable to read inode 0x127
[  425.265546][T15442] block2mtd: illegal erase size
[  426.428189][T15473] syz_tun: entered allmulticast mode
[  426.435828][T15473] pimreg: entered allmulticast mode
[  427.507215][T15506] loop3: detected capacity change from 0 to 4096
[  427.507864][T15506] ntfs3: Unknown parameter '0x0000000000000000'
[  428.395151][ T1687] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  428.457100][T15511] ceph: No mds server is up or the cluster is laggy
[  428.459635][T15518] ceph: No mds server is up or the cluster is laggy
[  428.562778][ T1687] usb 2-1: Using ep0 maxpacket: 16
[  428.565675][ T1687] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  428.570776][ T1687] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  428.570812][ T1687] usb 2-1: config 0 has no interface number 0
[  428.570854][ T1687] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  428.570883][ T1687] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  428.584608][ T1687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.584647][ T1687] usb 2-1: Product: syz
[  428.584677][ T1687] usb 2-1: Manufacturer: syz
[  428.584701][ T1687] usb 2-1: SerialNumber: syz
[  428.595987][ T1687] usb 2-1: config 0 descriptor??
[  428.598982][T15529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  428.599160][T15529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  428.832865][T15529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  428.833032][T15529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  429.051699][ T1687] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  429.220569][T15549] netlink: 'syz.0.3402': attribute type 11 has an invalid length.
[  429.308197][T15555] input input16: cannot allocate more than FF_MAX_EFFECTS effects
[  429.998045][ T1687] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  429.998189][ T1687] asix 2-1:0.34: probe with driver asix failed with error -71
[  430.015244][ T1687] usb 2-1: USB disconnect, device number 29
[  430.288593][T15588] netlink: 'syz.0.3411': attribute type 11 has an invalid length.
[  430.587486][   T33] audit: type=1326 audit(1790257969.723:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15597 comm="syz.3.3415" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f494599e159 code=0x0
[  430.711655][T15606] loop1: detected capacity change from 0 to 1024
[  430.715731][T15606] hfsplus: failed to load catalog file
[  430.773885][T15610] netlink: 'syz.1.3419': attribute type 11 has an invalid length.
[  430.814987][T15610] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[  430.818288][T15610] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode
[  431.003751][ T8790] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  431.143350][T15622] loop1: detected capacity change from 0 to 2048
[  431.168999][T15622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.174372][T15622] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.179048][ T8790] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  431.189804][ T8790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.210194][   T33] audit: type=1800 audit(1790257970.343:114): pid=15622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3425" name="file0" dev="loop1" ino=13 res=0 errno=0
[  431.595749][ T8790] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  431.689853][ T8790] usb 4-1: USB disconnect, device number 13
[  431.951812][T15622] fs-verity (loop1, inode 13): Error -4 building Merkle tree
[  431.966013][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.800662][T15659] loop3: detected capacity change from 0 to 32768
[  432.859762][T15659] JBD2: Ignoring recovery information on journal
[  432.913769][T15659] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  433.084181][T10910] ocfs2: Unmounting device (7,3) on (node local)
[  433.114955][T15683] loop0: detected capacity change from 0 to 512
[  433.120117][T15683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  433.139243][T15683] EXT4-fs (loop0): 1 truncate cleaned up
[  433.140786][T15683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.221620][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.300470][T15686] loop1: detected capacity change from 0 to 1024
[  433.306632][T15686] hfsplus: failed to load catalog file
[  433.562509][   T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  433.720196][   T25] usb 2-1: unable to get BOS descriptor or descriptor too short
[  433.720284][   T25] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  433.721875][   T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7
[  433.725680][   T25] usb 2-1: string descriptor 0 read error: -22
[  433.725772][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.764822][   T25] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  433.990463][   T25] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  433.996319][   T25] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  434.100097][   T25] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  434.124061][   T25] usb 2-1: USB disconnect, device number 30
[  435.655606][T15765] vlan2: entered allmulticast mode
[  435.655683][T15765] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  435.792097][T15771] loop1: detected capacity change from 0 to 2048
[  435.820930][T15771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.821085][T15771] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  435.838859][T15782] loop3: detected capacity change from 0 to 512
[  435.840388][T15782] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  435.848738][T15782] EXT4-fs (loop3): 1 truncate cleaned up
[  435.867013][T15782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.897647][   T33] audit: type=1800 audit(1790257975.033:115): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3490" name="file0" dev="loop1" ino=13 res=0 errno=0
[  436.149691][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.565306][T15771] fs-verity (loop1, inode 13): Error -4 building Merkle tree
[  436.585223][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.522718][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  437.672406][    T9] usb 1-1: Using ep0 maxpacket: 16
[  437.673386][    T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  437.674564][    T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  437.674576][    T9] usb 1-1: config 0 has no interface number 0
[  437.674592][    T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  437.674603][    T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  437.676465][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.676475][    T9] usb 1-1: Product: syz
[  437.676481][    T9] usb 1-1: Manufacturer: syz
[  437.676486][    T9] usb 1-1: SerialNumber: syz
[  437.682256][    T9] usb 1-1: config 0 descriptor??
[  437.683246][T15816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  437.683409][T15816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  437.943733][T15816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  437.947636][T15816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  438.159000][    T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  438.175401][T15852] loop3: detected capacity change from 0 to 2048
[  438.211583][T15852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.211700][T15852] ext4 filesystem being mounted at /630/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  438.229147][T15852] EXT4-fs (loop3): shut down requested (0)
[  438.297303][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.443117][T15866] loop1: detected capacity change from 0 to 256
[  438.520535][T15869] loop1: detected capacity change from 0 to 512
[  438.536454][T15869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  438.560965][T15869] System zones: 1-12
[  438.633268][T15869] EXT4-fs (loop1): orphan cleanup on readonly fs
[  438.682987][T15869] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.3525: missing EA_INODE flag
[  438.697896][T15869] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  438.702870][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  438.702906][    C0] EXT4-fs (loop1): initial error at time 1790257977: ext4_xattr_inode_iget:437: inode 12
[  438.702971][    C0] EXT4-fs (loop1): last error at time 1790257977: ext4_xattr_inode_iget:437: inode 12
[  438.752756][T15869] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3525: error while reading EA inode 12 err=-117
[  438.752864][T15869] loop1: lost filesystem error report for type 5 error -117
[  438.757839][T15869] EXT4-fs (loop1): 1 orphan inode deleted
[  438.759035][T15869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  438.797771][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.823745][    T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  438.823795][    T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  438.845036][    T9] asix 1-1:0.34: probe with driver asix failed with error -71
[  438.860207][    T9] usb 1-1: USB disconnect, device number 30
[  439.492677][   T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  439.602650][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  439.643788][   T25] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  439.647012][   T25] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  439.647035][   T25] usb 2-1: Product: syz
[  439.647045][   T25] usb 2-1: SerialNumber: syz
[  439.649242][   T25] usb 2-1: config 0 descriptor??
[  439.754988][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  439.758272][    T9] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  439.763885][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  439.768442][    T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  439.772424][    T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  439.777065][    T9] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  439.777099][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  439.777117][    T9] usb 1-1: config 1 interface 1 has no altsetting 0
[  439.797318][    T9] usb 1-1: string descriptor 0 read error: -22
[  439.797465][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.858381][   T25] hso 2-1:0.0: Failed to find BULK eps
[  440.011002][    T9] usb 1-1: 2:0: failed to get current value for ch 0 (-32)
[  440.058306][T10992] usb 2-1: USB disconnect, device number 31
[  440.084333][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  440.087048][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  440.198322][T15894] loop3: detected capacity change from 0 to 2048
[  440.218025][    T9] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  440.218099][    T9] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  440.218154][    T9] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  440.257305][T15894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.257429][T15894] ext4 filesystem being mounted at /634/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.263686][    T9] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  440.270717][    T9] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  440.275657][    T9] usb 1-1: USB disconnect, device number 31
[  440.280351][T11340] udevd[11340]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory
[  440.283889][T11340] udevd[11340]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[  440.289203][T15894] EXT4-fs (loop3): shut down requested (0)
[  440.358675][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.641453][T15907] loop1: detected capacity change from 0 to 512
[  440.647648][T15907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  440.803740][T15907] EXT4-fs (loop1): 1 truncate cleaned up
[  440.903185][T15907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.957167][T15912] FAULT_INJECTION: forcing a failure.
[  440.957167][T15912] name failslab, interval 1, probability 0, space 0, times 0
[  440.957227][T15912] CPU: 0 UID: 0 PID: 15912 Comm: syz.0.3541 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.957254][T15912] Tainted: [L]=SOFTLOCKUP
[  440.957258][T15912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  440.957264][T15912] Call Trace:
[  440.957268][T15912]  <TASK>
[  440.957273][T15912]  dump_stack_lvl+0xe8/0x150
[  440.957298][T15912]  should_fail_ex+0x410/0x560
[  440.957325][T15912]  should_failslab+0xa8/0x100
[  440.957343][T15912]  ? ceph_msg_new2+0x3b/0x4d0
[  440.957362][T15912]  kmem_cache_alloc_noprof+0xa1/0x600
[  440.957384][T15912]  ? rcu_is_watching+0x16/0xb0
[  440.957400][T15912]  ? ceph_msg_new2+0x3b/0x4d0
[  440.957417][T15912]  ceph_msg_new2+0x3b/0x4d0
[  440.957430][T15912]  ? __kmalloc_node_noprof+0x2f0/0x720
[  440.957450][T15912]  msgpool_alloc+0x80/0x210
[  440.957465][T15912]  ? __pfx_msgpool_alloc+0x10/0x10
[  440.957508][T15912]  mempool_init_node+0x1f4/0x510
[  440.957535][T15912]  ? __pfx_msgpool_alloc+0x10/0x10
[  440.957548][T15912]  mempool_create_node_noprof+0xb8/0x150
[  440.957563][T15912]  ? __pfx_msgpool_free+0x10/0x10
[  440.957573][T15912]  ceph_msgpool_init+0xb3/0x1c0
[  440.957584][T15912]  ceph_osdc_init+0x55b/0x900
[  440.957595][T15912]  ceph_create_client+0x246/0x310
[  440.957609][T15912]  ceph_get_tree+0x1ca/0x1a40
[  440.957623][T15912]  ? apparmor_capable+0x126/0x170
[  440.957638][T15912]  vfs_get_tree+0x92/0x2a0
[  440.957652][T15912]  vfs_cmd_create+0xa2/0x200
[  440.957662][T15912]  __se_sys_fsconfig+0x6b9/0x810
[  440.957673][T15912]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  440.957680][T15912]  ? ksys_write+0x242/0x270
[  440.957692][T15912]  ? rcu_is_watching+0x16/0xb0
[  440.957703][T15912]  ? __x64_sys_fsconfig+0x20/0xc0
[  440.957712][T15912]  do_syscall_64+0x166/0x520
[  440.957724][T15912]  ? trace_irq_disable+0x3b/0x140
[  440.957731][T15912]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.957742][T15912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.957750][T15912] RIP: 0033:0x7f18eb19e159
[  440.957760][T15912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.957766][T15912] RSP: 002b:00007f18ebfa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  440.957776][T15912] RAX: ffffffffffffffda RBX: 00007f18eb425fa0 RCX: 00007f18eb19e159
[  440.957783][T15912] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  440.957787][T15912] RBP: 00007f18eb23506b R08: 0000000000000000 R09: 0000000000000000
[  440.957792][T15912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  440.957797][T15912] R13: 00007f18eb426038 R14: 00007f18eb425fa0 R15: 00007fff6c6a1518
[  440.957809][T15912]  </TASK>
[  441.247566][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.578636][T15924] null_blk: nullb1: using native zone append
[  441.822025][T15937] loop0: detected capacity change from 0 to 512
[  441.833230][T15937] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  441.856688][T15937] EXT4-fs (loop0): 1 truncate cleaned up
[  441.859416][T15937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.057716][T15924] null_blk: disk nullb1 created
[  442.219834][T15945] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.253266][T15945] bridge_slave_0 (unregistering): left allmulticast mode
[  442.253325][T15945] bridge_slave_0 (unregistering): left promiscuous mode
[  442.256362][T15945] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.318019][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.489533][T15956] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3557'.
[  442.564289][T15960] loop3: detected capacity change from 0 to 512
[  442.565430][T15960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  442.569165][T15960] EXT4-fs (loop3): 1 truncate cleaned up
[  442.570029][T15960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.743582][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  442.778300][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.893517][    T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  442.896788][    T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  442.896810][    T9] usb 2-1: Product: syz
[  442.896819][    T9] usb 2-1: SerialNumber: syz
[  442.901428][    T9] usb 2-1: config 0 descriptor??
[  443.146091][    T9] hso 2-1:0.0: Failed to find BULK eps
[  443.338895][T10992] usb 2-1: USB disconnect, device number 32
[  443.570193][T15988] loop3: detected capacity change from 0 to 512
[  443.573715][T15988] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  443.589559][T15988] EXT4-fs (loop3): 1 truncate cleaned up
[  443.592267][T15988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.998207][T10910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.379829][T16012] mmap: syz.0.3574 (16012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  444.595053][T10992] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  444.669996][T16031] loop0: detected capacity change from 0 to 512
[  444.674053][T16031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  444.676846][T16031] EXT4-fs (loop0): 1 truncate cleaned up
[  444.677580][T16031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.743575][T10992] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  444.746056][T10992] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  444.746068][T10992] usb 2-1: Product: syz
[  444.746074][T10992] usb 2-1: SerialNumber: syz
[  444.749366][T10992] usb 2-1: config 0 descriptor??
[  444.943818][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.995407][T10992] hso 2-1:0.0: Failed to find BULK eps
[  445.172765][T16039] xt_CT: No such helper "netbios-ns"
[  445.189965][T10992] usb 2-1: USB disconnect, device number 33
[  445.352284][T16048] loop0: detected capacity change from 0 to 512
[  445.365342][T16048] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  445.438129][T16048] EXT4-fs (loop0): 1 truncate cleaned up
[  445.447888][T16048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.681162][T10700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.886703][T16065] loop1: detected capacity change from 0 to 512
[  446.890328][T16065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  446.899665][T16065] EXT4-fs (loop1): 1 truncate cleaned up
[  446.900433][T16065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.185473][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.435478][T16092] serial 00:03: in use; can't configure
[  447.494886][T16095] loop3: detected capacity change from 0 to 256
[  447.536150][T16097] loop1: detected capacity change from 0 to 512
[  447.548168][T16097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  447.561129][T16097] EXT4-fs (loop1): 1 truncate cleaned up
[  447.561928][T16097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.671171][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.709584][T16115] serial 00:03: in use; can't configure
[  448.745159][T16118] loop1: detected capacity change from 0 to 512
[  448.749562][T16118] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  448.757951][T16118] EXT4-fs (loop1): 1 truncate cleaned up
[  448.758788][T16118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.796735][T10868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.986237][T16128] printk: console [ttyS0] disabled

syzkaller

VM DIAGNOSIS:
14:07:45  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff816cf6dc RBX=0000000000000000 RCX=ffffffff8ea8ef80 RDX=8000000001000001
RSI=0000000001000001 RDI=ffffffff93977280 RBP=0000000000000000 RSP=ffffc90000007fc0
R8 =ffffffff93977287 R9 =1ffffffff272ee50 R10=dffffc0000000000 R11=fffffbfff272ee51
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff816cf6dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d6da000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f49467e8ff8 CR3=00000001aefe0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=00007f4945bf25e8 00007f4945bf2618 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f4945bf25d0 00007f4945bf2610
XMM06=00007f4945bf25f8 00007f4945bf25c8 XMM07=00007f4945bf2600 00007f4945bf25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000ed5d02b0 RBX=00000000002ab994 RCX=0000000000000004 RDX=0000000000000361
RSI=ffffffff8c6d9360 RDI=ffffffff8c6d9320 RBP=0000000000000001 RSP=ffffc900063e76f8
R8 =ffff88823c624713 R9 =1ffff110478c48e2 R10=dffffc0000000000 R11=ffffffff8be256c0
R12=fffffffffffffffe R13=dffffc0000000000 R14=00000361ed43df2e R15=000000000019231b
RIP=ffffffff8be25735 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f160631b6c0 ffffffff 00c00000
GS =0000 ffff8882a8cda000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=0000000113ab4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f18ebf5d560
XMM02=00007f18eb3f25e8 00007f18eb3f2618 XMM03=00007f18eb3f2600 00007f18eb3f25e0
XMM04=00007f18ebf5d020 00007f18eb3f25c0 XMM05=00007f18eb3f25d0 00007f18eb3f2610
XMM06=00007f18eb3f25f8 00007f18eb3f25c8 XMM07=00007f18eb3f2600 00007f18eb3f25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
