last executing test programs:

1m53.780896061s ago: executing program 1 (id=328):
keyctl$set_reqkey_keyring(0xe, 0x1)

1m53.661050977s ago: executing program 1 (id=329):
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000e80)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c000201fcb0000904000001020d0000052406000105240000000d240f01fdfffefffdff08000006241a0000380905810340000000000904010000020d0000090401eb"], 0x0)

1m52.348701579s ago: executing program 1 (id=339):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x24, @string={0x24, 0x3, "e31fc931e97c780a6e2290bdfc9663d8dc0f623d271ccaa3bbae0cde1d0c0b8e4bd3"}}, 0x0, 0x0, 0x0}, 0x0)

1m50.486006392s ago: executing program 1 (id=366):
lseek(0xffffffffffffffff, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0)
pipe(&(0x7f00000002c0))
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

1m50.316366522s ago: executing program 1 (id=368):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23}, 0x94)

1m49.959867653s ago: executing program 1 (id=373):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401})

1m49.750604228s ago: executing program 32 (id=373):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401})

1m36.289095712s ago: executing program 0 (id=505):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)

1m36.288998381s ago: executing program 0 (id=506):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)

1m36.156117234s ago: executing program 0 (id=507):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000001940)={[{@lastblock={'lastblock', 0x3d, 0x1}}, {@mode}, {@session}, {@dmode={'dmode', 0x3d, 0x5}}, {@nostrict}, {@uid}, {@shortad}, {@uid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uid_ignore}]}, 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5P/DnnSOtJe8vv8xuNs4f52JgA9l6s4tkedcq3oAcKyILxmtWVi4WChpbsjusNJIluXhDCSoklJC2uOQilzVsAr2rr1oIDbhX2xIColelF8VtN2Z7NwmkLb2Iypl5RxppbUtd25K8+/kY+3vmzHNm3jOrR3PO7DlzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI+Po3Tg8Np/0eBQCwl85Nvjk04v0fAD5RLtj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgZymK+G6kePcHrTTdvt0xcLbRvHZ9anzi3osNpkhRiaJdX/4dGD4+cuKVV0+OdvPByz9qX4g3Ji+crp1ZmF9cml1enp2pTTUblxZmZnf9CA+7/HbH2i9Abf7tazOXLy/Xjr88suXu69W7h54+Uj01enTkrW7t1PjExGRPTV//R372D0mP7qH4GHkqivhmpHjvpQ9SPSIq8fC9sMPvjsdtMPrK/muvxNT4RHtF5hr15kp5Z6rkqr6Ias9CY90e2YNefChjEavlf6dywMfK1ZtcrC/VL87N1s7Xl1YaK42FZqp0RluuTzUqMZoiFiOiVez34Dlo+qOIE5Hi7q9b6WJEFN0+ePHc5JtDIzs/QN8eDPI+T1stItbiCehZOKAORRF/Hil+OD0Ul3Jftdvm/YivlPlaxNUyb6e4kW+n8hfEaMSvvJ/AE60vivhFpFhIrTTT7f32duXZb9Veb15e6Kntblc+8fsHe8m2CQfYQBRxsb3F30of/cMuAAAAAAAAAAAAAGBvFPHTSHFr/oW0GL3nlDaaV2oX6hfnOkcFd4/9r+Wl1tfX16upk7WcQznHcp7POZ1zMedqzhs5b+a8lfN2zrWcd3K2ckYlP3/OWs6hnGM5z+eczrmYczXnjZw3c97KeTvnWs47OVs5w3lPAAAAAAAAAAAAAAAAAAAAPGKDUcREpLj57h+0rysd7evSf/rU6Lnx53qvGf+5HR6nrH05In4au7smb3++1niqlH8e/XoBOxuIIr6Tr//3R/s9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ECoRBHfjRQ/+k0rrZYzxiKmc94p9nt0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBpIBVxJlL8xzcG2rfXIuKLEfHb9fJPxH+vb7ffIwYAAAAAAAAAAAAAAAAAAICPoVTE1Ujx4/daqRoR16t3Dz19pHpq9OjIW0UUkcqS3vo3Ji+crp1ZmF9cml1enp2pTTUblxZmZnf7dANnG81r16fGJx7Lyuxo8DGPf3DgzMLiO0uNK7+/cs/7Dw+cvri8slS/dO+7YzD6IoZ65xxrD3hqfKI96LlGvdleNFXuM8C+iNpuVwYAAAAAAAAAAAAAAAAAAIAD43AqYjxSPP+zE6l73nhf55z/T3VuFRu1P/nDze8CmNuWXb3fH7Cb6bTbgR5rn3hfmxqfmJjsmd3X/+HSckwpFfHZSHH0bz/fPh8+xeF7nhtf1v1JpBj9nxO5rnq0rBvbUjVwbGp8onZuofnS6bm5hUv1lfrFudna5GL90q6/OAAAAAAAAAAAAAAAAAAAAAAe4HAq4k8jxYnX11L3uvP5/P++zq2e8/9fi+hedn4gbc0N7XP7/3/73P7O9KdPjb5+/Pn7zX8c5/+XY0qpiN9Gimf+4vPt6+l3z/8f2lZb1v04Uvzie1/KdZWnyrrh7up0HvFyY252qKx9MVJ8/3y3Ntq1r+baz2zWDpe1fxcpnv29rbUnc+1zm7XHy9q7kWLi3L1rP7tZO1LWDkaKr/5xrVt7uKz9eq49sln78qWFuZndvrx8MpX9/y+R4svD30zdn/n79n/P93+sbssNH+r5B08/qv6v9sxbzX29nvt/eIf+vxop/uzGl3Jdp/eO5/ufaf+72f/fjxS/86mtta/k2mc3a4d3u1qwn8r+/4dIsXbnnzZ+5nP/587a7NDe/v9i39bsbhfsV/8/0zOvmsc18n98LeCTZvmdb79dn5ubXTJhwoSJjYn9/s0EPG7l9v9/RoqvXS1Sdz82b///v86tzf3///rO5vb/qW25YZ+2/5/tmXcq77X090UMrMwv9n8uYmD5nW+/1JivX5m9MtscGRk9+bsnho+fHO5/qrtzvzm169cOnnRl/78dKX7yV/+48Tn21v3/e3/+d3hbbtin/v9M7zpt2a/Z9UsBnzhl//9lpPjnmx9s/P+mB33+1/2c74Xnt+Zgt2if+v+5nnm1/M9oz7wXiojTu30uAAAAAAAAAAB4QhxORfwsUvx16+83rnm/9fif+HK3tvf4v/s5CNf/BwAerHz/n4wUPz/81dT9DpndHP8/sy037NPxv0d65s3s0XnNu36RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgI0pRxKFI8e4PWulOUd7uGDjbaF67PjU+ce/FBlOkqETRri//DgwfHznxyqsnR7v54OUftS/EG5MXTtfOLMwvLs0uL8/O1KaajUsLM7O7foSHXX67Y+0XoDb/9rWZy5eXa8dfHtly9/Xq3UNPH6meGj068la3dmp8YmKyp6av/yM/+4ekR/dQfIw8FUX8PFK899IH6V+LiEo8fC/s8LvjcRuMvrL/2isxNT7RXpG5Rr25Ut6ZKrmqL6Las9BYt0f2oBcfyljEakRUygEfK1dvcrG+VL84N1s7X19aaaw0Fpqp0hltuT7VqMRoiliMiFax34PnoOmPIv4mUtz9dSv9WxFRdPvgxXOTbw6N7PwAfXswyPs8bbWIWIsnoGfhgDoURTwXKX44PRT/XnT6qt0270d8pczXIq6WeTvFjXw7lb8gRiN+5f0Enmh9UcT5SLGQWun9Ivd+e7vy7LdqrzcvL/TUdrcrn/j9g71k24QDbCCK+GV7i7+Vfun9HAAAAAAAAAAAAAAOuCK+Filuzb+Q2ueHbpxT2mheqV2oX5zrHNbfPfa/lpdaX19fr6ZO1nIO5RzLeT7ndM7FnKs5b+S8mfNWzts513LeydnKGZX8/DlrOYdyjuU8n3M652LO1Zw3ct7MeSvn7ZxrOe/kbOUMx0kDAAAAAAAAAAAAAAAAAPCYVKKI70WKH/2mldaLzvVlp6OTd5znCh9r/xsAAP//uW9HhQ==")

1m35.917257127s ago: executing program 0 (id=510):
syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e11, &(0x7f000000bc40)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x10000000000400, 0x0, 0x0, 0x8, 0x7, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200000000000010", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

1m35.508855658s ago: executing program 0 (id=514):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4)

1m34.557480783s ago: executing program 0 (id=520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x18, 0x3d, 0x107, 0x20, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004004}, 0x0)

1m34.334665653s ago: executing program 33 (id=520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x18, 0x3d, 0x107, 0x20, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004004}, 0x0)

1m12.239249066s ago: executing program 3 (id=760):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)

1m12.164036868s ago: executing program 3 (id=762):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unshare(0x2c020400)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m12.094543737s ago: executing program 3 (id=765):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000008f0000007600000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)

1m12.026376646s ago: executing program 3 (id=766):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)

1m11.963125924s ago: executing program 3 (id=768):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), 0x4)

1m11.724551431s ago: executing program 3 (id=777):
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x8}}}}}}, 0x0)

1m11.630502126s ago: executing program 34 (id=777):
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x8}}}}}}, 0x0)

1.57866384s ago: executing program 5 (id=1533):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

1.578248876s ago: executing program 4 (id=1534):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8848}, 0x80)

1.367628562s ago: executing program 4 (id=1536):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
accept4(r0, 0x0, 0x0, 0x800)

1.363892112s ago: executing program 4 (id=1538):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6a0, &(0x7f0000000d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0x220}, {0x1000, 0x40}]}, 0x14, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)

1.126090023s ago: executing program 4 (id=1539):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfe00000}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x18, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xe5e3}})
io_uring_enter(r1, 0xef3, 0x40db, 0x5, 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)

881.960006ms ago: executing program 5 (id=1542):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'})

498.621662ms ago: executing program 5 (id=1546):
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180)=0x8, 0x4)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000340)=""/83, 0x53, 0x0)

498.054119ms ago: executing program 2 (id=1547):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f00000003c0)={0x28, 0x0, 0x2710, @host}, 0x10)

497.864234ms ago: executing program 5 (id=1548):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000240)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0})

429.819718ms ago: executing program 2 (id=1549):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)

429.552642ms ago: executing program 5 (id=1550):
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")

360.141083ms ago: executing program 2 (id=1551):
r0 = syz_open_procfs(0x0, &(0x7f0000001440)='loginuid\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001dc0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001d40)="d8", 0x1, r0}, 0x68)

359.903497ms ago: executing program 2 (id=1552):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588", 0x41}], 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e00"], 0x44}}, 0x0)

279.549849ms ago: executing program 2 (id=1553):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="0800b699f75b000200fc00ffffffdf009a27012f27000000", 0x18)

216.829405ms ago: executing program 5 (id=1554):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000002c)
fcntl$setsig(r0, 0xa, 0x21)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)

159.435108ms ago: executing program 4 (id=1555):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000100)="23830014", 0x4)

88.697593ms ago: executing program 2 (id=1556):
socket$inet(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffd}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac1e010100000000010000000600dd00e0000001e00000010a01010064aa7333612218654ba3050101e164010100ffffffff"], 0x28)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}})
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

0s ago: executing program 4 (id=1557):
socket(0x10, 0x3, 0x0)
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001e00), 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x0, {0x3, 0x37, 0x3000000000, 0x100, 0x5}})
truncate(&(0x7f0000000000)='./file1\x00', 0x800088c)

kernel console output (not intermixed with test programs):

oop2): ext4_dirty_inode:6538: inode #16: comm syz.2.611: mark_inode_dirty error
[  127.609808][ T7582] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.611: corrupted inode contents
[  127.614651][ T7582] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.611: mark_inode_dirty error
[  127.621003][ T7582] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.611: corrupted inode contents
[  127.631908][ T7582] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.611: mark_inode_dirty error
[  127.637940][ T7582] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.611: corrupted inode contents
[  127.662614][ T7582] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.611: mark_inode_dirty error
[  127.665085][ T7604] loop4: detected capacity change from 0 to 512
[  127.674424][ T7604] EXT4-fs: Ignoring removed nobh option
[  127.679650][ T7582] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem
[  127.715072][ T7604] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.618: iget: bad i_size value: 38620345925642
[  127.730636][ T7604] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.618: couldn't read orphan inode 15 (err -117)
[  127.731785][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.737311][ T7604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.747722][  T723] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  127.753710][  T723] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u10:3: Failed to release dquot type 1
[  127.832867][  T723] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u10:3: bg 0: block 5: invalid block bitmap
[  127.850377][  T723] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28
[  127.857895][  T723] EXT4-fs (loop4): This should not happen!! Data will be lost
[  127.857895][  T723] 
[  127.863799][  T723] EXT4-fs (loop4): Total free blocks count 0
[  127.866135][  T723] EXT4-fs (loop4): Free/Dirty block details
[  127.868670][  T723] EXT4-fs (loop4): free_blocks=0
[  127.870740][  T723] EXT4-fs (loop4): dirty_blocks=5
[  127.872759][  T723] EXT4-fs (loop4): Block reservation details
[  127.875134][  T723] EXT4-fs (loop4): i_reserved_data_blocks=5
[  127.886732][ T7282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.048691][ T5922] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  128.057628][ T7625] netlink: 'syz.3.628': attribute type 9 has an invalid length.
[  128.063483][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'.
[  128.077532][ T5895] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.081191][ T7625] netlink: 'syz.3.628': attribute type 9 has an invalid length.
[  128.083805][ T5895] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.086706][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'.
[  128.090901][ T5895] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.093991][ T5895] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.127000][ T7627] netlink: 51 bytes leftover after parsing attributes in process `syz.3.629'.
[  128.221309][ T5922] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  128.229977][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.233357][ T5922] usb 3-1: config 0 has no interface number 0
[  128.235506][ T5922] usb 3-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.244713][ T5922] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  128.247782][ T7623] loop4: detected capacity change from 0 to 32768
[  128.253464][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.256262][ T5922] usb 3-1: Product: syz
[  128.258250][ T7623] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.626 (7623)
[  128.259328][ T5922] usb 3-1: Manufacturer: syz
[  128.271683][ T5922] usb 3-1: SerialNumber: syz
[  128.279171][ T7623] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.282334][ T7623] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  128.286309][ T5922] usb 3-1: config 0 descriptor??
[  128.296996][ T5922] asix 3-1:0.251: probe with driver asix failed with error -22
[  128.382339][ T7623] BTRFS info (device loop4): enabling ssd optimizations
[  128.384714][ T7623] BTRFS info (device loop4): enabling free space tree
[  128.426209][ T7623] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  128.570736][   T24] usb 3-1: USB disconnect, device number 11
[  128.607296][ T7282] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.425189][ T7684] loop2: detected capacity change from 0 to 32768
[  129.427764][ T7684] btrfs: Deprecated parameter 'usebackuproot'
[  129.429798][ T7684] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  129.432718][ T7684] btrfs: Deprecated parameter 'usebackuproot'
[  129.434604][ T7684] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  129.452675][ T7684] BTRFS info: device /dev/loop2 (7:2) using temp-fsid f15e65c9-f137-4f1b-9471-10f61c541fdd
[  129.456835][ T7684] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.645 (7684)
[  129.681869][ T7668] [U] ^C
[  129.713663][ T7684] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.716780][ T7684] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  129.719482][ T7684] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  129.733491][ T7684] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  129.773456][ T7684] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  129.787943][ T7684] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  129.806653][ T7684] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  129.813572][ T7684] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  129.818362][ T7684] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[  129.859075][ T7684] BTRFS info (device loop2): rebuilding free space tree
[  129.868782][ T7684] BTRFS info (device loop2): setting nodatasum
[  129.870815][ T7684] BTRFS info (device loop2): enabling ssd optimizations
[  129.873070][ T7684] BTRFS info (device loop2): enabling free space tree
[  129.875223][ T7684] BTRFS info (device loop2): force clearing of disk cache
[  129.877460][ T7684] BTRFS info (device loop2): doing ref verification
[  129.879765][ T7684] BTRFS info (device loop2): trying to use backup root at mount time
[  130.029840][ T7684] BTRFS info (device loop2): balance: start -slimit=1..1
[  130.032770][ T7684] BTRFS info (device loop2): unable to make block group 1048576 ro
[  130.036030][ T7684] BTRFS info (device loop2): space_info SYSTEM (sub-group id 0) has 4190208 free, is not full
[  130.040285][ T7684] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=0 zone_unusable=0
[  130.044372][ T7684] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792
[  130.047185][ T7684] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[  130.049613][ T7684] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[  130.052015][ T7684] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[  130.054636][ T7684] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0
[  130.057059][ T7684] BTRFS info (device loop2): 1 enospc errors during balance
[  130.059626][ T7684] BTRFS info (device loop2): balance: ended with status: -28
[  130.196042][ T7713] netlink: 116 bytes leftover after parsing attributes in process `syz.3.650'.
[  131.120132][ T7726] overlayfs: failed to get inode (-116)
[  131.123092][ T7726] overlayfs: failed to get inode (-116)
[  131.312625][ T7728] loop3: detected capacity change from 0 to 512
[  131.337537][ T5857] BTRFS info (device loop2): last unmount of filesystem f15e65c9-f137-4f1b-9471-10f61c541fdd
[  131.376148][ T7728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.403565][ T7728] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.523688][ T6893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.564311][ T7741] netlink: 19 bytes leftover after parsing attributes in process `syz.2.660'.
[  131.683557][ T7749] futex_wake_op: syz.4.664 tries to shift op by -1; fix this program
[  131.703918][ T7746] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  131.925099][ T7753] loop4: detected capacity change from 0 to 32768
[  132.086756][ T7755] loop3: detected capacity change from 0 to 32768
[  132.136388][ T7768] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  132.192534][ T7755] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.207458][ T7768] bond1: entered promiscuous mode
[  132.211190][ T7768] bond1: entered allmulticast mode
[  132.213602][ T7768] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.281090][ T7755] XFS (loop3): Ending clean mount
[  132.292580][ T7755] XFS (loop3): Quotacheck needed: Please wait.
[  132.682533][ T7755] XFS (loop3): Quotacheck: Done.
[  132.682587][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.688065][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.705409][ T7780] loop2: detected capacity change from 0 to 512
[  132.745522][ T7780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.760688][ T7780] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  132.778182][ T6893] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.778601][ T7780] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.674: lblock 23 mapped to illegal pblock 18 (length 1)
[  132.788269][ T7780] EXT4-fs (loop2): Remounting filesystem read-only
[  132.811897][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.124326][ T7801] capability: warning: `syz.3.683' uses 32-bit capabilities (legacy support in use)
[  133.249832][ T5909] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  133.420475][ T5909] usb 5-1: config 0 has an invalid interface number: 168 but max is 0
[  133.423825][ T5909] usb 5-1: config 0 has no interface number 0
[  133.426378][ T5909] usb 5-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  133.431482][ T5909] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  133.436079][ T5909] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  133.440981][ T5909] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  133.444715][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.458772][ T5909] usb 5-1: config 0 descriptor??
[  133.462057][ T7794] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  133.672082][ T5909] usb 5-1: string descriptor 0 read error: -71
[  133.675026][ T5909] keyspan 5-1:0.168: Keyspan 2 port adapter converter detected
[  133.677596][ T5909] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 1
[  133.681520][ T5909] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 84
[  133.684004][ T5909] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 2
[  133.687294][ T5909] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  133.692242][ T5909] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 88
[  133.695200][ T5909] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 6
[  133.699924][ T5909] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  133.706084][ T5909] usb 5-1: USB disconnect, device number 2
[  133.717171][ T5909] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  133.723318][ T5909] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  133.726774][ T5909] keyspan 5-1:0.168: device disconnected
[  134.237536][ T7833] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  134.240675][ T5922] IPVS: starting estimator thread 0...
[  134.349019][ T7835] IPVS: using max 61 ests per chain, 146400 per kthread
[  134.499551][ T7827] loop3: detected capacity change from 0 to 32768
[  134.659438][ T7855] loop2: detected capacity change from 0 to 2048
[  134.682126][ T7855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.686475][ T7855] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.714543][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.771954][ T7859] IPVS: Unknown mcast interface: vcan0
[  135.594111][ T7897] loop3: detected capacity change from 0 to 32768
[  135.634459][ T7897] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.741865][ T7897] XFS (loop3): Ending clean mount
[  135.750851][ T7897] XFS (loop3): Quotacheck needed: Please wait.
[  135.813343][ T7897] XFS (loop3): Quotacheck: Done.
[  135.872453][ T6893] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  136.086550][ T7937] netlink: 'syz.3.727': attribute type 2 has an invalid length.
[  136.094500][ T7937] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.727'.
[  136.098406][ T7937] nbd: must specify a device to reconfigure
[  136.172446][ T7922] loop4: detected capacity change from 0 to 32768
[  136.198999][ T7922] BTRFS info: device /dev/loop4 (7:4) using temp-fsid fd07199d-33de-46ea-8808-efc85173a8da
[  136.202611][ T7922] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.723 (7922)
[  136.251255][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'.
[  136.271799][ T7922] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.287686][ T7922] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  136.361665][ T7922] BTRFS info (device loop4): rebuilding free space tree
[  136.397602][ T7922] BTRFS info (device loop4): setting nodatasum
[  136.403775][ T7922] BTRFS info (device loop4): setting nodatacow
[  136.411268][ T7922] BTRFS info (device loop4): turning off barriers
[  136.417315][ T7922] BTRFS info (device loop4): enabling free space tree
[  136.424139][ T7922] BTRFS info (device loop4): force clearing of disk cache
[  136.538302][ T7964] loop3: detected capacity change from 0 to 1024
[  136.567257][ T7964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.579544][ T7282] BTRFS info (device loop4): last unmount of filesystem fd07199d-33de-46ea-8808-efc85173a8da
[  136.672256][ T6893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.737595][ T7971] GUP no longer grows the stack in syz.3.735 (7971): 200000004000-20000000a000 (200000002000)
[  136.742354][ T7971] CPU: 0 UID: 0 PID: 7971 Comm: syz.3.735 Not tainted syzkaller #0 PREEMPT(full) 
[  136.742376][ T7971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.742386][ T7971] Call Trace:
[  136.742392][ T7971]  <TASK>
[  136.742399][ T7971]  dump_stack_lvl+0x189/0x250
[  136.742420][ T7971]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.742439][ T7971]  ? __pfx__printk+0x10/0x10
[  136.742458][ T7971]  ? find_vma+0xe7/0x160
[  136.742485][ T7971]  __get_user_pages+0x24d0/0x2ce0
[  136.742522][ T7971]  ? mtree_load+0x100/0x700
[  136.742542][ T7971]  get_user_pages_remote+0x2f1/0xad0
[  136.742556][ T7971]  ? __pfx_mtree_load+0x10/0x10
[  136.742575][ T7971]  ? __pfx_get_user_pages_remote+0x10/0x10
[  136.742644][ T7971]  ? __access_remote_vm+0x367/0x7d0
[  136.742664][ T7971]  __access_remote_vm+0x211/0x7d0
[  136.742691][ T7971]  ? __pfx___access_remote_vm+0x10/0x10
[  136.742714][ T7971]  ? alloc_pages_noprof+0xbe/0x190
[  136.742744][ T7971]  proc_pid_cmdline_read+0x430/0x810
[  136.742765][ T7971]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  136.742782][ T7971]  ? rw_verify_area+0x2a6/0x4d0
[  136.742806][ T7971]  vfs_readv+0x5aa/0x850
[  136.742821][ T7971]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  136.742834][ T7971]  ? __pfx_vfs_readv+0x10/0x10
[  136.742856][ T7971]  ? __fget_files+0x2a/0x420
[  136.742873][ T7971]  ? __fget_files+0x3a0/0x420
[  136.742884][ T7971]  ? __fget_files+0x2a/0x420
[  136.742905][ T7971]  __x64_sys_preadv+0x197/0x2a0
[  136.742923][ T7971]  ? __pfx___x64_sys_preadv+0x10/0x10
[  136.742938][ T7971]  ? rcu_is_watching+0x15/0xb0
[  136.742957][ T7971]  ? do_syscall_64+0xbe/0x3b0
[  136.742976][ T7971]  do_syscall_64+0xfa/0x3b0
[  136.742990][ T7971]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.743004][ T7971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.743013][ T7971]  ? exc_page_fault+0x9f/0xf0
[  136.743025][ T7971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.743039][ T7971] RIP: 0033:0x7fb9e458eba9
[  136.743053][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.743066][ T7971] RSP: 002b:00007fb9e5435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  136.743082][ T7971] RAX: ffffffffffffffda RBX: 00007fb9e47d5fa0 RCX: 00007fb9e458eba9
[  136.743093][ T7971] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  136.743102][ T7971] RBP: 00007fb9e4611e19 R08: 0000000000000000 R09: 0000000000000000
[  136.743111][ T7971] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  136.743119][ T7971] R13: 00007fb9e47d6038 R14: 00007fb9e47d5fa0 R15: 00007ffeab7c0f18
[  136.743135][ T7971]  </TASK>
[  137.180873][ T7981] loop2: detected capacity change from 0 to 32768
[  137.184483][ T7981] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 1, max 64)
[  137.184483][ T7981] members_v2 (size 152):
[  137.184483][ T7981] Device:                        0
[  137.184483][ T7981]   Label:                       (none)
[  137.184483][ T7981]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  137.184483][ T7981]   Size:                        131072
[  137.184483][ T7981]   read errors:                 0
[  137.184483][ T7981]   write errors:                0
[  137.184483][ T7981]   checksum errors:             0
[  137.184483][ T7981]   seqread iops:                0
[  137.184483][ T7981]   seqwrite iops:               0
[  137.184483][ T7981]   randread iops:               0
[  137.184483][ T7981]   randwrite iops:              0
[  137.184483][ T7981]   Bucket size:                 131072
[  137.184483][ T7981]   First bucket:                0
[  137.184483][ T7981]   Buckets:                     1
[  137.184483][ T7981]   Last mount:                  1714681267
[  137.184483][ T7981]   Last superblock write:       42
[  137.184483][ T7981]   State:                       rw
[  137.184483][ T7981]   Data allowed:                journal,btree,user
[  137.184483][ T7981]   Has data:                    btree,user
[  137.184483][ T7981]   Btree allocated bitmap blocksize:256
[  137.184483][ T7981]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  137.184483][ T7981]   Durability:
[  137.184605][ T7981] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  137.487053][ T7986] loop2: detected capacity change from 0 to 32768
[  137.495299][ T7986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.742 (7986)
[  137.516081][ T7986] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.526154][ T7986] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  137.572363][ T7986] BTRFS info (device loop2): rebuilding free space tree
[  137.600953][ T7986] BTRFS info (device loop2): enabling ssd optimizations
[  137.605689][ T7986] BTRFS info (device loop2): using spread ssd allocation scheme
[  137.611481][ T7986] BTRFS info (device loop2): enabling free space tree
[  137.617053][ T7986] BTRFS info (device loop2): force clearing of disk cache
[  137.657047][ T7986] BTRFS error: failed to open device for path m(}5rqOE9V\w_aMxޮ{?^S=IKj+Lm!#l)'9'&vqa2	v\cM4|<R/mesyafb.}BK竧媨9_A	,"ա7G:ig'&{%z7E9Obg=fo]웶*ݸ[tiy1:5-`UvtgqcȄ@H3ɨbRp(
[  137.657047][ T7986] +`D̃bu3uucoAV2]Mn?QkjO28%+F3$WĎ1#{Yҙ|NBt}`iO4E+j5}P>s2c_Pym`1zv	}oJ? with flags 0x1: -2
[  137.691577][ T5857] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.471485][ T8013] loop2: detected capacity change from 0 to 32768
[  138.503318][ T8013] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.543351][ T8013] XFS (loop2): Ending clean mount
[  138.547094][ T8013] XFS (loop2): Quotacheck needed: Please wait.
[  138.581275][ T8013] XFS (loop2): Quotacheck: Done.
[  138.603378][ T5857] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.724187][ T8040] loop4: detected capacity change from 0 to 2048
[  138.731891][ T8040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.872747][ T8044] loop2: detected capacity change from 0 to 64
[  138.889080][ T8044] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  138.927005][ T5238] Bluetooth: hci0: command tx timeout
[  138.962825][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.758'.
[  139.093103][ T8057] loop4: detected capacity change from 0 to 8
[  139.129287][ T8057] SQUASHFS error: xz decompression failed, data probably corrupt
[  139.132275][ T8057] SQUASHFS error: Failed to read block 0x108: -5
[  139.134500][ T8057] SQUASHFS error: Unable to read metadata cache entry [106]
[  139.144960][ T8057] SQUASHFS error: Unable to read inode 0x11f
[  139.306517][ T8070] Bluetooth: MGMT ver 1.23
[  139.334765][ T8072] afs: Bad value for 'source'
[  139.497020][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.501764][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.560414][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.566357][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.601967][ T8085] loop2: detected capacity change from 0 to 164
[  139.613906][ T8085] Unable to read rock-ridge attributes
[  139.634540][ T8085] Unable to read rock-ridge attributes
[  139.643897][ T8085] iso9660: Corrupted directory entry in block 4 of inode 1792
[  139.680470][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.684564][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.688645][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  139.788403][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.793912][ T8087] loop2: detected capacity change from 0 to 1024
[  139.797809][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.827947][ T8087] hfsplus: hfsplus: Invalid key length: 29235
[  139.839823][    T9] usb 5-1: Using ep0 maxpacket: 8
[  139.851452][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.856267][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  139.864544][    T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  139.867987][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.877477][    T9] usb 5-1: Product: syz
[  139.880390][    T9] usb 5-1: Manufacturer: syz
[  139.883075][    T9] usb 5-1: SerialNumber: syz
[  139.886979][    T9] usb 5-1: config 0 descriptor??
[  139.907318][    T9] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[  139.996716][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  140.003425][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  140.007001][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  140.011462][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  140.015740][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  140.065986][   T13] bridge_slave_1: left allmulticast mode
[  140.067908][   T13] bridge_slave_1: left promiscuous mode
[  140.070839][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.075718][   T13] bridge_slave_0: left allmulticast mode
[  140.077957][   T13] bridge_slave_0: left promiscuous mode
[  140.080643][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.114178][    T9] snd_usb_toneport 5-1:0.0: cannot get proper max packet size
[  140.117771][    T9] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[  140.122673][    T9] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  140.311001][   T13] dvmrp0 (unregistering): left allmulticast mode
[  140.326781][ T5922] usb 5-1: USB disconnect, device number 3
[  140.532063][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.536876][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.540927][   T13] bond0 (unregistering): Released all slaves
[  140.548011][ T8093] syz_tun: entered allmulticast mode
[  140.560670][ T8092] syz_tun: left allmulticast mode
[  140.925473][ T8108] loop4: detected capacity change from 0 to 128
[  140.952265][ T8108] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.968664][ T8108] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  141.003685][ T8090] chnl_net:caif_netlink_parms(): no params data found
[  141.017244][ T7282] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.106628][   T13] hsr_slave_0: left promiscuous mode
[  141.113805][   T13] hsr_slave_1: left promiscuous mode
[  141.116060][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.126840][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.131501][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.133834][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.166339][ T8101] loop2: detected capacity change from 0 to 40427
[  141.169475][ T8101] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  141.171937][ T8101] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  141.174504][   T13] veth1_macvtap: left promiscuous mode
[  141.176718][   T13] veth0_macvtap: left promiscuous mode
[  141.180294][   T13] veth1_vlan: left promiscuous mode
[  141.183130][   T13] veth0_vlan: left promiscuous mode
[  141.250232][ T8101] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  141.256804][ T8101] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  141.266635][ T8101] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.623717][ T8124] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[  141.629088][   T13] team0 (unregistering): Port device team_slave_1 removed
[  141.667681][   T13] team0 (unregistering): Port device team_slave_0 removed
[  142.038698][ T5238] Bluetooth: hci2: command tx timeout
[  142.062913][ T8140] xt_limit: Overflow, try lower: 271964/0
[  142.336105][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.339028][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.342505][ T8090] bridge_slave_0: entered allmulticast mode
[  142.345620][ T8090] bridge_slave_0: entered promiscuous mode
[  142.352011][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.354608][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.356968][ T8090] bridge_slave_1: entered allmulticast mode
[  142.360838][ T8090] bridge_slave_1: entered promiscuous mode
[  142.442321][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.447890][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.551794][ T8090] team0: Port device team_slave_0 added
[  142.559582][ T8090] team0: Port device team_slave_1 added
[  142.661312][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.663536][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.673792][ T8090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.678180][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.683521][ T8163] loop4: detected capacity change from 0 to 164
[  142.687616][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.701997][ T8090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.710219][ T8163] Unable to read rock-ridge attributes
[  142.725286][ T8163] Unable to read rock-ridge attributes
[  142.727340][ T8163] iso9660: Corrupted directory entry in block 4 of inode 1792
[  142.728037][ T8149] loop2: detected capacity change from 0 to 32768
[  142.765057][ T8149] jfs_mount: Failed to read AGGREGATE_I
[  142.767730][ T8149] Mount JFS Failure: -5
[  142.770384][ T8149] jfs_mount failed w/return code = -5
[  142.774932][   T33] audit: type=1326 audit(1757604341.510:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.4.805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ad8eba9 code=0x7ffc0000
[  142.790890][   T33] audit: type=1326 audit(1757604341.510:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.4.805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ad8eba9 code=0x7ffc0000
[  142.805301][   T33] audit: type=1326 audit(1757604341.510:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.4.805" exe="/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fa14ad8eba9 code=0x7ffc0000
[  142.822630][   T33] audit: type=1326 audit(1757604341.510:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.4.805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ad8eba9 code=0x7ffc0000
[  142.829603][ T8090] hsr_slave_0: entered promiscuous mode
[  142.840616][ T8090] hsr_slave_1: entered promiscuous mode
[  142.843389][ T8090] debugfs: 'hsr0' already exists in 'hsr'
[  142.844149][   T33] audit: type=1326 audit(1757604341.510:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.4.805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ad8eba9 code=0x7ffc0000
[  142.845572][ T8090] Cannot create hsr debugfs directory
[  143.194600][ T8090] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  143.211246][ T8090] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  143.216662][ T8090] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  143.227314][ T8090] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  143.274702][ T8184] loop2: detected capacity change from 0 to 128
[  143.301912][ T8184] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.308694][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.311148][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.315701][ T8184] ext4 filesystem being mounted at /295/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  143.334508][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.377461][ T5857] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.453181][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.474169][ T8090] 8021q: adding VLAN 0 to HW filter on device team0
[  143.494406][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.497250][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.517380][ T8194] loop2: detected capacity change from 0 to 4096
[  143.527695][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.530624][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.535642][ T8194] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  143.577890][ T8194] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  143.583302][ T8194] ntfs3(loop2): ino=19, mi_enum_attr
[  143.599501][ T8194] ntfs3(loop2): failed to convert "c46c" to cp860
[  143.608172][ T8194] ntfs3(loop2): ino=20, mi_enum_attr
[  143.764406][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.902977][ T8090] veth0_vlan: entered promiscuous mode
[  143.911479][ T8090] veth1_vlan: entered promiscuous mode
[  143.918342][ T8209] loop4: detected capacity change from 0 to 40427
[  143.926754][ T8209] F2FS-fs (loop4): invalid crc value
[  143.931419][ T8090] veth0_macvtap: entered promiscuous mode
[  143.935777][ T8090] veth1_macvtap: entered promiscuous mode
[  143.948986][ T5922] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  143.949726][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.960336][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.969137][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.974665][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.977699][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.981228][ T8209] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  143.986316][ T8209] F2FS-fs (loop4): Start checkpoint disabled!
[  143.992753][ T8209] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  143.997281][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.062267][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.065668][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.076030][ T1090] kworker/u10:4: attempt to access beyond end of device
[  144.076030][ T1090] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  144.084291][ T1090] CPU: 1 UID: 0 PID: 1090 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  144.084304][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.084329][ T1090] Workqueue: writeback wb_workfn (flush-7:4)
[  144.084345][ T1090] Call Trace:
[  144.084350][ T1090]  <TASK>
[  144.084355][ T1090]  dump_stack_lvl+0x189/0x250
[  144.084368][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.084378][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  144.084387][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.084399][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.084416][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  144.084433][ T1090]  f2fs_write_end_io+0x886/0xb60
[  144.084451][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  144.084465][ T1090]  __submit_merged_write_cond+0x255/0x530
[  144.084480][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  144.084506][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.084521][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  144.084548][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  144.084559][ T1090]  ? look_up_lock_class+0x74/0x170
[  144.084572][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  144.084584][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  144.084598][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  144.084616][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.084624][ T1090]  do_writepages+0x32e/0x550
[  144.084640][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  144.084652][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  144.084676][ T1090]  __writeback_single_inode+0x145/0xff0
[  144.084692][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  144.084714][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  144.084752][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  144.084805][ T1090]  ? rcu_is_watching+0x15/0xb0
[  144.084823][ T1090]  wb_writeback+0x43b/0xaf0
[  144.084838][ T1090]  ? queue_io+0x341/0x590
[  144.084849][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  144.084863][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.084878][ T1090]  wb_workfn+0x409/0xef0
[  144.084915][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  144.084928][ T1090]  ? __lock_acquire+0xab9/0xd20
[  144.084946][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  144.084958][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.084968][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  144.084975][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  144.084984][ T1090]  process_scheduled_works+0xae1/0x17b0
[  144.085007][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  144.085025][ T1090]  worker_thread+0x8a0/0xda0
[  144.085048][ T1090]  kthread+0x711/0x8a0
[  144.085064][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  144.085072][ T1090]  ? __pfx_kthread+0x10/0x10
[  144.085082][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.085093][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.085100][ T1090]  ? __pfx_kthread+0x10/0x10
[  144.085110][ T1090]  ret_from_fork+0x3fc/0x770
[  144.085124][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  144.085143][ T1090]  ? __switch_to_asm+0x39/0x70
[  144.085158][ T1090]  ? __switch_to_asm+0x33/0x70
[  144.085175][ T1090]  ? __pfx_kthread+0x10/0x10
[  144.085192][ T1090]  ret_from_fork_asm+0x1a/0x30
[  144.085224][ T1090]  </TASK>
[  144.095141][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.097471][ T1090] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  144.098063][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.118677][ T5238] Bluetooth: hci2: command tx timeout
[  144.121795][ T5922] usb 3-1: Using ep0 maxpacket: 8
[  144.125301][ T5922] usb 3-1: config 0 has an invalid interface number: 186 but max is 0
[  144.236642][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.241639][ T5922] usb 3-1: config 0 has no interface number 0
[  144.249222][ T5922] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  144.253394][ T5922] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  144.270374][ T5922] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  144.273838][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.276939][ T5922] usb 3-1: Product: syz
[  144.278661][ T5922] usb 3-1: Manufacturer: syz
[  144.280448][ T5922] usb 3-1: SerialNumber: syz
[  144.304381][ T5922] usb 3-1: config 0 descriptor??
[  144.311371][ T5922] iowarrior 3-1:0.186: no interrupt-in endpoint found
[  144.451602][ T8224] netlink: 'syz.5.815': attribute type 4 has an invalid length.
[  144.513113][ T5922] usb 3-1: USB disconnect, device number 12
[  144.725421][ T8237] loop5: detected capacity change from 0 to 4096
[  144.733101][ T8237] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  144.746750][ T8237] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  144.751218][ T8237] ntfs3(loop5): Failed to load $MFT (-2).
[  144.975715][ T8247] sctp: [Deprecated]: syz.5.824 (pid 8247) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.975715][ T8247] Use struct sctp_sack_info instead
[  145.427825][ T8256] loop4: detected capacity change from 0 to 4096
[  145.447689][ T8257] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.631933][ T8260] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0
[  145.709363][ T8264] netlink: 'syz.4.831': attribute type 1 has an invalid length.
[  146.199514][ T5238] Bluetooth: hci2: command tx timeout
[  146.389604][  T793] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  146.532343][ T8289] loop2: detected capacity change from 0 to 16
[  146.547068][ T8289] erofs (device loop2): mounted with root inode @ nid 36.
[  146.573083][  T793] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  146.580808][  T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.585313][  T793] usb 5-1: config 0 has no interface number 0
[  146.588278][  T793] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  146.617415][  T793] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  146.627432][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.636792][  T793] usb 5-1: Product: syz
[  146.640900][  T793] usb 5-1: Manufacturer: syz
[  146.643174][  T793] usb 5-1: SerialNumber: syz
[  146.660431][  T793] usb 5-1: config 0 descriptor??
[  146.668133][ T8283] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  146.676537][ T8283] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  146.763951][  T793] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  146.915408][  T793] usb 5-1: USB disconnect, device number 4
[  147.428694][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  147.578659][ T5894] usb 6-1: Using ep0 maxpacket: 32
[  147.598888][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  147.602478][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  147.610338][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  147.614293][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  147.620059][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.632099][ T5894] usb 6-1: config 0 descriptor??
[  147.639051][ T8300] loop2: detected capacity change from 0 to 4096
[  147.643966][ T8294] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  147.657800][ T5894] hub 6-1:0.0: USB hub found
[  147.690380][ T8300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.737112][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.862781][ T5894] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  147.880418][ T5894] usbhid 6-1:0.0: can't add hid device: -71
[  147.882922][ T5894] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  147.910902][ T5894] usb 6-1: USB disconnect, device number 2
[  148.236873][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'.
[  148.281446][ T5238] Bluetooth: hci2: command tx timeout
[  148.361836][ T8325] loop4: detected capacity change from 0 to 4096
[  148.365667][ T8325] nilfs2: Bad value for 'cp'
[  148.741001][ T8345] raw_sendmsg: syz.4.864 forgot to set AF_INET. Fix it!
[  149.464710][ T8372] loop4: detected capacity change from 0 to 8
[  150.247236][ T8385] loop2: detected capacity change from 0 to 40427
[  150.261115][ T8385] F2FS-fs (loop2): extra_attr or flexible_inline_xattr feature is off
[  150.397946][ T8391] loop2: detected capacity change from 0 to 16
[  150.411004][ T8391] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  151.822181][ T8415] loop2: detected capacity change from 0 to 2048
[  152.041381][ T8415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.188672][ T8415] EXT4-fs (loop2): shut down requested (1)
[  152.239529][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.326930][ T8421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.893'.
[  152.474678][ T8430] loop2: detected capacity change from 0 to 7
[  152.480452][ T8430] Dev loop2: unable to read RDB block 7
[  152.482297][ T8430]  loop2: unable to read partition table
[  152.487277][ T8430] loop2: partition table beyond EOD, truncated
[  152.490844][ T8430] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5)
[  152.708760][ T5908] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  152.868578][ T5908] usb 6-1: Using ep0 maxpacket: 32
[  152.874945][ T5908] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  152.877627][ T5908] usb 6-1: config 0 has no interface number 0
[  152.881641][ T5908] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  152.889953][ T5908] usb 6-1: config 0 interface 1 has no altsetting 0
[  152.901146][ T5908] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  152.907557][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.916656][ T5908] usb 6-1: Product: syz
[  152.920523][ T5908] usb 6-1: Manufacturer: syz
[  152.925058][ T5908] usb 6-1: SerialNumber: syz
[  152.944451][ T5908] usb 6-1: config 0 descriptor??
[  153.196780][ T5908] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  153.204723][ T5908] cx231xx 6-1:0.1: Failed to read PCB config
[  153.206916][ T5908] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71
[  153.214605][ T5908] usb 6-1: USB disconnect, device number 3
[  153.723657][ T8453] loop4: detected capacity change from 0 to 128
[  153.737829][ T8453] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59572!=65535)
[  153.769050][ T8453] EXT4-fs error (device loop4): __ext4_fill_super:5504: inode #2: comm syz.4.908: iget: checksum invalid
[  153.779020][ T8453] EXT4-fs (loop4): get root inode failed
[  153.781171][ T8453] EXT4-fs (loop4): mount failed
[  154.046753][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  154.405639][ T8489] netlink: 32 bytes leftover after parsing attributes in process `syz.5.920'.
[  154.470809][ T8492] loop5: detected capacity change from 0 to 4096
[  154.474170][ T8492] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  154.484003][ T8492] ntfs3(loop5): $Volume is corrupted.
[  154.562509][ T8498] loop4: detected capacity change from 0 to 512
[  154.571042][ T8498] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  154.619215][ T8498] EXT4-fs (loop4): 1 truncate cleaned up
[  154.622813][ T8498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.654086][ T7282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.196919][ T8507] loop4: detected capacity change from 0 to 1024
[  155.227334][ T8507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  155.246498][ T8507] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.274870][ T8507] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.926: lblock 3 mapped to illegal pblock 3 (length 3)
[  155.285754][ T8507] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  155.291938][ T8507] EXT4-fs (loop4): This should not happen!! Data will be lost
[  155.291938][ T8507] 
[  155.300656][ T8507] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.926: lblock 3 mapped to illegal pblock 3 (length 3)
[  155.328645][   T32] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  155.339491][   T32] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 34 with max blocks 34 with error 28
[  155.343878][   T32] EXT4-fs (loop4): This should not happen!! Data will be lost
[  155.343878][   T32] 
[  155.346984][   T32] EXT4-fs (loop4): Total free blocks count 0
[  155.349183][   T32] EXT4-fs (loop4): Free/Dirty block details
[  155.351007][   T32] EXT4-fs (loop4): free_blocks=4293918720
[  155.352724][   T32] EXT4-fs (loop4): dirty_blocks=64
[  155.354319][   T32] EXT4-fs (loop4): Block reservation details
[  155.511845][ T8516] netlink: 'syz.5.930': attribute type 10 has an invalid length.
[  155.515362][ T8516] netlink: 'syz.5.930': attribute type 28 has an invalid length.
[  155.521903][ T8516] netlink: 'syz.5.930': attribute type 5 has an invalid length.
[  155.524930][ T8516] netlink: 'syz.5.930': attribute type 12 has an invalid length.
[  155.527885][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.930'.
[  155.530916][ T5923] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  155.647693][ T8524] loop4: detected capacity change from 0 to 736
[  155.684288][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.688116][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.705423][ T5923] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  155.710063][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  155.715917][ T5923] usb 3-1: SerialNumber: syz
[  155.743895][ T8526] loop4: detected capacity change from 0 to 16
[  155.754851][ T8526] erofs (device loop4): mounted with root inode @ nid 36.
[  155.941646][ T5923] usb 3-1: 0:2 : does not exist
[  155.947073][ T5923] usb 3-1: unit 78 not found!
[  155.961501][ T5923] usb 3-1: USB disconnect, device number 13
[  155.984571][ T6719] udevd[6719]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.467288][ T8530] loop5: detected capacity change from 0 to 256
[  156.514115][ T8530] FAT-fs (loop5): Directory bread(block 64) failed
[  156.516639][ T8530] FAT-fs (loop5): Directory bread(block 65) failed
[  156.519546][ T8530] FAT-fs (loop5): Directory bread(block 66) failed
[  156.522195][ T8530] FAT-fs (loop5): Directory bread(block 67) failed
[  156.524831][ T8530] FAT-fs (loop5): Directory bread(block 68) failed
[  156.527717][ T8530] FAT-fs (loop5): Directory bread(block 69) failed
[  156.533236][ T8530] FAT-fs (loop5): Directory bread(block 70) failed
[  156.535772][ T8530] FAT-fs (loop5): Directory bread(block 71) failed
[  156.538312][ T8530] FAT-fs (loop5): Directory bread(block 72) failed
[  156.543860][ T8530] FAT-fs (loop5): Directory bread(block 73) failed
[  156.697319][ T8541] tipc: Can't bind to reserved service type 0
[  156.894697][ T8553] loop4: detected capacity change from 0 to 512
[  156.912305][ T8553] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.948: casefold flag without casefold feature
[  156.947167][ T8553] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.948: couldn't read orphan inode 15 (err -117)
[  156.971164][ T8553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.011616][ T8553] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #2: comm syz.4.948: directory missing '.'
[  157.043119][ T7282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.251719][ T5923] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  157.408655][ T5923] usb 6-1: Using ep0 maxpacket: 32
[  157.414095][ T5923] usb 6-1: config 2 has an invalid interface number: 20 but max is 0
[  157.417375][ T5923] usb 6-1: config 2 has no interface number 0
[  157.421138][ T5923] usb 6-1: config 2 interface 20 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  157.425520][ T5923] usb 6-1: config 2 interface 20 has no altsetting 0
[  157.428306][ T5923] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93
[  157.433586][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.653258][ T5923] usb 6-1: string descriptor 0 read error: -71
[  157.673986][ T5923] usb 6-1: USB disconnect, device number 4
[  157.758735][  T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  157.908641][  T793] usb 3-1: Using ep0 maxpacket: 8
[  157.912817][  T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.916680][  T793] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  157.924290][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.930347][  T793] usb 3-1: config 0 descriptor??
[  157.936321][  T793] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[  158.146635][ T5923] usb 3-1: USB disconnect, device number 14
[  158.353965][ T8577] nftables ruleset with unbound set
[  158.537222][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.964'.
[  158.540876][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.964'.
[  158.544668][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.964'.
[  158.575858][ T8591] loop5: detected capacity change from 0 to 256
[  158.580972][ T8591] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  158.584462][ T8591] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  158.592930][ T8591] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  158.641433][ T8591] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff)
[  158.644756][ T8591] exFAT-fs (loop5): Filesystem has been set read-only
[  158.914502][ T8610] mmap: syz.5.974 (8610): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  159.117025][ T8628] netlink: 'syz.5.982': attribute type 5 has an invalid length.
[  159.252574][ T8641] loop4: detected capacity change from 0 to 256
[  159.359098][ T8645] loop4: detected capacity change from 0 to 4096
[  159.365951][ T8645] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  159.513670][ T8651] loop2: detected capacity change from 0 to 4096
[  159.517094][ T8651] EXT4-fs: Ignoring removed nomblk_io_submit option
[  159.520961][ T8651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  159.524602][ T8651] EXT4-fs (loop2): Test dummy encryption mode enabled
[  159.540857][ T8651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.551107][ T8651] EXT4-fs: Ignoring removed nomblk_io_submit option
[  159.553684][ T8651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  159.558693][ T8651] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  159.590374][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.610497][ T8639] loop5: detected capacity change from 0 to 40427
[  159.621989][ T8639] f2fs: Bad value for 'fault_injection'
[  159.882427][ T8668] loop2: detected capacity change from 0 to 512
[  159.892870][ T8668] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1001: casefold flag without casefold feature
[  159.897879][ T8668] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1001: couldn't read orphan inode 15 (err -117)
[  159.906211][ T8668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.920294][ T8668] EXT4-fs error (device loop2): ext4_check_dx_root:2203: inode #2: comm syz.2.1001: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  159.983812][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.135952][ T8677] input: syz0 as /devices/virtual/input/input7
[  160.816711][ T8704] loop5: detected capacity change from 0 to 1024
[  160.837119][ T8704] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  161.833493][ T8711] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  162.262577][ T8725] loop5: detected capacity change from 0 to 65
[  162.280120][ T8725] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5
[  162.590231][ T8729] loop2: detected capacity change from 0 to 4096
[  162.680601][ T8737] loop4: detected capacity change from 0 to 1024
[  162.684005][ T8737] EXT4-fs: Ignoring removed nomblk_io_submit option
[  162.708065][ T8737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  162.724139][ T8737] System zones: 0-1, 3-36
[  162.740649][ T8737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.751139][   T33] audit: type=1800 audit(1757604361.490:22): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1027" name="file0" dev="loop2" ino=0 res=0 errno=0
[  162.915649][ T7282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.108003][ T8752] loop5: detected capacity change from 0 to 512
[  163.124203][ T8752] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  163.165785][ T8752] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1038: bg 0: block 104: invalid block bitmap
[  163.187029][ T8752] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  163.204344][ T8754] block device autoloading is deprecated and will be removed.
[  163.207998][ T8752] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1038: invalid indirect mapped block 1 (level 1)
[  163.220827][ T8752] EXT4-fs (loop5): 1 truncate cleaned up
[  163.224135][ T8752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.311512][ T8090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.443053][ T8766] loop4: detected capacity change from 0 to 4096
[  163.533699][ T8766] ntfs3(loop4): ino=9, attr_set_size
[  163.592643][ T8771] ubi31: attaching mtd0
[  163.594246][ T8771] ubi31 error: ubi_attach_mtd_dev: bad VID header (536940548) or data offsets (536940612)
[  163.609671][ T8772] IPVS: ip_vs_add_dest(): server weight less than zero
[  163.670335][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  163.828691][   T24] usb 6-1: Using ep0 maxpacket: 8
[  163.840249][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  163.850068][   T24] usb 6-1: config 5 has an invalid interface number: 2 but max is 0
[  163.853065][   T24] usb 6-1: config 5 has no interface number 0
[  163.864500][   T24] usb 6-1: New USB device found, idVendor=09fb, idProduct=602d, bcdDevice=e2.b2
[  163.869189][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.874737][   T24] usb 6-1: Product: syz
[  163.878053][   T24] usb 6-1: Manufacturer: syz
[  163.883283][   T24] usb 6-1: SerialNumber: syz
[  164.129723][   T24] ftdi_sio 6-1:5.2: FTDI USB Serial Device converter detected
[  164.137914][   T24] ftdi_sio ttyUSB0: unknown device type: 0xe2b2
[  164.158115][   T24] usb 6-1: USB disconnect, device number 5
[  164.177470][   T24] ftdi_sio 6-1:5.2: device disconnected
[  164.698839][ T5908] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  164.870948][ T5908] usb 3-1: config 54 has an invalid interface number: 154 but max is 0
[  164.873917][ T5908] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  164.877749][ T5908] usb 3-1: config 54 has no interface number 0
[  164.908623][ T5908] usb 3-1: too many endpoints for config 54 interface 154 altsetting 0: 146, using maximum allowed: 30
[  164.912235][ T5908] usb 3-1: config 54 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146
[  164.945084][ T5908] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  164.948393][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.958520][ T5908] usb 3-1: Product: syz
[  164.960193][ T5908] usb 3-1: Manufacturer: syz
[  164.961984][ T5908] usb 3-1: SerialNumber: syz
[  164.982574][ T5908] hub 3-1:54.154: bad descriptor, ignoring hub
[  164.984983][ T5908] hub 3-1:54.154: probe with driver hub failed with error -5
[  165.017708][ T5908] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  165.033588][   T13] usb 3-1: Failed to submit usb control message: -71
[  165.036772][   T13] usb 3-1: unable to send the bmi data to the device: -71
[  165.048963][   T13] usb 3-1: unable to get target info from device
[  165.056061][   T13] usb 3-1: could not get target info (-71)
[  165.072136][   T13] usb 3-1: could not probe fw (-71)
[  165.301869][ T5908] usb 3-1: USB disconnect, device number 15
[  165.964929][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'.
[  166.026095][   T33] audit: type=1326 audit(1757604364.750:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.2.1065" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f470df8eba9 code=0x0
[  166.200040][ T5894] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  166.371572][ T5894] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  166.380221][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.384150][ T5894] usb 6-1: config 0 has no interface number 0
[  166.386594][ T5894] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  166.396029][ T5894] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  166.400476][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.403546][ T5894] usb 6-1: Product: syz
[  166.405325][ T5894] usb 6-1: Manufacturer: syz
[  166.407253][ T5894] usb 6-1: SerialNumber: syz
[  166.415709][ T5894] usb 6-1: config 0 descriptor??
[  166.487363][ T8823] loop4: detected capacity change from 0 to 16384
[  166.497289][ T8823] bcachefs (/dev/loop4): error validating superblock: Invalid option invalid compression opt 240
[  166.508769][ T8823] bcachefs: bch2_fs_get_tree() error: invalid_sb_opt_compression
[  166.780811][ T8830] loop4: detected capacity change from 0 to 128
[  168.301670][ T8852] syzkaller1: entered promiscuous mode
[  168.304155][ T8852] syzkaller1: entered allmulticast mode
[  168.664837][ T8860] netlink: 'syz.2.1085': attribute type 8 has an invalid length.
[  168.667587][ T8860] netem: change failed
[  168.860642][ T5894] usb 6-1: USB disconnect, device number 6
[  168.943325][ T8873] binder: 8870:8873 ioctl c018620b 0 returned -14
[  168.969320][ T8872] loop2: detected capacity change from 0 to 2048
[  169.025964][ T6719] Alternate GPT is invalid, using primary GPT.
[  169.034691][ T6719]  loop2: p1 p2 p3
[  169.036229][ T6719] loop2: partition table partially beyond EOD, truncated
[  169.088359][ T8872] Alternate GPT is invalid, using primary GPT.
[  169.103569][ T8872]  loop2: p1 p2 p3
[  169.105140][ T8872] loop2: partition table partially beyond EOD, truncated
[  169.124533][ T8872] overlayfs: failed lookup in lower (newroot/368, name='file0', err=-40): overlapping layers
[  169.305765][ T6719] udevd[6719]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  169.312263][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  169.317271][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  169.335681][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  169.336188][ T6719] udevd[6719]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  169.348729][ T5894] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  169.356887][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  169.433153][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  169.519951][ T5894] usb 6-1: Using ep0 maxpacket: 8
[  169.525922][ T5894] usb 6-1: config 0 has an invalid interface number: 239 but max is 0
[  169.532378][ T5894] usb 6-1: config 0 has no interface number 0
[  169.535239][ T5894] usb 6-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  169.540451][ T5894] usb 6-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  169.547980][ T5894] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  169.552359][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.555802][ T5894] usb 6-1: Product: syz
[  169.557615][ T5894] usb 6-1: Manufacturer: syz
[  169.563552][ T5894] usb 6-1: SerialNumber: syz
[  169.571578][ T5894] usb 6-1: config 0 descriptor??
[  169.574499][ T8876] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  169.787284][ T5894] ath6kl: Failed to submit usb control message: -71
[  169.792365][ T5894] ath6kl: unable to send the bmi data to the device: -71
[  169.796491][ T5894] ath6kl: Unable to send get target info: -71
[  169.815147][ T5894] ath6kl: Failed to init ath6kl core: -71
[  169.819957][ T5894] ath6kl_usb 6-1:0.239: probe with driver ath6kl_usb failed with error -71
[  169.844604][ T5894] usb 6-1: USB disconnect, device number 7
[  170.102823][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'.
[  171.079113][ T5908] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  171.089580][ T8931] usb usb8: usbfs: process 8931 (syz.2.1117) did not claim interface 0 before use
[  171.232945][ T5908] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  171.236591][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.255010][ T5908] usb 6-1: config 0 descriptor??
[  171.271552][ T5908] usb 6-1: selecting invalid altsetting 1
[  171.274065][ T5908] flexcop_usb: set interface failed.
[  171.287029][ T5908] b2c2_flexcop_usb 6-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  171.465904][ T5923] usb 6-1: USB disconnect, device number 8
[  171.492594][ T8943] loop2: detected capacity change from 0 to 128
[  171.521383][ T8943] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  171.526366][ T8943] hpfs: filesystem error: improperly stopped
[  171.540681][ T8943] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  171.543222][ T8943] hpfs: You really don't want any checks? You are crazy...
[  171.546758][ T8943] hpfs: hpfs_map_sector(): read error
[  171.554610][ T8943] hpfs: code page support is disabled
[  171.560705][ T8943] hpfs: hpfs_map_4sectors(): unaligned read
[  171.563469][ T8943] hpfs: hpfs_map_4sectors(): unaligned read
[  171.565760][ T8943] hpfs: filesystem error: unable to find root dir
[  171.658994][ T8949] sp0: Synchronizing with TNC
[  172.247267][ T8966] loop4: detected capacity change from 0 to 40427
[  172.259927][ T8966] F2FS-fs (loop4): build fault injection rate: 25
[  172.262464][ T8966] F2FS-fs (loop4): build fault injection type: 0x7698c
[  172.269123][ T8966] F2FS-fs (loop4): invalid crc value
[  172.287982][ T8966] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  172.299980][ T8966] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  172.363958][ T8966] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.379878][ T8966] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  172.397907][ T8966] F2FS-fs (loop4): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  172.421364][ T8966] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[  172.428280][ T8966] F2FS-fs (loop4): invalid blkaddr: 5639, type: 7, run fsck to fix.
[  172.436586][ T8966] F2FS-fs (loop4): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9f1/0x16a0
[  172.441908][ T8966] syz.4.1134: attempt to access beyond end of device
[  172.441908][ T8966] loop4: rw=2049, sector=45096, nr_sectors = 136 limit=40427
[  172.466218][ T7282] syz-executor: attempt to access beyond end of device
[  172.466218][ T7282] loop4: rw=2049, sector=45232, nr_sectors = 8 limit=40427
[  172.472521][ T7282] CPU: 1 UID: 0 PID: 7282 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  172.472542][ T7282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.472551][ T7282] Call Trace:
[  172.472556][ T7282]  <TASK>
[  172.472563][ T7282]  dump_stack_lvl+0x189/0x250
[  172.472591][ T7282]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.472610][ T7282]  ? __pfx_queue_work_on+0x10/0x10
[  172.472626][ T7282]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  172.472647][ T7282]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.472677][ T7282]  f2fs_handle_critical_error+0x37c/0x540
[  172.472704][ T7282]  f2fs_write_end_io+0x886/0xb60
[  172.472734][ T7282]  __submit_merged_bio+0x27a/0x6a0
[  172.472757][ T7282]  __submit_merged_write_cond+0x255/0x530
[  172.472781][ T7282]  f2fs_write_data_pages+0x261d/0x3000
[  172.472792][ T7282]  ? __lock_acquire+0xab9/0xd20
[  172.472837][ T7282]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  172.472887][ T7282]  ? __mod_zone_page_state+0xd7/0x140
[  172.472914][ T7282]  ? folios_put_refs+0x560/0x640
[  172.472939][ T7282]  ? __pfx_folios_put_refs+0x10/0x10
[  172.472952][ T7282]  ? rcu_is_watching+0x15/0xb0
[  172.472973][ T7282]  ? __lock_acquire+0xab9/0xd20
[  172.473015][ T7282]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  172.473030][ T7282]  do_writepages+0x32e/0x550
[  172.473059][ T7282]  ? do_raw_spin_unlock+0x4d/0x240
[  172.473080][ T7282]  filemap_fdatawrite+0x199/0x240
[  172.473100][ T7282]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  172.473189][ T7282]  ? do_raw_spin_unlock+0x4d/0x240
[  172.473213][ T7282]  f2fs_sync_dirty_inodes+0x31f/0x830
[  172.473240][ T7282]  f2fs_write_checkpoint+0x95a/0x1df0
[  172.473276][ T7282]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  172.473334][ T7282]  ? kill_f2fs_super+0x298/0x6c0
[  172.473354][ T7282]  kill_f2fs_super+0x2c3/0x6c0
[  172.473375][ T7282]  ? __pfx_kill_f2fs_super+0x10/0x10
[  172.473388][ T7282]  ? radix_tree_delete_item+0x2b6/0x400
[  172.473414][ T7282]  ? shrinker_free+0x2ce/0x3e0
[  172.473432][ T7282]  deactivate_locked_super+0xbc/0x130
[  172.473451][ T7282]  cleanup_mnt+0x425/0x4c0
[  172.473467][ T7282]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.473484][ T7282]  task_work_run+0x1d4/0x260
[  172.473504][ T7282]  ? __pfx_task_work_run+0x10/0x10
[  172.473521][ T7282]  ? __x64_sys_umount+0x122/0x160
[  172.473542][ T7282]  ? exit_to_user_mode_loop+0x40/0x110
[  172.473563][ T7282]  exit_to_user_mode_loop+0xec/0x110
[  172.473582][ T7282]  do_syscall_64+0x2bd/0x3b0
[  172.473595][ T7282]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.473608][ T7282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.473622][ T7282]  ? exc_page_fault+0x9f/0xf0
[  172.473638][ T7282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.473651][ T7282] RIP: 0033:0x7fa14ad8fed7
[  172.473664][ T7282] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  172.473675][ T7282] RSP: 002b:00007ffc496b9d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  172.473689][ T7282] RAX: 0000000000000000 RBX: 00007fa14ae11c05 RCX: 00007fa14ad8fed7
[  172.473698][ T7282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc496b9dd0
[  172.473707][ T7282] RBP: 00007ffc496b9dd0 R08: 0000000000000000 R09: 0000000000000000
[  172.473715][ T7282] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc496bae60
[  172.473724][ T7282] R13: 00007fa14ae11c05 R14: 000000000002a130 R15: 00007ffc496baea0
[  172.473749][ T7282]  </TASK>
[  172.473755][ T7282] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  172.751695][ T8988] loop2: detected capacity change from 0 to 40427
[  172.758151][ T8988] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  172.763161][ T8988] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  172.768339][ T8988] F2FS-fs (loop2): invalid crc value
[  172.868251][ T8988] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.874670][ T8988] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  172.877468][ T8988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  173.504144][ T9008] loop5: detected capacity change from 0 to 4096
[  173.540427][ T9008] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  173.560808][ T9008] ntfs3(loop5): Failed to load $Extend (-22).
[  173.562819][ T9008] ntfs3(loop5): Failed to initialize $Extend.
[  173.710387][  T793] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  173.828179][ T9012] ptrace attach of "/syz-executor exec"[8090] was attempted by "/syz-executor exec"[9012]
[  174.141135][  T793] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  174.156204][  T793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  174.160636][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  174.164786][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 187, setting to 64
[  174.170697][  T793] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  174.178400][  T793] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  174.184633][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.187781][  T793] usb 3-1: Product: syz
[  174.190947][  T793] usb 3-1: Manufacturer: syz
[  174.192851][  T793] usb 3-1: SerialNumber: syz
[  174.200494][  T793] usb 3-1: config 0 descriptor??
[  174.203526][ T9010] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  174.222007][  T793] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9
[  174.245088][    C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  174.489059][    C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  174.493658][ T5923] usb 3-1: USB disconnect, device number 16
[  174.621579][ T9028] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1157'.
[  174.780379][ T9034] loop5: detected capacity change from 0 to 4096
[  174.805481][ T9034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.828381][ T9034] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.5.1160: bad entry in directory: inode out of bounds - offset=12, inode=256, rec_len=12, size=4096 fake=1
[  174.842098][ T9034] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem
[  174.846605][ T9034] EXT4-fs warning (device loop5): ext4_rename_delete:3731: inode #2: comm syz.5.1160: Deleting old file: nlink 4, error=-117
[  174.852732][ T9034] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.1160: corrupted inode contents
[  174.863810][ T9034] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #15: comm syz.5.1160: mark_inode_dirty error
[  174.869198][ T9034] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.1160: corrupted inode contents
[  174.874034][ T9034] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.1160: mark_inode_dirty error
[  174.880640][ T9034] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.1160: corrupted inode contents
[  174.885538][ T9034] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.1160: mark_inode_dirty error
[  174.891645][ T9034] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.1160: corrupted inode contents
[  174.898219][ T9034] EXT4-fs error (device loop5): ext4_truncate:4666: inode #15: comm syz.5.1160: mark_inode_dirty error
[  174.937410][ T8090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.995155][ T9039] loop5: detected capacity change from 0 to 65
[  175.002457][ T9039] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  175.062184][ T9041] netlink: 'syz.2.1162': attribute type 10 has an invalid length.
[  175.072431][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.076945][ T9041] bridge_slave_1: left allmulticast mode
[  175.080344][ T9041] bridge_slave_1: left promiscuous mode
[  175.082339][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.090726][ T9041] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  175.155171][ T9045] overlayfs: missing 'lowerdir'
[  175.305317][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1167'.
[  175.504876][ T9050] loop2: detected capacity change from 0 to 32768
[  175.512241][ T9050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1166 (9050)
[  175.527411][ T9050] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.532329][ T9050] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  175.637889][ T9050] BTRFS info (device loop2): enabling ssd optimizations
[  175.642234][ T9050] BTRFS info (device loop2): enabling free space tree
[  175.712432][ T5857] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.925005][ T9073] loop2: detected capacity change from 0 to 64
[  175.943250][ T9073] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  175.955935][ T9073] BFS-fs: bfs_fill_super(): Last block not available on loop2: 4139327
[  176.262316][ T9089] loop2: detected capacity change from 0 to 512
[  176.266912][ T9089] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  176.277235][ T9089] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  176.289389][ T9089] EXT4-fs (loop2): group descriptors corrupted!
[  176.448320][ T9099] loop5: detected capacity change from 0 to 64
[  176.668663][  T793] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  176.818819][  T793] usb 5-1: Using ep0 maxpacket: 16
[  176.827673][  T793] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  176.833763][  T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.837844][  T793] usb 5-1: config 0 has no interface number 0
[  176.846807][  T793] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  176.851058][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.854311][  T793] usb 5-1: Product: syz
[  176.855960][  T793] usb 5-1: Manufacturer: syz
[  176.858082][  T793] usb 5-1: SerialNumber: syz
[  176.872029][  T793] usb 5-1: config 0 descriptor??
[  176.881223][  T793] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  176.883805][  T793] usb 5-1: No valid video chain found.
[  176.911547][ T9118] loop5: detected capacity change from 0 to 128
[  176.924620][ T9118] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  176.930010][ T9118] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  176.971179][ T8090] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.084296][ T5894] usb 5-1: USB disconnect, device number 5
[  177.348627][ T5923] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  177.529064][ T5923] usb 6-1: Using ep0 maxpacket: 16
[  177.537494][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  177.554617][ T5923] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  177.557958][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.563311][ T5923] usb 6-1: Product: syz
[  177.564703][ T5923] usb 6-1: Manufacturer: syz
[  177.566442][ T5923] usb 6-1: SerialNumber: syz
[  177.580380][ T5923] usb 6-1: config 0 descriptor??
[  177.601592][ T5923] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  177.613534][ T5923] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  177.831255][  T793] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  177.837884][ T9142] loop4: detected capacity change from 0 to 2048
[  177.854559][ T9142] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  177.995455][  T793] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  178.002353][  T793] usb 3-1: config 0 interface 0 has no altsetting 0
[  178.008777][  T793] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  178.013099][  T793] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  178.016370][  T793] usb 3-1: Product: syz
[  178.018093][  T793] usb 3-1: Manufacturer: syz
[  178.023223][  T793] usb 3-1: SerialNumber: syz
[  178.031877][  T793] usb 3-1: config 0 descriptor??
[  178.059142][  T793] usb 3-1: selecting invalid altsetting 0
[  178.193664][ T5923] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  178.264959][  T793] usb 3-1: USB disconnect, device number 17
[  178.619532][ T5923] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  178.623491][ T5923] em28xx 6-1:0.0: board has no eeprom
[  178.886322][ T9172] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1214'.
[  178.890685][ T5923] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  178.893628][ T9172] NCSI netlink: No device for ifindex 1024
[  178.895885][ T5923] em28xx 6-1:0.0: dvb set to bulk mode.
[  178.899313][ T5894] em28xx 6-1:0.0: Binding DVB extension
[  178.921586][ T5923] usb 6-1: USB disconnect, device number 9
[  178.945119][ T5923] em28xx 6-1:0.0: Disconnecting em28xx
[  178.987964][ T5894] em28xx 6-1:0.0: Registering input extension
[  178.996278][ T5923] em28xx 6-1:0.0: Closing input extension
[  179.032389][ T5923] em28xx 6-1:0.0: Freeing device
[  179.329198][ T5894] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  179.503648][ T9187] loop5: detected capacity change from 0 to 256
[  179.515308][ T5894] usb 3-1: config 67 has an invalid interface number: 37 but max is 0
[  179.518757][ T5894] usb 3-1: config 67 has no interface number 0
[  179.521170][ T5894] usb 3-1: config 67 interface 37 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  179.525784][ T9187] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  179.532334][ T5894] usb 3-1: config 67 interface 37 has no altsetting 0
[  179.532416][ T9187] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  179.534973][ T5894] usb 3-1: New USB device found, idVendor=0424, idProduct=9903, bcdDevice=f3.3b
[  179.534996][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.544491][ T5894] smsc95xx v2.0.0
[  179.557485][ T5894] smsc95xx 3-1:67.37 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  179.563017][ T5894] smsc95xx 3-1:67.37: probe with driver smsc95xx failed with error -22
[  179.566980][ T9187] exFAT-fs (loop5): valid_size(150994954) is greater than size(10)
[  179.576735][   T33] audit: type=1800 audit(1757604378.310:24): pid=9187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1221" name="file1" dev="loop5" ino=1048619 res=0 errno=0
[  179.610799][ T9191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1223'.
[  179.808243][ T5894] usb 3-1: USB disconnect, device number 18
[  179.808411][ T9198] loop5: detected capacity change from 0 to 512
[  179.816519][ T9198] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  180.071924][ T9198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.094940][ T9198] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.254178][ T8090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.620614][  T793] IPVS: starting estimator thread 0...
[  180.661040][ T9216] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0)
[  180.708625][ T9213] IPVS: using max 62 ests per chain, 148800 per kthread
[  180.903124][ T9228] loop2: detected capacity change from 0 to 8192
[  180.939921][ T6719]  loop2: p1 < > p3 < > p4 < >
[  180.941983][ T6719] loop2: partition table partially beyond EOD, truncated
[  180.946921][ T6719] loop2: p3 start 327168 is beyond EOD, truncated
[  180.964751][ T9228]  loop2: p1 < > p3 < > p4 < >
[  180.974043][ T9228] loop2: partition table partially beyond EOD, truncated
[  180.980970][ T9228] loop2: p3 start 327168 is beyond EOD, truncated
[  181.120368][ T9240] netlink: 'syz.4.1241': attribute type 4 has an invalid length.
[  181.134698][ T9240] netlink: 'syz.4.1241': attribute type 4 has an invalid length.
[  181.200117][ T9242] loop4: detected capacity change from 0 to 128
[  181.214315][ T9242] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.216740][ T9245] loop5: detected capacity change from 0 to 512
[  181.220175][ T9242] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.248746][ T5922] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  181.282730][ T9245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.287690][ T9245] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.299510][ T7282] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.340779][ T9250] loop4: detected capacity change from 0 to 512
[  181.363433][ T8090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.404387][ T5922] usb 3-1: config 0 has an invalid interface number: 123 but max is 0
[  181.418666][ T5922] usb 3-1: config 0 has an invalid descriptor of length 178, skipping remainder of the config
[  181.427365][ T5922] usb 3-1: config 0 has no interface number 0
[  181.441962][ T5922] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d
[  181.444895][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.454623][ T5922] usb 3-1: Product: syz
[  181.456369][ T5922] usb 3-1: Manufacturer: syz
[  181.458085][ T5922] usb 3-1: SerialNumber: syz
[  181.486712][ T5922] usb 3-1: config 0 descriptor??
[  181.501097][ T5922] cdc_acm 3-1:0.123: skipping garbage
[  181.503351][ T5922] cdc_acm 3-1:0.123: skipping garbage
[  181.683678][ T9265] loop5: detected capacity change from 0 to 256
[  182.026498][ T5922] usb 3-1: USB disconnect, device number 19
[  182.168174][ T9271] loop5: detected capacity change from 0 to 512
[  182.175177][ T9271] EXT4-fs: Ignoring removed oldalloc option
[  182.184505][ T9271] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1253: Parent and EA inode have the same ino 15
[  182.195953][ T9271] EXT4-fs (loop5): 1 orphan inode deleted
[  182.198570][ T9271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.216779][ T9271] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  182.219817][ T9271] EXT4-fs: can't change dax mount option while remounting
[  182.240876][ T8090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.649366][ T5922] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  182.735702][ T9293] loop2: detected capacity change from 0 to 64
[  182.764022][ T9293] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  182.824547][ T5922] usb 6-1: config 116 has an invalid interface number: 166 but max is 0
[  182.827739][ T5922] usb 6-1: config 116 has no interface number 0
[  182.842465][ T5922] usb 6-1: config 116 interface 166 has no altsetting 0
[  182.845288][ T5922] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=25.5c
[  182.876934][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.914299][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:116.166/input/input12
[  183.150984][ T5283] bcm5974 6-1:116.166: could not read from device
[  183.171711][ T5922] usb 6-1: USB disconnect, device number 10
[  183.316602][ T9307] loop2: detected capacity change from 0 to 256
[  184.219466][ T9319] loop5: detected capacity change from 0 to 256
[  184.219529][ T9320] loop2: detected capacity change from 0 to 32768
[  184.235230][ T9319] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  184.243801][ T9320] (syz.2.1273,9320,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  184.243801][ T9320] found = 2, set = 0, taken = 0, off = 0
[  184.251195][ T9320] (syz.2.1273,9320,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  184.253859][ T9320] (syz.2.1273,9320,0):ocfs2_check_volume:2404 ERROR: status = -22
[  184.256876][ T9320] (syz.2.1273,9320,0):ocfs2_check_volume:2432 ERROR: status = -22
[  184.259579][ T9320] (syz.2.1273,9320,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  184.267252][ T9320] (syz.2.1273,9320,0):ocfs2_fill_super:1177 ERROR: status = -22
[  184.669809][ T9341] loop2: detected capacity change from 0 to 128
[  184.697032][ T9341] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  184.717840][ T9341] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.740707][ T9341] syz.2.1283 (pid 9341) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  184.763316][ T9341] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 30 bytes, need 32+ bytes)
[  184.769794][ T9341] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 30 bytes, need 32+ bytes)
[  184.787810][ T5857] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  184.804413][ T9345] loop4: detected capacity change from 0 to 4096
[  184.818682][ T9345] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  185.124669][ T9362] Scaler: =================  START STATUS  =================
[  185.127213][ T9362] Scaler: ==================  END STATUS  ==================
[  185.170336][ T9364] loop2: detected capacity change from 0 to 64
[  185.283974][ T9368] input: syz1 as /devices/virtual/input/input13
[  185.601207][   T33] audit: type=1326 audit(1757604384.340:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.607985][   T33] audit: type=1326 audit(1757604384.340:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.616009][   T33] audit: type=1326 audit(1757604384.340:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.622970][   T33] audit: type=1326 audit(1757604384.340:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.630639][   T33] audit: type=1326 audit(1757604384.340:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.637922][   T33] audit: type=1326 audit(1757604384.340:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.646112][   T33] audit: type=1326 audit(1757604384.340:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.657937][   T33] audit: type=1326 audit(1757604384.340:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.666228][   T33] audit: type=1326 audit(1757604384.340:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.680967][   T33] audit: type=1326 audit(1757604384.340:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66618eba9 code=0x7ffc0000
[  185.952647][ T9380] loop5: detected capacity change from 0 to 32768
[  185.967535][ T9380] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1300 (9380)
[  185.979392][ T9380] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.983814][ T9380] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  186.049166][ T9380] BTRFS info (device loop5): rebuilding free space tree
[  186.055677][ T9380] BTRFS info (device loop5): allowing degraded mounts
[  186.059728][ T9380] BTRFS info (device loop5): enabling ssd optimizations
[  186.062100][ T9380] BTRFS info (device loop5): enabling free space tree
[  186.064530][ T9380] BTRFS info (device loop5): force clearing of disk cache
[  186.067170][ T9380] BTRFS info (device loop5): use zstd compression, level 3
[  186.218606][ T8090] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.328655][ T9403] input: syz0 as /devices/virtual/input/input14
[  186.824003][ T9413] loop5: detected capacity change from 0 to 128
[  186.830109][ T9413] EXT4-fs (loop5): Test dummy encryption mode enabled
[  186.848313][ T9413] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  186.857513][ T9413] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  186.893658][ T8090] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.908693][ T5923] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  187.082994][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  187.091665][ T5923] usb 3-1: config 2 has an invalid interface number: 157 but max is 0
[  187.095208][ T5923] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  187.110156][ T5923] usb 3-1: config 2 has no interface number 1
[  187.115330][ T5923] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  187.124234][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.127392][ T5923] usb 3-1: Product: syz
[  187.139057][ T5923] usb 3-1: Manufacturer: syz
[  187.141200][ T5923] usb 3-1: SerialNumber: syz
[  187.150055][ T5923] imon 3-1:2.157: inconsistent driver matching
[  187.152490][ T5923] imon 3-1:2.157: unable to register, err -22
[  187.164965][ T5923] imon 3-1:2.157: probe with driver imon failed with error -22
[  187.171288][ T5923] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  187.176420][ T5923] imon 3-1:2.0: unable to initialize intf0, err -19
[  187.180614][ T5923] imon:imon_probe: failed to initialize context!
[  187.183142][ T5923] imon 3-1:2.0: unable to register, err -19
[  187.215183][ T9426] loop4: detected capacity change from 0 to 4096
[  187.361625][ T5923] usb 3-1: USB disconnect, device number 20
[  187.643292][ T9448] syz_tun: entered allmulticast mode
[  187.651580][ T9447] syz_tun: left allmulticast mode
[  187.774798][ T9454] netlink: 'syz.4.1326': attribute type 21 has an invalid length.
[  187.777811][ T9454] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1326'.
[  187.782139][ T9454] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1326'.
[  188.049018][ T5923] psmouse serio2: Failed to reset mouse on : -5
[  188.168397][ T9470] loop5: detected capacity change from 0 to 512
[  188.173143][ T9470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  188.209160][ T9470] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  188.211965][ T9470] System zones: 0-2, 18-18, 34-34
[  188.225250][ T9470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.233538][ T9470] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.251062][ T9470] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1334: Failed to acquire dquot type 1
[  188.298387][ T8090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.304629][ T9503] loop5: detected capacity change from 0 to 65536
[  190.512195][ T9503] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  190.639709][ T9503] XFS (loop5): Ending clean mount
[  190.661116][ T9503] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  190.664714][ T9503] XFS (loop5): Unmount and run xfs_repair
[  190.666795][ T9503] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  190.669417][ T9503] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  190.672842][ T9503] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  190.676251][ T9503] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  190.679849][ T9503] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  190.683257][ T9503] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  190.686738][ T9503] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  190.689775][ T9503] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  190.692495][ T9503] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  190.695894][ T9503] XFS (loop5): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  190.707416][ T9503] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  190.712130][ T9503] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  190.748746][ T8090] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  190.957143][ T9527] loop5: detected capacity change from 0 to 1024
[  190.961198][ T9527] EXT4-fs: Ignoring removed nomblk_io_submit option
[  190.976452][ T9527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.027921][ T8090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.078973][ T5865] Bluetooth: hci1: command 0x0406 tx timeout
[  191.344421][ T9544] loop5: detected capacity change from 0 to 1024
[  191.391485][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.395756][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.400631][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.404008][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.408368][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.414610][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.417577][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.420921][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.424986][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.427728][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.435796][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.439086][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.441856][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.444505][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.447185][ T9545] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.457693][ T9545] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.464434][ T9545] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.467254][ T9545] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.478710][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.488619][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.497701][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.507806][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.515536][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.518555][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.521425][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.524165][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.527529][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.533658][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.536621][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.540372][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.543694][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.546510][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.559100][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.568624][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.571910][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.585029][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.587861][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.598530][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.601397][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.604175][ T9544] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.607527][   T33] kauditd_printk_skb: 14 callbacks suppressed
[  191.607540][   T33] audit: type=1800 audit(1757604390.340:47): pid=9544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1359" name="file1" dev="loop5" ino=20 res=0 errno=0
[  191.661666][   T27] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.664665][   T27] hfsplus: request for non-existent node 16777216 in B*Tree
[  191.863168][ T9549] loop2: detected capacity change from 0 to 40427
[  191.878118][ T9549] F2FS-fs (loop2): Image doesn't support compression
[  191.880907][ T5923] misc userio: Buffer overflowed, userio client isn't keeping up
[  191.886450][ T9549] F2FS-fs (loop2): LFS is not compatible with ATGC
[  191.954936][ T9557] loop5: detected capacity change from 0 to 2048
[  192.015169][ T9557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.029540][ T9557] netlink: 'syz.5.1365': attribute type 4 has an invalid length.
[  192.077565][ T8090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.200262][ T9571] netlink: ct family unspecified
[  192.201823][ T9571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.316821][ T9579] loop2: detected capacity change from 0 to 16
[  192.334192][ T9579] erofs (device loop2): mounted with root inode @ nid 36.
[  192.370616][ T9579] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  192.401903][ T9579] erofs (device loop2): failed to decompress -29 in[58, 4038] out[1851]
[  192.405697][ T9579] erofs (device loop2): read error -117 @ 43 of nid 36
[  192.494151][ T9584] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  192.497952][ T9584] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  192.521250][ T9584] erofs (device loop2): readahead error at folio 42 @ nid 36
[  192.524299][ T9584] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36
[  192.526863][ T9584] erofs (device loop2): readahead error at folio 41 @ nid 36
[  192.537888][ T9584] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36
[  192.545516][ T9584] erofs (device loop2): readahead error at folio 40 @ nid 36
[  192.551180][ T9584] erofs (device loop2): readahead error at folio 39 @ nid 36
[  192.554746][ T9584] erofs (device loop2): readahead error at folio 38 @ nid 36
[  192.558367][ T9584] erofs (device loop2): readahead error at folio 36 @ nid 36
[  192.565896][ T9584] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36
[  192.569766][ T9584] erofs (device loop2): readahead error at folio 31 @ nid 36
[  192.581484][ T9587] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  192.584817][ T9587] erofs (device loop2): read error -117 @ 43 of nid 36
[  192.587983][ T9584] erofs (device loop2): readahead error at folio 25 @ nid 36
[  192.594482][ T9584] erofs (device loop2): readahead error at folio 24 @ nid 36
[  192.597581][ T9584] erofs (device loop2): readahead error at folio 19 @ nid 36
[  192.603905][ T9584] syz.2.1371: attempt to access beyond end of device
[  192.603905][ T9584] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16
[  192.611826][ T9584] syz.2.1371: attempt to access beyond end of device
[  192.611826][ T9584] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  192.617685][ T9584] syz.2.1371: attempt to access beyond end of device
[  192.617685][ T9584] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  192.625642][ T9584] erofs (device loop2): failed to decompress -29 in[58, 4038] out[2639]
[  192.630998][ T9584] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36
[  192.634490][ T9584] erofs (device loop2): readahead error at folio 47 @ nid 36
[  192.637551][ T9584] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36
[  192.643666][ T9584] erofs (device loop2): readahead error at folio 46 @ nid 36
[  192.647229][ T9584] erofs (device loop2): readahead error at folio 45 @ nid 36
[  192.650987][ T9584] syz.2.1371: attempt to access beyond end of device
[  192.650987][ T9584] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16
[  192.664856][ T9584] erofs (device loop2): failed to decompress -29 in[58, 4038] out[3537]
[  193.197839][ T5923] input: PS/2 Generic Mouse as /devices/serio2/input/input15
[  193.428953][ T5923] psmouse serio2: Failed to enable mouse on 
[  193.769515][ T9599] loop4: detected capacity change from 0 to 32768
[  193.777112][ T9599] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 90223c30-180e-4834-8594-854caa699ea7
[  193.781630][ T9599] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop4 (7:4) scanned by syz.4.1381 (9599)
[  193.905506][ T9607] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  194.124532][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.126706][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.832251][ T9637] l2tp_ppp: sess 2/0: no socket in recv
[  194.856828][ T9629] loop2: detected capacity change from 0 to 32768
[  194.882965][ T9629] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  194.882965][ T9629] 
[  195.367791][ T9653] loop2: detected capacity change from 0 to 256
[  195.793447][ T9666] loop4: detected capacity change from 0 to 32768
[  195.816942][ T9666] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  195.934733][ T7282] ocfs2: Unmounting device (7,4) on (node local)
[  196.331098][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'.
[  196.334575][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'.
[  196.337589][ T9689] netlink: 'syz.4.1418': attribute type 6 has an invalid length.
[  196.585946][ T9669] delete_channel: no stack
[  196.698889][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  196.853192][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  196.856411][ T5894] usb 5-1: config 0 has no interface number 0
[  196.861521][ T5894] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  196.865132][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.868187][ T5894] usb 5-1: Product: syz
[  196.869966][ T5894] usb 5-1: Manufacturer: syz
[  196.871834][ T5894] usb 5-1: SerialNumber: syz
[  196.876901][ T5894] usb 5-1: config 0 descriptor??
[  197.087536][ T5894] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  197.097341][ T5894] usb 5-1: USB disconnect, device number 6
[  197.448974][ T9702] loop5: detected capacity change from 0 to 32768
[  197.457787][ T9702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1424 (9702)
[  197.468210][ T9702] BTRFS info (device loop5 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.478978][ T9702] BTRFS info (device loop5 state S): using crc32c (crc32c-lib) checksum algorithm
[  197.482642][ T9702] BTRFS error (device loop5 state S): ignoremetacsums must be used with ro mount option
[  197.486561][ T9702] BTRFS error (device loop5 state S): open_ctree failed: -22
[  197.746308][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1428'.
[  197.889240][ T5923] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  198.050367][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  198.061489][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short
[  198.071501][ T5923] usb 3-1: config 244 has an invalid interface number: 68 but max is 0
[  198.081046][ T5923] usb 3-1: config 244 has no interface number 0
[  198.087084][ T5923] usb 3-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8
[  198.103682][ T5923] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  198.117279][ T5923] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  198.133530][ T5923] usb 3-1: config 244 interface 68 has no altsetting 0
[  198.149329][ T5923] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  198.153119][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.156323][ T5923] usb 3-1: Product: syz
[  198.169049][ T5923] usb 3-1: Manufacturer: syz
[  198.176351][ T5923] usb 3-1: SerialNumber: syz
[  198.216855][ T9709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  198.281301][ T9718] loop4: detected capacity change from 0 to 2048
[  198.330919][ T9718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.335892][ T9718] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.387480][ T9718] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1430: bg 0: block 345: padding at end of block bitmap is not set
[  198.397599][ T9718] EXT4-fs (loop4): Remounting filesystem read-only
[  198.404868][ T9718] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.4.1430: cleanup dec ref error -117
[  198.473501][ T5923] comedi comedi5: Endpoint has wrong direction
[  198.476270][ T5923] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device.
[  198.478363][ T7282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.493028][ T5923] usb 3-1: USB disconnect, device number 21
[  199.161211][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'.
[  199.176381][ T9733] tc_dump_action: action bad kind
[  201.222521][ T9769] sd 0:0:0:0: PR command failed: 1026
[  201.224554][ T9769] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  201.240338][ T9769] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  201.469791][ T5894] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  201.634730][ T5894] usb 5-1: config index 0 descriptor too short (expected 69, got 36)
[  201.637984][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.644972][ T5894] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  201.651024][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.661977][ T5894] usb 5-1: Product: syz
[  201.669468][ T5894] usb 5-1: Manufacturer: syz
[  201.675003][ T5894] usb 5-1: SerialNumber: syz
[  201.688299][ T5894] usb 5-1: config 0 descriptor??
[  201.714841][ T5894] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  202.123362][ T5894] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[  202.126212][ T5894] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  202.152224][ T5894] usb 5-1: USB disconnect, device number 7
[  203.012656][ T5922] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  203.161278][ T9805] loop5: detected capacity change from 0 to 512
[  203.174725][ T9805] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.179556][ T5922] usb 5-1: Using ep0 maxpacket: 32
[  203.183850][ T9805] EXT4-fs: test_dummy_encryption requires encrypt feature
[  203.185597][ T5922] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[  203.193154][ T5922] usb 5-1: config 0 has no interface number 0
[  203.203328][ T5922] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  203.206726][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.222597][ T5922] usb 5-1: Product: syz
[  203.224242][ T5922] usb 5-1: Manufacturer: syz
[  203.227221][ T5922] usb 5-1: SerialNumber: syz
[  203.234824][ T5922] usb 5-1: config 0 descriptor??
[  203.268923][ T5922] redrat3 5-1:0.83: Couldn't find all endpoints
[  203.448974][ T5922] usb 5-1: USB disconnect, device number 8
[  203.941678][ T9833] ubi31: attaching mtd0
[  203.966569][ T9833] ubi31: scanning is finished
[  203.968666][ T9833] ubi31: empty MTD device detected
[  204.205443][ T9833] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  204.208155][ T9833] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  204.210574][ T9833] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  204.212881][ T9833] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  204.215396][ T9833] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  204.218164][ T9833] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  204.222265][ T9833] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3499336330
[  204.226359][ T9833] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  204.231727][ T9836] ubi31: background thread "ubi_bgt31d" started, PID 9836
[  204.962982][ T9852] loop2: detected capacity change from 0 to 32768
[  204.981928][ T9852] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.080129][ T9852] XFS (loop2): Ending clean mount
[  205.230425][ T5857] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.567901][ T9866] loop5: detected capacity change from 0 to 32768
[  205.640852][ T9866] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  205.670281][ T9866] XFS (loop5): Ending clean mount
[  205.681556][ T9866] XFS (loop5): Quotacheck needed: Please wait.
[  205.734323][ T9866] XFS (loop5): Quotacheck: Done.
[  205.807323][ T9893] loop2: detected capacity change from 0 to 1024
[  205.824064][ T9893] hfsplus: bad catalog entry type
[  205.849478][   T36] hfsplus: b-tree write err: -5, ino 4
[  205.852286][ T9866] XFS (loop5): User initiated shutdown received.
[  205.855453][ T9866] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  205.862108][ T9866] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  205.886239][ T8090] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.243840][ T9914] loop5: detected capacity change from 0 to 256
[  206.250113][ T9914] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  206.265378][ T9914] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  206.273041][ T9914] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  206.428789][  T793] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  206.585736][  T793] usb 5-1: config 0 has an invalid interface number: 98 but max is 0
[  206.589570][  T793] usb 5-1: config 0 has no interface number 0
[  206.594192][  T793] usb 5-1: config 0 interface 98 has no altsetting 0
[  206.602942][  T793] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  206.616963][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.622594][  T793] usb 5-1: Product: syz
[  206.625442][  T793] usb 5-1: Manufacturer: syz
[  206.630791][  T793] usb 5-1: SerialNumber: syz
[  206.640204][  T793] usb 5-1: config 0 descriptor??
[  206.866180][  T793] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  207.047496][ T9928] loop5: detected capacity change from 0 to 40427
[  207.051058][ T9928] f2fs: Unknown parameter 'aCJiOv3s'
[  207.330588][ T5922] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  207.517652][  T793] usb 5-1: reset high-speed USB device number 9 using dummy_hcd
[  207.563662][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.599245][ T5922] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  207.602813][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.605885][ T5922] usb 3-1: Product: syz
[  207.607490][ T5922] usb 3-1: Manufacturer: syz
[  207.614975][ T5922] usb 3-1: SerialNumber: syz
[  207.632789][ T5922] usb 3-1: config 0 descriptor??
[  207.757204][ T5922] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  207.941811][ T5922] usb 3-1: USB disconnect, device number 22
[  207.948109][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.960505][  T793] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware
[  207.963858][  T793] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  207.998991][ T5908] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  208.009060][ T5908] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  208.161479][  T793] usb 5-1: USB disconnect, device number 9
[  209.010690][ T9947] loop5: detected capacity change from 0 to 32768
[  209.043735][ T9947] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  209.043735][ T9947] 
[  209.053803][ T9947] ERROR: (device loop5): remounting filesystem as read-only
[  209.057177][ T9947] ialloc: diAlloc returned -5!
[  209.067708][ T9947] ERROR: (device loop5): dbAllocAG: unable to allocate blocks
[  209.067708][ T9947] 
[  209.073409][ T9947] ERROR: (device loop5): dbDiscardAG: -EIO
[  209.073409][ T9947] 
[  209.215660][ T9962] loop4: detected capacity change from 0 to 32768
[  209.251332][ T9962] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  209.251332][ T9962] members_v2 (size 152):
[  209.251332][ T9962] Device:                        0
[  209.251332][ T9962]   Label:                       (none)
[  209.251332][ T9962]   UUID:                        7af6772b-00de-4159-84cd-1faead7f0000
[  209.251332][ T9962]   Size:                        0
[  209.251332][ T9962]   read errors:                 0
[  209.251332][ T9962]   write errors:                0
[  209.251332][ T9962]   checksum errors:             0
[  209.251332][ T9962]   seqread iops:                0
[  209.251332][ T9962]   seqwrite iops:               0
[  209.251332][ T9962]   randread iops:               0
[  209.251332][ T9962]   randwrite iops:              0
[  209.251332][ T9962]   Bucket size:                 131072
[  209.251332][ T9962]   First bucket:                0
[  209.251332][ T9962]   Buckets:                     0
[  209.251332][ T9962]   Last mount:                  1714681267
[  209.251332][ T9962]   Last superblock write:       83886122
[  209.251332][ T9962]   State:                       rw
[  209.251332][ T9962]   Data allowed:                journal,btree,user
[  209.251332][ T9962]   Has data:                    (none)
[  209.251332][ T9962]   Btree allocated bitmap blocksize:256
[  209.251332][ T9962]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  209.251332][ T9962]   Durability:   
[  209.251497][ T9962] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  209.697327][ T9980] loop2: detected capacity change from 0 to 512
[  209.700655][ T9980] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  209.719830][ T9980] EXT4-fs (loop2): 1 truncate cleaned up
[  209.722571][ T9980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.792849][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.867467][ T9986] loop2: detected capacity change from 0 to 128
[  209.891792][ T9986] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  209.895351][ T9986] hpfs: filesystem error: improperly stopped
[  209.897577][ T9986] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  209.908904][ T9988] loop4: detected capacity change from 0 to 1024
[  209.920038][ T9986] hpfs: You really don't want any checks? You are crazy...
[  209.928960][ T9986] hpfs: hpfs_map_sector(): read error
[  209.938640][ T9986] hpfs: code page support is disabled
[  209.945594][ T9986] hpfs: hpfs_map_4sectors(): unaligned read
[  209.947977][ T9986] hpfs: hpfs_map_4sectors(): unaligned read
[  209.962864][ T9986] hpfs: filesystem error: unable to find root dir
[  209.977563][ T9988] hfsplus: catalog searching failed
[  209.978134][   T33] audit: type=1800 audit(1757604408.710:48): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1538" name="file0" dev="loop4" ino=1 res=0 errno=0
[  210.056890][ T9978] loop5: detected capacity change from 0 to 40427
[  210.068877][ T9978] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  210.071940][ T9978] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  210.090240][ T9978] F2FS-fs (loop5): invalid crc value
[  210.195375][ T9978] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.204278][ T9978] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  210.207010][ T9978] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  210.250601][ T9978] syz.5.1533: attempt to access beyond end of device
[  210.250601][ T9978] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  210.411975][T10006] loop2: detected capacity change from 0 to 128
[  210.781822][T10019] loop5: detected capacity change from 0 to 2048
[  210.832700][ T6719] Alternate GPT is invalid, using primary GPT.
[  210.835410][ T6719]  loop5: p2 p3 p7
[  210.858928][T10019] Alternate GPT is invalid, using primary GPT.
[  210.861189][T10019]  loop5: p2 p3 p7
[  211.038246][T10029] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  211.048060][T10029] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  211.076494][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  211.087501][ T6719] udevd[6719]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  211.091392][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  211.132008][T10029] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  211.135984][T10029] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  211.148121][T10029] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  211.174967][T10029] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  211.177372][T10029] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  211.243510][T10029] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  211.248070][T10029] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  211.251410][T10029] CPU: 0 UID: 0 PID: 10029 Comm: syz.5.1554 Not tainted syzkaller #0 PREEMPT(full) 
[  211.255888][T10029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.259770][T10029] RIP: 0010:klist_remove+0x14a/0x340
[  211.261850][T10029] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 a9 d9 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8a d9 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  211.269177][T10029] RSP: 0018:ffffc9000413f0e0 EFLAGS: 00010202
[  211.271571][T10029] RAX: 000000000000000b RBX: ffff88801fa5b980 RCX: 0000000000000000
[  211.274605][T10029] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  211.277703][T10029] RBP: ffffc9000413f1e0 R08: ffffffff8f8a1883 R09: 1ffffffff1f14310
[  211.280741][T10029] R10: dffffc0000000000 R11: fffffbfff1f14311 R12: 0000000000000000
[  211.283781][T10029] R13: 1ffff110223ed20c R14: ffff888111f69060 R15: dffffc0000000000
[  211.286829][T10029] FS:  00007fd666fde6c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  211.290190][T10029] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.292739][T10029] CR2: 00007f470ed96fc8 CR3: 0000000120294000 CR4: 00000000000006f0
[  211.295806][T10029] Call Trace:
[  211.297107][T10029]  <TASK>
[  211.298242][T10029]  ? __pfx_klist_remove+0x10/0x10
[  211.300296][T10029]  ? __pfx_kobject_move+0x10/0x10
[  211.302226][T10029]  ? do_raw_spin_unlock+0x4d/0x240
[  211.304242][T10029]  ? get_device_parent+0x366/0x3a0
[  211.306195][T10029]  device_move+0x193/0x700
[  211.307918][T10029]  hci_conn_del_sysfs+0xb8/0x170
[  211.309819][T10029]  hci_conn_del+0xc33/0x11b0
[  211.311604][T10029]  ? hci_abort_conn_sync+0x24e/0xe30
[  211.313630][T10029]  hci_abort_conn_sync+0x658/0xe30
[  211.315622][T10029]  ? __lock_acquire+0xab9/0xd20
[  211.317513][T10029]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  211.319629][T10029]  ? hci_disconnect_all_sync+0x2e/0x350
[  211.321731][T10029]  ? hci_disconnect_all_sync+0x2e/0x350
[  211.323874][T10029]  ? hci_disconnect_all_sync+0x2e/0x350
[  211.326031][T10029]  hci_disconnect_all_sync+0x1b5/0x350
[  211.328115][T10029]  hci_suspend_sync+0x3fc/0xc60
[  211.329959][T10029]  ? __pfx___mutex_lock+0x10/0x10
[  211.331900][T10029]  ? enable_work+0x258/0x2c0
[  211.333661][T10029]  ? __pfx_hci_suspend_sync+0x10/0x10
[  211.335681][T10029]  ? mgmt_pending_find+0x152/0x170
[  211.337619][T10029]  ? hci_cmd_sync_cancel_sync+0xc9/0x190
[  211.339728][T10029]  hci_suspend_dev+0x28d/0x4d0
[  211.341589][T10029]  ? __pfx_hci_suspend_dev+0x10/0x10
[  211.343598][T10029]  hci_suspend_notifier+0xf2/0x290
[  211.345535][T10029]  notifier_call_chain+0x1b6/0x3e0
[  211.347476][T10029]  blocking_notifier_call_chain_robust+0x85/0x100
[  211.349868][T10029]  pm_notifier_call_chain_robust+0x2c/0x60
[  211.352123][T10029]  snapshot_open+0x19c/0x280
[  211.353954][T10029]  ? __pfx_snapshot_open+0x10/0x10
[  211.355958][T10029]  misc_open+0x2bc/0x330
[  211.357625][T10029]  chrdev_open+0x4cc/0x5e0
[  211.359361][T10029]  ? __pfx_chrdev_open+0x10/0x10
[  211.361266][T10029]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  211.363641][T10029]  ? __pfx_chrdev_open+0x10/0x10
[  211.365534][T10029]  do_dentry_open+0x953/0x13f0
[  211.367366][T10029]  vfs_open+0x3b/0x340
[  211.368933][T10029]  ? path_openat+0x2ecd/0x3830
[  211.370755][T10029]  path_openat+0x2ee5/0x3830
[  211.372493][T10029]  ? arch_stack_walk+0xfc/0x150
[  211.374407][T10029]  ? stack_depot_save_flags+0x40/0x860
[  211.376504][T10029]  ? __pfx_path_openat+0x10/0x10
[  211.378353][T10029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.380663][T10029]  do_filp_open+0x1fa/0x410
[  211.382422][T10029]  ? __lock_acquire+0xab9/0xd20
[  211.384267][T10029]  ? __pfx_do_filp_open+0x10/0x10
[  211.386178][T10029]  ? _raw_spin_unlock+0x28/0x50
[  211.388056][T10029]  ? alloc_fd+0x64c/0x6c0
[  211.389787][T10029]  do_sys_openat2+0x121/0x1c0
[  211.391638][T10029]  ? __se_sys_futex+0x36f/0x400
[  211.393540][T10029]  ? __pfx_do_sys_openat2+0x10/0x10
[  211.395576][T10029]  ? __fget_files+0x2a/0x420
[  211.397399][T10029]  ? rcu_is_watching+0x15/0xb0
[  211.399198][T10029]  __x64_sys_openat+0x138/0x170
[  211.401128][T10029]  do_syscall_64+0xfa/0x3b0
[  211.402899][T10029]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.404924][T10029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.407294][T10029]  ? exc_page_fault+0x9f/0xf0
[  211.409128][T10029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.411438][T10029] RIP: 0033:0x7fd66618eba9
[  211.413192][T10029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.420612][T10029] RSP: 002b:00007fd666fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  211.423772][T10029] RAX: ffffffffffffffda RBX: 00007fd6663d5fa0 RCX: 00007fd66618eba9
[  211.426818][T10029] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  211.429846][T10029] RBP: 00007fd666211e19 R08: 0000000000000000 R09: 0000000000000000
[  211.432929][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.435941][T10029] R13: 00007fd6663d6038 R14: 00007fd6663d5fa0 R15: 00007ffc319ecd68
[  211.439018][T10029]  </TASK>
[  211.440193][T10029] Modules linked in:
[  211.443172][T10029] ---[ end trace 0000000000000000 ]---
[  211.448859][T10029] RIP: 0010:klist_remove+0x14a/0x340
[  211.451141][T10029] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 a9 d9 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8a d9 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  211.464135][T10029] RSP: 0018:ffffc9000413f0e0 EFLAGS: 00010202
[  211.473435][T10029] RAX: 000000000000000b RBX: ffff88801fa5b980 RCX: 0000000000000000
[  211.484175][T10029] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  211.492186][T10029] RBP: ffffc9000413f1e0 R08: ffffffff8f8a1883 R09: 1ffffffff1f14310
[  211.500871][T10029] R10: dffffc0000000000 R11: fffffbfff1f14311 R12: 0000000000000000
[  211.509117][T10029] R13: 1ffff110223ed20c R14: ffff888111f69060 R15: dffffc0000000000
[  211.520886][T10029] FS:  00007fd666fde6c0(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  211.531416][T10042] vim2m vim2m.0: vidioc_s_fmt queue busy
[  211.542476][T10029] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  211.553672][T10029] CR2: 0000000000000008 CR3: 0000000120294000 CR4: 00000000000006f0
[  211.563560][T10029] Kernel panic - not syncing: Fatal exception
[  211.566735][T10029] Kernel Offset: disabled
[  211.568491][T10029] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:26:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000b936 RDI=000000000000b937 RBP=00000000000003f8 RSP=ffffc9000413e870
R8 =ffff888106b90237 R9 =1ffff11020d72046 R10=dffffc0000000000 R11=ffffffff854f7000
R12=dffffc0000000000 R13=ffffffff99b008d9 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f707c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd666fde6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f470ed96fc8 CR3=0000000120294000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa14ae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=5f07ead9d44f0300 RBX=0000000000000038 RCX=5f07ead9d44f0300 RDX=0000000000000000
RSI=ffffffff8be33960 RDI=ffffffff8be33920 RBP=ffffc90003affc30 RSP=ffffc90003affa10
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003affaa0 R11=fffff5200075ff5b
R12=0000000000000002 R13=dffffc0000000000 R14=ffffc90003affaa0 R15=000020000006e5c0
RIP=ffffffff81bfb0b0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f470edb86c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000006e030 CR3=000000012037e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd6663a7498 00007fd6663a7470 XMM03=00007fd6663a74a8 00007fd6663a74a0
XMM04=00007fd666f0d100 00007fd6663a7460 XMM05=00007fd6663a7478 00007fd6663a74c0
XMM06=00007fd6663a74b8 00007fd6663a74b0 XMM07=00007fd6663a74a8 00007fd6663a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd666212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
