last executing test programs:

1m25.569971207s ago: executing program 2 (id=41):
syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0)

1m24.361289264s ago: executing program 2 (id=59):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6e}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0)

1m24.311874569s ago: executing program 2 (id=62):
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
pipe(&(0x7f0000000280))
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x1ac6, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0)
shutdown(r0, 0x1)

1m23.438601326s ago: executing program 2 (id=67):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m23.438457396s ago: executing program 2 (id=68):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[@ANYRES32=0x0, @ANYBLOB="f1d6cc6bbdfd919d87552d77292d0a04813522513669fabed0c433f5fb894bbf30779a615df7d1f91d57030ffe12b8237547cc0e72669c81d2fd141dfe1d09403dae9f30829f539c36b88d03a40ed52ba2a3d5de08ff5d", @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES32], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPbxxzsww4Uki8ceD05Ab+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6e3Br8=")
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000000900)={{0x80}})

1m23.140175162s ago: executing program 2 (id=72):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1'])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0)
read(r4, &(0x7f0000000800), 0x400)
write(r4, &(0x7f0000000900)="000000000000000001000000000000002400000001000000ffffff7f0000000000000000110000", 0x27)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0xfffffffd, 0xb, 0xa4b3, 0x3ff, 0x109000000, 0x48, 0xffffffffffffc474, 0x9, 0x12, 0x7, 0xfffffff8, 0x2})
r5 = syz_open_dev$loop(0x0, 0x5, 0x101000)
ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000140))

1m23.053985566s ago: executing program 32 (id=72):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1'])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0)
read(r4, &(0x7f0000000800), 0x400)
write(r4, &(0x7f0000000900)="000000000000000001000000000000002400000001000000ffffff7f0000000000000000110000", 0x27)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0xfffffffd, 0xb, 0xa4b3, 0x3ff, 0x109000000, 0x48, 0xffffffffffffc474, 0x9, 0x12, 0x7, 0xfffffff8, 0x2})
r5 = syz_open_dev$loop(0x0, 0x5, 0x101000)
ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000140))

55.069408887s ago: executing program 0 (id=351):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='100', 0x3)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat(r1, &(0x7f0000001000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0)
unshare(0x40000000)

54.847722076s ago: executing program 0 (id=354):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r2, 0x3}, 0x20)

54.767566949s ago: executing program 0 (id=355):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x1)
listen(r0, 0x4000000)

54.631075197s ago: executing program 0 (id=356):
syz_usb_connect$uac3(0x3, 0x92, &(0x7f00000006c0)=ANY=[@ANYBLOB="120101020000000882058d00400001020301090280000301004002080b02fe002030000904000000010130000a2401040a002e2f00000904010000010230000904000101010230000924020206000d00020924020104030607c00905010940000303100a252508000000030b00090402"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})

53.398124555s ago: executing program 0 (id=373):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)

53.397728002s ago: executing program 0 (id=374):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0x0, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8800)

38.218895479s ago: executing program 33 (id=374):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0x0, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8800)

14.841006254s ago: executing program 3 (id=805):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x413}}}, 0x7)

14.297984602s ago: executing program 3 (id=814):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x802)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xfffffffb], [0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffdf7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xfdffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x81, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x3388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x8, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0x4)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x4, 0x6, 0xe, 0xcde300000000000, 0xfffffffffffffff9, 0x8, 0xb, 0x1, 0x0, 0x80000000, 0x2})

14.219799428s ago: executing program 3 (id=815):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12"], 0x50)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], &(0x7f00000003c0), 0x0, 0x1, 0x1}}, 0x40)

14.219541271s ago: executing program 3 (id=817):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

14.161791212s ago: executing program 3 (id=819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f338ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}, {&(0x7f0000000380)='\vu', 0x2}], 0x2}, 0x30008b08)

13.920023913s ago: executing program 3 (id=826):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

13.8857616s ago: executing program 34 (id=826):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

5.7784532s ago: executing program 1 (id=929):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000600000000000000030000930100000003000000b70b0000ffffff7f04000000050001000500000004000000010000000101000000615f5f2e"], &(0x7f0000000f40)=""/4089, 0x4e, 0xff9, 0x1, 0x3}, 0x28)

5.700298248s ago: executing program 1 (id=931):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ppoll(&(0x7f0000000140)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0)

4.027735843s ago: executing program 1 (id=950):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x12d})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x1, 0x18100})
mremap(&(0x7f00002b7000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00003e7000/0x1000)=nil)

3.110027869s ago: executing program 1 (id=961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

3.059066733s ago: executing program 1 (id=962):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000180)="a97ebe", 0x3)

1.999854087s ago: executing program 5 (id=979):
r0 = fanotify_init(0x200, 0x0)
r1 = memfd_create(&(0x7f0000000800)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\x14\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x1a\x9a\xd1\xbd\x1a9\xeb\xf9\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7E\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX\x90IT\x9f\xb2\xf4\xc9(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#s\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17G\x1eL\x9aX!\r\xc9\xd2DH\xe3|\xb4\x84Z\xc6\xe1\xd1\xa1\xa7|\x11\xe8\'2\x82|in\"\xa6T\x8e\xae\x8b\xef\x9c\xac\xe4\x06\xf3(', 0x1)
r2 = dup(r1)
fanotify_mark(r0, 0x1, 0x4800000b, r2, 0x0)
r3 = dup(r2)
write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000010000002003e00cd000000c9030000000000004000000000000000ea0200000000000000000100050038000f"], 0x178)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.999710437s ago: executing program 5 (id=980):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000001e00010000000000040000000a000000", @ANYRES32, @ANYBLOB="00000800080001"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)

1.930354283s ago: executing program 5 (id=981):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, '\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x4, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0xa, 0x4, 0x10000, 0x4, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x5, 0x1, 0x8, 0x1, 0x4, 0x401, 0x8000, 0x421, 0xffff, 0x57bf4b04, 0x4, 0x4, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x4, 0x401, 0x5, 0x400000401, 0x1ff, 0x10000, 0xee, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x2, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x77, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x4, 0x8000, 0x100080, 0x10007f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0xa, 0xb, 0x7ffd, 0x0, 0x4, 0x200005e997b8e, 0x1, 0x0, 0x6, 0x4, 0x100, 0x1000000006, 0x6, 0x6, 0x0, 0xffffffffffffff95, 0x80000000000a, 0x108000001, 0xcc7c, 0x8, 0xffffffffffffffff, 0x100000000000006, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x4, 0x7, 0x5, 0xa, 0x1, 0xe1, 0x8000, 0x20001, 0x5, 0xfff, 0x8, 0x80]})

1.930172252s ago: executing program 5 (id=982):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace_dev_match', 0x20000, 0x130)
read$char_usb(r0, &(0x7f0000002780)=""/138, 0x8a)

1.870286276s ago: executing program 5 (id=983):
link(&(0x7f0000000000)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f00000001c0)={0x4800, 0x0, 0x4, 0x0, 0xb9a9, 0x9ce})

1.870112002s ago: executing program 5 (id=984):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0)

832.419241ms ago: executing program 4 (id=987):
mkdir(&(0x7f0000000000)='127.0.0.1:/\x00', 0x1bf)

780.454209ms ago: executing program 4 (id=988):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0x605, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1a000, 0xa, 0x7fffffff, 0x0, 0x8}, 0x7, 0x0, 0x73, 0x80000000, 0xe, 0x1d, 0x6, 0x19, 0x2, 0xfffffffe, {0x4, 0x9, 0x10, 0x6, 0x4, 0x80000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

780.305736ms ago: executing program 4 (id=989):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x204}}, 0x10)

720.69055ms ago: executing program 4 (id=990):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0x2, "fa02790d2a69a2610f0200000000000000110001000000c642000000677c00", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0)

720.270031ms ago: executing program 4 (id=991):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000080)='./file1\x00', 0x100000c, &(0x7f00000000c0)=ANY=[], 0xfd, 0x105e2, &(0x7f0000010880)="$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")
setxattr$security_ima(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200), &(0x7f00000000c0)=ANY=[], 0x700, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)

258.893062ms ago: executing program 4 (id=992):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200), 0x0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1\n', 0x2)

0s ago: executing program 1 (id=993):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$loop(0x0, 0x2, 0x2001)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
sendmmsg$inet(r0, &(0x7f0000002500), 0x4000000000000e7, 0x2400c8c4)

kernel console output (not intermixed with test programs):

ice found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[   84.086951][    T9] usb 4-1: too many configurations: 102, using maximum allowed: 8
[   84.094464][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[   84.094500][    T9] usb 4-1: config 1 has no interface number 0
[   84.099850][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[   84.099882][    T9] usb 4-1: config 1 has no interface number 0
[   84.105027][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[   84.105208][    T9] usb 4-1: config 1 has no interface number 0
[   84.113082][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[   84.113117][    T9] usb 4-1: config 1 has no interface number 0
[   84.119962][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[   84.119997][    T9] usb 4-1: config 1 has no interface number 0
[   84.127247][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[   84.127282][    T9] usb 4-1: config 1 has no interface number 0
[   84.132983][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[   84.133017][    T9] usb 4-1: config 1 has no interface number 0
[   84.138582][    T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[   84.138617][    T9] usb 4-1: config 1 has no interface number 0
[   84.147610][    T9] usb 4-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211
[   84.151098][    T9] usb 4-1: Product: syz
[   84.152923][    T9] usb 4-1: Manufacturer: syz
[   84.154630][    T9] usb 4-1: SerialNumber: syz
[   84.163165][    T9] usb 4-1: 3:0 : does not exist
[   84.167727][    T9] usb 4-1: 3:0 : does not exist
[   84.366358][   T33] usb 4-1: USB disconnect, device number 9
[   84.556268][ T5647] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   84.707242][ T5647] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   84.710270][ T5647] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.710289][ T5647] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   84.715720][ T5647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[   84.715738][ T5647] usb 2-1: SerialNumber: syz
[   84.913390][ T6797] loop3: detected capacity change from 0 to 256
[   84.916723][ T6797] exfat: Deprecated parameter 'utf8'
[   84.921066][ T6797] exfat: Deprecated parameter 'namecase'
[   84.923615][ T6797] exfat: Deprecated parameter 'namecase'
[   84.926511][ T6797] exfat: Deprecated parameter 'utf8'
[   84.945953][ T6797] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[   84.948326][ T5647] usb 2-1: 0:2 : does not exist
[   84.953737][ T6797] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[   84.968176][ T6797] exFAT-fs (loop3): start_clu is invalid cluster(0x400)
[   84.992328][ T5647] usb 2-1: USB disconnect, device number 10
[   85.027301][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.029007][ T6799] loop3: detected capacity change from 0 to 512
[   85.039920][ T6799] EXT4-fs (loop3): orphan cleanup on readonly fs
[   85.040175][ T6799] __quota_error: 15 callbacks suppressed
[   85.040182][ T6799] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[   85.041520][ T6799] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   85.052563][ T6799] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   85.072087][ T6799] EXT4-fs (loop3): 1 orphan inode deleted
[   85.074504][ T6799] EXT4-fs (loop3): 1 truncate cleaned up
[   85.080886][ T6799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.110960][ T5892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.245313][ T6806] loop3: detected capacity change from 0 to 64
[   85.260680][ T6806] Unable to read inode block
[   85.575867][ T6075] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[   85.752321][ T6816] loop1: detected capacity change from 0 to 32768
[   85.756613][ T6075] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[   85.761303][ T6075] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.771286][ T6075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.771337][ T6075] usb 4-1: Product: syz
[   85.771388][ T6075] usb 4-1: Manufacturer: syz
[   85.771417][ T6075] usb 4-1: SerialNumber: syz
[   85.794890][ T6075] usb 4-1: config 0 descriptor??
[   85.807857][ T6075] pegasus_notetaker 4-1:0.0: Invalid number of endpoints
[   85.807910][ T6075] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22
[   85.827092][ T6816] JBD2: Ignoring recovery information on journal
[   85.869143][ T6816] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   85.926200][ T5602] ocfs2: Unmounting device (7,1) on (node local)
[   86.011551][ T6075] usb 4-1: USB disconnect, device number 10
[   86.095908][ T6824] loop1: detected capacity change from 0 to 164
[   86.117949][ T6824] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   86.302912][ T6830] overlayfs: metacopy with no lower data found - abort lookup (/file2)
[   87.015312][   T33] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[   87.167709][   T33] usb 4-1: not running at top speed; connect to a high speed hub
[   87.167782][   T33] usb 4-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=bc.66
[   87.174923][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.174998][   T33] usb 4-1: Product: syz
[   87.175048][   T33] usb 4-1: Manufacturer: syz
[   87.175143][   T33] usb 4-1: SerialNumber: syz
[   87.383379][ T6854] loop1: detected capacity change from 0 to 1024
[   87.384231][ T6854] EXT4-fs: Ignoring removed bh option
[   87.402059][   T33] gspca_main: 045e:02ae too many config
[   87.403291][   T33] usb 4-1: USB disconnect, device number 11
[   87.428666][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.450080][ T6854] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   87.580816][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.811995][ T6866] loop1: detected capacity change from 0 to 512
[   87.832197][ T6866] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   87.836273][ T6866] FAT-fs (loop1): Filesystem has been set read-only
[   87.839385][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.842624][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.845993][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.850838][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.853835][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.856880][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.860273][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.863161][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.866872][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.871396][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.874344][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.877412][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.880239][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.883564][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.887358][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.891424][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   87.894271][ T6866] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   87.897953][ T6866] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[   88.210304][ T6888] FAULT_INJECTION: forcing a failure.
[   88.210304][ T6888] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   88.215822][ T6888] CPU: 0 UID: 0 PID: 6888 Comm: syz.3.415 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   88.215852][ T6888] Tainted: [L]=SOFTLOCKUP
[   88.215857][ T6888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.215863][ T6888] Call Trace:
[   88.215866][ T6888]  <TASK>
[   88.215871][ T6888]  dump_stack_lvl+0xe8/0x150
[   88.215889][ T6888]  should_fail_ex+0x410/0x560
[   88.215906][ T6888]  prepare_alloc_pages+0x223/0x600
[   88.215919][ T6888]  __alloc_frozen_pages_noprof+0x185/0x5a0
[   88.215930][ T6888]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   88.215940][ T6888]  ? __pfx_policy_nodemask+0x10/0x10
[   88.215956][ T6888]  alloc_pages_mpol+0x21e/0x390
[   88.215968][ T6888]  folio_alloc_mpol_noprof+0x39/0x160
[   88.215978][ T6888]  shmem_alloc_and_add_folio+0x43e/0xf60
[   88.215991][ T6888]  ? filemap_get_entry+0xcd/0x3f0
[   88.216006][ T6888]  ? __pfx_filemap_get_entry+0x10/0x10
[   88.216016][ T6888]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   88.216028][ T6888]  ? shmem_allowable_huge_orders+0x325/0x6c0
[   88.216042][ T6888]  shmem_get_folio_gfp+0x5da/0x16d0
[   88.216058][ T6888]  shmem_fallocate+0x996/0xf10
[   88.216107][ T6888]  ? __pfx_shmem_fallocate+0x10/0x10
[   88.216126][ T6888]  ? lock_acquire+0x115/0x350
[   88.216143][ T6888]  vfs_fallocate+0x65a/0x7e0
[   88.216150][ T6888]  ? __fget_files+0x2a/0x420
[   88.216162][ T6888]  ? __pfx_vfs_fallocate+0x10/0x10
[   88.216173][ T6888]  __x64_sys_fallocate+0xbf/0x110
[   88.216181][ T6888]  do_syscall_64+0x166/0x520
[   88.216190][ T6888]  ? trace_irq_disable+0x3b/0x140
[   88.216197][ T6888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.216206][ T6888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.216214][ T6888] RIP: 0033:0x7f78cf99e1d9
[   88.216223][ T6888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.216229][ T6888] RSP: 002b:00007f78d0810028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   88.216239][ T6888] RAX: ffffffffffffffda RBX: 00007f78cfc25fa0 RCX: 00007f78cf99e1d9
[   88.216245][ T6888] RDX: 0000000000800657 RSI: 0000000000000000 RDI: 0000000000000004
[   88.216249][ T6888] RBP: 00007f78cfa35888 R08: 0000000000000000 R09: 0000000000000000
[   88.216254][ T6888] R10: 00000000040000b7 R11: 0000000000000246 R12: 0000000000000000
[   88.216258][ T6888] R13: 00007f78cfc26038 R14: 00007f78cfc25fa0 R15: 00007ffe4ddee9a8
[   88.216271][ T6888]  </TASK>
[   88.315374][   T33] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   88.360354][ T6890] loop3: detected capacity change from 0 to 1024
[   88.381519][ T6890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   88.387197][ T6890] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.408975][ T5892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   88.475892][   T33] usb 2-1: Using ep0 maxpacket: 8
[   88.476537][   T33] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[   88.480542][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.480554][   T33] usb 2-1: Product: syz
[   88.480560][   T33] usb 2-1: Manufacturer: syz
[   88.480566][   T33] usb 2-1: SerialNumber: syz
[   88.486866][   T33] usb 2-1: config 0 descriptor??
[   88.488633][   T33] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[   88.488651][   T33] pctv452e: pctv452e_power_ctrl: 1
[   88.488651][   T33] 
[   88.488672][   T33] usb 2-1: selecting invalid altsetting 3
[   88.488678][   T33] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[   88.488678][   T33] 
[   88.488684][   T33] dvb-usb: bulk message failed: -22 (5/0)
[   88.494423][   T34] audit: type=1326 audit(1791715823.247:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.3.418" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78cf99e1d9 code=0x0
[   88.503107][   T33] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   88.505630][   T33] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[   88.505654][   T33] usb 2-1: media controller created
[   88.513244][   T33] dvb-usb: bulk message failed: -22 (8/0)
[   88.513260][   T33] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[   88.513312][   T33] dvb-usb: MAC address reading failed.
[   88.533892][   T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   88.558770][   T33] DVB: Unable to find symbol stb0899_attach()
[   88.558815][   T33] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[   88.600027][   T33] rc_core: IR keymap rc-tt-1500 not found
[   88.600134][   T33] Registered IR keymap rc-empty
[   88.602003][   T33] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[   88.603997][   T33] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9
[   88.606454][   T33] dvb-usb: schedule remote query interval to 100 msecs.
[   88.606471][   T33] pctv452e: pctv452e_power_ctrl: 0
[   88.606471][   T33] 
[   88.606479][   T33] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[   88.697668][   T33] usb 2-1: USB disconnect, device number 11
[   88.757969][   T33] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[   89.301502][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'.
[   89.359662][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'.
[   89.570159][ T6916] ip_tables: iptables: counters copy to user failed while replacing table
[   90.689176][ T6932] loop3: detected capacity change from 0 to 128
[   90.741026][ T6932] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.748750][ T6932] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.843495][ T5892] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.404805][ T6941] loop1: detected capacity change from 0 to 1024
[   91.530924][ T6943] loop3: detected capacity change from 0 to 164
[   91.619520][ T6948] FAULT_INJECTION: forcing a failure.
[   91.619520][ T6948] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   91.619636][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.1.437 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   91.619655][ T6948] Tainted: [L]=SOFTLOCKUP
[   91.619661][ T6948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.619670][ T6948] Call Trace:
[   91.619676][ T6948]  <TASK>
[   91.619682][ T6948]  dump_stack_lvl+0xe8/0x150
[   91.619709][ T6948]  should_fail_ex+0x410/0x560
[   91.619735][ T6948]  _copy_from_user+0x2d/0xb0
[   91.619754][ T6948]  bpf_obj_get_info_by_fd+0x434/0x3530
[   91.619776][ T6948]  ? lock_acquire+0x115/0x350
[   91.619789][ T6948]  ? futex_unqueue+0x22/0x240
[   91.619808][ T6948]  ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10
[   91.619823][ T6948]  ? futex_unqueue+0x22/0x240
[   91.619839][ T6948]  ? __lock_acquire+0x6df/0x2e50
[   91.619853][ T6948]  ? __futex_wait+0x358/0x400
[   91.619877][ T6948]  ? __pfx___futex_wait+0x10/0x10
[   91.619916][ T6948]  ? bpf_lsm_bpf+0x9/0x20
[   91.619933][ T6948]  ? security_bpf+0x7e/0x2d0
[   91.619949][ T6948]  __sys_bpf+0xa50/0xd90
[   91.619968][ T6948]  ? __pfx___sys_bpf+0x10/0x10
[   91.619985][ T6948]  ? do_futex+0x3e7/0x4e0
[   91.620016][ T6948]  ? ksys_write+0x242/0x270
[   91.620071][ T6948]  ? rcu_is_watching+0x16/0xb0
[   91.620093][ T6948]  __x64_sys_bpf+0xba/0xd0
[   91.620109][ T6948]  do_syscall_64+0x166/0x520
[   91.620125][ T6948]  ? trace_irq_disable+0x3b/0x140
[   91.620138][ T6948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.620156][ T6948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.620169][ T6948] RIP: 0033:0x7ff9d0d9e1d9
[   91.620181][ T6948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.620192][ T6948] RSP: 002b:00007ff9d1bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   91.620209][ T6948] RAX: ffffffffffffffda RBX: 00007ff9d1025fa0 RCX: 00007ff9d0d9e1d9
[   91.620219][ T6948] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000000f
[   91.620230][ T6948] RBP: 00007ff9d0e35888 R08: 0000000000000000 R09: 0000000000000000
[   91.620238][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.620247][ T6948] R13: 00007ff9d1026038 R14: 00007ff9d1025fa0 R15: 00007fff21f747d8
[   91.620268][ T6948]  </TASK>
[   91.681521][ T6950] loop3: detected capacity change from 0 to 256
[   91.685563][ T6950] exfat: Deprecated parameter 'utf8'
[   91.718444][ T6950] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   91.798089][ T6955] loop1: detected capacity change from 0 to 512
[   91.818947][ T6955] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.440: Unrecognised inode hash code 255
[   91.824060][ T6955] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.440: Corrupt directory, running e2fsck is recommended
[   91.855586][ T6955] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   91.858633][ T6955] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.440: corrupted in-inode xattr: invalid ea_ino
[   91.863540][ T6955] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.863914][ T6955] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.440: couldn't read orphan inode 15 (err -117)
[   91.867175][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   91.867186][    C0] EXT4-fs (loop1): initial error at time 1791715826: ext4_iget_extra_inode:5210: inode 15
[   91.867198][    C0] EXT4-fs (loop1): last error at time 1791715826: ext4_iget_extra_inode:5210: inode 15
[   91.881364][ T6955] loop1: lost filesystem error report for type 5 error -117
[   91.899904][ T6955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.941367][ T6955] EXT4-fs error (device loop1): __ext4_remount:6872: comm syz.1.440: Abort forced by user
[   91.947557][ T6955] EXT4-fs (loop1): Remounting filesystem read-only
[   91.951629][ T6955] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   91.956618][ T6955] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #2: comm syz.1.440: directory missing '.'
[   91.991564][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.033748][ T6963] loop3: detected capacity change from 0 to 4096
[   92.071078][ T6965] loop1: detected capacity change from 0 to 512
[   92.075342][ T6966] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.089914][ T6965] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.444: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[   92.089976][ T6965] loop1: lost filesystem error report for type 5 error -117
[   92.105456][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   92.105506][    C1] EXT4-fs (loop1): initial error at time 1791715826: ext4_xattr_inode_iget:473
[   92.105552][    C1] EXT4-fs (loop1): last error at time 1791715826: ext4_xattr_inode_iget:473
[   92.110385][ T6965] EXT4-fs (loop1): 1 orphan inode deleted
[   92.115824][ T6965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.158760][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.216863][ T6969] loop3: detected capacity change from 0 to 4096
[   92.315440][ T6969] ntfs3(loop3): failed to convert "0080" to macromanian
[   92.322913][ T6969] ntfs3(loop3): failed to convert name for inode 1e.
[   92.325041][ T6969] ntfs3(loop3): ino=1f, mi_enum_attr
[   92.333924][ T6969] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   92.457757][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.454'.
[   92.457810][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.3.454'.
[   92.688276][ T6989] loop3: detected capacity change from 0 to 32768
[   92.695549][ T6989] (syz.3.455,6989,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.695716][ T6989] (syz.3.455,6989,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.695902][ T6989] (syz.3.455,6989,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[   92.734338][ T6989] JBD2: Ignoring recovery information on journal
[   92.794599][ T6989] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   92.836679][ T6993] loop1: detected capacity change from 0 to 32768
[   92.866390][ T6993] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   92.905878][ T6989] (syz.3.455,6989,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC.
[   92.926142][ T6989] (syz.3.455,6989,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c
[   92.931366][ T6989] (syz.3.455,6989,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[   92.940075][ T6989] (syz.3.455,6989,0):ocfs2_quota_read:201 ERROR: status = -5
[   92.943372][ T6989] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 1
[   92.947688][ T6989] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   92.952370][ T6989] (syz.3.455,6989,0):ocfs2_acquire_dquot:904 ERROR: status = -5
[   92.966144][ T6989] (syz.3.455,6989,0):ocfs2_mknod:319 ERROR: status = -5
[   92.971237][ T6989] (syz.3.455,6989,0):ocfs2_mknod:513 ERROR: status = -5
[   92.978328][ T6989] (syz.3.455,6989,0):ocfs2_create:685 ERROR: status = -5
[   92.981969][ T5602] ocfs2: Unmounting device (7,1) on (node local)
[   93.062740][ T5892] ocfs2: Unmounting device (7,3) on (node local)
[   93.259288][   T34] audit: type=1400 audit(1791715828.017:29): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=7007 comm="syz.1.462" name="p" offset=33
[   93.281747][ T7010] tmpfs: Bad value for 'mpol'
[   93.326181][ T7012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.455508][ T6075] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   93.565209][ T6404] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   93.609213][ T6075] usb 4-1: unable to get BOS descriptor or descriptor too short
[   93.611846][ T6075] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   93.617624][ T6075] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.620847][ T6075] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   93.625551][ T6075] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   93.629128][ T6075] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   93.629191][ T6075] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   93.629220][ T6075] usb 4-1: config 1 interface 1 has no altsetting 0
[   93.642964][ T6075] usb 4-1: string descriptor 0 read error: -22
[   93.645302][ T6075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.725366][ T6404] usb 2-1: Using ep0 maxpacket: 16
[   93.741327][ T6404] usb 2-1: unable to get BOS descriptor or descriptor too short
[   93.743178][ T6404] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[   93.748106][ T6404] usb 2-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config
[   93.748163][ T6404] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.757569][ T6404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.757637][ T6404] usb 2-1: Product: syz
[   93.757696][ T6404] usb 2-1: Manufacturer: syz
[   93.757707][ T6404] usb 2-1: SerialNumber: syz
[   93.854567][ T6075] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[   94.058621][ T6075] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[   94.061234][ T6075] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[   94.064440][ T6075] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[   94.102964][ T6075] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[   94.114736][ T6075] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[   94.121079][ T6404] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[   94.121149][ T6404] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[   94.144763][ T6075] usb 4-1: USB disconnect, device number 12
[   94.214037][ T6404] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   94.217803][ T6404] usb 2-1: USB disconnect, device number 12
[   94.238493][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[   94.507815][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.777365][ T7028] ip_tables: iptables: counters copy to user failed while replacing table
[   94.807053][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.472'.
[   94.830706][   T34] audit: type=1326 audit(1791715829.587:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.1.473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[   94.839535][   T34] audit: type=1326 audit(1791715829.587:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.1.473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[   94.839677][   T34] audit: type=1326 audit(1791715829.597:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.1.473" exe="/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[   94.839874][   T34] audit: type=1326 audit(1791715829.597:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.1.473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[   94.839912][   T34] audit: type=1326 audit(1791715829.597:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.1.473" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[   94.928386][   T56] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   94.928467][   T56] Bluetooth: hci0: Injecting HCI hardware error event
[   94.940147][   T56] Bluetooth: hci0: hardware error 0x00
[   95.060267][ T7040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   95.060353][ T7040] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.063327][ T7040] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.477: lblock 3 mapped to illegal pblock 3 (length 3)
[   95.064937][ T7040] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   95.064950][ T7040] EXT4-fs (loop1): This should not happen!! Data will be lost
[   95.064950][ T7040] 
[   95.067744][ T7040] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.477: Freeing blocks not in datazone - block = 3, count = 1
[   95.093815][   T94] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm kworker/u10:4: lblock 0 mapped to illegal pblock 0 (length 4)
[   95.098725][   T94] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117
[   95.098742][   T94] EXT4-fs (loop1): This should not happen!! Data will be lost
[   95.098742][   T94] 
[   95.099415][   T94] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:4: lblock 8 mapped to illegal pblock 8 (length 8)
[   95.099736][   T94] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   95.099751][   T94] EXT4-fs (loop1): This should not happen!! Data will be lost
[   95.099751][   T94] 
[   95.100323][ T5602] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[   95.101774][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   95.605362][ T6404] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   95.758227][ T6404] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.00
[   95.760758][ T6404] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.763113][ T6404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.763130][ T6404] usb 4-1: Product: syz
[   95.763139][ T6404] usb 4-1: Manufacturer: syz
[   95.763148][ T6404] usb 4-1: SerialNumber: syz
[   95.861395][ T6404] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[   95.862012][ T6404] gspca_stv06xx: st6422 sensor detected
[   96.319257][ T6404] STV06xx 4-1:1.0: probe with driver STV06xx failed with error -71
[   96.322860][ T6404] usb 4-1: USB disconnect, device number 13
[   97.018552][   T56] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   97.116162][ T5647] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[   97.184670][ T7063] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   97.257615][ T7070] set_capacity_and_notify: 2 callbacks suppressed
[   97.258029][ T7070] loop1: detected capacity change from 0 to 128
[   97.261753][ T7070] FAT-fs (loop1): Directory bread(block 1048) failed
[   97.261785][ T7070] FAT-fs (loop1): Directory bread(block 1049) failed
[   97.261798][ T7070] FAT-fs (loop1): Directory bread(block 1050) failed
[   97.261812][ T7070] FAT-fs (loop1): Directory bread(block 1051) failed
[   97.261826][ T7070] FAT-fs (loop1): Directory bread(block 1052) failed
[   97.261840][ T7070] FAT-fs (loop1): Directory bread(block 1053) failed
[   97.261854][ T7070] FAT-fs (loop1): Directory bread(block 1054) failed
[   97.261867][ T7070] FAT-fs (loop1): Directory bread(block 1055) failed
[   97.277529][ T5647] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   97.281826][ T5647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   97.281916][ T5647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.281967][ T5647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.283783][ T5647] usb 4-1: config 0 descriptor??
[   97.293047][ T7070] FAT-fs (loop1): Directory bread(block 1048) failed
[   97.293070][ T7070] FAT-fs (loop1): Directory bread(block 1049) failed
[   97.492230][ T7074] binder: 7073:7074 ioctl c0306201 200000000080 returned -22
[   97.699845][ T5647] hid_parser_main: 5 callbacks suppressed
[   97.699921][ T5647] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[   97.699989][ T5647] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[   97.700000][ T5647] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[   97.700009][ T5647] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[   97.700018][ T5647] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[   97.700366][ T5647] elan 0003:04F3:0755.0003: failed to start in urb: -90
[   97.703498][ T5647] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[   97.795279][ T6404] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   97.893794][ T5647] usb 4-1: USB disconnect, device number 14
[   97.946337][ T6404] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[   97.947443][ T6404] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   97.947482][ T6404] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[   97.948455][ T6404] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   97.948486][ T6404] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[   97.950594][ T6404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.950610][ T6404] usb 2-1: Product: syz
[   97.950619][ T6404] usb 2-1: Manufacturer: syz
[   97.950628][ T6404] usb 2-1: SerialNumber: syz
[   97.957903][ T6404] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected
[   97.960093][ T6404] ti_usb_3410_5052 2-1:2.0: missing endpoints
[   98.160698][ T5647] usb 2-1: USB disconnect, device number 13
[   98.713793][ T7089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.499'.
[   98.896703][ T6404] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   98.908108][ T7099] loop1: detected capacity change from 0 to 1024
[   98.911406][ T7099] EXT4-fs (loop1): stripe (31) is not aligned with cluster size (16), stripe is disabled
[   98.939339][ T7099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.975800][ T7099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.504: bg 0: block 153: padding at end of block bitmap is not set
[   98.996626][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.045975][ T6404] usb 4-1: Using ep0 maxpacket: 32
[   99.047751][ T6404] usb 4-1: unable to get BOS descriptor or descriptor too short
[   99.047774][ T6404] usb 4-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3
[   99.048611][ T6404] usb 4-1: config 151 has an invalid interface number: 33 but max is 0
[   99.048622][ T6404] usb 4-1: config 151 has no interface number 0
[   99.048633][ T6404] usb 4-1: config 151 interface 33 has no altsetting 0
[   99.050509][ T6404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.050518][ T6404] usb 4-1: Product: syz
[   99.050524][ T6404] usb 4-1: Manufacturer: syz
[   99.050529][ T6404] usb 4-1: SerialNumber: syz
[   99.054955][ T7104] loop1: detected capacity change from 0 to 128
[   99.082419][ T7104] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   99.082574][ T7104] hpfs: filesystem error: improperly stopped
[   99.082583][ T7104] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   99.082589][ T7104] hpfs: You really don't want any checks? You are crazy...
[   99.082595][ T7104] hpfs: Code page index out of array
[   99.082598][ T7104] hpfs: code page support is disabled
[   99.085571][ T7104] hpfs: hpfs_map_4sectors(): unaligned read
[   99.085813][ T7104] hpfs: hpfs_map_4sectors(): unaligned read
[   99.085820][ T7104] hpfs: filesystem error: unable to find root dir
[   99.286606][ T6404] io_ti 4-1:151.33: required endpoints missing
[   99.290060][ T6404] uvcvideo 4-1:151.33: Found UVC 0.0a device syz (1608:021b)
[   99.290100][ T6404] uvcvideo 4-1:151.33: No valid video chain found.
[   99.295473][ T6404] usb 4-1: USB disconnect, device number 15
[   99.458725][ T7112] loop1: detected capacity change from 0 to 32768
[   99.468949][ T7112] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.483009][ T7112] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[   99.489627][ T7112] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[   99.500392][ T7112] XFS (loop1): Ending clean mount
[   99.535403][ T5602] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.886544][ T6075] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   99.944717][ T5591] batman_adv: batadv0: Interface deactivated: syz_tun
[   99.983601][ T4992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   99.995886][ T4992] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   99.998833][ T4992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   99.999270][ T5591] batman_adv: batadv0: Removing interface: syz_tun
[  100.011742][ T4992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  100.016600][ T4992] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  100.061066][ T6075] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  100.062709][ T6075] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.062748][ T6075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.124872][ T6075] as10x_usb: device has been detected
[  100.131244][ T6075] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  100.162382][ T6075] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  100.219403][ T5626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.232431][ T6075] as10x_usb: error during firmware upload part1
[  100.232745][ T6075] Registered device Abilis Systems DVB-Titan
[  100.319742][ T5626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.382693][ T5626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.405210][ T5654] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  100.461119][ T5626] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.555862][ T5654] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  100.561261][ T5654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.561349][ T5654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.578679][ T5654] usb 4-1: config 0 descriptor??
[  100.650544][ T5626] bridge_slave_1: left allmulticast mode
[  100.650596][ T5626] bridge_slave_1: left promiscuous mode
[  100.650947][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.656549][ T5626] bridge_slave_0: left allmulticast mode
[  100.656565][ T5626] bridge_slave_0: left promiscuous mode
[  100.656662][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.791411][ T5654] usbhid 4-1:0.0: can't add hid device: -71
[  100.793859][ T5654] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  100.799478][ T5654] usb 4-1: USB disconnect, device number 16
[  100.824767][ T5626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.832212][ T5626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.838151][ T5626] bond0 (unregistering): Released all slaves
[  100.843620][ T5626] bond1 (unregistering): Released all slaves
[  100.905370][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.915965][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.916131][ T7128] bridge_slave_0: entered allmulticast mode
[  100.923059][ T7128] bridge_slave_0: entered promiscuous mode
[  100.928007][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.930378][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.933354][ T7128] bridge_slave_1: entered allmulticast mode
[  100.945519][ T7128] bridge_slave_1: entered promiscuous mode
[  100.997511][ T7128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.003526][ T7128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.036946][ T7128] team0: Port device team_slave_0 added
[  101.040141][ T7128] team0: Port device team_slave_1 added
[  101.062297][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.065178][   T33] usb 2-1: USB disconnect, device number 14
[  101.071915][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.081349][ T7128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.108079][   T33] Unregistered device Abilis Systems DVB-Titan
[  101.109963][   T33] as10x_usb: device has been disconnected
[  101.159257][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.163489][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.163534][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.198562][ T7128] hsr_slave_0: entered promiscuous mode
[  101.202711][ T7128] hsr_slave_1: entered promiscuous mode
[  101.208171][ T7128] debugfs: 'hsr0' already exists in 'hsr'
[  101.210449][ T7128] Cannot create hsr debugfs directory
[  101.236768][ T5626] hsr_slave_0: left promiscuous mode
[  101.238774][ T5626] hsr_slave_1: left promiscuous mode
[  101.239430][ T5626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.239441][ T5626] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.241346][ T5626] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.241355][ T5626] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.255153][ T5654] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  101.270342][ T5626] veth1_macvtap: left promiscuous mode
[  101.270420][ T5626] veth0_macvtap: left promiscuous mode
[  101.271358][ T5626] veth1_vlan: left promiscuous mode
[  101.271417][ T5626] veth0_vlan: left promiscuous mode
[  101.426963][ T5654] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  101.430573][ T5654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.430635][ T5654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.438077][ T5626] team0 (unregistering): Port device team_slave_1 removed
[  101.444825][ T5654] usb 4-1: config 0 descriptor??
[  101.444850][ T5626] team0 (unregistering): Port device team_slave_0 removed
[  101.584259][ T5338] 8021q: adding VLAN 0 to HW filter on device eth5
[  101.850219][ T5338] 8021q: adding VLAN 0 to HW filter on device eth6
[  101.893104][ T7128] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.897654][ T7128] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.900558][ T7128] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.904480][ T7128] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.919113][ T7128] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.926164][ T7128] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.929315][ T7128] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  101.933804][ T7128] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.982727][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.995572][ T7128] 8021q: adding VLAN 0 to HW filter on device team0
[  102.001094][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.001213][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.011154][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.011235][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.081030][ T5338] 8021q: adding VLAN 0 to HW filter on device eth7
[  102.125720][   T56] Bluetooth: hci3: command tx timeout
[  102.157966][ T7188] nvmet_tcp: malformed ip/port passed: :4
[  102.260263][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.277951][ T5654] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[  102.279104][ T5654] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  102.311959][ T7206] loop1: detected capacity change from 0 to 4096
[  102.331631][ T5338] 8021q: adding VLAN 0 to HW filter on device eth8
[  102.399797][ T7210] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.412378][ T7206] NILFS (loop1): error -22 preparing GC: cannot mark copying blocks dirty
[  102.613429][ T7128] veth0_vlan: entered promiscuous mode
[  102.632364][ T7128] veth1_vlan: entered promiscuous mode
[  102.651287][  T548] usb 4-1: USB disconnect, device number 17
[  102.651296][    C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  102.674697][ T7128] veth0_macvtap: entered promiscuous mode
[  102.683175][ T7128] veth1_macvtap: entered promiscuous mode
[  102.709982][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.714718][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.736343][ T5663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.737066][ T5663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.737082][ T5663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.737095][ T5663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.858382][ T6598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.858438][ T6598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.885052][ T6601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.887092][ T6601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.245893][  T548] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  103.263716][ T7241] loop3: detected capacity change from 0 to 512
[  103.264621][ T7241] EXT4-fs: Ignoring removed oldalloc option
[  103.296272][ T7241] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.533: invalid block
[  103.296335][ T7241] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  103.298021][ T7241] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.533: invalid indirect mapped block 1024 (level 0)
[  103.298040][ T7241] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  103.298294][ T7241] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.533: bg 0: block 35: padding at end of block bitmap is not set
[  103.298309][ T7241] loop3: lost filesystem error report for type 5 error -117
[  103.298449][ T7241] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  103.298457][ T7241] loop3: lost filesystem error report for type 5 error -117
[  103.299948][ T7241] EXT4-fs (loop3): 1 truncate cleaned up
[  103.300734][ T7241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.334664][ T5892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.398675][  T548] usb 5-1: unable to get BOS descriptor or descriptor too short
[  103.398760][  T548] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  103.400275][  T548] usb 5-1: config 100 has an invalid interface number: 173 but max is 0
[  103.400294][  T548] usb 5-1: config 100 has no interface number 0
[  103.400322][  T548] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  103.400338][  T548] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  103.400353][  T548] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0
[  103.400369][  T548] usb 5-1: config 100 interface 173 has no altsetting 0
[  103.414588][  T548] usb 5-1: string descriptor 0 read error: -22
[  103.414681][  T548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.421987][ T7232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  103.429183][  T548] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected
[  103.451131][  T548] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  103.534443][ T7254] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  103.597271][ T5655] kernel read not supported for file /rfkill (pid: 5655 comm: kworker/0:4)
[  103.627896][  T548] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  103.652371][ T6075] usb 5-1: USB disconnect, device number 2
[  103.673383][ T6075] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  103.683213][ T6075] metro_usb 5-1:100.173: device disconnected
[  104.215467][   T56] Bluetooth: hci3: command tx timeout
[  104.340600][ T7268] GUP no longer grows the stack in syz.4.541 (7268): 200000033000-200000200000 (20000002f000)
[  104.355792][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.4.541 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  104.355850][ T7268] Tainted: [L]=SOFTLOCKUP
[  104.355854][ T7268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.355860][ T7268] Call Trace:
[  104.355864][ T7268]  <TASK>
[  104.355868][ T7268]  dump_stack_lvl+0xe8/0x150
[  104.355885][ T7268]  __get_user_pages+0x23b6/0x2750
[  104.355910][ T7268]  get_user_pages_remote+0x307/0xb10
[  104.355927][ T7268]  ? __pfx_mtree_load+0x10/0x10
[  104.355943][ T7268]  ? __pfx_get_user_pages_remote+0x10/0x10
[  104.355953][ T7268]  ? __access_remote_vm+0xa3/0x6f0
[  104.355965][ T7268]  ? __access_remote_vm+0x42c/0x6f0
[  104.355978][ T7268]  __access_remote_vm+0x222/0x6f0
[  104.355995][ T7268]  ? __pfx___access_remote_vm+0x10/0x10
[  104.356007][ T7268]  ? rep_movs_alternative+0x75/0xa0
[  104.356022][ T7268]  proc_pid_cmdline_read+0x46b/0x900
[  104.356034][ T7268]  ? __asan_memset+0x22/0x50
[  104.356048][ T7268]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  104.356059][ T7268]  ? rw_verify_area+0x24a/0x4c0
[  104.356071][ T7268]  vfs_readv+0x57c/0x850
[  104.356081][ T7268]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  104.356092][ T7268]  ? __pfx_vfs_readv+0x10/0x10
[  104.356106][ T7268]  ? __fget_files+0x2a/0x420
[  104.356118][ T7268]  ? __fget_files+0x3a2/0x420
[  104.356128][ T7268]  ? __fget_files+0x2a/0x420
[  104.356143][ T7268]  __x64_sys_preadv+0x19c/0x2b0
[  104.356153][ T7268]  ? __pfx___x64_sys_preadv+0x10/0x10
[  104.356166][ T7268]  do_syscall_64+0x166/0x520
[  104.356175][ T7268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.356185][ T7268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.356192][ T7268] RIP: 0033:0x7f159cb9e1d9
[  104.356201][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.356208][ T7268] RSP: 002b:00007f159da0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  104.356218][ T7268] RAX: ffffffffffffffda RBX: 00007f159ce25fa0 RCX: 00007f159cb9e1d9
[  104.356223][ T7268] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003
[  104.356228][ T7268] RBP: 00007f159cc35888 R08: 0000000000006a76 R09: 0000000000000000
[  104.356233][ T7268] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000
[  104.356237][ T7268] R13: 00007f159ce26038 R14: 00007f159ce25fa0 R15: 00007ffedcadb368
[  104.356249][ T7268]  </TASK>
[  104.644109][ T7273] loop4: detected capacity change from 0 to 164
[  104.683484][  T548] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08
[  104.685012][  T548] usb 4-1: config index 0 descriptor too short (expected 65349, got 72)
[  104.689897][  T548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.689911][  T548] usb 4-1: Product: syz
[  104.689916][  T548] usb 4-1: Manufacturer: syz
[  104.689922][  T548] usb 4-1: SerialNumber: syz
[  104.845903][ T7275] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  104.857719][  T548] usb 4-1: reset high-speed USB device number 18 using dummy_hcd
[  105.070723][ T5655] usb 4-1: driver   API: 1.9.9 2016-02-15 [1-1]
[  105.070903][ T5655] usb 4-1: firmware API: 1.9.6 2012-07-07
[  105.092370][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'.
[  105.385497][  T548] usb 4-1: USB disconnect, device number 18
[  105.386315][    C0] device 4-1 is not registered
[  105.653842][ T7297] loop4: detected capacity change from 0 to 8
[  105.693001][ T7297] SQUASHFS error: zlib decompression failed, data probably corrupt
[  105.693687][ T7297] SQUASHFS error: Failed to read block 0x9b: -5
[  105.693701][ T7297] SQUASHFS error: Unable to read metadata cache entry [99]
[  105.693709][ T7297] SQUASHFS error: Unable to read inode 0x127
[  105.850298][   T34] audit: type=1326 audit(1791715840.607:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.4.558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159cb9e1d9 code=0x7ffc0000
[  105.858319][   T34] audit: type=1326 audit(1791715840.617:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.4.558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159cb9e1d9 code=0x7ffc0000
[  105.867009][   T34] audit: type=1326 audit(1791715840.627:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.4.558" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f159cb9e1d9 code=0x7ffc0000
[  105.876648][   T34] audit: type=1326 audit(1791715840.627:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.4.558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159cb9e1d9 code=0x7ffc0000
[  105.953627][   T34] audit: type=1326 audit(1791715840.707:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[  105.964864][   T34] audit: type=1326 audit(1791715840.717:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[  105.973191][   T34] audit: type=1326 audit(1791715840.717:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[  105.973215][   T34] audit: type=1326 audit(1791715840.717:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[  105.981571][   T34] audit: type=1326 audit(1791715840.727:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.561" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[  105.981608][   T34] audit: type=1326 audit(1791715840.727:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.1.561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x7ffc0000
[  106.125299][ T5655] usb 4-1: firmware upload failed (-110).
[  106.156366][ T7331] dummy0: entered allmulticast mode
[  106.203788][ T7337] loop1: detected capacity change from 0 to 256
[  106.209020][ T7337] exfat: Deprecated parameter 'utf8'
[  106.220236][ T7337] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  106.285308][   T56] Bluetooth: hci3: command tx timeout
[  106.378028][ T7350] loop3: detected capacity change from 0 to 1024
[  106.495277][ T5647] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  106.502636][ T7356] binder: 7355:7356 ioctl c0306201 200000000080 returned -14
[  106.507328][ T7356] binder: 7355:7356 ioctl c0306201 2000000003c0 returned -14
[  106.555280][ T6075] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  106.560672][ T7360] loop3: detected capacity change from 0 to 1024
[  106.570284][ T7360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.577012][ T7360] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks
[  106.580325][ T7360] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  106.593732][ T5892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.647048][ T5647] usb 5-1: unable to get BOS descriptor or descriptor too short
[  106.650543][ T5647] usb 5-1: not running at top speed; connect to a high speed hub
[  106.653662][ T5647] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  106.657849][ T5647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.661485][ T5647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  106.666865][ T5647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.669756][ T5647] usb 5-1: Product: syz
[  106.671203][ T5647] usb 5-1: Manufacturer: syz
[  106.671253][ T5647] usb 5-1: SerialNumber: syz
[  106.679920][ T5647] usb 5-1: config 0 descriptor??
[  106.682541][ T7342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  106.688592][    C1] usb 5-1: NFC: Urb failure (status -71)
[  106.691308][ T5647] usb 5-1: NFC: Unable to get FW version
[  106.702271][ T5647] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90
[  106.718725][ T6075] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  106.719888][ T6075] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.719924][ T6075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.725673][ T6075] usb 2-1: config 0 descriptor??
[  106.757182][ T6075] pwc: Askey VC010 type 2 USB webcam detected.
[  106.894707][  T548] usb 5-1: USB disconnect, device number 3
[  107.135206][ T6075] pwc: recv_control_msg error -32 req 02 val 2b00
[  107.135636][ T5655] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  107.136892][ T6075] pwc: recv_control_msg error -32 req 02 val 2700
[  107.137376][ T6075] pwc: recv_control_msg error -32 req 02 val 2c00
[  107.137877][ T6075] pwc: recv_control_msg error -32 req 04 val 1000
[  107.138359][ T6075] pwc: recv_control_msg error -32 req 04 val 1300
[  107.138919][ T6075] pwc: recv_control_msg error -32 req 04 val 1400
[  107.306192][ T5655] usb 4-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00
[  107.307653][ T5655] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.307692][ T5655] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768
[  107.307779][ T5655] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  107.310178][ T5655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.310188][ T5655] usb 4-1: Product: syz
[  107.310194][ T5655] usb 4-1: Manufacturer: syz
[  107.310200][ T5655] usb 4-1: SerialNumber: syz
[  107.318309][ T5655] usb-storage 4-1:1.0: USB Mass Storage device detected
[  107.329540][ T5655] scsi host6: usb-storage 4-1:1.0
[  107.340545][ T6075] pwc: recv_control_msg error -71 req 02 val 2100
[  107.341832][ T6075] pwc: recv_control_msg error -71 req 04 val 1500
[  107.342158][ T6075] pwc: recv_control_msg error -71 req 02 val 2500
[  107.342500][ T6075] pwc: recv_control_msg error -71 req 02 val 2400
[  107.342870][ T6075] pwc: recv_control_msg error -71 req 02 val 2600
[  107.343219][ T6075] pwc: recv_control_msg error -71 req 02 val 2900
[  107.343516][ T6075] pwc: recv_control_msg error -71 req 02 val 2800
[  107.343945][ T6075] pwc: recv_control_msg error -71 req 04 val 1100
[  107.344297][ T6075] pwc: recv_control_msg error -71 req 04 val 1200
[  107.350714][ T6075] pwc: Registered as video103.
[  107.351724][ T6075] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[  107.354159][ T6075] usb 2-1: USB disconnect, device number 15
[  107.522913][ T5647] usb 4-1: USB disconnect, device number 19
[  107.562454][ T7385] ptrace attach of "/syz-executor exec"[7128] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       
[  107.663509][ T7393] loop4: detected capacity change from 0 to 16
[  107.676082][ T7393] erofs (device loop4): mounted with root inode @ nid 36.
[  108.005527][ T7415] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  108.008712][ T7415] cramfs: block size(16384) > page size(4096) not supported by filesystem
[  108.020757][ T7415] cramfs: wrong magic
[  108.365456][   T56] Bluetooth: hci3: command tx timeout
[  108.471097][ T7425] loop4: detected capacity change from 0 to 4096
[  108.486078][ T7429] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.554213][ T7433] FAULT_INJECTION: forcing a failure.
[  108.554213][ T7433] name failslab, interval 1, probability 0, space 0, times 0
[  108.554274][ T7433] CPU: 0 UID: 0 PID: 7433 Comm: syz.4.614 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  108.554301][ T7433] Tainted: [L]=SOFTLOCKUP
[  108.554306][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.554311][ T7433] Call Trace:
[  108.554316][ T7433]  <TASK>
[  108.554320][ T7433]  dump_stack_lvl+0xe8/0x150
[  108.554337][ T7433]  should_fail_ex+0x410/0x560
[  108.554354][ T7433]  should_failslab+0xa8/0x100
[  108.554364][ T7433]  __kvmalloc_node_noprof+0x176/0x820
[  108.554376][ T7433]  ? shrinker_alloc+0x52d/0xb10
[  108.554383][ T7433]  ? shrinker_alloc+0x52d/0xb10
[  108.554393][ T7433]  shrinker_alloc+0x52d/0xb10
[  108.554407][ T7433]  sget_fc+0xe29/0x1a40
[  108.554422][ T7433]  ? __pfx_set_anon_super_fc+0x10/0x10
[  108.554435][ T7433]  ? __pfx_sget_fc+0x10/0x10
[  108.554444][ T7433]  ? __kmalloc_cache_noprof+0x321/0x600
[  108.554452][ T7433]  ? __kmalloc_cache_noprof+0x14d/0x600
[  108.554460][ T7433]  ? vfs_parse_monolithic_sep+0xd0/0x360
[  108.554475][ T7433]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  108.554488][ T7433]  ? __pfx_proc_fill_super+0x10/0x10
[  108.554499][ T7433]  get_tree_nodev+0x2a/0x150
[  108.554513][ T7433]  vfs_get_tree+0x92/0x2a0
[  108.554522][ T7433]  do_new_mount+0x319/0xdc0
[  108.554536][ T7433]  ? __pfx_do_new_mount+0x10/0x10
[  108.554547][ T7433]  ? ns_capable+0x89/0xe0
[  108.554560][ T7433]  ? path_mount+0x647/0x1050
[  108.554571][ T7433]  ? user_path_at+0xd4/0x160
[  108.554584][ T7433]  __se_sys_mount+0x31d/0x420
[  108.554598][ T7433]  ? __pfx___se_sys_mount+0x10/0x10
[  108.554612][ T7433]  ? __x64_sys_mount+0x20/0xc0
[  108.554624][ T7433]  do_syscall_64+0x166/0x520
[  108.554637][ T7433]  ? trace_irq_disable+0x3b/0x140
[  108.554649][ T7433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.554664][ T7433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.554676][ T7433] RIP: 0033:0x7f159cb9e1d9
[  108.554688][ T7433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.554699][ T7433] RSP: 002b:00007f159da0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  108.554714][ T7433] RAX: ffffffffffffffda RBX: 00007f159ce25fa0 RCX: 00007f159cb9e1d9
[  108.554723][ T7433] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[  108.554731][ T7433] RBP: 00007f159cc35888 R08: 0000000000000000 R09: 0000000000000000
[  108.554738][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.554745][ T7433] R13: 00007f159ce26038 R14: 00007f159ce25fa0 R15: 00007ffedcadb368
[  108.554758][ T7433]  </TASK>
[  108.996832][ T7459] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[  110.085693][ T7475] hub 5-0:1.0: USB hub found
[  110.087588][ T7475] hub 5-0:1.0: 1 port detected
[  110.455369][   T56] Bluetooth: hci3: command tx timeout
[  110.592637][ T7486] loop4: detected capacity change from 0 to 32768
[  110.593186][ T7486] xfs: Deprecated parameter 'ikeep'
[  110.593195][ T7486] XFS: ikeep mount option is deprecated.
[  110.604309][ T7486] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  110.620916][ T7486] XFS (loop4): Ending clean mount
[  110.641819][ T7128] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  110.815571][ T5647] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  110.966989][ T5647] usb 4-1: unable to get BOS descriptor or descriptor too short
[  110.969470][ T5647] usb 4-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40
[  110.973832][ T5647] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.978559][ T5647] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.989306][ T5647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.989343][ T5647] usb 4-1: Product: syz
[  110.989373][ T5647] usb 4-1: Manufacturer: syz
[  110.989453][ T5647] usb 4-1: SerialNumber: syz
[  110.998298][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'.
[  111.149773][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'.
[  111.216283][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'.
[  111.217630][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.225862][ T5647] usb 4-1: unit 3 not found!
[  111.278140][ T5647] usb 4-1: USB disconnect, device number 20
[  111.323972][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.502803][ T7560] loop1: detected capacity change from 0 to 136
[  111.723277][ T7569] netlink: 'syz.4.667': attribute type 9 has an invalid length.
[  111.724775][ T7569] netlink: 'syz.4.667': attribute type 6 has an invalid length.
[  112.295644][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'.
[  112.549026][ T7585] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  114.247146][ T7673] loop3: detected capacity change from 0 to 4096
[  114.259062][ T7673] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  114.263648][ T7673] ntfs3(loop3): Failed to load $Extend (-22).
[  114.265364][ T7673] ntfs3(loop3): Failed to initialize $Extend.
[  114.407139][ T7675] loop3: detected capacity change from 0 to 32768
[  114.408011][ T7675] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.700 (7675)
[  114.410634][ T7675] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  114.410649][ T7675] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  114.437196][ T7675] BTRFS info (device loop3): enabling ssd optimizations
[  114.437246][ T7675] BTRFS info (device loop3): turning on async discard
[  114.438033][ T7675] BTRFS info (device loop3): enabling free space tree
[  114.458880][ T5892] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  114.818910][ T7700] mmap: syz.1.704 (7700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  114.828603][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'.
[  115.945292][   T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  115.955315][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.960784][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.964536][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.973623][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.188922][ T7736] loop1: detected capacity change from 0 to 40427
[  116.233388][ T7736] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  116.234366][ T7736] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  116.291080][ T7736] F2FS-fs (loop1): invalid crc value
[  116.377335][ T7736] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  116.387985][ T7736] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  116.388023][ T7736] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  116.388140][   T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  116.389386][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.389409][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.390740][   T25] usb 4-1: config 0 descriptor??
[  116.392545][   T25] pwc: Askey VC010 type 2 USB webcam detected.
[  116.468044][ T5602] syz-executor: attempt to access beyond end of device
[  116.468044][ T5602] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  116.474267][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  116.474291][ T5602] Tainted: [L]=SOFTLOCKUP
[  116.474296][ T5602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.474303][ T5602] Call Trace:
[  116.474308][ T5602]  <TASK>
[  116.474315][ T5602]  dump_stack_lvl+0xe8/0x150
[  116.474357][ T5602]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  116.474376][ T5602]  f2fs_write_end_bio+0x1211/0x16e0
[  116.474397][ T5602]  ? blkg_put+0x22/0x240
[  116.474422][ T5602]  __submit_merged_bio+0x258/0x6a0
[  116.474436][ T5602]  ? rcu_is_watching+0x16/0xb0
[  116.474455][ T5602]  f2fs_submit_merged_write+0x27d/0x380
[  116.474473][ T5602]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  116.474500][ T5602]  f2fs_sync_node_pages+0x1055/0x1210
[  116.474528][ T5602]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  116.474570][ T5602]  f2fs_write_checkpoint+0xf91/0x2710
[  116.474588][ T5602]  ? __lock_acquire+0x6df/0x2e50
[  116.474621][ T5602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  116.474698][ T5602]  kill_f2fs_super+0x2dd/0x700
[  116.474721][ T5602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  116.474747][ T5602]  ? call_rcu+0x64d/0x8b0
[  116.474762][ T5602]  ? lockdep_hardirqs_on+0x7b/0x110
[  116.474784][ T5602]  deactivate_locked_super+0xbc/0x110
[  116.474803][ T5602]  cleanup_mnt+0x3d3/0x460
[  116.474818][ T5602]  task_work_run+0x1d9/0x270
[  116.474843][ T5602]  ? __pfx_task_work_run+0x10/0x10
[  116.474863][ T5602]  exit_to_user_mode_loop+0x204/0x770
[  116.474878][ T5602]  ? rcu_is_watching+0x16/0xb0
[  116.474894][ T5602]  do_syscall_64+0x328/0x520
[  116.474908][ T5602]  ? trace_irq_disable+0x3b/0x140
[  116.474920][ T5602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.474936][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.474948][ T5602] RIP: 0033:0x7ff9d0d9f417
[  116.474962][ T5602] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  116.474972][ T5602] RSP: 002b:00007fff21f73a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  116.474986][ T5602] RAX: 0000000000000000 RBX: 00007ff9d0e34ccb RCX: 00007ff9d0d9f417
[  116.474995][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff21f73b00
[  116.475002][ T5602] RBP: 00007fff21f73b00 R08: 00007fff21f74b00 R09: 00000000ffffffff
[  116.475010][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff21f74b90
[  116.475017][ T5602] R13: 00007ff9d0e34ccb R14: 000000000001c663 R15: 00007fff21f74bd0
[  116.475038][ T5602]  </TASK>
[  116.481314][ T5602] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  116.800500][   T25] pwc: recv_control_msg error -32 req 02 val 2b00
[  116.801099][   T25] pwc: recv_control_msg error -32 req 02 val 2700
[  116.956729][ T7746] loop4: detected capacity change from 0 to 512
[  116.982187][ T7746] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  116.984627][ T7746] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  116.986015][ T7746] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.723: iget: bad i_size value: 12154757448730
[  116.986039][ T7746] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  116.986552][ T7746] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.723: couldn't read orphan inode 13 (err -117)
[  116.986573][ T7746] loop4: lost filesystem error report for type 5 error -117
[  116.989303][ T7746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.002743][   T25] pwc: recv_control_msg error -71 req 04 val 1000
[  117.004494][   T25] pwc: recv_control_msg error -71 req 04 val 1300
[  117.009811][   T25] pwc: recv_control_msg error -71 req 04 val 1400
[  117.010233][   T25] pwc: recv_control_msg error -71 req 02 val 2000
[  117.010665][   T25] pwc: recv_control_msg error -71 req 02 val 2100
[  117.011047][   T25] pwc: recv_control_msg error -71 req 04 val 1500
[  117.011424][   T25] pwc: recv_control_msg error -71 req 02 val 2500
[  117.011810][   T25] pwc: recv_control_msg error -71 req 02 val 2400
[  117.013325][   T25] pwc: recv_control_msg error -71 req 02 val 2600
[  117.013781][   T25] pwc: recv_control_msg error -71 req 02 val 2900
[  117.014161][   T25] pwc: recv_control_msg error -71 req 02 val 2800
[  117.014836][   T25] pwc: recv_control_msg error -71 req 04 val 1100
[  117.016136][   T25] pwc: recv_control_msg error -71 req 04 val 1200
[  117.037915][   T25] pwc: Registered as video103.
[  117.041194][   T25] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  117.050752][   T25] usb 4-1: USB disconnect, device number 21
[  117.260666][ T7748] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  117.613449][ T7755] loop3: detected capacity change from 0 to 512
[  117.623036][ T7755] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.725: bg 0: block 5: invalid block bitmap
[  117.627598][ T7755] loop3: lost filesystem error report for type 5 error -117
[  117.631435][ T7755] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  117.631495][ T7755] loop3: lost filesystem error report for type 5 error -117
[  117.631745][ T7755] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.725: invalid indirect mapped block 3 (level 2)
[  117.631761][ T7755] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  117.631955][ T7755] EXT4-fs (loop3): 1 orphan inode deleted
[  117.631963][ T7755] EXT4-fs (loop3): 1 truncate cleaned up
[  117.632671][ T7755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.658778][ T5892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.676097][  T548] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  117.694664][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[  117.823820][ T7128] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.848452][  T548] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  117.853660][  T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.853705][  T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.853739][  T548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.865605][  T548] usb 2-1: config 0 descriptor??
[  117.875200][   T34] kauditd_printk_skb: 22 callbacks suppressed
[  117.875246][   T34] audit: type=1400 audit(1791715852.627:67): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7766 comm="syz.4.730" name="p" offset=48
[  118.175205][   T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  118.319664][ T7787] netlink: 27 bytes leftover after parsing attributes in process `syz.4.739'.
[  118.327387][   T25] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  118.330943][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.331188][   T25] usb 4-1: Product: syz
[  118.331200][   T25] usb 4-1: Manufacturer: syz
[  118.331209][   T25] usb 4-1: SerialNumber: syz
[  118.335924][   T25] usb 4-1: config 0 descriptor??
[  118.508472][  T548] hid-led 0003:1D34:000A.0004: probe with driver hid-led failed with error -71
[  118.520153][  T548] usb 2-1: USB disconnect, device number 16
[  118.638315][ T7797] netlink: 112 bytes leftover after parsing attributes in process `syz.4.744'.
[  118.683781][ T7799] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in;
[  118.683781][ T7799]    program syz.4.745 not setting count and/or reply_len properly
[  118.748734][   T25] usb 4-1: Firmware: major: 1, minor: 255, hardware type: ATUSB (1)
[  118.767376][ T7801] ipvlan2: entered allmulticast mode
[  118.767430][ T7801] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  118.771532][ T7801] batman_adv: batadv0: Adding interface: ipvlan2
[  118.771541][ T7801] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  118.771628][ T7801] batman_adv: batadv0: Interface activated: ipvlan2
[  118.897077][ T7807] loop4: detected capacity change from 0 to 512
[  118.905905][ T7807] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  118.905943][ T7807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  118.906113][ T7807] EXT4-fs (loop4): orphan cleanup on readonly fs
[  118.915514][ T7807] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.749: iget: bad i_size value: 12154761577498
[  118.920015][ T7807] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  118.922109][ T7807] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.749: couldn't read orphan inode 13 (err -117)
[  118.922173][ T7807] loop4: lost filesystem error report for type 5 error -117
[  118.926362][    C0] EXT4-fs (loop4): error count since last fsck: 2
[  118.926377][    C0] EXT4-fs (loop4): initial error at time 1791715853: ext4_orphan_get:1403: inode 13
[  118.926398][    C0] EXT4-fs (loop4): last error at time 1791715853: ext4_orphan_get:1408
[  118.943599][ T7807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  118.951563][   T25] usb 4-1: failed to fetch extended address, random address set
[  118.955596][ T7807] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.749: dx entry: limit 65535 != root limit 120
[  118.962463][ T7807] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.749: Corrupt directory, running e2fsck is recommended
[  118.968497][ T7807] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 3: comm syz.4.749: path /97/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  118.996714][ T7128] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.022671][   T25] usb 4-1: USB disconnect, device number 22
[  119.062013][ T7814] loop1: detected capacity change from 0 to 512
[  119.073738][ T7814] FAT-fs (loop1): bogus sectors per cluster 0
[  119.086153][ T7814] FAT-fs (loop1): Can't find a valid FAT filesystem
[  119.517158][ T7832] loop3: detected capacity change from 0 to 512
[  120.295181][   T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  120.375659][ T6404] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  120.455725][   T25] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  120.456710][   T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.456750][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  120.456767][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  120.456780][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  120.456794][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  120.456808][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[  120.456821][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  120.456835][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[  120.456847][   T25] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  120.456859][   T25] usb 5-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14
[  120.459091][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.459111][   T25] usb 5-1: Product: syz
[  120.459125][   T25] usb 5-1: Manufacturer: syz
[  120.459139][   T25] usb 5-1: SerialNumber: syz
[  120.463350][ T7851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.463479][ T7851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.463548][ T7851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.463695][ T7851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.463767][ T7851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.463922][ T7851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.465495][ T7851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.468161][   T25] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  120.469281][   T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7
[  120.474631][   T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1
[  120.474693][   T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  120.474854][   T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5
[  120.477515][   T25] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  120.480207][   T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3
[  120.480264][   T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4
[  120.480343][   T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  120.481951][   T25] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  120.526210][ T6404] usb 2-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.00
[  120.527982][ T6404] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 57, changing to 9
[  120.528003][ T6404] usb 2-1: config 0 interface 0 has no altsetting 0
[  120.528021][ T6404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.532876][ T6404] usb 2-1: config 0 descriptor??
[  120.550038][ T6404] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  120.680095][  T548] usb 5-1: USB disconnect, device number 4
[  120.700643][  T548] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  120.713816][  T548] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  120.722010][  T548] keyspan 5-1:1.0: device disconnected
[  120.754296][ T7862] loop1: detected capacity change from 0 to 2048
[  120.776890][ T7862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.784267][ T6404] usb 2-1: USB disconnect, device number 17
[  120.798742][ T6404] appletouch 2-1:0.0: input: appletouch disconnected
[  121.318718][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.546526][ T6404] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  121.605403][ T7892] loop1: detected capacity change from 0 to 164
[  121.613450][ T7892] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  121.696632][ T6404] usb 5-1: Using ep0 maxpacket: 8
[  121.698441][ T6404] usb 5-1: unable to get BOS descriptor or descriptor too short
[  121.698665][ T6404] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  121.699779][ T6404] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  121.699810][ T6404] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  121.701752][ T6404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.701781][ T6404] usb 5-1: Product: syz
[  121.701910][ T6404] usb 5-1: Manufacturer: syz
[  121.701937][ T6404] usb 5-1: SerialNumber: syz
[  121.708156][ T6404] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  121.708197][ T6404] cdc_ncm 5-1:1.0: bind() failure
[  121.711684][ T6404] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  121.711721][ T6404] cdc_ncm 5-1:1.1: bind() failure
[  121.926764][ T6404] usb 5-1: USB disconnect, device number 5
[  122.103476][ T7898] process 'syz.3.787' launched './file0' with NULL argv: empty string added
[  122.103739][ T7898] ERROR: Out of memory at tomoyo_memory_ok.
[  122.103749][ T7898] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /syz-executor /syz-executor /newroot/206/file0' not defined.
[  122.875419][  T548] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  123.026314][  T548] usb 5-1: Using ep0 maxpacket: 16
[  123.026880][  T548] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  123.029812][  T548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.029823][  T548] usb 5-1: Product: syz
[  123.029829][  T548] usb 5-1: Manufacturer: syz
[  123.029835][  T548] usb 5-1: SerialNumber: syz
[  123.044070][  T548] usb 5-1: config 0 descriptor??
[  123.052316][  T548] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  123.234759][ T7933] loop1: detected capacity change from 0 to 32768
[  123.257243][  T548] usb 5-1: clie_3_5_startup: get config number bad return length: 0
[  123.257353][  T548] visor 5-1:0.0: probe with driver visor failed with error -5
[  123.365713][ T7941] FAULT_INJECTION: forcing a failure.
[  123.365713][ T7941] name failslab, interval 1, probability 0, space 0, times 0
[  123.366925][ T7941] CPU: 0 UID: 0 PID: 7941 Comm: syz.1.807 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  123.366949][ T7941] Tainted: [L]=SOFTLOCKUP
[  123.366954][ T7941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.366963][ T7941] Call Trace:
[  123.366969][ T7941]  <TASK>
[  123.366976][ T7941]  dump_stack_lvl+0xe8/0x150
[  123.367001][ T7941]  should_fail_ex+0x410/0x560
[  123.367028][ T7941]  should_failslab+0xa8/0x100
[  123.367047][ T7941]  __kmalloc_cache_noprof+0xa3/0x600
[  123.367060][ T7941]  ? __kmalloc_cache_noprof+0x14d/0x600
[  123.367072][ T7941]  ? pkcs7_note_signed_info+0x281/0x4a0
[  123.367087][ T7941]  ? pkcs7_note_signed_info+0x281/0x4a0
[  123.367107][ T7941]  pkcs7_note_signed_info+0x281/0x4a0
[  123.367128][ T7941]  asn1_ber_decoder+0xd85/0x2590
[  123.367161][ T7941]  ? __pfx_asn1_ber_decoder+0x10/0x10
[  123.367182][ T7941]  ? __kasan_kmalloc+0x93/0xb0
[  123.367198][ T7941]  ? mhp_supports_memmap_on_memory+0xd2/0x100
[  123.367216][ T7941]  ? async_raid6_datap_recov+0x290/0xff0
[  123.367233][ T7941]  ? pkcs7_parse_message+0x15d/0x640
[  123.367250][ T7941]  pkcs7_parse_message+0x24d/0x640
[  123.367268][ T7941]  verify_pkcs7_signature+0x30/0x90
[  123.367291][ T7941]  pkcs7_preparse+0x8b/0xc0
[  123.367306][ T7941]  ? __pfx_pkcs7_view_content+0x10/0x10
[  123.367323][ T7941]  __key_create_or_update+0x3a9/0xa80
[  123.367346][ T7941]  ? __pfx___key_create_or_update+0x10/0x10
[  123.367362][ T7941]  ? lookup_user_key+0xb68/0x1150
[  123.367379][ T7941]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  123.367390][ T7941]  ? __pfx_keyring_search_iterator+0x10/0x10
[  123.367409][ T7941]  key_create_or_update+0x42/0x60
[  123.367426][ T7941]  __se_sys_add_key+0x349/0x420
[  123.367445][ T7941]  ? __pfx___se_sys_add_key+0x10/0x10
[  123.367467][ T7941]  ? __x64_sys_add_key+0x20/0xc0
[  123.367486][ T7941]  do_syscall_64+0x166/0x520
[  123.367502][ T7941]  ? trace_irq_disable+0x3b/0x140
[  123.367514][ T7941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.367532][ T7941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.367574][ T7941] RIP: 0033:0x7ff9d0d9e1d9
[  123.367588][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.367600][ T7941] RSP: 002b:00007ff9d1bb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  123.367616][ T7941] RAX: ffffffffffffffda RBX: 00007ff9d1025fa0 RCX: 00007ff9d0d9e1d9
[  123.367627][ T7941] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000
[  123.367636][ T7941] RBP: 00007ff9d0e35888 R08: 000000001062d5d6 R09: 0000000000000000
[  123.367645][ T7941] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000
[  123.367653][ T7941] R13: 00007ff9d1026038 R14: 00007ff9d1025fa0 R15: 00007fff21f747d8
[  123.367677][ T7941]  </TASK>
[  123.420786][ T7943] dlm: non-version read from control device 0
[  123.472973][ T6075] usb 5-1: USB disconnect, device number 6
[  123.558072][ T7949] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  123.558153][ T7949] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  123.602304][ T7951] loop1: detected capacity change from 0 to 512
[  123.606385][ T7951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  123.606523][ T7951] System zones: 1-12
[  123.609222][ T7951] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.812: missing EA_INODE flag
[  123.609239][ T7951] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  123.609628][ T7951] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.812: error while reading EA inode 12 err=-117
[  123.609648][ T7951] loop1: lost filesystem error report for type 5 error -117
[  123.609885][ T7951] EXT4-fs (loop1): 1 orphan inode deleted
[  123.611225][ T7951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.667634][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.058901][ T7975] loop1: detected capacity change from 0 to 128
[  124.066636][ T7975] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.067626][ T7975] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.101516][ T5602] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.248694][ T4992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.256816][ T4992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.261738][ T4992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.266184][ T4992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.269128][ T4992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.594149][ T7999] loop1: detected capacity change from 0 to 32768
[  124.624604][ T7999] ERROR: (device loop1): dbAlloc: unable to allocate blocks
[  124.624604][ T7999] 
[  124.624752][ T7999] ERROR: (device loop1): remounting filesystem as read-only
[  124.642436][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.647156][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.650201][ T7981] bridge_slave_0: entered allmulticast mode
[  124.654076][ T7981] bridge_slave_0: entered promiscuous mode
[  124.658574][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.661866][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.665306][ T7981] bridge_slave_1: entered allmulticast mode
[  124.669068][ T7981] bridge_slave_1: entered promiscuous mode
[  124.706228][ T7981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.707872][ T7981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.720776][ T7981] team0: Port device team_slave_0 added
[  124.722117][ T7981] team0: Port device team_slave_1 added
[  124.741478][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.741547][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.741797][ T7981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.742809][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.742815][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.742825][ T7981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.776160][ T7981] hsr_slave_0: entered promiscuous mode
[  124.776698][ T7981] hsr_slave_1: entered promiscuous mode
[  124.897153][ T7981] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  124.903214][ T7981] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  124.905808][ T7981] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  124.908358][ T7981] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  124.908867][ T7981] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  124.919030][ T7981] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  124.924267][ T7981] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  124.932686][ T7981] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  124.950225][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.950414][ T7981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.950567][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.950615][ T7981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.987899][ T7981] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.993507][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.998306][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.004682][ T7981] 8021q: adding VLAN 0 to HW filter on device team0
[  125.008728][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.008812][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.014477][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.014603][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.214329][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.331677][ T7981] veth0_vlan: entered promiscuous mode
[  125.337316][ T7981] veth1_vlan: entered promiscuous mode
[  125.357748][ T7981] veth0_macvtap: entered promiscuous mode
[  125.361253][ T7981] veth1_macvtap: entered promiscuous mode
[  125.368989][ T7981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.381916][ T7981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.468628][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.468675][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.468712][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.468747][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.513202][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.513281][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.539500][ T6687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.539581][ T6687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.975484][ T5655] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  126.126409][ T5655] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  126.127725][ T5655] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.127758][ T5655] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.127790][ T5655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.431303][ T8035] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  126.483530][ T8048] ip_tables: iptables: counters copy to user failed while replacing table
[  126.545248][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.545941][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.706893][ T8058] random: crng reseeded on system resumption
[  127.432211][ T8072] FAULT_INJECTION: forcing a failure.
[  127.432211][ T8072] name failslab, interval 1, probability 0, space 0, times 0
[  127.432281][ T8072] CPU: 1 UID: 0 PID: 8072 Comm: syz.4.849 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.432302][ T8072] Tainted: [L]=SOFTLOCKUP
[  127.432308][ T8072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.432317][ T8072] Call Trace:
[  127.432323][ T8072]  <TASK>
[  127.432330][ T8072]  dump_stack_lvl+0xe8/0x150
[  127.432356][ T8072]  should_fail_ex+0x410/0x560
[  127.432385][ T8072]  should_failslab+0xa8/0x100
[  127.432403][ T8072]  __kmalloc_noprof+0xfe/0x720
[  127.432417][ T8072]  ? sock_kmalloc+0xd6/0x160
[  127.432440][ T8072]  ? sock_kmalloc+0xd6/0x160
[  127.432463][ T8072]  sock_kmalloc+0xd6/0x160
[  127.432517][ T8072]  hash_accept_parent_nokey+0x52/0x250
[  127.432542][ T8072]  ? __pfx_hash_accept_parent+0x10/0x10
[  127.432564][ T8072]  af_alg_accept+0x175/0x520
[  127.432586][ T8072]  do_accept+0x521/0x750
[  127.432606][ T8072]  ? __pfx_do_accept+0x10/0x10
[  127.432637][ T8072]  __sys_accept4+0x139/0x230
[  127.432654][ T8072]  ? __pfx___sys_accept4+0x10/0x10
[  127.432698][ T8072]  __x64_sys_accept4+0x9a/0xb0
[  127.432716][ T8072]  do_syscall_64+0x166/0x520
[  127.432731][ T8072]  ? trace_irq_disable+0x3b/0x140
[  127.432746][ T8072]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.432765][ T8072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.432780][ T8072] RIP: 0033:0x7f159cb9e1d9
[  127.432794][ T8072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.432826][ T8072] RSP: 002b:00007f159da0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  127.432843][ T8072] RAX: ffffffffffffffda RBX: 00007f159ce25fa0 RCX: 00007f159cb9e1d9
[  127.432853][ T8072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  127.432862][ T8072] RBP: 00007f159cc35888 R08: 0000000000000000 R09: 0000000000000000
[  127.432871][ T8072] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000
[  127.432880][ T8072] R13: 00007f159ce26038 R14: 00007f159ce25fa0 R15: 00007ffedcadb368
[  127.432904][ T8072]  </TASK>
[  127.519274][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  127.525205][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32
[  127.525304][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random
[  127.746643][ T8082] ieee802154 phy1 wpan1: encryption failed: -22
[  127.841773][ T8085] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  127.982719][ T8087] loop4: detected capacity change from 0 to 4096
[  127.986299][ T8087] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  127.986938][ T8087] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  127.993691][ T8087] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  128.334757][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  128.341881][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  128.345768][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  128.349366][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  128.353094][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  128.358589][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  128.362348][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  128.367102][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  128.370720][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  128.374546][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  128.378974][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  128.383709][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  128.388298][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  128.392370][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  128.396609][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  128.400604][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  128.404547][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  128.408663][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  128.412790][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  128.417725][ T5655] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  128.435541][ T5655] ax88179_178a 2-1:1.0 eth9: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 82:59:bc:2e:d4:53
[  128.441062][ T5655] usb 2-1: USB disconnect, device number 18
[  128.450098][ T5655] ax88179_178a 2-1:1.0 eth9: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet
[  128.467580][ T8058] hwrng_fill thread creation failed
[  128.625317][ T5654] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  128.787227][ T5654] usb 5-1: unable to get BOS descriptor or descriptor too short
[  128.787306][ T5654] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40
[  128.793610][ T5654] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.793658][ T5654] usb 5-1: config 1 interface 2 has no altsetting 0
[  128.796280][ T5654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.796297][ T5654] usb 5-1: Product: syz
[  128.796306][ T5654] usb 5-1: Manufacturer: syz
[  128.796315][ T5654] usb 5-1: SerialNumber: syz
[  128.912367][ T8124] loop1: detected capacity change from 0 to 512
[  128.927561][ T8124] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.868: inode has both inline data and extents flags
[  128.927612][ T8124] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  128.928894][ T8124] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.868: couldn't read orphan inode 15 (err -117)
[  128.928979][ T8124] loop1: lost filesystem error report for type 5 error -117
[  128.931281][ T8124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.963773][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.986564][   T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  129.004538][ T8128] loop1: detected capacity change from 0 to 256
[  129.009244][ T8128] exfat: Deprecated parameter 'utf8'
[  129.022566][ T8128] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  129.062534][ T5654] usb 5-1: USB disconnect, device number 7
[  129.092800][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.155286][   T25] usb 6-1: Using ep0 maxpacket: 16
[  129.158941][   T25] usb 6-1: unable to get BOS descriptor or descriptor too short
[  129.159022][   T25] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  129.164890][   T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.164938][   T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.175789][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.175846][   T25] usb 6-1: Product: syz
[  129.175883][   T25] usb 6-1: Manufacturer: syz
[  129.175893][   T25] usb 6-1: SerialNumber: syz
[  129.388894][   T25] usb 6-1: 0:1 : does not exist
[  129.388968][   T25] usb 6-1: unit 3 not found!
[  129.414439][   T25] usb 6-1: USB disconnect, device number 2
[  129.501349][ T8144] rnbd_client L127: Can't parse path ip:: -22
[  129.641730][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.883'.
[  130.004676][ T8164] loop1: detected capacity change from 0 to 4096
[  130.037700][ T8164] EXT4-fs (loop1): Test dummy encryption mode enabled
[  130.042842][ T8164] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  130.048173][ T8164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.058313][ T8168] loop5: detected capacity change from 0 to 512
[  130.115320][ T8168] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.888: bg 0: block 5: invalid block bitmap
[  130.115371][ T8168] loop5: lost filesystem error report for type 5 error -117
[  130.125144][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  130.125199][    C0] EXT4-fs (loop5): initial error at time 1791715864: ext4_validate_block_bitmap:436
[  130.125264][    C0] EXT4-fs (loop5): last error at time 1791715864: ext4_validate_block_bitmap:436
[  130.138064][ T8168] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  130.149791][ T8168] loop5: lost filesystem error report for type 5 error -117
[  130.150221][ T8168] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.888: invalid indirect mapped block 3 (level 2)
[  130.159232][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.162916][ T8168] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  130.163372][ T8168] EXT4-fs (loop5): 1 orphan inode deleted
[  130.167021][ T8168] EXT4-fs (loop5): 1 truncate cleaned up
[  130.192429][ T8168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.233107][ T7981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.445786][ T5654] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  130.606043][ T5654] usb 5-1: Using ep0 maxpacket: 16
[  130.606621][ T5654] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  130.607791][ T5654] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.607810][ T5654] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.609784][ T5654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.609800][ T5654] usb 5-1: Product: syz
[  130.609809][ T5654] usb 5-1: Manufacturer: syz
[  130.609817][ T5654] usb 5-1: SerialNumber: syz
[  130.611771][ T5654] usb 5-1: config 0 descriptor??
[  130.613281][ T5654] appledisplay 5-1:0.0: Could not find int-in endpoint
[  130.613963][ T5654] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  130.815378][ T5654] usb 5-1: USB disconnect, device number 8
[  130.885599][ T6075] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  131.046006][ T6075] usb 6-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40
[  131.051009][ T6075] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.055288][ T6075] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  131.059012][ T6075] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  131.066521][ T6075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.069853][ T6075] usb 6-1: Product: syz
[  131.071679][ T6075] usb 6-1: Manufacturer: syz
[  131.073724][ T6075] usb 6-1: SerialNumber: syz
[  131.291125][ T6075] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  131.293632][   T34] audit: type=1326 audit(1791715866.047:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.1.915" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9d0d9e1d9 code=0x0
[  131.304328][ T6075] usb 6-1: incorrect wMaxPacketSize 0x20 for BADD profile
[  131.333068][ T6075] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  131.337737][ T6075] usb 6-1: USB disconnect, device number 3
[  131.354534][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.514865][ T8235] loop4: detected capacity change from 0 to 32768
[  131.521789][ T8235] JBD2: Ignoring recovery information on journal
[  131.541667][ T8235] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  131.608934][ T7128] ocfs2: Unmounting device (7,4) on (node local)
[  131.815641][ T8239] loop4: detected capacity change from 0 to 32768
[  131.818764][ T8239] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.919 (8239)
[  131.833801][ T8239] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  131.838055][ T8239] BTRFS info (device loop4): using sha256 checksum algorithm
[  131.880021][ T8239] BTRFS info (device loop4): rebuilding free space tree
[  132.005466][ T8262] loop5: detected capacity change from 0 to 64
[  132.031733][ T8239] BTRFS info (device loop4): disabling free space tree
[  132.034443][ T8239] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  132.038291][ T8239] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  132.064068][ T8239] BTRFS info (device loop4): setting nodatasum
[  132.064112][ T8239] BTRFS info (device loop4): setting nodatacow
[  132.064156][ T8239] BTRFS info (device loop4): enabling ssd optimizations
[  132.064181][ T8239] BTRFS info (device loop4): using spread ssd allocation scheme
[  132.064205][ T8239] BTRFS info (device loop4): turning off barriers
[  132.064230][ T8239] BTRFS info (device loop4): turning on flush-on-commit
[  132.064254][ T8239] BTRFS info (device loop4): turning on sync discard
[  132.064279][ T8239] BTRFS info (device loop4): force clearing of disk cache
[  132.265761][ T7128] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.427621][ T8275] loop5: detected capacity change from 0 to 8192
[  132.574600][ T8285] FAULT_INJECTION: forcing a failure.
[  132.574600][ T8285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.574680][ T8285] CPU: 0 UID: 0 PID: 8285 Comm: syz.5.933 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  132.574708][ T8285] Tainted: [L]=SOFTLOCKUP
[  132.574713][ T8285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.574719][ T8285] Call Trace:
[  132.574724][ T8285]  <TASK>
[  132.574728][ T8285]  dump_stack_lvl+0xe8/0x150
[  132.574747][ T8285]  should_fail_ex+0x410/0x560
[  132.574764][ T8285]  _copy_to_iter+0x1e4/0x1810
[  132.574778][ T8285]  ? __pfx__copy_to_iter+0x10/0x10
[  132.574792][ T8285]  signalfd_read_iter+0x7d7/0xa00
[  132.574806][ T8285]  ? __pfx_signalfd_read_iter+0x10/0x10
[  132.574815][ T8285]  ? __pfx_futex_wake_mark+0x10/0x10
[  132.574834][ T8285]  ? __pfx_default_wake_function+0x10/0x10
[  132.574849][ T8285]  ? bpf_lsm_file_permission+0x9/0x20
[  132.574861][ T8285]  ? security_file_permission+0x75/0x260
[  132.574877][ T8285]  vfs_read+0x595/0xa80
[  132.574893][ T8285]  ? __pfx_vfs_read+0x10/0x10
[  132.574906][ T8285]  ? __fget_files+0x2a/0x420
[  132.574920][ T8285]  ksys_read+0x150/0x270
[  132.574931][ T8285]  ? __pfx_ksys_read+0x10/0x10
[  132.574945][ T8285]  do_syscall_64+0x166/0x520
[  132.574954][ T8285]  ? trace_irq_disable+0x3b/0x140
[  132.574961][ T8285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.574971][ T8285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.574978][ T8285] RIP: 0033:0x7ff1fd39e1d9
[  132.574986][ T8285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.574994][ T8285] RSP: 002b:00007ff1fe1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  132.575004][ T8285] RAX: ffffffffffffffda RBX: 00007ff1fd625fa0 RCX: 00007ff1fd39e1d9
[  132.575011][ T8285] RDX: 0000000000002064 RSI: 0000200000000ac0 RDI: 0000000000000004
[  132.575016][ T8285] RBP: 00007ff1fd435888 R08: 0000000000000000 R09: 0000000000000000
[  132.575021][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.575026][ T8285] R13: 00007ff1fd626038 R14: 00007ff1fd625fa0 R15: 00007ffd0fcf9648
[  132.575039][ T8285]  </TASK>
[  132.615574][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'.
[  132.615589][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'.
[  132.762728][ T8295] loop4: detected capacity change from 0 to 256
[  132.768493][ T8295] exfat: Deprecated parameter 'utf8'
[  132.771844][ T8295] exfat: Deprecated parameter 'utf8'
[  132.778768][ T8295] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  132.850498][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  132.850667][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  133.050700][ T6404] kernel read not supported for file /video9 (pid: 6404 comm: kworker/1:6)
[  134.177685][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'.
[  134.181046][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.958'.
[  134.455255][ T6404] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  134.627501][ T6404] usb 6-1: unable to get BOS descriptor or descriptor too short
[  134.630977][ T6404] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[  134.635622][ T6404] usb 6-1: config 12 has an invalid interface number: 99 but max is 0
[  134.638889][ T6404] usb 6-1: config 12 has no interface number 0
[  134.638916][ T6404] usb 6-1: config 12 interface 99 has no altsetting 0
[  134.646591][ T6404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.646717][ T6404] usb 6-1: Product: syz
[  134.646770][ T6404] usb 6-1: Manufacturer: syz
[  134.646801][ T6404] usb 6-1: SerialNumber: syz
[  134.874772][ T6404] usb 6-1: no audio or video endpoints found
[  134.883845][ T6404] usb 6-1: USB disconnect, device number 4
[  135.084744][ T8355] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  135.216044][  T548] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  135.365328][  T548] usb 2-1: Using ep0 maxpacket: 32
[  135.366226][  T548] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  135.367765][  T548] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  135.367783][  T548] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  135.367796][  T548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  135.367830][  T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  135.367844][  T548] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  135.367860][  T548] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  135.367887][  T548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.372179][  T548] usb 2-1: config 0 descriptor??
[  135.542331][ T8368] FAULT_INJECTION: forcing a failure.
[  135.542331][ T8368] name failslab, interval 1, probability 0, space 0, times 0
[  135.542464][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.5.970 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.542478][ T8368] Tainted: [L]=SOFTLOCKUP
[  135.542481][ T8368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.542486][ T8368] Call Trace:
[  135.542491][ T8368]  <TASK>
[  135.542496][ T8368]  dump_stack_lvl+0xe8/0x150
[  135.542514][ T8368]  should_fail_ex+0x410/0x560
[  135.542529][ T8368]  should_failslab+0xa8/0x100
[  135.542541][ T8368]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  135.542551][ T8368]  ? fib_notifier_ops_register+0x2f/0x230
[  135.542560][ T8368]  ? fib_notifier_ops_register+0x2f/0x230
[  135.542572][ T8368]  kmemdup_noprof+0x2b/0x70
[  135.542600][ T8368]  fib_notifier_ops_register+0x2f/0x230
[  135.542612][ T8368]  fib4_notifier_init+0x4b/0xb0
[  135.542626][ T8368]  fib_net_init+0xb7/0x410
[  135.542637][ T8368]  ? __pfx_fib_net_init+0x10/0x10
[  135.542647][ T8368]  ? timer_init_key+0x161/0x2c0
[  135.542658][ T8368]  ? devinet_init_net+0x5c8/0x7c0
[  135.542672][ T8368]  ops_init+0x35d/0x5d0
[  135.542686][ T8368]  setup_net+0x118/0x350
[  135.542694][ T8368]  ? __pfx_setup_net+0x10/0x10
[  135.542702][ T8368]  ? down_read_killable+0x1bb/0x3b0
[  135.542712][ T8368]  ? __ns_common_init+0x2fc/0x4a0
[  135.542725][ T8368]  copy_net_ns+0x53b/0x780
[  135.542734][ T8368]  create_new_namespaces+0x3f0/0x6b0
[  135.542744][ T8368]  ? security_capable+0x7e/0x2c0
[  135.542756][ T8368]  unshare_nsproxy_namespaces+0x149/0x190
[  135.542766][ T8368]  ksys_unshare+0x5a7/0x950
[  135.542779][ T8368]  ? __pfx_ksys_unshare+0x10/0x10
[  135.542790][ T8368]  ? __pfx_ksys_write+0x10/0x10
[  135.542806][ T8368]  __x64_sys_unshare+0x38/0x50
[  135.542817][ T8368]  do_syscall_64+0x166/0x520
[  135.542826][ T8368]  ? trace_irq_disable+0x3b/0x140
[  135.542833][ T8368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.542843][ T8368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.542851][ T8368] RIP: 0033:0x7ff1fd39e1d9
[  135.542859][ T8368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.542866][ T8368] RSP: 002b:00007ff1fe1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  135.542876][ T8368] RAX: ffffffffffffffda RBX: 00007ff1fd625fa0 RCX: 00007ff1fd39e1d9
[  135.542882][ T8368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  135.542886][ T8368] RBP: 00007ff1fd435888 R08: 0000000000000000 R09: 0000000000000000
[  135.542891][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.542895][ T8368] R13: 00007ff1fd626038 R14: 00007ff1fd625fa0 R15: 00007ffd0fcf9648
[  135.542907][ T8368]  </TASK>
[  135.589278][  T548] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  135.594871][  T548] usb 2-1: USB disconnect, device number 19
[  135.633513][  T548] usblp0: removed
[  135.653094][ T8372] Cannot find add_set index 0 as target
[  135.682569][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.5.973'.
[  135.765459][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  135.915318][   T10] usb 5-1: Using ep0 maxpacket: 8
[  135.915957][   T10] usb 5-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00
[  135.917463][   T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.917487][   T10] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  135.917505][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  135.917529][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.920580][   T10] usb 5-1: config 0 descriptor??
[  135.944692][ T8381] netlink: 68 bytes leftover after parsing attributes in process `syz.5.976'.
[  135.950873][ T8381] netlink: 5 bytes leftover after parsing attributes in process `syz.5.976'.
[  135.954094][ T8381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.095573][  T548] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  136.245437][  T548] usb 2-1: Using ep0 maxpacket: 32
[  136.246122][  T548] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  136.248515][  T548] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  136.248528][  T548] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  136.248536][  T548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  136.248555][  T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  136.248563][  T548] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  136.248625][  T548] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  136.248646][  T548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.251165][  T548] usb 2-1: config 0 descriptor??
[  136.344461][   T10] input: HID 0518:0002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0518:0002.0005/input/input14
[  136.425268][ T5654] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  136.461830][   T10] ezkey 0003:0518:0002.0005: input,hiddev0,hidraw0: USB HID v0.f1 Device [HID 0518:0002] on usb-dummy_hcd.4-1/input0
[  136.473067][  T548] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  136.543443][ T6404] usb 5-1: USB disconnect, device number 9
[  136.575203][ T5654] usb 6-1: Using ep0 maxpacket: 32
[  136.575855][ T5654] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  136.577094][ T5654] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.577114][ T5654] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.577128][ T5654] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  136.577155][ T5654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.580923][ T5654] usb 6-1: config 0 descriptor??
[  136.999467][ T5654] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0006/input/input15
[  137.076939][ T5654] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0006/input/input16
[  137.159570][ T5654] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0
[  137.667642][ T8412] loop4: detected capacity change from 0 to 131072
[  137.669822][ T8412] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[  137.669838][ T8412] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  137.674438][ T8412] F2FS-fs (loop4): invalid crc value
[  137.704987][ T8412] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.708936][ T8412] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  137.708949][ T8412] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  137.722678][ T8412] F2FS-fs (loop4): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix
[  137.735992][ T8412] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix.
[  137.737429][ T8412] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  138.025466][ T5654] usb 2-1: USB disconnect, device number 20
[  138.033197][ T5654] usblp1: removed
[  138.084804][    C1] kye 0003:0458:5011.0006: usb_submit_urb(ctrl) failed: -1
[  138.103916][   T10] usb 6-1: USB disconnect, device number 5
[  138.417408][ T8424] nvmet: adding nsid 1 to subsystem testsubsys
[  138.420419][ T8424] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  138.425915][ T8424] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  138.428690][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.4.992 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  138.431883][ T8424] Tainted: [L]=SOFTLOCKUP
[  138.433245][ T8424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.436368][ T8424] RIP: 0010:strlen+0x29/0x70
[  138.437818][ T8424] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00
[  138.443686][ T8424] RSP: 0018:ffffc900045df978 EFLAGS: 00010246
[  138.445580][ T8424] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  138.448024][ T8424] RDX: ffffc900283f0000 RSI: 000000000000005c RDI: 0000000000000000
[  138.450478][ T8424] RBP: ffffc900045dfab8 R08: ffffffff917a297f R09: 1ffffffff22f452f
[  138.452911][ T8424] R10: dffffc0000000000 R11: fffffbfff22f4530 R12: 1ffff920008bbf40
[  138.455242][ T8424] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff
[  138.457704][ T8424] FS:  00007f159da0d6c0(0000) GS:ffff8882a7cd4000(0000) knlGS:0000000000000000
[  138.460362][ T8424] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.462349][ T8424] CR2: 000000110c2a2c39 CR3: 000000016d0b0000 CR4: 00000000000006f0
[  138.464738][ T8424] Call Trace:
[  138.465795][ T8424]  <TASK>
[  138.466705][ T8424]  do_getname_kernel+0x1d/0x230
[  138.468195][ T8424]  ? getname_kernel+0xd/0x20
[  138.469651][ T8424]  filp_open+0x87/0x1d0
[  138.470909][ T8424]  ? __pfx_filp_open+0x10/0x10
[  138.472410][ T8424]  ? __pfx___mutex_lock+0x10/0x10
[  138.473955][ T8424]  nvmet_file_ns_enable+0x74/0x350
[  138.475514][ T8424]  nvmet_ns_enable+0xaa/0x780
[  138.476954][ T8424]  ? lock_acquire+0x115/0x350
[  138.478518][ T8424]  nvmet_ns_enable_store+0xd7/0x170
[  138.480604][ T8424]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
[  138.482971][ T8424]  ? down_read+0x2be/0x330
[  138.484779][ T8424]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
[  138.487131][ T8424]  configfs_write_iter+0x337/0x430
[  138.489177][ T8424]  vfs_write+0x612/0xba0
[  138.490887][ T8424]  ? __pfx_vfs_write+0x10/0x10
[  138.492788][ T8424]  ? __fget_files+0x2a/0x420
[  138.494685][ T8424]  ksys_write+0x150/0x270
[  138.496424][ T8424]  ? __pfx_ksys_write+0x10/0x10
[  138.498391][ T8424]  do_syscall_64+0x166/0x520
[  138.500210][ T8424]  ? trace_irq_disable+0x3b/0x140
[  138.502202][ T8424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.504669][ T8424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.507019][ T8424] RIP: 0033:0x7f159cb9e1d9
[  138.508721][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.516028][ T8424] RSP: 002b:00007f159da0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.519393][ T8424] RAX: ffffffffffffffda RBX: 00007f159ce25fa0 RCX: 00007f159cb9e1d9
[  138.522544][ T8424] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000005
[  138.525746][ T8424] RBP: 00007f159cc35888 R08: 0000000000000000 R09: 0000000000000000
[  138.528722][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.531699][ T8424] R13: 00007f159ce26038 R14: 00007f159ce25fa0 R15: 00007ffedcadb368
[  138.534697][ T8424]  </TASK>
[  138.535855][ T8424] Modules linked in:
[  138.538026][ T8424] ---[ end trace 0000000000000000 ]---
[  138.559239][ T8424] RIP: 0010:strlen+0x29/0x70
[  138.561682][ T8424] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00
[  138.570825][ T8424] RSP: 0018:ffffc900045df978 EFLAGS: 00010246
[  138.573766][ T8424] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  138.577591][ T8424] RDX: ffffc900283f0000 RSI: 000000000000005c RDI: 0000000000000000
[  138.581582][ T8424] RBP: ffffc900045dfab8 R08: ffffffff917a297f R09: 1ffffffff22f452f
[  138.585914][ T8424] R10: dffffc0000000000 R11: fffffbfff22f4530 R12: 1ffff920008bbf40
[  138.589387][ T8424] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff
[  138.593174][ T8424] FS:  00007f159da0d6c0(0000) GS:ffff8882a7cd4000(0000) knlGS:0000000000000000
[  138.598228][ T8424] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.601784][ T8424] CR2: 00007f159cbeb8c0 CR3: 000000016d0b0000 CR4: 00000000000006f0
[  138.610192][ T8424] Kernel panic - not syncing: Fatal exception
[  138.613041][ T8424] Kernel Offset: disabled
[  138.614451][ T8424] Rebooting in 86400 seconds..
